last executing test programs: 6.991102014s ago: executing program 3 (id=236): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000085000000500000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001b40)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) listen(0xffffffffffffffff, 0x3) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x256c, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x5, "17321748"}]}}, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f0000000480)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3445}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000000c0)={0x24, 0x0, &(0x7f0000000180)={0x0, 0x3, 0xb4, @lang_id={0x0, 0x3, 0xc2b}}, 0x0, 0x0}, 0x0) 6.870991673s ago: executing program 1 (id=238): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00\x00\x00'], 0x48) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4004000}, 0xc044) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000780)=@newtaction={0xe4, 0x30, 0x1, 0x0, 0x0, {}, [{0xd0, 0x1, [@m_police={0x6c, 0x0, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {}, {0x0, 0x1}}}]]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x60, 0x2, 0x0, 0x0, {{0x9}, {0x34, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1b1, 0xffffffffffffffff}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x26e6}}]}, {0x4}, {0xc, 0x3}, {0xc}}}]}]}, 0xe4}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) syz_clone(0x41200100, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) socket$nl_route(0x10, 0x3, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r4, 0x8108551b, &(0x7f0000000000)={0x0, 0x0, "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"}) ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f00000006c0)={0x2, 0xf, 0x4, 0x1, 0x0, 0x5, 0x0}) 6.79111038s ago: executing program 2 (id=239): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) syz_emit_ethernet(0xa2, &(0x7f00000005c0)={@remote, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2c}, @val={@val={0x88a8, 0x0, 0x0, 0x3}, {0x8100, 0x1, 0x1}}, {@llc_tr={0x11, {@snap={0x1, 0xaa, "97", "20ce52", 0xd, "7e3cae3a06ae772325e21e3aca4af89a226e808fccbe26e3be5e8768d8d37cd5eade2d25109b5b1e49495c23e5ade5ba3824dcb41ec2ecf321b10b8a7e9b4e663242088c27e36aa3bb1f62be6025915adc3b39114a3cf27a4c253ff4e607ba5c5bc2a252538b2233efe1bbcbbdc0b502ee3aa2fafac360d48b65216b01dad074dacc9a7b"}}}}}, &(0x7f0000000240)={0x0, 0x4, [0x7a2, 0xff9, 0x1a7, 0x6b6]}) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socket$inet_tcp(0x2, 0x1, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r5}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) select(0x40, &(0x7f0000000080)={0x0, 0x100000, 0xffffffffffffffff, 0x0, 0xfffffffffffffffb, 0x0, 0x2c9}, 0x0, 0x0, &(0x7f0000000200)) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r0, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x8c001}, 0x4000054) 5.976583476s ago: executing program 1 (id=241): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0xc044) r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) statx(r3, &(0x7f00000001c0)='./cgroup/../file0\x00', 0x0, 0x8, &(0x7f0000000340)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={0x0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffc4, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00'}, 0x10) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0105500, &(0x7f0000000140)={0x80, 0x6, 0x303, 0xfffd, 0x13, 0x0, 0x0}) bind$netlink(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) syz_clone(0x41200100, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) 5.92879163s ago: executing program 2 (id=242): syz_usb_connect$cdc_ncm(0x2, 0x76, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000020000202505a1854000010203010902640002010360090904000001020d00000824060001df9e2c052407"], 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) ioctl$int_in(r1, 0x5452, &(0x7f0000000080)=0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000600)=ANY=[@ANYBLOB="b4080000000000167311300000009763f2eaa8d9dba90000b7000000000000009500c2000000000095000012000000007c15f4645d9906e5bc4140f64fee9440b01237d5f58b314aa2aac24c87b879a8bc89a91a2a2ab3a43ddec595484fe1a23428e741a70e841848618b52b6ec1e7fdabf16a9df315fcc6150c78341e3b67f04b197b9183dd4dba6bb4bde6672cfc34b6b42d9b51daba216e2e86b5a447ffe07e846c38ebde0fea9771207"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x70) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2169802, 0x0, 0x0, 0x0, &(0x7f00000003c0)) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000c"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x18) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000200)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r6 = dup(r5) getcwd(&(0x7f00000006c0)=""/153, 0x99) write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x9}}, 0x18) write$FUSE_DIRENTPLUS(r6, &(0x7f0000002c00)=ANY=[@ANYBLOB="b0"], 0xb0) getresuid(&(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)=0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r6, @ANYBLOB=',privport,access=', @ANYRESDEC=r7]) utime(&(0x7f0000000340)='./file0\x00', 0x0) sendto$inet6(r1, 0x0, 0x0, 0x200008c5, &(0x7f0000000000)={0xa, 0x2, 0x2, @loopback, 0x4}, 0x1c) r8 = socket(0x10, 0x803, 0x0) getsockopt$packet_int(r8, 0x107, 0x12, &(0x7f0000000140), 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r8) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r8, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'ip6tnl0\x00', 0x0, 0x0, 0xff, 0x23, 0x3, 0x0, @loopback, @private1, 0x0, 0x1, 0xfffffffe}}) shutdown(r1, 0x1) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x3, &(0x7f0000000000), 0xbc, 0x55a, &(0x7f0000000900)="$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") syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)=ANY=[@ANYRES16=0x0, @ANYRES16], 0x0) 5.077585869s ago: executing program 1 (id=245): r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)='-6', 0x2}], 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet_udp(0x2, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000ac0)='kmem_cache_free\x00', r2}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vxcan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000340)={'vcan0\x00', 0x0}) r5 = socket$inet6(0xa, 0x2, 0x0) r6 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r6) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x437, 0x4, 0x0, {0x0, 0x0, 0x0, r7, 0x50483}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x9005}, 0x4000000) sendmmsg$inet(r5, &(0x7f0000000880)=[{{&(0x7f0000000580)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f00000006c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000380)={&(0x7f0000000480)={0x23c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [{{0x8}, {0x220, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xc01}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r3}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r4}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xe}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x800}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}]}}]}, 0x23c}, 0x1, 0x0, 0x0, 0x14}, 0x40002) socket$packet(0x11, 0x3, 0x300) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000a00)=ANY=[], 0x2, 0x5515, &(0x7f00000079c0)="$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") r8 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r1, &(0x7f00000003c0)="dc00fd6af39b51edaa078ee69d3273914a4ea4a291078c3bc6519ee57bf86276b31717fdf94da9eb8066599d686998f82e14dbb7ee9a9c726da85432d1f745aea419797580a5e3f25df5a62e0a529e5ba9a5bc782d883773808c79e2af790461ee19fd884c58f4c24138f89b2c9118bdffcb010451535ffd0b59a88697c28b9df66a6b303592bf29a12af5e01131509811f65670a88e00"/166, 0xa6) sendfile(r9, r8, 0x0, 0x3ffff) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) r10 = syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, 0x0}, 0x24040084) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000000)={0x2, 'veth1_macvtap\x00', {0x7}, 0x8}) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x16c0, 0x5e1, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x4, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x1000, 0xfb, 0x1, {0x22, 0x6}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0xfd}}}}}]}}]}}, 0x0) fcntl$getownex(r10, 0x10, &(0x7f0000000200)) 4.540724703s ago: executing program 4 (id=250): r0 = creat(&(0x7f0000000140)='./file0\x00', 0x2) close(r0) (async, rerun: 32) r1 = socket$inet_tcp(0x2, 0x1, 0x0) (rerun: 32) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000001200), 0x19, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 4.540323672s ago: executing program 4 (id=251): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) socket$inet_tcp(0x2, 0x1, 0x0) syz_emit_ethernet(0x98, &(0x7f00000005c0)={@remote, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2c}, @val={@val={0x88a8, 0x0, 0x0, 0x3}, {0x8100, 0x1, 0x1}}, {@llc_tr={0x11, {@snap={0x1, 0xaa, "97", "20ce52", 0xd, "7e3cae3a06ae772325e21e3aca4af89a226e808fccbe26e3be5e8768d8d37cd5eade2d25109b5b1e49495c23e5ade5ba3824dcb41ec2ecf321b10b8a7e9b4e663242088c27e36aa3bb1f62be6025915adc3b39114a3cf27a4c253ff4e607ba5c5bc2a252538b2233efe1bbcbbdc0b502ee3aa2fafac360d48b65"}}}}}, &(0x7f0000000240)={0x0, 0x4, [0x7a2, 0xff9, 0x1a7, 0x6b6]}) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r2, 0x0, 0x8008000000010, &(0x7f00000004c0)="17000000020001000003be8c5ee17688a20032000203000a0292000098fc5ad90a00bb6a880000d6c8db0000dba67e06020000e28900000200df018002000000fc0607bdff59100ac45761547a681f009cee4a5a2d8f89814bc6c252674f00c88ebb01005033bf79ac2dfc060115003901000000000000ea0000000000000800b59bd2b8e50ce5af649a702202ffff02dfccebf6ba000840024f0298e9e90554062a80e605007f71174aa951f3c63e5a1b47b6806323deb3", 0xb8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mkdir(0x0, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r1, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x8c001}, 0x4000054) 4.091858989s ago: executing program 0 (id=253): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f00000000c0)={0x28, 0x0, 0x0, @host}, 0x10) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000030000008500000084000000b7000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$packet(0x11, 0x3, 0x300) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='sched_switch\x00', r6}, 0x10) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000001100)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r4, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket(0x10, 0x803, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x400c0) getsockname$packet(r7, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000700)=0x14) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=r9, @ANYBLOB="0000000000006e6c00001800028014000300ff02000000000000000000000000000100000000000000000000000000151456dc884986b80018aabdbe225e"], 0x48}}, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x2, 0x0, 0x3, 0xfffffffffffffffd, 0x3, 0x0, 0x0, 0xe}, 0x0, &(0x7f0000000300)={0x3ff, 0x7e7, 0x100000000000000, 0x9, 0x4, 0x0, 0x7fffffff, 0x3f8}, 0x0, 0x0) 3.872511786s ago: executing program 2 (id=254): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00'}, 0x18) (async) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040), 0x4) (async) ioctl$TIOCCONS(0xffffffffffffffff, 0x541d) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async) r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0a00000016000000b40000007f"], 0x48) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r4}, &(0x7f0000000080), &(0x7f0000000180)=r5}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10) r7 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r7, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) (async, rerun: 64) sendmsg$tipc(r7, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, &(0x7f0000000480)=[{&(0x7f0000000180)="f7", 0x101d0}], 0x1}, 0x0) (async, rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRES32=r3, @ANYBLOB="00000000000000006100000000000000180000000000000000000000000000009500000000000000b50a00000000000095000000000000001315c1"], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x0, 0x0, '\x00', 0x0, 0x900}, 0x21) 3.792856593s ago: executing program 3 (id=255): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000010000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000840)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(0x0, r4, 0x0) fchown(r3, r4, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) read$hiddev(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="0213000002"], 0x10}}, 0x0) 3.778891685s ago: executing program 3 (id=256): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000a40), 0x0}, 0x20) syncfs(0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x20044e, &(0x7f0000000300)={[{@auto_da_alloc_val}, {@test_dummy_encryption_v1}, {@init_itable_val={'init_itable', 0x3d, 0x5c}}, {@noblock_validity}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6}}]}, 0x3, 0x45c, &(0x7f00000003c0)="$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") openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0xe501, 0x3, 0x2a8, 0x138, 0x6affffff, 0x3403000b, 0x0, 0x7, 0x210, 0x230, 0x230, 0x210, 0x223, 0x3, 0x0, {[{{@ip={@remote, @local, 0x0, 0x29, 'veth1_macvtap\x00', 'veth1_to_team\x00'}, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x7f510100, 