last executing test programs: 2.951557938s ago: executing program 2 (id=132): r0 = socket(0x2, 0x3, 0x6) recvfrom$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 2.855817942s ago: executing program 4 (id=135): r0 = gettid() timer_create(0x0, &(0x7f0000000140)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f00000000c0)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000000)) fcntl$lock(r1, 0x7, &(0x7f00000006c0)={0x1}) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{}, {0x0, 0x3938700}}, 0x0) r3 = dup(r2) dup3(r3, r1, 0x0) rt_sigreturn() r4 = socket$unix(0x1, 0x0, 0x0) bind$unix(r4, &(0x7f0000366000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r4, 0x0) r5 = dup(r4) accept4$packet(r5, 0x0, 0x0, 0x0) 2.839971892s ago: executing program 4 (id=139): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYRES16], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0xfffffffffffffc30) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) unshare(0x20020000) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x114) mount$bind(&(0x7f0000000240)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2005099, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 2.207724776s ago: executing program 1 (id=145): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$TIPC_MCAST_BROADCAST(r0, 0x10f, 0x85) 2.132065239s ago: executing program 1 (id=146): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2], 0x40}}, 0x0) 2.08271542s ago: executing program 2 (id=150): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000440), 0x4) 2.082596811s ago: executing program 1 (id=151): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) io_setup(0xba, &(0x7f0000000400)=0x0) unshare(0x2000400) io_submit(r2, 0x1, &(0x7f0000000b80)=[&(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x3, r1}]) 2.08238513s ago: executing program 2 (id=152): pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r1}, 0x10) write(r0, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) socket$inet_udp(0x2, 0x2, 0x0) 1.927643357s ago: executing program 1 (id=153): syz_open_procfs(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000003000080e4a1"], 0x0, 0x0, 0x1e, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001040)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0x4a, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88caffff0000000000", 0x0, 0x400000ff, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x6f) r2 = getpid() process_vm_readv(r2, &(0x7f0000008400), 0x0, &(0x7f0000008640), 0x0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x4, 0x11, r3, 0x0) 1.927433727s ago: executing program 2 (id=154): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) r3 = memfd_create(&(0x7f0000000100)='\vem\xda\x99R@m\xfc\xfe\x9b#*\xff', 0x0) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000180)=ANY=[], 0xe) sendfile(r3, r3, &(0x7f0000001000), 0xffff) 1.889724288s ago: executing program 4 (id=155): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xff, 0x485, &(0x7f0000001040)="$eJzs3M9rHFUcAPDvTJL+bhNrrba2Gq1i8UfSpFV78KCi4EFB0EM9xiSttdtGmgi2BI0i9SgF7+JR8C/w5kXUgwheFTxKoWgQmnqKzK9mu9mkSZpkbfbzgc2+t/Nm3/vOzNt9My+zAbSt3uxPErEjIn6LiO4ie3OB3uJpZnpy+Pr05HASs7Nv/JXk5a5NTw5XRav1tpeZw2lE+mkSzyfz6x2/cPHMUK02er7M90+cfa9//MLFp06fHTo1emr03ODx48eODjz7zODTqxJnFte1/R+OHdj3yluXXxs+cfntH7/JmrX3YLG8Po5but4koCZ6s63292yucdmjy2j7nWBnXTrpbGFDWJaOiMh2V1fe/7ujI+Z2Xne8/ElLGwesqey7afPCi6dmgQ0siVa3AGiN6os+O/+tHus09PhfuPpCxKYyPTM9OTxzI/7OSMvXu9aw/t6IODH175fZI5Z7HQIAYAXysc2TzcZ/aezNn4u5jl3lHEpPRNwVEbsj4u6I2BMR90TkZe+NiPuKlWe7l1h/b0N+/vgnvdK0zaskG/89Vzf2m6mLv3zq6ShzO/P4u5KTp2ujR8ptcji6Nmf5gUXq+O6lXz9faFn9+C97ZPVXY8GyAVc6Gy7QjQxNDK3WRrj6ccT+zmbxJzdmArIjYF9E7F/eW++qEqcf//rAQoVuHf8iVmGeafariMeK/T8VDfFXksXnJ/u3RG30SH91VMz30y+XXl+o/tuKfxVk+3/bzcd/Q4nuf5JivrYrarXR8+PLr+PS758teE6z0uN/U/JmPmf98zvFax8MTUycH4jYlLya56tzuvz1wbl1q3xVPov/8KHm/X93uU4W//0RkR3EByPigYh4sGz7QxHxcEQcWiT+H1585N1F4k8iiZbu/5Gmn383jv+epH6+fgWJjjPff7vQjPnS9v+xmMo/awv5598tLLWBt7n5AAAA4I6QRsSOSNK+It27I9K0r6/4H/49sS2tjY1PPHFy7P1zI8U9Aj3RlVZXurrrrocOJFPlOxb5wfJacbX8aHnd+IuOrXm+b3isNtLi2KHdbb+5/0fV/zN/drS6dcCac78WtK/G/p+2qB3A+lvK979zAdiYmvT/ra1oB7D+nP9D+2rW/z9qyBv/w8Y0v///0eQn64CNyPgf2pf+D+1L/4e2dDv39a88Ud0ssPL32bLkO/zbJVH94sVa1rU15l6JtOUht1Ei6zHrW+ncb6gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADcyf4LAAD///ss5ts=") creat(&(0x7f00000000c0)='./bus\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) creat(0x0, 0x0) mkdir(&(0x7f0000000080)='./file1\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', &(0x7f0000000140)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) 1.802008701s ago: executing program 4 (id=156): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xff, 0x485, &(0x7f0000001040)="$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") lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) mkdir(&(0x7f0000000080)='./file1\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', &(0x7f0000000140)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) 1.58701342s ago: executing program 4 (id=159): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x0, 0x0, 0x0, @str='\x16\x00'}]}, 0x1c}}, 0x0) 1.539677701s ago: executing program 4 (id=161): syz_open_dev$loop(&(0x7f00000001c0), 0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES16], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00220f0000002a"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) syz_usb_disconnect(r0) ioctl$HIDIOCGUSAGE(r1, 0xc018480d, &(0x7f0000000100)={0x2, 0x103, 0xb000000}) 1.219772063s ago: executing program 3 (id=165): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000140)={[{@noload}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@lazytime}, {@quota}, {@quota}]}, 0x3, 0x443, &(0x7f0000000940)="$eJzs3MtvG0UYAPBv10mgLxJKefQBBMqj4pE0aYEeuIBA4gASEhzKMSRpVeo2qAkSrSoICJUjqsQdcUTiL+BELwg4IXGFAzdUqUK9tHAyWnu3cYztNsbuQv37SevM7I4182V37JmdbAIYWpPZSxKxNSJ+iYjxRnZ9gcnGj6uXz87/efnsfBK12ht/JPVyVy6fnS+KFu/bkmf2pRHpJ0nsblPv8ukzx+eq1cVTeX565cS708unzzx97MTc0cWjiydnDx06eGDmuWdnn+lLnFlcV3Z9sLRn5ytvnX9t/vD5t3/4Oinib4mjTya7HXy0VutzdeXa1pRORkpsCBtSiYjsdI3W+/94VGLt5I3Hyx+X2jhgoGq5DodXa8AtLImyWwCUo/iiz+a/xXbzRh/lu/RCYwKUxX013xpHRiLNy4y2zG/7aTIiDq/+9UW2xWDuQwAArPNtNv55qt34L417msrdka+hTETEnRGxPSLuiogdEXF3RL3svRFx3wbrb10k+ef4J73YU2A3KBv/PZ+vba0f/xWjv5io5Llt9fhHkyPHqov7G8dWs5csP9Oljgsv/fxZp2PN479sy+ovxoJ5Oy6O3Lb+PQtzK3O9xtvq0kcRu0baxZ9cWwlIImJnROzqsY5jT3y1p9Ox68ffRR/WmWpfRjzeOP+r0RJ/Iem+Pjl9e1QX9083XRUtfvzp3Oud6v9X8fdBdv43t73+r8U/kTSv1y5vvI5zv37acU7T6/U/lrxZT4/l+96fW1k5NRMxlrzaaHTz/tm19xb5onwW/7697fv/9lj7TeyOiOwivj8iHoiIB/O2PxQRD0fE3i7xf//iI+/0Hv9gZfEvbOj8ryXGonVP+0Tl+HffrKt0YiPxZ+f/YD21L99T//xLusd1I+3q7WoGAACA/580IrZGkk5dS6fp1FTjb/h3xOa0urS88uSRpfdOLjSeEZiI0bS40zXedD90Jp/WF/nZlvyB/L7x55VN9fzU/FJ1oezgYcht6dD/M79Xym4dMHCe14Lhpf/D8NL/YXjp/zC82vT/TWW0A7j52n3/fxgRFx4roTHATdXS/y37wRAx/4fhpf/D8LqB/v/brfXvqoGIWN4U139IfrCJSpRZu0SPiUj/E82QGFCi7E8mAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/vg7AAD//9aZ7PU=") pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = open(&(0x7f00000001c0)='.