last executing test programs: 4.184397879s ago: executing program 4 (id=129): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000ffffffff00000000000000001801000011646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000007d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000053d11f1d85000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000400)='itimer_state\x00', r1}, 0x18) setitimer(0x2, 0x0, 0x0) 4.184122919s ago: executing program 4 (id=130): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x200000, &(0x7f0000000300)={[{@minixdf}, {}, {@barrier_val={'barrier', 0x3d, 0x9}}, {@commit={'commit', 0x3d, 0x5}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@noblock_validity}, {@nomblk_io_submit}]}, 0x1, 0x566, &(0x7f00000015c0)="$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") socket$inet6_udp(0xa, 0x2, 0x0) lsetxattr$security_ima(0x0, &(0x7f0000000140), &(0x7f0000000400)=ANY=[], 0x1d, 0x1) r0 = syz_open_dev$usbfs(0x0, 0x75, 0x10b701) ioctl$USBDEVFS_CLAIM_PORT(r0, 0x80045518, &(0x7f0000000000)=0x1) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2) open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c000280050001000000000008000740"], 0x64}}, 0x0) 3.826406326s ago: executing program 1 (id=135): r0 = syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000480)='./file0\x00', 0x2000000, &(0x7f0000000880)=ANY=[@ANYRESHEX, @ANYRES8, @ANYRESOCT, @ANYBLOB="ac82fa3da8cb64cc9eacb70c5918a0fd0f53ab333860bfb7988f9b8200a0d9b5f31f4d5b386152286170eda7f0291b03bafde1116c6f4799c9f36b7247c9664cfa9b290a30352b971c", @ANYRESHEX], 0x8, 0x2f8, &(0x7f0000000ac0)="$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") sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x40000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@ipv6_newrule={0x1c, 0x20, 0x1, 0x70bd23, 0xffffffff, {0xa, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x1}}, 0x1c}, 0x1, 0x0, 0x0, 0x40810}, 0x4044) timer_create(0x3, 0x0, &(0x7f0000000040)) 3.316338096s ago: executing program 4 (id=138): mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000280)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000540)=ANY=[], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) r5 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) mknodat$loop(r5, &(0x7f00000002c0)='./file1\x00', 0x4, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') rename(&(0x7f0000000040)='./file1\x00', &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 2.886489864s ago: executing program 3 (id=140): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x20780, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r0}, 0x10) time(0x0) 2.877138424s ago: executing program 3 (id=141): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000070000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r2, 0xfffffffe) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r3 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TCFLSH(r3, 0x540b, 0x2) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x54, r4, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @local}}, {0x14, 0x2, @in={0x2, 0x0, @rand_addr=0x64010101}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x8008080}, 0x0) 2.692706998s ago: executing program 1 (id=142): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000005c0)={'#! ', './file0/file0'}, 0x11) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) syz_btf_id_by_name$bpf_lsm(&(0x7f0000000980)='bpf_lsm_locked_down\x00') 2.654457388s ago: executing program 3 (id=143): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f00002e5000/0x400000)=nil, 0x400000, 0xf) epoll_create1(0x80000) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000020000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x18) socket$netlink(0x10, 0x3, 0x0) r5 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x7fffefff) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) ptrace$pokeuser(0x6, r7, 0x388, 0x41d9fda7) 2.320001335s ago: executing program 4 (id=145): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000100), r2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000400)='sched_switch\x00', r3}, 0x18) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10, 0xe}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x6, 0xffffffff}]}}]}, 0x38}}, 0x4048000) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000080)='task_rename\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) signalfd4(r3, &(0x7f0000000340)={[0x7fffffffffffffff]}, 0x8, 0x800) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=ANY=[@ANYBLOB="500000001000370400"/20, @ANYRES32=r7, @ANYBLOB="83040500010000003000128008000100677265002400028008000700ac14140005000a000000000005000800000000000500130001"], 0x50}}, 0x0) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @empty}}}], 0x20}}], 0x1, 0x0) 2.276017526s ago: executing program 0 (id=146): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000600)={0x2, {{0x2, 0x0, @multicast2}}}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000400180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0b00000005000000000400000d00000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000008000080000000000ff000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r4}, 0x10) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x0, &(0x7f0000000280)={[{@lazytime}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5e9, &(0x7f0000001200)="$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") setpriority(0x1, 0x0, 0x4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000020300000000000000fff703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r5, &(0x7f0000000340), &(0x7f0000000700)=""/154}, 0x20) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x400, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) writev(r6, &(0x7f0000000040)=[{&(0x7f0000000100)="89e7ee2c78dad9b4b473fec9", 0xc}, {&(0x7f0000000440)="9c74", 0x2}], 0x2) 2.270366595s ago: executing program 4 (id=147): bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) syz_usb_connect$cdc_ecm(0x3, 0x5c, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000102505a1a440000000010109024a00010100c0030904000003020200000b410600004ed9d401246005240004000d240f01f006aac09d0c000000090581032000037fff0905820200000001000905030220"], 0x0) 2.118788219s ago: executing program 0 (id=148): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=ANY=[@ANYBLOB="500000001000370400"/20, @ANYRES32=r3, @ANYBLOB="83040500010000003000128008000100677265002400028008000700ac14140005000a0000000000"], 0x50}}, 0x0) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @empty}}}], 0x20}}], 0x1, 0x0) 2.05776738s ago: executing program 0 (id=149): r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x20) r1 = socket$key(0xf, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32, @ANYRESOCT=r1], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x40000006}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB], 0x0, 0x34}, 0x28) syz_open_procfs$namespace(0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r2 = gettid() r3 = eventfd2(0x0, 0x0) write$eventfd(r3, &(0x7f0000000140)=0xfffffffffffffff8, 0x8) write$eventfd(r3, &(0x7f0000000040)=0x8, 0x8) epoll_create1(0x80000) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) 1.834245574s ago: executing program 3 (id=150): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea048500000050000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x1c0002, 0x0) add_key$user(&(0x7f0000000000), &(0x7f0000000240)={'syz', 0x3}, &(0x7f0000000440)="98ff464bc9b091653a17abe8df0f7825aef97d9a7d2ef0185c59e60d0916a08fa3199b2a7e74032af4661cd2ff4400a58bdd0470cc8da9253bb9312908666810bac2a5c84ca3a958984a3a3666", 0x4d, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) 1.761780286s ago: executing program 1 (id=151): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x13, 0x5c, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000000000b7030000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r1}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) 1.751186236s ago: executing program 2 (id=152): r0 = syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000480)='./file0\x00', 0x2000000, &(0x7f0000000880)=ANY=[@ANYRESHEX, @ANYRES8, @ANYRESOCT, @ANYBLOB="ac82fa3da8cb64cc9eacb70c5918a0fd0f53ab333860bfb7988f9b8200a0d9b5f31f4d5b386152286170eda7f0291b03bafde1116c6f4799c9f36b7247c9664cfa9b290a30352b971c", @ANYRESHEX], 0x8, 