last executing test programs: 38m1.171725803s ago: executing program 32 (id=456): socket$unix(0x1, 0x5, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x240001, 0x0) socket$key(0xf, 0x3, 0x2) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000020001000900000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x16, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x1}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe2$9p(&(0x7f00000000c0), 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f0000000240)=ANY=[], 0x0) 36m7.826685466s ago: executing program 33 (id=780): socket$unix(0x1, 0x5, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x240001, 0x0) socket$key(0xf, 0x3, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000020001000900000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x16, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x1}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe2$9p(&(0x7f00000000c0), 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r1], 0x0) 30m24.80095984s ago: executing program 34 (id=1588): prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4f0c3000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x4000000000000c5, 0x400) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00'}, 0x10) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) socket$inet6(0xa, 0x2, 0x3a) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r5, 0x0, 0x63, &(0x7f0000001f40)={'NETMAP\x00'}, &(0x7f0000006300)=0x1e) 27m23.621052073s ago: executing program 0 (id=2287): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='sys_enter\x00', r0}, 0x10) timer_create(0x0, 0x0, &(0x7f0000000300)=0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) socket(0xa, 0x3, 0x3a) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket(0xa, 0x1, 0x0) ioctl(r3, 0x8936, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000180)={@private2, 0x800, 0x0, 0x2, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000040)={@mcast2, 0x800, 0x0, 0xff, 0x2, 0x0, 0x8c}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000100070000010071124100000000009500000000000800"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x80) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f0000000700)='notify_on_release\x00', 0x2, 0x0) write$cgroup_int(r6, &(0x7f00000003c0)=0x202, 0x12) mkdirat$cgroup(r5, &(0x7f00000001c0)='syz0\x00', 0x1ff) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r2, 0x0, 0x0, 0x404c802, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x4004084, 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x4, 0x6, 0xfffa}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x59, 0x9, 0x5, 0x2, 0x0, 0x6, 0x3, 0x0, 0x2ab, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0xb, 0x9, 0x1, 0x1f461e2c, 0x7, 0xe661, 0x7fff, 0xf, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x800242, 0xffffffff, 0xe, 0x0, 0x71, 0x2, 0x6, 0x3, 0x2, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x3, 0x80092a3, 0x4, 0x1, 0x20000000, 0x82, 0x0, 0x7, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x401, 0x12f, 0x6, 0x10, 0xfffffff3, 0x1, 0xcb, 0xf9, 0xd, 0x2bf, 0x5, 0xffe, 0xfffffffc, 0x334000, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x1, 0x0, 0xfffffffe, 0x8, 0x4, 0x8000, 0x9, 0x3fd, 0x401, 0x6, 0x4, 0xf8, 0x5, 0x8000, 0x5f31, 0xbcf5, 0x1, 0x2, 0x2, 0x9, 0x4, 0x9, 0x8, 0xb, 0x6, 0xb, 0xa, 0x1, 0x9, 0x9, 0x2, 0x7f, 0x9, 0x1, 0x3, 0x9, 0xffffffff, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x400004], [0x6, 0x6, 0x80000001, 0x2, 0xff, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x1, 0xb, 0x4, 0x5, 0x1005, 0x0, 0x1f0, 0xfffffffd, 0x2, 0x86, 0x1, 0x9, 0x230, 0x9, 0x5, 0x2, 0x2, 0x800, 0x8, 0x5, 0x8001, 0x7, 0x38, 0x800003, 0x200, 0x80, 0x2, 0xcc52, 0x950bfaf, 0x1000, 0xfffffff6, 0x7, 0x53cf697b, 0xfffffff9, 0x6, 0xb8d, 0xbc, 0x10002, 0x403, 0x7ff, 0x3, 0x0, 0x1, 0xffff, 0x3, 0x6, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0xfffffff8, 0xff], [0x9, 0xbb31, 0x9, 0xb, 0x5, 0x1, 0x6, 0x5, 0xffffffff, 0x3, 0x80ce7, 0x1ff, 0x3, 0x7, 0x6, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xe620, 0x2, 0x2, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x4, 0xffffffff, 0x80000000, 0x7, 0x8, 0xc8, 0xee1, 0x0, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x4, 0x2, 0xffff, 0x6, 0x1, 0x10080, 0x6, 0x8, 0x30b1d693, 0x5a29, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) sendmsg$netlink(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000580)=ANY=[@ANYRES32, @ANYBLOB="14000c8008"], 0x34}], 0x1, 0x0, 0x0, 0x4000}, 0x0) timer_gettime(r1, &(0x7f0000000140)) 27m22.791250295s ago: executing program 0 (id=2288): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200000, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000140)={[{@grpid}, {@user_xattr}]}, 0xff, 0x48f, &(0x7f0000000b80)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() keyctl$set_reqkey_keyring(0xe, 0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) r4 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) fchdir(r5) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@ipv6_newnexthop={0x40, 0x68, 0x1, 0x70bd25, 0xfffffffe, {}, [@NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x2314e23f4e6332a4, {0x87, 0x0, 0x4, 0x0, 0x48, 0x48, 0xf5a2}}}}}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x6}, @NHA_OIF={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000}, 0x40040d0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) ioctl$TUNGETVNETLE(r0, 0x40047451, &(0x7f0000000180)) 27m20.789369172s ago: executing program 0 (id=2292): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000002300)=ANY=[@ANYBLOB="1800040000001c00000700000000000018110000", @ANYRESHEX=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r0, 0x4008941a, &(0x7f00000022c0)=0x2) r1 = gettid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000"], 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0x14a, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r6}, 0x10) r7 = accept4(r3, &(0x7f0000000740)=@qipcrtr, &(0x7f0000000500)=0x80, 0x0) connect$can_bcm(r7, 0x0, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x2, 0x3) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=@base={0x18, 0x4, 0x41, 0x0, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4003, 0x1}, 0x48) r8 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r8, &(0x7f0000000a40)={0xa, 0x4e24, 0xf4, @remote, 0x1}, 0x1c) sendmsg(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000002040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_getoverrun(0x0) 27m19.243180114s ago: executing program 0 (id=2295): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000003c0)='./bus\x00', 0xe, &(0x7f0000000540)={[{@resuid}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1ff}}, {@stripe}, {@noblock_validity}]}, 0x3, 0x452, &(0x7f00000005c0)="$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") r0 = socket(0xa, 0x3, 0x3a) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x100) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000002040)) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}) readlink(&(0x7f0000002000)='./file0/file3\x00', &(0x7f00000021c0)=""/151, 0x97) syz_fuse_handle_req(r2, &(0x7f0000009680)="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", 0x2000, &(0x7f0000002540)={&(0x7f0000002380)={0x50, 0x0, 0x3, {0x7, 0x2b, 0x9, 0x100086a, 0xe, 0x6, 0x7, 0xcdd, 0x0, 0x0, 0x1, 0x5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r2, &(0x7f0000000000)="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", 0x2000, &(0x7f0000006dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006640)={0x90, 0x0, 0x6, {0x3, 0x2, 0x5, 0xfffffffffffffff9, 0x5, 0xc, {0x0, 0xb, 0x7, 0x1, 0x1, 0x4, 0xf, 0x0, 0x4, 0xa000, 0x0, 0x0, 0x0, 0x6, 0xffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) close_range(r1, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000005080)=[{{&(0x7f0000002280)=@nfc, 0x80, &(0x7f00000024c0)=[{&(0x7f0000002300)=""/1, 0x1}, {&(0x7f0000002400)=""/184, 0xb8}, {&(0x7f0000002600)=""/243, 0xf3}, {&(0x7f0000002700)=""/153, 0x99}, {&(0x7f0000002340)=""/35, 0x23}, {&(0x7f00000027c0)=""/191, 0xbf}, {&(0x7f0000002880)=""/210, 0xd2}, {&(0x7f0000002980)=""/146, 0x92}], 0x8}, 0xe104}, {{&(0x7f0000002a40)=@un=@abs, 0x80, &(0x7f0000003e40)=[{&(0x7f0000002ac0)=""/143, 0x8f}, {&(0x7f0000002b80)=""/237, 0xed}, {&(0x7f0000002c80)=""/4096, 0x1000}, {&(0x7f0000003c80)=""/141, 0x8d}, {&(0x7f0000003d40)=""/220, 0xdc}], 0x5}, 0x8001}, {{&(0x7f0000003ec0)=@pppol2tpin6, 0x80, &(0x7f0000004f80)=[{&(0x7f0000003f40)=""/4096, 0x1000}, {&(0x7f0000004f40)=""/55, 0x37}], 0x2, &(0x7f0000004fc0)=""/156, 0x9c}, 0x1}], 0x3, 0x1, &(0x7f0000005140)) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, {0xa, 0x0, 0xffffffff, @mcast2}, 0xfffc, {[0x456e]}}, 0x5c) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000100)={@multicast1, @multicast2, 0x0}, &(0x7f00000001c0)=0xc) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0x58, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r0, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x78, r3, 0x200, 0x70bd26, 0x25dfdbff, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000040}, 0x20048000) creat(&(0x7f0000000040)='./bus\x00', 0xc5) mount(&(0x7f0000000180)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r6 = open(&(0x7f0000000000)='./bus\x00', 0x48c7f, 0x62) ioctl$LOOP_SET_BLOCK_SIZE(r6, 0x4c09, 0x1000) 27m18.035984283s ago: executing program 0 (id=2300): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200000, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000140)={[{@grpid}, {@user_xattr}]}, 0xff, 0x48f, &(0x7f0000000b80)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() keyctl$set_reqkey_keyring(0xe, 0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xa, 0x0, 0x0) r5 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@ipv6_newnexthop={0x40, 0x68, 0x1, 0x70bd25, 0xfffffffe, {}, [@NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x2314e23f4e6332a4, {0x87, 0x0, 0x4, 0x0, 0x48, 0x48, 0xf5a2}}}}}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x6}, @NHA_OIF={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000}, 0x40040d0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) ioctl$TUNGETVNETLE(r0, 0x40047451, &(0x7f0000000180)) 27m16.310556932s ago: executing program 0 (id=2308): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000040000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x18) clock_getres(0x6, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xb, 0x5, 0x2, 0x2, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1, 0x0, r2}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) ioctl$TUNSETQUEUE(r5, 0x400454d9, &(0x7f00000001c0)={'dvmrp1\x00', 0x200}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r4}, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r7 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x38, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r8, {0x0, 0x2}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x1d4}, 0x8840) 27m16.134381479s ago: executing program 35 (id=2308): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000040000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x18) clock_getres(0x6, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xb, 0x5, 0x2, 0x2, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1, 0x0, r2}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) ioctl$TUNSETQUEUE(r5, 0x400454d9, &(0x7f00000001c0)={'dvmrp1\x00', 0x200}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r4}, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r7 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x38, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r8, {0x0, 0x2}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x1d4}, 0x8840) 22m29.306802932s ago: executing program 8 (id=3346): prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4f0c3000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x4000000000000c5, 0x400) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x23) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) getdents(0xffffffffffffffff, &(0x7f0000001fc0)=""/184, 0xb8) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r4}, &(0x7f0000000400), &(0x7f00000004c0)=r5}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r5}, 0x10) newfstatat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000640), 0x6000) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0) r7 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r7, &(0x7f0000000340)=[{{&(0x7f0000000380)={0xa, 0x0, 0x0, @mcast2={0xff, 0x5, '\x00', 0x0}}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000100)="a0002883781ecc0e", 0x4008}], 0x6}}], 0x1, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000001f40)={'NETMAP\x00'}, &(0x7f0000006300)=0x1e) 22m27.583102482s ago: executing program 8 (id=3352): openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200000, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000140)={[{@grpid}, {@user_xattr}]}, 0xff, 0x48f, &(0x7f0000000b80)="$eJzs3MtvVNUfAPDvvW15/Hi0P0QUBK2gkfhoaUFl4UKNJi40MdEFLmtbEBmooTUR0mgxBpeGxL1xaeJf4M6NURfGxK0mLg0J0caE4qrmvugwnZa2tB3pfD7JdM6Ze+6c8733nplz7+mdANpWb/YnidgeEb9GRHeRvbVAb/E0Mz05fGN6cjiJ2dk3/kzyctenJ4erotV628rM4TQi/SSJ55P59Y5fuHhmqFYbPV/m+yfOvtc/fuHiU6fPDp0aPTV6bvD48WNHB559ZvDpVYkzi+v6vg/H9u995a0rrw2fuPL2D19nzdpzoFheH8dt3WgSUBO92Vb7azbXuOzRZbT9brCjLp10trAhLEtHRGS7qyvv/93REXM7rzte/riljQPWVPbdtHnhxVOzwAaWRKtbALRG9UWfnf9Wj3UaevwnXHshYlOZnpmeHJ65GX9npOXrXWtYf29EnJj654vsEcu9DgEAsAL52ObJZuO/NPbkz8Vcx85yDqUnIv4fEbsi4p6I2B0R90bkZe+LiPuLlWe7l1h/b0N+/vgnvdq0zaskG/89Vzf2m6mLv3zq6ShzO/L4u5KTp2ujR8ptcji6Nmf5gUXq+PalXz5baFn9+C97ZPVXY8GyAVc7Gy7QjQxNDK3WRrh2KWJfZ7P4k5szAdkRsDci9i3vrXdWidOPf7V/oUK3j38RqzDPNPtlxGPF/p+KhvgryeLzk/1bojZ6pL86Kub78efLry9U/x3FvwquHXygSMzt/4YS3X8nxXxtV9Rqo+fHl1/H5d8+XfCcZqXH/6bkzXzO+qd3itc+GJqYOD8QsSl5Nc9X53T564Nz61b5qnx2/B8+1Lz/7yrXyeLPtlJ2EB+IiAcj4qGy7Q9HxMGIOLRI/N+/+Mi7i8SfRBKt2/+XIkaafv7dPP57kvr5+hUkOs58981CM+ZL2//HYir/rC3kn3+3sdQG3uHmAwAAgLtCGhHbI0n7inTv9kjTvr7if/h3x//S2tj4xBMnx94/N1LcI9ATXWl1pau77nroQDJVvmORHyyvFVfLj5bXjT/v2Jrn+4bHaiMtjh3a3bZb+39U/T/zR0erWwesOfdrQftq7P9pi9oBrL+lfP87F4CN6db+vyX7s7VVbQHWl/N/aF/N+v9HDXnjf9iY5vf/35v8ZB2wERn/Q/vS/6F96f/Qlu7kvv6VJ6qbBVb+PluWfId/uySqX7xYy7q2xtwrkbY85DZKZD1mfSud+w0VAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAu9m/AQAA//+kuOWe") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() keyctl$set_reqkey_keyring(0xe, 0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) r4 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) fchdir(r5) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@ipv6_newnexthop={0x40, 0x68, 0x1, 0x70bd25, 0xfffffffe, {}, [@NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x2314e23f4e6332a4, {0x87, 0x0, 0x4, 0x0, 0x48, 0x48, 0xf5a2}}}}}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x6}, @NHA_OIF={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000}, 0x40040d0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) 22m25.87336212s ago: executing program 8 (id=3359): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000001ff0), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="05000000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB], 0x20000078}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee3, 0x8031, 0xffffffffffffffff, 0x28f42000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r4, 0x1, 0x1f, 0x0, &(0x7f0000000000)) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r2}, 0x8) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="04000000000000a2da396d6f3a4d350000000000cb4bcca74ddee0be427aab910fd675c8cdb1e710bb22331b714b65680c889caeeeb4e0f127e19247cd176532e7fb304c7cd5a71c520ed97e2bd01734a42cc23258fe00b98bcce413d74b3dcd00fd2b29da9ad9ea417c42ad57f3525724a914a26f92ff98bb74f56ba3a49374b5e613a7e16ab9a45e86a91717b2da33ee472854793a7e4ca5644b7cb911a8464040df4233d958d212", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x7, 0x5, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = dup(r6) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x7, 0x0, 0x0, {}, {0x77359400}, {}, 0x7, @can={{}, 0x0, 0x2, 0x0, 0x0, "8bc7e9385559d457"}}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x0) getpeername$packet(r7, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) recvfrom$packet(r7, &(0x7f0000000740)=""/140, 0x8c, 0x42, &(0x7f0000000240)={0x11, 0x0, r8, 0x1, 0x81, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3d}}, 0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000440)={'vxcan0\x00'}) 22m24.851244671s ago: executing program 8 (id=3364): r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x80) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYRES16=r0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) r2 = syz_open_procfs(0x0, 0x0) ioctl$BLKRASET(r2, 0x1262, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x200, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x4, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) sendmmsg(r3, &(0x7f0000000000), 0x400000000000235, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getpgid(0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) getresgid(&(0x7f0000002840), &(0x7f0000002880), &(0x7f00000028c0)) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 22m23.74044071s ago: executing program 8 (id=3372): bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x18, 0xc, &(0x7f0000000240)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYRES64], 0x0, 0x0, 0x0, 0x0, 0x0, 0x17, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='sched_switch\x00', r1}, 0x10) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f0000000480), 0x400034f, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000980)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0xb, 0xb}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x8}]}}]}, 0x38}}, 0x0) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc4, 0xc4, 0x3, [@enum64={0xe, 0x3, 0x0, 0x13, 0x0, 0x1, [{0x2, 0x3, 0x3}, {0x9, 0x8, 0x9}, {0x1, 0x54, 0x9}]}, @type_tag={0xf, 0x0, 0x0, 0x12, 0x5}, @typedef={0xd, 0x0, 0x0, 0x8, 0x3}, @func_proto={0x0, 0x9, 0x0, 0xd, 0x0, [{0xc, 0x3}, {0x8}, {0x4, 0x4}, {0xd}, {0xa, 0x2}, {0xd, 0x1}, {0x8}, {0xc, 0x5}, {0x10, 0x3}]}, @fwd={0x3}, @func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x7, 0x1}, {0x6, 0x1}]}]}, {0x0, [0x5f]}}, &(0x7f0000000580)=""/142, 0xdf, 0x8e, 0x0, 0x80000000, 0x10000}, 0x28) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f00000008c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x90, 0x90, 0x5, [@restrict={0x7, 0x0, 0x0, 0xb, 0x3}, @union={0xf, 0x7, 0x0, 0x5, 0x0, 0xe, [{0xe, 0x1, 0x7}, {0x7, 0x3, 0x9}, {0x1, 0x5, 0x5}, {0x2, 0x0, 0x8}, {0x3, 0x2, 0x6}, {0x5, 0x2, 0x10001}, {0xf, 0x5, 0x800}]}, @fwd={0xc}, @ptr={0xe, 0x0, 0x0, 0x2, 0x4}, @fwd={0x5}]}, {0x0, [0x61, 0x2e, 0x0]}}, &(0x7f00000006c0)=""/121, 0xad, 0x79, 0x1, 0xe941}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x19, 0x80, 0x9, 0x4, 0x5d200, r0, 0x0, '\x00', r5, r6, 0x2, 0x4, 0x1, 0x0, @value=r7}, 0x50) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f00000001c0)={[{@noblock_validity}, {@jqfmt_vfsv0}]}, 0x1, 0x445, &(0x7f0000000b00)="$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") r8 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000110500007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r11}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r10}, 0x18) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) pwritev2(r8, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0) 22m21.374759553s ago: executing program 8 (id=3380): r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000640), 0x4) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4000) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x0, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) capget(&(0x7f00000000c0)={0x19980330, r1}, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYRES64=r0], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000000c0)='sched_switch\x00', r4}, 0x10) syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') getrandom(0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r5 = io_uring_setup(0x3538, &(0x7f0000000300)={0x0, 0x3c1e, 0x1, 0xffffffff, 0x295}) close(r5) rt_sigtimedwait(&(0x7f0000000240)={[0xffffffffffffffff]}, 0x0, 0x0, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r6 = creat(&(0x7f0000000140)='./bus\x00', 0xc) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000000, 0x5d032, 0xffffffffffffffff, 0x0) r7 = userfaultfd(0x80801) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, 0x0) write$cgroup_int(r6, &(0x7f0000000540), 0xfffffdd8) madvise(&(0x7f0000b56000/0x3000)=nil, 0x3000, 0x11) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) 22m5.100421814s ago: executing program 36 (id=3380): r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000640), 0x4) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4000) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x0, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) capget(&(0x7f00000000c0)={0x19980330, r1}, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYRES64=r0], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000000c0)='sched_switch\x00', r4}, 0x10) syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') getrandom(0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r5 = io_uring_setup(0x3538, &(0x7f0000000300)={0x0, 0x3c1e, 0x1, 0xffffffff, 0x295}) close(r5) rt_sigtimedwait(&(0x7f0000000240)={[0xffffffffffffffff]}, 0x0, 0x0, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r6 = creat(&(0x7f0000000140)='./bus\x00', 0xc) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000000, 0x5d032, 0xffffffffffffffff, 0x0) r7 = userfaultfd(0x80801) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, 0x0) write$cgroup_int(r6, &(0x7f0000000540), 0xfffffdd8) madvise(&(0x7f0000b56000/0x3000)=nil, 0x3000, 0x11) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) 18m31.650682757s ago: executing program 3 (id=4359): syz_mount_image$exfat(&(0x7f00000005c0), &(0x7f0000000240)='./file0\x00', 0x3000050, &(0x7f0000000600)=ANY=[], 0x2, 0x14fe, &(0x7f0000008900)="$eJzs3Au0ztXWMPA511p/NklPkvuaa/55kssiSXJJSCRJkiS5JSRJkoTEJrckJCH3JPeQ3GIn9/st9yQ5kiQJCUnWN3Q6n/e8nfftnO+c7/V9Z8/fGGvsNff/mfNZa889nv9ljL2/7Ti4av1qlesyM/xT8M9fUgEgBQD6AcA1ABABQKlspbIBDoNMGlP/uTcR/1oPTbvSKxBXkvQ/fZP+p2/S//RN+p++Sf/TN+l/+ib9T9+k/0KkZ1un575WRvod/3PP/0Ge//8/R87//0YOFxvz5fpi13f6B1Kk/+mb9D99k/6nb9L/9E36n75J///NRQCV/pvD0v/0TfovRHp2pZ8/y7iy40r//gkhhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGESB/OhcsMAPxlfqXXJYQQQgghhBBCiH+dkPFKr0AIIYQQQgghhBD/9yEo0GAgggyQEVIgE2SGqyALXA1Z4RpIwLWQDa6D7HA95ICckAtyQx7IC/nAAoEDhhjyQwFIwg1QEG6EQlAYikBR8FAMisNNUAJuhpJwC5SCW6E03AZloCyUg/JwO1SAO6AiVILKcCdUgbugKlSDu6E63AM14F6oCfdBLbgfasMDUAcehLrwENSDh6E+PAIN4FFoCI2gMTSBpv9H+S9CV3gJukF3SIUe0BNehl7QG/pAX+gHr0B/eBUGwGswEAbBYHgdhsAbMBTehGEwHEbAWzASRsFoGANjYRyMh7dhArwDE+FdmASTYQpMhWkwHWbAezATZsFseB/mwAcwF+bBfFgAC+FDWASLIQ0+giXwMSyFZbAcVsBKWAWrYQ2shXWwHjbARtgEm2ELbIVPYBtshx2wE3bBbtgDn8Je+Az2weewH774B/PP/qf8TggIqFChQYMZMAOmYApmxsyYBbNgVsyKCUxgNsyG2TE75sAcmAtzYR7Mg/kwHxISMjLmx/yYxCQWxIJYCAthESyCHj0Wx+JYAm/GklgSS2EpLI2lsQyWxbJYHstjBayAFbEiVsbKWAWrYFWsinfj3XgP1sAaWBNrYi2shbWxNtbBOlgX62I9rIf1sT42wAbYEBtiY2yMTbEpNsNm2BybY0tsia2wFbbG1tgG22BbbIvtsB22x/bYATtgR+yInbAzdsYX8UV8CV/C7lhF9cCe2BN7YS/sg32xL76C/fFVfBVfw4E4CAfj6/g6voFD8QwOw+E4AkdgBTUKR+MYZDUOx+N4nIATcCJOxEk4GSfjVJyG03EGzsCZOAtn4fs4Bz/AD3AezsMFuBAX4iJcjGmYhkvwLC7FZbgcV+BKXIUrcQ2uxTW4HjfgetyEm3ALbsFP8BPcjttxJ+7E3bgbP8VP8TP8DAfiftyPB/AAHsSDeAgP4WE8jEfwCB7Fo3gMj+FxPI4n8CSewpN4Gk/jGTyL5/AcnsfzeAGfz/N1vd2F1w0EdYlRRmVQGVSKSlGZVWaVRWVRWVVWlVAJlU1lU9lVdpVD5VC5VC6VR+VR+VQ+RYoUq1jlV/lVUiVVQVVQFVKFVBFVRHnlVXFVXJVQJVRJVVKVUreq0uo2VUaVVS18eVVeVVAtfUVVSVVWlVUVdZeqqqqpaqq6qq5qqBqqpqqpaqlaqrZ6QNVRPbAPPqQudaa+GoQN1GBsqBqpxqqJegMfU83UUGyuWqiW6gk1HIdha9XMt1FPq7ZqNLZTz6ox+JzqoMZhR/WC6qQ6qy7qRdVVNffdMvz2EaimYi/VW/VRfdVMvEtd6lhV9ZoaqAapwep1tQDfUEPVm2qYGq5GqLfUSDVKjVZj1Fg1To1Xb6sJ6h01Ub2rJqnJaoqaqqap6WqGek/NVLPUbPW+mqM+UHPVPDVfLVAL1YdqkVqs0tRHaon6WC1Vy9RytUKtVKvUarVGrVXr1Hq1QW1Um9RmtUVtVZ+obWq72qF2ql1qt9qjPlV71Wdqn/pc7VdfqAPqT+qg+lIdUl+pw+prdUR9o46qb9Ux9Z06rr5XJ9RJdUr9oE6rH9UZdVadUz+p8+pndUH9oi6qoECjVlproyOdQWfUKTqTzqyv0ln01TqrvkYn9LU6m75OZ9fX6xw6p86lc+s8Oq/Op60m7TTrWOfXBXRS36AL6ht1IV1YF9FFtdfFdHF9ky6hb9Yl9S26lL5Vl9a36TK6rC6ny+vbdQV9h66oK+nK+k5dRd+lq+pq+m5dXd+ja+h7dU19n66l79e19QO6jn5Q19UP6Xr6YV1fP6Ib6Ed1Q91IN9ZNdFP9mG6mH9fNdQvdUj+hW+kndWv9lG6jn9Zt9TO6nX5Wt9fP6Q76ed1Rv6A76c66i/5FX9RBd9PddaruoXvql3Uv3Vv30X11P/2K7q9f1QP0a3qgHqQH69f1EP2GHqrf1MP0cD1Cv6VH6lF6tB6jx+pxerx+W0/Q7+iJ+l09SU/WU/RUPU1P131+qzT778h/52/kD/j13bforfoTvU1v1zv0Tr1L79Z79B69V+/V+/Q+vV/v1wf0AX1QH9SH9CF9WB/WR/QRfVQf1cf0MX1cH9cn9En9k/5Bn9Y/6jP6rD6rf9Ln9Xl94befARg0ymhjTGQymIwmxWQymc1VJou52mQ115iEudZkM9eZ7OZ6k8PkNLlMbpPH5DX5jDVknGETm/ymgEmaG0xBc6MpZAqbIqao8aaYKW5u+qfz/2h9TU1T08w0M81Nc9PStDStTCvT2rQ2bUwb09a0Ne1MO9PetDcdTAfT0XQ0nUwn08V0MV1NV9PNdDOpJtX0NC+bXqa36WP6mn7mFdPf9DcDzAAz0Aw0g81gM8QMMUPNUDPMDDMjzAgz0ow0o81oM9aMNePNeDPBTDATzUQzyUwyU8wUM81MMzPMDDPTzDSzzWwzx8wxc81cM9/MNwvNQrPILDJpJs0sMUvMUrPMLDMrzAqzyqwya8was86sMxvMBrPJbDJLzVaz1Wwz28wOs8PsMrvMHrPH7DV7zT6zz+w3+80Bc8AcNAfNIXPIHDaHzRFzxBw1R80xc8wcN8fNCXPCnDKnzGlz2pwxZ8w5c86cN+fNBXPBXDQXL132RSpSkYlMlCHKEKVEKVHmKHOUJcoSZY2yRokoEWWLskXZo+ujHFHOKFeUO8oT5Y1SwUYUuYijOMofFYiS0Q1RwejGqFBUOCoSFY18VCwqHt0UlYhujkpGt0Sloluj0tFtUZmobFQuKh/dHlWI7ogqRpWiytGdUZXorqhqVC26O6oe3RPViO6Nakb3RbWi+6Pa0QNRnejBqG70UFQvejiqHz0SNYgejRpGjaLGUZOo6b+0fghncj7uu9nuNtX2sD3ty7aX7W372L62n33F9rev2gH2NTvQDrKD7et2iH3DDrVv2mF2uB1h37Ij7Sg72o6xY+04O96+bSfYd+xE+66dZCfbKXaqnWan2xn2PTvTzrKz7ft2jv3AzrXz7Hy7wC60H9pFdrFNsx/ZJfZju9Qus8vtCrvSrrKr7Rq71q6z6+0Gu9FuspvtFrvVfmK32e12h91pd9nddo/91O61n9l99nO7335hD9g/2YP2S3vIfmUP26/tEfuNPWq/tcfsd/a4/d6esCftKfuDPW1/tGfsWXvO/mTP25/tBfuLvWjDpYv7S6d3MmQoA2WgFEqhzJSZslAWykpZKUEJykbZKDtlpxyUg3JRLspDeSgf5aNLmJjyU35KUpIKUkEqRIWoCBUhT56KU3EqQSWoJJWkUlSKSlNpKkNlqByVo9vpdrqD7qBKVInupDvpLrqLqlE1qk7VqQbVoJpUk2pRLapNtakO1aG6VJfqUT2qT/WpATWghtSQGlNjakpNqRk1o+bUnFpSS2pFrag1taY21IbaUltqR+2oPbWnDtSBOlJH6kSdqAt1oa7UlbpRN0qlVOpJPakX9aI+1If6UT/qT/1pAA2ggTSQBtNgGkJDaCgNpWE0nEbQWzSSRtFoGkNjaRyNp/E0gSbQRJpIk2gSTaEpNI2m0QyaQTNpJs2m2TSH5tBcmkvzaT4tpIW0iBZRGqXRElpCS2kpLafltJJW0mpaTWtpLa2n9bSRNtJm2kxbaStto220g3bQLtpFe2gP7aW9tI/20X7aTwfoAB2kg3SIDtFhOkxH6AgdpaN0jI7RcTpOJ+gEnaJTdJpO0xk6Q+foHJ2nn+kC/UIXKVCKU5DZXeWyuKtdVneNS3GZ3KU4AoBLcS6X2+VxeV0+Z10Ol/OvYnLOFXKFXRFX1HlXzBV3N/0uLuPKunKuvLvdVXB3uIq/i6u7e1wNd6+r6e5z1dzdfxXXcve72u4RV8c96uq6Rq6ea+Lqu0dcA/eoa+gaucauiWvlnnSt3VOujXvatXXP/C5e5Ba7tW6dW+82uL3uM3fO/eSOum/defez6+a6u37uFdffveoGuNfcQDfod/EI95Yb6Ua50W6MG+vG/S6e4qa6aW66m+HeczPdrN/FC92Hbo5Lc3PdPDffLfg1vrSmNPeRW+I+dkvdMrfcrXAr3Sq32q3532td4Ta5zW6L2+M+ddvcdrfD7XS73O5f40v72Oc+d/vdF+6I+8YddF+6Q+6YO+y+/jW+tL9j7jt33H3vTriT7pT7wZ12P7oz7uyv+7+09x/cL+6iCw4YWbFmwxFn4Iycwpk4M1/FWfhqzsrXcIKv5Wx8HWfn6zkH5+RcnJvzcF7Ox5aJHTPHnJ8LcJJv4IJ8IxfiwlyEi7LnYlycb+ISfDOX5Fu4FN/Kpfk2LsNluRyX59u5At/BFbkSV+Y7uUoIXJWr8d1cne/hGnwv1+T7uBbfz7X5Aa7DD3Jdfojr8cNcnx/hBvwoN+RG3JibcFN+jJvx49ycW3BLfoJb8ZPcmp/iNvw0t+VnuB0/y+35Oe7Az3NHfoE7cWfuwi9yV36Ju3F3TuUe3JNf5l7cm/twX+7Hr3B/fpUH8Gs8kAfxYH6dh/AbPJTf5GE8nEfwWzySR/FoHsNjeRyP57d5Ar/DE/ldnsSTeQpP5Wk8nWfwezyTZ/Fsfp/n8Ac8l+fxfF7AC/lDXsSLOY0/4iX8MS/lZbycV/BKXsWreQ2v5XW8njfwRt7Em3kLb+VPeBtv5x28k3fxbt7Dn/Je/oz38ee8n7/gA/wnPshf8iH+ig/z13yEv+Gj/C0f4+/4OH/PJ/gkn+If+DT/yGf4LJ/jn/g8/8wX+Be+yIEhxljFOjZxFGeIM8YpcaY4c3xVnCW+Os4aXxMn4mvjbPF1cfb4+jhHnDPOFeeO88R543yxjSl2McdxnD8uECfjG+KC8Y1xobhwXCQuGvu4WFw8vikuEd8cl4xviUvFt8al49viMnHZ+JH7yse3xxXiO+KKcaW4cnxnXCW+K64aV4vvjqvH98Q14nvjmvF9ccn4/rh2/EBcJ34wrhs/FNeLH47rx4/EDeJH44Zxo7hx3CRuGj8WN4sfj5vHLeKW8RNxq/jJuHX8VNwmfjpuGz/zh8dT4x5xz/jl+OU4hHv1/OSC5MLkh8lFycXJtORHySXJj5NLk8uSy5MrkiuTq5Krk2uSa5PrkuuTG5Ibk5uSm5NbkiFUywgevfLaGx/5DD6jT/GZfGZ/lc/ir/ZZ/TU+4a/12fx1Pru/3ufwOX0un9vn8Xl9Pm89eefZxz6/L+CT/gZf0N/oC/nCvogv6r0v5ov7Jr6pb+qb+cd9c9/Ct/RP+Cf8k/5J/5R/yj/t2/pnfDv/rG/vn/Md/PP+ef+C7+Q7+y7+Rd/Vv+S7+e4+1af6nr6n7+V7+T6+j+/n+/n+vr8f4Af4gX6gH+wH+yF+iB/qh/phfpgf4Uf4kX6kH+1H+7F+rB/vx/sJfoKf6Cf6SX6Sn+Kn+Gl+mp/hZ/iZfqaf7Wf7OYXm+Ll+rp/v5/uFfqFf5Bf5NJ/ml/glfqlf6pf75X6lX+lX+9V+rV/r1/v1fqPf6Df7zX6r3+q3+W1+h9/hd/ldfo/f4/f6vX6f3+f3+/3+gD/gD/qD/pD/yh/2X/sj/ht/1H/rj/nv/HH/vT/hT/pT/gd/2v/oz/iz/pz/yZ/3P/sL/hd/0Qc/PvF2YkLincTExLuJSYnJiSmJqYlpiemJGYn3EjMTsxKzE+8n5iQ+SMxNzEvMTyxILEx8mFiUWJxIS3yUWJL4OLE0sSyxPLEisTKxKhFC3m1xyB8KhGS4IRQMN4ZCoXAoEooGH4qF4uGmUCLcHEqGW0KpcGsoHW4LZULZUC48GhqGRqFxaBKahsdCs/B4aB5ahJbhidAqPBlah6dCm/B0aBueCe3Cs6F9eC50CM+HjuGF0Cl0Dl3Ci6FreCl0C91DaugReoaXQ6/QO/QJfUO/8EroH14NA8JrYWAYFAaH18OQ8EYYGt4Mw8LwMCK8FUaGUWF0GBPGhnFhfHg7TAjvhInh3TApTA5TwtQwLUwPM8J7YWaYFWaH98Oc8EGYG+aF+WFBWBg+DIvC4pAWPgpLwsdhaVgWlocVYWVYFVaHNWFtWBfWhw1hY9gUNoctYWv4JGwL28OOsDPsCrvDnvBp2Bs+C/vC52F/+CIcCH8KB8OX4VD4KhwOX4cj4ZtwNHwbjoXvwvHwfTgRToZT4YdwOvwYzoSz4Vz4KZwPP4cL4ZdwUf5mTQghhBDi76L/4HiPv/G9DACgfpv3BICrt+c+/J9rbszx53lvladVAgCe7t7xob+MKlVSU1N/e+1SDVGBeQCQ+Ov6f4mXQUt4EtpACyjxN9fXW3U+z39QP3krQOb/kJMCl+PL9W/+L+o/9sSIRaXjc9n+m/rzAAoVuJyTCS7Hl+uX/C/q52z2B+vP9OV4gOb/IScLXI4v1y8Oj8Mz0OavXimEEEIIIYQQQvxZb1Wu/R/dP1+6P89jLudkhMvxH92fCyGEEEIIIYQQ4sp7rnOXpx5r06ZF+79vgr89F/jHsmQiE5n8fza50p9MQgghhBBCiH+1yxf9V3olQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCFE+vU/8e/ErvQehRBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCiCvtfwUAAP//luw5aQ==") setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x800, 