\x00', 0x0, 0x0) getdents(r1, &(0x7f0000000280)=""/4096, 0x9005) splice(r1, 0x0, r0, 0x0, 0x1, 0x0) 1.05259008s ago: executing program 1 (id=166): read$hiddev(0xffffffffffffffff, &(0x7f00000000c0)=""/4092, 0xffc) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0x10) iopl(0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) write(r0, &(0x7f0000000040)="1c0000001a009b8a14e5f40704000000000000000001000000000000", 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b708000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f00000000c0)={[{@discard}, {@bsdgroups}, {@resuid}, {@noblock_validity}, {@minixdf}, {@dioread_lock}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}, {@data_err_abort}]}, 0x1, 0x5d8, &(0x7f0000000600)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x1101091, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00') pipe2(0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000001c40)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x1000, &(0x7f0000000300)=""/4096, 0x40f00}, 0x90) 1.04062191s ago: executing program 3 (id=167): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000080)=0x454e, 0x4) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$sock_int(r1, 0x1, 0xc, &(0x7f0000000000)=0x56, 0x4) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1725}]]}, 0x30}}, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) syz_emit_ethernet(0x66, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd604292c800300000fe8000000000000000000000140000aaff0200000000000000000000000000012902000000000000bc"], 0x0) 923.907955ms ago: executing program 2 (id=168): r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) dup3(r1, r0, 0x0) 923.557895ms ago: executing program 2 (id=169): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') preadv(r0, 0x0, 0x0, 0x3, 0x0) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000480)={[0xfffffffffffffffd]}, 0x0, 0x8) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f00000006c0)={0x1, 0x0, 0x4, 0x4, 0x3, [{0x400, 0x8, 0x1000}, {0xdf, 0x5, 0x200, '\x00', 0x408}, {0x2, 0x5990, 0xc8, '\x00', 0x401}]}) socket$inet6(0xa, 0x3, 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r2, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) munlock(&(0x7f0000006000/0x9000)=nil, 0x9000) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000b40)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000001240)='2', 0x1}], 0x1}}], 0x1, 0x0) munlock(&(0x7f0000000000/0xe000)=nil, 0xe000) socket$inet6_udplite(0xa, 0x2, 0x88) syz_emit_ethernet(0x4a, &(0x7f0000000540)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4ef92f", 0x14, 0x6, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) r3 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x18, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x20, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000001440)={0x24, 0x0, 0x0, &(0x7f00000013c0)=ANY=[@ANYBLOB="0022050000000b7478b976"], 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000002300), 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000002300), 0x0, 0x0) socket(0x2a, 0x80000, 0x42356393) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3ff}, &(0x7f0000000300)={0x0, 0x3938700}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180), 0x0) 923.455695ms ago: executing program 3 (id=170): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1f, &(0x7f0000001140)=""/31, &(0x7f00000002c0)=0x1f) 923.316515ms ago: executing program 3 (id=171): r0 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r0, 0x28, 0x0, 0x0, &(0x7f0000000000)) 913.941436ms ago: executing program 3 (id=172): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x101c08a, &(0x7f00000001c0)={[{@rodir}, {@iocharset={'iocharset', 0x3d, 'cp1251'}}, {@iocharset={'iocharset', 0x3d, 'cp862'}}, {@shortname_winnt}, {@numtail}, {@shortname_win95}, {@shortname_lower}, {@uni_xlateno}, {@utf8}, {@fat=@quiet}, {@shortname_win95}, {@rodir}, {@fat=@nocase}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp775'}}, {@shortname_winnt}, {@shortname_win95}]}, 0x2, 0x2c2, &(0x7f0000000900)="$eJzs3UFrI2UYB/Bn0skkq4fk4EkEB/Tgadnu1UuK7ILYk0sO6kGL2wVpgtBCQQWznrx68eDBTyAIfhAvfgavgjdXWHhlJjObpBuyzbqpSH+/S5++ef8zz7wd2imlbz55bXpyv4wHaS9qnVGM4lEWw+hE62GsGH0XAMD/2aOU4s80t00ui4j+7toCAHbocj//80X5y5W0BQDs0L0PPnzv4PDwzvtl2Y+702/Px9Vv9tXH+esHD+KzmMRx3IpBPI6oHxS6UT8tVOXdlNIsLyvDeHM6Ox9XyenHvzbHP/gjos7vxyCG9dCTp406/+7hnf1ybik/q/p4qTn/qMrfjkG88iS8kr+9Jh/jIt56Y6n/mzGI3z6Nz2MS9+smFvmv98vynfT9X199VLVX5bPZ+bhXz1to/0ICAAAAAAAAAAAAAAAAAAAAAAD/3s1m75xe1Pv3VEPN/jt7j6tPulG2hqv788zzWXug5f2BUkqzFD+2++vcKssyNRMX+TxezZc3FgQAAAAAAAAAAAAAAAAAAIDr6+yLL0+OJpPj0xdStLsB5BHx972I5z3OaGnk9dg8udec82gy6TTl6px8eST22jlZxMY2qot43tXIY6trv/FUz03x08/bnr3/7Dnd9ed6IcWNqIv27jo5ytavYS/akX6zUD8UEYs5RVzypMXFkTSYHydt9SUo6iJ7GCs322DrRSherovZhjmRbWrs7d/nK9eMZBevoqhXdW282xRL8Qv3xqXu5+jP409/r8js1gEAAAAAAAAAAAAAAAAAADu1+O/fNS9+szHaSb2dtQUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAV2rx/v9bFLMmfHx6lj9jchGnZ//xJQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHAN/BMAAP//yChWqA==") add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000100)={0x1, 0x0, @auto=[0x2d, 0x35, 0x20]}, 0xb, 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000d40)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0x20, &(0x7f0000000100)={0x0, 0xb, 0x0, 0x0}}, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_aout(r1, &(0x7f0000000340)=ANY=[], 0x5b) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x5) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) dup(0xffffffffffffffff) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000380)=[@increfs_done={0x40106308, 0x1}], 0x0, 0x0, 0x0}) 567.906048ms ago: executing program 0 (id=174): bpf$ENABLE_STATS(0x20, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000440)=[{0x6, 0x0, 0x0, 0x7ffffcb9}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0008}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6}]}) 339.517957ms ago: executing program 0 (id=175): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000000c0)=@ipmr_getroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x80, 0x0, 0x80}}, 0x1c}}, 0x0) 332.378098ms ago: executing program 0 (id=176): openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x10) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x20001400) mknod(0x0, 0x0, 0x0) open(0x0, 