0x2f8, &(0x7f0000000ac0)="$eJzs3EtPE1EUwPHTB6UtgbIwGk0MN7rRzQSqa6UxkBibSJAaH4nJAFNtOrak02BqjOjKrfFDuCAs2ZEoX4CNO924ccfGxIUsjDWdB4UyhVKgRfj/EjKHuffM3NsZyLlNO+sP3j/PZy0tq5clGFUSEBHZEBmUoHgC7jZoxxHZ6o1c7fv19eK9h4/upNLpsUmlxlNT15JKqYGhTy9exdxuK72yNvhk/Wfyx9rZtfPrf6ee5SyVs1ShWFa6mi5+L+vTpqFmc1ZeU2rCNHTLULmCZZSc9qLTnjWLc3MVpRdm++NzJcOylF6oqLxRUeWiKpcqKvRUzxWUpmmqPy6nWbilXpnFyUk91eYpZtrMQ4eVSik9JCKxHS2Zxa4MCAAAdFVj/R8UdZj1/9Kl1XLf/eUBt/5fifjV/9e/OcfaVv9HRcS3/vfO71v/6/ur/3dWRKfLgep/HA9DkR27AvWw1lhK6XH379f29vHSsB1Q/wMAAAAAAAAAAAAAAAAAAAAA8D/YqFYT1Wo14W29n14RiYqI97tPakhEbnZhyDhELVz/YJPrjxOg/sW98ICI+W4+M59xtm6HVRExxZBhScgf+35w1WLvm0eqZlA+mwtu/sJ8JmS3pLKSs/NHJNEjjfnV6vjt9NiIcmzP75H4Zn6vIUlJyBn//KRvfkSuXN5yfk0S8mVGimLKrD2Oev7rEaVu3U035MfsfgAAAAAAnASa2uS7fte0Zu1O/ub6uvH9gVB9fT3suz4Py4XWHlIJAAAAAAAOyKq8zOumaZR2CWKyd5/2g/ARHdmbYatZ3mcZjm6muwTeybc1Rd2dh/6yBPbxsjQJgtJO1lBtNuqgs/DeNmrWRyZGO38F7eDch4+/95cV3OWuu7Ec3WOm7Qch5wZoduSejvzzAQAAANBR9aLf2zPa3QEBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHAKdeLpaN2eIwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHBc/AsAAP//QE0BYQ==") sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x40000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@ipv6_newrule={0x1c, 0x20, 0x1, 0x70bd23, 0xffffffff, {0xa, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x1}}, 0x1c}, 0x1, 0x0, 0x0, 0x40810}, 0x4044) timer_create(0x3, 0x0, &(0x7f0000000040)) 1.699822587s ago: executing program 1 (id=153): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x20780, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r0}, 0x10) time(0x0) 1.653135508s ago: executing program 1 (id=154): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000070000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r4, 0xfffffffe) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r5 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TCFLSH(r5, 0x540b, 0x2) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x54, r6, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @local}}, {0x14, 0x2, @in={0x2, 0x0, @rand_addr=0x64010101}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x8008080}, 0x0) 1.462488071s ago: executing program 2 (id=155): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000c00)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e24, @multicast1}, 0x10) sendmmsg(r2, 0x0, 0x0, 0x0) 1.462214911s ago: executing program 2 (id=156): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000ffffffff00000000000000001801000011646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000007d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000053d11f1d8500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000400)='itimer_state\x00', r0}, 0x18) setitimer(0x2, 0x0, 0x0) 1.461985781s ago: executing program 2 (id=157): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x0, &(0x7f00000000c0)}) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x1d64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000580)=@flushsa={0x14, 0x1c, 0x1, 0x70bd27, 0x0, {0xff}}, 0x14}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00'}, 0x10) rt_tgsigqueueinfo(0x0, r2, 0x1a, 0x0) 1.173379547s ago: executing program 0 (id=158): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000100), r2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000400)='sched_switch\x00', r3}, 0x18) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10, 0xe}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x6, 0xffffffff}]}}]}, 0x38}}, 0x4048000) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000080)='task_rename\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) signalfd4(r3, &(0x7f0000000340)={[0x7fffffffffffffff]}, 0x8, 0x800) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=ANY=[@ANYBLOB="500000001000370400"/20, @ANYRES32=r7, @ANYBLOB="83040500010000003000128008000100677265002400028008000700ac14140005000a000000000005000800000000000500130001"], 0x50}}, 0x0) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @empty}}}], 0x20}}], 0x1, 0x0) 1.145705138s ago: executing program 0 (id=159): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) getpid() mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1004002, 0x0) chdir(&(0x7f00000001c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) 780.524854ms ago: executing program 3 (id=160): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=ANY=[@ANYBLOB="500000001000370400"/20, @ANYRES32=r3, @ANYBLOB="83040500010000003000128008000100677265002400028008000700ac14140005000a0000000000"], 0x50}}, 0x0) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @empty}}}], 0x20}}], 0x1, 0x0) 759.337335ms ago: executing program 1 (id=161): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f00002e5000/0x400000)=nil, 0x400000, 0xf) epoll_create1(0x80000) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000020000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x18) socket$netlink(0x10, 0x3, 0x0) r5 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x7fffefff) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) ptrace$pokeuser(0x6, r7, 0x388, 0x41d9fda7) 756.737505ms ago: executing program 3 (id=162): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da07000000000001090224000100000000090400000903000000092100000001222200090581"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18"], 0x0, 0x4}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) socket$inet(0x2, 0x3, 0x6) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00222200000096231306e53f070c0000032a9000070100f3ff83"], 0x0}, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, &(0x7f0000000080)=0x40f, 0x4) r1 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_OPENQRY(r1, 0x4b4c, &(0x7f0000000080)) 706.986666ms ago: executing program 4 (id=163): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000005c0)={'#! ', './file0/file0'}, 0x11) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) syz_btf_id_by_name$bpf_lsm(&(0x7f0000000980)='bpf_lsm_locked_down\x00') 619.926598ms ago: executing program 2 (id=164): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x13, 0x5c, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000000000b703000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x94) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r1}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) 601.699018ms ago: executing program 2 (id=165): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x1a5000, 0x0, 0x0, 0x0, 0x0) getpgid(0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x15) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40000001, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) r6 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r6, 0x20, &(0x7f0000000180)="5e73663bf4082f7c6cbecbf09d6dd7be5a06dfd64563f329c16f799d1836bfc45a7badc8faed24bb77c848723a43602d1fe0d236c062e105ec77ffd00fb243c3111dda42112650cc", 0x0, 0xfe2a) socket(0x10, 0x4, 0x0) 0s ago: executing program 0 (id=166): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x200000, &(0x7f0000000300)={[{@minixdf}, {}, {@barrier_val={'barrier', 0x3d, 0x9}}, {@commit={'commit', 0x3d, 0x5}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@noblock_validity}, {@nomblk_io_submit}]}, 0x1, 0x566, &(0x7f00000015c0)="$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") socket$inet6_udp(0xa, 0x2, 0x0) lsetxattr$security_ima(0x0, &(0x7f0000000140), &(0x7f0000000400)=ANY=[], 0x1d, 0x1) r0 = syz_open_dev$usbfs(0x0, 0x75, 0x10b701) ioctl$USBDEVFS_CLAIM_PORT(r0, 0x80045518, &(0x7f0000000000)=0x1) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2) open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) connect$unix(0xffffffffffffffff, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c000280050001000000000008000740"], 0x64}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.197' (ED25519) to the list of known hosts. [ 20.298370][ T28] audit: type=1400 audit(1757736346.911:64): avc: denied { mounton } for pid=275 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 20.299438][ T275] cgroup: Unknown subsys name 'net' [ 20.321029][ T28] audit: type=1400 audit(1757736346.911:65): avc: denied { mount } for pid=275 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 20.348267][ T28] audit: type=1400 audit(1757736346.941:66): avc: denied { unmount } for pid=275 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 20.348400][ T275] cgroup: Unknown subsys name 'devices' [ 20.491826][ T275] cgroup: Unknown subsys name 'hugetlb' [ 20.497426][ T275] cgroup: Unknown subsys name 'rlimit' [ 20.609604][ T28] audit: type=1400 audit(1757736347.221:67): avc: denied { setattr } for pid=275 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 20.633072][ T28] audit: type=1400 audit(1757736347.221:68): avc: denied { mounton } for pid=275 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 20.641387][ T277] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 20.657985][ T28] audit: type=1400 audit(1757736347.221:69): avc: denied { mount } for pid=275 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 20.689488][ T28] audit: type=1400 audit(1757736347.281:70): avc: denied { relabelto } for pid=277 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.714952][ T28] audit: type=1400 audit(1757736347.281:71): avc: denied { write } for pid=277 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.743369][ T28] audit: type=1400 audit(1757736347.361:72): avc: denied { read } for pid=275 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.769001][ T28] audit: type=1400 audit(1757736347.361:73): avc: denied { open } for pid=275 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.769210][ T275] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 22.163734][ T283] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.170939][ T283] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.178212][ T283] device bridge_slave_0 entered promiscuous mode [ 22.185330][ T283] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.192557][ T283] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.199826][ T283] device bridge_slave_1 entered promiscuous mode [ 22.247771][ T284] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.254872][ T284] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.262485][ T284] device bridge_slave_0 entered promiscuous mode [ 22.287148][ T284] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.294235][ T284] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.301725][ T284] device bridge_slave_1 entered promiscuous mode [ 22.357217][ T285] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.364392][ T285] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.371768][ T285] device bridge_slave_0 entered promiscuous mode [ 22.383455][ T285] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.390491][ T285] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.397920][ T285] device bridge_slave_1 entered promiscuous mode [ 22.434758][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.441844][ T287] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.449267][ T287] device bridge_slave_0 entered promiscuous mode [ 22.462530][ T286] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.469563][ T286] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.476973][ T286] device bridge_slave_0 entered promiscuous mode [ 22.485086][ T286] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.492223][ T286] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.499499][ T286] device bridge_slave_1 entered promiscuous mode [ 22.506043][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.513111][ T287] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.520459][ T287] device bridge_slave_1 entered promiscuous mode [ 22.642346][ T283] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.649393][ T283] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.656635][ T283] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.663656][ T283] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.679514][ T284] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.686554][ T284] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.693878][ T284] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.700896][ T284] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.716188][ T285] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.723245][ T285] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.730526][ T285] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.737540][ T285] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.786399][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.793455][ T287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.800725][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.807904][ T287] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.823218][ T286] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.830266][ T286] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.837605][ T286] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.844632][ T286] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.868645][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.876010][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.884044][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.891692][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.898905][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.906135][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.913276][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.920658][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.927842][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.935101][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.942730][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 22.950162][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 22.958409][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 22.966638][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.973658][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.993998][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.001916][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.009331][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.017593][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.024681][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.032188][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.040436][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.047458][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.054969][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.063167][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.070200][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.077502][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.085699][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.092722][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.123167][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.130986][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.139079][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.146194][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.153934][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.162064][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.169953][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.178022][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.186102][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.194295][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.201325][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.221399][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 23.229442][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.237563][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 23.245790][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.253956][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 23.262337][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.270555][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.277555][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.284879][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 23.293155][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.308621][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 23.316124][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.326996][ T284] device veth0_vlan entered promiscuous mode [ 23.333533][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 23.341934][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.350032][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.357162][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.364662][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 23.372835][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.380952][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 