last executing test programs: 5m32.218451049s ago: executing program 1 (id=903): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) socket(0x10, 0x3, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff", @ANYBLOB, @ANYBLOB], 0x48) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = syz_open_dev$vcsa(&(0x7f0000000300), 0x1, 0x102) write$P9_RREMOVE(r4, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r7 = dup(r6) connect$bt_rfcomm(r7, &(0x7f00000008c0)={0x1f, @none, 0x6}, 0xa) bind$bt_l2cap(r6, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) socket$nl_route(0x10, 0x3, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) write$cgroup_subtree(r8, 0x0, 0x36) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[], 0x1c}}, 0x54004) 5m25.323230716s ago: executing program 1 (id=908): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000020c0)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) syz_mount_image$ext4(0x0, &(0x7f0000000580)='./file0\x00', 0x19560c0, 0x0, 0x0, 0x0, 0x0) open(&(0x7f00000002c0)='./file0/file0\x00', 0x141840, 0x0) r4 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$tcp_congestion(r4, &(0x7f0000000100)='reno\x00', 0x5) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x17, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xa0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000002c0)={@cgroup=r6, r5, 0x12, 0x0, 0x0, @void, @value=0x0}, 0x20) write$tcp_congestion(r4, &(0x7f0000000300)='reno\x00', 0x5) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000340)={@cgroup=r6, r5, 0x12, 0x0, 0x0, @void, @value=0x0}, 0x20) write$tcp_congestion(r4, &(0x7f0000000380)='reno\x00', 0x5) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, 0x0) unshare(0x22020400) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, 0x0) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 5m20.071039202s ago: executing program 1 (id=913): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010005000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fsetxattr$system_posix_acl(r2, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f00000004c0)=ANY=[@ANYBLOB="020000"], 0xfe44, 0x0) 5m20.032420893s ago: executing program 1 (id=915): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) rt_sigaction(0x40, 0x0, 0x0, 0x8, &(0x7f0000001540)) syz_open_dev$tty20(0xc, 0x4, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3}, 0x0, &(0x7f00000002c0)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket(0x40000000015, 0x805, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) ppoll(&(0x7f0000000200)=[{r5, 0x1002}], 0x1, 0x0, 0x0, 0x0) write$vga_arbiter(r5, &(0x7f0000000040)=@other={'lock', ' ', 'io+mem'}, 0xc) write$vga_arbiter(r5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x18) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e0, 0x0, 0x18c, 0x203, 0x320, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x20, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x9}, {0xfffc, 0x0, 0x0, 0x6}, {}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {}, {}, {0x20, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0xb}, {0x4, 0x2}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz0\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) 5m16.675351495s ago: executing program 1 (id=917): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x93, &(0x7f00000003c0)=""/147, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000005c0)={'bridge0\x00'}) mount(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) getdents(0xffffffffffffffff, &(0x7f0000001fc0)=""/184, 0x20002078) r5 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) 5m13.668434913s ago: executing program 1 (id=924): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x11, 0xf, &(0x7f0000000a00)=ANY=[@ANYRESDEC=r0, @ANYRES8=r0], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x9a, &(0x7f0000000500)=ANY=[@ANYBLOB="000000000000ffffffffffff88470000020076b8b3d9026686ce565bba7af360c6897162d752e3b605b40a93d901c0b8635ee33d72122e992593a153c2a782dd3f26902a8f42038d5d4b1aefd4347c8931f700006d9f4d23be5a441355a87ecac39c941ad87fad0d98eafb1a8954649a240dd383c935124af72e2082f3a58d65befbf936455c6c97bccd43e58b5eaa12d7"], &(0x7f00000002c0)={0x1, 0x1, [0x816, 0xc40, 0x62d, 0x294]}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000"], 0x39) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001e00)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000700)=ANY=[@ANYRES32=r4, @ANYRES32=r0, @ANYRESOCT=r2, @ANYRES16=r2, @ANYRESDEC=r1, @ANYRESOCT], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5, 