0x1c3d00, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={0x0, &(0x7f0000000540)=""/252, 0x0, 0xfc, 0x1}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x0, 0x2, 0x7fffffff, 0x2c0, 0xffffffffffffffff, 0x4ff421f2, '\x00', 0x0, r2, 0x0, 0x3, 0x2, 0xf}, 0xfffffffffffffd6f) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1a04"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x67000000}, 0x80) clock_adjtime(0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x4010744d, 0x20000000) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000001240)={0x2, &(0x7f0000001200)=[{0x81}, {0x6}]}) 170.251344ms ago: executing program 0 (id=177): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r0, &(0x7f0000002080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@ip_retopts={{0x10, 0x60000000}}], 0x10}}], 0x1, 0xa1c) 170.014194ms ago: executing program 0 (id=178): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x0, &(0x7f0000000080)=0x454e, 0x4) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$sock_int(r1, 0x1, 0xc, &(0x7f0000000000)=0x56, 0x4) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1725}]]}, 0x30}}, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) syz_emit_ethernet(0x66, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd604292c800300000fe8000000000000000000000140000aaff0200000000000000000000000000012902000000000000bc"], 0x0) 169.914204ms ago: executing program 0 (id=179): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x4508, &(0x7f00000000c0), 0xe, 0x4e7, &(0x7f0000000140)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.numa_stat\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000040), 0xfea0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40086602, &(0x7f0000000080)) 138.135405ms ago: executing program 1 (id=180): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000140)='./bus\x00', 0x200440d, &(0x7f0000001100)={[{@max_batch_time={'max_batch_time', 0x3d, 0x10000}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}], [{@context={'context', 0x3d, 'system_u'}}]}, 0x1, 0x4cd, &(0x7f0000001600)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x90) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = syz_mount_image$ext4(&(0x7f0000000780)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0xa00008, &(0x7f0000000100), 0x0, 0x7ad, &(0x7f00000007c0)="$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") openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x1}, 0x48) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/fscaps', 0x0, 0x6) mkdirat(0xffffffffffffff9c, 0x0, 0x0) syz_open_procfs(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r3}, 0x10) clock_nanosleep(0x2, 0x0, &(0x7f0000000580)={0x0, 0x989680}, 0x0) dup2(0xffffffffffffffff, r1) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000340)=[@text16={0x10, &(0x7f0000000640)="66b80500000066b9960000000f01c1baf80c66b864d7478366efbafc0cb8d187ef0f01f7c4c295de2db835010f00d0bad004edba200066b80018000066eff30f09440f20c0663509000000440f22c00fafa9d06e", 0x54}], 0x1, 0x30, &(0x7f00000003c0)=[@cr0={0x0, 0x1}, @vmwrite={0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0xe950}], 0x2) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_udplite(0xa, 0x2, 0x88) 0s ago: executing program 3 (id=181): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000280)=0x27fe, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x3654}]}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x7}, 0x700) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.235' (ED25519) to the list of known hosts. [ 20.565912][ T23] audit: type=1400 audit(1719928046.459:66): avc: denied { mounton } for pid=342 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 20.567255][ T342] cgroup1: Unknown subsys name 'net' [ 20.588356][ T23] audit: type=1400 audit(1719928046.459:67): avc: denied { mount } for pid=342 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 20.593609][ T342] cgroup1: Unknown subsys name 'net_prio' [ 20.621007][ T342] cgroup1: Unknown subsys name 'devices' [ 20.627142][ T23] audit: type=1400 audit(1719928046.519:68): avc: denied { unmount } for pid=342 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 20.798075][ T342] cgroup1: Unknown subsys name 'hugetlb' [ 20.803706][ T342] cgroup1: Unknown subsys name 'rlimit' [ 20.936523][ T23] audit: type=1400 audit(1719928046.829:69): avc: denied { setattr } for pid=342 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 20.948595][ T344] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 20.959449][ T23] audit: type=1400 audit(1719928046.829:70): avc: denied { mounton } for pid=342 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 20.992324][ T23] audit: type=1400 audit(1719928046.829:71): avc: denied { mount } for pid=342 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 21.015375][ T23] audit: type=1400 audit(1719928046.859:72): avc: denied { relabelto } for pid=344 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.040567][ T23] audit: type=1400 audit(1719928046.859:73): avc: denied { write } for pid=344 comm="mkswap" path="/root/swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.040735][ T342] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 21.065868][ T23] audit: type=1400 audit(1719928046.889:74): avc: denied { read } for pid=342 comm="syz-executor" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.099700][ T23] audit: type=1400 audit(1719928046.889:75): avc: denied { open } for pid=342 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.288781][ T350] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.295623][ T350] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.303252][ T350] device bridge_slave_0 entered promiscuous mode [ 21.317459][ T350] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.324273][ T350] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.331642][ T350] device bridge_slave_1 entered promiscuous mode [ 21.510687][ T356] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.517539][ T356] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.524674][ T356] device bridge_slave_0 entered promiscuous mode [ 21.531716][ T356] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.538570][ T356] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.545887][ T356] device bridge_slave_1 entered promiscuous mode [ 21.569111][ T353] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.575954][ T353] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.583270][ T353] device bridge_slave_0 entered promiscuous mode [ 21.602208][ T353] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.609230][ T353] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.616449][ T353] device bridge_slave_1 entered promiscuous mode [ 21.626508][ T352] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.633321][ T352] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.640685][ T352] device bridge_slave_0 entered promiscuous mode [ 21.647378][ T352] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.654190][ T352] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.661598][ T352] device bridge_slave_1 entered promiscuous mode [ 21.724840][ T350] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.731673][ T350] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.738805][ T350] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.745550][ T350] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.757412][ T358] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.764232][ T358] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.771634][ T358] device bridge_slave_0 entered promiscuous mode [ 21.782245][ T358] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.789104][ T358] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.796428][ T358] device bridge_slave_1 entered promiscuous mode [ 21.945681][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 21.953887][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 21.963520][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 21.970793][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 22.027410][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 22.035094][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 22.072514][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 22.079849][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 22.097913][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 22.106275][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.113078][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.120458][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 22.128382][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.135184][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.142513][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 22.166392][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 22.174346][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 22.182738][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 22.190778][ T74] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.197608][ T74] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.206446][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 22.213586][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 22.221744][ T74] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.228569][ T74] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.235837][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 22.243742][ T74] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.250470][ T74] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.257594][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 22.265407][ T74] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.272167][ T74] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.279330][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 22.287159][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 22.295093][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 22.302623][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 22.337699][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 22.345579][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 22.353578][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 22.362094][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 22.369889][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 22.377724][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 22.385381][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 22.393549][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 22.401449][ T74] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.408196][ T74] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.415494][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 22.423582][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 22.431566][ T74] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.438383][ T74] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.445820][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 22.453590][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 22.461344][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 22.469203][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 22.477627][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 22.502055][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 22.510552][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 22.519083][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 22.526912][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 22.534548][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 22.542568][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 22.550611][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 22.558797][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 22.589539][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 22.598140][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 22.606175][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 22.614011][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 22.622360][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 22.630239][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 22.637952][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 22.645521][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 22.653258][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 22.661154][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 22.669103][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 22.676791][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 22.696372][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 22.704437][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 22.713132][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 22.721355][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 22.729453][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 22.737433][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 22.754660][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 22.765920][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 22.773939][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 22.782204][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 22.802023][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 22.813282][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 