23.389147][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.397407][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.404433][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.411842][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 23.419641][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.427773][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.435240][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.443544][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 23.451641][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.464055][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 23.472338][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.495018][ T285] device veth0_vlan entered promiscuous mode [ 23.503390][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 23.511909][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.520517][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 23.528543][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.536746][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 23.544966][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.553045][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 23.560945][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.568800][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 23.576721][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.584760][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.592306][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.599634][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.607176][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.614806][ T283] device veth0_vlan entered promiscuous mode [ 23.630890][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 23.639137][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.647395][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 23.655862][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.665317][ T284] device veth1_macvtap entered promiscuous mode [ 23.677644][ T283] device veth1_macvtap entered promiscuous mode [ 23.685654][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 23.693295][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 23.701593][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.709675][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 23.717553][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 23.725519][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.733633][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 23.742112][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.750393][ T287] device veth0_vlan entered promiscuous mode [ 23.756616][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.764229][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.772813][ T285] device veth1_macvtap entered promiscuous mode [ 23.787821][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 23.795667][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 23.804084][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.818009][ T287] device veth1_macvtap entered promiscuous mode [ 23.830660][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.838902][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.847229][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 23.855627][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.864164][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 23.872546][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 23.881014][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 23.889170][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 23.908448][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.916341][ T284] request_module fs-gadgetfs succeeded, but still no fs? [ 23.916860][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.930853][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.938347][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 23.946746][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.957399][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 23.966020][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 23.975710][ T286] device veth0_vlan entered promiscuous mode [ 23.993730][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.007382][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.015900][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.028276][ T286] device veth1_macvtap entered promiscuous mode [ 24.045877][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.054220][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.057580][ T340] syz.4.5 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 24.078054][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.095260][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.104297][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.113327][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.364130][ T365] xt_CT: No such helper "pptp" [ 24.380260][ T351] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 24.387790][ T335] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 24.570163][ T335] usb 1-1: Using ep0 maxpacket: 32 [ 24.576385][ T351] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 24.586583][ T335] usb 1-1: config 4 has an invalid interface number: 128 but max is 0 [ 24.594930][ T351] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 24.603842][ T335] usb 1-1: config 4 has no interface number 0 [ 24.609932][ T351] usb 5-1: config 1 has no interface number 0 [ 24.616053][ T335] usb 1-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 24.627156][ T351] usb 5-1: config 1 interface 1 has no altsetting 0 [ 24.633802][ T335] usb 1-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 24.643789][ T335] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 24.652867][ T335] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 24.662696][ T351] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 24.672042][ T335] hub 1-1:4.128: USB hub found [ 24.676826][ T351] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 24.684901][ T351] usb 5-1: Product: syz [ 24.689081][ T351] usb 5-1: Manufacturer: syz [ 24.693709][ T351] usb 5-1: SerialNumber: syz [ 24.864698][ T335] hub 1-1:4.128: 6 ports detected [ 24.869830][ T335] hub 1-1:4.128: Using single TT (err -22) [ 24.885820][ T335] hub 1-1:4.128: insufficient power available to use all downstream ports [ 25.015390][ T371] SELinux: Context system_u:object_r:bsdpty_device_t:s0 is not valid (left unmapped). [ 25.269555][ T335] usb 1-1: USB disconnect, device number 2 [ 25.370137][ T351] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 25.371960][ T19] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 25.560236][ T19] usb 4-1: Using ep0 maxpacket: 16 [ 25.561219][ T351] usb 3-1: New USB device found, idVendor=1e7d, idProduct=3264, bcdDevice= 0.00 [ 25.566539][ T19] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 25.574533][ T351] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 25.584530][ T19] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 25.595889][ T351] usb 3-1: config 0 descriptor?? [ 25.602245][ T19] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 32 [ 25.618245][ T19] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 25.627393][ T19] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 25.635400][ T19] usb 4-1: SerialNumber: syz [ 25.641288][ T380] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 25.648970][ T19] cdc_acm 4-1:1.0: skipping garbage [ 25.654527][ T19] cdc_acm: probe of 4-1:1.0 failed with error -12 [ 25.717414][ T382] netlink: 48 bytes leftover after parsing attributes in process `syz.1.16'. [ 25.845260][ T28] kauditd_printk_skb: 51 callbacks suppressed [ 25.845274][ T28] audit: type=1400 audit(1757736352.461:125): avc: denied { create } for pid=383 comm="syz.1.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 25.846319][ T390] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17'. [ 25.902608][ T343] usb 4-1: USB disconnect, device number 2 [ 25.950322][ T393] netlink: 12 bytes leftover after parsing attributes in process `syz.1.17'. [ 26.013159][ T351] isku 0003:1E7D:3264.0001: unbalanced delimiter at end of report description [ 26.023584][ T351] isku 0003:1E7D:3264.0001: parse failed [ 26.029376][ T351] isku: probe of 0003:1E7D:3264.0001 failed with error -22 [ 26.228117][ T343] usb 3-1: USB disconnect, device number 2 [ 26.635362][ T28] audit: type=1400 audit(1757736353.251:126): avc: denied { create } for pid=400 comm="syz.1.