0x4, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@time={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308) 3.656505424s ago: executing program 2 (id=257): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x8, 0x3, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400000}, 0x94) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f0000008500000005"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x42}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r5, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000001b40), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x47, 0x0}}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r1, r3, 0x1, 0x0, @val=@perf_event}, 0x18) ppoll(&(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)={0x3c, r7, 0x801, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x28, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000005}, 0x8000) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f00000004c0)={0x84, r7, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}]}, @TIPC_NLA_NODE={0x5c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x43, 0x4, {'gcm(aes)\x00', 0x1b, "113c5da66a34c6f28dfea4fdfe3a2b6d8c16caa5292a5277705145"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x880}, 0xc811) r8 = socket(0x8000000010, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r9 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x109301) ioctl$USBDEVFS_DISCSIGNAL(r9, 0x8010550e, 0x0) write(r8, &(0x7f00000002c0)="fc0000001c000704ab5b2509b86803000aab087a0400000001481193210001c0f0030584050060100000000000039815fa2c53c28648000000b9d95662537a00bc000c00f0ff7f0000b400600033d44000040560916a0033f436313012dafd5a32e273fc83ab82d710f74cec184406f90d435ef8b29d3ef3d92c94170e5bba2e177312e081bea05d3a021e8ca062914a46ccfc510bb73c9455cdc8363ae4f5df77bc4cfd6239ec2a0f0d1bcae5fa0f5f9dcdd51af51af8502943283f4bb102b2b8f5566791cf190201ded815b2ccd243f395ed94e0ad91bd6433802e0784f2013cd1890058a10000c880ac801fe4af000049f0d4796f0000090548de", 0xfc) 3.628456246s ago: executing program 4 (id=258): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x18) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) 3.625844567s ago: executing program 4 (id=259): r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r0, &(0x7f00000003c0)={'#! ', './file0'}, 0xb) close(r0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f00000001c0)=@name={0x1e, 0x2, 0x0, {{0x42}, 0x3}}, 0x10) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) execve(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) 2.987642458s ago: executing program 0 (id=260): inotify_add_watch(0xffffffffffffffff, &(0x7f0000000200)='.\x00', 0x10000a0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0xfffffffc, 0x0, 0x0, 0x41100}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x3, 0x8, 0x8}, 0x48) (fail_nth: 7) 2.709490931s ago: executing program 4 (id=261): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='kfree\x00', r0}, 0x10) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r1, 0x0, 0x4, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newsa={0x158, 0x10, 0x413, 0x0, 0x0, {{@in=@multicast1, @in6=@empty, 0x0, 0x0, 0x4e24, 0x0, 0x2, 0x0, 0x20, 0x0, 0x0, 0xee00}, {@in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x4d4, 0x32}, @in=@dev, {0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x20000000008}, {0x0, 0x8, 0xcc}, {0xf6}, 0x70bd2c, 0x0, 0xa, 0x1, 0x1}, [@algo_aead={0x67, 0x12, {{'rfc4309(ccm(aes))\x00'}, 0xd8, 0x80, "bed40c8022674b0ecf0153d786cfc67c1aa8a9bb2222a0c819cdef"}}]}, 0x158}, 0x1, 0x0, 0x100000000000000}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0x20000000000000ee, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b7040000000000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r4}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00'}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r5, &(0x7f0000000180), 0x40010) 2.585687341s ago: executing program 2 (id=262): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0xc044) r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) statx(r3, &(0x7f00000001c0)='./cgroup/../file0\x00', 0x0, 0x8, &(0x7f0000000340)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={0x0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffc4, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00'}, 0x10) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0105500, &(0x7f0000000140)={0x80, 0x6, 0x303, 0xfffd, 0x13, 0x0, 0x0}) bind$netlink(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) syz_clone(0x41200100, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) 2.585010851s ago: executing program 4 (id=263): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r0, 0x58}, 0x10) bpf$ENABLE_STATS(0x20, &(0x7f0000000240), 0x4) socket$nl_audit(0x10, 0x3, 0x9) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000002000000000000000700000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b000000b7000000000000009500"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) getpid() sched_setaffinity(0x0, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x11c0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x42140, 0x12) open(&(0x7f0000000000)='./file0\x00', 0x800, 0x194) add_key$user(0x0, &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff9) timer_create(0x0, &(0x7f0000000180)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x44401, 0x0) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000000, 0x110, 0xffffffffffffffff, 0xfffff000) sched_setaffinity(0x0, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000001180)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d8, 0x0, 0x4c, 0x1a, 0x0, 0x73, 0x278, 0x258, 0x258, 0x278, 0x258, 0x3, 0x0, {[{{@ipv6={@private0, @local, [0x0, 0x0, 0xffffff00], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x73, 0x0, 0x1}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x23, 0x3, 0x2, 0x3, 'syz1\x00', 'syz0\x00', {0x2}}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{'\x00', 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x5400}}, {0x28}}}}, 0x338) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) sched_setscheduler(0x0, 0x1, 0x0) 2.576641192s ago: executing program 1 (id=264): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x10) r1 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='gre0\x00', 0x10) sendmmsg$inet(r1, &(0x7f0000000440)=[{{&(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001980)=[{&(0x7f0000000200)="a90500040000746400009e150451160200000064", 0x14}], 0x1}}], 0x1, 0x4004040) (fail_nth: 2) 2.013541428s ago: executing program 3 (id=265): r0 = socket(0x10, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000003c0)={'vlan1\x00', &(0x7f0000000340)=@ethtool_link_settings={0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000e40)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000040000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) readahead(0xffffffffffffffff, 0x8000000000000000, 0x6) 1.722640861s ago: executing program 3 (id=266): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x1800700, &(0x7f0000000200)={[{@usrjquota}, {@journal_dev={'journal_dev', 0x3d, 0x8000}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@minixdf}, {@resgid}, {@grpquota}, {@usrjquota}, {@journal_dev={'journal_dev', 0x3d, 0xdcc}}]}, 0x3, 0x44a, &(0x7f0000000400)="$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") syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2008042, &(0x7f00000000c0), 0x1, 0x571, &(0x7f0000000780)="$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") bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x3, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x1, 0x9}}, @fwd={0xc}]}, {0x0, [0x2e]}}, &(0x7f0000001c40)=""/4096, 0x3f, 0x1000, 0x1, 0x8, 0x10000}, 0x28) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x3, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x1, 0x9}}, @fwd={0xc}]}, {0x0, [0x2e]}}, &(0x7f0000001c40)=""/4096, 0x3f, 0x1000, 0x1, 0x8, 0x10000}, 0x28) mkdir(&(0x7f0000000080)='./bus\x00', 0x3) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x2008002, &(0x7f0000000140)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4}}, {@noblock_validity}, {@quota}]}, 0x1, 0x564, &(0x7f0000000c00)="$eJzs3c9vHFcdAPDvjH82SesEeoAKSIBCQFF2400bVb20XECoqoSoOCAOqbE3lsluNmTXpTaRcP8GkEDiBH8CByQOSD1xgBNHJA6AKAekAhEoRuph0MyO7Y29Jou93iXez0eazI83M9/3djPz3r5dzwtgYl2KiK2ImI2INyNiodyelFO82p3y/R4+uL+8/eD+chJZ9sbfkyI93xY9x+TOluecj4ivfinim8nBuO2NzdtLjUb9Xrle7TTvVtsbm1fXmkur9dX6nVrtxuKNay9df7E2tLJebP7s/S+uvfa1X/7i4+/9duvz382zda5M6y3HMHWLPrMbJzcdEa+dRLAxmCrns2POB0eTRsSHIuJTxfW/EFPF/04A4DTLsoXIFnrXAYDTLi36wJK0EhFpWjYCKt0+vGfjTNpotTtXbrXW76x0+8rOx0x6a61Rv3Zh7vffLnaeSfL1xSKtSC/Wa/vWr0fEhYj4wdxTxXpludVYGU+TBwAm3tne+j8i/jWXppXKQIf2+VYPAHhizI87AwDAyKn/AWDyqP8BYPIMUP+XX/ZvnXheAIDR8PkfACaP+h8AJo/6HwAmyldefz2fsu3y+dcrb22s3269dXWl3r5daa4vV5Zb9+5WVlut1eKZPc3Hna/Rat1dfCHW36526u1Otb2xebPZWr/TuVk81/tmfWYkpQIA/psLF9/9XRIRWy8/VUzRM5aDuhpOt3SIewFPlqnjHKyBAE80o33B5BqoCi8aCb8+8bwA49H3Yd7zfRcf9aP/IYjfGcH/lcsfHbz/3xjPcLrs69n/IBtXRoCRO1r//ytDzwcwekfu///jcPMBjF6WJfvH/J/dTQIATqVj/IQv+96wGiHAWD1uMO+hfP8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAp8y5iPhWJGmlGAs8zf9NK5WIpyPifMwkt9Ya9WsR8UxcjIiZuXx9cdyZBgCOKf1rUo7/dXnh+XP7U2eTf88V84j4zo/f+OHbS53OvcV8+z92t8/tDB9W2zvuGOMKAgCD+/MgOxX1d62c93yQf/jg/vLOdIJ5POD9L+wOPrq8/eB+MXVTpiPLsixivmhLnPlnEtPlMfMR8VxETA0h/tY7EfGRfuVPir6R8+XIp73xo4z99Ejjp4/ET4u07jx/+T48hLzApHk3v/+82u/6S+NSMe9//c8Xd6jjK+5/8xE7977tnvjTZaSpPvHza/7SoDFe+NWXD2zMFrpp70Q8N90vfrIbPzkk/vMDxv/Dxz7x/VcOSct+EnE5+sfvjVXtNO9W2xubV9eaS6v11fqdWu3G4o1rL11/sVYt+qirOz3VB/3t5SvPHJa3vPxnDonffefP7iv/7O6xnxmw/D/94M1vfHJvdW5//M99uv/7/2wRsf/rn9eJnx0w/tKZnx86fHcef+WQ8j/u/b8yYPz3/rK5MuCuAMAItDc2by81GvV7x1rIP4UO4zwHFvIsDrbzTnPxeEH/FMXC3suSRBJHPuFM/6S8MTbQ4Sf1qp74wvRuW3G4Z/56fsYRFycdeimOshDny4WHowo6vnsSMBp7F31E/GbcuQEAAAAAAAAAAAAAAPoZxd8wjbuMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnF7/CQAA///bV8Ru") syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4800, 0x0, 0x0, 0x0, &(0x7f0000000240)) (async) syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4800, 0x0, 0x0, 0x0, &(0x7f0000000240)) mkdir(&(0x7f0000001c00)='./file0\x00', 0x0) syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4800, 0x0, 0x0, 0x0, &(0x7f0000000000)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18080000000000000000000000000002850000000f000000850000002a000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18080000000000000000000000000002850000000f000000850000002a000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100), 0x2, 0x500, &(0x7f0000000500)="$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") link(0x0, 0x0) (async) link(0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x4) r1 = socket(0x1, 0x5, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000500)={0xe000200c}) (async) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000500)={0xe000200c}) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r1, &(0x7f00000001c0)={0x80000002}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x10000, 0x0) ioctl$TUNSETFILTEREBPF(r2, 0x800454e1, &(0x7f0000001180)=r0) sendto$packet(r1, &(0x7f00000001c0)="e473f35c82a418a31c89f3474519d0d6943dc2d4a80eefde48a35b71496ad2e108a096e29468e67e5f372cff38a86148a3f1e4fe46481db5ac623362ebcb9023b64007704234af7cef23e4cba9824c8f3827531c7961c3a266bb4f2660231d0af577bae67fd279d8fa0e9b594f102a93e18b134cb0eeb7c75e2d9046fc6be262ee1754dd8ec9605cc41d1a453599f5d4f4b7d8d5136b0ed8dc5bdaafc814ff7ce01721188d9791ad6e4921401e94cdc39b3b6c0461c37a5eff8f12d990e617f3863a9ab02561d4afbbadeefc", 0xcc, 0x80, &(0x7f00000002c0)={0x11, 0xe, 0x0, 0x1, 0x7, 0x6, @broadcast}, 0x14) (async) sendto$packet(r1, &(0x7f00000001c0)="e473f35c82a418a31c89f3474519d0d6943dc2d4a80eefde48a35b71496ad2e108a096e29468e67e5f372cff38a86148a3f1e4fe46481db5ac623362ebcb9023b64007704234af7cef23e4cba9824c8f3827531c7961c3a266bb4f2660231d0af577bae67fd279d8fa0e9b594f102a93e18b134cb0eeb7c75e2d9046fc6be262ee1754dd8ec9605cc41d1a453599f5d4f4b7d8d5136b0ed8dc5bdaafc814ff7ce01721188d9791ad6e4921401e94cdc39b3b6c0461c37a5eff8f12d990e617f3863a9ab02561d4afbbadeefc", 0xcc, 0x80, &(0x7f00000002c0)={0x11, 0xe, 0x0, 0x1, 0x7, 0x6, @broadcast}, 0x14) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) 1.657595946s ago: executing program 0 (id=267): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r0 = getpid() (async) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ff0000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x91c61f3baa7148e9, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000380)='objagg_obj_create\x00', r1, 0x0, 0x7ff8}, 0x18) (async) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000e40)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c0, 0x0, 0x18c, 0x203, 0x8000000, 0x19030000, 0x3f0, 0x2e0, 0x2e0, 0x3f0, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x300, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0xf00}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xe}, {}, {0x0, 0x0, 0x3}, {0x2}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0x16}, {}, {}, {0x7}, {}, {0x0, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {}, {}, {0xfffe}, {}, {}, {}, {0x0, 0xfd}, {}, {0x7a04}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb84, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) (async) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000080)='sys_enter\x00', r3}, 