22.821386][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 22.829871][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 22.842495][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 22.852354][ T376] EXT4-fs (loop1): Ignoring removed nobh option [ 22.858854][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 22.861277][ T376] EXT4-fs (loop1): Unsupported blocksize for fs encryption [ 22.894810][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 22.903894][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 22.916661][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 22.927583][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 22.935756][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 22.943726][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 22.952364][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 22.960206][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 22.975822][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 22.984186][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 22.999920][ T380] EXT4-fs (loop0): Unsupported blocksize for fs encryption [ 23.022461][ T390] EXT4-fs (loop4): Unsupported blocksize for fs encryption [ 23.038933][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 23.041182][ T393] binder_alloc: 392: binder_alloc_buf size -5397745689341248032 failed, no address space [ 23.047208][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.056998][ T393] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 23.077448][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 23.080307][ T393] syz.2.3 (393) used greatest stack depth: 21592 bytes left [ 23.086922][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 23.154894][ T402] raw_sendmsg: syz.3.4 forgot to set AF_INET. Fix it! [ 23.415859][ T378] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 23.422162][ T74] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 23.586642][ T18] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 23.785798][ T378] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 23.796651][ T378] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 23.806193][ T378] usb 3-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.00 [ 23.815014][ T378] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 23.815734][ T74] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 23.824016][ T378] usb 3-1: config 0 descriptor?? [ 23.834258][ T74] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 23.848052][ T74] usb 2-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.00 [ 23.857066][ T74] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 23.865692][ T74] usb 2-1: config 0 descriptor?? [ 23.976134][ T18] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 23.988533][ T18] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 23.998092][ T18] usb 4-1: New USB device found, idVendor=056a, idProduct=0018, bcdDevice= 0.00 [ 24.006922][ T18] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 24.015554][ T18] usb 4-1: config 0 descriptor?? [ 24.066640][ T417] FAT-fs (loop0): Unrecognized mount option "B1q鞳+d'#.Ԓͯ?o\ [ 24.066640][ T417] 18446744073709551615" or missing value [ 24.138082][ T417] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 24.307869][ T378] logitech-djreceiver 0003:046D:C71B.0001: collection stack underflow [ 24.318610][ T378] logitech-djreceiver 0003:046D:C71B.0001: item 0 2 0 12 parsing failed [ 24.330230][ T378] logitech-djreceiver 0003:046D:C71B.0001: logi_dj_probe: parse failed [ 24.341579][ T378] logitech-djreceiver: probe of 0003:046D:C71B.0001 failed with error -22 [ 24.347484][ T74] logitech-djreceiver 0003:046D:C71B.0002: unknown main item tag 0xe [ 24.528023][ T18] wacom 0003:056A:0018.0003: Unknown device_type for 'HID 056a:0018'. Assuming pen. [ 24.558419][ T434] capability: warning: `syz.4.20' uses deprecated v2 capabilities in a way that may be insecure [ 24.568926][ T18] wacom 0003:056A:0018.0003: hidraw0: USB HID v0.00 Device [HID 056a:0018] on usb-dummy_hcd.3-1/input0 [ 24.581428][ T18] input: Wacom BambooFun 6x8 Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:056A:0018.0003/input/input4 [ 24.794414][ T18] usb 4-1: USB disconnect, device number 2 [ 25.426806][ T449] FAT-fs (loop3): Unrecognized mount option "B1q鞳+d'#.Ԓͯ?o\ [ 25.426806][ T449] 18446744073709551615" or missing value [ 25.648971][ T23] kauditd_printk_skb: 55 callbacks suppressed [ 25.648981][ T23] audit: type=1400 audit(1719928051.539:131): avc: denied { mounton } for pid=460 comm="syz.4.29" path="/14/file0" dev="tmpfs" ino=12653 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 25.696851][ T461] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 25.706542][ T23] audit: type=1400 audit(1719928051.599:132): avc: denied { mount } for pid=460 comm="syz.4.29" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 25.738315][ T23] audit: type=1400 audit(1719928051.629:133): avc: denied { read } for pid=460 comm="syz.4.29" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 25.759958][ T23] audit: type=1400 audit(1719928051.629:134): avc: denied { open } for pid=460 comm="syz.4.29" path="/14/file0/file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 25.782361][ T23] audit: type=1400 audit(1719928051.629:135): avc: denied { lock } for pid=460 comm="syz.4.29" path="/14/file0/file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 25.804944][ T23] audit: type=1400 audit(1719928051.629:136): avc: denied { write } for pid=460 comm="syz.4.29" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 25.826227][ T23] audit: type=1400 audit(1719928051.629:137): avc: denied { add_name } for pid=460 comm="syz.4.29" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 25.849272][ T23] audit: type=1400 audit(1719928051.629:138): avc: denied { link } for pid=460 comm="syz.4.29" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 25.887748][ T466] EXT4-fs (loop3): first meta block group too large: 16711680 (group descriptor block count 1) [ 26.005291][ T373] usb 2-1: USB disconnect, device number 2 [ 26.097073][ T482] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 26.136143][ T74] usb 3-1: USB disconnect, device number 2 [ 26.328698][ T23] audit: type=1400 audit(1719928052.219:139): avc: denied { getopt } for pid=489 comm="syz.2.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 26.417486][ T494] FAT-fs (loop3): Unrecognized mount option "B1q鞳+d'#.