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 26.654742][ T28] audit: type=1400 audit(1757736353.251:127): avc: denied { connect } for pid=400 comm="syz.1.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 26.674230][ T28] audit: type=1400 audit(1757736353.251:128): avc: denied { getopt } for pid=400 comm="syz.1.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 27.030121][ T343] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 27.101388][ T24] usb 5-1: USB disconnect, device number 2 [ 27.210114][ T343] usb 3-1: Using ep0 maxpacket: 16 [ 27.216995][ T343] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 27.230520][ T343] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 27.239589][ T343] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 27.253046][ T414] xt_CT: No such helper "pptp" [ 27.263060][ T343] usb 3-1: config 0 descriptor?? [ 27.270341][ T343] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 27.278780][ T28] audit: type=1400 audit(1757736353.891:129): avc: denied { read } for pid=415 comm="syz.3.27" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 27.303973][ T28] audit: type=1400 audit(1757736353.921:130): avc: denied { open } for pid=415 comm="syz.3.27" path="/dev/kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 27.319184][ T416] loop3: detected capacity change from 0 to 2048 [ 27.370893][ T416] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 27.379581][ T416] ext4 filesystem being mounted at /6/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 27.407875][ T28] audit: type=1400 audit(1757736354.021:131): avc: denied { write } for pid=415 comm="syz.3.27" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 27.429551][ T28] audit: type=1400 audit(1757736354.021:132): avc: denied { add_name } for pid=415 comm="syz.3.27" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 27.430436][ T287] EXT4-fs (loop3): unmounting filesystem. [ 27.454044][ T28] audit: type=1400 audit(1757736354.021:133): avc: denied { create } for pid=415 comm="syz.3.27" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 27.476093][ T28] audit: type=1400 audit(1757736354.021:134): avc: denied { read write } for pid=415 comm="syz.3.27" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 27.518712][ T423] netlink: 48 bytes leftover after parsing attributes in process `syz.3.28'. [ 27.684626][ T433] netlink: 4 bytes leftover after parsing attributes in process `syz.0.32'. [ 27.694257][ T433] netlink: 12 bytes leftover after parsing attributes in process `syz.0.32'. [ 27.770116][ T343] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 27.870109][ T24] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 27.960097][ T343] usb 2-1: Using ep0 maxpacket: 16 [ 27.970635][ T343] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 27.980765][ T343] usb 2-1: New USB device found, idVendor=056a, idProduct=0064, bcdDevice= 0.00 [ 27.989854][ T343] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 28.001872][ T343] usb 2-1: config 0 descriptor?? [ 28.050115][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 28.056327][ T24] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 28.066369][ T24] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 28.076325][ T24] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 32 [ 28.087151][ T24] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 28.096411][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 28.104674][ T24] usb 4-1: SerialNumber: syz [ 28.110336][ T431] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 28.118153][ T24] cdc_acm 4-1:1.0: skipping garbage [ 28.123659][ T24] cdc_acm: probe of 4-1:1.0 failed with error -12 [ 28.325808][ T24] usb 4-1: USB disconnect, device number 3 [ 28.409964][ T343] wacom 0003:056A:0064.0002: Unknown device_type for 'HID 056a:0064'. Assuming pen. [ 28.420340][ T343] wacom 0003:056A:0064.0002: hidraw0: USB HID v0.00 Device [HID 056a:0064] on usb-dummy_hcd.1-1/input0 [ 28.432250][ T343] input: Wacom PenPartner2 Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:056A:0064.0002/input/input4 [ 28.611170][ T343] usb 2-1: USB disconnect, device number 2 [ 28.710357][ T351] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 28.931256][ T351] usb 1-1: New USB device found, idVendor=1e7d, idProduct=3264, bcdDevice= 0.00 [ 28.940602][ T351] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 28.952833][ T351] usb 1-1: config 0 descriptor?? [ 29.026041][ T452] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 29.149645][ T453] loop3: detected capacity change from 0 to 512 [ 29.203582][ T453] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.37: bg 0: block 393: padding at end of block bitmap is not set [ 29.218781][ T453] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 29.230143][ T453] EXT4-fs (loop3): 2 truncates cleaned up [ 29.235955][ T453] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 29.848990][ T459] usb 3-1: USB disconnect, device number 3 [ 29.861995][ T464] netlink: 48 bytes leftover after parsing attributes in process `syz.4.41'. [ 29.937743][ T351] isku 0003:1E7D:3264.0003: unbalanced delimiter at end of report description [ 29.947705][ T287] EXT4-fs (loop3): unmounting filesystem. [ 29.950159][ T351] isku 0003:1E7D:3264.0003: parse failed [ 29.960383][ T351] isku: probe of 0003:1E7D:3264.0003 failed with error -22 [ 30.046494][ T6] usb 1-1: USB disconnect, device number 3 [ 30.094066][ T479] netlink: 8 bytes leftover after parsing attributes in process `syz.4.46'. [ 30.103759][ T479] loop4: detected capacity change from 0 to 16 [ 30.120265][ T479] ======================================================= [ 30.120265][ T479] WARNING: The mand mount option has been deprecated and [ 30.120265][ T479] and is ignored by this kernel. Remove the mand [ 30.120265][ T479] option from the mount to silence this warning. [ 30.120265][ T479] ======================================================= [ 30.157546][ T479] erofs: (device loop4): mounted with root inode @ nid 36. [ 30.159871][ T480] xt_CT: No such helper "pptp" [ 31.551070][ T495] loop2: detected capacity change from 0 to 128 [ 31.561760][ T497] loop1: detected capacity change from 0 to 1024 [ 31.585691][ T495] FAT-fs (loop2): Unrecognized mount option "0xffffffffffffffff01777777777777777777777=d̞ YS38`" or missing value [ 31.597939][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 31.597961][ T28] audit: type=1400 audit(1757736358.201:139): avc: denied { read write } for pid=491 comm="syz.3.49" name="uinput" dev="devtmpfs" ino=262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 31.600571][ T504] netlink: 48 bytes leftover after parsing attributes in process `syz.4.54'. [ 31.608117][ T498] input: syz1 as /devices/virtual/input/input7 [ 31.628954][ T497] EXT4-fs: Ignoring removed nomblk_io_submit option [ 31.637907][ T28] audit: type=1400 audit(1757736358.221:140): avc: denied { open } for pid=491 comm="syz.3.49" path="/dev/uinput" dev="devtmpfs" ino=262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 31.677127][ T28] audit: type=1400 audit(1757736358.221:141): avc: denied { ioctl } for pid=491 comm="syz.3.49" path="/dev/uinput" dev="devtmpfs" ino=262 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 31.705533][ T28] audit: type=1400 audit(1757736358.291:142): avc: denied { read } for pid=88 comm="acpid" name="event3" dev="devtmpfs" ino=605 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 31.728376][ T28] audit: type=1400 audit(1757736358.291:143): avc: denied { open } for pid=88 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=605 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 31.751769][ T28] audit: type=1400 audit(1757736358.291:144): avc: denied { ioctl } for pid=88 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=605 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 31.780254][ T350] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 31.793942][ T509] loop4: detected capacity change from 0 to 1024 [ 31.837613][ T497] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 31.880338][ T509] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 31.967331][ T285] EXT4-fs (loop4): unmounting filesystem. [ 31.990651][ T516] loop0: detected capacity change from 0 to 512 [ 32.069443][ T516] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.55: bg 0: block 393: padding at end of block bitmap is not set [ 32.084970][ T516] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 32.095561][ T516] EXT4-fs (loop0): 