0x10) (async) set_robust_list(&(0x7f0000000540)={0x0, 0x3}, 0x18) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) (async) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r4, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="16000000194b7a06f5769d659448b6ca78f1308104000000df7f00000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\b\x00'/28], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x1a, &(0x7f0000000b00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@call={0x85, 0x0, 0x0, 0xab}, @map_val={0x18, 0x5, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @map_val={0x18, 0x4, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0x1}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x1}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000240)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = dup2(r7, r6) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000440)={'\x00', 0x1, 0xfffffffb, 0xffff, 0x1, 0x4, r0}) ioctl$BINDER_FREEZE(r8, 0x400c620e, &(0x7f0000000540)={r9, 0x0, 0x200}) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r8}, 0x10) (async) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f00000003c0)={'\x00', 0x2, 0x3, 0x8, 0x6, 0xffffffffffff84ad, r0}) (async) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff85000000040000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r10}, 0x10) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a40)=@bpf_tracing={0x1a, 0x1c, &(0x7f0000000880)=@framed={{0x18, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x5e6}, [@call={0x85, 0x0, 0x0, 0x4e}, @exit, @exit, @cb_func={0x18, 0xb, 0x4, 0x0, 0xffffffffffffffff}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x109}}, @map_idx={0x18, 0x9, 0x5, 0x0, 0x6}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r6}}]}, &(0x7f0000000600)='GPL\x00', 0x8, 0x1000, &(0x7f0000001380)=""/4096, 0x41100, 0x46, '\x00', 0x0, 0x1c, r8, 0x8, &(0x7f0000000640)={0x3, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x1d8a, 0xffffffffffffffff, 0x1, &(0x7f0000000740)=[r6, 0xffffffffffffffff, r6, r8, r8, 0xffffffffffffffff, r8], &(0x7f0000000780)=[{0x4, 0x5, 0x3, 0xc}], 0x10, 0x5}, 0x94) (async) socket$pppl2tp(0x18, 0x1, 0x1) 1.654716506s ago: executing program 2 (id=268): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000072000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001b40)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) setitimer(0xa58a0961c1939a9e, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x256c, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000000)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000480)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3445}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000200)={0x24, 0x0, &(0x7f00000004c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000000c0)={0x24, 0x0, &(0x7f0000000180)={0x0, 0x3, 0xb4, @lang_id={0x0, 0x3, 0xc2b}}, 0x0, 0x0}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000380)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0x0, 0x0, 0x1}}}}}}, 0x0) 1.646304917s ago: executing program 1 (id=269): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x8f, &(0x7f00000002c0)=""/143}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) capset(0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r3, 0x0, 0x0}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b708000002001e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000d00)='sched_switch\x00', r8}, 0x10) syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301) socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r9, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) connect$pppl2tp(r1, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r9, 0x8, 0x0, 0x10, 0x0, {0xa, 0x4e20, 0x0, @loopback}}}, 0x32) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34060}], 0x1) 1.564665894s ago: executing program 0 (id=270): socket$inet6_udp(0xa, 0x2, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x80ff, 0x36) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) lseek(0xffffffffffffffff, 0x9, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (fail_nth: 5) 802.275205ms ago: executing program 0 (id=271): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002ac0)={0x1a, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000003f64ecb21ed7d74b542e43ae9f57f61af1c5b6016901992307df92d7c26b05a7da0582d208fd1f57c41cee38c7023e71dc864ab49f7894dd5ee29721d0625ee50c8aeca9b5090d85ff1c5df40229f0981507171aec7dc97abd981893d51a27e8a1033fa344fa3c6c27705648a66a47e0a1bc8fcede095704453c77f6c5370191ab55c423aae05729e69c987cf5f9aa2fd88c9e2114f53b9f82157c197397e43647b083db79f1f2"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x20c9}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000440)={0x0, r3}, 0x10) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x26e1, 0x0) close(r4) write$cgroup_devices(r4, 0x0, 0xa) ioctl$TCSETS(r4, 0x5402, &(0x7f0000000040)={0x4, 0x8001, 0x1ff, 0x4, 0x6, "eed02ae9d230502a2c723d3cd4762aeb63d165"}) 616.09093ms ago: executing program 0 (id=272): r0 = socket$igmp(0x2, 0x3, 0x2) sendto$inet(r0, 0x0, 0x0, 0x40804, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="07e23d730cb014f71e5a17030bea780000000283000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='lp\x00', 0x3) 441.031065ms ago: executing program 1 (id=273): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x8, 0x3, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400000}, 0x94) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f0000008500000005"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x42}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r5, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000001b40), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x47, 0x0}}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r1, r3, 0x1, 0x0, @val=@perf_event}, 0x18) ppoll(&(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)={0x3c, r7, 0x801, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x28, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000005}, 0x8000) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f00000004c0)={0x84, r7, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}]}, @TIPC_NLA_NODE={0x5c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x43, 0x4, {'gcm(aes)\x00', 0x1b, "113c5da66a34c6f28dfea4fdfe3a2b6d8c16caa5292a5277705145"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x880}, 0xc811) r8 = socket(0x8000000010, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r9 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x109301) ioctl$USBDEVFS_DISCSIGNAL(r9, 0x8010550e, 0x0) write(r8, &(0x7f00000002c0)="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", 0xfc) 0s ago: executing program 3 (id=274): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') read$FUSE(r0, &(0x7f0000000980)={0x2020}, 0x2020) openat$cgroup_ro(r0, &(0x7f0000000000)='blkio.bfq.io_serviced\x00', 0x275a, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.242' (ED25519) to the list of known hosts. [ 23.752719][ T24] audit: type=1400 audit(1754561116.550:64): avc: denied { mounton } for pid=267 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 23.754067][ T267] cgroup: Unknown subsys name 'net' [ 23.775396][ T24] audit: type=1400 audit(1754561116.550:65): avc: denied { mount } for pid=267 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 23.802761][ T24] audit: type=1400 audit(1754561116.580:66): avc: denied { unmount } for pid=267 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 23.802983][ T267] cgroup: Unknown subsys name 'devices' [ 24.007916][ T267] cgroup: Unknown subsys name 'hugetlb' [ 24.013516][ T267] cgroup: Unknown subsys name 'rlimit' [ 24.184950][ T24] audit: type=1400 audit(1754561116.980:67): avc: denied { setattr } for pid=267 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 24.208151][ T24] audit: type=1400 audit(1754561116.980:68): avc: denied { mounton } for pid=267 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 24.225031][ T269] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 24.232878][ T24] audit: type=1400 audit(1754561116.980:69): avc: denied { mount } for pid=267 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 24.264576][ T24] audit: type=1400 audit(1754561117.040:70): avc: denied { relabelto } for pid=269 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.290103][ T24] audit: type=1400 audit(1754561117.040:71): avc: denied { write } for pid=269 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.290126][ T267] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 24.315679][ T24] audit: type=1400 audit(1754561117.070:72): avc: denied { read } for pid=267 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.315697][ T24] audit: type=1400 audit(1754561117.070:73): avc: denied { open } for pid=267 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 25.964460][ T275] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.971544][ T275] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.979013][ T275] device bridge_slave_0 entered promiscuous mode [ 25.994094][ T275] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.001175][ T275] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.008632][ T275] device bridge_slave_1 entered promiscuous mode [ 26.033500][ T276] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.040675][ T276] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.048139][ T276] device bridge_slave_0 entered promiscuous mode [ 26.055028][ T276] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.062126][ T276] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.069646][ T276] device bridge_slave_1 entered promiscuous mode [ 26.157922][ T279] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.164983][ T279] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.172417][ T279] device bridge_slave_0 entered promiscuous mode [ 26.180773][ T277] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.187859][ T277] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.195168][ T277] device bridge_slave_0 entered promiscuous mode [ 26.202347][ T277] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.209415][ T277] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.216853][ T277] device bridge_slave_1 entered promiscuous mode [ 26.223452][ T279] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.230772][ T279] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.238190][ T279] device bridge_slave_1 entered promiscuous mode [ 26.270188][ T276] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.277262][ T276] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.284514][ T276] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.291607][ T276] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.299635][ T278] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.306747][ T278] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.314094][ T278] device bridge_slave_0 entered promiscuous mode [ 26.323002][ T278] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.330095][ T278] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.337594][ T278] device bridge_slave_1 entered promiscuous mode [ 26.352421][ T275] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.359635][ T275] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.366915][ T275] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.373947][ T275] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.469874][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.477382][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.484525][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 26.492379][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.499778][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.527827][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 26.536123][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.543171][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.553091][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 26.561133][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 26.579094][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 26.587497][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.594510][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.604806][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 26.618769][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 26.627105][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.634137][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.642919][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 26.651321][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.658385][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.687289][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 26.694904][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 26.702770][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 26.710922][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 26.720070][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.727126][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.734535][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 26.742740][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.749802][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.757163][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 