0x80000002, 0x4}, 0x1c) openat(0xffffffffffffff9c, 0x0, 0x41, 0x101) syz_emit_ethernet(0x1a, &(0x7f0000000640)=ANY=[@ANYBLOB="aaaa6448d91497b10d7208b8c5c82575c921aaaaaaaaaaaaaaaa"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000280)={@dev}, 0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'syz_tun\x00'}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x2d) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x40081, 0x0, 0x0, 0x0, 0x0) 18m30.319053098s ago: executing program 3 (id=4363): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg(r0, &(0x7f0000000a00)=[{{&(0x7f0000000080)=@un=@abs={0x0, 0x0, 0x4e21}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000140)="d423f7eec39a4324b31f511e71b3cf843c0bdfbf02c37ddcbc186444fb81f9432084970a70a414772838babeabb8063802", 0x31}, {&(0x7f0000000180)="a7aaffcefbf0ae85b299820d75f04ee8dae45dad46f3b2f87426377c6ca7ded28256e3d2e5e893ea04f14c253956c077aa248ea00e3441d2f95f4cf829b459fcab7edac313a34309000ae32b45d2e627f7da1d29049db43564dde3b91ac9dba14d8c3c6e97c8226dd32f96417bd9312943", 0x71}, {&(0x7f0000000200)="1e77b84eeffd813efba45186afbfc2924dfaab7bdfa904c5ada5288f915167d11fc679f07b6d5cddc9d85673e8623af00a715eae11dacacf75a9a80e7458940f", 0x40}, {&(0x7f0000000280)="cddd282aad8fa2705bda43e77aa4a09968d520b7237e38d54e4821b29f9004de0801293ebf3024c5d0f6b1b41d158ead400d7f80bf42432e4113da3245694c21b262c9c1ccf01813137bbb3fbb4d930973ea1fb6f44bea4318affb0eac8bd6e8c29d99d6aeef35c472df27c710664b47f7e74f033b35a231012a41032166a7d1c1396ceb6fa35e067648e422932e6b5b22044e503351c48001a8c30eb5ef644e2d8d1b723845c22d029f692eb457ea604442fbd203dacd04864c", 0xba}, {&(0x7f0000000340)="b2dca3f5252a7e73cecbebcb1595fa4d6804a05c70a0bb7f74da9f8f0f6cce92df477e36aa2284fecc75b35d1179adf0794635de39bf2eb2607a3806f8d3534493d836f9868b09aace43009e2c3ab03109e0d4f29b8bad", 0x57}, {&(0x7f00000003c0)="4f89bb8f9735de836e3c2a5d68a87c0dbabf201e48599cd810ff040cd1b3de3fc6230cc63fe3ecfc4821690ba8b47e912d9f23f90871285f932ee21e32ac11fece24f912fc09233ca9fa85a2acf1851e5b79fea706438036ea4f6757cbabd2e724870c234c7a", 0x66}, {&(0x7f0000000440)="b9abb7d43f46146234c5a71ebf39caebcc4232b00cf33b68771a5d5c4acce82907da0b87530c113627aca7910aa69eea01c60f28e82893ab07e7fd1775a709e2d46b79773faab9a086dd3048dc3f45c7a8e77250b8c98f4395f0a4350982a9d69abcbd98e533cdd64b0e", 0x6a}], 0x7, &(0x7f0000000540)=[{0xc8, 0x1, 0x3, "9daa372fa3b28d2d7c9abb1d79497c3c1c85923441ea0cb64609291dcc8483ff6d448ccc7bcea9c22fc3f01cc9a82263edff487e22e42f8afe4ee52e22154ea59d4c1087ef682015c88c6d61e99a8c35b2af8646b74a554baa5afb33db1d5d26a0a1f7b808c546e32d71570dcbc14f815aa967e08ca0a9bca57e1b3cc62a2a5b6ca49bb04797485f3fec79a616fccf97b81a38c1416208ddf878392b7616827556750ef7ec870b5b7c4e9504ffa124074fe332"}, {0xe8, 0x101, 0xfffffffc, "3e4f2ae523bb541de08e60889b9dbe171eed058b2fae0d7dc1ef01ca246eb4ace2dcbacac8e052ae8311060014d2e1f416d0058b7a13386474ddcbdbe80df1eaa9b4cf7e0e1c9f1f468551de9ab3c6938dfeb63d1466e3fa9cee72be958e20541780c269fa8a8cf4c7b0ac6b34a7919a506ecb83d9861ae3d2491f9f64ac9c3e82c1f3fc6c1711022cadc0a8706a2cef8b0102aec5be7868af56f3024c9c134a14c43bab83d98a4a238b4531e505dea9615ec4ccdca8e912a61ad5c9fc048bde289e0b1639fe156a2318f9cfdc83e54338e51a"}, {0xb0, 0x36, 0x27, "8a5f6dc8b0119ff32b48f62e633ce587d1e1b7d38285f199c8288d2affd454cbddc8df674890ff427512ae7c293d362ba8ac81f9adfbc144107f72e6a08b786fde4932c5ded52f7e4720e9d75d054c9ee5a5e67061fdfbe0db7b26a02746be318718edc29cef2638069d3a2bdb8b047fc3de380ccecb0db707a0994266cb398e5893dd855f5a299404bc270f909c8da9e3dc5cfd91cf0b590c01e69df94725"}, {0xf0, 0x3a, 0x10, "687005962bf0af1fc5e590863049cee0c5c4970169956e4fb18a61a9cea25099587692d4d5dec6e5c6adad41169e53945be345f52267dffdff9933e8d6312b14b24c2af937e5cca6e2e5e529ee46410a98c3fa7808acfa965fff3d1a48510c3276dcaff81511e16c398aff93fa9c932882cf0df98a06ec1e7dfeade15d3d63d8d5c1473494b8576ef6631728b75dadd3efde321b2fa4e1d8f70f307017b91f775e6eace6f5bd734d326603dc7f62797a02813cdba8b20b36e6439f4c26c5ff367abe07d41eb922b5acd9badc2cc3354c47a99c7a0549e84cecb9b0a8c881"}, {0x88, 0x84, 0xf53, "2a2f1f7fcf5f73047a5884cce94de83b83dbd71b1e86bd40cc775cc7b5fc52c2fc5866c0a1c1630df409ea853e4019fd10499943586cb98c47add5ca16e04cdad074517bd7b43c49dcf374437381042f6f35130b6ba65d10f2b6cad74a2aee2434ea84f6ea8c1afb80ec393268b92dfaa9659ac91b"}, {0xb0, 0x116, 0x10001, "df152eb41c8883c9cede0ee6f717b39e9e10d5923eedf325f25ae26f03c03692fbea0047e3b830a093d9b1a2c8ea9faee37b3e26781d3c841a9128c3b8ecb7e085912836e074554c71542a3cfe4306f708c758a8de3e67c3ac8a69dfb96c3439154e5329354f12d3b1e69989fd3cd9fd513e72b27585e0c823b2cae1fae87bf5b848f3b62177695aba88c1314494a9f4715008572d64c0a25ffe6a3c"}], 0x488}}], 0x1, 0x4000050) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@migrate={0xa0, 0x21, 0x1, 0xfffffffc, 0x0, {{@in6=@loopback, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x100000}, [@migrate={0x50, 0x11, [{@in6=@ipv4={'\x00', '\xff\xff', @local}, @in6=@local, @in=@multicast1, @in=@broadcast, 0x3c, 0x0, 0x0, 0x0, 0x2, 0x2}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) socket$vsock_stream(0x28, 0x1, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r7, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r8 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') mount$9p_fd(0x0, &(0x7f0000000380)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r8}}) umount2(&(0x7f0000000100)='./file0/../file0\x00', 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r9}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x4, 0xfffffffffffffffd, 0x9323, 0xfffffffffffffffe, 0x7ff, 0x2}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x1, 0xb, 0x7fffffff, 0x2}, 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000001c000100020000001f79bc1e51099f97", @ANYRESOCT=r2, @ANYBLOB="80aaaaaa16e00004000e64dece030014008f79"], 0x40}}, 0x8884) 18m28.217263855s ago: executing program 3 (id=4373): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b703000008"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000002c0)='sys_enter\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unlink(&(0x7f0000000600)='./file0\x00') 18m28.097430467s ago: executing program 3 (id=4376): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x2041, 0x0) mount$incfs(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1400, &(0x7f00000002c0)={[{@rlog_wakeup_cnt={'rlog_wakeup_cnt', 0x3d, 0xfffffffffffffff1}}, {@rlog_pages={'rlog_pages', 0x3d, 0x7}}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}]}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nodelalloc}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x10000, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000040)='./file0\x00') syz_mount_image$fuse(0x0, &(0x7f0000000580)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x0, 0x0, 0x0) open(&(0x7f0000000200)='./file0\x00', 0xeca42, 0x86) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeea, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x20000000000001d2, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000001000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x30, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff52, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) mount$incfs(0x0, 0x0, 0x0, 0x5008000, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 18m24.903427911s ago: executing program 3 (id=4380): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f0000000300), 0x800) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000003800)=@newtaction={0x368, 0x30, 0xc96f2b0dc02612b1, 0x71bd2b, 0x25dfdbff, {}, [{0x2c8, 0x1, [@m_xt={0xb8, 0xa, 0x0, 0x0, {{0x7}, {0x90, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x4}, @TCA_IPT_INDEX={0x8, 0x3, 0x1000}, @TCA_IPT_INDEX={0x8, 0x3, 0x89}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_skbedit={0xd4, 0x7, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x5, 0x10000, 0x1, 0x80000001, 0x800}}]}, {0x8d, 0x6, "827cfc3c97533b7fd85b8f8fc505a863ca8f9e20a40133a88637f87f05b88171edad7365a25c16de383004673eee493e6bc8e65e14cb7c4c40505904e9bd738809a5de6875a609fc4d328a141abfce4fb1dd738c84aada34cdaf4b8cf6379acc343533215412508b1faa1da28903c894dc3b2828e6ddb221934961a0c35e67cc611dcd10cb3d9e85e6"}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_skbmod={0x138, 0x1, 0x0, 0x0, {{0xb}, {0x18, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @broadcast}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x4}]}, {0xf5, 0x6, "6924a3156352d4cb671a82481f27291343a36577586e5138f9b60a47ff29c9048eb534a11a1a6e4068a3f14dbbb6f779cad02630f9c416662a272922c0177770deb39f4690d4395dd3771d99f9aae01ac5b8b77c9ea5267b51cceebad4126c6b018ccd2424755e23161a50ec4588a35b167651bd8e886d43c7b0f2105fe0bbf48e50295c1b6016c72500582f399eea553274e9ce77781e0bd18c6dd6dfed7fc2ce76e1b76fcd7a3c44f38f1f3f7b49477ea4bce06e49ae2024ef8fae1604236b87fa523248ff34da3a7feb0b33e3daf741eaf0028a3028cadff8319f24f3fcf384b8ebc5d6acc0a15408058408ac4ec371"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2}}}}]}, {0x8c, 0x1, [@m_nat={0x88, 0x17, 0x0, 0x0, {{0x8}, {0x4}, {0x5e, 0x6, "b7e5307681464d8557d780071307f7c6a1d3bec6226e063b395b3cd3cc6acbf3f57c019041a22a7fc6709a114f627684942cab7868f369b56956160b81c6d053c8d2219598f2e3d34c0212052e2b133f828d5344be697c8a1e24"}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}]}]}, 0x368}, 0x1, 0x0, 0x0, 0x4004010}, 0x50) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$erofs(&(0x7f00000002c0), &(0x7f0000000380)='./file1\x00', 0x4002, &(0x7f0000000f80)=ANY=[@ANYRES16=0x0], 0x1, 0x215, &(0x7f0000000080)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fadvise64(r0, 0xfcff, 0x0, 0x3) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) 18m23.796968669s ago: executing program 3 (id=4384): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4f0c3000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x4000000000000c5, 0x400) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x23) ioctl$KVM_XEN_HVM_CONFIG(r3, 0x4038ae7a, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) getdents(0xffffffffffffffff, &(0x7f0000001fc0)=""/184, 0xb8) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00'}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x30) newfstatat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000640), 0x6000) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r5, 0x0, 0x63, &(0x7f0000001f40)={'NETMAP\x00'}, &(0x7f0000006300)=0x1e) 18m23.7966018s ago: executing program 37 (id=4384): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4f0c3000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x4000000000000c5, 0x400) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x23) ioctl$KVM_XEN_HVM_CONFIG(r3, 0x4038ae7a, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) getdents(0xffffffffffffffff, &(0x7f0000001fc0)=""/184, 0xb8) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00'}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x30) newfstatat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000640), 0x6000) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r5, 0x0, 0x63, &(0x7f0000001f40)={'NETMAP\x00'}, &(0x7f0000006300)=0x1e) 17m41.219555219s ago: executing program 4 (id=4582): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x48) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) dup3(r1, r2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x7cb641, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) close(r3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0x1, 0xd}, {0x7}, {0x10, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x40085}, 0x40000) 17m40.726363398s ago: executing program 4 (id=4585): socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs(0x0, &(0x7f00000000c0)='coredump_filter\x00') bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8d}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r1, &(0x7f0000000140)={0xa, 0xfffd, 0x0, @mcast2, 0x9}, 0x1c) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0xff80}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000280)='tasks\x00', 0x2, 0x0) r5 = syz_clone(0x4000, &(0x7f0000001000), 0x0, 0x0, 0x0, 0x0) write$cgroup_pid(r4, &(0x7f0000000400)=r5, 0x12) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000000)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24", @ANYRES8=r6, @ANYRES64=r6], 0x0) 17m38.503164396s ago: executing program 4 (id=4597): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff0000", @ANYRES32=r0, @ANYBLOB="0000000004000000b703000008000040850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000002c0)='sys_enter\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unlink(&(0x7f0000000600)='./file0\x00') 17m38.474783599s ago: executing program 4 (id=4599): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nodelalloc}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x10000, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000040)='./file0\x00') syz_open_dev$vcsa(0x0, 0x5d3d, 0x2000) lstat(&(0x7f0000000e40)='./file0\x00', &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl$Q_GETNEXTQUOTA(0xffffffff80000900, &(0x7f0000000000)=@nullb, r0, &(0x7f0000000100)) 17m37.95972915s ago: executing program 4 (id=4603): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r0, 0x5607, 0x4) ioctl$VT_ACTIVATE(r0, 0x5606, 0x4) 17m36.02872221s ago: executing program 4 (id=4611): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x101302, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000100)={0x4, 0xffffffffffffffff}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000000)={0x2, 0x9, 0xfffffffd, 0x7fff, 0x7fffffff}) shutdown(r4, 0x0) recvmmsg(r4, &(0x7f0000001980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/26, 0x1a}, 0xfffffffc}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001380)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000001840)=[{&(0x7f0000001400)=""/149, 0x95}, {&(0x7f0000001b00)=""/118, 0x76}, {&(0x7f0000001540)=""/188, 0xbc}, {&(0x7f0000001600)=""/57, 0x39}, {&(0x7f0000001640)=""/135, 0x87}, {&(0x7f00000014c0)=""/101, 0x65}, {&(0x7f0000001780)=""/171, 0xab}], 0x7, &(0x7f00000018c0)=""/176, 0xb0}}], 0x3, 0x0, 0x0) ioctl$KVM_SET_DEVICE_ATTR(r3, 0x4018aee1, &(0x7f00000001c0)=@attr_other={0x0, 0x1, 0x2, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000100)='rxrpc_congest\x00', r5, 0x0, 0x8000}, 0x18) r6 = syz_io_uring_setup(0x371d, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x1, 0xffffff}, &(0x7f0000000380), &(0x7f0000000400)) r7 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000d00000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r8, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r9}, 0x18) stat(0x0, 0x0) r10 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r10, &(0x7f0000001fc0)=""/184, 0x20002078) ioctl$SNDRV_TIMER_IOCTL_TREAD64(r10, 0x400454a4, &(0x7f0000000200)) ioctl$sock_inet_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e22, @broadcast}}) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) 17m36.004404243s ago: executing program 38 (id=4611): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x101302, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000100)={0x4, 0xffffffffffffffff}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000000)={0x2, 0x9, 0xfffffffd, 0x7fff, 0x7fffffff}) shutdown(r4, 0x0) recvmmsg(r4, &(0x7f0000001980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/26, 0x1a}, 0xfffffffc}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001380)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000001840)=[{&(0x7f0000001400)=""/149, 0x95}, {&(0x7f0000001b00)=""/118, 0x76}, {&(0x7f0000001540)=""/188, 0xbc}, {&(0x7f0000001600)=""/57, 0x39}, {&(0x7f0000001640)=""/135, 0x87}, {&(0x7f00000014c0)=""/101, 0x65}, {&(0x7f0000001780)=""/171, 0xab}], 0x7, &(0x7f00000018c0)=""/176, 0xb0}}], 0x3, 0x0, 0x0) ioctl$KVM_SET_DEVICE_ATTR(r3, 0x4018aee1, &(0x7f00000001c0)=@attr_other={0x0, 0x1, 0x2, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000100)='rxrpc_congest\x00', r5, 0x0, 0x8000}, 0x18) r6 = syz_io_uring_setup(0x371d, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x1, 0xffffff}, &(0x7f0000000380), &(0x7f0000000400)) r7 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000d00000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r8, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r9}, 0x18) stat(0x0, 0x0) r10 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r10, &(0x7f0000001fc0)=""/184, 0x20002078) ioctl$SNDRV_TIMER_IOCTL_TREAD64(r10, 0x400454a4, &(0x7f0000000200)) ioctl$sock_inet_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e22, @broadcast}}) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) 5m46.486093641s ago: executing program 7 (id=7755): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x80000) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x1a0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600700, 0x19) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x2000000, 0x12, r2, 0x0) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="60000000140001002bbd7000ffdbdf25020000fd", @ANYRES32=r3, @ANYBLOB="08000b00e000000108000200a414"], 0x60}, 0x1, 0x0, 0x0, 0x40}, 0x40010) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000002c0)={0x14, 0x2d, 0xe01, 0x70bd26, 0x25dfdbfc, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2000801d}, 0x20000000) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r5, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg(r5, &(0x7f00000016c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001a80)=ANY=[], 0xc}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001ac0)=ANY=[], 0x3a8}}], 0x2, 0x4004804) pwritev(r4, &(0x7f0000000600)=[{&(0x7f0000000240)="02000000", 0x4}, {&(0x7f0000000280)="f697079a16", 0x5}, {&(0x7f0000000340)='Rs', 0x2}], 0x3, 0x0, 0x0) 5m46.018794718s ago: executing program 7 (id=7758): r0 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$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") syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000280)='./file1\x00', 0x1400c, &(0x7f0000000040)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xffffffff}}, {@init_itable}, {@noload}]}, 0x3, 0x470, &(0x7f00000006c0)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4800, 0x0, 0x0, 0x0, &(0x7f0000000000)) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="8111000000000000140003006272696467655f736c6176655f30000008000400d400000008000a0048"], 0x44}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x8080c61) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x8, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x2, 0x3, 0x1, 0x0, 0x37}]}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)={0x1c, 0x19, 0x1, 0x0, 0x0, {0x1d, 0xd601, 0x9}, [@nested={0x8, 0x12, 0x0, 0x1, [@nested={0x4, 0x131}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x5}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r7, &(0x7f0000000180), 0x40010) r8 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) getdents(r8, &(0x7f0000001fc0)=""/184, 0xb8) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0406618, &(0x7f0000000200)={@desc={0x1, 0x0, @desc2}}) 5m44.87299935s ago: executing program 7 (id=7763): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x7b}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0xa, [@enum={0x2, 0x3, 0x0, 0x6, 0x4, [{0x8}, {0x1, 0xfffffff7}, {0x7}]}]}, {0x0, [0x61, 0x2e, 0x61, 0x5f, 0x30, 0x0, 0x61, 0x61]}}, &(0x7f00000003c0)=""/208, 0x46, 0xd0, 0x1}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000240)='spi_setup\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) unshare(0x22020400) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r2 = inotify_init() inotify_add_watch(r2, 0x0, 0xc4000100) r3 = socket$inet(0x2, 0x1, 0x7) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000140)={{{@in6=@private2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@loopback}}, &(0x7f00000000c0)=0xe8) ioprio_get$uid(0x0, r4) r5 = getpid() r6 = syz_pidfd_open(r5, 0x0) setns(r6, 0x24020000) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x101302, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x2000000000000012) ioctl$KVM_CREATE_DEVICE(r8, 0xc00caee0, &(0x7f0000000100)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r9, 0x4018aee1, &(0x7f0000000480)=@attr_other={0x0, 0x1, 0x1, 0x0}) 5m44.36124186s ago: executing program 7 (id=7766): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x901800, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0xb101e, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) syz_clone(0x126400, 0x0, 0x0, 0x0, 0x0, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000580)='./file0/../file0\x00', 0x89901) move_mount(r1, &(0x7f0000000440)='./file0/../file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r3 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r5, 0x29, 0x6, &(0x7f0000000380)={0x7d, {{0x29, 0x0, 0x2000001, @dev={0xfe, 0x80, '\x00', 0x2b}, 0x7}}}, 0x88) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x400000) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x5, 0xfffffffffffffffd, 0x0, 0x10005, 0xfffffffffffffffd, 0x4002004c7, 0x1004, 0x8, 0xfff, 0xa4a4, 0x0, 0x1, 0x7], 0x0, 0x2025c0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x47f2, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r8, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000b, 0x204031, 0xffffffffffffffff, 0xec776000) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r7) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r9, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x4000054) ioctl$KVM_RUN(r6, 0xae80, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x5, 0x1, 0x80, 0x7ffffffe}]}) signalfd(r0, &(0x7f0000000000)={[0x8]}, 0x8) ioctl$KVM_RUN(r6, 0xae80, 0x0) 5m43.526999742s ago: executing program 7 (id=7769): syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000540)='./file0\x00', 0x810082, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x0, 0x2b9, &(0x7f0000000280)="$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") r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 5m41.759102267s ago: executing program 7 (id=7772): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x18) sysinfo(&(0x7f0000000000)=""/35) 5m41.733142399s ago: executing program 39 (id=7772): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x18) sysinfo(&(0x7f0000000000)=""/35) 18.428806537s ago: executing program 9 (id=8805): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) io_setup(0x8, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb2570000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1}}) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x40485404, &(0x7f0000000040)={{0x1}}) 17.17493627s ago: executing program 9 (id=8815): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_VLAN(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x14, 0x0, 0x400, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x40010) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1b, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000580)='sched_switch\x00', r3}, 0x18) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000002780)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, &(0x7f0000000080)={r5, 0x3, r4, 0x5}) socket$inet(0x2, 0x4000000000000001, 0x0) socket$inet(0x2, 0x2, 0x1) socket(0xa, 0x3, 0x3a) r6 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x5000, 0x0, @mcast1, 0x5}, 0x1c) writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) 16.26221782s ago: executing program 9 (id=8816): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000900), r3) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r4, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40881}, 0x20000000) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1b, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000580)='sched_switch\x00', r5}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000002780)) socket$inet(0x2, 0x2, 0x1) r6 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r6, 0x29, 0xc8, 0x0, 0xc000000) r7 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x5000, 0x0, @mcast1, 0x5}, 0x1c) writev(r7, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) 15.2426769s ago: executing program 9 (id=8822): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000000500)={[{@dioread_nolock}, {@stripe={'stripe', 0x3d, 0x3}}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@nogrpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@errors_remount}, {@acl}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}, {@jqfmt_vfsold}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@nombcache}]}, 0xfd, 0x573, &(0x7f0000000cc0)="$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") r0 = open(&(0x7f0000000140)='./file1\x00', 0x64042, 0x169) mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) write$cgroup_devices(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x65, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x44}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) keyctl$session_to_parent(0x12) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000010c0), 