last executing test programs: 3.519307976s ago: executing program 2 (id=3): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000008500000a0000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x23, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00'}, 0x10) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r1, &(0x7f0000002a00)={0x0, {'syz0\x00', 'syz1\x00', 'syz1\x00', &(0x7f0000000040)=""/44, 0x2c, 0x0, 0x0, 0x8, 0xc87}}, 0x120) 3.428778863s ago: executing program 1 (id=2): syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000200)='./file0\x00', 0x18000, &(0x7f0000002f40)=ANY=[@ANYRES8=0x0, @ANYRES8, @ANYRES16=0x0, @ANYRESDEC, @ANYRES32, @ANYRES32], 0x1, 0x2ee, &(0x7f00000009c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) fdatasync(r0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x0, 0x0}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock2(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r3, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010028bd7000fbdbdf2505000000200001800d0001007564703a73797a32000000000c0002800800010067"], 0x34}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)={0x94, r3, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x4}, @TIPC_NLA_LINK={0x48, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}]}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x80000001}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x4c004}, 0x4000000) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@ipv4_deladdr={0x34, 0x15, 0x1, 0x70bd27, 0x25dfdbec, {0x2, 0x18, 0x4, 0xff, r5}, [@IFA_ADDRESS={0x8, 0x1, @broadcast}, @IFA_LABEL={0x14, 0x3, 'lo\x00'}]}, 0x34}}, 0x880) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 3.407466645s ago: executing program 0 (id=1): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x22040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x4, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000000)={0x2, &(0x7f0000000100)=[{0x3c}, {0x6, 0x0, 0x2}]}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xa8) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1004002, 0x0) chdir(&(0x7f00000001c0)='./bus\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000040000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) renameat2(r6, &(0x7f0000000140)='./file0\x00', r6, &(0x7f0000000200)='./bus/file0\x00', 0x0) 3.255007328s ago: executing program 4 (id=5): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$can_bcm(0x1d, 0x2, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1e00000005000000050000000500000040140100", @ANYRES32=0x1, @ANYBLOB="0338103f0000453dd911f59d0000233b3dc64a0abf8236000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="05000000030000000300"/24, @ANYRES32, @ANYBLOB], 0x50) connect$can_bcm(r3, &(0x7f0000001200), 0x10) r4 = gettid() openat$ttynull(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syslog(0x4, &(0x7f00000000c0)=""/196, 0xc4) syslog(0x4, &(0x7f00000002c0)=""/18, 0x12) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000002, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r5, 0x0, 0x28, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r6, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) 3.22466496s ago: executing program 3 (id=4): syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000040)='./file0\x00', 0x8000, &(0x7f0000000c00)=ANY=[@ANYBLOB="7379735f696d6d757461626c652c666d61736b3d30313737373737373737373737373737373737373737332c73686f72746e616d653d6c6f7765722c636865636b3d7374726963742c2c756e695f786c6174653d302c726f6469722c726f6469722c73686f72746e616d653d6c6f7765722c73686f72746e616d653d6c6f7765722c6e6f6e756d7461696c3d302c756e695f786c6174653d312c756e695f786c6174653d312c6572726f72733d636f6e74696e75652c74696d655f6f66667365743d3078303030303030303030303030303465302c757466383d302c0077b5b28056fc4549d277ed7fab6b0be29df17f888ccab55cccc917ad315c8ea56f5a89c104f92d058b92f5881e69e06002f5914c03fefbeb09121733eaf5ded73df976fbd4cfcb8b70b0bf44da1b46bc3935431d5e60a641f9e4ebbf71c77fc9a810ce726b8c6d6295a5f2e2b069b95ba8ecce52ded99b82923228c37d5e1ec11cdbcabb8a89cbf2cf2771d69e3cf0e6760094145e542e426bceaab9b2cf261046247bce0565db3ac5888b74efd48bc9f455e60f49496ca8137aba85fe39756814fda1f0624b33a2025792a477ccfff09befb1d0cf1599d272628028b9786e1fbfb3d637c2561421488c9d0000000094bf13ac582f6b67de0cad933631794271b2259fe5d73a74ad7da615c31505c7c0c168052d38e5b64c4bb7d0599e5dcf0000000000000000000000000000002790cf17418aa278cfc0c9d1c81c63e58b877706a4b7eed8a5aff253298db2939adc0efdab4745ab0e09ef8beaaf04e5374c2e7e4672e47fe5a25502919954242f8d779d84091f20646210edf871d3f20ad66fcf4b816323b8abb307381d4ada887dcc71e35f364baa1b93fd5ee36c02aa4628511442992ced893ab946472440b53fc08cc41403e167b1f2605e04d5f0c16ed49969b59d650d88642b10c7893fe9b664421a40f4822ffcc284dfe9aea76e4a04293c970f2dae776decf07b085e16511b0bd365b0f86c7fcd8df00a87f4dbbf8e623667e3b65e4c487055a2e5cd64402a4de537bf113fc7370099e4faebe6ea9d4f155f8f5f4c5f9b205ce1bbc8c0002a19457e05a210d9e9820bc7f318ebfdfcc22f83150503b28c52096d13d6b9aac338f27ca2d2108c51ad7bbbc6ec9d577b00c703c4ef2ee9f16febbb7afdafc59e817dc8edb56d445c74fa48cdccf79223640f685b92b26c62d7d65dd4fdd6f73c1d9c70f1bca7a7150f62de63f2f579f1fb2d10f3a770f2b9ce8cd8be9414e0444fd357b3fad5b16d91c91c0f1aa3e11d39426af77180bdb588060a2546b369655c02eb52709e0e03785f8010bfd1a72a817dad46c854ebb0a8aa5d59cae56089e2aac882b33018aa4006a44968a267cde827c86aa1abccb51cb152459f91a39a5cbbd8d218d37f4cf35d339694a379", @ANYBLOB="d23c17f6ec95b3b820b1161ffa233394c6007d8285b061be4d1d842e4a63ec77908347691f71d1e4132f09405a5b81867a01cf3df73c16fd31622d37a921bdbff76ef2fed6da828ab4e0f87928c18c0380050249fb6ab8e225d181ac41a6377703000000fcac059ad433974df43b0efc268cbd67279c5e0f19f5b89100cc35aafb9e96dae3d8afe28e887e01475bd40d1080f70254a3f65a1c6261571866a21a54d7624954802e9fe5003049941e5eb295f250d423cb68802074c8c103494acc2fb1fe19c38704ceb94c6da8fb326c1740c59e"], 0xf, 0x2a4, &(0x7f0000000480)="$eJzs3T9rc2UUAPBzkzSNOqSIiyJ4QQen0rq6NEoFsZMSQR002BYkCYUWAlYwduoncPR7+BFcXPwGgqvg1g6VKzf33ia16R/65k3h7e83nd7nnvOc3KckU06+eXPY3z1I4uTsz2i1kqhtxVacJ7EWtaj8FI0AAF4c51kW/2QPyWzUFt8NALAMxed/4bF7AQCW47Mvvvyks7Oz/WmatuL19umom0TE8HTULdY7+/FdDGIvNqIdFxHZpSL+6OOd7WikubV4ZzgedfPM4de/l/U7f0dM8jejHWvz8zfTwmX+y1V3aXT2V6o/2vHa/Pz3/p8fw3F0m/Hu2zP9r0c7/vg2DmIQu5HnTvN/3EzTD7Ofz374Kt8mz09q0V2d3DeV1Zd0JAAAAAAAAAAAAAAAAAAAAAAAPAHraZoU43sm83vyS5P5OaNu/WKyvp5WZuf7jKv5QElVqJgPlEU5omecxS/VfJ2NNE2z8sZpfiPeaPhhAQAAAAAAAAAAAAAAAAAAAMgdfX/c7w0Ge4cLCappANXX+h9aZ2vmyltx3O/Vby64ev+9ZqcN5L3eenM0GrGgx3JX8FLez8Irr04P9/MogupgFrrXqx8URY/7vbRcqh5yv5fctVerOrhfZ5ea8ayNZZN/iYvs6pm2Llu9mtVc0NNovjJ36d8sy+5X5/2/ijMqrySTERv3232lDOa+wDxoXT+L324ueONbRn0hbzwAAAAAAAAAAAAAAAAAAMA10y/9zlk8uTW19tyaAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAlm/7+fxW0IuLqlWvBuEy+7Z4yaMbh0SO/RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ6A/wIAAP//4ipOSw==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file2\x00', 0x143142, 