0x0, 0x3}, 0x18) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x5, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="23000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x10000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r6}, 0x10) getgroups(0x1, &(0x7f0000000040)=[0x0]) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r7 = getpid() sched_setscheduler(r7, 0x2, 0x0) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000032680)=""/102400, 0x19000) r9 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r9, &(0x7f0000000100)={'syz0\x00', {0x0, 0x36df}, 0x7, [0x400, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x10, 0x0, 0x0, 0x8, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x4, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0xffffffff], [0x0, 0x0, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x44a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xa152, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x1, 0x0, 0xfdfffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c1e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1e00, 0x0, 0x10000000, 0x0, 0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x4, 0x0, 0x0, 0x0, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x10000, 0x7, 0x200, 0x0, 0x0, 0xd, 0x0, 0x0, 0x7, 0x0, 0xcb8], [0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x78a2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x7, 0x0, 0x0, 0xbace, 0xffffffff, 0x3, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}, 0x45c) ioctl$UI_DEV_SETUP(r9, 0x5501, 0x0) 4m57.271315429s ago: executing program 32 (id=924): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x11, 0xf, &(0x7f0000000a00)=ANY=[@ANYRESDEC=r0, @ANYRES8=r0], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x9a, &(0x7f0000000500)=ANY=[@ANYBLOB="000000000000ffffffffffff88470000020076b8b3d9026686ce565bba7af360c6897162d752e3b605b40a93d901c0b8635ee33d72122e992593a153c2a782dd3f26902a8f42038d5d4b1aefd4347c8931f700006d9f4d23be5a441355a87ecac39c941ad87fad0d98eafb1a8954649a240dd383c935124af72e2082f3a58d65befbf936455c6c97bccd43e58b5eaa12d7"], &(0x7f00000002c0)={0x1, 0x1, [0x816, 0xc40, 0x62d, 0x294]}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000"], 0x39) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001e00)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000700)=ANY=[@ANYRES32=r4, @ANYRES32=r0, @ANYRESOCT=r2, @ANYRES16=r2, @ANYRESDEC=r1, @ANYRESOCT], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5, 0x0, 0x3}, 0x18) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x5, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="23000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x10000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r6}, 0x10) getgroups(0x1, &(0x7f0000000040)=[0x0]) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r7 = getpid() sched_setscheduler(r7, 0x2, 0x0) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000032680)=""/102400, 0x19000) r9 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r9, &(0x7f0000000100)={'syz0\x00', {0x0, 0x36df}, 0x7, [0x400, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x10, 0x0, 0x0, 0x8, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x4, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0xffffffff], [0x0, 0x0, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x44a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xa152, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x1, 0x0, 0xfdfffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c1e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1e00, 0x0, 0x10000000, 0x0, 0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x4, 0x0, 0x0, 0x0, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x10000, 0x7, 0x200, 0x0, 0x0, 0xd, 0x0, 0x0, 0x7, 0x0, 0xcb8], [0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x78a2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x7, 0x0, 0x0, 0xbace, 0xffffffff, 0x3, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}, 0x45c) ioctl$UI_DEV_SETUP(r9, 0x5501, 0x0) 4m30.681932334s ago: executing program 0 (id=1000): bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="0000000000000000b708000002001e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000d00)='sched_switch\x00', r4}, 0x10) socket$netlink(0x10, 