0x1, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000001b40)='sched_switch\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r4) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x1c, r5, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4008084}, 0x0) keyctl$session_to_parent(0x12) keyctl$session_to_parent(0x12) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r6, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r6, &(0x7f0000004200)={0x50, 0x0, r7}, 0x50) syz_fuse_handle_req(r6, &(0x7f0000008880)="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", 0x2000, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000340)='./file0\x00', 0x0) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000840)=')', 0x1}], 0x1, 0x8, 0x365) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000000880)=@filter={'filter\x00', 0x2, 0x4, 0x3b8, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x320, 0x320, 0x320, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x1c8, 0x1f0, 0x0, {}, [@common=@inet=@policy={{0x158}, {[{@ipv4=@empty, [], @ipv4=@broadcast}, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xffffff00], @ipv4=@loopback}, {@ipv6=@mcast2, [], @ipv6=@dev}, {@ipv4, [], @ipv4=@multicast1}], 0x9}}]}, @REJECT={0x28}}, {{@ip={@multicast1, @dev, 0x0, 0x0, 'batadv_slave_0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@CLASSIFY={0x28}}, {{@ip={@remote, @multicast2, 0x0, 0x0, 'veth1\x00', 'vxcan1\x00'}, 0x0, 0x70, 0x98}, @REJECT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x418) 14.171745965s ago: executing program 9 (id=8827): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_VLAN(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x14, 0x0, 0x400, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x40010) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1b, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000580)='sched_switch\x00', r3}, 0x18) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000002780)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, &(0x7f0000000080)={r5, 0x3, r4, 0x5}) socket$inet(0x2, 0x4000000000000001, 0x0) socket$inet(0x2, 0x2, 0x1) socket(0xa, 0x3, 0x3a) r6 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x5000, 0x0, @mcast1, 0x5}, 0x1c) writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) 9.75872185s ago: executing program 2 (id=8839): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x17, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x0, 0x1}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14}, 0x80) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffbfff, 0x1, 0x1}, 0x50) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r5) socket$netlink(0x10, 0x3, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='kmem_cache_free\x00', r7, 0x0, 0x100000000}, 0x18) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) writev(r4, &(0x7f00000001c0)=[{&(0x7f0000000100)="89e7ee2c78dad9b4b473fec988cafb", 0x28}, {&(0x7f0000000500)="e98314d58ce4b24ee137cea9c243c233bfa2f5fee778bbfc11a66c", 0x1b}], 0x2) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r3}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000810018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r10}, 0x10) pipe(&(0x7f0000000d00)) 7.430717219s ago: executing program 6 (id=8844): sched_setscheduler(0x0, 0x3, &(0x7f0000000000)=0xfffffffd) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r0, 0x29, 0x19, 0x0, 0x0) sendto$inet6(r0, 0x0, 0xfffffd15, 0x200c8084, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x40}}, 0x1c) recvmmsg(r0, &(0x7f0000002480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002003, 0x0) r1 = socket$key(0xf, 0x3, 0x2) syz_clone3(&(0x7f0000000480)={0x60040800, &(0x7f0000000140), &(0x7f0000000180), &(0x7f0000000280), {0x31}, 0x0, 0x0, &(0x7f0000000380)=""/130, &(0x7f0000000440)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x3}, 0x58) sendmsg$key(r1, 0x0, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001ec0)=ANY=[@ANYBLOB="020100030a0000000000000000000000020010000000000200000000000000000300050000000000020000009d1414000000000000000000030006000000000002000000ac14"], 0x50}}, 0x800) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[], 0x50) io_getevents(0x0, 0x1, 0x1, &(0x7f0000000100)=[{}], &(0x7f0000000300)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000000c0)={'gre0\x00', &(0x7f0000000000)={'syztnl2\x00', r5, 0x2000, 0xab00, 0x0, 0x7, {{0x5, 0x4, 0x0, 0x13, 0x14, 0x20, 0x0, 0x2b, 0x2f, 0x0, @empty=0x2f, @multicast1}}}}) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x3) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYRESHEX], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 7.090693622s ago: executing program 2 (id=8847): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000017c0)=@base={0xb, 0x7, 0xc9d7, 0x7, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000040000000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x23}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000040)='sys_enter\x00', r3}, 0x18) clock_adjtime(0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) mlockall(0x7) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x8, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0xffffb000) io_getevents(0x0, 0x1, 0x0, &(0x7f0000000000), 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r2}, 0x10) r4 = getpgid(0x0) r5 = syz_pidfd_open(r4, 0x0) r6 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0xac63094eb3328933, 0x0) r7 = pidfd_getfd(r5, r6, 0x0) sendmsg$NFQNL_MSG_VERDICT(r7, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x54, 0x1, 0x3, 0x101, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFQA_EXP={0xc, 0xf, 0x0, 0x1, [@CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0xb}]}, @NFQA_VLAN={0xc, 0x13, 0x0, 0x1, [@NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x3ab}]}, @NFQA_VLAN={0x1c, 0x13, 0x0, 0x1, [@NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x88a8}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x1}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}]}, @NFQA_VLAN={0xc, 0x13, 0x0, 0x1, [@NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x88a8}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x80) 7.089867862s ago: executing program 5 (id=8848): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB], &(0x7f0000001200)='syzkaller\x00'}, 0x94) fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffbfff, 0x1, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000810018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000940)) r2 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket(0x8000000010, 0x2, 0x0) write(r6, &(0x7f00000002c0)="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", 0xfc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) arch_prctl$ARCH_SHSTK_UNLOCK(0x5004, 0x2) r7 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_procfs(0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r8, 0x4c82) 6.218170508s ago: executing program 2 (id=8849): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x3, &(0x7f0000000000)=0xfffffffd) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r0, 0x29, 0x19, 0x0, 0x0) sendto$inet6(r0, 0x0, 0xfffffd15, 0x200c8084, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x40}}, 0x1c) recvmmsg(r0, &(0x7f0000002480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002003, 0x0) r1 = socket$key(0xf, 0x3, 0x2) syz_clone3(0x0, 0x0) sendmsg$key(r1, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001ec0)=ANY=[@ANYBLOB="020100030a000000000000000000000002001000000000020000000000000000030005"], 0x50}}, 0x800) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0xd) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[], 0x50) io_getevents(0x0, 0x1, 0x1, &(0x7f0000000100)=[{}], &(0x7f0000000300)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYRESHEX], 0x48) 6.163496803s ago: executing program 6 (id=8850): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x110a, 0x1}) openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x7, 0xf, &(0x7f0000000340)=ANY=[@ANYRES32=r1, @ANYRES32=r6, @ANYBLOB="0000000000000000b7020000140000e5b7030000000700008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r7}, 0x10) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) r8 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff14, 0x0, r8, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r1, r9, 0x25, 0x0, @void}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001100010025bd7000ffdbdf2500000000", @ANYRES32=r9, @ANYBLOB="29920200465c0000"], 0x20}}, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x2, 0x0) 6.092427771s ago: executing program 1 (id=8851): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000240), 0xc02, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="580000001000010400ffffff7f00000000000000", @ANYRES32=0x0, @ANYBLOB="fab0817dbcb5f31a24001280110001006272696467655f736c617665000000000c0005800500010000000000140003006272696467655f736c6176655f300000"], 0x58}, 0x1, 0x0, 0x0, 0x2004c000}, 0x4040) r2 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000100)={0xc1b, 0x100, 0x5, 0x3, 0x19, "d8cb7e9c1c29f59f"}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x8, 0x0, 0xf}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x2000000000000290, 0x0, &(0x7f0000000000)='GPL\x00', 0xf, 0x0, 0xfffffffffffffffe, 0xc3000, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f00000000c0)={'tunl0\x00', 0x400}) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000140)={'wg2\x00', 0x600}) ioctl$ASHMEM_GET_PROT_MASK(r0, 0x7706, 0x0) 5.806956559s ago: executing program 5 (id=8852): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000500)={0x1c, 0x1, 0x1, 0x101, 0x0, 0x0, {0xa, 0x0, 0x7}, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x880) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000080), 0x3, 0x200) ioctl$USBDEVFS_GET_SPEED(r2, 0x551f) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000000)=ANY=[@ANYRESHEX=0x0, @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=r1, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r4, r4) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@private2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in=@empty}}, &(0x7f0000000300)=0xe8) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x4000, &(0x7f0000000340)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@directio}, {@afid={'afid', 0x3d, 0x6}}, {@msize={'msize', 0x3d, 0x5}}, {@cache_none}, {@cache_loose}], [{@audit}, {@appraise_type}, {@fowner_lt={'fowner<', r4}}, {@dont_hash}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}, {@fowner_gt={'fowner>', r5}}, {@context={'context', 0x3d, 'sysadm_u'}}, {@smackfsdef={'smackfsdef', 0x3d, '#@$'}}]}}) setresuid(0xee01, 0x0, 0x0) llistxattr(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r6, &(0x7f0000000180), 0x14) 5.369229572s ago: executing program 5 (id=8853): bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1a, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x7}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x2, 0x300}, {0x6e}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x38, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000140), &(0x7f0000000040)='%pI4 \x00'}, 0x2a) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffff7f}]}) 4.750569533s ago: executing program 2 (id=8854): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{r0, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000040)='%pI4 \x00'}, 0x2a) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000540)={'ip6gre0\x00', 0x0, 0x29, 0xd, 0x8, 0x1, 0x4, @mcast1, @loopback, 0x7800, 0x80, 0x2, 0x8}}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x2003, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x44, 0x2, [@TCA_FQ_CODEL_INTERVAL={0x8, 0x3, 0x6}, @TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0x1}, @TCA_FQ_CODEL_LIMIT={0x0, 0x2, 0x6}, @TCA_FQ_CODEL_CE_THRESHOLD_SELECTOR={0x5, 0xa, 0x1}, @TCA_FQ_CODEL_INTERVAL={0x4, 0x3, 0x3}, @TCA_FQ_CODEL_CE_THRESHOLD_SELECTOR={0x5, 0xa, 0x3}, @TCA_FQ_CODEL_QUANTUM={0x8, 0x6, 0x7}, @TCA_FQ_CODEL_CE_THRESHOLD_SELECTOR={0xfdab, 0xa, 0xaa}]}}]}, 0x78}}, 0x4000010) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000004c0)={'ip6gre0\x00', &(0x7f00000005c0)={'ip6_vti0\x00', 0x0, 0x2f, 0xf, 0xa, 0x0, 0x37, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7800, 0x8000, 0x8, 0x4}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000006c0)={'ip6tnl0\x00', &(0x7f0000000640)={'syztnl0\x00', 0x0, 0x4, 0x7f, 0x7, 0xf, 0x9, @local, @mcast2, 0x20, 0x10, 0x6, 0xffffcdbd}}) getsockname$packet(0xffffffffffffffff, &(0x7f00000008c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 4.598836867s ago: executing program 5 (id=8855): prlimit64(0x0, 0xe, &(0x7f0000000240)={0xb, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000006c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='mnt/encrypted_dir\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$uinput_user_dev(r3, &(0x7f0000000380)={'syz0\x00', {0xff, 0x6, 0x7fff, 0x8d5}, 0x2, [0x10000, 0xeba, 0x7, 0x9, 0x8, 0x1, 0x6, 0x7ff, 0x54, 0x7fffdfff, 0x2, 0xc, 0x8, 0x9, 0x9, 0xfffffff7, 0x7, 0x40000, 0x842, 0x26, 0x2, 0x0, 0x3ff, 0xfffffff4, 0x1, 0xda6, 0x3, 0xa7, 0x4, 0x2, 0x80009, 0x76c9, 0x200, 0x2b, 0x5, 0x1, 0x7, 0x9, 0x1000f, 0xb, 0x9, 0x7fffffff, 0x1b, 0xb50, 0x0, 0x800, 0x3, 0x2, 0x7, 0xfffffffe, 0xfffffffa, 0x8, 0x24, 0x7fff, 0x8, 0x1, 0x200, 0x0, 0x0, 0x7, 0x964e, 0x2d5, 0x149, 0x1], [0x266ac, 0xfffffffb, 0x4, 0x3, 0x8e, 0x7, 0x80000001, 0x9, 0x4, 0x85, 0x4, 0x7, 0x6, 0x8001, 0x3, 0x8, 0x2, 0x5, 0xb, 0x7ff, 0x7ff, 0x101, 0x0, 0xc00, 0x89, 0x7ff, 0x0, 0xfffffad5, 0x10000, 0x9, 0x9, 0x4d26, 0x10000, 0x8, 0x1, 0x7, 0xfffffffa, 0x4, 0x4c, 0x9, 0x8, 0x5, 0xe66, 0x8, 0x2, 0x81, 0xfffff001, 0x7d, 0x6, 0xb, 0x4, 0x9, 0x1, 0x8d1, 0x100008fd, 0x1, 0xe0, 0x8e, 0x8, 0x4, 0x4, 0xade, 0x7f, 0x9], [0x8396, 0x7, 0x10000, 0x9, 0x8000, 0x0, 0x9, 0xe, 0x5d0, 0xff, 0x0, 0x400, 0x81000, 0x9, 0x6e, 0x8001, 0x7, 0x5, 0x6, 0x5, 0x100, 0xcb, 0x2, 0x3, 0x0, 0x2, 0x8001, 0xc, 0x5, 0xb0f, 0x1e, 0x1, 0x800, 0x80008, 0x5, 0x3, 0x200, 0xfc, 0x2, 0x10, 0x464b, 0x6, 0x2e7, 0x7ff, 0x7444, 0x6, 0x7f, 0x4, 0x7fffffff, 0xffffffff, 0x4, 0xffff, 0xd5d, 0xa2c787d, 0xffffff4e, 0x8009, 0x4, 0x40, 0x3, 0x0, 0x1fc1, 0x9, 0x1, 0x6], [0x10000010, 0x7, 0x29, 0x10, 0xa5b, 0xfe, 0xff, 0x6, 0x80000002, 0x0, 0xb, 0x2, 0x4, 0x5, 0x7, 0x0, 0xfffffffd, 0x7ff, 0xdaa, 0x4, 0x3, 0x103, 0x6, 0xcc, 0x6, 0x4000400, 0x9, 0xfffffffb, 0x40, 0x80000000, 0x4, 0x7, 0xfff, 0x4, 0x9, 0x0, 0x9, 0x1, 0x0, 0x7, 0xcc16, 0x3, 0x1, 0x80000002, 0x591, 0x8, 0x6, 0x3, 0xfffff801, 0xffefffff, 0x37c, 0xfffffff8, 0xd, 0x7, 0xd, 0x9, 0x80006eaf, 0x0, 0x8, 0x5e02, 0x2, 0x3, 0x1, 0x400]}, 0x45c) ioctl$UI_DEV_CREATE(r3, 0x5501) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=ANY=[@ANYBLOB="f8000000160001000000000000000000fe8000000000000000000000000000aaff01000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe880000000000000000000000000009000000006c000000ffffffff000000000000000000000000000000000000000000000000000000000000000800000000000007000000000000000004000000000000000800000000000000000000000000002000000000000000000000000000040000090000000000000000000000010000000000000000000000000000000a00000000000000000002"], 0xf8}, 0x1, 0x0, 0x0, 0xc1}, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="f8000000160001000000000800000000fe1f0000000000000000000000000001ff0100000000000000000000000000010000000000000000000000000000000000a139c9a0e8861c28f0c636e7f58829c5275eb47349885e96587cfb0383165291377fc7302b1059b9c96a87811ff111c6b3ee024de7cca526c9220fd06f188c5ba716ff9e29fe5137d603138e2b7c6a111ab66c9d991243f5dda6dae85d4eb35cf452d5809c22bc37943e547d8c8a5549d85d04d4ed06a43ff722fd0f14d3e78b0312ea852d7b0a7c3090ef1bfdf103b1c71d01a8dbcff3f24b4b485d6701dc07b32e432d880e5e6ca2c34231a570f8821ed9b8ffd03301519b9245e281d5be7661ae6034e8bd107748aff7e6f833be2cd52fc7a80957ae494bbb58d35e7315559ae57af2", @ANYRES32=0x0, @ANYRES16=r4, @ANYBLOB="fe880000000000000000000000000001000000003300000000000000000000000000ffffac14142900000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00"/176], 0xf8}}, 0x40000) syz_mount_image$fuse(0x0, &(0x7f0000001040)='\x00', 0x2e4888, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}, {@metacopy_on}], [], 0x2c}) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x8800, 0x8) 4.597818278s ago: executing program 9 (id=8856): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{r0, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000040)='%pI4 \x00'}, 0x2a) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000540)={'ip6gre0\x00', 0x0, 0x29, 0xd, 0x8, 0x1, 0x4, @mcast1, @loopback, 0x7800, 0x80, 0x2, 0x8}}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x2003, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x44, 0x2, [@TCA_FQ_CODEL_INTERVAL={0x8, 0x3, 0x6}, @TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0x1}, @TCA_FQ_CODEL_LIMIT={0x0, 0x2, 0x6}, @TCA_FQ_CODEL_CE_THRESHOLD_SELECTOR={0x5, 0xa, 0x1}, @TCA_FQ_CODEL_INTERVAL={0x4, 0x3, 0x3}, @TCA_FQ_CODEL_CE_THRESHOLD_SELECTOR={0x5, 0xa, 0x3}, @TCA_FQ_CODEL_QUANTUM={0x8, 0x6, 0x7}, @TCA_FQ_CODEL_CE_THRESHOLD_SELECTOR={0xfdab, 0xa, 0xaa}]}}]}, 0x78}}, 0x4000010) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000004c0)={'ip6gre0\x00', &(0x7f00000005c0)={'ip6_vti0\x00', 0x0, 0x2f, 0xf, 0xa, 0x0, 0x37, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7800, 0x8000, 0x8, 0x4}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000006c0)={'ip6tnl0\x00', &(0x7f0000000640)={'syztnl0\x00', 0x0, 0x4, 0x7f, 0x7, 0xf, 0x9, @local, @mcast2, 0x20, 0x10, 0x6, 0xffffcdbd}}) getsockname$packet(0xffffffffffffffff, &(0x7f00000008c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000940)={'syztnl2\x00', &(0x7f0000000a00)={'sit0\x00', 0x0, 0x0, 0x8, 0xffff8000, 0x5, {{0x29, 0x4, 0x2, 0x2e, 0xa4, 0x64, 0x0, 0xc, 0x4, 0x0, @multicast2, @broadcast, {[@end, @timestamp_prespec={0x44, 0x24, 0x89, 0x3, 0x2, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x6}, {@multicast2, 0xfffffff2}, {@multicast2}, {@loopback, 0x1}]}, @cipso={0x86, 0x5c, 0x0, [{0x5, 0xb, "e01a5e87bb4ea386b6"}, {0x6, 0xe, "fa15920f11c49789cd262a7c"}, {0x0, 0x12, "04638e7af063295484f902f28728700a"}, {0x5, 0x4, "8da4"}, {0x0, 0xd, "59ae5636f7f588732889e9"}, {0x0, 0x3, "0e"}, {0x7, 0x6, "6e9632d6"}, {0x2, 0x11, "49f0fd08c689f533c79dddffdb178d"}]}, @end, @timestamp_prespec={0x44, 0xc, 0x74, 0x3, 0x5, [{@rand_addr=0x64010102, 0x71}]}]}}}}}) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x44800}, 0x0) 4.597253828s ago: executing program 40 (id=8856): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{r0, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000040)='%pI4 \x00'}, 0x2a) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000540)={'ip6gre0\x00', 0x0, 0x29, 0xd, 0x8, 0x1, 0x4, @mcast1, @loopback, 0x7800, 0x80, 0x2, 0x8}}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x2003, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x44, 0x2, [@TCA_FQ_CODEL_INTERVAL={0x8, 0x3, 0x6}, @TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0x1}, @TCA_FQ_CODEL_LIMIT={0x0, 0x2, 0x6}, @TCA_FQ_CODEL_CE_THRESHOLD_SELECTOR={0x5, 0xa, 0x1}, @TCA_FQ_CODEL_INTERVAL={0x4, 0x3, 0x3}, @TCA_FQ_CODEL_CE_THRESHOLD_SELECTOR={0x5, 0xa, 0x3}, @TCA_FQ_CODEL_QUANTUM={0x8, 0x6, 0x7}, @TCA_FQ_CODEL_CE_THRESHOLD_SELECTOR={0xfdab, 0xa, 0xaa}]}}]}, 0x78}}, 0x4000010) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000004c0)={'ip6gre0\x00', &(0x7f00000005c0)={'ip6_vti0\x00', 0x0, 0x2f, 0xf, 0xa, 0x0, 0x37, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7800, 0x8000, 0x8, 0x4}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000006c0)={'ip6tnl0\x00', &(0x7f0000000640)={'syztnl0\x00', 0x0, 0x4, 0x7f, 0x7, 0xf, 0x9, @local, @mcast2, 0x20, 0x10, 0x6, 0xffffcdbd}}) getsockname$packet(0xffffffffffffffff, &(0x7f00000008c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000940)={'syztnl2\x00', &(0x7f0000000a00)={'sit0\x00', 0x0, 0x0, 0x8, 0xffff8000, 0x5, {{0x29, 0x4, 0x2, 0x2e, 0xa4, 0x64, 0x0, 0xc, 0x4, 0x0, @multicast2, @broadcast, {[@end, @timestamp_prespec={0x44, 0x24, 0x89, 0x3, 0x2, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x6}, {@multicast2, 0xfffffff2}, {@multicast2}, {@loopback, 0x1}]}, @cipso={0x86, 0x5c, 0x0, [{0x5, 0xb, "e01a5e87bb4ea386b6"}, {0x6, 0xe, "fa15920f11c49789cd262a7c"}, {0x0, 0x12, "04638e7af063295484f902f28728700a"}, {0x5, 0x4, "8da4"}, {0x0, 0xd, "59ae5636f7f588732889e9"}, {0x0, 0x3, "0e"}, {0x7, 0x6, "6e9632d6"}, {0x2, 0x11, "49f0fd08c689f533c79dddffdb178d"}]}, @end, @timestamp_prespec={0x44, 0xc, 0x74, 0x3, 0x5, [{@rand_addr=0x64010102, 0x71}]}]}}}}}) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x44800}, 0x0) 4.562385891s ago: executing program 1 (id=8858): syz_mount_image$exfat(&(0x7f0000000100), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000600)=ANY=[], 0x2, 0x1509, &(0x7f0000001c40)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x8, 0x3, 0x450, 0x0, 0x1acc02, 0x148, 0x0, 0x10, 0x3b8, 0x2a8, 0x2a8, 0x3b8, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x40000, 0x2f8, 0x320, 0x0, {0x0, 0x5803}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x9, 0x1, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x10, './file0\x00'}}]}, @common=@inet=@SET1={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b0) 4.442748543s ago: executing program 6 (id=8859): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000900), r3) sendmsg$BATADV_CMD_SET_VLAN(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x40, r4, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8001}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xb9a3}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4006}, @BATADV_ATTR_ORIG_ADDRESS={0xa}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x40010) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r4, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40881}, 0x20000000) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000580)='sched_switch\x00', r5}, 0x18) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r6, 0x40182103, &(0x7f0000000080)={0x0, 0x3, r6, 0x5}) socket$inet(0x2, 0x4000000000000001, 0x0) socket$inet(0x2, 0x2, 0x1) setsockopt$MRT6_DEL_MIF(0xffffffffffffffff, 0x29, 0xc8, 0x0, 0xc000000) r7 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x5000, 0x0, @mcast1, 0x5}, 0x1c) writev(r7, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) 3.607351455s ago: executing program 1 (id=8860): sched_setscheduler(0x0, 0x3, &(0x7f0000000000)=0xfffffffd) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r0, 0x29, 0x19, 0x0, 0x0) sendto$inet6(r0, 0x0, 0xfffffd15, 0x200c8084, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x40}}, 0x1c) recvmmsg(r0, &(0x7f0000002480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002003, 0x0) r1 = socket$key(0xf, 0x3, 0x2) syz_clone3(&(0x7f0000000480)={0x60040800, &(0x7f0000000140), &(0x7f0000000180), &(0x7f0000000280), {0x31}, 0x0, 0x0, &(0x7f0000000380)=""/130, &(0x7f0000000440)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x3}, 0x58) sendmsg$key(r1, 0x0, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001ec0)=ANY=[@ANYBLOB="020100030a0000000000000000000000020010000000000200000000000000000300050000000000020000009d1414000000000000000000030006000000000002000000ac14"], 0x50}}, 0x800) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[], 0x50) io_getevents(0x0, 0x1, 0x1, &(0x7f0000000100)=[{}], &(0x7f0000000300)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000000c0)={'gre0\x00', &(0x7f0000000000)={'syztnl2\x00', r5, 0x2000, 0xab00, 0x0, 0x7, {{0x5, 0x4, 0x0, 0x13, 0x14, 0x20, 0x0, 0x2b, 0x2f, 0x0, @empty=0x2f, @multicast1}}}}) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x3) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYRESHEX], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 3.401017305s ago: executing program 2 (id=8861): futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x5, 0x1, 0x0, &(0x7f0000048000), 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) r2 = open$dir(&(0x7f0000000180)='./file0\x00', 0x109400, 0x1) unlinkat(r2, &(0x7f0000000280)='./file0\x00', 0x200) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) socket$netlink(0x10, 0x3, 0x8000000004) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000016c0)={0x16, 0xc, &(0x7f0000001780)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095", @ANYRESOCT=r1, @ANYRES16=r1, @ANYRESHEX, @ANYRESOCT], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4d) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='tegra_dma_tx_status\x00', r5}, 0x18) writev(r2, &(0x7f00000003c0), 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x9031, 0xffffffffffffffff, 0xe75f0000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) rename(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0xfffffffffffffeee, &(0x7f0000000780)={&(0x7f0000001580)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r10, {0x0, 0x2}, {0xffff, 0xffff}, {0x0, 0x4}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0xd0f, 0x0, 0x25dfdbfc, {0x60, 0x0, 0x0, r10, {}, {0x1, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x40004}, 0x40000) recvmsg$can_raw(r8, &(0x7f0000000480)={&(0x7f0000000340)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000580)=""/4096, 0x1000}], 0x1, &(0x7f0000000440)=""/17, 0x11}, 0x2) 3.399800346s ago: executing program 6 (id=8862): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000080010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f00000004c0)={0x0, r1}, 0x8) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000006c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="9feb01001800000000000000a8000000a8000000030000000100000000000008020000000d00000000000009050000000300000000000012030000000d0000000000000c030000000500000000000002020000000e00000000000010100000000a0000000000000a050000000800000006000084080000000c00000005000000070000000500000001000000a90c000007000000050000000100000000000000040000000900000010000000020000003dffffff0e000000030000000200000000ecb9e3a33c3b5f00"], &(0x7f0000000680)=""/28, 0xc3, 0x1c, 0x0, 0x1}, 0x28) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r3}, 0x10) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000480)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) bind$xdp(r4, &(0x7f0000000180)={0x2c, 0xa, r6}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYRES16=r3, @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', r6, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r8}, 0x10) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r11, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) ioctl$FS_IOC_GETFSUUID(r8, 0x80111500, &(0x7f0000000840)) quotactl_fd$Q_QUOTAOFF(r9, 0xffffffff80000302, 0x0, 0x0) r13 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000001300), 0x2, 0x0) pwritev(r13, 0x0, 0x0, 0x400, 0x5) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r12, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_RUN(r12, 0xae80, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={@fallback=r14, 0x0, 0x1, 0x4, &(0x7f0000000080)=[0x0], 0x1, 