0x40) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b4050000000000006910760000000000bc001000000000009500000000000000ef4f7c81f5427c16bd2aacf32cdbb47063fd9a7bb1f3ad622c3261f324e081c0ea39bd16d9869302cc08fbd94867708cb208e22cc0ad536525e3b39869285c126353f6a49bc5abc6b9a4eab313655286ee33a56f03b665dd5f1739bda6accc3b9b0d26450d3161263aed01194269a5fba4553bb18fa1f37e2f68a8ef81f090829d0ee04b52611a41642b31a6fe2653171379cc327fc11e38418b589777f8c8ddcbf88df947a05937ea"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) write$P9_RAUTH(r0, &(0x7f00000001c0)={0x14, 0x67, 0x2, {0x51, 0x0, 0x7}}, 0x14) 1.097521282s ago: executing program 3 (id=6): mount(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='ext3\x00', 0x200000, 0x0) r0 = socket$key(0xf, 0x3, 0x2) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000bde000/0x3000)=nil, 0x3000, 0x0) futex(&(0x7f0000000340), 0x5, 0x0, 0x0, &(0x7f0000000140), 0x34ffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) syz_clone(0x5104200, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) sendmsg$key(r0, &(0x7f00000074c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x2, 0x18, 0x4, 0x2, 0xc, 0x0, 0x70bd29, 0x25dfdbfc, [@sadb_x_kmaddress={0x5, 0x19, 0x0, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x32}}, @in={0x2, 0x4e22, @local}}, @sadb_x_nat_t_port={0x1, 0x16, 0x4e21}, @sadb_sa={0x2, 0x1, 0x4d6, 0x5, 0x8, 0x2d, 0x1, 0xa0000000}, @sadb_x_sa2={0x2, 0x13, 0x3, 0x0, 0x0, 0x70bd2d, 0x3506}]}, 0x60}}, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000001300)=ANY=[@ANYBLOB="120100000cb78a405e0483020b990102030109022400010000000009040000025c291d0009050900000000000009050b", @ANYBLOB], 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="ec000000", @ANYRES16=r7, @ANYBLOB="01000000000000000000010000000800050001000000140002007767310000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5420800050000000000900008808c0000"], 0xec}, 0x1, 0x0, 0x0, 0x4084}, 0x24000010) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'tunl0\x00'}) 881.795679ms ago: executing program 4 (id=7): syz_usb_connect(0x6, 0x1b, 0x0, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000}, 0xffffffffffffff59) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000240)='sched_kthread_stop\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x61, 0x8e}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f0000000780)=@abs={0x1, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r3, 0x82307202, &(0x7f0000000800)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r4 = open(&(0x7f0000000100)='./file0\x00', 0x303e02, 0x2f53a08607baf2e7) mknodat$loop(r4, &(0x7f0000000000)='./file1\x00', 0x2000, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') link(&(0x7f0000000140)='./file1\x00', &(0x7f0000000280)='./bus\x00') r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffafffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = fsopen(&(0x7f00000000c0)='cgroup\x00', 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r6, 0x4, &(0x7f0000000100)='cpuset\x00', &(0x7f0000000140)='./file0\x00', 0xffffffffffffff9c) 375.190079ms ago: executing program 2 (id=8): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000001680)=[{{&(0x7f0000000080)={0xa, 0x4e21, 0x1000, @remote}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000280)="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", 0x5ad}], 0x1, &(0x7f0000001280)=[@dontfrag={{0x14, 0x29, 0x3e, 0x1}}], 0x18}}], 0x1, 0x84) clock_gettime(0x0, &(0x7f0000003080)={0x0, 0x0}) futex_waitv(&(0x7f0000002500)=[{0x101, &(0x7f0000000000)=0x1ff, 0x2}, {0x100000001, &(0x7f0000000040)=0x6, 0x2}, {0x1, &(0x7f00000000c0)=0x196, 0x82}, {0x2, &(0x7f0000000100)=0x9, 0x2}, {0xa37c, &(0x7f0000000140)=0x7fff, 0x82}, {0x8, &(0x7f0000000180)=0x6, 0x82}, {0x40, &(0x7f00000001c0)=0x8, 0x80}, {0xb, &(0x7f0000000240)=0x7, 0x2}, {0x8, &(0x7f0000000840)=0x5, 0x2}, {0x7, &(0x7f0000000880)=0x101, 0x2}, {0xa, &(0x7f00000008c0)=0x1, 0x2}, {0x8, &(0x7f0000000900)=0x3, 0x82}, {0x6, &(0x7f0000000940)=0xb5, 0x2}, {0x5, &(0x7f0000000980)=0xf6ad, 0x82}, {0x0, &(0x7f00000009c0)=0x1, 0x82}, {0x5, &(0x7f0000000a00)=0x10000, 0x82}, {0x380000, &(0x7f0000000a40)=0x3, 0x82}, {0x4, &(0x7f0000000a80)=0xa921, 0xbbfa88041de60dcc}, {0x4, &(0x7f0000000ac0)=0x9, 0x82}, {0x99, &(0x7f0000000b00)=0x2, 0x82}, {0x9, &(0x7f0000000b40)=0x83, 0x2}, {0x3, &(0x7f0000000b80)=0x1, 0x82}, {0x0, &(0x7f0000000bc0)=0x96, 0x82}, {0xffffffffffffffc0, &(0x7f0000000c00)=0x2, 0x2}, {0x4, &(0x7f0000000c40)=0x4, 0x82}, {0x2, &(0x7f0000000c80)=0x3018387e, 0x82}, {0x4, &(0x7f0000000cc0)=0xfc2, 0x82}, {0x2, &(0x7f0000000d00)=0x5, 0x106}, {0xf34, &(0x7f0000000d40)=0x2, 0x2}, {0x10000, &(0x7f0000000d80)=0x8001, 0x82}, {0xb, &(0x7f0000000dc0)=0x6, 0x3}, {0x5, &(0x7f0000000e00)=0x2, 0x2}, {0x6, &(0x7f0000000e40)=0x9ec3, 0x82}, {0x0, &(0x7f0000000e80)=0xffffffffffffffff, 0x2}, {0x69a, &(0x7f0000000ec0)=0x9, 0x82}, {0x6, &(0x7f0000000f00)=0x9, 0x80}, {0xfffffffffffffffb, &(0x7f0000000f40), 0x2}, {0x9, &(0x7f0000000f80)=0x52, 0x82}, {0xfffffffffffffff9, &(0x7f0000000fc0)=0x6, 0x2}, {0xb4, &(0x7f0000001000)=0xffffffffffffff48, 0x82}, {0x6, &(0x7f0000001040)=0x1, 0x2}, {0xe8d, &(0x7f0000001080)=0x25, 0x82}, {0x3, &(0x7f00000010c0)=0xf0, 0x82}, {0x9, &(0x7f0000001100)=0x11000000}, {0x6b, &(0x7f0000001140)=0x9, 0x82}, {0x2, &(0x7f0000001180)=0x6, 0x2}, {0x6, &(0x7f00000011c0)=0xd, 0x2}, {0x10001, &(0x7f0000001200)=0x7, 0x104}, {0x0, &(0x7f0000001240)=0x529e, 0x86}, {0x2, &(0x7f00000012c0)=0x1, 0x82}, {0x8000000000000000, &(0x7f0000001300)=0x6}, {0x9, &(0x7f0000001340)=0x8, 0x2}, {0x5, &(0x7f0000001380)=0x7, 0x2}, {0x3, &(0x7f00000013c0)=0x9, 0x82}, {0x8, &(0x7f0000001400)=0x10001, 0x2}, {0x3000000000, &(0x7f0000001440)=0x7fffffffffffffff, 0x2}, {0x10001, &(0x7f0000001480)=0x5e0800000000, 0x2}, {0x40, &(0x7f00000014c0)=0x6, 0x82}, {0xcb81, &(0x7f0000001500)=0x8001, 0xc0}, {0x415de988, &(0x7f0000001540)=0x604c, 0x2}, {0xffffffffffffffff, &(0x7f0000001580)=0x1, 0x2}, {0x3ff, &(0x7f00000015c0)=0xffffffff, 0x82}, {0xfffffffffffffff8, &(0x7f0000001600)=0xa1, 0x82}, {0x3, &(0x7f0000001640)=0x8, 0x82}, {0xa8f, &(0x7f00000016c0), 0x82}, {0x1, &(0x7f0000001700)=0x6, 0x2}, {0x2d, &(0x7f0000001740), 0x82}, {0x3, &(0x7f0000001780)=0x9, 0x82}, {0x7, &(0x7f00000017c0), 0x2}, {0x3152, &(0x7f0000001800)=0x2, 0x2}, {0xe9b, &(0x7f0000001840)=0x1, 0x2}, {0x4, &(0x7f0000001880)=0x2, 0x82}, {0xfc4, &(0x7f00000018c0)=0x8000000000000001, 0x2}, {0x8000000000000001, &(0x7f0000001900)=0x7, 0x82}, {0x8, &(0x7f0000001940)=0x4, 0x2}, {0x9, &(0x7f0000001980)=0x800, 0x82}, {0xc, &(0x7f00000019c0)=0x1, 0x2}, {0x3, &(0x7f0000001a00), 0x82}, {0x0, &(0x7f0000001a40)=0xffffffffffffebc5, 0x2}, {0x4, &(0x7f0000001a80)=0x5, 0x2}, {0x4, &(0x7f0000001ac0)=0x5, 0x82}, {0x10001, &(0x7f0000001b00)=0x2, 0x82}, {0x5c0, &(0x7f0000001b40)=0xfffffffffffffffd}, {0x7, &(0x7f0000001b80)=0x1, 