0x3, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000000140)=[{&(0x7f0000000900)="580000001400192340834b80040d8c560a066e0202ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200060c10000000010000000000", 0x58}], 0x1) r7 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x100480, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@typedef={0x0, 0x0, 0x0, 0x10}]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) ioctl$RTC_IRQP_SET(r7, 0x4008700c, 0x1333) syz_emit_ethernet(0x9e, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) dup(0xffffffffffffffff) 4m30.090890222s ago: executing program 0 (id=1002): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x11, 0xf, &(0x7f0000000a00)=ANY=[@ANYRESDEC=r0, @ANYRES8=r0], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x9a, &(0x7f0000000500)=ANY=[@ANYBLOB="000000000000ffffffffffff88470000020076b8b3d9026686ce565bba7af360c6897162d752e3b605b40a93d901c0b8635ee33d72122e992593a153c2a782dd3f26902a8f42038d5d4b1aefd4347c8931f700006d9f4d23be5a441355a87ecac39c941ad87fad0d98eafb1a8954649a240dd383c935124af72e2082f3a58d65befbf936455c6c97bccd43e58b5eaa12d7"], &(0x7f00000002c0)={0x1, 0x1, [0x816, 0xc40, 0x62d, 0x294]}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000"], 0x39) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001e00)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000700)=ANY=[@ANYRES32=r4, @ANYRES32=r0, @ANYRESOCT=r2, @ANYRES16=r2, @ANYRESDEC=r1, @ANYRESOCT], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5, 0x0, 0x3}, 0x18) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x5, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="23000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x10000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r6}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r7 = getpid() sched_setscheduler(r7, 0x2, 0x0) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000032680)=""/102400, 0x19000) r9 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r9, &(0x7f0000000100)={'syz0\x00', {0x0, 0x36df}, 0x7, [0x400, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x10, 0x0, 0x0, 0x8, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x4, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0xffffffff], [0x0, 0x0, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x44a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xa152, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x1, 0x0, 0xfdfffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c1e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1e00, 0x0, 0x10000000, 0x0, 0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x4, 0x0, 0x0, 0x0, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x10000, 0x7, 0x200, 0x0, 0x0, 0xd, 0x0, 0x0, 0x7, 0x0, 0xcb8], [0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x78a2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x7, 0x0, 0x0, 0xbace, 0xffffffff, 0x3, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}, 0x45c) ioctl$UI_DEV_SETUP(r9, 0x5501, 0x0) r10 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) ioctl$USBDEVFS_REAPURB(r10, 0x4008550c, 0x0) ioctl$USBDEVFS_SUBMITURB(r10, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20000009, 0x0, &(0x7f0000000240)={0x0, 0x0, 0xfffc, 0x360}, 0x8, 0x7, 0x80, 0x0, 0x1, 0x101, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffff12850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 4m28.070263277s ago: executing program 0 (id=1016): r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, r1, {0x7, 0xfff2}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) recvmmsg(r2, &(0x7f0000002100)=[{{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000000640)=""/216, 0xd8}, {&(0x7f0000000a40)=""/4104, 0x1008}], 0x2}, 0x3}], 0x1, 0x0, 0x0) 4m27.715367281s ago: executing program 0 (id=1017): r0 = inotify_init() r1 = epoll_create(0x401) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004540), 0x0, 0x240080e4) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r1, &(0x7f0000000080)) r2 = inotify_add_watch(r0, &(0x7f0000000100)='./file0\x00', 0x2000b96) socket$nl_route(0x10, 0x3, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x100a, &(0x7f0000001400)=""/4106, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="34000000100001f8ffffff000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r7, @ANYBLOB="08001b"], 0x34}}, 0x4004010) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="1b00"], 