2 truncates cleaned up [ 32.101373][ T516] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 32.444860][ T284] EXT4-fs (loop1): unmounting filesystem. [ 32.618209][ T28] audit: type=1400 audit(1757736359.231:145): avc: denied { read } for pid=519 comm="syz.4.57" dev="nsfs" ino=4026532299 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 32.713080][ T28] audit: type=1400 audit(1757736359.261:146): avc: denied { open } for pid=519 comm="syz.4.57" path="net:[4026532299]" dev="nsfs" ino=4026532299 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 32.780461][ T283] EXT4-fs (loop0): unmounting filesystem. [ 33.090155][ T39] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 33.264612][ T28] audit: type=1400 audit(1757736359.881:147): avc: denied { create } for pid=539 comm="syz.4.63" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 33.283976][ T39] usb 1-1: Using ep0 maxpacket: 16 [ 33.290246][ T39] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 33.320125][ T28] audit: type=1400 audit(1757736359.901:148): avc: denied { connect } for pid=539 comm="syz.4.63" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 33.321977][ T39] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 33.349047][ T39] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.412049][ T39] usb 1-1: config 0 descriptor?? [ 33.426332][ T39] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 34.273021][ T549] overlayfs: failed to get inode (-116) [ 34.292173][ T551] netlink: 48 bytes leftover after parsing attributes in process `syz.1.67'. [ 34.301475][ T549] overlayfs: failed to look up (bus) for ino (-116) [ 34.369145][ T555] netlink: 4 bytes leftover after parsing attributes in process `syz.1.69'. [ 34.379186][ T555] sch_fq: defrate 4294967295 ignored. [ 34.431066][ T562] loop1: detected capacity change from 0 to 128 [ 34.452865][ T562] FAT-fs (loop1): Unrecognized mount option "0xffffffffffffffff01777777777777777777777=d̞ YS38`" or missing value [ 34.566356][ T568] loop4: detected capacity change from 0 to 512 [ 34.751639][ T568] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.71: bg 0: block 393: padding at end of block bitmap is not set [ 34.766843][ T568] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 34.777077][ T568] EXT4-fs (loop4): 2 truncates cleaned up [ 34.783101][ T568] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 35.473841][ T285] EXT4-fs (loop4): unmounting filesystem. [ 35.592799][ T590] overlayfs: failed to get inode (-116) [ 35.606366][ T590] overlayfs: failed to look up (bus) for ino (-116) [ 35.630448][ T594] input: syz1 as /devices/virtual/input/input8 [ 35.645476][ T596] netlink: 48 bytes leftover after parsing attributes in process `syz.1.81'. [ 35.749154][ T602] netlink: 4 bytes leftover after parsing attributes in process `syz.1.83'. [ 35.782165][ T602] sch_fq: defrate 4294967295 ignored. [ 35.831378][ T602] syz.1.83 (602) used greatest stack depth: 22216 bytes left [ 35.839171][ T351] usb 1-1: USB disconnect, device number 4 [ 35.903508][ T609] xt_CT: No such helper "pptp" [ 35.921486][ T610] loop0: detected capacity change from 0 to 1024 [ 35.940586][ T610] EXT4-fs: Ignoring removed nomblk_io_submit option [ 35.999181][ T610] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 36.140519][ T283] EXT4-fs (loop0): unmounting filesystem. [ 36.368138][ T619] loop0: detected capacity change from 0 to 512 [ 36.523789][ T619] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.87: bg 0: block 393: padding at end of block bitmap is not set [ 36.539157][ T619] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 36.550460][ T619] EXT4-fs (loop0): 2 truncates cleaned up [ 36.556245][ T619] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 37.106389][ T623] loop1: detected capacity change from 0 to 128 [ 37.126611][ T623] FAT-fs (loop1): Unrecognized mount option "0xffffffffffffffff01777777777777777777777=d̞ YS38`" or missing value [ 37.202030][ T283] EXT4-fs (loop0): unmounting filesystem. [ 37.211109][ T350] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 37.440692][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 37.440750][ T28] audit: type=1400 audit(1757736364.051:154): avc: denied { create } for pid=625 comm="syz.3.90" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 37.513631][ T28] audit: type=1400 audit(1757736364.051:155): avc: denied { connect } for pid=625 comm="syz.3.90" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 37.700131][ T624] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 37.880085][ T624] usb 1-1: Using ep0 maxpacket: 16 [ 37.886358][ T624] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 37.910084][ T624] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 37.929578][ T624] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 32 [ 37.957668][ T624] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 37.974389][ T624] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 37.988919][ T624] usb 1-1: SerialNumber: syz [ 37.998261][ T628] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 38.009190][ T624] cdc_acm 1-1:1.0: skipping garbage [ 38.024068][ T624] cdc_acm: probe of 1-1:1.0 failed with error -12 [ 38.048360][ T643] overlayfs: failed to get inode (-116) [ 38.052972][ T28] audit: type=1400 audit(1757736364.661:156): avc: denied { create } for pid=640 comm="syz.1.94" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 38.059500][ T643] overlayfs: failed to look up (bus) for ino (-116) [ 38.168196][ T647] loop3: detected capacity change from 0 to 1024 [ 38.186530][ T647] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 38.196010][ T28] audit: type=1400 audit(1757736364.811:157): avc: denied { read write } for pid=640 comm="syz.1.94" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 38.216988][ T624] usb 1-1: USB disconnect, device number 5 [ 38.256028][ T287] EXT4-fs (loop3): unmounting filesystem. [ 38.257251][ T28] audit: type=1400 audit(1757736364.811:158): avc: denied { open } for pid=640 comm="syz.1.94" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 38.286062][ T28] audit: type=1400 audit(1757736364.871:159): avc: denied { unmount } for pid=287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 38.316875][ T28] audit: type=1400 audit(1757736364.931:160): avc: denied { read } for pid=654 comm="syz-executor" path="/net/tun" dev="devtmpfs" ino=156 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:bsdpty_device_t:s0" [ 38.351354][ T28] audit: type=1400 audit(1757736364.961:161): avc: denied { ioctl } for pid=654 comm="syz.4.99" path="/dev/vhost-vsock" dev="devtmpfs" ino=268 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 38.386006][ T28] audit: type=1400 audit(1757736365.001:162): avc: denied { unlink } for pid=659 comm="syz.4.100" name="#11" dev="tmpfs" ino=166 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 38.417956][ T28] audit: type=1400 audit(1757736365.001:163): avc: denied { mount } for pid=659 comm="syz.4.100" name="/" dev="overlay" ino=161 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 38.893813][ T671] loop1: detected capacity change from 0 to 128 [ 38.917852][ T671] FAT-fs (loop1): Unrecognized mount option "0xffffffffffffffff01777777777777777777777=d̞ YS38`" or missing value [ 38.966942][ T673] loop0: detected capacity change from 0 to 512 [ 39.073161][ T673] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.102: bg 0: block 393: padding at end of block bitmap is not set [ 39.088910][ T673] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 39.100220][ T673] EXT4-fs (loop0): 2 truncates cleaned up [ 39.106023][ T673] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 39.701874][ T676] binder_alloc: 675: binder_alloc_buf, no vma [ 39.711931][ T678] netlink: 24 bytes leftover after parsing attributes in process `syz.3.104'. [ 39.771874][ T283] EXT4-fs (loop0): unmounting filesystem. [ 40.203379][ T689] loop2: detected capacity change from 0 to 1024 [ 40.790537][ T689] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 40.870532][ T286] EXT4-fs (loop2): unmounting filesystem. [ 40.913809][ T714] netlink: 24 bytes leftover after parsing attributes in process `syz.3.119'. [ 40.957148][ T720] netlink: 4 bytes leftover after parsing attributes in process `syz.2.121'. [ 40.967285][ T720] sch_fq: defrate 4294967295 ignored. [ 41.050122][ T19] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 41.360151][ T288] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 