0x2}, {0x7, &(0x7f0000001bc0)=0x5b633769, 0x82}, {0x37, &(0x7f0000001c00)=0x80, 0x2}, {0x4cb, &(0x7f0000001c40)=0x7, 0x2}, {0x9, &(0x7f0000001c80)=0x7, 0x2}, {0x1, &(0x7f0000001cc0)=0x5, 0x80}, {0x0, &(0x7f0000001d00)=0xffffffffffffffff, 0x82}, {0x0, &(0x7f0000001d40)=0x546, 0x2}, {0x1, &(0x7f0000001d80)=0x8, 0x2}, {0x0, &(0x7f0000001dc0)=0xe, 0x82}, {0x7fff, &(0x7f0000001e00)=0x6, 0x2}, {0xfffffffffffffff8, &(0x7f0000001e40), 0x82}, {0xffffffffffff0001, &(0x7f0000001e80)=0x200, 0x82}, {0x2c3, &(0x7f0000001ec0)=0x6e1d, 0x2}, {0x8, 0xfffffffffffffffc, 0x2}, {0x0, &(0x7f0000001f00)=0x7, 0x82}, {0xa, &(0x7f0000001f40)=0xf, 0x82}, {0x10001, &(0x7f0000001f80)=0xfc9, 0x2}, {0xf, &(0x7f0000001fc0)=0xd5, 0x2}, {0xffffffffffffffff, &(0x7f0000002000)=0x23, 0x2}, {0x0, &(0x7f0000002040)=0x6, 0x2}, {0x6, &(0x7f0000002080)=0x7, 0x82}, {0x1, &(0x7f00000020c0)=0x9, 0x2}, {0x7ff, &(0x7f0000002100)=0x9, 0x2}, {0x0, &(0x7f0000002140)=0x2a, 0x2}, {0xa619, &(0x7f0000002180)=0x2, 0x82}, {0x5, &(0x7f00000021c0)=0x2, 0x84}, {0x2, &(0x7f0000002200)=0x2, 0x82}, {0x100, &(0x7f0000002240)=0x1, 0x82}, {0xab67, &(0x7f0000002280)=0x5, 0x2}, {0x0, &(0x7f00000022c0)=0x9, 0x1857b9edc62a9d65}, {0x1, &(0x7f0000002300)=0x6, 0x82}, {0x7, &(0x7f0000002340)=0x4, 0x2}, {0x8001, &(0x7f0000002380)=0x6, 0x82}, {0x0, &(0x7f00000023c0)=0x100000001, 0x2}, {0x2, &(0x7f0000002400)=0x200, 0x44a2a8a8844951ce}, {0x3, &(0x7f0000002440)=0x1, 0x2}, {0x812, &(0x7f0000002480)=0x2, 0x2}, {0x3, &(0x7f00000024c0)=0x7f, 0x2}], 0x7a, 0x0, &(0x7f00000030c0)={r1, r2+10000000}, 0x1) 299.464436ms ago: executing program 2 (id=9): r0 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x80801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) r2 = openat2$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)={0x1, 0xc8, 0x22}, 0x18) mkdirat(r2, &(0x7f00000002c0)='./file0\x00', 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r6, 0x0, 0x8ec0, 0x0) dup3(r4, r5, 0x0) dup2(r4, r6) sendmsg$key(r6, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)={&(0x7f0000000440)=ANY=[], 0x118}}, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) syz_memcpy_off$KVM_EXIT_HYPERCALL(r0, 0x20, &(0x7f0000000000)="0900bf65653f47f4020000008bd458d1e7cbdaf300000f34e7e4165f081ae36850f6d15c3e681411f7a496c0da04003c242f5bedaf6bec340dee49474362b24cb800edc500", 0x0, 0x48) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000ffb000/0x1000)=nil, 0x1000}}) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x7, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xab}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x2a}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r7, 0x80089419, &(0x7f0000000180)) r8 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e"], 0x0) syz_usb_control_io(r8, 0x0, &(0x7f00000010c0)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="1f769a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r8, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r8, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) write(0xffffffffffffffff, &(0x7f0000000380)="9005a300cca4f6e6f623c2ebb8", 0xd) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x3, 0xc, &(0x7f00000005c0)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r9, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0xfffff000) 250.14849ms ago: executing program 1 (id=10): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) (async) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$int_in(r0, 0x5421, &(0x7f0000000000)=0x3) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x9b) (async) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x9b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) (async) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) ioctl$PTP_SYS_OFFSET(r5, 0x43403d05, &(0x7f00000002c0)={0x12}) connect$bt_rfcomm(r0, &(0x7f00000001c0)={0x1f, @any, 0xb}, 0xa) 123.3002ms ago: executing program 0 (id=11): socketpair(0x1, 0x1, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = socket(0xa, 0x3, 0xff) recvmmsg(r3, &(0x7f00000068c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=""/100, 0x64}, 0x43}], 0x1, 0x40000022, 0x0) setsockopt$inet6_int(r3, 0x29, 0x31, &(0x7f0000000040)=0x2, 0x4) syz_emit_ethernet(0x4e, &(0x7f00000020c0)=ANY=[], 0x0) r4 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r4, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31) sendmmsg$inet6(r4, &(0x7f0000002940), 0x40000000000017d, 0x811) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) unshare(0x20000400) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x1a4) 0s ago: executing program 1 (id=12): socket$inet6_tcp(0xa, 0x1, 0x0) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000000000011"], 0x8) close(r0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000580)={[{@orlov}, {@noauto_da_alloc}, {@dioread_nolock}, {@test_dummy_encryption}, {@nobarrier}, {@nodelalloc}, {@minixdf}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}]}, 0x1, 0xba6, &(0x7f0000000c00)="$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") socket$inet6(0xa, 0x2, 0x0) (async) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000500)={0xa, 0x4e20, 0x2}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x6, @mcast1}, 0x1c) sendto$inet6(r1, &(0x7f0000002900)="0d0ad7c36d6617110e434332d6ac582208222cfb7c37ce1148f448455bc37f5f70c92774dcb201629979039d7c8943b207e5bdf9ab8eed9ace110469c51f4f211dd9fad815eb5b273ac04e1edc679bcdf0a0d24482de5454be9003cb80714a95e136bb704ee58e707d1e69b3c3a1c2c37f9c0402e14abdeb32086a49aff25e5c0f0131d59b4783316b9fa2c71c51ce76942d5f519145c9e3bf0d4182b4a62970b2ce81d35a7afc8384b387b8e21f2051d90d92323a710cabe5275d335b64453e759251a140de480541d8dd7662a14296a59eba99b95bfdf5b22992c323865b471d13ad79867e2692fd4eece299a81e2b33336b6801f51c2ae8d73e4df90c9bd70cd535b72cbdf67754acdc44b3780450308d9c5527c3314eb7b2cc38b61e96403a30a8ba0c8a357aa0453c62bc51bcf55cf214f44a909b29c30c18c3a43c86472612086664a80f2aa8490e58352732acb96eb4905b99df95d1957a6029ad86e7a5ced2bde89c158aaee721954beeebe5973059007f7dd5459029af6d3f1d73d35f07d19b7cedfc80d1d7ef37f8b113f564afd0f093202929fef43e788619ca522c7f679dd2f27949d879b4dab46581a0e054b4ed1db37e43f528748b56ec5a54b7af198d4ae551046f7814fe3a5cbc1cc7cb6655fc198939b049f3c02443148c588e34d6ebef81096b4e48f468016d2bde0828664c0874d71e2d88b3bc04079d4a504255a83c3f07a4f1c3e5a4c66f55f36e51e344392487c8299d8d1bfb568780c0d57df48990cb5d6b35c3f7445f80312186d8598faf61072d4eefc961fb5a7e72b971c8f94a8346effd27362cee8d72a98b55e317de280d2d63ee83ca7140b7913122d402c536d914c8510c81d08f0ad1c952f5b7ad5e7ef72d7c58cb4d5bafbea535b381df6ebe94c62cf782cf7ab81c017c296a88ca91d641b45748d230cf5e87e5dbee4764ea4d131ae022e6bbf3ffbcea7b264737d9db44354bfffa63d79bc403d3ac23fb615edc382d18b0daf1bbb2fbd708d1830ddac1c3f098b8cb1ef9a0019d804bf5d953110f12f3b9a8b9b7e0c61cb5d34116add1fc9a92721ffa5fdc83e1488cf88aa6e56ad2dd55e0aadd827cc7b4e7242f01241f49e905e5e7451092