0x50) inotify_rm_watch(r0, r2) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0xb000001d}) epoll_wait(r1, &(0x7f0000000e80)=[{}, {}], 0x2, 0x0) 4m24.840535467s ago: executing program 0 (id=1022): r0 = inotify_init() r1 = epoll_create(0x401) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004540), 0x0, 0x240080e4) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r1, &(0x7f0000000080)) r2 = inotify_add_watch(r0, &(0x7f0000000100)='./file0\x00', 0x2000b96) socket$nl_route(0x10, 0x3, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x100a, &(0x7f0000001400)=""/4106, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="34000000100001f8ffffff000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r7, @ANYBLOB="08001b"], 0x34}}, 0x4004010) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="1b00"], 0x50) inotify_rm_watch(r0, r2) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0xb000001d}) epoll_wait(r1, &(0x7f0000000e80)=[{}, {}], 0x2, 0x0) 4m23.368861826s ago: executing program 0 (id=1027): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000140), 0x10090, &(0x7f0000000680)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 4m7.414392297s ago: executing program 33 (id=1027): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000140), 0x10090, &(0x7f0000000680)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 1m36.453188228s ago: executing program 5 (id=1608): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="280000006a00010500000000fddbdf25000000000000000408000500", @ANYRES32=0x0, @ANYBLOB='\b\x00\n'], 0x28}}, 0x0) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000009d000000010001000900000001"], 0x50) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e00000000000000010000000700000000000000", @ANYRES32=0x1, @ANYBLOB="8a34ba2c76410010e41a4b5f36bcab5dd71064f3fa57fe5cce0256514fba14b9e7bf8c6e935731dda3010700000000000000c4adc2b62a62a0912a56f8c7b58a9751080897a54be17846a6afa9146cf5d29947", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r3}, 0x10) (async) prctl$PR_SCHED_CORE(0x3e, 0x2000000000000001, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x140, 0x0) read$msr(r4, &(0x7f0000019680)=""/102376, 0x18fe8) (async) getpriority(0x2, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[], 0x0, 0x2a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) (async) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c008500"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) (async) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r8, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000140)="b9ff0300600d698cff9e14f008004de7f9c764360000000100", 0x0, 0xe00, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1, 0xb, &(0x7f0000000700)=ANY=[@ANYRES16=r2, @ANYRES32, @ANYRES16=r4, @ANYBLOB="e6aa044760bf2c79ccf64f7a6a0ad34729abfeeb7439eec5729ee05a15e1dfd181625d065cd87d7ee67f6b17f7568a288d4c93b2b1cab43392204ce419528719bb02cec0fe6684f8147c1f130ca14c767ab297dfbbd7faa8d5fdd903d71b8214fd945226221869e41a4ea80e0bcd6a1ba67b9c13a3744de60263099b371310ec9870d5ca06a979c0d7dee2449338e0baaf9d868a5dd307b870d3f3f16dd5070fa3ae1d0672da3cfa96561442c867d3196f2804e5ed64e162935b570dd426d151f69483b3788af70b44a71f0d598253839e5f4c79883ae472ec4bb7b6a121b0eea05959b3", @ANYRES64=0x0, @ANYRES32=r2], &(0x7f00000003c0)='GPL\x00', 0xf7fffffe, 0x0, 0x0, 0x61880, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000000)='fib_table_lookup\x00', r8, 0x0, 0x1}, 0x18) (async) r9 = socket(0x27, 0x800, 0x100) connect$inet(r9, &(0x7f00000005c0)={0x2, 0x4e24, @remote}, 0x10) (async) sendmmsg$inet(r9, &(0x7f0000005240)=[{{0x0, 0xfffffdef, 0x0, 0x0, 0x0, 0x0, 0x10}, 0xfffffdef}], 0x4000095, 0x401eb94) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001400)={{r1}, &(0x7f0000001380), &(0x7f00000013c0)='%pB \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r10], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 1m36.452508788s ago: executing program 5 (id=1609): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$inet_udp(0x2, 0x2, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000002c0), 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00'}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r0}, 0x10) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x4, 0x2000000}, 0x0, 0x0) 1m35.237412214s ago: executing program 5 (id=1614): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r3}, &(0x7f0000000280), &(0x7f0000000080)=r4}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xe, 0x5, &(0x7f0000000c00)=@framed={{}, [@cb_func={0x18, 0x6, 0x4, 