0x0, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0], &(0x7f0000000280)=[0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32=r11, @ANYRES32=r7, @ANYBLOB='\t\x00\x00\x00\r\x00\x00\x00', @ANYRES32=r15, @ANYBLOB, @ANYRES32=r1, @ANYBLOB, @ANYRES64=r16], 0x20) 3.263340769s ago: executing program 5 (id=8863): prlimit64(0x0, 0xe, &(0x7f0000000240)={0xb, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000006c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000400850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x0, &(0x7f0000000000), 0x0, 0x248, &(0x7f0000000940)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='mnt/encrypted_dir\x00', 0x0) mkdirat(r5, &(0x7f0000002040)='mnt\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$uinput_user_dev(r6, &(0x7f0000000380)={'syz0\x00', {0xff, 0x6, 0x7fff, 0x8d5}, 0x2, [0x10000, 0xeba, 0x7, 0x9, 0x8, 0x1, 0x6, 0x7ff, 0x54, 0x7fffdfff, 0x2, 0xc, 0x8, 0x9, 0x9, 0xfffffff7, 0x7, 0x40000, 0x842, 0x26, 0x2, 0x0, 0x3ff, 0xfffffff4, 0x1, 0xda6, 0x3, 0xa7, 0x4, 0x2, 0x80009, 0x76c9, 0x200, 0x2b, 0x5, 0x1, 0x7, 0x9, 0x1000f, 0xb, 0x9, 0x7fffffff, 0x1b, 0xb50, 0x0, 0x800, 0x3, 0x2, 0x7, 0xfffffffe, 0xfffffffa, 0x8, 0x24, 0x7fff, 0x8, 0x1, 0x200, 0x0, 0x0, 0x7, 0x964e, 0x2d5, 0x149, 0x1], [0x266ac, 0xfffffffb, 0x4, 0x3, 0x8e, 0x7, 0x80000001, 0x9, 0x4, 0x85, 0x4, 0x7, 0x6, 0x8001, 0x3, 0x8, 0x2, 0x5, 0xb, 0x7ff, 0x7ff, 0x101, 0x0, 0xc00, 0x89, 0x7ff, 0x0, 0xfffffad5, 0x10000, 0x9, 0x9, 0x4d26, 0x10000, 0x8, 0x1, 0x7, 0xfffffffa, 0x4, 0x4c, 0x9, 0x8, 0x5, 0xe66, 0x8, 0x2, 0x81, 0xfffff001, 0x7d, 0x6, 0xb, 0x4, 0x9, 0x1, 0x8d1, 0x100008fd, 0x1, 0xe0, 0x8e, 0x8, 0x4, 0x4, 0xade, 0x7f, 0x9], [0x8396, 0x7, 0x10000, 0x9, 0x8000, 0x0, 0x9, 0xe, 0x5d0, 0xff, 0x0, 0x400, 0x81000, 0x9, 0x6e, 0x8001, 0x7, 0x5, 0x6, 0x5, 0x100, 0xcb, 0x2, 0x3, 0x0, 0x2, 0x8001, 0xc, 0x5, 0xb0f, 0x1e, 0x1, 0x800, 0x80008, 0x5, 0x3, 0x200, 0xfc, 0x2, 0x10, 0x464b, 0x6, 0x2e7, 0x7ff, 0x7444, 0x6, 0x7f, 0x4, 0x7fffffff, 0xffffffff, 0x4, 0xffff, 0xd5d, 0xa2c787d, 0xffffff4e, 0x8009, 0x4, 0x40, 0x3, 0x0, 0x1fc1, 0x9, 0x1, 0x6], [0x10000010, 0x7, 0x29, 0x10, 0xa5b, 0xfe, 0xff, 0x6, 0x80000002, 0x0, 0xb, 0x2, 0x4, 0x5, 0x7, 0x0, 0xfffffffd, 0x7ff, 0xdaa, 0x4, 0x3, 0x103, 0x6, 0xcc, 0x6, 0x4000400, 0x9, 0xfffffffb, 0x40, 0x80000000, 0x4, 0x7, 0xfff, 0x4, 0x9, 0x0, 0x9, 0x1, 0x0, 0x7, 0xcc16, 0x3, 0x1, 0x80000002, 0x591, 0x8, 0x6, 0x3, 0xfffff801, 0xffefffff, 0x37c, 0xfffffff8, 0xd, 0x7, 0xd, 0x9, 0x80006eaf, 0x0, 0x8, 0x5e02, 0x2, 0x3, 0x1, 0x400]}, 0x45c) ioctl$UI_DEV_CREATE(r6, 0x5501) 1.348181897s ago: executing program 1 (id=8864): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x3, &(0x7f0000000000)=0xfffffffd) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r0, 0x29, 0x19, 0x0, 0x0) sendto$inet6(r0, 0x0, 0xfffffd15, 0x200c8084, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x40}}, 0x1c) recvmmsg(r0, &(0x7f0000002480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002003, 0x0) r1 = socket$key(0xf, 0x3, 0x2) syz_clone3(0x0, 0x0) sendmsg$key(r1, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001ec0)=ANY=[@ANYBLOB="020100030a000000000000000000000002001000000000020000000000000000030005"], 0x50}}, 0x800) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0xd) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[], 0x50) io_getevents(0x0, 0x1, 0x1, &(0x7f0000000100)=[{}], &(0x7f0000000300)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYRESHEX], 0x48) 1.347247627s ago: executing program 2 (id=8865): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f00000000c0)={0x17c04, 0xffffffffffffffff, 0x9, 0xfff, 0x9}) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x81, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000a7420040ab0501030001010203010902240001000000000904000002aad45c0009058e02000000000009050a06"], 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='sched_switch\x00', r4}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000003ff6)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x3}}) read$FUSE(0xffffffffffffffff, &(0x7f0000000a00)={0x2020}, 0x2020) newfstatat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) read$FUSE(0xffffffffffffffff, &(0x7f0000004000)={0x2020, 0x0, 0x0, 0x0}, 0x2020) mount$tmpfs(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000300), 0x42000, &(0x7f0000000580)={[{@inode64}, {@usrquota}], [{@fowner_lt={'fowner<', r7}}, {@subj_user={'subj_user', 0x3d, 'batadv0\x00'}}, {@dont_appraise}, {@euid_gt={'euid>', r6}}, {@subj_role}, {@obj_user={'obj_user', 0x3d, '$'}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@obj_type={'obj_type', 0x3d, '}'}}]}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r8 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000d40)=ANY=[@ANYBLOB="12010000000000104c05f20d00002000000109022400010000000c090400000203000000092109007101220500090581030004ff000067"], 0x0) syz_usb_control_io$hid(r8, 0x0, 0x0) syz_usb_control_io(r8, &(0x7f0000000240)={0x2c, &(0x7f0000000000)={0x40, 0x10, 0x7, {0x7, 0xa, "a18265cc32"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r8, 0x0, &(0x7f0000000c40)={0x84, &(0x7f0000000780)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_io_uring_setup(0x2f3c, &(0x7f0000000380)={0x0, 0x1fcb, 0x2}, &(0x7f0000000180), &(0x7f0000000040)) 1.178225394s ago: executing program 6 (id=8866): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_VLAN(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x34, 0x0, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8001}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xb9a3}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4006}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x40010) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1b, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000580)='sched_switch\x00', r3}, 0x18) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000002780)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, &(0x7f0000000080)={r5, 0x3, r4, 0x5}) socket$inet(0x2, 0x4000000000000001, 0x0) socket$inet(0x2, 0x2, 0x1) socket(0xa, 0x3, 0x3a) r6 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x5000, 0x0, @mcast1, 0x5}, 0x1c) writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) 1.064844485s ago: executing program 5 (id=8867): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) bind$packet(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b703000000eaff008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r3}, &(0x7f0000000200), &(0x7f0000000240)=r4}, 0x20) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x378, 0x0, 0x111, 0x4b4, 0x0, 0x700, 0x2a8, 0x278, 0x278, 0x2a8, 0x278, 0x3, 0x0, {[{{@ipv6={@mcast2, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, [], [], 'vlan0\x00', 'team_slave_0\x00', {}, {}, 0x88}, 0x0, 0xf8, 0x160, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x20, 0x30, 0x5, 0x8}}, @common=@unspec=@addrtype1={{0x28}, {0x810, 0x34, 0x2}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x4, 0x3, 0x0, 0x1, 'snmp_trap\x00', 'syz1\x00', {0x7f}}}}, {{@ipv6={@private1, @private1, [], [], 'geneve1\x00', 'erspan0\x00', {0xff}}, 0x0, 0xe0, 0x148, 0x0, {}, [@common=@unspec=@statistic={{0x38}, {0x0, 0x0, 0x0, 0xfffffffd}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d8) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=@setlink={0x48, 0x13, 0x1, 0x0, 0x25dfdbfd, {}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_SPOOFCHK={0xc, 0x4, {0x5, 0x4}}]}]}]}, 0x48}}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x98}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6}, [@tail_call={{}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x42, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r8}, 0x18) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r9) sendmsg$ETHTOOL_MSG_FEATURES_SET(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)={0x48, r10, 0x1, 0x70bd27, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_FEATURES_WANTED={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}]}]}]}, 0x48}}, 0x804) 452.682226ms ago: executing program 1 (id=8868): r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0xfffffffffffffd1d) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYRES64=r0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af87f19a40000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000d95d80e0c0f1fd23786bad5eefa2b9939480708707d3e1e3b7fa2d39ac868c96a63b74edee2a7c137ff38ef750a3285cd85f79a7ca4c95d2519b3c4792a76d29f8a4dee707da3201acefcff66de335fec7fcf51fbb33aeb71029b274759f318fa79ec13d1d7873e63d5c3921d422e650c907970259fffa2363442f74f410ef3d6bc5baf82a2bf017fbfb67bb982905b3ca494d314fb447a6b461659f"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000200), 0x3, r1}, 0x38) socketpair$nbd(0x1, 0x1, 0x0, 0x0) write$selinux_load(0xffffffffffffffff, 0x0, 0xef8c) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1004002, 0x0) chdir(&(0x7f00000001c0)='./bus\x00') rmdir(&(0x7f0000000000)='./bus\x00') ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{0xffffffffffffffff, 0xffffffffffffffff}, 0x0, 0x0}, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = syz_open_procfs(0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r5}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r6}, 0x10) r7 = socket(0x10, 0x803, 0x0) r8 = socket(0x10, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000700)=0x14) ioctl$sock_FIOGETOWN(r8, 0x8903, &(0x7f0000000080)=0x0) kcmp$KCMP_EPOLL_TFD(r10, 0xffffffffffffffff, 0x7, r8, &(0x7f0000000200)={r4, r2, 0x29465f2a}) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=r9, @ANYBLOB="2100000000000000280012800b000100697036746e6c00001800028014000300ff"], 0x48}}, 0x0) 272.821413ms ago: executing program 1 (id=8869): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000400), 0xff, 0x23f, &(0x7f0000000540)="$eJzs3T1oLFUYBuB3Zne95t5FrtoI4g+IiAbCtRNsYqMQkBBEBBUiIjZKIsQEu8TKxkJrlVQ2QeyMlpIm2CiCVdQUsRE0WBgstFiZnURisuLPxh1xngdmZ2b3nPnOMPOe3WbYAK11Nclskk6S6SS9JMXpBnfWy9Xj3c2p3cVkMHjsh2LYrt6vnfS7kmQjyQNJdsoiL3STte2nDn7ae+Se11d7d7+7/eTURE/y2OHB/qNH78y/9sHc/WufffHdfJHZ9H93XhevGPFet0hu+jeK/UcU3aZHwF+x8Mr7X1a5vznJXcP891KmvnhvrFy308t9b/9R3ze///zWSY4VuHiDQa/6DtwYAK1TJumnKGeS1NtlOTNT/4b/qnO5fHF55eXp55dXl55reqYCLko/2X/4o0sfXjmT/287df6B/68q/48vbH1dbR91mh4NMBG31asq/9PPrN8b+YfWkX9oL/mH9pJ/aC/5h/aSf2gv+Yf2kn9oL/mH9pJ/aK/T+QcA2mVwqeknkIGmND3/AAAAAAAAAAAAAAAAAAAA521O7S6eLJOq+clbyeFDSbqj6neG/0ecXD98vfxjUTX7TVF3G8vTd4x5gDG91/DT1zd802z9T29vtv76UrLxapJr3e75+684vv/+uRv/5PPes2MW+JuKM/sPPjHZ+mf9stVs/bm95ONq/rk2av4pc8twPXr+6VfXb8z6L/085gEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACYmF8DAAD//xFQbUc=") bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="090000000600000004000000fc07"], 0x48) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000780)=ANY=[@ANYBLOB="1b00000000000000000000000020000000000000f90aafb975c31818f1005b15f5f975d28ff74ddc61b60a14ac", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), r5) sendmsg$ETHTOOL_MSG_PAUSE_GET(r5, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001940)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01dfffffff9a26000000210000000c00018008000100", @ANYRES32=r4], 0x20}, 0x1, 0x0, 0x0, 0x4000c00}, 0x0) 0s ago: executing program 6 (id=8870): syz_mount_image$exfat(&(0x7f0000000100), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000600)=ANY=[], 0x2, 0x1509, &(0x7f0000001c40)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x8, 0x3, 0x450, 0x0, 0x1acc02, 0x148, 0x0, 0x10, 0x3b8, 0x2a8, 0x2a8, 0x3b8, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x40000, 0x2f8, 0x320, 0x0, {0x0, 0x5803}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x9, 0x1, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x10, './file0\x00'}}]}, @common=@inet=@SET1={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b0) kernel console output (not intermixed with test programs): e Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2258.493017][T32018] Call Trace: [ 2258.496335][T32018] [ 2258.499302][T32018] __dump_stack+0x21/0x24 [ 2258.503716][T32018] dump_stack_lvl+0xee/0x150 [ 2258.508349][T32018] ? __cfi_dump_stack_lvl+0x8/0x8 [ 2258.513412][T32018] ? __cfi_vfs_write+0x10/0x10 [ 2258.518243][T32018] dump_stack+0x15/0x24 [ 2258.522412][T32018] should_fail_ex+0x3d4/0x520 [ 2258.527113][T32018] __should_failslab+0xac/0xf0 [ 2258.531934][T32018] ? __se_sys_memfd_create+0xf2/0x3b0 [ 2258.537492][T32018] should_failslab+0x9/0x20 [ 2258.542011][T32018] __kmem_cache_alloc_node+0x3d/0x2c0 [ 2258.547480][T32018] ? ksys_write+0x1eb/0x240 [ 2258.552097][T32018] ? __se_sys_memfd_create+0xf2/0x3b0 [ 2258.557483][T32018] __kmalloc+0xa1/0x1e0 [ 2258.561696][T32018] ? strnlen_user+0x10d/0x190 [ 2258.566414][T32018] __se_sys_memfd_create+0xf2/0x3b0 [ 2258.571741][T32018] __x64_sys_memfd_create+0x5b/0x70 [ 2258.576984][T32018] x64_sys_call+0x235/0x9a0 [ 2258.582049][T32018] do_syscall_64+0x4c/0xa0 [ 2258.586513][T32018] ? clear_bhb_loop+0x30/0x80 [ 2258.591349][T32018] ? clear_bhb_loop+0x30/0x80 [ 2258.596593][T32018] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2258.602560][T32018] RIP: 0033:0x7faf8178efc9 [ 2258.607003][T32018] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2258.626726][T32018] RSP: 002b:00007faf826f8e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 2258.635187][T32018] RAX: ffffffffffffffda RBX: 0000000000001548 RCX: 00007faf8178efc9 [ 2258.643196][T32018] RDX: 00007faf826f8ef0 RSI: 0000000000000000 RDI: 00007faf81812960 [ 2258.651279][T32018] RBP: 0000200000001900 R08: 00007faf826f8bb7 R09: 00007faf826f8e40 [ 2258.659334][T32018] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000000 [ 2258.667602][T32018] R13: 00007faf826f8ef0 R14: 00007faf826f8eb0 R15: 0000200000000880 [ 2258.675633][T32018] [ 2258.679688][T32009] ext4 filesystem being mounted at /362/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 2258.754990][T32009] input: syz0 as /devices/virtual/input/input284 [ 2259.765608][T25224] EXT4-fs (loop9): unmounting filesystem. [ 2260.113377][T32048] loop9: detected capacity change from 0 to 128 [ 2260.746840][T32048] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 2260.756168][T32048] ext4 filesystem being mounted at /363/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 2260.815073][T32048] input: syz0 as /devices/virtual/input/input285 [ 2261.192271][T32063] xt_bpf: check failed: parse error [ 2262.425507][T25224] EXT4-fs (loop9): unmounting filesystem. [ 2262.720719][T32078] loop9: detected capacity change from 0 to 128 [ 2263.752158][T32085] loop6: detected capacity change from 0 to 128 [ 2263.894276][T32086] loop5: detected capacity change from 0 to 256 [ 2263.906822][T32078] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 2263.974431][T32078] ext4 filesystem being mounted at /364/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 2264.011013][T32086] exFAT-fs (loop5): failed to load upcase table (idx : 0x00011bf5, chksum : 0xcea91b8a, utbl_chksum : 0xe619d30d) [ 2264.135775][T32086] exFAT-fs (loop5): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 2264.379899][T32085] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 2264.389737][T32085] ext4 filesystem being mounted at /101/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 2264.418279][T32085] input: syz0 as /devices/virtual/input/input286 [ 2264.743723][T29999] EXT4-fs (loop6): unmounting filesystem. [ 2264.894551][T32097] serio: Serial port ptm0 [ 2265.100555][T32108] input: syz0 as /devices/virtual/input/input287 [ 2265.798671][T25224] EXT4-fs (loop9): unmounting filesystem. [ 2266.023530][T32110] xt_bpf: check failed: parse error [ 2266.209663][T32103] loop5: detected capacity change from 0 to 40427 [ 2266.217151][T32103] F2FS-fs (loop5): fault_injection options not supported [ 2266.218405][T32119] loop9: detected capacity change from 0 to 512 [ 2266.224291][T32103] F2FS-fs (loop5): fault_type options not supported [ 2266.231049][T32119] EXT4-fs: Ignoring removed i_version option [ 2266.243403][T32119] EXT4-fs: Ignoring removed bh option [ 2266.249938][T32103] F2FS-fs (loop5): invalid crc value [ 2266.265114][T32103] F2FS-fs (loop5): Found nat_bits in checkpoint [ 2266.302897][T32119] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 2266.518594][T32119] ext4 filesystem being mounted at /365/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 2267.522111][T32103] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 2269.856874][T25224] EXT4-fs (loop9): unmounting filesystem. [ 2269.986248][T32137] loop6: detected capacity change from 0 to 40427 [ 2270.011292][T32137] F2FS-fs (loop6): fault_injection options not supported [ 2270.030798][T32137] F2FS-fs (loop6): fault_type options not supported [ 2270.054773][T32137] F2FS-fs (loop6): invalid crc value [ 2270.201749][T32137] F2FS-fs (loop6): Found nat_bits in checkpoint [ 2270.308089][T32152] netlink: 4 bytes leftover after parsing attributes in process `syz.9.8317'. [ 2270.308145][T32137] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 2270.732417][T32171] serio: Serial port ptm0 [ 2271.326578][T29999] syz-executor: attempt to access beyond end of device [ 2271.326578][T29999] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 2271.583263][T32184] 9pnet_fd: Insufficient options for proto=fd [ 2271.681951][ T28] audit: type=1400 audit(1761440440.396:2904): avc: denied { map } for pid=32188 comm="syz.9.8326" path="socket:[135057]" dev="sockfs" ino=135057 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 2271.735907][T32195] device syzkaller0 entered promiscuous mode [ 2271.934657][T13023] usb 2-1: new full-speed USB device number 113 using dummy_hcd [ 2272.014514][T32203] netlink: 28 bytes leftover after parsing attributes in process `syz.9.8330'. [ 2272.024240][T32203] netlink: 24 bytes leftover after parsing attributes in process `syz.9.8330'. [ 2272.186497][T32207] serio: Serial port ptm0 [ 2272.196193][T32209] loop5: detected capacity change from 0 to 256 [ 2272.203160][T32209] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 2272.214371][T32209] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 2272.217746][T13023] usb 2-1: unable to get BOS descriptor or descriptor too short [ 2272.225853][T32209] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 2272.230963][T13023] usb 2-1: not running at top speed; connect to a high speed hub [ 2272.271532][T32212] serio: Serial port ptm0 [ 2272.336797][T13023] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 147, changing to 4 [ 2272.397755][T32209] xt_bpf: check failed: parse error [ 2272.403750][T13023] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2272.413194][T13023] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2272.464183][T13023] usb 2-1: Product: syz [ 2272.468809][T13023] usb 2-1: Manufacturer: syz [ 2272.473802][T13023] usb 2-1: SerialNumber: syz [ 2272.490862][T32216] 9pnet_fd: Insufficient options for proto=fd [ 2272.709015][T32218] loop5: detected capacity change from 0 to 40427 [ 2272.716260][T32218] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 2272.722993][T13023] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 2272.724586][T32218] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 2272.742372][T13023] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 2272.755013][T13023] usb 2-1: 5:0: cannot get min/max values for control 2 (id 5) [ 2272.777226][T13023] usb 2-1: 5:0: cannot get min/max values for control 2 (id 5) [ 2272.785711][T32218] F2FS-fs (loop5): Found nat_bits in checkpoint [ 2272.792467][T13023] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 2272.813985][T13023] usb 2-1: 5:0: cannot get min/max values for control 4 (id 5) [ 2272.842797][T13023] usb 2-1: USB disconnect, device number 113 [ 2273.643945][ T28] audit: type=1400 audit(1761440441.522:2905): avc: denied { read } for pid=32219 comm="syz.2.8336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 2274.039038][T32218] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 2274.057182][T32218] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 2274.074679][T32231] loop6: detected capacity change from 0 to 128 [ 2274.091560][T32231] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 2274.100392][T32231] ext4 filesystem being mounted at /106/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 2274.662349][T32240] device syzkaller0 entered promiscuous mode [ 2274.802153][T28120] F2FS-fs (loop5): invalid namelen(0), ino:0, run fsck to fix. [ 2274.802178][T28120] F2FS-fs (loop5): invalid namelen(0), ino:0, run fsck to fix. [ 2274.820144][T28120] F2FS-fs (loop5): invalid namelen(0), ino:0, run fsck to fix. [ 2274.828937][T28120] F2FS-fs (loop5): invalid namelen(0), ino:0, run fsck to fix. [ 2274.837518][T28120] F2FS-fs (loop5): invalid namelen(0), ino:0, run fsck to fix. [ 2274.847520][T28120] F2FS-fs (loop5): invalid namelen(0), ino:0, run fsck to fix. [ 2274.856370][T28120] F2FS-fs (loop5): invalid namelen(0), ino:0, run fsck to fix. [ 2274.881484][T32250] serio: Serial port ptm0 [ 2274.960742][ T28] audit: type=1400 audit(1761440443.423:2906): avc: denied { bind } for pid=32256 comm="syz.1.8346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 2275.094150][T32260] loop1: detected capacity change from 0 to 256 [ 2275.114221][T32260] exfat: Unknown parameter 'namecse' [ 2275.249573][T32260] loop1: detected capacity change from 0 to 8192 [ 2275.287626][T29999] EXT4-fs (loop6): unmounting filesystem. [ 2275.359497][T32272] netlink: 20 bytes leftover after parsing attributes in process `syz.6.8350'. [ 2275.440759][T32274] device syzkaller0 entered promiscuous mode [ 2275.482906][T32260] binder: 32259:32260 ioctl 540f 200000001a40 returned -22 [ 2275.549985][T32277] input: syz0 as /devices/virtual/input/input288 [ 2275.559162][ T28] audit: type=1400 audit(1761440443.977:2907): avc: denied { write } for pid=32259 comm="syz.1.8347" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 2275.564912][T32277] loop6: detected capacity change from 0 to 1024 [ 2275.586508][T32277] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 2275.595019][T32277] EXT4-fs (loop6): can't mount with both data=journal and delalloc [ 2275.989153][T32292] input: syz0 as /devices/virtual/input/input289 [ 2277.624211][T32299] serio: Serial port ptm0 [ 2278.097159][T32061] usb 10-1: new high-speed USB device number 28 using dummy_hcd [ 2278.161922][T32311] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2278.190312][T32316] device syzkaller0 entered promiscuous mode [ 2278.317081][T32061] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2278.335535][T32061] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2278.346977][T32061] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2278.360333][T32061] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2278.369584][T32061] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2278.378589][T32061] usb 10-1: config 0 descriptor?? [ 2278.412586][T30509] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 2278.607543][T30509] usb 2-1: Using ep0 maxpacket: 8 [ 2278.613969][T30509] usb 2-1: config 0 has an invalid interface number: 31 but max is 0 [ 2278.646777][T30509] usb 2-1: config 0 has no interface number 0 [ 2278.670468][T30509] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 2278.693056][T32327] loop5: detected capacity change from 0 to 256 [ 2278.701767][T30509] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2278.721408][T30509] usb 2-1: Product: syz [ 2278.725728][T32327] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 2278.738144][T30509] usb 2-1: Manufacturer: syz [ 2278.748547][T30509] usb 2-1: SerialNumber: syz [ 2278.756936][T32327] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 2278.768911][T30509] usb 2-1: config 0 descriptor?? [ 2278.787285][T32327] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 2278.911524][T32327] xt_bpf: check failed: parse error [ 2279.001323][T30509] usb 2-1: Found UVC 0.04 device syz (046d:08c3) [ 2279.010941][T30509] usb 2-1: No valid video chain found. [ 2279.062260][T32061] usbhid 10-1:0.0: can't add hid device: -71 [ 2279.068638][T32061] usbhid: probe of 10-1:0.0 failed with error -71 [ 2279.095957][T32061] usb 10-1: USB disconnect, device number 28 [ 2279.226127][T32309] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2279.234584][T32309] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2279.250426][T30509] usb 2-1: USB disconnect, device number 114 [ 2279.275374][T32335] FAULT_INJECTION: forcing a failure. [ 2279.275374][T32335] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2279.288637][T32335] CPU: 0 PID: 32335 Comm: syz.6.8370 Tainted: G W syzkaller #0 [ 2279.297635][T32335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2279.307743][T32335] Call Trace: [ 2279.311052][T32335] [ 2279.314003][T32335] __dump_stack+0x21/0x24 [ 2279.318365][T32335] dump_stack_lvl+0xee/0x150 [ 2279.322981][T32335] ? __cfi_dump_stack_lvl+0x8/0x8 [ 2279.328033][T32335] dump_stack+0x15/0x24 [ 2279.332211][T32335] should_fail_ex+0x3d4/0x520 [ 2279.337354][T32335] should_fail+0xb/0x10 [ 2279.341540][T32335] should_fail_usercopy+0x1a/0x20 [ 2279.346599][T32335] _copy_to_user+0x1e/0x90 [ 2279.351072][T32335] simple_read_from_buffer+0xe9/0x160 [ 2279.356494][T32335] proc_fail_nth_read+0x19a/0x210 [ 2279.361558][T32335] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 2279.367137][T32335] ? security_file_permission+0x94/0xb0 [ 2279.372720][T32335] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 2279.378301][T32335] vfs_read+0x26e/0x8c0 [ 2279.382504][T32335] ? __cfi_vfs_read+0x10/0x10 [ 2279.387230][T32335] ? __kasan_check_write+0x14/0x20 [ 2279.392368][T32335] ? mutex_lock+0x8d/0x1a0 [ 2279.396818][T32335] ? __cfi_mutex_lock+0x10/0x10 [ 2279.401709][T32335] ? __fdget_pos+0x2cd/0x380 [ 2279.406328][T32335] ? ksys_read+0x71/0x240 [ 2279.410697][T32335] ksys_read+0x140/0x240 [ 2279.414999][T32335] ? __cfi_ksys_read+0x10/0x10 [ 2279.419815][T32335] ? fput+0x154/0x1a0 [ 2279.423840][T32335] ? debug_smp_processor_id+0x17/0x20 [ 2279.429259][T32335] __x64_sys_read+0x7b/0x90 [ 2279.433838][T32335] x64_sys_call+0x2f/0x9a0 [ 2279.438298][T32335] do_syscall_64+0x4c/0xa0 [ 2279.442747][T32335] ? clear_bhb_loop+0x30/0x80 [ 2279.447483][T32335] ? clear_bhb_loop+0x30/0x80 [ 2279.452213][T32335] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2279.458150][T32335] RIP: 0033:0x7f603db8d9dc [ 2279.462597][T32335] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 2279.482334][T32335] RSP: 002b:00007f603ead9030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2279.490792][T32335] RAX: ffffffffffffffda RBX: 00007f603dde5fa0 RCX: 00007f603db8d9dc [ 2279.498973][T32335] RDX: 000000000000000f RSI: 00007f603ead90a0 RDI: 0000000000000004 [ 2279.507155][T32335] RBP: 00007f603ead9090 R08: 0000000000000000 R09: 0000000000000000 [ 2279.515159][T32335] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2279.523252][T32335] R13: 00007f603dde6038 R14: 00007f603dde5fa0 R15: 00007fffbeb51838 [ 2279.531305][T32335] [ 2279.559442][T32337] serio: Serial port ptm0 [ 2279.942836][T32345] loop5: detected capacity change from 0 to 4096 [ 2279.953369][T32346] loop6: detected capacity change from 0 to 512 [ 2279.960151][T32346] EXT4-fs: Ignoring removed nomblk_io_submit option [ 2279.960778][T32345] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 2279.976020][T32346] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 2279.995771][T32346] Quota error (device loop6): v2_read_file_info: Can't read info structure [ 2280.052778][T32346] EXT4-fs warning (device loop6): ext4_enable_quotas:7055: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 2280.087811][T32353] input: syz0 as /devices/virtual/input/input290 [ 2280.499360][T32346] EXT4-fs (loop6): mount failed [ 2280.760759][T32358] device syzkaller0 entered promiscuous mode [ 2280.773335][T32361] bridge: RTM_NEWNEIGH with invalid ether address [ 2280.791841][T32361] bridge: RTM_NEWNEIGH with invalid ether address [ 2280.874021][T28120] EXT4-fs (loop5): unmounting filesystem. [ 2281.393329][T32371] loop6: detected capacity change from 0 to 128 [ 2281.411545][T32371] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 2281.421428][T32371] ext4 filesystem being mounted at /116/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 2281.696585][T32375] loop5: detected capacity change from 0 to 512 [ 2281.703805][T32375] EXT4-fs: Mount option(s) incompatible with ext2 [ 2282.546375][T29999] EXT4-fs (loop6): unmounting filesystem. [ 2282.615719][T30509] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 2282.688783][T32386] netlink: 4 bytes leftover after parsing attributes in process `syz.9.8382'. [ 2282.700106][T32386] netlink: 12 bytes leftover after parsing attributes in process `syz.9.8382'. [ 2282.743623][T32386] netlink: 'syz.9.8382': attribute type 16 has an invalid length. [ 2282.751718][T32386] netlink: 'syz.9.8382': attribute type 17 has an invalid length. [ 2282.772662][T32386] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2282.780491][T32386] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2282.964032][T29739] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2282.979163][T29739] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 2282.989060][T29739] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2282.999144][T29739] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 2283.008924][T29739] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2283.068809][T29739] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2283.139653][T29739] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2283.213204][T29739] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2283.294713][T29739] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2283.449830][T30509] usb 2-1: device descriptor read/64, error -71 [ 2283.702877][ T28] audit: type=1400 audit(1761440451.491:2908): avc: denied { setopt } for pid=32392 comm="syz.6.8384" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 2283.753285][T30509] usb 2-1: device descriptor read/64, error -71 [ 2283.788262][T32403] device syzkaller0 entered promiscuous mode [ 2284.030127][T32417] input: syz0 as /devices/virtual/input/input291 [ 2285.723529][T32441] loop1: detected capacity change from 0 to 256 [ 2285.730396][T32441] FAT-fs (loop1): Unrecognized mount option "cÐ'ck=strict" or missing value [ 2287.246221][T32448] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8401'. [ 2287.292211][T32450] device syzkaller0 entered promiscuous mode [ 2287.380571][T32444] loop5: detected capacity change from 0 to 40427 [ 2287.391070][T32444] F2FS-fs (loop5): fault_injection options not supported [ 2287.405489][T32444] F2FS-fs (loop5): fault_type options not supported [ 2287.421832][T32444] F2FS-fs (loop5): invalid crc value [ 2287.433279][T32444] F2FS-fs (loop5): Found nat_bits in checkpoint [ 2287.479272][T32444] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 2287.493251][T32446] loop9: detected capacity change from 0 to 40427 [ 2287.500610][T32446] F2FS-fs (loop9): fault_injection options not supported [ 2287.507898][T32446] F2FS-fs (loop9): fault_type options not supported [ 2287.515497][T32446] F2FS-fs (loop9): invalid crc value [ 2287.524461][T32446] F2FS-fs (loop9): Found nat_bits in checkpoint [ 2287.570349][T32446] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 2289.584446][T28120] syz-executor: attempt to access beyond end of device [ 2289.584446][T28120] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 2289.603071][T25224] syz-executor: attempt to access beyond end of device [ 2289.603071][T25224] loop9: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 2289.721230][T32476] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 2289.741689][T32476] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8405'. [ 2289.750696][T32476] netlink: 24 bytes leftover after parsing attributes in process `syz.6.8405'. [ 2290.173793][T32481] loop9: detected capacity change from 0 to 128 [ 2290.186743][T32481] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 2290.206025][T32481] ext4 filesystem being mounted at /387/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 2291.115340][T25224] EXT4-fs (loop9): unmounting filesystem. [ 2291.130877][T32493] serio: Serial port ptm0 [ 2291.162948][T32498] loop1: detected capacity change from 0 to 256 [ 2291.174907][T32498] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011bf5, chksum : 0xcea91b8a, utbl_chksum : 0xe619d30d) [ 2291.187032][ T28] audit: type=1400 audit(1761440458.396:2909): avc: denied { create } for pid=32500 comm="syz.2.8416" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 2291.208539][T32498] exFAT-fs (loop1): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 2291.241151][T32503] netlink: 32 bytes leftover after parsing attributes in process `syz.6.8412'. [ 2291.256428][T32503] loop6: detected capacity change from 0 to 1024 [ 2291.271833][T32503] EXT4-fs (loop6): can't mount with both data=journal and delalloc [ 2291.361265][T32508] loop9: detected capacity change from 0 to 512 [ 2291.476997][ T357] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 2291.673126][ T357] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2291.686566][ T357] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 2291.707735][ T357] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 2291.723946][ T357] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2291.739400][ T357] usb 3-1: config 0 descriptor?? [ 2292.093957][T32513] loop1: detected capacity change from 0 to 1024 [ 2292.202965][ T357] kovaplus 0003:1E7D:2D50.0023: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.2-1/input0 [ 2292.235988][T32513] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 2292.246261][T32513] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 2292.261226][T32513] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 11 with max blocks 1 with error 28 [ 2292.273559][T32513] EXT4-fs (loop1): This should not happen!! Data will be lost [ 2292.273559][T32513] [ 2292.283366][T32513] EXT4-fs (loop1): Total free blocks count 0 [ 2292.289419][T32513] EXT4-fs (loop1): Free/Dirty block details [ 2292.295349][T32513] EXT4-fs (loop1): free_blocks=68451041280 [ 2292.301320][T32513] EXT4-fs (loop1): dirty_blocks=16 [ 2292.306459][T32513] EXT4-fs (loop1): Block reservation details [ 2292.312706][T32513] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 2292.320181][T32513] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8419'. [ 2292.329139][T32513] netlink: 'syz.1.8419': attribute type 3 has an invalid length. [ 2293.601708][T32521] netlink: 24 bytes leftover after parsing attributes in process `syz.5.8420'. [ 2294.562122][T29794] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 12 with error 28 [ 2294.603721][ T357] kovaplus 0003:1E7D:2D50.0023: couldn't init struct kovaplus_device [ 2294.612828][ T357] kovaplus 0003:1E7D:2D50.0023: couldn't install mouse [ 2294.704836][ T357] kovaplus: probe of 0003:1E7D:2D50.0023 failed with error -71 [ 2294.727857][ T357] usb 3-1: USB disconnect, device number 71 [ 2294.874779][T32530] input: syz0 as /devices/virtual/input/input292 [ 2295.776150][T32532] loop9: detected capacity change from 0 to 128 [ 2295.784877][T32532] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 2295.793656][T32532] ext4 filesystem being mounted at /391/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 2296.025276][T32529] xt_bpf: check failed: parse error [ 2296.814887][T25224] EXT4-fs (loop9): unmounting filesystem. [ 2297.938043][T32565] loop6: detected capacity change from 0 to 1024 [ 2297.955536][T32565] EXT4-fs: Ignoring removed i_version option [ 2297.962005][T32565] EXT4-fs (loop6): Test dummy encryption mode enabled [ 2298.002235][T32565] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 2298.015284][T32565] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2299.012211][T32565] bridge0: port 3(vlan2) entered blocking state [ 2299.018832][T32565] bridge0: port 3(vlan2) entered disabled state [ 2299.355419][T32566] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8432'. [ 2299.536068][T32579] loop5: detected capacity change from 0 to 4096 [ 2299.556103][T32579] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 2299.568345][ T28] audit: type=1400 audit(1761440466.141:2910): avc: denied { connect } for pid=32580 comm="syz.1.8436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 2299.588777][T29739] tipc: Subscription rejected, illegal request [ 2299.727297][T29999] EXT4-fs (loop6): unmounting filesystem. [ 2299.808627][T32591] loop1: detected capacity change from 0 to 128 [ 2299.832149][T32593] loop6: detected capacity change from 0 to 128 [ 2299.852440][T32591] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 2299.861147][T32591] ext4 filesystem being mounted at /420/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 2299.873520][T32593] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 2299.890382][T32593] ext4 filesystem being mounted at /128/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 2301.466173][T24115] EXT4-fs (loop1): unmounting filesystem. [ 2301.801738][T28120] EXT4-fs (loop5): unmounting filesystem. [ 2301.853025][T29999] EXT4-fs (loop6): unmounting filesystem. [ 2302.463569][T32608] loop1: detected capacity change from 0 to 40427 [ 2302.484382][T32608] F2FS-fs (loop1): Invalid log_blocksize (64), supports only 12 [ 2302.505888][T32608] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 2302.535157][T32608] F2FS-fs (loop1): invalid crc value [ 2302.575303][T32608] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 2302.728853][T32608] F2FS-fs (loop1): Start checkpoint disabled! [ 2302.863210][T32608] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 2302.870320][T32608] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 2303.066363][T32635] input: syz0 as /devices/virtual/input/input293 [ 2303.249764][T32637] netlink: 80 bytes leftover after parsing attributes in process `syz.1.8441'. [ 2307.446086][T32654] xt_socket: unknown flags 0x58 [ 2308.250199][T32656] loop5: detected capacity change from 0 to 4096 [ 2308.285917][T32656] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 2308.861964][ T28] audit: type=1400 audit(1761440474.717:2911): avc: denied { connect } for pid=32669 comm="syz.9.8456" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 2308.924608][T28120] EXT4-fs (loop5): unmounting filesystem. [ 2309.033077][T32682] loop6: detected capacity change from 0 to 4096 [ 2309.053257][T32682] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 2309.153222][T32688] loop9: detected capacity change from 0 to 128 [ 2309.162538][T32688] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 2309.171425][T32688] ext4 filesystem being mounted at /397/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 2309.189052][T32680] input: syz0 as /devices/virtual/input/input295 [ 2309.241049][T25224] EXT4-fs (loop9): unmounting filesystem. [ 2309.626986][T32696] input: syz0 as /devices/virtual/input/input296 [ 2310.078970][T29999] EXT4-fs (loop6): unmounting filesystem. [ 2310.124900][T32702] loop5: detected capacity change from 0 to 256 [ 2310.160725][T32702] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 2310.200757][T32702] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 2310.232141][T32702] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 2310.732117][T32702] xt_bpf: check failed: parse error [ 2310.829463][T32718] loop6: detected capacity change from 0 to 4096 [ 2310.841028][T32708] xt_bpf: check failed: parse error [ 2310.856133][T32718] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 2311.946486][T29999] EXT4-fs (loop6): unmounting filesystem. [ 2311.971404][T32729] IPv6: sit2: Disabled Multicast RS [ 2312.065277][T32732] 9pnet: p9_errstr2errno: server reported unknown error [ 2312.259793][T32734] loop9: detected capacity change from 0 to 40427 [ 2312.267027][T32734] F2FS-fs (loop9): Invalid log_blocksize (64), supports only 12 [ 2312.274838][T32734] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 2312.284132][T32734] F2FS-fs (loop9): invalid crc value [ 2312.290964][T32734] F2FS-fs (loop9): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 2312.325253][T32734] F2FS-fs (loop9): Start checkpoint disabled! [ 2312.332479][T32734] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0 [ 2312.339742][T32734] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e6 [ 2312.427553][T32731] netlink: 36 bytes leftover after parsing attributes in process `syz.2.8473'. [ 2312.438613][ T28] audit: type=1400 audit(1761440478.022:2912): avc: denied { read } for pid=32740 comm="syz.6.8472" path="socket:[136988]" dev="sockfs" ino=136988 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 2312.656327][T32749] netlink: 80 bytes leftover after parsing attributes in process `syz.9.8474'. [ 2313.144935][T32752] loop1: detected capacity change from 0 to 128 [ 2313.276144][T32752] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 2313.286411][T32752] ext4 filesystem being mounted at /426/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 2313.319701][T32752] input: syz0 as /devices/virtual/input/input298 [ 2313.610305][T32756] serio: Serial port ptm0 [ 2314.702874][T32767] netlink: 20 bytes leftover after parsing attributes in process `syz.5.8481'. [ 2314.968389][ T28] audit: type=1400 audit(1761440479.222:2913): avc: denied { read } for pid=32762 comm="syz.6.8482" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 2315.052292][ T302] loop9: detected capacity change from 0 to 256 [ 2315.066209][ T302] exFAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 2315.087506][T32759] xt_bpf: check failed: parse error [ 2315.093151][ T302] exFAT-fs (loop9): Medium has reported failures. Some data may be lost. [ 2315.115777][ T302] exFAT-fs (loop9): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 2315.218204][ T302] xt_bpf: check failed: parse error [ 2316.275776][T24115] EXT4-fs (loop1): unmounting filesystem. [ 2316.294810][ T314] loop5: detected capacity change from 0 to 128 [ 2316.308171][ T310] device syzkaller0 entered promiscuous mode [ 2316.308179][ T314] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 2316.308363][ T314] ext4 filesystem being mounted at /236/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 2316.335653][ T315] loop1: detected capacity change from 0 to 4096 [ 2316.344843][ T315] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 2317.266014][T24115] EXT4-fs (loop1): unmounting filesystem. [ 2317.296699][ T326] loop6: detected capacity change from 0 to 128 [ 2317.305099][ T326] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 2317.313843][ T326] ext4 filesystem being mounted at /140/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 2317.354583][ T329] 8021q: VLANs not supported on ip6gre0 [ 2317.438002][ T333] loop9: detected capacity change from 0 to 128 [ 2317.445380][ T334] loop1: detected capacity change from 0 to 128 [ 2317.457762][ T333] EXT4-fs: Ignoring removed nobh option [ 2317.471213][ T333] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 2317.480827][ T334] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 2317.489613][ T333] ext4 filesystem being mounted at /402/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 2318.554172][ T334] ext4 filesystem being mounted at /428/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 2318.683743][T29999] EXT4-fs (loop6): unmounting filesystem. [ 2319.709506][T28120] EXT4-fs (loop5): unmounting filesystem. [ 2319.725126][ T351] loop5: detected capacity change from 0 to 256 [ 2319.732280][ T351] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 2319.743136][ T351] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 2319.794669][ T40] usb 10-1: new high-speed USB device number 29 using dummy_hcd [ 2319.838389][ T351] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 2319.875398][T24115] EXT4-fs (loop1): unmounting filesystem. [ 2320.334020][ T40] usb 10-1: device descriptor read/64, error -71 [ 2320.416834][ T351] xt_bpf: check failed: parse error [ 2320.713979][T25224] EXT4-fs (loop9): unmounting filesystem. [ 2320.973182][ T40] usb 10-1: device descriptor read/64, error -71 [ 2321.006530][ T361] device syzkaller0 entered promiscuous mode [ 2323.831681][ T370] input: syz0 as /devices/virtual/input/input301 [ 2325.470672][ T28] audit: type=1400 audit(1761440490.031:2914): avc: denied { setopt } for pid=382 comm="syz.9.8505" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 2325.488017][ T386] loop9: detected capacity change from 0 to 128 [ 2325.515289][ T377] bridge0: port 1(bridge_slave_0) entered blocking state [ 2325.523433][ T386] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 2325.533452][ T386] ext4 filesystem being mounted at /405/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 2325.543880][ T377] bridge0: port 1(bridge_slave_0) entered disabled state [ 2325.551811][ T377] device bridge_slave_0 entered promiscuous mode [ 2325.568756][ T377] bridge0: port 2(bridge_slave_1) entered blocking state [ 2325.576008][ T377] bridge0: port 2(bridge_slave_1) entered disabled state [ 2325.583716][ T377] device bridge_slave_1 entered promiscuous mode [ 2327.166423][ T407] loop6: detected capacity change from 0 to 256 [ 2327.176387][ T407] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 2327.188292][ T407] exFAT-fs (loop6): Medium has reported failures. Some data may be lost. [ 2327.530814][T25224] EXT4-fs (loop9): unmounting filesystem. [ 2327.537451][ T409] overlayfs: failed to resolve './bus': -2 [ 2327.545231][T29786] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2327.554557][T29786] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2327.571150][ T409] loop5: detected capacity change from 0 to 2048 [ 2327.580198][ T407] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 2327.613409][T29786] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2327.622090][T29786] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2327.632482][T29786] bridge0: port 1(bridge_slave_0) entered blocking state [ 2327.639630][T29786] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2327.707606][T29786] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2327.716406][T29786] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2327.723978][ T409] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 2327.724817][T29786] bridge0: port 2(bridge_slave_1) entered blocking state [ 2327.733089][ T409] ext4 filesystem being mounted at /240/file0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2327.739952][T29786] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2327.740360][T29786] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2327.767844][ T407] xt_bpf: check failed: parse error [ 2327.774226][T29786] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2327.782432][T29786] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2327.814742][T29786] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2327.833971][T29786] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2327.841778][T29786] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2327.850290][T29786] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2327.867239][ T377] device veth0_vlan entered promiscuous mode [ 2327.884088][T29786] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2327.898093][T29786] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2327.925347][T29786] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2327.935452][ T422] loop6: detected capacity change from 0 to 512 [ 2327.942205][T29786] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2327.949930][ T422] EXT4-fs: Ignoring removed mblk_io_submit option [ 2327.956997][ T422] EXT4-fs: Ignoring removed bh option [ 2327.961514][ T416] loop9: detected capacity change from 0 to 40427 [ 2327.970833][ T377] device veth1_macvtap entered promiscuous mode [ 2327.977802][ T422] EXT4-fs (loop6): Test dummy encryption mode enabled [ 2327.983794][ T416] F2FS-fs (loop9): Invalid log_blocksize (64), supports only 12 [ 2327.986063][ T422] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 2328.002234][ T416] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 2328.012377][T29786] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2328.021379][ T416] F2FS-fs (loop9): invalid crc value [ 2328.023189][ T414] loop1: detected capacity change from 0 to 40427 [ 2328.028244][ T422] EXT4-fs (loop6): 1 truncate cleaned up [ 2328.034216][T29786] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2328.040437][ T416] F2FS-fs (loop9): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 2328.047348][ T414] F2FS-fs (loop1): Invalid log_blocksize (64), supports only 12 [ 2328.066218][T29786] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2328.066754][ T422] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 2328.082756][ T414] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 2328.096638][T29751] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2328.097492][ T414] F2FS-fs (loop1): invalid crc value [ 2328.105866][T28120] EXT4-fs (loop5): unmounting filesystem. [ 2328.116238][ T416] F2FS-fs (loop9): Start checkpoint disabled! [ 2328.116662][T29751] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2328.133247][ T416] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0 [ 2328.140651][ T416] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e6 [ 2328.149668][T29751] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2328.157876][ T414] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 2328.162656][T29751] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2328.201287][ T414] F2FS-fs (loop1): Start checkpoint disabled! [ 2328.260192][T29999] EXT4-fs (loop6): unmounting filesystem. [ 2328.267476][ T414] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 2328.274583][ T414] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 2328.330354][T29740] device bridge_slave_1 left promiscuous mode [ 2328.336710][T29740] bridge0: port 2(bridge_slave_1) entered disabled state [ 2328.350847][T29740] device bridge_slave_0 left promiscuous mode [ 2328.357202][T29740] bridge0: port 1(bridge_slave_0) entered disabled state [ 2328.517302][ T437] netlink: 80 bytes leftover after parsing attributes in process `syz.9.8510'. [ 2329.125389][ T439] netlink: 80 bytes leftover after parsing attributes in process `syz.1.8511'. [ 2334.568121][ T450] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8498'. [ 2334.603281][T29740] tipc: Left network mode [ 2334.611130][ T450] sch_fq: defrate 4294967295 ignored. [ 2334.701678][ T446] xt_bpf: check failed: parse error [ 2334.784691][ T457] loop6: detected capacity change from 0 to 128 [ 2334.942343][ T457] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 2334.952153][ T457] ext4 filesystem being mounted at /149/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 2335.032041][ T457] input: syz0 as /devices/virtual/input/input303 [ 2335.860644][ T463] loop1: detected capacity change from 0 to 128 [ 2335.869301][ T461] device syzkaller0 entered promiscuous mode [ 2335.957109][ T463] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 2335.965851][ T463] ext4 filesystem being mounted at /434/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 2337.658134][T29999] EXT4-fs (loop6): unmounting filesystem. [ 2337.990449][ T476] serio: Serial port ptm0 [ 2338.306395][ T481] loop6: detected capacity change from 0 to 256 [ 2338.313817][T24115] EXT4-fs (loop1): unmounting filesystem. [ 2338.335121][ T481] exfat: Unknown parameter '"' [ 2338.352959][ T483] loop1: detected capacity change from 0 to 512 [ 2338.359952][ T483] EXT4-fs (loop1): Invalid log block size: 100663297 [ 2338.458625][ T487] serio: Serial port ptm0 [ 2338.474775][ T485] loop9: detected capacity change from 0 to 4096 [ 2338.484049][ T485] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 2340.680807][ T503] input: syz0 as /devices/virtual/input/input304 [ 2341.224495][T25224] EXT4-fs (loop9): unmounting filesystem. [ 2341.243318][T29740] device bridge_slave_1 left promiscuous mode [ 2341.249714][T29740] bridge0: port 2(bridge_slave_1) entered disabled state [ 2342.036206][T29740] device bridge_slave_0 left promiscuous mode [ 2342.042422][T29740] bridge0: port 1(bridge_slave_0) entered disabled state [ 2342.099151][T29740] device veth1_macvtap left promiscuous mode [ 2342.110500][ T514] loop1: detected capacity change from 0 to 512 [ 2342.121604][ T514] EXT4-fs error (device loop1): ext4_orphan_get:1426: comm syz.1.8533: bad orphan inode 11 [ 2342.123615][T29740] device veth0_vlan left promiscuous mode [ 2342.137893][ T520] loop6: detected capacity change from 0 to 128 [ 2342.144407][ T514] ext4_test_bit(bit=10, block=4) = 1 [ 2342.146658][ T520] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 2342.149777][ T514] is_bad_inode(inode)=0 [ 2342.160483][ T520] ext4 filesystem being mounted at /154/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 2342.162511][ T514] NEXT_ORPHAN(inode)=2080374784 [ 2342.177915][ T514] max_ino=32 [ 2342.181146][ T514] i_nlink=0 [ 2342.184353][ T514] EXT4-fs (loop1): 1 truncate cleaned up [ 2342.190165][ T514] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 2342.654190][T24115] EXT4-fs (loop1): unmounting filesystem. [ 2342.869252][ T535] xt_bpf: check failed: parse error [ 2343.075109][T29999] EXT4-fs (loop6): unmounting filesystem. [ 2343.720257][ T546] loop9: detected capacity change from 0 to 128 [ 2343.793183][ T546] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 2343.994362][ T546] ext4 filesystem being mounted at /412/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 2344.394942][ T544] loop6: detected capacity change from 0 to 40427 [ 2344.402149][ T544] F2FS-fs (loop6): Invalid log_blocksize (64), supports only 12 [ 2344.409948][ T544] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 2344.427964][ T544] F2FS-fs (loop6): invalid crc value [ 2344.440722][ T544] F2FS-fs (loop6): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 2344.473763][ T544] F2FS-fs (loop6): Start checkpoint disabled! [ 2344.480966][ T544] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 2344.488508][ T544] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 