c28c3f6560a6a0002e5d91fc253a5a8fd8f27e42f4f02f5849528b7d93df9b0c568022acaff410e797e88d2f8eeadbba66e423335b843df70400000062a861b712da8f33d5ea721767871aa2cd53e659e505507de9a54d7e6fa3c20bbfb28cd6dd2b314dabbb59e9ce15c0a94ec3b3efc54eaaa27bd7576a687dcaf58dc182662539943014a02e76dc89f48c9f83cc7199038418f965ad3dc866098b89cabcac8691b0f51ffb71902337e49293309c4480a8f1b32411cc1b55a0ec0fe2c2572fe9d488a25bfc12ba74048e1d7beee93321c7aa49ea17cb9728dc46e5272154b3b995feacbacb8885621b335274af4df9365f8c8121ff323b572d320c8fc46acd6218b9579d43005e7b0506ccb14d9a0dac4cc6efaf5366c44342eaea8b5a11457f5afbea913ce4975ab67e6a85bc46e714ca5741da38a7cceb9e85d77fd03f83f7a5ecc7241e69e2bda327f769b48b08000000aee81e6845c2cf23f42c458ae5668c8d387bf9ab224bc9703f1c08347be810d2f19278fe8d97560b3c9f1816667d0461a25e778eb1404dcaac1ed0a6a0745f3a5d2dc1b6babf98f5135d531cb26334ef2fec4c78c95b7193935139664fc65f17b047eb3dc39e251ba52ce33f8099719f1a789db1690347355e7b02d4c522692b9597fd31abb90f973ae4eb0bd0d900cdd887ff01d4845d7f0aee39b220a65a5aeee0fd386054070723c841c042d5339cc6325f07f0f733d124c6524f388ef7419f42c06278b8fceaa3a16b202dfb539b129762397e29cdd679ca6240272fa0c3e2e8c0a27aaa407f30b40f5a501b80485e2dfd024d0638dfca1bc9483db3ccc2880f9e436f9eaf6317080b13ce74b7e6aefdd37015bd0a38ce39d8ae7bbf442d8efd1ac01cdcb818b873a1cb134aabd52e65c769585ce8cda052a5b7f68cb5d5e0ac64bf1f385de56557053380dddabd3860d8f439eb54bce5acea4c46d14085d55449d4fd4e", 0x5dd, 0x6d91fb6120dd911c, 0x0, 0x0) (async) sendto$inet6(r1, &(0x7f0000002900)="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", 0x5dd, 0x6d91fb6120dd911c, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r2, 0x4b45, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000001c0)={0xaa, 0x515}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f0000000400)={&(0x7f00006b4000/0x1000)=nil, &(0x7f0000779000/0x1000)=nil, 0x1000, 0x3, 0x2}) (async) ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f0000000400)={&(0x7f00006b4000/0x1000)=nil, &(0x7f0000779000/0x1000)=nil, 0x1000, 0x3, 0x2}) madvise(&(0x7f00008db000/0x1000)=nil, 0x1000, 0x3) signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8) (async) r5 = signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@bloom_filter={0x1e, 0x6, 0xffff, 0x22f25f20, 0x10008, r3, 0x8, '\x00', 0x0, r5, 0x3, 0x4, 0x5, 0xf, @void, @value, @value=r5}, 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@bloom_filter={0x1e, 0x6, 0xffff, 0x22f25f20, 0x10008, r3, 0x8, '\x00', 0x0, r5, 0x3, 0x4, 0x5, 0xf, @void, @value, @value=r5}, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000540), 0xc, &(0x7f0000000040)={&(0x7f00000006c0)=@gettclass={0x24, 0x2a, 0x20, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0x0, 0xe}, {0x6, 0xffe0}}, ["", "", "", ""]}, 0x24}}, 0x0) gettid() (async) r6 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x11, 0x4, @tid=r6}, &(0x7f0000000080)) read$FUSE(r5, &(0x7f00000008c0)={0x2020}, 0xfffffef0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) bpf$PROG_LOAD(0x5, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.72' (ED25519) to the list of known hosts. [ 22.527410][ T28] audit: type=1400 audit(1756106273.386:64): avc: denied { mounton } for pid=274 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 22.528876][ T274] cgroup: Unknown subsys name 'net' [ 22.550125][ T28] audit: type=1400 audit(1756106273.386:65): avc: denied { mount } for pid=274 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.578014][ T28] audit: type=1400 audit(1756106273.426:66): avc: denied { unmount } for pid=274 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.578258][ T274] cgroup: Unknown subsys name 'devices' [ 22.725162][ T274] cgroup: Unknown subsys name 'hugetlb' [ 22.731083][ T274] cgroup: Unknown subsys name 'rlimit' [ 22.865918][ T28] audit: type=1400 audit(1756106273.726:67): avc: denied { setattr } for pid=274 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 22.889403][ T28] audit: type=1400 audit(1756106273.726:68): avc: denied { mounton } for pid=274 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 22.914303][ T28] audit: type=1400 audit(1756106273.726:69): avc: denied { mount } for pid=274 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 22.925822][ T276] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 22.947234][ T28] audit: type=1400 audit(1756106273.806:70): avc: denied { relabelto } for pid=276 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.972692][ T28] audit: type=1400 audit(1756106273.806:71): avc: denied { write } for pid=276 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.005480][ T28] audit: type=1400 audit(1756106273.866:72): avc: denied { read } for pid=274 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.031229][ T28] audit: type=1400 audit(1756106273.866:73): avc: denied { open } for pid=274 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.031308][ T274] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 25.513380][ T282] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.520513][ T282] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.528136][ T282] device bridge_slave_0 entered promiscuous mode [ 25.536359][ T282] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.543562][ T282] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.551069][ T282] device bridge_slave_1 entered promiscuous mode [ 25.654927][ T284] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.662165][ T284] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.669803][ T284] device bridge_slave_0 entered promiscuous mode [ 25.687298][ T284] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.694504][ T284] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.702000][ T284] device bridge_slave_1 entered promiscuous mode [ 25.734924][ T286] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.742080][ T286] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.749625][ T286] device bridge_slave_0 entered promiscuous mode [ 25.769262][ T286] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.776644][ T286] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.784277][ T286] device bridge_slave_1 entered promiscuous mode [ 25.811350][ T283] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.818724][ T283] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.826302][ T283] device bridge_slave_0 entered promiscuous mode [ 25.847433][ T283] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.854577][ T283] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.862064][ T283] device bridge_slave_1 entered promiscuous mode [ 25.906913][ T285] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.914087][ T285] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.921601][ T285] device bridge_slave_0 entered promiscuous mode [ 25.937565][ T285] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.944763][ T285] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.952256][ T285] device bridge_slave_1 entered promiscuous mode [ 26.016295][ T282] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.023561][ T282] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.031055][ T282] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.038400][ T282] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.101703][ T284] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.108906][ T284] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.116232][ T284] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.123291][ T284] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.194304][ T286] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.201793][ T286] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.209112][ T286] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.216181][ T286] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.235563][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 26.244185][ T42] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.251502][ T42] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.258954][ T42] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.266697][ T42] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.274386][ T42] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.282536][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 26.290273][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 26.314075][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 26.322508][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.329718][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.339544][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 26.366118][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 26.373849][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 26.381856][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 26.409851][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 26.418129][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.425221][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.433487][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 26.441884][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.448980][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.456603][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 26.464894][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.471924][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.479429][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 26.487672][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.494755][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.534917][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 26.543602][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 26.551685][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 26.559705][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 26.567805][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 26.576427][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 26.585093][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 26.593884][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 26.601896][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 26.610066][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 26.618731][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.625807][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.633241][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 26.641410][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.648492][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.656072][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 26.664457][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.671619][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.679343][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 26.687579][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.694640][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.702103][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 26.710272][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 26.718493][ T282] device veth0_vlan entered promiscuous mode [ 26.734495][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 26.742247][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 26.749976][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 26.758355][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 26.766512][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 26.774997][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 26.783032][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 26.793188][ T286] device veth0_vlan entered promiscuous mode [ 26.801975][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 26.810657][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 26.819242][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 26.831668][ T282] device veth1_macvtap entered promiscuous mode [ 26.844150][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 26.851888][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 26.860278][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 26.869830][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 26.878196][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 26.894718][ T284] device veth0_vlan entered promiscuous mode [ 26.908982][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 26.917543][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 26.926018][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 26.934256][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 26.942354][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 26.950087][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 26.961612][ T286] device veth1_macvtap entered promiscuous mode [ 26.978158][ T284] device veth1_macvtap entered promiscuous mode [ 26.985480][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 26.994766][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 27.003142][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 27.011407][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 27.020353][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 27.029132][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 27.037711][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 27.046131][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 27.054599][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 27.064990][ T285] device veth0_vlan entered promiscuous mode [ 27.073854][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 27.086766][ T283] device veth0_vlan entered promiscuous mode [ 27.097697][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 27.105503][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 27.113608][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 