Ԓͯ?o\ [ 26.417486][ T494] 18446744073709551615" or missing value [ 26.465693][ T378] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 26.511222][ T497] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 26.624157][ T23] audit: type=1326 audit(1719928052.509:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=506 comm="syz.2.44" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4a6722df19 code=0x0 [ 26.730838][ T511] EXT4-fs (loop3): first meta block group too large: 16711680 (group descriptor block count 1) [ 26.825758][ T378] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 26.836548][ T378] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 26.846079][ T378] usb 5-1: New USB device found, idVendor=056a, idProduct=0018, bcdDevice= 0.00 [ 26.854947][ T378] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 26.876501][ T378] usb 5-1: config 0 descriptor?? [ 26.917106][ T515] EXT4-fs: Warning: mounting with data=journal disables delayed allocation and O_DIRECT support! [ 26.938182][ T515] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 26.944459][ T520] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 26.948300][ T515] EXT4-fs (loop1): Unsupported blocksize for fs encryption [ 27.000667][ T525] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 27.009791][ T525] ext4 filesystem being mounted at /9/file0 supports timestamps until 2038 (0x7fffffff) [ 27.199640][ T538] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 27.332846][ T550] EXT4-fs (loop3): first meta block group too large: 16711680 (group descriptor block count 1) [ 27.357173][ T378] wacom 0003:056A:0018.0004: Unknown device_type for 'HID 056a:0018'. Assuming pen. [ 27.367220][ T378] wacom 0003:056A:0018.0004: hidraw0: USB HID v0.00 Device [HID 056a:0018] on usb-dummy_hcd.4-1/input0 [ 27.378679][ T378] input: Wacom BambooFun 6x8 Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:056A:0018.0004/input/input7 [ 27.561787][ T555] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 27.885135][ T558] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 27.895008][ T558] ext4 filesystem being mounted at /6/file0 supports timestamps until 2038 (0x7fffffff) [ 27.938004][ T558] syz.2.63 (558) used greatest stack depth: 20344 bytes left [ 27.964632][ T378] usb 5-1: USB disconnect, device number 2 [ 27.992457][ T575] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 28.001678][ T575] ext4 filesystem being mounted at /14/file0 supports timestamps until 2038 (0x7fffffff) [ 28.259204][ T577] F2FS-fs (loop3): Found nat_bits in checkpoint [ 28.301405][ T577] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 28.343091][ T589] F2FS-fs (loop2): Insane cp_payload (553648128 > 510) [ 28.350387][ T356] attempt to access beyond end of device [ 28.350387][ T356] loop3: rw=2049, want=45104, limit=40427 [ 28.350466][ T589] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 28.384075][ T589] F2FS-fs (loop2): invalid crc value [ 28.391187][ T589] F2FS-fs (loop2): Found nat_bits in checkpoint [ 28.463773][ T589] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 28.470876][ T589] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 28.484004][ T589] attempt to access beyond end of device [ 28.484004][ T589] loop2: rw=10241, want=53256, limit=40427 [ 28.498688][ T353] attempt to access beyond end of device [ 28.498688][ T353] loop2: rw=2049, want=45104, limit=40427 [ 29.097122][ T623] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 29.105933][ T623] ext4 filesystem being mounted at /20/file0 supports timestamps until 2038 (0x7fffffff) [ 29.765701][ T343] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 30.135762][ T343] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 30.148120][ T343] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 30.157967][ T343] usb 1-1: New USB device found, idVendor=056a, idProduct=0018, bcdDevice= 0.00 [ 30.167548][ T343] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 30.177014][ T343] usb 1-1: config 0 descriptor?? [ 30.437544][ T783] request_module fs-pvfs2 succeeded, but still no fs? [ 30.662049][ T343] wacom 0003:056A:0018.0005: Unknown device_type for 'HID 056a:0018'. Assuming pen. [ 30.672513][ T343] wacom 0003:056A:0018.0005: hidraw0: USB HID v0.00 Device [HID 056a:0018] on usb-dummy_hcd.0-1/input0 [ 30.685695][ T343] input: Wacom BambooFun 6x8 Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:056A:0018.0005/input/input10 [ 31.003612][ T18] usb 1-1: USB disconnect, device number 2 [ 31.022673][ T23] kauditd_printk_skb: 17 callbacks suppressed [ 31.022681][ T23] audit: type=1400 audit(1719928056.909:158): avc: denied { create } for pid=790 comm="syz.1.145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 31.047693][ T23] audit: type=1400 audit(1719928056.929:159): avc: denied { setopt } for pid=790 comm="syz.1.145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 31.072572][ T23] audit: type=1400 audit(1719928056.959:160): avc: denied { ioctl } for pid=792 comm="syz.1.146" path="socket:[14178]" dev="sockfs" ino=14178 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 31.100373][ T793] netlink: 36 bytes leftover after parsing attributes in process `syz.1.146'. [ 31.103669][ T23] audit: type=1400 audit(1719928056.979:161): avc: denied { create } for pid=796 comm="syz.3.148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 31.165998][ T23] audit: type=1400 audit(1719928057.059:162): avc: denied { read } for pid=798 comm="syz.3.149" name="rtc0" dev="devtmpfs" ino=845 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 31.200888][ T23] audit: type=1400 audit(1719928057.059:163): avc: denied { open } for pid=798 comm="syz.3.149" path="/dev/rtc0" dev="devtmpfs" ino=845 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 31.387248][ T813] EXT4-fs (loop4): Unsupported blocksize for fs encryption [ 31.398701][ T23] audit: type=1400 audit(1719928057.079:164): avc: denied { ioctl } for pid=798 comm="syz.3.149" path="/dev/rtc0" dev="devtmpfs" ino=845 ioctlcmd=0x7003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 31.449975][ T23] audit: type=1400 audit(1719928057.089:165): avc: denied { ioctl } for pid=798 comm="syz.3.149" path="socket:[14273]" dev="sockfs" ino=14273 ioctlcmd=0x8955 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 31.495943][ T820] EXT4-fs (loop4): Unsupported blocksize for fs encryption [ 31.696364][ T23] audit: type=1400 audit(1719928057.589:166): avc: denied { write } for pid=823 comm="syz.0.158" name="uinput" dev="devtmpfs" ino=844 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 31.702018][ T835] input: syz0 as /devices/virtual/input/input13 [ 31.777028][ T23] audit: type=1400 audit(1719928057.589:167): avc: denied { ioctl } for pid=823 comm="syz.0.158" path="/dev/uinput" dev="devtmpfs" ino=844 ioctlcmd=0x5569 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 31.812816][ T835] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 31.858898][ T839] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 31.875821][ T839] EXT4-fs (loop3): Unsupported blocksize for fs encryption [ 31.995786][ T343] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 32.016812][ T843] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 32.058866][ T843] EXT4-fs (loop3): Unsupported blocksize for fs encryption [ 32.535750][ T343] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 32.540511][ T862] EXT4-fs (loop1): Unsupported blocksize for fs encryption [ 32.550953][ T343] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 32.566372][ T343] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 32.575203][ T343] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 32.583884][ T343] usb 5-1: config 0 descriptor?? [ 32.599142][ T865] incfs: Can't find or create .index dir in ./file0 [ 32.605636][ T865] incfs: mount failed -14 [ 32.622374][ T124] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 32.733408][ T868] incfs: Unexpected inode type [ 33.031468][ T880] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 33.047805][ T343] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 33.057536][ T343] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 33.064742][ T343] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 33.072248][ T343] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 33.079563][ T343] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 33.087299][ T343] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 33.089153][ T880] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:864: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 33.094800][ T343] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 33.108755][ T124] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 33.108769][ T124] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 33.116186][ T343] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 33.127061][ T124] usb 3-1: New USB device found, idVendor=056a, idProduct=0018, bcdDevice= 0.00 [ 33.136464][ T343] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 33.144100][ T880] EXT4-fs (loop0): 1 truncate cleaned up [ 33.152450][ T343] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 33.160009][ T124] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.167601][ T343] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 33.172957][ T880] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 33.206068][ T124] usb 3-1: config 0 descriptor?? [ 33.218219][ T343] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 33.226067][ T343] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving [ 33.235130][ T356] ------------[ cut here ]------------ [ 33.239741][ T343] plantronics 0003:047F:FFFF.0006: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 33.240401][ T356] WARNING: CPU: 1 PID: 356 at fs/inode.c:302 drop_nlink+0xbb/0x100 [ 33.260255][ T356] Modules linked in: [ 33.263996][ T356] CPU: 1 PID: 356 Comm: syz-executor Not tainted 5.4.276-syzkaller-00021-g58de09405d1e #0 [ 33.273710][ T356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 33.283620][ T356] RIP: 0010:drop_nlink+0xbb/0x100 [ 33.288465][ T356] Code: 49 8b 1e 48 8d bb d0 04 00 00 be 08 00 00 00 e8 7b 9a f2 ff f0 48 ff 83 d0 04 00 00 5b 41 5c 41 5e 41 5f 5d c3 e8 d5 e1 c2 ff <0f> 0b eb 89 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c 62 ff ff ff 4c [ 33.307904][ T356] RSP: 0018:ffff8881dca2fc68 EFLAGS: 00010293 [ 33.313811][ T356] RAX: ffffffff81a1572b RBX: 1ffff1103da99cda RCX: ffff8881df8e3f00 [ 33.321617][ T356] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 33.329429][ T356] RBP: 0000000000000000 R08: ffffffff81a156af R09: 0000000000000003 [ 33.337260][ T356] R10: ffffffffffffffff R11: dffffc0000000001 R12: ffff8881ed4ce6d0 [ 33.345051][ T356] R13: dffffc0000000000 R14: ffff8881ed4ce688 R15: dffffc0000000000 [ 33.352863][ T356] FS: 00005555558e3500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 33.361627][ T356] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 33.368050][ T356] CR2: 000000002000f03f CR3: 00000001dca0d000 CR4: 00000000003406a0 [ 33.375863][ T356] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 33.383671][ T356] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 33.391482][ T356] Call Trace: [ 33.394615][ T356] ? __warn+0x162/0x250 [ 33.398605][ T356] ? report_bug+0x3a1/0x4e0 [ 33.402941][ T356] ? drop_nlink+0xbb/0x100 [ 33.407195][ T356] ? drop_nlink+0xbb/0x100 [ 33.411451][ T356] ? do_invalid_op+0x6e/0x110 [ 33.415962][ T356] ? invalid_op+0x1e/0x30 [ 33.420127][ T356] ? drop_nlink+0x3f/0x100 [ 33.424380][ T356] ? drop_nlink+0xbb/0x100 [ 33.428632][ T356] ? drop_nlink+0xbb/0x100 [ 33.432884][ T356] ? drop_nlink+0xbb/0x100 [ 33.437140][ T356] shmem_rmdir+0x54/0x80 [ 33.441217][ T356] vfs_rmdir+0x285/0x3c0 [ 33.445298][ T356] incfs_kill_sb+0x105/0x200 [ 33.449725][ T356] deactivate_locked_super+0xa8/0x110 [ 33.454931][ T356] deactivate_super+0x1e2/0x2a0 [ 33.459618][ T356] ? vfs_submount+0xb0/0xb0 [ 33.463958][ T356] ? deactivate_locked_super+0x110/0x110 [ 33.469426][ T356] ? fast_dput+0x7a/0x280 [ 33.473593][ T356] cleanup_mnt+0x44e/0x500 [ 33.477847][ T356] task_work_run+0x140/0x170 [ 33.482295][ T356] exit_to_usermode_loop+0x190/0x1a0 [ 33.487393][ T356] prepare_exit_to_usermode+0x199/0x200 [ 33.492774][ T356] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 33.498500][ T356] RIP: 0033:0x7f9714b3d247 [ 33.502754][ T356] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 33.522193][ T356] RSP: 002b:00007ffc0c58f2d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 33.530437][ T356] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f9714b3d247 [ 33.538250][ T356] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc0c58f390 [ 33.546061][ T356] RBP: 00007ffc0c58f390 R08: 0000000000000000 R09: 0000000000000000 [ 33.553871][ T356] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc0c590460 [ 33.561683][ T356] R13: 00007f9714ba965d R14: 0000000000007e31 R15: 000000000000001a [ 33.569499][ T356] ---[ end trace ef001658666596a3 ]--- [ 33.578116][ T885] EXT4-fs (loop1): Unsupported blocksize for fs encryption [ 33.580742][ T356] ================================================================== [ 33.585866][ T74] usb 5-1: USB disconnect, device number 3 [ 33.593016][ T356] BUG: KASAN: null-ptr-deref in ihold+0x1b/0x50 [ 33.593023][ T356] Write of size 4 at addr 0000000000000160 by task syz-executor/356 [ 33.593025][ T356] [ 33.593039][ T356] CPU: 0 PID: 356 Comm: syz-executor Tainted: G W 5.4.276-syzkaller-00021-g58de09405d1e #0 [ 33.625815][ T356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 33.635706][ T356] Call Trace: [ 33.638970][ T356] dump_stack+0x1d8/0x241 [ 