2344.496162][T15677] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 2344.548379][ T567] incfs: Options parsing error. -22 [ 2344.561517][ T567] incfs: mount failed -22 [ 2344.583074][ T567] loop5: detected capacity change from 0 to 256 [ 2344.642311][ T567] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 2344.674705][ T567] exFAT-fs (loop5): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 2344.758203][ T569] netlink: 80 bytes leftover after parsing attributes in process `syz.6.8539'. [ 2344.882559][T15677] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2345.245669][ T573] loop1: detected capacity change from 0 to 256 [ 2345.255121][ T573] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 2345.315640][ T28] audit: type=1400 audit(1761440508.328:2915): avc: denied { write } for pid=570 comm="syz.1.8546" name="file2" dev="loop1" ino=1048982 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 2345.373276][T15677] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2345.391406][T15677] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2345.399785][T15677] usb 3-1: Product: syz [ 2345.400528][ T578] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8548'. [ 2345.404002][T15677] usb 3-1: Manufacturer: syz [ 2345.417611][T15677] usb 3-1: SerialNumber: syz [ 2345.422978][T15677] usb 3-1: config 0 descriptor?? [ 2345.459252][T15677] snd-usb-audio: probe of 3-1:0.0 failed with error -22 [ 2345.469928][T25224] EXT4-fs (loop9): unmounting filesystem. [ 2345.591678][ T587] loop9: detected capacity change from 0 to 128 [ 2345.600559][ T587] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 2345.609487][ T587] ext4 filesystem being mounted at /413/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 2345.700416][ T589] input: syz0 as /devices/virtual/input/input305 [ 2346.066327][T20435] usb 7-1: new full-speed USB device number 16 using dummy_hcd [ 2346.477747][T20435] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2346.536871][T25224] EXT4-fs (loop9): unmounting filesystem. [ 2346.547360][T20435] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 2346.580052][T20435] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 2346.711800][T15677] usb 3-1: USB disconnect, device number 72 [ 2346.725962][T20435] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 2348.598420][T20435] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2348.642596][T20435] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2348.654485][T20435] usb 7-1: Product: syz [ 2348.676925][T20435] usb 7-1: Manufacturer: syz [ 2348.682437][T20435] usb 7-1: SerialNumber: syz [ 2348.725008][ T610] loop6: detected capacity change from 0 to 512 [ 2348.760503][ T610] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 2348.814443][T20435] usb 7-1: can't set config #1, error -71 [ 2348.820941][T20435] usb 7-1: USB disconnect, device number 16 [ 2348.828004][ T610] ext4 filesystem being mounted at /157/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2348.892705][ T613] syz.1.8559[613] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2348.892788][ T613] syz.1.8559[613] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2349.147158][ T620] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1 sclass=netlink_route_socket pid=620 comm=syz.6.8558 [ 2349.774089][T29999] EXT4-fs (loop6): unmounting filesystem. [ 2350.890865][ T642] netlink: 80 bytes leftover after parsing attributes in process `syz.2.8562'. [ 2351.632903][ T640] loop6: detected capacity change from 0 to 512 [ 2351.639624][ T640] EXT4-fs: Ignoring removed nomblk_io_submit option [ 2351.646947][ T640] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 2351.673640][ T644] loop1: detected capacity change from 0 to 512 [ 2351.724995][ T644] ext4: Unknown parameter 'smackfsdef' [ 2351.745128][ T648] input: syz0 as /devices/virtual/input/input306 [ 2351.780014][ T640] Quota error (device loop6): v2_read_file_info: Can't read info structure [ 2351.789633][T15677] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 2351.806262][ T640] EXT4-fs warning (device loop6): ext4_enable_quotas:7055: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 2352.204940][ T640] EXT4-fs (loop6): mount failed [ 2354.181929][T15677] usb 6-1: Using ep0 maxpacket: 16 [ 2354.249220][T15677] usb 6-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 2354.259037][T15677] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2354.267525][T15677] usb 6-1: Product: syz [ 2354.271981][T15677] usb 6-1: Manufacturer: syz [ 2354.276840][T15677] usb 6-1: SerialNumber: syz [ 2354.400850][T15677] usb 6-1: config 0 descriptor?? [ 2354.414356][T15677] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 2354.422929][T15677] usb 6-1: Detected FT232H [ 2354.434115][ T658] netlink: 12 bytes leftover after parsing attributes in process `syz.9.8571'. [ 2354.789276][ T664] loop6: detected capacity change from 0 to 1024 [ 2354.797348][ T664] EXT4-fs (loop6): Test dummy encryption mode enabled [ 2354.798970][ T666] loop9: detected capacity change from 0 to 256 [ 2354.815901][ T664] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 2354.817386][ T666] exFAT-fs (loop9): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 2354.837242][ T666] exFAT-fs (loop9): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 2354.857123][ T669] loop1: detected capacity change from 0 to 512 [ 2354.873873][ T669] EXT4-fs (loop1): 1 orphan inode deleted [ 2354.879775][ T669] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 2354.889009][ T669] ext4 filesystem being mounted at /450/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 2354.899840][T29740] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 2354.912137][T29740] EXT4-fs error (device loop1): ext4_release_dquot:6839: comm kworker/u4:80: Failed to release dquot type 1 [ 2354.938546][T24115] EXT4-fs (loop1): unmounting filesystem. [ 2355.126655][T15677] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 2355.140891][ T676] input: syz0 as /devices/virtual/input/input307 [ 2355.162385][T15677] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 2355.169965][T15677] ftdi_sio 6-1:0.0: GPIO initialisation failed: -71 [ 2355.262028][T15677] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 2355.430457][ T682] loop5: detected capacity change from 0 to 256 [ 2355.443366][T15677] usb 6-1: USB disconnect, device number 32 [ 2355.488471][ T682] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 2355.502359][T15677] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 2355.555231][T15677] ftdi_sio 6-1:0.0: device disconnected [ 2355.570336][ T682] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 2355.710712][ T682] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 2356.035497][ T682] xt_bpf: check failed: parse error [ 2356.189472][T20435] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 2356.434668][ T28] audit: type=1400 audit(1761440518.630:2916): avc: denied { setattr } for pid=689 comm="syz.1.8581" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 2356.897978][T20435] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2356.921147][T20435] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2356.939351][T20435] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2357.009665][ T697] input: syz0 as /devices/virtual/input/input308 [ 2357.536004][ T28] audit: type=1400 audit(1761440519.626:2917): avc: denied { write } for pid=698 comm="syz.2.8584" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 2357.592833][ T28] audit: type=1400 audit(1761440519.636:2918): avc: denied { ioctl } for pid=698 comm="syz.2.8584" path="socket:[139754]" dev="sockfs" ino=139754 ioctlcmd=0xae46 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 2357.650190][ T687] loop5: detected capacity change from 0 to 40427 [ 2357.679882][ T701] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8585'. [ 2357.693184][ T687] F2FS-fs (loop5): fault_injection options not supported [ 2357.708383][ T687] F2FS-fs (loop5): fault_type options not supported [ 2357.722923][ T687] F2FS-fs (loop5): invalid crc value [ 2357.738656][ T687] F2FS-fs (loop5): Found nat_bits in checkpoint [ 2357.819185][ T687] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 2357.913098][T20435] usb 7-1: Product: syz [ 2357.917352][T20435] usb 7-1: Manufacturer: syz [ 2357.921970][T20435] usb 7-1: SerialNumber: syz [ 2357.981921][T20435] usb 7-1: config 0 descriptor?? [ 2357.992736][T20435] snd-usb-audio: probe of 7-1:0.0 failed with error -22 [ 2358.011561][ T711] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8588'. [ 2358.457335][T28120] syz-executor: attempt to access beyond end of device [ 2358.457335][T28120] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 2358.480879][T20435] usb 7-1: USB disconnect, device number 17 [ 2358.492846][T29999] EXT4-fs (loop6): unmounting filesystem. [ 2358.537216][ T718] loop6: detected capacity change from 0 to 256 [ 2358.558329][ T718] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 2358.589066][ T718] exFAT-fs (loop6): Medium has reported failures. Some data may be lost. [ 2358.637825][ T718] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 2359.135085][ T718] xt_bpf: check failed: parse error [ 2359.741583][ T725] loop1: detected capacity change from 0 to 512 [ 2359.768034][ T725] EXT4-fs: Ignoring removed nomblk_io_submit option [ 2359.784107][ T725] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 2359.883375][ T725] Quota error (device loop1): v2_read_file_info: Can't read info structure [ 2359.897811][ T725] EXT4-fs warning (device loop1): ext4_enable_quotas:7055: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 2359.924009][ T725] EXT4-fs (loop1): mount failed [ 2360.899012][ T741] input: syz0 as /devices/virtual/input/input309 [ 2362.909612][ T40] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 2363.194404][ T742] input: syz0 as /devices/virtual/input/input310 [ 2363.210798][ T743] input: syz0 as /devices/virtual/input/input311 [ 2363.941860][ T751] loop1: detected capacity change from 0 to 1024 [ 2363.951037][ T751] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e002c019, mo2=0002] [ 2363.959354][ T751] System zones: 0-1, 3-36 [ 2363.965250][ T751] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 2364.138065][ T760] loop5: detected capacity change from 0 to 256 [ 2364.243997][ T760] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 2364.310631][ T765] loop6: detected capacity change from 0 to 256 [ 2364.320490][ T765] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 2364.336896][ T765] exFAT-fs (loop6): Medium has reported failures. Some data may be lost. [ 2364.409328][ T40] usb 7-1: device not accepting address 18, error -71 [ 2364.415686][ T765] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 2364.523992][ T765] xt_bpf: check failed: parse error [ 2365.209868][T24115] EXT4-fs (loop1): unmounting filesystem. [ 2365.219645][ T771] loop5: detected capacity change from 0 to 4096 [ 2365.226320][ T771] EXT4-fs: Ignoring removed mblk_io_submit option [ 2365.233776][ T777] loop1: detected capacity change from 0 to 128 [ 2365.240287][ T771] EXT4-fs (loop5): Test dummy encryption mode enabled [ 2365.248588][ T777] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 2365.248797][ T771] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 2365.257469][ T777] ext4 filesystem being mounted at /457/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 2367.626232][T28120] EXT4-fs (loop5): unmounting filesystem. [ 2367.719899][T12327] usb 10-1: new full-speed USB device number 31 using dummy_hcd [ 2367.949237][T12327] usb 10-1: config index 0 descriptor too short (expected 65127, got 73) [ 2367.976796][T12327] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2368.082000][T12327] usb 10-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 2368.190583][T12327] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2368.291531][T12327] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 2368.411376][T24115] EXT4-fs (loop1): unmounting filesystem. [ 2368.443058][T12327] usb 10-1: SerialNumber: syz [ 2368.511780][T12327] usb 10-1: can't set config #1, error -71 [ 2368.908008][T12327] usb 10-1: USB disconnect, device number 31 [ 2369.070906][ T809] loop5: detected capacity change from 0 to 128 [ 2369.080308][ T809] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 2369.089252][ T809] ext4 filesystem being mounted at /259/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 2369.453234][ T40] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 2369.834178][ T818] input: syz0 as /devices/virtual/input/input312 [ 2369.864953][ T40] usb 7-1: Using ep0 maxpacket: 16 [ 2369.872457][ T40] usb 7-1: no configurations [ 2369.877305][ T40] usb 7-1: can't read configurations, error -22 [ 2369.884372][ T40] usb usb7-port1: attempt power cycle [ 2370.098273][T28120] EXT4-fs (loop5): unmounting filesystem. [ 2370.122699][ T824] loop9: detected capacity change from 0 to 128 [ 2370.144177][ T826] loop5: detected capacity change from 0 to 256 [ 2370.158505][ T824] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 2370.167708][ T826] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 2370.180245][ T824] ext4 filesystem being mounted at /424/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 2370.190786][ T826] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 2370.210547][ T826] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 2371.339094][ T826] xt_bpf: check failed: parse error [ 2371.377590][ T40] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 2371.410947][T25224] EXT4-fs (loop9): unmounting filesystem. [ 2371.425400][ T40] usb 7-1: Using ep0 maxpacket: 16 [ 2371.431737][ T40] usb 7-1: no configurations [ 2371.444437][ T833] loop5: detected capacity change from 0 to 128 [ 2371.455539][ T40] usb 7-1: can't read configurations, error -22 [ 2371.468896][ T833] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 2371.485798][ T833] ext4 filesystem being mounted at /261/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 2371.582741][ T840] serio: Serial port ptm0 [ 2371.685037][ T40] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 2371.729455][ T40] usb 7-1: Using ep0 maxpacket: 16 [ 2371.735658][ T40] usb 7-1: no configurations [ 2371.754227][ T40] usb 7-1: can't read configurations, error -22 [ 2371.815620][ T40] usb usb7-port1: unable to enumerate USB device [ 2372.101305][ T837] loop9: detected capacity change from 0 to 40427 [ 2372.108557][ T837] F2FS-fs (loop9): fault_injection options not supported [ 2372.115893][ T837] F2FS-fs (loop9): fault_type options not supported [ 2372.117221][ T848] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 2372.123511][ T837] F2FS-fs (loop9): invalid crc value [ 2372.138121][ T837] F2FS-fs (loop9): Found nat_bits in checkpoint [ 2372.178411][ T837] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 2373.272243][T28120] EXT4-fs (loop5): unmounting filesystem. [ 2373.345573][ T862] device syzkaller0 entered promiscuous mode [ 2373.463338][T25224] syz-executor: attempt to access beyond end of device [ 2373.463338][T25224] loop9: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 2373.507020][ T868] serio: Serial port ptm1 [ 2373.585724][ T871] loop5: detected capacity change from 0 to 256 [ 2373.599361][ T871] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 2373.619419][ T871] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 2373.649180][ T871] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 2374.122381][ T871] xt_bpf: check failed: parse error [ 2374.852799][ T879] loop9: detected capacity change from 0 to 128 [ 2374.882033][ T882] loop6: detected capacity change from 0 to 1024 [ 2374.888769][ T882] EXT4-fs: Ignoring removed orlov option [ 2374.895057][ T879] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 2374.914348][ T882] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 2374.925250][ T879] ext4 filesystem being mounted at /427/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 2374.925852][ T885] loop1: detected capacity change from 0 to 4096 [ 2375.018499][ T885] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 2375.026869][ T28] audit: type=1400 audit(1761440535.780:2919): avc: denied { setattr } for pid=881 comm="syz.6.8632" path="/167/bus/file0/file0" dev="loop6" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 2375.855753][T25224] EXT4-fs (loop9): unmounting filesystem. [ 2375.890222][T24115] EXT4-fs (loop1): unmounting filesystem. [ 2376.215426][T29999] EXT4-fs (loop6): unmounting filesystem. [ 2376.259652][ T904] loop9: detected capacity change from 0 to 128 [ 2376.277236][ T904] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 2376.343686][ T904] ext4 filesystem being mounted at /428/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 2376.494688][ T902] loop5: detected capacity change from 0 to 40427 [ 2376.545182][ T902] F2FS-fs (loop5): fault_injection options not supported [ 2376.554422][ T902] F2FS-fs (loop5): fault_type options not supported [ 2376.579775][ T902] F2FS-fs (loop5): invalid crc value [ 2376.625330][ T902] F2FS-fs (loop5): Found nat_bits in checkpoint [ 2376.718418][ T902] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 2376.748608][ T909] loop1: detected capacity change from 0 to 40427 [ 2376.827123][ T909] F2FS-fs (loop1): fault_injection options not supported [ 2376.835671][ T909] F2FS-fs (loop1): fault_type options not supported [ 2376.835802][ T920] xt_bpf: check failed: parse error [ 2376.859296][ T909] F2FS-fs (loop1): invalid crc value [ 2376.916189][ T909] F2FS-fs (loop1): Found nat_bits in checkpoint [ 2377.000159][ T909] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 2378.746763][T28120] syz-executor: attempt to access beyond end of device [ 2378.746763][T28120] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 2378.759683][T24115] syz-executor: attempt to access beyond end of device [ 2378.759683][T24115] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 2378.780766][T25224] EXT4-fs (loop9): unmounting filesystem. [ 2378.788336][ T934] serio: Serial port ptm0 [ 2378.806041][ T936] loop6: detected capacity change from 0 to 128 [ 2378.852938][ T936] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 2378.864488][ T947] tmpfs: Unknown parameter 'permit_directio' [ 2378.871155][ T936] ext4 filesystem being mounted at /169/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 2379.134456][ T961] loop9: detected capacity change from 0 to 256 [ 2379.250441][ T951] loop9: detected capacity change from 0 to 256 [ 2379.257198][ T951] exfat: Unknown parameter '>òî9¥Qÿ›´Óï½w6ŸÐ(ŽûûdÃy Ý¬?PZÛëÎóAr°?Ðþþ<½f5fîê™' [ 2379.745609][T29999] EXT4-fs (loop6): unmounting filesystem. [ 2379.811624][ T973] loop6: detected capacity change from 0 to 256 [ 2379.832026][ T973] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 2379.861334][ T973] exFAT-fs (loop6): Medium has reported failures. Some data may be lost. [ 2379.883400][ T973] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 2379.991623][ T973] xt_bpf: check failed: parse error [ 2380.047608][ T978] loop9: detected capacity change from 0 to 4096 [ 2380.124299][ T984] loop1: detected capacity change from 0 to 128 [ 2380.132457][ T978] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 2380.645540][ T984] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 2380.671994][ T984] ext4 filesystem being mounted at /466/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 2380.678288][ T975] loop5: detected capacity change from 0 to 40427 [ 2380.692510][ T975] F2FS-fs (loop5): fault_injection options not supported [ 2380.711906][ T975] F2FS-fs (loop5): fault_type options not supported [ 2380.826150][ T975] F2FS-fs (loop5): invalid crc value [ 2381.080055][T25224] EXT4-fs (loop9): unmounting filesystem. [ 2381.090761][ T975] F2FS-fs (loop5): Found nat_bits in checkpoint [ 2381.111058][ T995] loop6: detected capacity change from 0 to 1024 [ 2381.131188][ T995] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 2381.162509][ T975] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 2382.750548][T28120] syz-executor: attempt to access beyond end of device [ 2382.750548][T28120] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 2382.804024][ T1014] loop9: detected capacity change from 0 to 2048 [ 2382.860444][T29999] EXT4-fs (loop6): unmounting filesystem. [ 2382.867502][ T1014] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 2383.032977][ T1025] loop5: detected capacity change from 0 to 128 [ 2383.062004][ T1025] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 2383.071444][ T1025] ext4 filesystem being mounted at /270/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 2383.098274][T24115] EXT4-fs (loop1): unmounting filesystem. [ 2383.143142][ T1030] loop1: detected capacity change from 0 to 256 [ 2383.178996][ T1030] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 2383.210937][ T1030] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 2383.268656][ T1030] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 2383.729153][ T1030] xt_bpf: check failed: parse error [ 2384.246255][T28120] EXT4-fs (loop5): unmounting filesystem. [ 2384.275822][ T1037] loop1: detected capacity change from 0 to 512 [ 2384.404211][T32061] usb 10-1: new high-speed USB device number 32 using dummy_hcd [ 2384.433743][ T1050] serio: Serial port ptm0 [ 2385.529058][ T944] EXT4-fs error (device loop9): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 234: padding at end of block bitmap is not set [ 2385.551045][T29766] EXT4-fs (loop9): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 2385.578306][T29766] EXT4-fs (loop9): This should not happen!! Data will be lost [ 2385.578306][T29766] [ 2385.612046][T29766] EXT4-fs (loop9): Total free blocks count 0 [ 2385.638331][ T1058] loop5: detected capacity change from 0 to 128 [ 2385.755117][ T1058] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 2385.764977][ T1058] ext4 filesystem being mounted at /272/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 2385.836050][ T1058] input: syz0 as /devices/virtual/input/input313 [ 2385.863074][T29766] EXT4-fs (loop9): Free/Dirty block details [ 2385.941773][T29766] EXT4-fs (loop9): free_blocks=0 [ 2386.453384][T29766] EXT4-fs (loop9): dirty_blocks=7408 [ 2386.464552][T29766] EXT4-fs (loop9): Block reservation details [ 2386.479462][ T1064] loop1: detected capacity change from 0 to 256 [ 2386.488441][T29766] EXT4-fs (loop9): i_reserved_data_blocks=463 [ 2386.500791][ T1064] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011bf5, chksum : 0xcea91b8a, utbl_chksum : 0xe619d30d) [ 2386.545716][ T1064] exFAT-fs (loop1): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 2386.559232][ T1017] EXT4-fs (loop9): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 2386.609841][T28120] EXT4-fs (loop5): unmounting filesystem. [ 2386.635699][T32061] usb 10-1: Using ep0 maxpacket: 16 [ 2386.661490][ T1068] loop5: detected capacity change from 0 to 256 [ 2386.685479][ T1068] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 2386.711575][ T1068] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 2386.722998][T32061] usb 10-1: device descriptor read/all, error -71 [ 2386.741881][ T1068] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 2386.837829][ T1068] xt_bpf: check failed: parse error [ 2386.885644][ T1071] loop5: detected capacity change from 0 to 128 [ 2386.914980][ T1071] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 2386.921974][ T1054] loop6: detected capacity change from 0 to 40427 [ 2386.930802][ T1071] ext4 filesystem being mounted at /274/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 2386.966765][ T1054] F2FS-fs (loop6): fault_injection options not supported [ 2387.027079][ T1054] F2FS-fs (loop6): fault_type options not supported [ 2387.038851][ T1054] F2FS-fs (loop6): invalid crc value [ 2387.069820][ T1054] F2FS-fs (loop6): Found nat_bits in checkpoint [ 2387.110657][ T1054] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 2387.430187][ T1084] loop1: detected capacity change from 0 to 512 [ 2387.436995][ T1084] EXT4-fs: Ignoring removed nomblk_io_submit option [ 2387.444616][ T1084] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 2387.461434][ T1084] Quota error (device loop1): v2_read_file_info: Can't read info structure [ 2387.729837][ T1090] fuse: Unknown parameter '0x000000000000000a' [ 2387.737392][ T1090] FAULT_INJECTION: forcing a failure. [ 2387.737392][ T1090] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2387.750615][ T1090] CPU: 1 PID: 1090 Comm: syz.2.8681 Tainted: G W syzkaller #0 [ 2387.759496][ T1090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2387.769560][ T1090] Call Trace: [ 2387.772847][ T1090] [ 2387.775785][ T1090] __dump_stack+0x21/0x24 [ 2387.780125][ T1090] dump_stack_lvl+0xee/0x150 [ 2387.784828][ T1090] ? __cfi_dump_stack_lvl+0x8/0x8 [ 2387.789865][ T1090] ? _parse_integer+0x2a/0x40 [ 2387.794560][ T1090] dump_stack+0x15/0x24 [ 2387.798735][ T1090] should_fail_ex+0x3d4/0x520 [ 2387.803428][ T1090] should_fail+0xb/0x10 [ 2387.807603][ T1090] should_fail_usercopy+0x1a/0x20 [ 2387.812648][ T1090] _copy_from_user+0x1e/0xc0 [ 2387.817248][ T1090] ___sys_sendmsg+0x155/0x290 [ 2387.822025][ T1090] ? __sys_sendmsg+0x270/0x270 [ 2387.826800][ T1090] ? __kasan_check_write+0x14/0x20 [ 2387.831916][ T1090] ? proc_fail_nth_write+0x17a/0x1f0 [ 2387.837211][ T1090] ? vfs_write+0x9d6/0xca0 [ 2387.841651][ T1090] ? __fdget+0x19c/0x220 [ 2387.845901][ T1090] __x64_sys_sendmsg+0x1f0/0x2c0 [ 2387.850849][ T1090] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 2387.856320][ T1090] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 2387.862400][ T1090] x64_sys_call+0x171/0x9a0 [ 2387.866919][ T1090] do_syscall_64+0x4c/0xa0 [ 2387.871345][ T1090] ? clear_bhb_loop+0x30/0x80 [ 2387.876062][ T1090] ? clear_bhb_loop+0x30/0x80 [ 2387.880753][ T1090] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2387.886659][ T1090] RIP: 0033:0x7f56a218efc9 [ 2387.891081][ T1090] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2387.911131][ T1090] RSP: 002b:00007f56a30b7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2387.919560][ T1090] RAX: ffffffffffffffda RBX: 00007f56a23e6180 RCX: 00007f56a218efc9 [ 2387.927677][ T1090] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 000000000000000b [ 2387.935663][ T1090] RBP: 00007f56a30b7090 R08: 0000000000000000 R09: 0000000000000000 [ 2387.943647][ T1090] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2387.951631][ T1090] R13: 00007f56a23e6218 R14: 00007f56a23e6180 R15: 00007fffc9fb9ed8 [ 2387.959632][ T1090] [ 2388.152728][ T1084] EXT4-fs warning (device loop1): ext4_enable_quotas:7055: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 2388.174930][T29999] syz-executor: attempt to access beyond end of device [ 2388.174930][T29999] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 2388.197015][T28120] EXT4-fs (loop5): unmounting filesystem. [ 2388.264660][ T1084] EXT4-fs (loop1): mount failed [ 2388.380582][ T1094] serio: Serial port ptm0 [ 2388.388722][ T1096] FAULT_INJECTION: forcing a failure. [ 2388.388722][ T1096] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2388.401948][ T1096] CPU: 0 PID: 1096 Comm: syz.5.8682 Tainted: G W syzkaller #0 [ 2388.410847][ T1096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2388.420926][ T1096] Call Trace: [ 2388.424228][ T1096] [ 2388.427182][ T1096] __dump_stack+0x21/0x24 [ 2388.431533][ T1096] dump_stack_lvl+0xee/0x150 [ 2388.436152][ T1096] ? __cfi_dump_stack_lvl+0x8/0x8 [ 2388.441232][ T1096] dump_stack+0x15/0x24 [ 2388.445394][ T1096] should_fail_ex+0x3d4/0x520 [ 2388.450094][ T1096] should_fail+0xb/0x10 [ 2388.454260][ T1096] should_fail_usercopy+0x1a/0x20 [ 2388.459302][ T1096] _copy_from_user+0x1e/0xc0 [ 2388.463927][ T1096] iovec_from_user+0x1aa/0x2e0 [ 2388.468723][ T1096] ? _parse_integer+0x2a/0x40 [ 2388.473425][ T1096] __import_iovec+0x71/0x470 [ 2388.478028][ T1096] import_iovec+0x7c/0xb0 [ 2388.482368][ T1096] ___sys_sendmsg+0x1e4/0x290 [ 2388.487059][ T1096] ? __sys_sendmsg+0x270/0x270 [ 2388.491833][ T1096] ? __kasan_check_write+0x14/0x20 [ 2388.496950][ T1096] ? proc_fail_nth_write+0x17a/0x1f0 [ 2388.502245][ T1096] ? vfs_write+0x9d6/0xca0 [ 2388.506681][ T1096] ? __fdget+0x19c/0x220 [ 2388.510927][ T1096] __x64_sys_sendmsg+0x1f0/0x2c0 [ 2388.515880][ T1096] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 2388.521352][ T1096] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 2388.527467][ T1096] x64_sys_call+0x171/0x9a0 [ 2388.532000][ T1096] do_syscall_64+0x4c/0xa0 [ 2388.536422][ T1096] ? clear_bhb_loop+0x30/0x80 [ 2388.541105][ T1096] ? clear_bhb_loop+0x30/0x80 [ 2388.545791][ T1096] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2388.551694][ T1096] RIP: 0033:0x7faf8178efc9 [ 2388.556117][ T1096] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2388.575732][ T1096] RSP: 002b:00007faf826f9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2388.584158][ T1096] RAX: ffffffffffffffda RBX: 00007faf819e5fa0 RCX: 00007faf8178efc9 [ 2388.592137][ T1096] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 2388.600124][ T1096] RBP: 00007faf826f9090 R08: 0000000000000000 R09: 0000000000000000 [ 2388.608102][ T1096] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2388.616080][ T1096] R13: 00007faf819e6038 R14: 00007faf819e5fa0 R15: 00007ffe71e8a368 [ 2388.624064][ T1096] [ 2390.618073][ T1111] loop9: detected capacity change from 0 to 128 [ 2390.689886][ T1113] loop6: detected capacity change from 0 to 1024 [ 2390.696722][ T1113] EXT4-fs: Ignoring removed nobh option [ 2390.702395][ T1113] EXT4-fs: Ignoring removed bh option [ 2390.708185][ T1113] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 2392.289906][ T1120] input: syz0 as /devices/virtual/input/input314 [ 2394.208249][ T1122] loop1: detected capacity change from 0 to 128 [ 2394.595789][ T1113] EXT4-fs: failed to create workqueue [ 2394.613141][ T1111] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 2394.681724][ T1113] EXT4-fs (loop6): mount failed [ 2394.704315][ T1122] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 2394.713939][ T1122] ext4 filesystem being mounted at /473/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 2394.786471][ T1122] input: syz0 as /devices/virtual/input/input315 [ 2394.835560][ T1111] ext4 filesystem being mounted at /437/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 2395.261091][T25224] EXT4-fs (loop9): unmounting filesystem. [ 2395.316473][T24115] EXT4-fs (loop1): unmounting filesystem. [ 2395.442228][ T1137] loop1: detected capacity change from 0 to 4096 [ 2395.534455][ T1137] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 2395.894222][ T1139] loop9: detected capacity change from 0 to 40427 [ 2395.904770][ T1139] F2FS-fs (loop9): fault_injection options not supported [ 2395.927374][ T1139] F2FS-fs (loop9): fault_type options not supported [ 2395.938750][ T1139] F2FS-fs (loop9): invalid crc value [ 2396.093463][ T1139] F2FS-fs (loop9): Found nat_bits in checkpoint [ 2396.122506][ T1146] netlink: 48 bytes leftover after parsing attributes in process `syz.2.8697'. [ 2396.143671][ T1139] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 2396.261119][ T1156] serio: Serial port ptm0 [ 2396.286853][ T1158] loop5: detected capacity change from 0 to 128 [ 2396.294648][T24115] EXT4-fs (loop1): unmounting filesystem. [ 2396.513360][ T1158] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 2396.590356][ T1158] ext4 filesystem being mounted at /279/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 2396.601151][ T1165] loop1: detected capacity change from 0 to 128 [ 2396.612883][ T1165] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 2396.622604][ T1165] ext4 filesystem being mounted at /475/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 2396.665981][T25224] syz-executor: attempt to access beyond end of device [ 2396.665981][T25224] loop9: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 2396.917311][ T1173] input: syz0 as /devices/virtual/input/input316 [ 2398.079347][ T1177] loop9: detected capacity change from 0 to 128 [ 2398.094056][ T1177] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 2398.101061][ T1171] loop6: detected capacity change from 0 to 40427 [ 2398.104218][ T1177] ext4 filesystem being mounted at /439/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 2398.124571][ T1171] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 2398.134724][ T1171] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 2398.163821][ T1171] F2FS-fs (loop6): invalid crc value [ 2398.196743][ T1171] F2FS-fs (loop6): Found nat_bits in checkpoint [ 2398.390808][T28580] usb 3-1: new full-speed USB device number 73 using dummy_hcd [ 2398.574707][T28580] usb 3-1: device descriptor read/64, error -71 [ 2398.581987][ T1171] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 2398.592192][ T1171] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 2398.878033][T28580] usb 3-1: device descriptor read/64, error -71 [ 2399.053549][T25224] EXT4-fs (loop9): unmounting filesystem. [ 2399.142079][T28120] EXT4-fs (loop5): unmounting filesystem. [ 2399.167676][T24115] EXT4-fs (loop1): unmounting filesystem. [ 2399.216679][ T1200] loop6: detected capacity change from 0 to 128 [ 2399.225582][ T1200] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 2399.234286][ T1200] ext4 filesystem being mounted at /181/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 2399.256534][T28580] usb 3-1: new full-speed USB device number 74 using dummy_hcd [ 2399.425051][ T1207] input: syz0 as /devices/virtual/input/input317 [ 2401.540159][T29999] EXT4-fs (loop6): unmounting filesystem. [ 2401.581078][T28580] usb 3-1: device descriptor read/64, error -71 [ 2401.744551][ T1223] loop1: detected capacity change from 0 to 512 [ 2401.745474][ T1202] input: syz0 as /devices/virtual/input/input318 [ 2401.760142][ T1223] EXT4-fs: Ignoring removed nomblk_io_submit option [ 2401.767462][ T1223] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 2401.842982][ T1224] input: syz0 as /devices/virtual/input/input319 [ 2402.123640][ T1223] Quota error (device loop1): v2_read_file_info: Can't read info structure [ 2402.166210][ T1223] EXT4-fs warning (device loop1): ext4_enable_quotas:7055: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 2402.930375][ T1223] EXT4-fs (loop1): mount failed [ 2403.123698][ T1228] input: syz0 as /devices/virtual/input/input320 [ 2403.982862][ T1230] device syzkaller0 entered promiscuous mode [ 2404.219547][ T1234] xt_bpf: check failed: parse error [ 2405.088577][ T1242] loop5: detected capacity change from 0 to 128 [ 2405.881018][ T1245] input: syz0 as /devices/virtual/input/input321 [ 2405.979047][ T1242] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 2406.001434][ T1242] ext4 filesystem being mounted at /283/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 2407.359919][ T28] audit: type=1326 audit(1761440565.630:2920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1250 comm="syz.1.8722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78b138efc9 code=0x7ffc0000 [ 2407.421065][ T28] audit: type=1326 audit(1761440565.667:2921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1250 comm="syz.1.8722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78b138efc9 code=0x7ffc0000 [ 2407.493346][ T28] audit: type=1326 audit(1761440565.667:2922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1250 comm="syz.1.8722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78b138efc9 code=0x7ffc0000 [ 2407.531795][ T28] audit: type=1326 audit(1761440565.667:2923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1250 comm="syz.1.8722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78b138efc9 code=0x7ffc0000 [ 2407.536613][T28120] EXT4-fs (loop5): unmounting filesystem. [ 2407.555707][ T28] audit: type=1326 audit(1761440565.667:2924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1250 comm="syz.1.8722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f78b138efc9 code=0x7ffc0000 [ 2407.584955][ T28] audit: type=1326 audit(1761440565.667:2925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1250 comm="syz.1.8722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78b138efc9 code=0x7ffc0000 [ 2407.608843][ T28] audit: type=1326 audit(1761440565.667:2926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1250 comm="syz.1.8722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78b138efc9 code=0x7ffc0000 [ 2407.632561][ T28] audit: type=1326 audit(1761440565.667:2927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1250 comm="syz.1.8722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78b138efc9 code=0x7ffc0000 [ 2407.656258][ T28] audit: type=1326 audit(1761440565.667:2928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1250 comm="syz.1.8722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78b138efc9 code=0x7ffc0000 [ 2407.686803][ T28] audit: type=1326 audit(1761440565.667:2929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1250 comm="syz.1.8722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f78b138efc9 code=0x7ffc0000 [ 2407.711233][ T28] audit: type=1326 audit(1761440565.667:2930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1250 comm="syz.1.8722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78b138efc9 code=0x7ffc0000 [ 2407.974436][ T1259] loop5: detected capacity change from 0 to 1024 [ 2408.037115][ T1259] EXT4-fs: Ignoring removed i_version option [ 2408.066245][ T28] audit: type=1326 audit(1761440565.667:2931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1250 comm="syz.1.8722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78b138efc9 code=0x7ffc0000 [ 2408.095356][ T28] audit: type=1326 audit(1761440565.667:2932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1250 comm="syz.1.8722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78b138efc9 code=0x7ffc0000 [ 2408.119865][ T1259] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 2408.142926][ T28] audit: type=1326 audit(1761440565.667:2933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1250 comm="syz.1.8722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78b138efc9 code=0x7ffc0000 [ 2408.232017][ T1264] netlink: 52 bytes leftover after parsing attributes in process `syz.1.8722'. [ 2408.704690][ T1271] loop9: detected capacity change from 0 to 256 [ 2408.715938][ T1271] exFAT-fs (loop9): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 2408.754819][ T1271] netlink: 4 bytes leftover after parsing attributes in process `syz.9.8726'. [ 2408.768382][T28120] EXT4-fs (loop5): unmounting filesystem. [ 2408.870973][ T1278] loop9: detected capacity change from 0 to 128 [ 2408.899645][ T1278] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 2408.919979][ T1278] ext4 filesystem being mounted at /443/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 2409.520538][ T1293] loop1: detected capacity change from 0 to 128 [ 2409.556357][ T1293] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 2409.566020][ T1293] ext4 filesystem being mounted at /482/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 2409.597898][ T1293] input: syz0 as /devices/virtual/input/input323 [ 2410.391459][T25224] EXT4-fs (loop9): unmounting filesystem. [ 2411.010004][T24115] EXT4-fs (loop1): unmounting filesystem. [ 2413.199441][T32061] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 2413.563866][ T1330] FAULT_INJECTION: forcing a failure. [ 2413.563866][ T1330] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2413.579541][ T1330] CPU: 0 PID: 1330 Comm: syz.9.8740 Tainted: G W syzkaller #0 [ 2413.588460][ T1330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2413.598532][ T1330] Call Trace: [ 2413.601848][ T1330] [ 2413.604808][ T1330] __dump_stack+0x21/0x24 [ 2413.609176][ T1330] dump_stack_lvl+0xee/0x150 [ 2413.610064][ T1335] 9pnet: p9_errstr2errno: server reported unknown error õ1 g;-‡~ W [ 2413.613803][ T1330] ? __cfi_dump_stack_lvl+0x8/0x8 [ 2413.613836][ T1330] ? ioctl_has_perm+0x3e8/0x4c0 [ 2413.613864][ T1330] dump_stack+0x15/0x24 [ 2413.635988][ T1330] should_fail_ex+0x3d4/0x520 [ 2413.640726][ T1330] ? __cfi_kvm_vfio_set_attr+0x10/0x10 [ 2413.646243][ T1330] should_fail+0xb/0x10 [ 2413.650446][ T1330] should_fail_usercopy+0x1a/0x20 [ 2413.655518][ T1330] _copy_from_user+0x1e/0xc0 [ 2413.660148][ T1330] kvm_device_ioctl+0x251/0x450 [ 2413.665045][ T1330] ? __cfi_kvm_device_ioctl+0x10/0x10 [ 2413.670454][ T1330] ? mutex_unlock+0x89/0x220 [ 2413.675088][ T1330] ? __cfi_mutex_unlock+0x10/0x10 [ 2413.680247][ T1330] ? __fget_files+0x2d5/0x330 [ 2413.684963][ T1330] ? security_file_ioctl+0x95/0xc0 [ 2413.690113][ T1330] ? __cfi_kvm_device_ioctl+0x10/0x10 [ 2413.695519][ T1330] __se_sys_ioctl+0x12f/0x1b0 [ 2413.700205][ T1330] __x64_sys_ioctl+0x7b/0x90 [ 2413.704808][ T1330] x64_sys_call+0x58b/0x9a0 [ 2413.709377][ T1330] do_syscall_64+0x4c/0xa0 [ 2413.713842][ T1330] ? clear_bhb_loop+0x30/0x80 [ 2413.718537][ T1330] ? clear_bhb_loop+0x30/0x80 [ 2413.723232][ T1330] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2413.729145][ T1330] RIP: 0033:0x7f611cb8efc9 [ 2413.733569][ T1330] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2413.754658][ T1330] RSP: 002b:00007f611dacf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2413.763166][ T1330] RAX: ffffffffffffffda RBX: 00007f611cde6180 RCX: 00007f611cb8efc9 [ 2413.771146][ T1330] RDX: 0000200000000480 RSI: 000000004018aee1 RDI: 000000000000000a [ 2413.779124][ T1330] RBP: 00007f611dacf090 R08: 0000000000000000 R09: 0000000000000000 [ 2413.787102][ T1330] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2413.795080][ T1330] R13: 00007f611cde6218 R14: 00007f611cde6180 R15: 00007ffe7b555e68 [ 2413.803064][ T1330] [ 2414.013984][T32061] usb 7-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2414.018583][ T1342] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 2414.028075][T32061] usb 7-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 2414.098494][T32061] usb 7-1: config 0 interface 0 has no altsetting 0 [ 2414.118744][T32061] usb 7-1: New USB device found, idVendor=06cb, idProduct=73f4, bcdDevice= 0.00 [ 2414.143100][T32061] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2414.162202][T32061] usb 7-1: config 0 descriptor?? [ 2414.254383][ T1348] loop1: detected capacity change from 0 to 128 [ 2414.288598][ T1348] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 2414.321677][ T1348] ext4 filesystem being mounted at /485/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 2414.435383][T28580] usb 10-1: new high-speed USB device number 34 using dummy_hcd [ 2414.529563][ T1353] loop5: detected capacity change from 0 to 256 [ 2414.536847][ T1353] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 2414.547625][ T1353] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 2414.559213][T24115] EXT4-fs (loop1): unmounting filesystem. [ 2414.561288][ T1353] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 2414.604697][T32061] hid (null): report_id 56383 is invalid [ 2414.623463][T32061] itetech 0003:06CB:73F4.0024: report_id 56383 is invalid [ 2414.641729][T32061] itetech 0003:06CB:73F4.0024: item 0 2 1 8 parsing failed [ 2414.658123][ T1353] xt_bpf: check failed: parse error [ 2414.706296][T32061] itetech: probe of 0003:06CB:73F4.0024 failed with error -22 [ 2414.727101][T28580] usb 10-1: Using ep0 maxpacket: 8 [ 2414.736149][T28580] usb 10-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 2414.745171][T28580] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2414.790903][ T1363] input: syz0 as /devices/virtual/input/input324 [ 2414.874987][T28580] usb 10-1: New USB device found, idVendor=05a9, idProduct=2640, bcdDevice=55.12 [ 2414.884342][T28580] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2414.895063][T28580] usb 10-1: config 0 descriptor?? [ 2414.901821][T28580] usb 10-1: Found UVC 0.00 device (05a9:2640) [ 2414.909010][T28580] usb 10-1: No valid video chain found. [ 2414.967844][ T1369] input: syz0 as /devices/virtual/input/input325 [ 2415.073301][T28580] usb 7-1: USB disconnect, device number 22 [ 2415.217398][ T294] usb 10-1: USB disconnect, device number 34 [ 2415.372671][ T1376] netlink: 32 bytes leftover after parsing attributes in process `syz.6.8755'. [ 2415.384043][ T1376] overlayfs: unrecognized mount option "verity=require" or missing value [ 2415.393757][ T1376] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=27 sclass=netlink_route_socket pid=1376 comm=syz.6.8755 [ 2416.054879][ T1389] FAULT_INJECTION: forcing a failure. [ 2416.054879][ T1389] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2416.068073][ T1389] CPU: 1 PID: 1389 Comm: syz.5.8758 Tainted: G W syzkaller #0 [ 2416.076950][ T1389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2416.087032][ T1389] Call Trace: [ 2416.090338][ T1389] [ 2416.093280][ T1389] __dump_stack+0x21/0x24 [ 2416.097633][ T1389] dump_stack_lvl+0xee/0x150 [ 2416.102244][ T1389] ? __cfi_dump_stack_lvl+0x8/0x8 [ 2416.107290][ T1389] dump_stack+0x15/0x24 [ 2416.111592][ T1389] should_fail_ex+0x3d4/0x520 [ 2416.116305][ T1389] should_fail+0xb/0x10 [ 2416.120571][ T1389] should_fail_usercopy+0x1a/0x20 [ 2416.125622][ T1389] _copy_from_user+0x1e/0xc0 [ 2416.130237][ T1389] kvm_vm_ioctl+0x2b7/0xa80 [ 2416.134768][ T1389] ? __cfi_kvm_vm_ioctl+0x10/0x10 [ 2416.139821][ T1389] ? __kasan_check_write+0x14/0x20 [ 2416.144952][ T1389] ? _raw_spin_lock+0x8e/0xe0 [ 2416.149655][ T1389] ? __cfi__raw_spin_lock+0x10/0x10 [ 2416.154872][ T1389] ? memcpy+0x56/0x70 [ 2416.158872][ T1389] ? ioctl_has_perm+0x3e8/0x4c0 [ 2416.163749][ T1389] ? has_cap_mac_admin+0x330/0x330 [ 2416.168906][ T1389] ? rcu_read_unlock_special+0xab/0x480 [ 2416.173146][T30509] usb 7-1: new full-speed USB device number 23 using dummy_hcd [ 2416.174528][ T1389] ? raw_irqentry_exit_cond_resched+0x29/0x30 [ 2416.188167][ T1389] ? selinux_file_ioctl+0x377/0x480 [ 2416.193405][ T1389] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 2416.198979][ T1389] ? __rcu_read_unlock+0x5e/0xa0 [ 2416.203942][ T1389] ? __fget_files+0x2d5/0x330 [ 2416.208648][ T1389] ? security_file_ioctl+0x95/0xc0 [ 2416.213786][ T1389] ? __cfi_kvm_vm_ioctl+0x10/0x10 [ 2416.218844][ T1389] __se_sys_ioctl+0x12f/0x1b0 [ 2416.223531][ T1389] __x64_sys_ioctl+0x7b/0x90 [ 2416.228126][ T1389] x64_sys_call+0x58b/0x9a0 [ 2416.232645][ T1389] do_syscall_64+0x4c/0xa0 [ 2416.237065][ T1389] ? clear_bhb_loop+0x30/0x80 [ 2416.241764][ T1389] ? clear_bhb_loop+0x30/0x80 [ 2416.246547][ T1389] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2416.252453][ T1389] RIP: 0033:0x7faf8178efc9 [ 2416.256881][ T1389] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2416.276506][ T1389] RSP: 002b:00007faf826b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2416.285044][ T1389] RAX: ffffffffffffffda RBX: 00007faf819e6180 RCX: 00007faf8178efc9 [ 2416.293028][ T1389] RDX: 0000200000000100 RSI: 00000000c00caee0 RDI: 0000000000000004 [ 2416.301048][ T1389] RBP: 00007faf826b7090 R08: 0000000000000000 R09: 0000000000000000 [ 2416.309038][ T1389] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2416.317032][ T1389] R13: 00007faf819e6218 R14: 00007faf819e6180 R15: 00007ffe71e8a368 [ 2416.325042][ T1389] [ 2417.137066][ T1396] input: syz0 as /devices/virtual/input/input326 [ 2417.871995][ T1400] xt_bpf: check failed: parse error [ 2418.137439][ T1408] input: syz0 as /devices/virtual/input/input327 [ 2419.551935][ T1423] input: syz0 as /devices/virtual/input/input328 [ 2419.563206][ T28] kauditd_printk_skb: 141 callbacks suppressed [ 2419.563237][ T28] audit: type=1400 audit(1761440576.901:3075): avc: denied { associate } for pid=1426 comm="syz.9.8768" name="cgroup.freeze" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 2419.593448][ T1425] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 2419.611138][ T28] audit: type=1400 audit(1761440576.947:3076): avc: denied { write } for pid=1429 comm="syz.2.8769" name="usbmon7" dev="devtmpfs" ino=180 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 2419.811470][ T1438] device syzkaller0 entered promiscuous mode [ 2419.865508][ T28] audit: type=1400 audit(1761440577.187:3077): avc: denied { getopt } for pid=1440 comm="syz.2.8772" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 2419.895641][T32061] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 2419.903969][ T1443] 9pnet_fd: Insufficient options for proto=fd [ 2420.096123][ T1447] input: syz0 as /devices/virtual/input/input329 [ 2420.987195][T32061] usb 2-1: device descriptor read/64, error -71 [ 2421.823157][ T1462] input: syz0 as /devices/virtual/input/input330 [ 2422.755297][T32061] usb 2-1: device descriptor read/64, error -71 [ 2423.317248][ T1478] device syzkaller0 entered promiscuous mode [ 2423.446985][ T1483] loop6: detected capacity change from 0 to 512 [ 2423.456422][ T1483] EXT4-fs error (device loop6): ext4_get_branch:178: inode #13: block 33619980: comm syz.6.8785: invalid block [ 2423.468884][ T1483] EXT4-fs (loop6): Remounting filesystem read-only [ 2423.476116][ T1483] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:477: comm syz.6.8785: Invalid block bitmap block 0 in block_group 0 [ 2423.493434][ T1483] EXT4-fs (loop6): Remounting filesystem read-only [ 2423.503987][ T1483] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6165: Corrupt filesystem [ 2423.525010][ T1483] EXT4-fs (loop6): Remounting filesystem read-only [ 2423.535120][ T1483] EXT4-fs error (device loop6): ext4_clear_blocks:883: inode #13: comm syz.6.8785: attempt to clear invalid blocks 983261 len 1 [ 2423.553786][ T1486] loop5: detected capacity change from 0 to 256 [ 2423.561544][ T1486] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 2423.572342][ T1486] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 2423.583616][ T1483] EXT4-fs (loop6): Remounting filesystem read-only [ 2423.601600][ T1486] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 2423.939561][ T28] audit: type=1400 audit(1761440580.703:3078): avc: denied { watch } for pid=1479 comm="syz.5.8784" path="/297/file0/file1" dev="loop5" ino=1048994 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 2423.969678][ T1483] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #13: comm syz.6.8785: invalid indirect mapped block 2683928664 (level 0) [ 2424.606007][ T1483] EXT4-fs (loop6): Remounting filesystem read-only [ 2424.615226][ T1483] EXT4-fs error (device loop6): __ext4_get_inode_loc:4509: comm syz.6.8785: Invalid inode table block 0 in block_group 0 [ 2424.628182][ T1483] EXT4-fs (loop6): Remounting filesystem read-only [ 2424.634944][ T1483] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5917: Corrupt filesystem [ 2424.644640][ T1483] EXT4-fs (loop6): Remounting filesystem read-only [ 2424.651253][ T1483] EXT4-fs error (device loop6) in ext4_orphan_del:305: Corrupt filesystem [ 2424.660873][ T1483] EXT4-fs (loop6): Remounting filesystem read-only [ 2424.667497][ T1483] EXT4-fs error (device loop6): __ext4_get_inode_loc:4509: comm syz.6.8785: Invalid inode table block 0 in block_group 0 [ 2424.680443][ T1483] EXT4-fs (loop6): Remounting filesystem read-only [ 2424.686995][ T1483] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5917: Corrupt filesystem [ 2424.696680][ T1483] EXT4-fs (loop6): Remounting filesystem read-only [ 2424.703204][ T1483] EXT4-fs error (device loop6): ext4_truncate:4314: inode #13: comm syz.6.8785: mark_inode_dirty error [ 2424.714704][ T1483] EXT4-fs (loop6): Remounting filesystem read-only [ 2424.722297][ T1491] input: syz0 as /devices/virtual/input/input331 [ 2424.761803][ T1483] EXT4-fs error (device loop6) in ext4_process_orphan:347: Corrupt filesystem [ 2424.771065][ T1483] EXT4-fs (loop6): Remounting filesystem read-only [ 2424.777761][ T1483] EXT4-fs error (device loop6): __ext4_get_inode_loc:4509: comm syz.6.8785: Invalid inode table block 0 in block_group 0 [ 2424.790765][ T1483] EXT4-fs (loop6): Remounting filesystem read-only [ 2424.797540][ T1483] EXT4-fs (loop6): 1 truncate cleaned up [ 2424.807853][ T1483] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 2424.852281][ T1499] loop9: detected capacity change from 0 to 128 [ 2426.060533][ T1501] input: syz0 as /devices/virtual/input/input332 [ 2426.062786][ T1483] EXT4-fs error (device loop6): __ext4_get_inode_loc:4509: comm syz.6.8785: Invalid inode table block 0 in block_group 0 [ 2426.435820][ T1483] EXT4-fs (loop6): Remounting filesystem read-only [ 2426.493062][ T28] audit: type=1400 audit(1761440583.297:3079): avc: denied { nlmsg_write } for pid=1482 comm="syz.6.8785" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 2426.516369][ T1499] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 2426.534239][ T1499] ext4 filesystem being mounted at /453/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 2426.644418][T29999] EXT4-fs (loop6): unmounting filesystem. [ 2426.686150][ T1497] xt_bpf: check failed: parse error [ 2427.003548][ T1525] loop6: detected capacity change from 0 to 128 [ 2429.809283][ T1530] device bridge0 entered promiscuous mode [ 2429.815289][ T1530] device macsec1 entered promiscuous mode [ 2429.825270][ T1530] bridge0: port 3(macsec1) entered blocking state [ 2429.831817][ T1530] bridge0: port 3(macsec1) entered disabled state [ 2430.052064][ T1530] device bridge0 left promiscuous mode [ 2430.065509][T29766] Bluetooth: hci0: Frame reassembly failed (-84) [ 2430.072006][ T45] Bluetooth: hci0: Malformed Event: 0x02 [ 2430.086823][ T1525] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 2430.095580][ T1525] ext4 filesystem being mounted at /196/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 2430.133935][ T28] audit: type=1326 audit(1761440586.666:3080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1533 comm="syz.5.8798" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7faf8178efc9 code=0x0 [ 2430.158423][T25224] EXT4-fs (loop9): unmounting filesystem. [ 2430.165865][ T1522] input: syz0 as /devices/virtual/input/input333 [ 2430.320257][ T1547] loop9: detected capacity change from 0 to 1024 [ 2430.327073][ T1547] EXT4-fs: Ignoring removed i_version option [ 