41.469643][ T19] usb 1-1: Using ep0 maxpacket: 16 [ 41.475914][ T19] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 41.486312][ T19] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 41.496120][ T19] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 32 [ 41.506659][ T19] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 41.515853][ T19] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 41.523921][ T19] usb 1-1: SerialNumber: syz [ 41.529678][ T703] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 41.541299][ T19] cdc_acm 1-1:1.0: skipping garbage [ 41.546775][ T19] cdc_acm: probe of 1-1:1.0 failed with error -12 [ 41.550125][ T288] usb 3-1: Using ep0 maxpacket: 16 [ 41.565700][ T288] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 41.578922][ T288] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 41.588323][ T288] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 41.603102][ T288] usb 3-1: config 0 descriptor?? [ 41.611418][ T288] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 41.694083][ T746] loop4: detected capacity change from 0 to 1024 [ 41.702123][ T746] EXT4-fs: Ignoring removed nomblk_io_submit option [ 41.711895][ T746] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 41.739543][ T19] usb 1-1: USB disconnect, device number 6 [ 41.833011][ T753] netlink: 8 bytes leftover after parsing attributes in process `syz.3.132'. [ 41.842918][ T753] loop3: detected capacity change from 0 to 16 [ 41.849707][ T753] erofs: (device loop3): mounted with root inode @ nid 36. [ 42.006940][ T757] netlink: 4 bytes leftover after parsing attributes in process `syz.1.133'. [ 42.017046][ T757] sch_fq: defrate 4294967295 ignored. [ 42.084068][ T761] loop1: detected capacity change from 0 to 128 [ 42.099481][ T761] FAT-fs (loop1): Unrecognized mount option "0xffffffffffffffff01777777777777777777777=d̞ YS38`" or missing value [ 42.591485][ T285] EXT4-fs (loop4): unmounting filesystem. [ 43.267302][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 43.267315][ T28] audit: type=1400 audit(1757736369.881:169): avc: denied { create } for pid=787 comm="syz.0.144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 43.275004][ T788] tipc: Enabling not permitted [ 43.300531][ T788] tipc: Enabling of bearer rejected, failed to enable media [ 43.587045][ T787] syz.0.144 (787) used greatest stack depth: 21600 bytes left [ 43.596801][ T794] netlink: 4 bytes leftover after parsing attributes in process `syz.4.145'. [ 43.606926][ T794] sch_fq: defrate 4294967295 ignored. [ 43.627595][ T796] loop0: detected capacity change from 0 to 1024 [ 43.641387][ T796] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 43.656311][ T28] audit: type=1400 audit(1757736370.271:170): avc: denied { read open } for pid=795 comm="syz.0.146" path="/22/bus/bus" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 43.691696][ T28] audit: type=1400 audit(1757736370.301:171): avc: denied { write } for pid=795 comm="syz.0.146" name="tun" dev="devtmpfs" ino=156 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:bsdpty_device_t:s0" [ 43.718883][ T28] audit: type=1400 audit(1757736370.301:172): avc: denied { ioctl } for pid=795 comm="syz.0.146" path="/dev/net/tun" dev="devtmpfs" ino=156 ioctlcmd=0x54ca scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:bsdpty_device_t:s0" [ 43.747810][ T28] audit: type=1400 audit(1757736370.301:173): avc: denied { append } for pid=795 comm="syz.0.146" name="tun" dev="devtmpfs" ino=156 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:bsdpty_device_t:s0" [ 43.786418][ T283] EXT4-fs (loop0): unmounting filesystem. [ 43.819833][ T803] netlink: 16 bytes leftover after parsing attributes in process `syz.0.148'. [ 43.920103][ T6] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 44.100159][ T6] usb 5-1: Using ep0 maxpacket: 16 [ 44.107035][ T6] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 44.132452][ T6] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 44.143238][ T6] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 32 [ 44.158160][ T811] loop2: detected capacity change from 0 to 128 [ 44.164930][ T19] usb 3-1: USB disconnect, device number 4 [ 44.171197][ T6] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 44.182114][ T6] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 44.190870][ T811] FAT-fs (loop2): Unrecognized mount option "0xffffffffffffffff01777777777777777777777=d̞ YS38`" or missing value [ 44.204939][ T6] usb 5-1: SerialNumber: syz [ 44.210857][ T800] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 44.218592][ T6] cdc_acm 5-1:1.0: skipping garbage [ 44.227403][ T6] cdc_acm: probe of 5-1:1.0 failed with error -12 [ 44.420902][ T19] usb 5-1: USB disconnect, device number 3 [ 44.432964][ T28] audit: type=1400 audit(1757736371.051:174): avc: denied { write } for pid=825 comm="syz.2.157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 44.452905][ T28] audit: type=1400 audit(1757736371.051:175): avc: denied { nlmsg_write } for pid=825 comm="syz.2.157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 44.738472][ T830] netlink: 4 bytes leftover after parsing attributes in process `syz.0.158'. [ 44.748441][ T830] sch_fq: defrate 4294967295 ignored. [ 45.069937][ T28] audit: type=1400 audit(1757736371.681:176): avc: denied { write } for pid=831 comm="syz.0.159" name="/" dev="incremental-fs" ino=167 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 45.094575][ T28] audit: type=1400 audit(1757736371.681:177): avc: denied { add_name } for pid=831 comm="syz.0.159" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 45.104032][ T836] netlink: 16 bytes leftover after parsing attributes in process `syz.3.160'. [ 45.121572][ T28] audit: type=1400 audit(1757736371.681:178): avc: denied { create } for pid=831 comm="syz.0.159" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 45.308130][ T850] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 45.440129][ T775] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 45.620092][ T775] usb 4-1: Using ep0 maxpacket: 16 [ 45.626477][ T775] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 45.636500][ T283] ------------[ cut here ]------------ [ 45.637011][ T775] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 45.642317][ T283] WARNING: CPU: 0 PID: 283 at fs/inode.c:332 drop_nlink+0xc5/0x110 [ 45.655362][ T775] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 45.662835][ T283] Modules linked in: [ 45.672386][ T775] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 45.675832][ T283] CPU: 0 PID: 283 Comm: syz-executor Not tainted syzkaller #0 [ 45.675853][ T283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 45.675866][ T283] RIP: 0010:drop_nlink+0xc5/0x110 [ 45.706556][ T283] Code: 1b 48 8d bb b8 04 00 00 be 08 00 00 00 e8 03 ea f0 ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 5b 81 ac ff <0f> 0b eb 86 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 5e ff ff ff 4c [ 45.726803][ T283] RSP: 0018:ffffc9000d29fc38 EFLAGS: 00010293 [ 45.732970][ T283] RAX: ffffffff81c38805 RBX: ffff8881105b3570 RCX: ffff88810d703cc0 [ 45.740970][ T283] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 45.748935][ T283] RBP: ffffc9000d29fc60 R08: 0000000000000004 R09: 0000000000000003 [ 45.756944][ T283] R10: fffff52001a53f78 R11: 1ffff92001a53f78 R12: dffffc0000000000 [ 45.764955][ T283] R13: 1ffff110220b66b7 R14: ffff8881105b35b8 R15: 0000000000000000 [ 45.770477][ T775] usb 4-1: config 0 descriptor?? [ 45.772976][ T283] FS: 0000555556533500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 45.782010][ T775] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 45.786791][ T283] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 45.800843][ T283] CR2: 00005555565564e8 CR3: 000000012f609000 CR4: 00000000003526b0 [ 45.808818][ T283] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 45.816835][ T283] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 45.824862][ T283] Call Trace: [ 45.828173][ T283] [ 45.831136][ T283] shmem_rmdir+0x5b/0x90 [ 45.835404][ T283] vfs_rmdir+0x393/0x500 [ 45.839727][ T283] incfs_kill_sb+0x105/0x220 [ 45.844348][ T283] deactivate_locked_super+0xb5/0x120 [ 45.849728][ T283] deactivate_super+0xaf/0xe0 [ 45.854469][ T283] cleanup_mnt+0x45f/0x4e0 [ 45.858893][ T283] __cleanup_mnt+0x19/0x20 [ 45.863437][ T283] task_work_run+0x1db/0x240 [ 45.868026][ T283] ? __cfi_task_work_run+0x10/0x10 [ 45.873167][ T283] ? __x64_sys_umount+0x125/0x160 [ 45.878188][ T283] ? __cfi___x64_sys_umount+0x10/0x10 [ 45.883614][ T283] exit_to_user_mode_loop+0x9b/0xb0 [ 45.888942][ T283] exit_to_user_mode_prepare+0x5a/0xa0 [ 45.894474][ T283] syscall_exit_to_user_mode+0x1a/0x30 [ 45.899943][ T283] do_syscall_64+0x58/0xa0 [ 45.904402][ T283] ? clear_bhb_loop+0x30/0x80 [ 45.909232][ T283] ? clear_bhb_loop+0x30/0x80 [ 45.913963][ T283] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 45.919961][ T283] RIP: 0033:0x7f53a8d8fed7 [ 45.924405][ T283] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 45.944034][ T283] RSP: 002b:00007fff628b73f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 45.952479][ T283] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f53a8d8fed7 [ 45.960475][ T283] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff628b74b0 [ 45.968447][ T283] RBP: 00007fff628b74b0 R08: 0000000000000000 R09: 0000000000000000 [ 45.976461][ T283] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff628b8540 [ 45.984453][ T283] R13: 00007f53a8e11c05 R14: 000000000000b215 R15: 00007fff628b8580 [ 45.992477][ T283] [ 45.995664][ T283] ---[ end trace 0000000000000000 ]--- [ 46.001235][ T283] ================================================================== [ 46.009286][ T283] BUG: KASAN: null-ptr-deref in ihold+0x20/0x60 [ 46.015534][ T283] Write of size 4 at addr 0000000000000170 by task syz-executor/283 [ 46.023510][ T283] [ 46.025826][ T283] CPU: 0 PID: 283 Comm: syz-executor Tainted: G W syzkaller #0 [ 46.034753][ T283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 46.044805][ T283] Call Trace: [ 46.048087][ T283] [ 46.051018][ T283] __dump_stack+0x21/0x24 [ 46.055358][ T283] dump_stack_lvl+0xee/0x150 [ 46.059959][ T283] ? __cfi_dump_stack_lvl+0x8/0x8 [ 46.064982][ T283] ? ihold+0x20/0x60 [ 46.068889][ T283] ? ihold+0x20/0x60 [ 46.072780][ T283] print_report+0x3d/0x60 [ 46.077110][ T283] kasan_report+0x122/0x150 [ 46.081618][ T283] ? ihold+0x20/0x60 [ 46.085512][ T283] kasan_check_range+0x280/0x290 [ 46.090451][ T283] __kasan_check_write+0x14/0x20 [ 46.095390][ T283] ihold+0x20/0x60 [ 46.099116][ T283] vfs_rmdir+0x25f/0x500 [ 46.103360][ T283] incfs_kill_sb+0x105/0x220 [ 46.107953][ T283] deactivate_locked_super+0xb5/0x120 [ 46.113340][ T283] deactivate_super+0xaf/0xe0 [ 46.118028][ T283] cleanup_mnt+0x45f/0x4e0 [ 46.122453][ T283] __cleanup_mnt+0x19/0x20 [ 46.126877][ T283] task_work_run+0x1db/0x240 [ 46.131479][ T283] ? __cfi_task_work_run+0x10/0x10 [ 46.136597][ T283] ? __x64_sys_umount+0x125/0x160 [ 46.141630][ T283] ? __cfi___x64_sys_umount+0x10/0x10 [ 46.147006][ T283] exit_to_user_mode_loop+0x9b/0xb0 [ 46.152212][ T283] exit_to_user_mode_prepare+0x5a/0xa0 [ 46.157672][ T283] syscall_exit_to_user_mode+0x1a/0x30 [ 46.163139][ T283] do_syscall_64+0x58/0xa0 [ 46.167556][ T283] ? clear_bhb_loop+0x30/0x80 [ 46.172233][ T283] ? clear_bhb_loop+0x30/0x80 [ 46.176906][ T283] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 46.182797][ T283] RIP: 0033:0x7f53a8d8fed7 [ 46.187382][ T283] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 46.206982][ T283] RSP: 002b:00007fff628b73f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 46.215387][ T283] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f53a8d8fed7 [ 46.223338][ T283] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff628b74b0 [ 46.231291][ T283] RBP: 00007fff628b74b0 R08: 0000000000000000 R09: 0000000000000000 [ 46.239242][ T283] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff628b8540 [ 46.243859][ T861] process 'syz.1.167' launched '/dev/fd/-1' with NULL argv: empty string added [ 46.247340][ T283] R13: 00007f53a8e11c05 R14: 000000000000b215 R15: 00007fff628b8580 [ 46.247361][ T283] [ 46.247368][ T283] ================================================================== [ 46.248002][ T283] Disabling lock debugging due to kernel taint [ 46.281911][ T283] BUG: kernel NULL pointer dereference, address: 0000000000000170 [ 46.289715][ T283] #PF: supervisor write access in kernel mode [ 46.295758][ T283] #PF: error_code(0x0002) - not-present page [ 46.301712][ T283] PGD 132f30067 P4D 132f30067 PUD 0 [ 46.306981][ T283] Oops: 0002 [#1] PREEMPT SMP KASAN [ 46.312158][ T283] CPU: 0 PID: 283 Comm: syz-executor Tainted: G B W syzkaller #0 [ 46.321069][ T283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 46.331189][ T283] RIP: 0010:ihold+0x26/0x60 [ 46.335677][ T283] Code: 33 36 7c df 55 48 89 e5 41 56 53 48 89 fb e8 c1 78 ac ff 48 8d bb 70 01 00 00 be 04 00 00 00 e8 40 e1 f0 ff 41 be 01 00 00 00 44 0f c1 b3 70 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 b1 [ 46.355261][ T283] RSP: 0018:ffffc9000d29fc78 EFLAGS: 00010246 [ 46.361311][ T283] RAX: ffff88810d703c00 RBX: 0000000000000000 RCX: ffff88810d703cc0 [ 46.369347][ T283] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 46.377293][ T283] RBP: ffffc9000d29fc88 R08: dffffc0000000000 R09: fffffbfff0f2d6fd [ 46.385244][ T283] R10: fffffbfff0f2d6fd R11: 1ffffffff0f2d6fc R12: ffff8881105b357c [ 46.393369][ T283] R13: dffffc0000000000 R14: 0000000000000001 R15: 0000000000000000 [ 46.401317][ T283] FS: 0000555556533500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 46.410229][ T283] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 46.416791][ T283] CR2: 0000000000000170 CR3: 000000012f609000 CR4: 00000000003526b0 [ 46.424741][ T283] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 46.432687][ T283] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 46.440737][ T283] Call Trace: [ 46.443997][ T283] [ 46.446906][ T283] vfs_rmdir+0x25f/0x500 [ 46.451131][ T283] incfs_kill_sb+0x105/0x220 [ 46.455704][ T283] deactivate_locked_super+0xb5/0x120 [ 46.461058][ T283] deactivate_super+0xaf/0xe0 [ 46.465713][ T283] cleanup_mnt+0x45f/0x4e0 [ 46.470115][ T283] __cleanup_mnt+0x19/0x20 [ 46.474517][ T283] task_work_run+0x1db/0x240 [ 46.479093][ T283] ? __cfi_task_work_run+0x10/0x10 [ 46.484182][ T283] ? __x64_sys_umount+0x125/0x160 [ 46.489193][ T283] ? __cfi___x64_sys_umount+0x10/0x10 [ 46.494803][ T283] exit_to_user_mode_loop+0x9b/0xb0 [ 46.499980][ T283] exit_to_user_mode_prepare+0x5a/0xa0 [ 46.505417][ T283] syscall_exit_to_user_mode+0x1a/0x30 [ 46.510875][ T283] do_syscall_64+0x58/0xa0 [ 46.515268][ T283] ? clear_bhb_loop+0x30/0x80 [ 46.519924][ T283] ? clear_bhb_loop+0x30/0x80 [ 46.524585][ T283] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 46.530461][ T283] RIP: 0033:0x7f53a8d8fed7 [ 46.534863][ T283] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 46.554535][ T283] RSP: 002b:00007fff628b73f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 46.562929][ T283] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f53a8d8fed7 [ 46.570884][ T283] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff628b74b0 [ 46.578833][ T283] RBP: 00007fff628b74b0 R08: 0000000000000000 R09: 0000000000000000 [ 46.586783][ T283] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff628b8540 [ 46.594735][ T283] R13: 00007f53a8e11c05 R14: 000000000000b215 R15: 00007fff628b8580 [ 46.602691][ T283] [ 46.605691][ T283] Modules linked in: [ 46.609575][ T283] CR2: 0000000000000170 [ 46.613703][ T283] ---[ end trace 0000000000000000 ]--- [ 46.619133][ T283] RIP: 0010:ihold+0x26/0x60 [ 46.623705][ T283] Code: 33 36 7c df 55 48 89 e5 41 56 53 48 89 fb e8 c1 78 ac ff 48 8d bb 70 01 00 00 be 04 00 00 00 e8 40 e1 f0 ff 41 be 01 00 00 00 44 0f c1 b3 70 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 b1 [ 46.643288][ T283] RSP: 0018:ffffc9000d29fc78 EFLAGS: 00010246 [ 46.649336][ T283] RAX: ffff88810d703c00 RBX: 0000000000000000 RCX: ffff88810d703cc0 [ 46.657304][ T283] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 46.665254][ T283] RBP: ffffc9000d29fc88 R08: dffffc0000000000 R09: fffffbfff0f2d6fd [ 46.673208][ T283] R10: fffffbfff0f2d6fd R11: 1ffffffff0f2d6fc R12: ffff8881105b357c [ 46.681160][ T283] R13: dffffc0000000000 R14: 0000000000000001 R15: 0000000000000000 [ 46.689121][ T283] FS: 0000555556533500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 46.698032][ T283] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 46.704605][ T283] CR2: 0000000000000170 CR3: 000000012f609000 CR4: 00000000003526b0 [ 46.712557][ T283] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 46.720513][ T283] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 46.728486][ T283] Kernel panic - not syncing: Fatal exception [ 46.734655][ T283] Kernel Offset: disabled [ 46.738959][ T283] Rebooting in 86400 seconds..