27.122091][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 27.130835][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 27.138967][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 27.147361][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 27.155185][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 27.179252][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 27.179947][ T286] request_module fs-gadgetfs succeeded, but still no fs? [ 27.188225][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 27.205188][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 27.213688][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 27.222527][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 27.231097][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 27.239607][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 27.248030][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 27.281115][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 27.292044][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 27.296699][ T334] hid-generic 0000:0000:0008.0001: unknown main item tag 0x0 [ 27.307545][ T334] hid-generic 0000:0000:0008.0001: unknown main item tag 0x0 [ 27.311926][ T285] device veth1_macvtap entered promiscuous mode [ 27.321914][ T334] hid-generic 0000:0000:0008.0001: unknown main item tag 0x0 [ 27.329610][ T334] hid-generic 0000:0000:0008.0001: unknown main item tag 0x0 [ 27.331454][ T283] device veth1_macvtap entered promiscuous mode [ 27.337390][ T334] hid-generic 0000:0000:0008.0001: unknown main item tag 0x0 [ 27.350938][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 27.359198][ T334] hid-generic 0000:0000:0008.0001: unknown main item tag 0x0 [ 27.361162][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 27.374260][ T340] loop1: detected capacity change from 0 to 128 [ 27.381291][ T334] hid-generic 0000:0000:0008.0001: unknown main item tag 0x0 [ 27.390800][ T334] hid-generic 0000:0000:0008.0001: unknown main item tag 0x0 [ 27.406838][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 27.410402][ T334] hid-generic 0000:0000:0008.0001: unknown main item tag 0x0 [ 27.417907][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 27.428763][ T334] hid-generic 0000:0000:0008.0001: unknown main item tag 0x0 [ 27.434359][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 27.446484][ T342] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 27.450238][ T334] hid-generic 0000:0000:0008.0001: unknown main item tag 0x0 [ 27.463847][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 27.473044][ T340] syz.1.2: attempt to access beyond end of device [ 27.473044][ T340] loop1: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 27.491839][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 27.492847][ T334] hid-generic 0000:0000:0008.0001: unknown main item tag 0x0 [ 27.501076][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 27.517758][ T334] hid-generic 0000:0000:0008.0001: unknown main item tag 0x0 [ 27.525426][ T334] hid-generic 0000:0000:0008.0001: unknown main item tag 0x0 [ 27.538254][ T340] syz.1.2: attempt to access beyond end of device [ 27.538254][ T340] loop1: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 27.555799][ T334] hid-generic 0000:0000:0008.0001: unknown main item tag 0x0 [ 27.566030][ T334] hid-generic 0000:0000:0008.0001: unknown main item tag 0x0 [ 27.569820][ T340] syz.1.2: attempt to access beyond end of device [ 27.569820][ T340] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 27.576340][ T349] loop3: detected capacity change from 0 to 256 [ 27.588302][ T340] syz.1.2: attempt to access beyond end of device [ 27.588302][ T340] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 27.608309][ T340] syz.1.2: attempt to access beyond end of device [ 27.608309][ T340] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 27.622270][ T340] syz.1.2: attempt to access beyond end of device [ 27.622270][ T340] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 27.648261][ T340] syz.1.2: attempt to access beyond end of device [ 27.648261][ T340] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 27.661485][ T334] hid-generic 0000:0000:0008.0001: unknown main item tag 0x0 [ 27.669741][ T28] kauditd_printk_skb: 34 callbacks suppressed [ 27.669756][ T28] audit: type=1400 audit(1756106278.526:108): avc: denied { create } for pid=339 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.697829][ T334] hid-generic 0000:0000:0008.0001: unknown main item tag 0x0 [ 27.705309][ T334] hid-generic 0000:0000:0008.0001: unknown main item tag 0x0 [ 27.713102][ T351] tipc: Started in network mode [ 27.717282][ T340] syz.1.2: attempt to access beyond end of device [ 27.717282][ T340] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 27.719888][ T351] tipc: Node identity ac14140f, cluster identity 4711 [ 27.731226][ T340] syz.1.2: attempt to access beyond end of device [ 27.731226][ T340] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 27.750985][ T340] syz.1.2: attempt to access beyond end of device [ 27.750985][ T340] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 28.661509][ T334] hid-generic 0000:0000:0008.0001: unknown main item tag 0x0 [ 28.674436][ T334] hid-generic 0000:0000:0008.0001: unknown main item tag 0x0 [ 28.682074][ T334] hid-generic 0000:0000:0008.0001: unknown main item tag 0x0 [ 28.689874][ T334] hid-generic 0000:0000:0008.0001: unknown main item tag 0x0 [ 28.697745][ T334] hid-generic 0000:0000:0008.0001: unknown main item tag 0x0 [ 28.708368][ T349] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 198) [ 28.750966][ T351] tipc: New replicast peer: 255.255.255.255 [ 28.758386][ T334] hid-generic 0000:0000:0008.0001: unknown main item tag 0x0 [ 28.784238][ T28] audit: type=1400 audit(1756106278.556:109): avc: denied { write } for pid=339 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.856085][ T334] hid-generic 0000:0000:0008.0001: unknown main item tag 0x0 [ 28.895606][ T351] tipc: Enabled bearer , priority 10 [ 28.903620][ T349] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 198) [ 28.913448][ T28] audit: type=1400 audit(1756106278.556:110): avc: denied { read } for pid=339 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.915040][ T334] hid-generic 0000:0000:0008.0001: unknown main item tag 0x0 [ 29.450254][ T349] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 198) [ 29.461007][ T28] audit: type=1400 audit(1756106278.726:111): avc: denied { prog_run } for pid=345 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 29.505324][ T334] hid-generic 0000:0000:0008.0001: unknown main item tag 0x0 [ 29.541867][ T334] hid-generic 0000:0000:0008.0001: unknown main item tag 0x0 [ 29.555882][ T28] audit: type=1400 audit(1756106278.726:112): avc: denied { create } for pid=345 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 