2430.369527][ T1547] EXT4-fs (loop9): Test dummy encryption mode enabled [ 2430.377723][T29999] EXT4-fs (loop6): unmounting filesystem. [ 2430.386308][ T1547] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 2430.396274][ T1551] netlink: 48 bytes leftover after parsing attributes in process `syz.6.8803'. [ 2430.408619][ T1551] device bridge0 entered promiscuous mode [ 2430.414430][ T1551] device macsec2 entered promiscuous mode [ 2430.420964][ T1551] bridge0: port 3(macsec2) entered blocking state [ 2431.300074][ T1551] bridge0: port 3(macsec2) entered disabled state [ 2431.354241][ T1551] device bridge0 left promiscuous mode [ 2431.431425][T25224] EXT4-fs (loop9): unmounting filesystem. [ 2431.438068][ T28] audit: type=1400 audit(1761440587.866:3081): avc: denied { load_policy } for pid=1550 comm="syz.6.8803" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 2431.448238][ T1558] SELinux: failed to load policy [ 2431.561835][ T1572] loop6: detected capacity change from 0 to 4096 [ 2431.579178][ T1572] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 2431.779920][ T1577] input: syz0 as /devices/virtual/input/input335 [ 2432.267958][T22535] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 2432.491145][T29999] EXT4-fs (loop6): unmounting filesystem. [ 2432.511338][ T1580] device syzkaller0 left promiscuous mode [ 2432.537288][ T1580] tipc: Enabled bearer , priority 0 [ 2433.562047][ T1586] xt_bpf: check failed: parse error [ 2433.671879][ T1603] loop6: detected capacity change from 0 to 1024 [ 2433.678813][ T1603] EXT4-fs: Ignoring removed nobh option [ 2433.687066][ T1603] EXT4-fs error (device loop6): ext4_ext_check_inode:520: inode #11: comm syz.6.8817: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 2433.753374][ T1603] EXT4-fs error (device loop6): ext4_orphan_get:1405: comm syz.6.8817: couldn't read orphan inode 11 (err -117) [ 2433.787562][ T1603] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 2433.904454][ T1611] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8819'. [ 2433.948692][ T1609] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8817'. [ 2434.003463][ T28] audit: type=1400 audit(1761440590.229:3082): avc: denied { accept } for pid=1614 comm="syz.1.8820" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 2434.005094][ T1612] xt_hashlimit: size too large, truncated to 1048576 [ 2434.146203][ T28] audit: type=1400 audit(1761440590.368:3083): avc: denied { getattr } for pid=1610 comm="syz.5.8819" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 2434.171415][ T1620] overlayfs: statfs failed on './file0' [ 2434.602685][T29999] EXT4-fs (loop6): unmounting filesystem. [ 2434.691846][ T1625] loop9: detected capacity change from 0 to 1024 [ 2434.715531][ T1625] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 2434.758465][ T1625] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 2434.852719][ T1630] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 2434.948440][ T1625] EXT4-fs error (device loop9): ext4_xattr_inode_iget:404: inode #11: comm syz.9.8822: missing EA_INODE flag [ 2434.980767][ T1635] loop1: detected capacity change from 0 to 4096 [ 2434.988934][ T1625] EXT4-fs (loop9): Remounting filesystem read-only [ 2435.065963][ T1642] input: syz0 as /devices/virtual/input/input336 [ 2435.082976][ T1625] EXT4-fs error (device loop9): ext4_xattr_inode_iget:409: comm syz.9.8822: error while reading EA inode 11 err=-117 [ 2435.114474][ T1641] loop6: detected capacity change from 0 to 512 [ 2435.194580][ T1625] EXT4-fs (loop9): Remounting filesystem read-only [ 2435.212467][ T1635] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 2435.282088][ T1641] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802c11c, mo2=0002] [ 2435.440151][ T1641] System zones: 1-12 [ 2435.904045][ T1641] EXT4-fs error (device loop6): ext4_xattr_inode_iget:400: comm syz.6.8821: Parent and EA inode have the same ino 15 [ 2435.919666][T24115] EXT4-fs (loop1): unmounting filesystem. [ 2435.943809][ T1637] loop5: detected capacity change from 0 to 8192 [ 2435.981382][T25224] EXT4-fs error (device loop9): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 2436.008700][ T28] audit: type=1400 audit(1761440592.084:3084): avc: denied { append } for pid=1636 comm="syz.5.8826" name="loop5" dev="devtmpfs" ino=123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2436.043829][T25224] EXT4-fs (loop9): Remounting filesystem read-only [ 2436.053951][ T1641] EXT4-fs error (device loop6): ext4_xattr_inode_iget:400: comm syz.6.8821: Parent and EA inode have the same ino 15 [ 2436.054752][ T28] audit: type=1400 audit(1761440592.112:3085): avc: denied { map } for pid=1636 comm="syz.5.8826" path="/dev/loop5" dev="devtmpfs" ino=123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2436.081682][T25224] EXT4-fs error (device loop9): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 2436.108481][ T1641] EXT4-fs (loop6): 1 orphan inode deleted [ 2436.114517][ T1641] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 2436.123331][T25224] EXT4-fs (loop9): Remounting filesystem read-only [ 2436.153015][T25224] EXT4-fs error (device loop9): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 2436.189901][T25224] EXT4-fs (loop9): Remounting filesystem read-only [ 2436.211435][ T28] audit: type=1400 audit(1761440592.112:3086): avc: denied { execute } for pid=1636 comm="syz.5.8826" path="/dev/loop5" dev="devtmpfs" ino=123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 2436.264644][T25224] EXT4-fs error (device loop9): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 2436.309035][T25224] EXT4-fs (loop9): Remounting filesystem read-only [ 2436.332271][T25224] EXT4-fs error (device loop9): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 2436.352435][ T294] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 2436.360188][T25224] EXT4-fs (loop9): Remounting filesystem read-only [ 2436.381284][T25224] EXT4-fs error (device loop9): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 2436.406579][T25224] EXT4-fs (loop9): Remounting filesystem read-only [ 2436.429943][T25224] EXT4-fs error (device loop9): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 2436.455175][T25224] EXT4-fs (loop9): Remounting filesystem read-only [ 2436.473249][T25224] EXT4-fs error (device loop9): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 2436.569351][ T1659] input: syz0 as /devices/virtual/input/input337 [ 2436.576093][ T294] usb 3-1: Using ep0 maxpacket: 16 [ 2436.606343][ T294] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2436.654612][ T294] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2436.702320][ T294] usb 3-1: New USB device found, idVendor=1b96, idProduct=0008, bcdDevice= 0.00 [ 2436.741541][ T294] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2436.764762][ T294] usb 3-1: config 0 descriptor?? [ 2436.819302][T29999] EXT4-fs (loop6): unmounting filesystem. [ 2439.020203][ T1682] loop5: detected capacity change from 0 to 512 [ 2439.106974][ T1682] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 2439.385416][ T1682] ext4 filesystem being mounted at /308/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 2439.474097][ T294] usbhid 3-1:0.0: can't add hid device: -71 [ 2439.480111][ T294] usbhid: probe of 3-1:0.0 failed with error -71 [ 2439.579387][ T294] usb 3-1: USB disconnect, device number 75 [ 2440.026328][T28120] EXT4-fs (loop5): unmounting filesystem. [ 2440.079976][ T1691] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8837'. [ 2440.195180][T25224] EXT4-fs: 60 callbacks suppressed [ 2440.195296][T25224] EXT4-fs (loop9): Remounting filesystem read-only [ 2440.297342][ T1694] IPv6: ADDRCONF(NETDEV_CHANGE): syz_tun: link becomes ready [ 2440.328706][ T1694] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2440.354393][T25224] EXT4-fs (loop9): Remounting filesystem read-only [ 2440.356629][ T1697] netlink: 180 bytes leftover after parsing attributes in process `syz.5.8838'. [ 2440.616144][ T1699] tipc: Started in network mode [ 2440.621243][ T1699] tipc: Node identity 2ad977ac502e, cluster identity 4711 [ 2440.628762][ T1699] tipc: Enabled bearer , priority 0 [ 2440.754783][T25224] EXT4-fs error: 61 callbacks suppressed [ 2440.754805][T25224] EXT4-fs error (device loop9): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 2440.780216][ T1694] netlink: 180 bytes leftover after parsing attributes in process `syz.5.8838'. [ 2440.792924][ T1694] netlink: 180 bytes leftover after parsing attributes in process `syz.5.8838'. [ 2440.806940][T25224] EXT4-fs (loop9): Remounting filesystem read-only [ 2440.827161][T25224] EXT4-fs error (device loop9): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 2440.844180][T25224] EXT4-fs (loop9): Remounting filesystem read-only [ 2440.883569][T25224] EXT4-fs error (device loop9): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 2440.900618][T25224] EXT4-fs (loop9): Remounting filesystem read-only [ 2440.979388][ T1704] input: syz0 as /devices/virtual/input/input338 [ 2441.023769][T25224] EXT4-fs error (device loop9): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 2441.109956][T25224] EXT4-fs (loop9): Remounting filesystem read-only [ 2441.482313][T25224] EXT4-fs error (device loop9): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 2441.573538][T25224] EXT4-fs (loop9): Remounting filesystem read-only [ 2441.672735][ T1695] tipc: Resetting bearer [ 2442.160729][ T294] tipc: Node number set to 2063038380 [ 2442.189158][T25224] EXT4-fs error (device loop9): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 2442.206203][T25224] EXT4-fs (loop9): Remounting filesystem read-only [ 2442.226087][T25224] EXT4-fs error (device loop9): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 2442.244837][T25224] EXT4-fs (loop9): Remounting filesystem read-only [ 2442.265009][T25224] EXT4-fs error (device loop9): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 2442.282088][T25224] EXT4-fs (loop9): Remounting filesystem read-only [ 2442.302669][T25224] EXT4-fs error (device loop9): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 2442.333333][T25224] EXT4-fs error (device loop9): ext4_empty_dir:3166: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 2442.456537][ T1695] tipc: Disabling bearer [ 2443.380523][ T1732] netlink: 'syz.5.8848': attribute type 12 has an invalid length. [ 2443.800759][ T28] audit: type=1400 audit(1761440599.275:3087): avc: denied { append } for pid=1738 comm="syz.1.8851" name="ashmem" dev="devtmpfs" ino=269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 2443.826122][ T1739] bridge0: port 1(bridge_slave_0) entered disabled state [ 2443.955448][ T1739] bridge0: port 1(bridge_slave_0) entered blocking state [ 2443.962666][ T1739] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2444.207271][ T28] audit: type=1400 audit(1761440599.653:3088): avc: denied { attach_queue } for pid=1738 comm="syz.1.8851" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 2444.215359][ T1745] fuse: Unknown parameter '0x00000000000000000x0000000000000004' [ 2445.196339][ T1753] netlink: 48 bytes leftover after parsing attributes in process `syz.2.8854'. [ 2445.211522][ T1753] device bridge0 entered promiscuous mode [ 2445.231193][ T1753] device macsec1 entered promiscuous mode [ 2445.242658][ T1753] bridge0: port 3(macsec1) entered blocking state [ 2445.290281][ T1753] bridge0: port 3(macsec1) entered disabled state [ 2445.326653][ T1753] device bridge0 left promiscuous mode [ 2445.424931][ T1760] input: syz0 as /devices/virtual/input/input339 [ 2445.540167][ T1758] loop1: detected capacity change from 0 to 256 [ 2445.614286][ T1758] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 2445.667513][ T1758] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 2445.809453][ T1758] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 2446.095994][ T1758] xt_bpf: check failed: parse error [ 2446.364771][ T1765] bridge0: port 1(bridge_slave_0) entered blocking state [ 2446.371959][ T1765] bridge0: port 1(bridge_slave_0) entered disabled state [ 2446.379690][ T1765] device bridge_slave_0 entered promiscuous mode [ 2446.460641][ T1765] bridge0: port 2(bridge_slave_1) entered blocking state [ 2446.477039][ T1765] bridge0: port 2(bridge_slave_1) entered disabled state [ 2446.506588][ T1765] device bridge_slave_1 entered promiscuous mode [ 2446.899960][ T1782] syz.2.8861[1782] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2446.901213][ T1782] syz.2.8861[1782] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2447.993004][ T1785] loop5: detected capacity change from 0 to 128 [ 2448.187982][ T1785] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 2448.197740][ T1785] ext4 filesystem being mounted at /317/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 2448.231120][ T1785] input: syz0 as /devices/virtual/input/input340 [ 2448.620699][T29794] device veth1_macvtap left promiscuous mode [ 2448.631901][T29794] device veth0_vlan left promiscuous mode [ 2448.828958][T28120] EXT4-fs (loop5): unmounting filesystem. [ 2448.876249][T28580] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 2448.924588][ T1801] xt_ecn: cannot match TCP bits for non-tcp packets [ 2449.025994][T29751] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2449.034420][T29751] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2449.049760][T29751] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2449.058544][T29751] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2449.067001][T29751] bridge0: port 1(bridge_slave_0) entered blocking state [ 2449.074152][T29751] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2449.085029][T29751] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2449.093713][T29751] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2449.094061][T28580] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 2449.111663][T28580] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 2449.118953][T29751] bridge0: port 2(bridge_slave_1) entered blocking state [ 2449.121502][T28580] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 2449.128550][T29751] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2449.152672][T28580] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 2449.163185][T29751] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2449.177028][T28580] usb 3-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 2449.193641][T29751] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2449.199167][T28580] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2449.218884][T28580] usb 3-1: Product: syz [ 2449.226166][T29751] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2449.226866][T28580] usb 3-1: Manufacturer: syz [ 2449.252776][T28580] usb 3-1: SerialNumber: syz [ 2449.268892][T29751] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2449.278458][T28580] usb 3-1: config 0 descriptor?? [ 2449.294443][T29751] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2449.295381][T28580] ums-isd200 3-1:0.0: USB Mass Storage device detected [ 2449.310317][T29751] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2449.330900][T29751] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2449.341051][ T1765] device veth0_vlan entered promiscuous mode [ 2449.372823][T29751] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2449.383132][ T1765] device veth1_macvtap entered promiscuous mode [ 2449.410289][T29751] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2449.443970][ T28] audit: type=1400 audit(1761440604.481:3089): avc: denied { remove_name } for pid=1810 comm="syz.1.8868" name="bus" dev="incremental-fs" ino=2920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 2449.453762][T29794] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2449.471457][ T28] audit: type=1400 audit(1761440604.481:3090): avc: denied { rmdir } for pid=1810 comm="syz.1.8868" name="bus" dev="incremental-fs" ino=2920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 2449.514116][ T1792] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2449.522979][ T1792] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2449.535823][T28580] scsi host1: usb-storage 3-1:0.0 [ 2449.553220][T24115] ------------[ cut here ]------------ [ 2449.558801][T24115] WARNING: CPU: 1 PID: 24115 at fs/inode.c:335 drop_nlink+0xc5/0x110 [ 2449.566970][T24115] Modules linked in: [ 2449.571109][T24115] CPU: 1 PID: 24115 Comm: syz-executor Tainted: G W syzkaller #0 [ 2449.580400][T24115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2449.590611][T24115] RIP: 0010:drop_nlink+0xc5/0x110 [ 2449.595787][T24115] Code: 1b 48 8d bb b8 04 00 00 be 08 00 00 00 e8 a3 e4 f0 ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 9b 72 ac ff <0f> 0b eb 86 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 5e ff ff ff 4c [ 2449.615804][T24115] RSP: 0018:ffffc90003707c38 EFLAGS: 00010293 [ 2449.622203][T24115] RAX: ffffffff81c3ab85 RBX: ffff8881227b0810 RCX: ffff88812e9ae540 [ 2449.630301][T24115] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2449.638442][T24115] RBP: ffffc90003707c60 R08: 0000000000000004 R09: 0000000000000003 [ 2449.646506][T24115] R10: fffff520006e0f78 R11: 1ffff920006e0f78 R12: dffffc0000000000 [ 2449.654544][T24115] R13: 1ffff110244f610b R14: ffff8881227b0858 R15: 0000000000000000 [ 2449.662764][T24115] FS: 000055555d0ad500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 2449.671789][T24115] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2449.678434][T24115] CR2: 000055555d0d04e8 CR3: 000000011fa5d000 CR4: 00000000003526a0 [ 2449.686444][T24115] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2449.694541][T24115] DR3: 3a810b1eb6134bdc DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2449.702601][T24115] Call Trace: [ 2449.705915][T24115] [ 2449.708881][T24115] shmem_rmdir+0x5b/0x90 [ 2449.713239][T24115] vfs_rmdir+0x393/0x500 [ 2449.717541][T24115] incfs_kill_sb+0x105/0x220 [ 2449.722201][T24115] deactivate_locked_super+0xb5/0x120 [ 2449.727613][T24115] deactivate_super+0xaf/0xe0 [ 2449.732372][T24115] cleanup_mnt+0x45f/0x4e0 [ 2449.736828][T24115] __cleanup_mnt+0x19/0x20 [ 2449.741282][T24115] task_work_run+0x1db/0x240 [ 2449.745953][T24115] ? __cfi_task_work_run+0x10/0x10 [ 2449.751137][T24115] ? __x64_sys_umount+0x125/0x160 [ 2449.756260][T24115] ? __cfi___x64_sys_umount+0x10/0x10 [ 2449.761674][T24115] exit_to_user_mode_loop+0x9b/0xb0 [ 2449.766948][T24115] exit_to_user_mode_prepare+0x5a/0xa0 [ 2449.772446][T24115] syscall_exit_to_user_mode+0x1a/0x30 [ 2449.778017][T24115] do_syscall_64+0x58/0xa0 [ 2449.782476][T24115] ? clear_bhb_loop+0x30/0x80 [ 2449.787240][T24115] ? clear_bhb_loop+0x30/0x80 [ 2449.791962][T24115] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2449.797941][T24115] RIP: 0033:0x7f78b13902f7 [ 2449.802389][T24115] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 2449.822080][T24115] RSP: 002b:00007ffe265d42b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 2449.830590][T24115] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f78b13902f7 [ 2449.838592][T24115] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe265d4370 [ 2449.846632][T24115] RBP: 00007ffe265d4370 R08: 0000000000000000 R09: 0000000000000000 [ 2449.854703][T24115] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe265d5400 [ 2449.862759][T24115] R13: 00007f78b1411d7d R14: 0000000000234975 R15: 00007ffe265d5440 [ 2449.870783][T24115] [ 2449.874090][T24115] ---[ end trace 0000000000000000 ]--- [ 2449.883857][T24115] ================================================================== [ 2449.888027][T28580] usb 3-1: USB disconnect, device number 76 [ 2449.891961][T24115] BUG: KASAN: null-ptr-deref in ihold+0x20/0x60 [ 2449.891992][T24115] Write of size 4 at addr 0000000000000170 by task syz-executor/24115 [ 2449.892009][T24115] [ 2449.892016][T24115] CPU: 0 PID: 24115 Comm: syz-executor Tainted: G W syzkaller #0 [ 2449.892038][T24115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2449.892050][T24115] Call Trace: [ 2449.892058][T24115] [ 2449.892066][T24115] __dump_stack+0x21/0x24 [ 2449.892089][T24115] dump_stack_lvl+0xee/0x150 [ 2449.892110][T24115] ? __cfi_dump_stack_lvl+0x8/0x8 [ 2449.892133][T24115] ? ihold+0x20/0x60 [ 2449.892151][T24115] ? ihold+0x20/0x60 [ 2449.961999][T24115] print_report+0x3d/0x60 [ 2449.966359][T24115] kasan_report+0x122/0x150 [ 2449.970886][T24115] ? ihold+0x20/0x60 [ 2449.974795][T24115] kasan_check_range+0x280/0x290 [ 2449.979758][T24115] __kasan_check_write+0x14/0x20 [ 2449.984795][T24115] ihold+0x20/0x60 [ 2449.988538][T24115] vfs_rmdir+0x25f/0x500 [ 2449.992793][T24115] incfs_kill_sb+0x105/0x220 [ 2449.997422][T24115] deactivate_locked_super+0xb5/0x120 [ 2450.002813][T24115] deactivate_super+0xaf/0xe0 [ 2450.007508][T24115] cleanup_mnt+0x45f/0x4e0 [ 2450.011931][T24115] __cleanup_mnt+0x19/0x20 [ 2450.016352][T24115] task_work_run+0x1db/0x240 [ 2450.020957][T24115] ? __cfi_task_work_run+0x10/0x10 [ 2450.026084][T24115] ? __x64_sys_umount+0x125/0x160 [ 2450.031122][T24115] ? __cfi___x64_sys_umount+0x10/0x10 [ 2450.036508][T24115] exit_to_user_mode_loop+0x9b/0xb0 [ 2450.041719][T24115] exit_to_user_mode_prepare+0x5a/0xa0 [ 2450.047188][T24115] syscall_exit_to_user_mode+0x1a/0x30 [ 2450.052673][T24115] do_syscall_64+0x58/0xa0 [ 2450.057097][T24115] ? clear_bhb_loop+0x30/0x80 [ 2450.061793][T24115] ? clear_bhb_loop+0x30/0x80 [ 2450.066485][T24115] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2450.072391][T24115] RIP: 0033:0x7f78b13902f7 [ 2450.076813][T24115] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 2450.096608][T24115] RSP: 002b:00007ffe265d42b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 2450.105034][T24115] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f78b13902f7 [ 2450.113012][T24115] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe265d4370 [ 2450.120994][T24115] RBP: 00007ffe265d4370 R08: 0000000000000000 R09: 0000000000000000 [ 2450.128977][T24115] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe265d5400 [ 2450.136956][T24115] R13: 00007f78b1411d7d R14: 0000000000234975 R15: 00007ffe265d5440 [ 2450.144939][T24115] [ 2450.147966][T24115] ================================================================== [ 2450.158596][T24115] Disabling lock debugging due to kernel taint [ 2450.165538][T24115] BUG: kernel NULL pointer dereference, address: 0000000000000170 [ 2450.173386][T24115] #PF: supervisor write access in kernel mode [ 2450.179483][T24115] #PF: error_code(0x0002) - not-present page [ 2450.185583][T24115] PGD 11afb4067 P4D 11afb4067 PUD 0 [ 2450.190914][T24115] Oops: 0002 [#1] PREEMPT SMP KASAN [ 2450.196146][T24115] CPU: 1 PID: 24115 Comm: syz-executor Tainted: G B W syzkaller #0 [ 2450.205283][T24115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2450.215371][T24115] RIP: 0010:ihold+0x26/0x60 [ 2450.219923][T24115] Code: 33 36 7c df 55 48 89 e5 41 56 53 48 89 fb e8 01 6a ac ff 48 8d bb 70 01 00 00 be 04 00 00 00 e8 e0 db f0 ff 41 be 01 00 00 00 44 0f c1 b3 70 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 f1 [ 2450.239566][T24115] RSP: 0018:ffffc90003707c78 EFLAGS: 00010246 [ 2450.245780][T24115] RAX: ffff88812e9ae500 RBX: 0000000000000000 RCX: ffff88812e9ae540 [ 2450.253820][T24115] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2450.261833][T24115] RBP: ffffc90003707c88 R08: dffffc0000000000 R09: fffffbfff0f2d8fd [ 2450.269848][T24115] R10: fffffbfff0f2d8fd R11: 1ffffffff0f2d8fc R12: ffff8881227b081c [ 2450.277879][T24115] R13: dffffc0000000000 R14: 0000000000000001 R15: 0000000000000000 [ 2450.285892][T24115] FS: 000055555d0ad500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 2450.294866][T24115] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2450.301567][T24115] CR2: 0000000000000170 CR3: 000000011fa5d000 CR4: 00000000003526a0 [ 2450.309593][T24115] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2450.317605][T24115] DR3: 3a810b1eb6134bdc DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2450.325642][T24115] Call Trace: [ 2450.329051][T24115] [ 2450.332016][T24115] vfs_rmdir+0x25f/0x500 [ 2450.336340][T24115] incfs_kill_sb+0x105/0x220 [ 2450.340989][T24115] deactivate_locked_super+0xb5/0x120 [ 2450.346429][T24115] deactivate_super+0xaf/0xe0 [ 2450.351191][T24115] cleanup_mnt+0x45f/0x4e0 [ 2450.355670][T24115] __cleanup_mnt+0x19/0x20 [ 2450.360144][T24115] task_work_run+0x1db/0x240 [ 2450.364943][T24115] ? __cfi_task_work_run+0x10/0x10 [ 2450.370136][T24115] ? __x64_sys_umount+0x125/0x160 [ 2450.375216][T24115] ? __cfi___x64_sys_umount+0x10/0x10 [ 2450.380656][T24115] exit_to_user_mode_loop+0x9b/0xb0 [ 2450.385920][T24115] exit_to_user_mode_prepare+0x5a/0xa0 [ 2450.391522][T24115] syscall_exit_to_user_mode+0x1a/0x30 [ 2450.397042][T24115] do_syscall_64+0x58/0xa0 [ 2450.401505][T24115] ? clear_bhb_loop+0x30/0x80 [ 2450.406236][T24115] ? clear_bhb_loop+0x30/0x80 [ 2450.410967][T24115] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2450.417095][T24115] RIP: 0033:0x7f78b13902f7 [ 2450.421574][T24115] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 2450.441341][T24115] RSP: 002b:00007ffe265d42b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 2450.449973][T24115] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f78b13902f7 [ 2450.457987][T24115] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe265d4370 [ 2450.466142][T24115] RBP: 00007ffe265d4370 R08: 0000000000000000 R09: 0000000000000000 [ 2450.474604][T24115] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe265d5400 [ 2450.482617][T24115] R13: 00007f78b1411d7d R14: 0000000000234975 R15: 00007ffe265d5440 [ 2450.490636][T24115] [ 2450.494126][T24115] Modules linked in: [ 2450.498067][T24115] CR2: 0000000000000170 [ 2450.502289][T24115] ---[ end trace 0000000000000000 ]--- [ 2450.507776][T24115] RIP: 0010:ihold+0x26/0x60 [ 2450.512330][T24115] Code: 33 36 7c df 55 48 89 e5 41 56 53 48 89 fb e8 01 6a ac ff 48 8d bb 70 01 00 00 be 04 00 00 00 e8 e0 db f0 ff 41 be 01 00 00 00 44 0f c1 b3 70 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 f1 [ 2450.531982][T24115] RSP: 0018:ffffc90003707c78 EFLAGS: 00010246 [ 2450.538188][T24115] RAX: ffff88812e9ae500 RBX: 0000000000000000 RCX: ffff88812e9ae540 [ 2450.546299][T24115] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2450.554400][T24115] RBP: ffffc90003707c88 R08: dffffc0000000000 R09: fffffbfff0f2d8fd [ 2450.562415][T24115] R10: fffffbfff0f2d8fd R11: 1ffffffff0f2d8fc R12: ffff8881227b081c [ 2450.570429][T24115] R13: dffffc0000000000 R14: 0000000000000001 R15: 0000000000000000 [ 2450.578439][T24115] FS: 000055555d0ad500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 2450.587494][T24115] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2450.594204][T24115] CR2: 0000000000000170 CR3: 000000011fa5d000 CR4: 00000000003526a0 [ 2450.602228][T24115] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2450.610258][T24115] DR3: 3a810b1eb6134bdc DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2450.618293][T24115] Kernel panic - not syncing: Fatal exception [ 2450.624741][T24115] Kernel Offset: disabled [ 2450.629090][T24115] Rebooting in 86400 seconds..