26.765316][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.772384][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.779858][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 26.787562][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 26.807603][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 26.816988][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 26.825113][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.832162][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.840622][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 26.870256][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 26.878671][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 26.886306][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 26.894386][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 26.902589][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 26.910741][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 26.919116][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 26.926568][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 26.934473][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 26.942555][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 26.950958][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.958019][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.965421][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 26.973615][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.980665][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.988214][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 26.996466][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 27.009220][ T276] device veth0_vlan entered promiscuous mode [ 27.018456][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 27.026966][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 27.034920][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 27.043402][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 27.054549][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 27.063156][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 27.080641][ T278] device veth0_vlan entered promiscuous mode [ 27.093773][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 27.102397][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 27.111383][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 27.119561][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 27.127708][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 27.136193][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 27.144463][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 27.152482][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 27.160715][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 27.168327][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 27.175736][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 27.183365][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 27.194934][ T275] device veth0_vlan entered promiscuous mode [ 27.202343][ T279] device veth0_vlan entered promiscuous mode [ 27.211698][ T278] device veth1_macvtap entered promiscuous mode [ 27.218477][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 27.226528][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 27.234487][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 27.242894][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 27.251230][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 27.258990][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 27.267084][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 27.275068][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 27.282796][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 27.290317][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 27.297903][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 27.305854][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 27.314097][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 27.326628][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 27.334806][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 27.343281][ T277] device veth0_vlan entered promiscuous mode [ 27.352892][ T279] device veth1_macvtap entered promiscuous mode [ 27.360797][ T276] device veth1_macvtap entered promiscuous mode [ 27.372153][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 27.380249][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 27.388211][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 27.397273][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 27.411029][ T277] device veth1_macvtap entered promiscuous mode [ 27.423182][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 27.431523][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 27.440217][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 27.449145][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 27.458204][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 27.465844][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 27.474221][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 27.482720][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 27.491035][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 27.499336][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 27.507806][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 27.516282][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 27.524498][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 27.535260][ T275] device veth1_macvtap entered promiscuous mode [ 27.545018][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 27.553319][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 27.561739][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 27.569414][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 27.577684][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 27.598026][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 27.606374][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 27.631626][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 27.632094][ T276] request_module fs-gadgetfs succeeded, but still no fs? [ 27.648645][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 27.657101][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 27.665269][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 27.682152][ T278] cgroup: cgroup: disabling cgroup2 socket matching due to net_prio or net_cls activation [ 27.707322][ T300] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 27.907616][ T306] ====================================================== [ 27.907616][ T306] WARNING: the mand mount option is being deprecated and [ 27.907616][ T306] will be removed in v5.15! [ 27.907616][ T306] ====================================================== [ 27.956497][ T315] blk_update_request: I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 27.971381][ T315] FAT-fs (loop5): unable to read boot sector [ 27.995418][ T306] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 28.004654][ T306] ext4 filesystem being mounted at /0/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 28.112526][ T329] EXT4-fs (loop2): Test dummy encryption mode enabled [ 28.113564][ T324] process 'syz.1.8' launched '/dev/fd/15' with NULL argv: empty string added [ 28.119987][ T329] EXT4-fs (loop2): Test dummy encryption mode enabled [ 28.235997][ T25] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 28.304239][ T329] EXT4-fs (loop2): mounted filesystem without journal. Opts: nombcache,barrier=0x00000000000003ff,acl,stripe=0x0000000000000009,norecovery,test_dummy_encryption,max_batch_time=0x0000000000000000,test_dummy_encryption,,errors=continue [ 28.430864][ T329] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 28.574981][ T340] fuse: Bad value for 'rootmode' [ 28.803035][ T340] input: syz1 as /devices/virtual/input/input4 [ 28.810861][ T24] kauditd_printk_skb: 134 callbacks suppressed [ 28.810874][ T24] audit: type=1400 audit(1754561121.370:208): avc: denied { read write } for pid=334 comm="syz.1.10" name="fuse" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 28.841596][ T25] usb 5-1: Using ep0 maxpacket: 16 [ 28.864072][ T24] audit: type=1400 audit(1754561121.370:209): avc: denied { open } for pid=334 comm="syz.1.10" path="/dev/fuse" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 28.905678][ T344] tipc: Trying to set illegal importance in message [ 28.923233][ T24] audit: type=1400 audit(1754561121.380:210): avc: denied { read write } for pid=334 comm="syz.1.10" name="uinput" dev="devtmpfs" ino=257 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 28.936544][ T345] tipc: Trying to set illegal importance in message [ 28.956203][ T24] audit: type=1400 audit(1754561121.380:211): avc: denied { open } for pid=334 comm="syz.1.10" path="/dev/uinput" dev="devtmpfs" ino=257 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 28.980131][ T24] audit: type=1400 audit(1754561121.390:212): avc: denied { ioctl } for pid=334 comm="syz.1.10" path="/dev/uinput" dev="devtmpfs" ino=257 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 29.005315][ T24] audit: type=1400 audit(1754561121.700:213): avc: denied { setopt } for pid=343 comm="syz.0.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 29.028305][ T25] usb 5-1: too many endpoints for config 0 interface 0 altsetting 4: 65, using maximum allowed: 30 [ 29.043050][ T351] fuse: Bad value for 'fd' [ 29.043428][ T24] audit: type=1400 audit(1754561121.720:214): avc: denied { name_bind } for pid=346 comm="syz.1.13" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 29.068998][ T25] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 29.089634][ T25] usb 5-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 65 [ 29.093893][ T24] audit: type=1400 audit(1754561121.720:215): avc: denied { node_bind } for pid=346 comm="syz.1.13" saddr=224.0.0.1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 29.132075][ T25] usb 5-1: config 0 interface 0 has no altsetting 0 [ 29.144514][ T25] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 29.168085][ T24] audit: type=1326 audit(1754561121.750:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=346 comm="syz.1.13" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f618fecabe9 code=0x7ffc0000 [ 29.191150][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 29.201675][ T24] audit: type=1326 audit(1754561121.750:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=346 comm="syz.1.13" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f618fecabe9 code=0x7ffc0000 [ 29.202319][ T25] usb 5-1: config 0 descriptor?? [ 29.315792][ T361] fuse: Bad value for 'group_id' [ 29.345456][ T367] netlink: 12 bytes leftover after parsing attributes in process `syz.1.18'. [ 29.356051][ T365] fuse: Bad value for 'group_id' [ 29.812434][ T25] kone 0003:1E7D:2CED.0001: unknown main item tag 0x0 [ 29.870130][ T25] kone 0003:1E7D:2CED.0001: unknown main item tag 0x0 [ 29.962930][ T25] kone 0003:1E7D:2CED.0001: unknown main item tag 0x0 [ 30.006049][ T25] kone 0003:1E7D:2CED.0001: unknown main item tag 0x0 [ 30.044551][ T25] kone 0003:1E7D:2CED.0001: unknown main item tag 0x0 [ 30.064965][ T25] kone 0003:1E7D:2CED.0001: hidraw0: USB HID v0.02 Device [HID 1e7d:2ced] on usb-dummy_hcd.4-1/input0 [ 30.097824][ T25] usb 5-1: USB disconnect, device number 2 [ 30.135374][ T393] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 30.186704][ T395] fido_id[395]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 30.204739][ T393] EXT4-fs error (device loop3): mb_free_blocks:1524: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 30.226299][ T393] EXT4-fs (loop3): 1 truncate cleaned up [ 30.232053][ T393] EXT4-fs (loop3): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000001,nolazytime,nombcache,,errors=continue [ 30.429979][ T402] fuse: Bad value for 'fd' [ 30.563842][ T410] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:476: comm syz.1.31: Invalid block bitmap block 0 in block_group 0 [ 30.580181][ T410] EXT4-fs error (device loop1): ext4_acquire_dquot:6226: comm syz.1.31: Failed to acquire dquot type 0 [ 30.591892][ T410] EXT4-fs error (device loop1): ext4_free_blocks:5685: comm syz.1.31: Freeing blocks not in datazone - block = 0, count = 4096 [ 30.605415][ T410] EXT4-fs error (device loop1): ext4_read_inode_bitmap:140: comm syz.1.31: Invalid inode bitmap blk 0 in block_group 0 [ 30.608765][ T296] EXT4-fs error (device loop1): ext4_release_dquot:6262: comm kworker/u4:3: Failed to release dquot type 0 [ 30.618695][ T410] EXT4-fs error (device loop1) in ext4_free_inode:360: Corrupt filesystem [ 30.639587][ T401] F2FS-fs (loop2): Fix alignment : done, start(4096) end(16896) block(12288) [ 30.661074][ T401] F2FS-fs (loop2): invalid crc value [ 30.671782][ T410] EXT4-fs (loop1): 1 orphan inode deleted [ 30.683848][ T410] EXT4-fs (loop1): mounted filesystem without journal. Opts: ; max_batch_time=0x0000000000000006,i_version,,errors=continue [ 30.698045][ T401] F2FS-fs (loop2): Found nat_bits in checkpoint [ 30.706504][ T20] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 30.758977][ T401] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 30.780349][ T429] netlink: 16 bytes leftover after parsing attributes in process `syz.3.38'. [ 30.831686][ T278] attempt to access beyond end of device [ 30.831686][ T278] loop2: rw=2049, want=45112, limit=40427 [ 31.106477][ T20] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 31.130536][ T20] usb 1-1: New USB device found, idVendor=04dd, idProduct=9032, bcdDevice=fd.0b [ 31.157352][ T20] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 31.187065][ T20] usb 1-1: config 0 descriptor?? [ 31.209127][ T446] fuse: Bad value for 'fd' [ 31.239078][ T20] usb 1-1: unsupported MDLM descriptors [ 31.332336][ T448] netlink: 44 bytes leftover after parsing attributes in process `syz.2.43'. [ 31.439225][ T53] usb 1-1: USB disconnect, device number 2 [ 31.986660][ T467] SELinux: failed to load policy [ 32.622674][ T481] tipc: Started in network mode [ 32.629390][ T481] tipc: Own node identity fe80000000000000000000000000001, cluster identity 4711 [ 32.639438][ T481] tipc: Enabled bearer , priority 10 [ 33.782663][ T326] tipc: 32-bit node address hash set to 100080fe [ 34.767968][ T495] F2FS-fs (loop3): Mismatch start address, segment0(0) cp_blkaddr(512) [ 34.802931][ T24] kauditd_printk_skb: 153 callbacks suppressed [ 34.802944][ T24] audit: type=1400 audit(1754561127.600:368): avc: denied { shutdown } for pid=517 comm="syz.4.68" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 34.832723][ T495] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 34.874574][ T495] F2FS-fs (loop3): Unrecognized mount option "fsyn_mode=strict" or missing value [ 34.905996][ T24] audit: type=1400 audit(1754561127.650:369): avc: denied { create } for pid=517 comm="syz.4.68" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 34.944218][ T24] audit: type=1400 audit(1754561127.650:370): avc: denied { write } for pid=517 comm="syz.4.68" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 34.963694][ T24] audit: type=1400 audit(1754561127.650:371): avc: denied { nlmsg_read } for pid=517 comm="syz.4.68" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 34.985247][ T24] audit: type=1400 audit(1754561127.740:372): avc: denied { connect } for pid=521 comm="syz.1.70" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 35.076324][ T24] audit: type=1400 audit(1754561127.880:373): avc: denied { read } for pid=525 comm="syz.4.73" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 35.102382][ T530] FAULT_INJECTION: forcing a failure. [ 35.102382][ T530] name failslab, interval 1, probability 0, space 0, times 1 [ 35.135351][ T24] audit: type=1400 audit(1754561127.900:374): avc: denied { open } for pid=527 comm="syz.1.74" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 35.159208][ T530] CPU: 0 PID: 530 Comm: syz.2.72 Not tainted 5.10.240-syzkaller-00225-g1154f779f3f3 #0 [ 35.168844][ T530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 35.178928][ T530] Call Trace: [ 35.182253][ T530] __dump_stack+0x21/0x24 [ 35.186608][ T530] dump_stack_lvl+0x169/0x1d8 [ 35.191312][ T530] ? thaw_kernel_threads+0x220/0x220 [ 35.196618][ T530] ? show_regs_print_info+0x18/0x18 [ 35.201824][ T530] ? __local_bh_enable_ip+0x53/0x80 [ 35.207073][ T530] ? release_sock+0x15b/0x1b0 [ 35.211770][ T530] dump_stack+0x15/0x1c [ 35.215951][ T530] should_fail+0x3c1/0x510 [ 35.220387][ T530] ? __alloc_skb+0x9e/0x520 [ 35.224911][ T530] __should_failslab+0xa4/0xe0 [ 35.229692][ T530] should_failslab+0x9/0x20 [ 35.234460][ T530] kmem_cache_alloc+0x3d/0x2e0 [ 35.239432][ T530] __alloc_skb+0x9e/0x520 [ 35.243802][ T530] ? netlink_autobind+0x155/0x190 [ 35.248926][ T530] netlink_sendmsg+0x5f6/0xb30 [ 35.253715][ T530] ? netlink_getsockopt+0x530/0x530 [ 35.258943][ T530] ? perf_callchain_kernel+0x516/0x5c0 [ 35.264417][ T530] ? security_socket_sendmsg+0x82/0xa0 [ 35.269903][ T530] ? netlink_getsockopt+0x530/0x530 [ 35.275133][ T530] ____sys_sendmsg+0x5a2/0x8c0 [ 35.279915][ T530] ? __sys_sendmsg_sock+0x40/0x40 [ 35.284959][ T530] ? import_iovec+0x7c/0xb0 [ 35.289574][ T530] ___sys_sendmsg+0x1f0/0x260 [ 35.294272][ T530] ? __sys_sendmsg+0x250/0x250 [ 35.299069][ T530] ? __fdget+0x1a1/0x230 [ 35.303327][ T530] __x64_sys_sendmsg+0x1e2/0x2a0 [ 35.308284][ T530] ? ___sys_sendmsg+0x260/0x260 [ 35.313169][ T530] ? syscall_trace_enter+0x108/0x170 [ 35.318471][ T530] do_syscall_64+0x31/0x40 [ 35.322905][ T530] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 35.328809][ T530] RIP: 0033:0x7f567824dbe9 [ 35.333241][ T530] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 35.352890][ T530] RSP: 002b:00007f5676cb6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 35.361324][ T530] RAX: ffffffffffffffda RBX: 00007f5678474fa0 RCX: 00007f567824dbe9 [ 35.369318][ T530] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 35.377307][ T530] RBP: 00007f5676cb6090 R08: 0000000000000000 R09: 0000000000000000 [ 35.385295][ T530] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 35.393280][ T530] R13: 00007f5678475038 R14: 00007f5678474fa0 R15: 00007fffe7f48bb8 [ 35.477801][ T24] audit: type=1400 audit(1754561128.280:375): avc: denied { write } for pid=533 comm="syz.2.75" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 35.503746][ T535] cgroup: syz.3.62 (535) created nested cgroup for controller "memory" which has incomplete hierarchy support. Nested cgroups may change behavior in the future. [ 35.526551][ T24] audit: type=1400 audit(1754561128.300:376): avc: denied { mounton } for pid=533 comm="syz.2.75" path="/14/file0" dev="tmpfs" ino=94 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 35.576304][ T535] cgroup: "memory" requires setting use_hierarchy to 1 on the root [ 35.585936][ T538] kernel read not supported for file /policy (pid: 538 comm: syz.0.76) [ 35.586259][ T24] audit: type=1400 audit(1754561128.350:377): avc: denied { setopt } for pid=533 comm="syz.2.75" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 36.016046][ T514] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 36.116075][ T326] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 36.142969][ T549] device bridge_slave_1 left promiscuous mode [ 36.149211][ T549] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.157148][ T549] device bridge_slave_0 left promiscuous mode [ 36.163443][ T549] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.245694][ T552] netlink: 16 bytes leftover after parsing attributes in process `syz.4.80'. [ 36.397472][ T554] loop4: p1 < > p3 p4 < > [ 36.403312][ T554] loop4: p3 start 4284289 is beyond EOD, truncated [ 36.416062][ T514] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 36.426465][ T514] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 36.476104][ T326] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 36.493010][ T326] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 36.576340][ T308] udevd[308]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 36.578038][ T322] udevd[322]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 36.586264][ T326] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 36.596347][ T514] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 36.617780][ T514] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.618159][ T326] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 36.626917][ T514] usb 4-1: Product: syz [ 36.638465][ T514] usb 4-1: Manufacturer: syz [ 36.643101][ T514] usb 4-1: SerialNumber: syz [ 36.653854][ T326] usb 3-1: SerialNumber: syz [ 36.763167][ T514] usb 4-1: can't set config #1, error -71 [ 37.080222][ T514] usb 4-1: USB disconnect, device number 2 [ 37.096915][ T326] usb 3-1: 0:2 : does not exist [ 37.110693][ T326] usb 3-1: USB disconnect, device number 2 [ 37.134427][ T568] fuse: Bad value for 'group_id' [ 37.226066][ T25] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 37.316782][ T322] udevd[322]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 37.656077][ T25] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 37.667294][ T25] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 37.723551][ T589] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=34324 sclass=netlink_tcpdiag_socket pid=589 comm=syz.3.92 [ 37.766653][ T593] syz.3.94 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 37.836136][ T25] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 37.845334][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 37.853421][ T25] usb 1-1: Product: syz [ 37.857762][ T25] usb 1-1: Manufacturer: syz [ 37.862349][ T25] usb 1-1: SerialNumber: syz [ 37.906696][ T25] cdc_mbim 1-1:1.0: skipping garbage [ 38.106739][ T559] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 38.896218][ T559] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 38.901994][ T628] syz.2.105[628] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 38.903320][ T628] syz.2.105[628] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 38.917141][ T25] cdc_mbim 1-1:1.0: cdc-wdm0: USB WDM device [ 38.937363][ T25] cdc_mbim 1-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.0-1, CDC MBIM, 26:68:91:4b:20:53 [ 38.941484][ T628] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 38.972553][ T628] EXT4-fs (loop2): Test dummy encryption mode enabled [ 38.979984][ T628] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 38.987541][ T628] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 38.998965][ T628] EXT4-fs (loop2): 1 truncate cleaned up [ 39.004851][ T628] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,mblk_io_submit,inlinecrypt,test_dummy_encryption=v1,barrier,mblk_io_submit,nogrpid, [ 39.126190][ T472] usb 1-1: USB disconnect, device number 3 [ 39.151884][ T134] 8021q: adding VLAN 0 to HW filter on device wwan0 [ 39.191671][ T472] cdc_mbim 1-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.0-1, CDC MBIM [ 39.261098][ T278] EXT4-fs error (device loop2): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /21/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 39.307623][ T278] EXT4-fs (loop2): Remounting filesystem read-only [ 39.337364][ T668] Zero length message leads to an empty skb [ 39.831575][ T24] kauditd_printk_skb: 49 callbacks suppressed [ 39.831588][ T24] audit: type=1400 audit(1754561132.630:427): avc: denied { read } for pid=672 comm="syz.4.110" name="ppp" dev="devtmpfs" ino=153 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 39.890352][ T24] audit: type=1400 audit(1754561132.630:428): avc: denied { open } for pid=672 comm="syz.4.110" path="/dev/ppp" dev="devtmpfs" ino=153 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 39.990988][ T326] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 40.070009][ T695] input: syz1 as /devices/virtual/input/input5 [ 40.361293][ T24] audit: type=1400 audit(1754561133.160:429): avc: denied { unmount } for pid=277 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 40.404171][ T24] audit: type=1400 audit(1754561133.160:430): avc: denied { setopt } for pid=697 comm="syz.1.112" lport=5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 40.452199][ T24] audit: type=1400 audit(1754561133.170:431): avc: denied { write } for pid=699 comm="syz.3.113" name="kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 40.515993][ T326] usb 3-1: Using ep0 maxpacket: 8 [ 40.636090][ T326] usb 3-1: config 4 has an invalid interface number: 225 but max is 2 [ 40.658442][ T326] usb 3-1: config 4 contains an unexpected descriptor of type 0x2, skipping [ 40.669742][ T689] F2FS-fs (loop4): invalid crc value [ 40.678507][ T689] F2FS-fs (loop4): Found nat_bits in checkpoint [ 40.947516][ T709] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 40.972951][ T326] usb 3-1: config 4 has an invalid interface number: 227 but max is 2 [ 40.981362][ T326] usb 3-1: config 4 has an invalid interface number: 111 but max is 2 [ 40.989816][ T326] usb 3-1: config 4 has no interface number 0 [ 40.996063][ T326] usb 3-1: config 4 has no interface number 1 [ 41.002187][ T326] usb 3-1: config 4 has no interface number 2 [ 41.025147][ T709] EXT4-fs (loop3): 1 truncate cleaned up [ 41.031046][ T326] usb 3-1: config 4 interface 225 altsetting 9 endpoint 0x1 has invalid maxpacket 104, setting to 64 [ 41.042114][ T709] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 41.080278][ T326] usb 3-1: config 4 interface 225 altsetting 9 bulk endpoint 0xC has invalid maxpacket 32 [ 41.090665][ T326] usb 3-1: config 4 interface 225 altsetting 9 bulk endpoint 0x8 has invalid maxpacket 1024 [ 41.103351][ T326] usb 3-1: config 4 interface 225 altsetting 9 endpoint 0xD has invalid wMaxPacketSize 0 [ 41.113525][ T326] usb 3-1: config 4 interface 225 altsetting 9 has a duplicate endpoint with address 0xD, skipping [ 41.124532][ T326] usb 3-1: config 4 interface 225 altsetting 9 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 41.136527][ T689] F2FS-fs (loop4): Start checkpoint disabled! [ 41.143363][ T689] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 41.182669][ T326] usb 3-1: config 4 interface 227 altsetting 115 has a duplicate endpoint with address 0x8, skipping [ 41.193660][ T326] usb 3-1: config 4 interface 227 altsetting 115 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 41.204831][ T326] usb 3-1: config 4 interface 225 has no altsetting 0 [ 41.211674][ T326] usb 3-1: config 4 interface 227 has no altsetting 0 [ 41.218482][ T326] usb 3-1: config 4 interface 111 has no altsetting 0 [ 41.225821][ T24] audit: type=1400 audit(1754561134.020:432): avc: denied { create } for pid=672 comm="syz.4.110" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=sock_file permissive=1 [ 41.228136][ T688] overlayfs: failed to resolve './bus': -2 [ 41.246743][ T24] audit: type=1400 audit(1754561134.030:433): avc: denied { mounton } for pid=672 comm="syz.4.110" path="/16/file0/file0" dev="loop4" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 41.608208][ T725] bridge: RTM_NEWNEIGH with invalid ether address [ 41.628917][ T24] audit: type=1400 audit(1754561134.420:434): avc: denied { link } for pid=672 comm="syz.4.110" name="file1" dev="loop4" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=sock_file permissive=1 [ 41.652712][ T24] audit: type=1400 audit(1754561134.420:435): avc: denied { ioctl } for pid=672 comm="syz.4.110" path="/dev/ppp" dev="devtmpfs" ino=153 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 41.677728][ T326] usb 3-1: New USB device found, idVendor=5bab, idProduct=804a, bcdDevice= b.16 [ 41.686924][ T326] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 41.694991][ T326] usb 3-1: Product: ⌑剐긨觻튶﷾쎋끃鄉髤㖘俸ꀙ䫄↮ㆁ媑㻴廉笼ꅦ熯揈笙䝺赬ᒦᱝ忲媎stྠᆼ蜜⩛䲜魀껺⤔鋊蚹ꫪ幧Ṇ弥끒鎐쉯輆镼丛룇䨒埪킱즼吏䱡ዔ㽃㥀늬堄顓여商공䀏ㆻ궯椬ꐲ񀰬㵉盛ਬ蔜卑祺ۨ첪먂蘷玥轤퍬뒨 [ 41.726566][ T326] usb 3-1: Manufacturer: ч [ 41.731191][ T326] usb 3-1: SerialNumber: syz [ 41.756077][ T681] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 41.763091][ T681] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 41.770163][ T5] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 41.770539][ T681] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 41.830203][ T296] attempt to access beyond end of device [ 41.830203][ T296] loop4: rw=2049, want=40992, limit=40427 [ 42.016103][ T5] usb 4-1: Using ep0 maxpacket: 32 [ 42.076474][ T326] usb-storage 3-1:4.225: USB Mass Storage device detected [ 42.325375][ T5] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 42.333968][ T5] usb 4-1: config 0 has no interface number 0 [ 42.340389][ T5] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 42.351496][ T5] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 42.361455][ T5] usb 4-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 42.370960][ T5] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 42.381307][ T5] usb 4-1: config 0 descriptor?? [ 42.457326][ T326] usb 3-1: USB disconnect, device number 3 [ 42.642361][ T748] netlink: 104 bytes leftover after parsing attributes in process `syz.2.125'. [ 42.643365][ T745] F2FS-fs (loop0): Insane cp_payload (553648128 >= 504) [ 42.682096][ T745] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 42.682754][ T750] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 42.691951][ T745] F2FS-fs (loop0): invalid crc value [ 42.711740][ T24] audit: type=1400 audit(1754561135.510:436): avc: denied { remount } for pid=749 comm="syz.2.126" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 42.715933][ T745] F2FS-fs (loop0): Found nat_bits in checkpoint [ 42.773056][ T745] F2FS-fs (loop0): Cannot turn on quotas: -2 on 2 [ 42.780050][ T745] F2FS-fs (loop0): Start checkpoint disabled! [ 42.795670][ T745] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 42.802815][ T745] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 43.317735][ T5] uclogic 0003:28BD:0094.0002: pen parameters not found [ 43.324730][ T5] uclogic 0003:28BD:0094.0002: interface is invalid, ignoring [ 43.401578][ T472] usb 4-1: USB disconnect, device number 3 [ 43.787410][ T765] F2FS-fs (loop1): invalid crc value [ 43.812019][ T775] syz.0.131[775] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 43.812075][ T775] syz.0.131[775] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 43.829235][ T765] F2FS-fs (loop1): Found nat_bits in checkpoint [ 43.869078][ T779] udc-core: couldn't find an available UDC or it's busy [ 43.876217][ T779] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 43.921942][ T765] F2FS-fs (loop1): Start checkpoint disabled! [ 43.928942][ T765] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 44.176051][ T472] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 44.383991][ T7] attempt to access beyond end of device [ 44.383991][ T7] loop1: rw=2049, want=40968, limit=40427 [ 44.485986][ T472] usb 1-1: device descriptor read/64, error -71 [ 44.571299][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 44.582964][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 44.599349][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 44.616189][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 44.632303][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 44.648192][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 44.656914][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 44.665103][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 44.728005][ T794] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.136: inode #1: comm syz.1.136: iget: illegal inode # [ 44.751444][ T794] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.136: error while reading EA inode 1 err=-117 [ 44.764657][ T794] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2815: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 44.778223][ T794] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.136: inode #1: comm syz.1.136: iget: illegal inode # [ 44.804503][ T794] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.136: error while reading EA inode 1 err=-117 [ 44.830625][ T794] EXT4-fs (loop1): 1 orphan inode deleted [ 44.836492][ T794] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpjquota=,stripe=0x0000000000000003,norecovery,noinit_itable,init_itable=0x0000000000000001,minixdf,usrjquota=,debug_want_extra_isize=0x000000000000005c,errors=continue,dioread_lock,noblock_validity,noquota,,errors=continue [ 44.939679][ T24] kauditd_printk_skb: 13 callbacks suppressed [ 44.939775][ T24] audit: type=1400 audit(1754561137.740:450): avc: denied { create } for pid=797 comm="syz.2.137" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=key permissive=1 [ 45.036287][ T472] usb 1-1: device descriptor read/64, error -71 [ 45.314431][ T24] audit: type=1400 audit(1754561138.110:451): avc: denied { create } for pid=809 comm="syz.4.141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 45.334658][ T472] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 45.343773][ T807] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 45.495994][ T25] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 45.549632][ T816] EXT4-fs (loop4): Test dummy encryption mode enabled [ 45.556614][ T816] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 45.569113][ T816] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2219: inode #15: comm syz.4.143: corrupted in-inode xattr [ 45.581730][ T816] EXT4-fs (loop4): 1 orphan inode deleted [ 45.588380][ T816] EXT4-fs (loop4): mounted filesystem without journal. Opts: nogrpid,min_batch_time=0x0000000000000000,debug_want_extra_isize=0x0000000000000068,nobarrier,nodiscard,test_dummy_encryption,,errors=continue [ 45.608725][ T472] usb 1-1: device descriptor read/64, error -71 [ 45.780433][ T24] audit: type=1400 audit(1754561138.580:452): avc: denied { write } for pid=815 comm="syz.4.143" name="file0" dev="loop4" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 45.802607][ T24] audit: type=1400 audit(1754561138.580:453): avc: denied { open } for pid=815 comm="syz.4.143" path="/24/file2/file0/file0" dev="loop4" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 45.826503][ T24] audit: type=1400 audit(1754561138.580:454): avc: denied { ioctl } for pid=815 comm="syz.4.143" path="/24/file2/file0/file0" dev="loop4" ino=13 ioctlcmd=0xf50d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 45.866176][ T25] usb 4-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00 [ 45.875514][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 45.884424][ T25] usb 4-1: config 0 descriptor?? [ 45.961143][ T825] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 46.006068][ T5] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 46.036061][ T472] usb 1-1: device descriptor read/64, error -71 [ 46.160612][ T472] usb usb1-port1: attempt power cycle [ 46.421331][ T25] dragonrise 0003:0079:0006.0003: unknown main item tag 0x0 [ 46.431798][ T825] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.146: inode #1: comm syz.4.146: iget: illegal inode # [ 46.455502][ T25] dragonrise 0003:0079:0006.0003: unknown main item tag 0x0 [ 46.478399][ T825] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.146: error while reading EA inode 1 err=-117 [ 46.480141][ T25] dragonrise 0003:0079:0006.0003: unknown main item tag 0x0 [ 46.491033][ T825] EXT4-fs (loop4): 1 orphan inode deleted [ 46.498247][ T25] dragonrise 0003:0079:0006.0003: unknown main item tag 0x0 [ 46.503887][ T825] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodioread_nolock,journal_dev=0x00000000000000ff,debug_want_extra_isize=0x000000000000004c,nouid32,resgid=0x0000000000000000,acl,init_itable=0x0000000000008d55,,errors=continue [ 46.511037][ T25] dragonrise 0003:0079:0006.0003: unknown main item tag 0x0 [ 46.541918][ T25] dragonrise 0003:0079:0006.0003: hidraw0: USB HID v0.05 Device [HID 0079:0006] on usb-dummy_hcd.3-1/input0 [ 46.553498][ T25] dragonrise 0003:0079:0006.0003: no inputs found [ 46.560018][ T25] dragonrise 0003:0079:0006.0003: force feedback init failed [ 46.606007][ T472] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 46.636081][ T5] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 46.647192][ T5] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 46.657185][ T5] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 46.669628][ T5] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 46.682995][ T53] usb 4-1: USB disconnect, device number 4 [ 46.690896][ T5] usb 3-1: config 0 descriptor?? [ 46.856078][ T472] usb 1-1: device descriptor read/8, error -71 [ 47.239791][ T838] EXT4-fs warning (device loop0): ext4_enable_quotas:6491: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 47.255122][ T838] EXT4-fs (loop0): mount failed [ 47.260215][ T472] usb 1-1: device descriptor read/8, error -71 [ 47.602673][ T5] savu 0003:1E7D:2D5A.0004: ignoring exceeding usage max [ 47.611364][ T5] savu 0003:1E7D:2D5A.0004: item fetching failed at offset 5/8 [ 47.619400][ T5] savu 0003:1E7D:2D5A.0004: parse failed [ 47.625169][ T5] savu: probe of 0003:1E7D:2D5A.0004 failed with error -22 [ 47.672895][ T24] audit: type=1400 audit(1754561140.470:455): avc: denied { lock } for pid=822 comm="syz.2.145" path="socket:[17548]" dev="sockfs" ino=17548 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 48.177228][ T514] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 48.271987][ T871] EXT4-fs warning (device loop1): ext4_enable_quotas:6491: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 48.330881][ T871] EXT4-fs (loop1): mount failed [ 48.596356][ T514] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 48.752705][ T5] usb 3-1: USB disconnect, device number 4 [ 48.767551][ T514] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 48.777433][ T514] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 48.786561][ T514] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 48.803702][ T514] usb 5-1: config 0 descriptor?? [ 49.299314][ T24] audit: type=1400 audit(1754561142.100:456): avc: denied { map } for pid=889 comm="syz.2.162" path="socket:[16993]" dev="sockfs" ino=16993 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 49.322895][ T24] audit: type=1400 audit(1754561142.100:457): avc: denied { read accept } for pid=889 comm="syz.2.162" path="socket:[16993]" dev="sockfs" ino=16993 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 49.406467][ T24] audit: type=1400 audit(1754561142.210:458): avc: denied { mounton } for pid=891 comm="syz.0.163" path="/25/file0" dev="tmpfs" ino=161 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 49.526793][ T892] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 49.543889][ T892] ext4 filesystem being mounted at /25/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.918165][ T24] audit: type=1400 audit(1754561142.720:459): avc: denied { mounton } for pid=891 comm="syz.0.163" path="/25/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=sock_file permissive=1 [ 50.112420][ T24] audit: type=1400 audit(1754561142.910:460): avc: denied { append } for pid=910 comm="syz.0.167" name="001" dev="devtmpfs" ino=180 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 50.153556][ T911] usb usb8: usbfs: process 911 (syz.0.167) did not claim interface 0 before use [ 50.453141][ T514] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.0005/input/input6 [ 50.471461][ T24] audit: type=1400 audit(1754561143.270:461): avc: denied { read } for pid=80 comm="acpid" name="event3" dev="devtmpfs" ino=584 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 50.494716][ T514] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.0005/input/input7 [ 50.509149][ T24] audit: type=1400 audit(1754561143.270:462): avc: denied { open } for pid=80 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=584 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 50.535208][ T514] uclogic 0003:256C:006D.0005: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.4-1/input0 [ 50.540789][ T24] audit: type=1326 audit(1754561143.330:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=917 comm="syz.3.170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedb2cddbe9 code=0x7ffc0000 [ 50.576139][ T24] audit: type=1326 audit(1754561143.330:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=917 comm="syz.3.170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedb2cddbe9 code=0x7ffc0000 [ 50.601022][ T24] audit: type=1400 audit(1754561143.350:465): avc: denied { ioctl } for pid=80 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=584 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 50.662437][ T5] usb 5-1: USB disconnect, device number 3 [ 50.672332][ T24] audit: type=1326 audit(1754561143.430:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=917 comm="syz.3.170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fedb2cddbe9 code=0x7ffc0000 [ 50.698414][ T24] audit: type=1326 audit(1754561143.430:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=917 comm="syz.3.170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedb2cddbe9 code=0x7ffc0000 [ 50.721639][ T24] audit: type=1326 audit(1754561143.430:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=917 comm="syz.3.170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedb2cddbe9 code=0x7ffc0000 [ 50.781228][ T24] audit: type=1326 audit(1754561143.430:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=917 comm="syz.3.170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fedb2cddbe9 code=0x7ffc0000 [ 51.439412][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 51.451663][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 51.476206][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 51.498215][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 51.520763][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 51.539404][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 51.561635][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 51.579877][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 51.639882][ T941] netlink: 16 bytes leftover after parsing attributes in process `syz.3.176'. [ 51.676991][ T935] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 51.700466][ T935] ext4 filesystem being mounted at /28/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.759936][ T949] binder_alloc: binder_alloc_mmap_handler: 948 200000ffe000-200001000000 already mapped failed -16 [ 52.343824][ T971] netlink: 'syz.2.177': attribute type 12 has an invalid length. [ 52.869223][ T978] netlink: 16 bytes leftover after parsing attributes in process `syz.3.188'. [ 53.494420][ T988] netlink: 'syz.0.192': attribute type 13 has an invalid length. [ 53.555612][ T991] EXT4-fs warning (device loop1): ext4_enable_quotas:6491: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 53.581733][ T988] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.589020][ T988] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.597512][ T991] EXT4-fs (loop1): mount failed [ 54.070258][ T326] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 54.229377][ T1010] netlink: 'syz.3.198': attribute type 12 has an invalid length. [ 54.606027][ T326] usb 1-1: Using ep0 maxpacket: 8 [ 54.617882][ T1018] netlink: 'syz.1.200': attribute type 12 has an invalid length. [ 54.726036][ T326] usb 1-1: config 2 has an invalid interface number: 247 but max is 0 [ 54.734358][ T326] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 54.744540][ T326] usb 1-1: config 2 has no interface number 0 [ 54.750689][ T326] usb 1-1: config 2 interface 247 has no altsetting 0 [ 54.757566][ T326] usb 1-1: New USB device found, idVendor=19ab, idProduct=1000, bcdDevice= 0.7e [ 54.766662][ T326] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.285929][ T1043] EXT4-fs warning (device loop4): ext4_enable_quotas:6491: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 56.359673][ T1043] EXT4-fs (loop4): mount failed [ 56.380033][ T1046] kvm: emulating exchange as write [ 56.426042][ T729] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 56.510872][ T1046] EXT4-fs error (device loop3): ext4_orphan_get:1395: inode #15: comm syz.3.211: iget: bad extended attribute block 1 [ 56.523596][ T1046] EXT4-fs error (device loop3): ext4_orphan_get:1400: comm syz.3.211: couldn't read orphan inode 15 (err -117) [ 56.535799][ T1046] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug_want_extra_isize=0x0000000000000004,resgid=0x000000000000ee00,grpid,noload,journal_dev=0x0000000000000003,nodiscard,,errors=continue [ 57.034599][ T24] kauditd_printk_skb: 20 callbacks suppressed [ 57.034612][ T24] audit: type=1400 audit(1754561149.830:490): avc: denied { ioctl } for pid=1060 comm="syz.4.214" path="socket:[17883]" dev="sockfs" ino=17883 ioctlcmd=0x52c8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 57.078489][ T1061] netlink: 16 bytes leftover after parsing attributes in process `syz.4.214'. [ 57.090655][ T24] audit: type=1400 audit(1754561149.870:491): avc: denied { map } for pid=1056 comm="syz.3.212" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=174 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 57.126110][ T326] usb 1-1: string descriptor 0 read error: -71 [ 57.137584][ T326] usb 1-1: USB disconnect, device number 8 [ 57.186101][ T729] usb 3-1: unable to get BOS descriptor or descriptor too short [ 57.198039][ T1068] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=1068 comm=syz.0.215 [ 57.218453][ T1068] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=1068 comm=syz.0.215 [ 57.231676][ T729] usb 3-1: not running at top speed; connect to a high speed hub [ 57.240238][ T24] audit: type=1400 audit(1754561150.040:492): avc: denied { create } for pid=1069 comm="syz.3.217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 57.336079][ T729] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 57.751248][ T729] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 57.787323][ T729] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 58.206406][ T24] audit: type=1400 audit(1754561150.990:493): avc: denied { read } for pid=1069 comm="syz.3.217" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 58.504715][ T1086] netlink: 8 bytes leftover after parsing attributes in process `syz.0.221'. [ 58.532713][ T24] audit: type=1400 audit(1754561150.990:494): avc: denied { open } for pid=1069 comm="syz.3.217" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 58.664739][ T1084] FAT-fs (loop1): codepage cp250 not found [ 58.676750][ T24] audit: type=1400 audit(1754561151.480:495): avc: denied { mount } for pid=1094 comm="syz.3.223" name="/" dev="configfs" ino=14043 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 58.840895][ T24] audit: type=1400 audit(1754561151.500:496): avc: denied { search } for pid=1094 comm="syz.3.223" name="/" dev="configfs" ino=14043 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 59.213490][ T1110] EXT4-fs (loop1): Test dummy encryption mode enabled [ 59.220555][ T1110] EXT4-fs (loop1): Test dummy encryption mode enabled [ 59.324111][ T1110] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption=v1,test_dummy_encryption=v1,,errors=continue [ 59.337893][ T1110] ext4 filesystem being mounted at /54/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 59.445868][ T1110] fscrypt: AES-256-CTS-CBC using implementation "cts(cbc-aes-aesni)" [ 59.807041][ T1120] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 59.814285][ T1120] EXT4-fs (loop4): dax option not supported [ 59.935941][ C0] sched: RT throttling activated [ 60.018274][ T729] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 60.027410][ T729] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.035447][ T729] usb 3-1: Product: syz [ 60.056116][ T729] usb 3-1: can't set config #1, error -71 [ 60.062455][ T729] usb 3-1: USB disconnect, device number 5 [ 60.155195][ T1134] overlayfs: failed to resolve './bus': -2 [ 60.525726][ T1151] EXT4-fs (loop4): Mount option "noacl" will be removed by 3.5 [ 60.525726][ T1151] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 60.525726][ T1151] [ 60.577604][ T24] audit: type=1400 audit(1754561153.380:497): avc: denied { read write } for pid=1129 comm="syz.0.234" name="vga_arbiter" dev="devtmpfs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 60.607802][ T1151] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 61.107110][ T1155] usb usb1: check_ctrlrecip: process 1155 (syz.1.238) requesting ep 01 but needs 81 [ 61.163970][ T24] audit: type=1400 audit(1754561153.960:498): avc: denied { open } for pid=1129 comm="syz.0.234" path="/dev/vga_arbiter" dev="devtmpfs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 61.202906][ T1151] EXT4-fs error (device loop4): ext4_fill_super:4955: inode #2: comm syz.4.240: casefold flag without casefold feature [ 61.222164][ T1151] EXT4-fs (loop4): get root inode failed [ 61.229369][ T1151] EXT4-fs (loop4): mount failed [ 61.306057][ T326] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 61.353387][ T1151] netlink: 8 bytes leftover after parsing attributes in process `syz.4.240'. [ 61.409351][ T1151] kvm: MWAIT instruction emulated as NOP! [ 61.417406][ T1151] tipc: Started in network mode [ 61.422562][ T1151] tipc: Own node identity 16311933ed44, cluster identity 4711 [ 61.430585][ T1151] tipc: Enabled bearer , priority 0 [ 61.446014][ T24] audit: type=1326 audit(1754561154.240:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1150 comm="syz.4.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe27fecfbe9 code=0x7ffc0000 [ 61.453746][ T1151] device syzkaller0 entered promiscuous mode [ 61.563754][ T1165] tipc: Resetting bearer [ 61.576099][ T1165] tipc: Disabling bearer [ 61.646033][ T729] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 61.676033][ T326] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 61.687159][ T326] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 61.696980][ T326] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 61.706094][ T326] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.714928][ T326] usb 4-1: config 0 descriptor?? [ 62.006087][ T729] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 62.016312][ T729] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 62.025229][ T729] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 62.197402][ T729] usb 3-1: New USB device found, idVendor=0525, idProduct=85a1, bcdDevice= 0.40 [ 62.206857][ T729] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.214891][ T729] usb 3-1: Product: syz [ 62.219114][ T729] usb 3-1: Manufacturer: syz [ 62.223717][ T729] usb 3-1: SerialNumber: syz [ 62.232811][ T1172] FAT-fs (loop4): Unrecognized mount option "00000000000000000000215" or missing value [ 62.400020][ T1175] F2FS-fs (loop1): invalid crc value [ 62.407312][ T1175] F2FS-fs (loop1): Found nat_bits in checkpoint [ 62.444599][ T1175] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 62.459491][ T1180] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x23633d53, utbl_chksum : 0xe619d30d) [ 62.486211][ T24] kauditd_printk_skb: 9 callbacks suppressed [ 62.486224][ T24] audit: type=1400 audit(1754561155.290:509): avc: denied { name_bind } for pid=1162 comm="syz.2.242" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 62.534841][ T24] audit: type=1400 audit(1754561155.330:510): avc: denied { sys_admin } for pid=1189 comm="syz.4.248" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 62.573402][ T1163] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 62.583336][ T1163] EXT4-fs (loop2): orphan cleanup on readonly fs [ 62.590136][ T1163] EXT4-fs error (device loop2): ext4_orphan_get:1421: comm syz.2.242: bad orphan inode 15 [ 62.600541][ T1163] ext4_test_bit(bit=14, block=18) = 1 [ 62.606230][ T1163] is_bad_inode(inode)=0 [ 62.610423][ T1163] NEXT_ORPHAN(inode)=1023 [ 62.614759][ T1163] max_ino=32 [ 62.618519][ T1163] i_nlink=0 [ 62.621861][ T1163] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2930: inode #15: comm syz.2.242: corrupted xattr block 19 [ 62.634270][ T1163] EXT4-fs warning (device loop2): ext4_evict_inode:303: xattr delete (err -117) [ 62.636118][ T326] uclogic 0003:256C:006D.0006: failed retrieving Huion firmware version: -22 [ 62.643655][ T1163] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 62.667390][ T1163] udc-core: couldn't find an available UDC or it's busy [ 62.674474][ T1163] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 62.674612][ T326] uclogic 0003:256C:006D.0006: failed probing parameters: -22 [ 62.694135][ T326] uclogic: probe of 0003:256C:006D.0006 failed with error -22 [ 62.776030][ T440] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 62.786840][ T729] cdc_ncm 3-1:1.0: bind() failure [ 62.824385][ T729] usb 3-1: USB disconnect, device number 6 [ 62.844048][ T514] usb 4-1: USB disconnect, device number 5 [ 63.232463][ T24] audit: type=1400 audit(1754561156.030:511): avc: denied { map } for pid=1205 comm="syz.0.253" path="socket:[18132]" dev="sockfs" ino=18132 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 63.247212][ T1206] netlink: 40 bytes leftover after parsing attributes in process `syz.0.253'. [ 63.376068][ T440] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 63.388969][ T440] usb 2-1: New USB device found, idVendor=16c0, idProduct=05e1, bcdDevice= 0.00 [ 63.398095][ T440] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.407107][ T440] usb 2-1: config 0 descriptor?? [ 63.557542][ T1213] EXT4-fs (loop3): Test dummy encryption mode enabled [ 63.570895][ T1213] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 63.622166][ T1213] EXT4-fs (loop3): 1 truncate cleaned up [ 63.629654][ T1213] EXT4-fs (loop3): mounted filesystem without journal. Opts: auto_da_alloc=0x0000000000000000,test_dummy_encryption=v1,init_itable=0x000000000000005c,noblock_validity,debug_want_extra_isize=0x0000000000000006,,errors=continue [ 63.673119][ T1222] netlink: 'syz.2.257': attribute type 12 has an invalid length. [ 63.774613][ T440] usbhid 2-1:0.0: can't add hid device: -71 [ 63.780933][ T440] usbhid: probe of 2-1:0.0 failed with error -71 [ 63.788482][ T440] usb 2-1: USB disconnect, device number 2 [ 64.103322][ T1228] xt_CT: You must specify a L4 protocol and not use inversions on it [ 64.745037][ T276] attempt to access beyond end of device [ 64.745037][ T276] loop1: rw=2049, want=45112, limit=40427 [ 64.810130][ T1238] FAULT_INJECTION: forcing a failure. [ 64.810130][ T1238] name failslab, interval 1, probability 0, space 0, times 0 [ 64.822877][ T1238] CPU: 1 PID: 1238 Comm: syz.0.260 Not tainted 5.10.240-syzkaller-00225-g1154f779f3f3 #0 [ 64.832690][ T1238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 64.842763][ T1238] Call Trace: [ 64.846083][ T1238] __dump_stack+0x21/0x24 [ 64.850418][ T1238] dump_stack_lvl+0x169/0x1d8 [ 64.855099][ T1238] ? asm_sysvec_reschedule_ipi+0x12/0x20 [ 64.860737][ T1238] ? show_regs_print_info+0x18/0x18 [ 64.865945][ T1238] dump_stack+0x15/0x1c [ 64.870108][ T1238] should_fail+0x3c1/0x510 [ 64.874531][ T1238] ? security_file_alloc+0x33/0x120 [ 64.879740][ T1238] __should_failslab+0xa4/0xe0 [ 64.884518][ T1238] should_failslab+0x9/0x20 [ 64.889027][ T1238] kmem_cache_alloc+0x3d/0x2e0 [ 64.893795][ T1238] ? __alloc_file+0x28/0x320 [ 64.898394][ T1238] security_file_alloc+0x33/0x120 [ 64.903424][ T1238] __alloc_file+0xb5/0x320 [ 64.907846][ T1238] alloc_empty_file+0x97/0x180 [ 64.912617][ T1238] alloc_file+0x59/0x540 [ 64.916866][ T1238] alloc_file_pseudo+0x17a/0x1f0 [ 64.921813][ T1238] ? alloc_empty_file_noaccount+0x80/0x80 [ 64.927534][ T1238] __anon_inode_getfd+0x248/0x3b0 [ 64.932557][ T1238] ? anon_inode_getfd+0x40/0x40 [ 64.937450][ T1238] ? __kasan_check_write+0x14/0x20 [ 64.942558][ T1238] ? selinux_bpf_map+0xd2/0x110 [ 64.947407][ T1238] anon_inode_getfd+0x31/0x40 [ 64.952091][ T1238] bpf_map_new_fd+0x5f/0x70 [ 64.956586][ T1238] map_create+0xc21/0x2090 [ 64.960998][ T1238] __se_sys_bpf+0x203/0x680 [ 64.965495][ T1238] ? __x64_sys_bpf+0x90/0x90 [ 64.970082][ T1238] ? fpu__clear_all+0x20/0x20 [ 64.974751][ T1238] __x64_sys_bpf+0x7b/0x90 [ 64.979171][ T1238] do_syscall_64+0x31/0x40 [ 64.983586][ T1238] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 64.989489][ T1238] RIP: 0033:0x7fb8d0e5fbe9 [ 64.993910][ T1238] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 65.013511][ T1238] RSP: 002b:00007fb8cf886038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 65.021921][ T1238] RAX: ffffffffffffffda RBX: 00007fb8d1087180 RCX: 00007fb8d0e5fbe9 [ 65.029893][ T1238] RDX: 0000000000000048 RSI: 00002000000009c0 RDI: 0000000000000000 [ 65.037863][ T1238] RBP: 00007fb8cf886090 R08: 0000000000000000 R09: 0000000000000000 [ 65.045918][ T1238] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 65.053897][ T1238] R13: 00007fb8d1087218 R14: 00007fb8d1087180 R15: 00007fff45bf5e98 [ 65.368941][ T1246] FAULT_INJECTION: forcing a failure. [ 65.368941][ T1246] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 65.384563][ T1246] CPU: 1 PID: 1246 Comm: syz.1.264 Not tainted 5.10.240-syzkaller-00225-g1154f779f3f3 #0 [ 65.394405][ T1246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 65.404491][ T1246] Call Trace: [ 65.407811][ T1246] __dump_stack+0x21/0x24 [ 65.412164][ T1246] dump_stack_lvl+0x169/0x1d8 [ 65.416987][ T1246] ? show_regs_print_info+0x18/0x18 [ 65.422207][ T1246] ? 0xffffffffa00280d4 [ 65.426372][ T1246] ? is_bpf_text_address+0x177/0x190 [ 65.431658][ T1246] dump_stack+0x15/0x1c [ 65.435813][ T1246] should_fail+0x3c1/0x510 [ 65.440234][ T1246] should_fail_usercopy+0x1a/0x20 [ 65.445260][ T1246] _copy_from_user+0x20/0xd0 [ 65.449850][ T1246] __copy_msghdr_from_user+0x448/0x5e0 [ 65.455307][ T1246] ? __ia32_sys_shutdown+0x1e0/0x1e0 [ 65.460586][ T1246] ? kasan_set_track+0x5b/0x70 [ 65.465343][ T1246] ? kasan_set_free_info+0x23/0x40 [ 65.470455][ T1246] ___sys_sendmsg+0x156/0x260 [ 65.475127][ T1246] ? __sys_sendmsg+0x250/0x250 [ 65.479883][ T1246] ? kstrtouint_from_user+0x1a0/0x200 [ 65.485260][ T1246] ? __fdget+0x1a1/0x230 [ 65.489503][ T1246] __sys_sendmmsg+0x273/0x450 [ 65.494175][ T1246] ? __ia32_sys_sendmsg+0x2a0/0x2a0 [ 65.499375][ T1246] ? __ia32_sys_read+0x90/0x90 [ 65.504140][ T1246] ? fpu__clear_all+0x20/0x20 [ 65.508812][ T1246] ? fd_install+0x50/0x60 [ 65.513137][ T1246] __x64_sys_sendmmsg+0xa0/0xb0 [ 65.517994][ T1246] do_syscall_64+0x31/0x40 [ 65.522405][ T1246] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 65.528292][ T1246] RIP: 0033:0x7f618fecabe9 [ 65.532706][ T1246] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 65.552422][ T1246] RSP: 002b:00007f618e933038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 65.560839][ T1246] RAX: ffffffffffffffda RBX: 00007f61900f1fa0 RCX: 00007f618fecabe9 [ 65.568805][ T1246] RDX: 0000000000000001 RSI: 0000200000000440 RDI: 0000000000000005 [ 65.576778][ T1246] RBP: 00007f618e933090 R08: 0000000000000000 R09: 0000000000000000 [ 65.584745][ T1246] R10: 0000000004004040 R11: 0000000000000246 R12: 0000000000000001 [ 65.592722][ T1246] R13: 00007f61900f2038 R14: 00007f61900f1fa0 R15: 00007fffdd2858c8 [ 65.680165][ T1248] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz.3.266: inode #1: comm syz.3.266: iget: illegal inode # [ 65.713236][ T1248] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.266: error while reading EA inode 1 err=-117 [ 65.885379][ T1261] FAULT_INJECTION: forcing a failure. [ 65.885379][ T1261] name failslab, interval 1, probability 0, space 0, times 0 [ 65.898071][ T1261] CPU: 1 PID: 1261 Comm: syz.0.270 Not tainted 5.10.240-syzkaller-00225-g1154f779f3f3 #0 [ 65.907875][ T1261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 65.917933][ T1261] Call Trace: [ 65.921245][ T1261] __dump_stack+0x21/0x24 [ 65.925578][ T1261] dump_stack_lvl+0x169/0x1d8 [ 65.930266][ T1261] ? thaw_kernel_threads+0x220/0x220 [ 65.935562][ T1261] ? show_regs_print_info+0x18/0x18 [ 65.940767][ T1261] dump_stack+0x15/0x1c [ 65.944927][ T1261] should_fail+0x3c1/0x510 [ 65.949339][ T1261] ? getname_flags+0xb9/0x500 [ 65.954009][ T1261] __should_failslab+0xa4/0xe0 [ 65.958814][ T1261] should_failslab+0x9/0x20 [ 65.963313][ T1261] kmem_cache_alloc+0x3d/0x2e0 [ 65.968077][ T1261] getname_flags+0xb9/0x500 [ 65.972576][ T1261] user_path_at_empty+0x2f/0x50 [ 65.977422][ T1261] __se_sys_mount+0x2e3/0x380 [ 65.982094][ T1261] ? fput+0x1a/0x20 [ 65.985899][ T1261] ? __x64_sys_mount+0xd0/0xd0 [ 65.990659][ T1261] ? fpu__clear_all+0x20/0x20 [ 65.995329][ T1261] __x64_sys_mount+0xbf/0xd0 [ 65.999920][ T1261] do_syscall_64+0x31/0x40 [ 66.004336][ T1261] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 66.010225][ T1261] RIP: 0033:0x7fb8d0e5fbe9 [ 66.014641][ T1261] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 66.034242][ T1261] RSP: 002b:00007fb8cf8c8038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 66.042653][ T1261] RAX: ffffffffffffffda RBX: 00007fb8d1086fa0 RCX: 00007fb8d0e5fbe9 [ 66.050618][ T1261] RDX: 0000200000000180 RSI: 00002000000020c0 RDI: 0000000000000000 [ 66.058584][ T1261] RBP: 00007fb8cf8c8090 R08: 0000200000002140 R09: 0000000000000000 [ 66.066549][ T1261] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 66.074514][ T1261] R13: 00007fb8d1087038 R14: 00007fb8d1086fa0 R15: 00007fff45bf5e98 [ 66.556369][ T1248] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz.3.266: inode #1: comm syz.3.266: iget: illegal inode # [ 66.652182][ T472] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 66.660331][ T1248] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.266: error while reading EA inode 1 err=-117 [ 66.685826][ T1248] EXT4-fs (loop3): 1 orphan inode deleted [ 66.703569][ T1248] EXT4-fs (loop3): mounted filesystem without journal. Opts: usrjquota=,journal_dev=0x0000000000008000,debug_want_extra_isize=0x000000000000005c,minixdf,resgid=0x0000000000000000,grpquota,usrjquota=,journal_dev=0x0000000000000dcc,,errors=continue [ 66.763743][ T24] audit: type=1400 audit(1754561159.560:512): avc: denied { mounton } for pid=1247 comm="syz.3.266" path="/57/file0/file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 67.196342][ T472] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 67.219350][ T1277] netlink: 'syz.1.273': attribute type 12 has an invalid length. [ 67.261416][ T279] EXT4-fs error (device loop3): htree_dirblock_to_tree:1092: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 67.261744][ T472] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 67.291449][ T472] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 67.300624][ T472] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.310474][ T472] usb 3-1: config 0 descriptor?? [ 67.316268][ T24] audit: type=1400 audit(1754561160.120:513): avc: denied { unlink } for pid=279 comm="syz-executor" name="lost+found" dev="loop3" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 [ 67.339609][ T279] ------------[ cut here ]------------ [ 67.345156][ T279] kernel BUG at fs/namei.c:2786! [ 67.354413][ T279] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 67.360534][ T279] CPU: 1 PID: 279 Comm: syz-executor Not tainted 5.10.240-syzkaller-00225-g1154f779f3f3 #0 [ 67.370520][ T279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 67.380607][ T279] RIP: 0010:may_delete+0x7b1/0x7c0 [ 67.385738][ T279] Code: ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c dd fd ff ff 48 89 df e8 00 25 f5 ff e9 d0 fd ff ff e8 96 35 bb ff 0f 0b e8 8f 35 bb ff <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 55 48 89 e5 41 56 53 [ 67.405737][ T279] RSP: 0018:ffffc90000c37cb8 EFLAGS: 00010293 [ 67.411835][ T279] RAX: ffffffff81a86ae1 RBX: ffff88810ff7c770 RCX: ffff8881259e2780 [ 67.419821][ T279] RDX: 0000000000000000 RSI: 0000000000200000 RDI: 0000000000000000 [ 67.427816][ T279] RBP: ffffc90000c37d38 R08: 0000000000000004 R09: 0000000000000003 [ 67.435811][ T279] R10: fffff52000186f7c R11: 1ffff92000186f7c R12: ffff88811c478198 [ 67.443804][ T279] R13: 1ffff11021fef8ee R14: ffff88810ff7c788 R15: ffff88810ff3f030 [ 67.451808][ T279] FS: 00005555803e8500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 67.460754][ T279] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 67.467358][ T279] CR2: 0000555580413528 CR3: 000000012610b000 CR4: 00000000003506a0 [ 67.475359][ T279] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 67.483350][ T279] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 67.491341][ T279] Call Trace: [ 67.494657][ T279] ? __kasan_check_write+0x14/0x20 [ 67.499793][ T279] vfs_rmdir+0x2c/0x3e0 [ 67.503972][ T279] incfs_kill_sb+0xfe/0x210 [ 67.508501][ T279] deactivate_locked_super+0xa0/0x100 [ 67.513890][ T279] deactivate_super+0xaf/0xe0 [ 67.518588][ T279] cleanup_mnt+0x446/0x500 [ 67.523026][ T279] __cleanup_mnt+0x19/0x20 [ 67.527466][ T279] task_work_run+0x127/0x190 [ 67.532079][ T279] exit_to_user_mode_loop+0xcb/0xe0 [ 67.537292][ T279] syscall_exit_to_user_mode+0x68/0x90 [ 67.542771][ T279] do_syscall_64+0x3d/0x40 [ 67.547202][ T279] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 67.553116][ T279] RIP: 0033:0x7fedb2cdef17 [ 67.557547][ T279] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 67.577178][ T279] RSP: 002b:00007ffc5cb82428 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 67.585623][ T279] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fedb2cdef17 [ 67.593732][ T279] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc5cb824e0 [ 67.601729][ T279] RBP: 00007ffc5cb824e0 R08: 0000000000000000 R09: 0000000000000000 [ 67.609725][ T279] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc5cb835d0 [ 67.617714][ T279] R13: 00007fedb2d60c05 R14: 00000000000105f6 R15: 00007ffc5cb846a0 [ 67.625713][ T279] Modules linked in: [ 67.660601][ T279] ---[ end trace 82de7bca6b59c96f ]--- [ 67.666620][ T279] RIP: 0010:may_delete+0x7b1/0x7c0 [ 67.671821][ T279] Code: ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c dd fd ff ff 48 89 df e8 00 25 f5 ff e9 d0 fd ff ff e8 96 35 bb ff 0f 0b e8 8f 35 bb ff <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 55 48 89 e5 41 56 53 [ 67.708430][ T279] RSP: 0018:ffffc90000c37cb8 EFLAGS: 00010293 [ 67.735461][ T279] RAX: ffffffff81a86ae1 RBX: ffff88810ff7c770 RCX: ffff8881259e2780 [ 67.744555][ T279] RDX: 0000000000000000 RSI: 0000000000200000 RDI: 0000000000000000 [ 67.752874][ T279] RBP: ffffc90000c37d38 R08: 0000000000000004 R09: 0000000000000003 [ 67.760952][ T279] R10: fffff52000186f7c R11: 1ffff92000186f7c R12: ffff88811c478198 [ 67.769015][ T279] R13: 1ffff11021fef8ee R14: ffff88810ff7c788 R15: ffff88810ff3f030 [ 67.777145][ T279] FS: 00005555803e8500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 67.786147][ T279] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 67.792772][ T279] CR2: 0000555569a824a8 CR3: 000000012610b000 CR4: 00000000003506b0 [ 67.800790][ T279] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 67.808847][ T279] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 67.816864][ T279] Kernel panic - not syncing: Fatal exception [ 67.818317][ T24] audit: type=1400 audit(1754561160.620:514): avc: denied { read } for pid=77 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 67.823218][ T279] Kernel Offset: disabled [ 67.849230][ T279] Rebooting in 86400 seconds..