29.617592][ T334] hid-generic 0000:0000:0008.0001: unknown main item tag 0x0 [ 29.678379][ T334] hid-generic 0000:0000:0008.0001: unknown main item tag 0x0 [ 29.730013][ T28] audit: type=1400 audit(1756106278.726:113): avc: denied { connect } for pid=345 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 29.762567][ T334] hid-generic 0000:0000:0008.0001: unknown main item tag 0x0 [ 29.796982][ T364] No source specified [ 29.813399][ T334] hid-generic 0000:0000:0008.0001: unknown main item tag 0x0 [ 29.871196][ T28] audit: type=1400 audit(1756106279.736:114): avc: denied { write } for pid=341 comm="syz.0.1" name="/" dev="incremental-fs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 29.912327][ T28] audit: type=1400 audit(1756106279.736:115): avc: denied { remove_name } for pid=341 comm="syz.0.1" name="file0" dev="incremental-fs" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 29.952864][ T28] audit: type=1400 audit(1756106279.736:116): avc: denied { rename } for pid=341 comm="syz.0.1" name="file0" dev="incremental-fs" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 29.975086][ T334] hid-generic 0000:0000:0008.0001: unknown main item tag 0x0 [ 29.983067][ T334] hid-generic 0000:0000:0008.0001: unknown main item tag 0x0 [ 29.990618][ T334] hid-generic 0000:0000:0008.0001: unknown main item tag 0x0 [ 29.998438][ T334] hid-generic 0000:0000:0008.0001: unknown main item tag 0x0 [ 30.006114][ T334] hid-generic 0000:0000:0008.0001: unknown main item tag 0x0 [ 30.013671][ T334] hid-generic 0000:0000:0008.0001: unknown main item tag 0x0 [ 30.034889][ T28] audit: type=1400 audit(1756106279.736:117): avc: denied { reparent } for pid=341 comm="syz.0.1" name="file0" dev="incremental-fs" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 30.091242][ T334] hid-generic 0000:0000:0008.0001: unknown main item tag 0x0 [ 30.102512][ T334] hid-generic 0000:0000:0008.0001: unknown main item tag 0x0 [ 30.110092][ T334] hid-generic 0000:0000:0008.0001: unknown main item tag 0x0 [ 30.117695][ T334] hid-generic 0000:0000:0008.0001: unknown main item tag 0x0 [ 30.125208][ T334] hid-generic 0000:0000:0008.0001: unknown main item tag 0x0 [ 30.133894][ T334] hid-generic 0000:0000:0008.0001: hidraw0: HID vc.87 Device [syz0] on syz1 [ 30.285539][ T368] overlayfs: conflicting lowerdir path [ 30.489422][ T290] tipc: Node number set to 2886997007 [ 30.548833][ T380] fido_id[380]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 30.642684][ T347] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 30.664550][ T284] ------------[ cut here ]------------ [ 30.670523][ T284] WARNING: CPU: 0 PID: 284 at fs/inode.c:332 drop_nlink+0xc5/0x110 [ 30.678571][ T284] Modules linked in: [ 30.682587][ T284] CPU: 0 PID: 284 Comm: syz-executor Not tainted syzkaller #0 [ 30.690135][ T284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 30.700258][ T284] RIP: 0010:drop_nlink+0xc5/0x110 [ 30.705372][ T284] Code: 1b 48 8d bb b8 04 00 00 be 08 00 00 00 e8 03 ea f0 ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 eb 8b ac ff <0f> 0b eb 86 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 5e ff ff ff 4c [ 30.725640][ T284] RSP: 0018:ffffc9000d2afc38 EFLAGS: 00010293 [ 30.731742][ T284] RAX: ffffffff81c37b75 RBX: ffff8881321e7938 RCX: ffff888114d11440 [ 30.739788][ T284] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 30.747819][ T284] RBP: ffffc9000d2afc60 R08: 0000000000000004 R09: 0000000000000003 [ 30.755858][ T284] R10: fffff52001a55f78 R11: 1ffff92001a55f78 R12: dffffc0000000000 [ 30.763909][ T284] R13: 1ffff1102643cf30 R14: ffff8881321e7980 R15: 0000000000000000 [ 30.771916][ T284] FS: 0000555561a97500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 30.780938][ T284] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 30.785942][ T391] loop1: detected capacity change from 0 to 4096 [ 30.787576][ T284] CR2: 0000555561aba4e8 CR3: 000000012ef1c000 CR4: 00000000003506b0 [ 30.787596][ T284] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 30.787608][ T284] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 30.787622][ T284] Call Trace: [ 30.787627][ T284] [ 30.787635][ T284] shmem_rmdir+0x5b/0x90 [ 30.787666][ T284] vfs_rmdir+0x393/0x500 [ 30.787689][ T284] incfs_kill_sb+0x105/0x220 [ 30.787710][ T284] deactivate_locked_super+0xb5/0x120 [ 30.787732][ T284] deactivate_super+0xaf/0xe0 [ 30.805395][ T391] EXT4-fs: Ignoring removed orlov option [ 30.810488][ T284] cleanup_mnt+0x45f/0x4e0 [ 30.855833][ T391] EXT4-fs (loop1): Test dummy encryption mode enabled [ 30.858856][ T284] __cleanup_mnt+0x19/0x20 [ 30.868629][ T391] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 30.870185][ T284] task_work_run+0x1db/0x240 [ 30.884404][ T284] ? __cfi_task_work_run+0x10/0x10 [ 30.889570][ T284] ? __x64_sys_umount+0x125/0x160 [ 30.894699][ T284] ? __cfi___x64_sys_umount+0x10/0x10 [ 30.900111][ T284] exit_to_user_mode_loop+0x9b/0xb0 [ 30.905430][ T284] exit_to_user_mode_prepare+0x5a/0xa0 [ 30.905464][ T284] syscall_exit_to_user_mode+0x1a/0x30 [ 30.905487][ T284] do_syscall_64+0x58/0xa0 [ 30.905512][ T284] ? clear_bhb_loop+0x30/0x80 [ 30.905533][ T284] ? clear_bhb_loop+0x30/0x80 [ 30.905554][ T284] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 30.905575][ T284] RIP: 0033:0x7f9ee818ff17 [ 30.905602][ T284] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 30.905620][ T284] RSP: 002b:00007ffdd3da2868 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 30.905643][ T284] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f9ee818ff17 [ 30.905656][ T284] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdd3da2920 [ 30.905670][ T284] RBP: 00007ffdd3da2920 R08: 0000000000000000 R09: 0000000000000000 [ 30.905688][ T284] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffdd3da39b0 [ 30.905702][ T284] R13: 00007f9ee8211c05 R14: 0000000000007309 R15: 00007ffdd3da39f0 [ 30.905720][ T284] [ 30.905727][ T284] ---[ end trace 0000000000000000 ]--- [ 30.906384][ T284] ================================================================== [ 30.906396][ T284] BUG: KASAN: null-ptr-deref in ihold+0x20/0x60 [ 30.906419][ T284] Write of size 4 at addr 0000000000000170 by task syz-executor/284 [ 30.906437][ T284] [ 30.906443][ T284] CPU: 1 PID: 284 Comm: syz-executor Tainted: G W syzkaller #0 [ 30.906465][ T284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 30.906477][ T284] Call Trace: [ 30.906483][ T284] [ 30.906490][ T284] __dump_stack+0x21/0x24 [ 30.906519][ T284] dump_stack_lvl+0xee/0x150 [ 30.906546][ T284] ? __cfi_dump_stack_lvl+0x8/0x8 [ 30.906576][ T284] ? ihold+0x20/0x60 [ 30.906594][ T284] ? ihold+0x20/0x60 [ 30.906611][ T284] print_report+0x3d/0x60 [ 30.906637][ T284] kasan_report+0x122/0x150 [ 30.906660][ T284] ? ihold+0x20/0x60 [ 30.906680][ T284] kasan_check_range+0x280/0x290 [ 30.906705][ T284] __kasan_check_write+0x14/0x20 [ 