33.643127][ T356] ? panic+0x89d/0x89d [ 33.647031][ T356] ? nf_ct_l4proto_log_invalid+0x258/0x258 [ 33.652673][ T356] ? _raw_spin_trylock_bh+0x190/0x190 [ 33.657881][ T356] ? shmem_destroy_inode+0x5/0x10 [ 33.662740][ T356] ? ihold+0x1b/0x50 [ 33.666473][ T356] __kasan_report+0xe9/0x120 [ 33.670900][ T356] ? ihold+0x1b/0x50 [ 33.674628][ T356] kasan_report+0x30/0x60 [ 33.678796][ T356] check_memory_region+0x272/0x280 [ 33.683744][ T356] ihold+0x1b/0x50 [ 33.687303][ T356] vfs_rmdir+0x1e0/0x3c0 [ 33.691383][ T356] incfs_kill_sb+0x105/0x200 [ 33.695807][ T356] deactivate_locked_super+0xa8/0x110 [ 33.701015][ T356] deactivate_super+0x1e2/0x2a0 [ 33.705701][ T356] ? vfs_submount+0xb0/0xb0 [ 33.710043][ T356] ? deactivate_locked_super+0x110/0x110 [ 33.715510][ T356] ? fast_dput+0x7a/0x280 [ 33.719676][ T356] cleanup_mnt+0x44e/0x500 [ 33.723929][ T356] task_work_run+0x140/0x170 [ 33.728358][ T356] exit_to_usermode_loop+0x190/0x1a0 [ 33.733476][ T356] prepare_exit_to_usermode+0x199/0x200 [ 33.738860][ T356] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 33.744584][ T356] RIP: 0033:0x7f9714b3d247 [ 33.748837][ T356] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 33.768278][ T356] RSP: 002b:00007ffc0c58f2d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 33.776523][ T356] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f9714b3d247 [ 33.784336][ T356] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc0c58f390 [ 33.792144][ T356] RBP: 00007ffc0c58f390 R08: 0000000000000000 R09: 0000000000000000 [ 33.799955][ T356] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc0c590460 [ 33.807766][ T356] R13: 00007f9714ba965d R14: 0000000000007e31 R15: 000000000000001a [ 33.815580][ T356] ================================================================== [ 33.823474][ T356] Disabling lock debugging due to kernel taint [ 33.830868][ T356] BUG: kernel NULL pointer dereference, address: 0000000000000160 [ 33.838467][ T356] #PF: supervisor write access in kernel mode [ 33.844367][ T356] #PF: error_code(0x0002) - not-present page [ 33.850178][ T356] PGD 1ef61f067 P4D 1ef61f067 PUD 0 [ 33.855302][ T356] Oops: 0002 [#1] PREEMPT SMP KASAN [ 33.860340][ T356] CPU: 0 PID: 356 Comm: syz-executor Tainted: G B W 5.4.276-syzkaller-00021-g58de09405d1e #0 [ 33.871443][ T356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 33.881369][ T356] RIP: 0010:ihold+0x20/0x50 [ 33.885682][ T356] Code: 0f 1f 84 00 00 00 00 00 66 90 55 53 48 89 fb e8 36 da c2 ff 48 8d bb 60 01 00 00 be 04 00 00 00 e8 b5 92 f2 ff bd 01 00 00 00 0f c1 ab 60 01 00 00 ff c5 bf 02 00 00 00 89 ee e8 fa dc c2 ff [ 33.905118][ T356] RSP: 0018:ffff8881dca2fca0 EFLAGS: 00010246 [ 33.911019][ T356] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffff8881df8e3f00 [ 33.918832][ T356] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 00000000ffffffff [ 33.926642][ T356] RBP: 0000000000000001 R08: ffffffff813ae585 R09: 0000000000000003 [ 33.934457][ T356] R10: ffffffffffffffff R11: dffffc0000000001 R12: 0000000000000000 [ 33.942267][ T356] R13: dffffc0000000000 R14: ffff8881ecb298a8 R15: 0000000000000000 [ 33.950077][ T356] FS: 00005555558e3500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 33.958844][ T356] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 33.965267][ T356] CR2: 0000000000000160 CR3: 00000001dca0d000 CR4: 00000000003406b0 [ 33.973079][ T356] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 33.980887][ T356] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 33.988696][ T356] Call Trace: [ 33.991831][ T356] ? __die+0xb4/0x100 [ 33.995648][ T356] ? no_context+0xbda/0xe50 [ 33.999985][ T356] ? schedule_preempt_disabled+0x20/0x20 [ 34.005455][ T356] ? is_prefetch+0x4b0/0x4b0 [ 34.009877][ T356] ? ihold+0x1b/0x50 [ 34.013610][ T356] ? __do_page_fault+0xa7d/0xbb0 [ 34.018385][ T356] ? __bad_area_nosemaphore+0xc0/0x460 [ 34.023679][ T356] ? page_fault+0x2f/0x40 [ 34.027845][ T356] ? check_panic_on_warn+0x55/0xa0 [ 34.032791][ T356] ? ihold+0x20/0x50 [ 34.036523][ T356] vfs_rmdir+0x1e0/0x3c0 [ 34.040603][ T356] incfs_kill_sb+0x105/0x200 [ 34.045030][ T356] deactivate_locked_super+0xa8/0x110 [ 34.050241][ T356] deactivate_super+0x1e2/0x2a0 [ 34.054923][ T356] ? vfs_submount+0xb0/0xb0 [ 34.059263][ T356] ? deactivate_locked_super+0x110/0x110 [ 34.064732][ T356] ? fast_dput+0x7a/0x280 [ 34.068898][ T356] cleanup_mnt+0x44e/0x500 [ 34.073150][ T356] task_work_run+0x140/0x170 [ 34.077580][ T356] exit_to_usermode_loop+0x190/0x1a0 [ 34.082697][ T356] prepare_exit_to_usermode+0x199/0x200 [ 34.088079][ T356] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 34.093807][ T356] RIP: 0033:0x7f9714b3d247 [ 34.098059][ T356] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 34.117498][ T356] RSP: 002b:00007ffc0c58f2d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 34.125743][ T356] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f9714b3d247 [ 34.133553][ T356] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc0c58f390 [ 34.141365][ T356] RBP: 00007ffc0c58f390 R08: 0000000000000000 R09: 0000000000000000 [ 34.149176][ T356] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc0c590460 [ 34.156988][ T356] R13: 00007f9714ba965d R14: 0000000000007e31 R15: 000000000000001a [ 34.164798][ T356] Modules linked in: [ 34.168542][ T356] CR2: 0000000000000160 [ 34.172532][ T356] ---[ end trace ef001658666596a4 ]--- [ 34.177836][ T356] RIP: 0010:ihold+0x20/0x50 [ 34.182160][ T356] Code: 0f 1f 84 00 00 00 00 00 66 90 55 53 48 89 fb e8 36 da c2 ff 48 8d bb 60 01 00 00 be 04 00 00 00 e8 b5 92 f2 ff bd 01 00 00 00 0f c1 ab 60 01 00 00 ff c5 bf 02 00 00 00 89 ee e8 fa dc c2 ff [ 34.201598][ T356] RSP: 0018:ffff8881dca2fca0 EFLAGS: 00010246 [ 34.207501][ T356] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffff8881df8e3f00 [ 34.215310][ T356] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 00000000ffffffff [ 34.223123][ T356] RBP: 0000000000000001 R08: ffffffff813ae585 R09: 0000000000000003 [ 34.230935][ T356] R10: ffffffffffffffff R11: dffffc0000000001 R12: 0000000000000000 [ 34.238746][ T356] R13: dffffc0000000000 R14: ffff8881ecb298a8 R15: 0000000000000000 [ 34.246557][ T356] FS: 00005555558e3500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 34.255324][ T356] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 34.261746][ T356] CR2: 0000000000000160 CR3: 00000001dca0d000 CR4: 00000000003406b0 [ 34.269559][ T356] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 34.277366][ T356] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 34.285179][ T356] Kernel panic - not syncing: Fatal exception [ 34.291235][ T356] Kernel Offset: disabled [ 34.295348][ T356] Rebooting in 86400 seconds..