30.906735][ T284] ihold+0x20/0x60 [ 30.906753][ T284] vfs_rmdir+0x25f/0x500 [ 30.906776][ T284] incfs_kill_sb+0x105/0x220 [ 30.906799][ T284] deactivate_locked_super+0xb5/0x120 [ 30.906824][ T284] deactivate_super+0xaf/0xe0 [ 30.906845][ T284] cleanup_mnt+0x45f/0x4e0 [ 30.906875][ T284] __cleanup_mnt+0x19/0x20 [ 31.003935][ T347] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 31.010501][ T284] task_work_run+0x1db/0x240 [ 31.010540][ T284] ? __cfi_task_work_run+0x10/0x10 [ 31.013774][ T347] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 31.019131][ T284] ? __x64_sys_umount+0x125/0x160 [ 31.019164][ T284] ? __cfi___x64_sys_umount+0x10/0x10 [ 31.030300][ T347] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 31.033554][ T284] exit_to_user_mode_loop+0x9b/0xb0 [ 31.033585][ T284] exit_to_user_mode_prepare+0x5a/0xa0 [ 31.033606][ T284] syscall_exit_to_user_mode+0x1a/0x30 [ 31.033629][ T284] do_syscall_64+0x58/0xa0 [ 31.033656][ T284] ? clear_bhb_loop+0x30/0x80 [ 31.033676][ T284] ? clear_bhb_loop+0x30/0x80 [ 31.033697][ T284] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 31.033718][ T284] RIP: 0033:0x7f9ee818ff17 [ 31.033735][ T284] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 31.033753][ T284] RSP: 002b:00007ffdd3da2868 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 31.033776][ T284] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f9ee818ff17 [ 31.033790][ T284] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdd3da2920 [ 31.033802][ T284] RBP: 00007ffdd3da2920 R08: 0000000000000000 R09: 0000000000000000 [ 31.033821][ T284] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffdd3da39b0 [ 31.033835][ T284] R13: 00007f9ee8211c05 R14: 0000000000007309 R15: 00007ffdd3da39f0 [ 31.041943][ T347] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 31.044238][ T284] [ 31.044246][ T284] ================================================================== [ 31.045372][ T370] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 31.054396][ T347] usb 4-1: Product: syz [ 31.068640][ T284] Disabling lock debugging due to kernel taint [ 31.070499][ T347] usb 4-1: Manufacturer: syz [ 31.074513][ T284] BUG: kernel NULL pointer dereference, address: 0000000000000170 [ 31.081653][ T347] usb 4-1: SerialNumber: syz [ 31.083993][ T284] #PF: supervisor write access in kernel mode [ 31.084005][ T284] #PF: error_code(0x0002) - not-present page [ 31.084016][ T284] PGD 132148067 P4D 132148067 PUD 0 [ 31.084042][ T284] Oops: 0002 [#1] PREEMPT SMP KASAN [ 31.089659][ T347] usb 4-1: config 0 descriptor?? [ 31.091942][ T284] CPU: 1 PID: 284 Comm: syz-executor Tainted: G B W syzkaller #0 [ 31.091968][ T284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 31.091980][ T284] RIP: 0010:ihold+0x26/0x60 [ 31.410606][ T284] Code: 33 36 7c df 55 48 89 e5 41 56 53 48 89 fb e8 51 83 ac ff 48 8d bb 70 01 00 00 be 04 00 00 00 e8 40 e1 f0 ff 41 be 01 00 00 00 44 0f c1 b3 70 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 41 [ 31.430234][ T284] RSP: 0018:ffffc9000d2afc78 EFLAGS: 00010246 [ 31.436338][ T284] RAX: ffff888114d11400 RBX: 0000000000000000 RCX: ffff888114d11440 [ 31.444512][ T284] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 31.452695][ T284] RBP: ffffc9000d2afc88 R08: dffffc0000000000 R09: fffffbfff0f2d4fd [ 31.461477][ T284] R10: fffffbfff0f2d4fd R11: 1ffffffff0f2d4fc R12: ffff8881321e7944 [ 31.469480][ T284] R13: dffffc0000000000 R14: 0000000000000001 R15: 0000000000000000 [ 31.477851][ T284] FS: 0000555561a97500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 31.487061][ T284] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 31.493729][ T284] CR2: 0000000000000170 CR3: 000000012ef1c000 CR4: 00000000003506a0 [ 31.501731][ T284] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 31.509823][ T284] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 31.517819][ T284] Call Trace: [ 31.521122][ T284] [ 31.524093][ T284] vfs_rmdir+0x25f/0x500 [ 31.528565][ T284] incfs_kill_sb+0x105/0x220 [ 31.533196][ T284] deactivate_locked_super+0xb5/0x120 [ 31.538696][ T284] deactivate_super+0xaf/0xe0 [ 31.543405][ T284] cleanup_mnt+0x45f/0x4e0 [ 31.547869][ T284] __cleanup_mnt+0x19/0x20 [ 31.552322][ T284] task_work_run+0x1db/0x240 [ 31.556937][ T284] ? __cfi_task_work_run+0x10/0x10 [ 31.562091][ T284] ? __x64_sys_umount+0x125/0x160 [ 31.567232][ T284] ? __cfi___x64_sys_umount+0x10/0x10 [ 31.572641][ T284] exit_to_user_mode_loop+0x9b/0xb0 [ 31.577880][ T284] exit_to_user_mode_prepare+0x5a/0xa0 [ 31.583455][ T284] syscall_exit_to_user_mode+0x1a/0x30 [ 31.588964][ T284] do_syscall_64+0x58/0xa0 [ 31.593410][ T284] ? clear_bhb_loop+0x30/0x80 [ 31.598234][ T284] ? clear_bhb_loop+0x30/0x80 [ 31.602945][ T284] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 31.608860][ T284] RIP: 0033:0x7f9ee818ff17 [ 31.613296][ T284] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 31.633009][ T284] RSP: 002b:00007ffdd3da2868 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 31.641547][ T284] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f9ee818ff17 [ 31.649632][ T284] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdd3da2920 [ 31.657712][ T284] RBP: 00007ffdd3da2920 R08: 0000000000000000 R09: 0000000000000000 [ 31.665716][ T284] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffdd3da39b0 [ 31.673893][ T284] R13: 00007f9ee8211c05 R14: 0000000000007309 R15: 00007ffdd3da39f0 [ 31.681994][ T284] [ 31.685119][ T284] Modules linked in: [ 31.689048][ T284] CR2: 0000000000000170 [ 31.693209][ T284] ---[ end trace 0000000000000000 ]--- [ 31.698771][ T284] RIP: 0010:ihold+0x26/0x60 [ 31.703300][ T284] Code: 33 36 7c df 55 48 89 e5 41 56 53 48 89 fb e8 51 83 ac ff 48 8d bb 70 01 00 00 be 04 00 00 00 e8 40 e1 f0 ff 41 be 01 00 00 00 44 0f c1 b3 70 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 41 [ 31.723201][ T284] RSP: 0018:ffffc9000d2afc78 EFLAGS: 00010246 [ 31.729304][ T284] RAX: ffff888114d11400 RBX: 0000000000000000 RCX: ffff888114d11440 [ 31.737483][ T284] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 31.745475][ T284] RBP: ffffc9000d2afc88 R08: dffffc0000000000 R09: fffffbfff0f2d4fd [ 31.753533][ T284] R10: fffffbfff0f2d4fd R11: 1ffffffff0f2d4fc R12: ffff8881321e7944 [ 31.761640][ T284] R13: dffffc0000000000 R14: 0000000000000001 R15: 0000000000000000 [ 31.769741][ T284] FS: 0000555561a97500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 31.778796][ T284] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 31.785450][ T284] CR2: 0000000000000170 CR3: 000000012ef1c000 CR4: 00000000003506a0 [ 31.793448][ T284] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 31.801469][ T284] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 31.809480][ T284] Kernel panic - not syncing: Fatal exception [ 31.818290][ T284] Kernel Offset: disabled [ 31.822652][ T284] Rebooting in 86400 seconds..