0x0, 0x4}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @sk_skb=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) socket$pppl2tp(0x18, 0x1, 0x1) socket$pppl2tp(0x18, 0x1, 0x1) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x10, &(0x7f00000004c0)={[{@i_version}, {@nodiscard}, {@min_batch_time={'min_batch_time', 0x3d, 0x3ff}}]}, 0x1, 0x3f7, &(0x7f0000003080)="$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") 1m34.001482309s ago: executing program 5 (id=1620): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000500)={[{@discard}, {@abort}, {@dioread_lock}, {@norecovery}, {@nombcache}, {@lazytime}, {@noload}, {@usrquota}, {@noauto_da_alloc}, {@resuid}, {@init_itable_val}, {@jqfmt_vfsv1}]}, 0xfe, 0x558, &(0x7f0000000c00)="$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") mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}], [], 0x2c}) 1m32.773260565s ago: executing program 5 (id=1626): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000002085"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}}) 1m31.979809885s ago: executing program 5 (id=1631): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x2200054, &(0x7f0000000000), 0x1, 0x236, &(0x7f0000000300)="$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") r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="200009bd7000ffdbdf2501000000000000000100007564703a73797a3000"/46], 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x8040) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0x275a, 0x0) r3 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2f, 0x0, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0xc, &(0x7f0000000040), 0x4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe4000/0x18000)=nil, 0x0, 0x0, 0xc, 0x0, 0x0) r6 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x0) r8 = openat$cgroup_procs(r7, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_procs(r9, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r10, &(0x7f0000000180), 0x12) write$cgroup_pid(r8, &(0x7f0000000140), 0x12) write$UHID_INPUT(r3, &(0x7f0000000280)={0x8, {"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", 0x1000}}, 0x1006) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000140)={0xc, r3, 0x0, 0x0, 0x0, 0xfffffffffffffffd}) 1m31.785411787s ago: executing program 34 (id=1631): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x2200054, &(0x7f0000000000), 0x1, 0x236, &(0x7f0000000300)="$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") r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="200009bd7000ffdbdf2501000000000000000100007564703a73797a3000"/46], 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x8040) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0x275a, 0x0) r3 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2f, 0x0, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0xc, &(0x7f0000000040), 0x4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe4000/0x18000)=nil, 0x0, 0x0, 0xc, 0x0, 0x0) r6 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x0) r8 = openat$cgroup_procs(r7, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_procs(r9, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r10, &(0x7f0000000180), 0x12) write$cgroup_pid(r8, &(0x7f0000000140), 0x12) write$UHID_INPUT(r3, &(0x7f0000000280)={0x8, {"68828c0b9bc23b6a89f8110d35c59d082b92f476102ce32229638a495dcd21c89d83a602a5e31db5ec28b818a3d699abbfafad0370d610ac8a0c4726147706600ff53312a5a0fcf02dd3c0c051bce7e14058a91070617264a63a446e3bcbc60a8204e1cde7294551e2b14ca95768db0f1d7e91a01558164eb611a545bfff41ad4788237a35d9bb2087b6245d27b7fdf4d12d0b19d8cb93ab5ae5850dc1c521058256c8ffa7742038290bb874b0e4199e945f3ab5c74e1b3840f18b0c27377c18beea9f6f909f141e96c7ef2d65f293a13fbbca16644d71cf8cc7652391c5eacaa8a1e247815d7c91adab2cfe77c71882246812312aa01c99b9402a62d82ce80d08636aa5a87b550becadfe4b5ae98085a6b0d9fd3407461eecd242e243140cbe1027d68516e3c379a0921455ca4b36fb9d4b9f9324590fc77730385dee376d147a74bb08ce8fec7ed205311dc42f4cd009f57c85abced5844867f81ddf09cb67bb623ed41304c2d08373972f30418780c6bed885604b2fc6ea1cd1dfe48c5fae5f5925c9c657bb39d8b30db6eb1cab5031ae94d45aa4764d45397793250c758537e24bab0ab75d8066903f808d1bf68d189c1a1f5c6ad28dbeae6ab64c771346a9e7720b92ad4008db9c94d6b876753d57bb21f7c645d6833e680f52c3ecaf20b05869feb4ee670d4f18e233df78ccda64a8cbc6d28e392fad9cc7dc8baed666cf0e96111aac3376d3e66b50f83bbc51b180de2a320ee8c5fe17bea897acea40274c3962f009ede428a99e0fe869a9f711b626e68a5e257e32cd6a000f4c9c509b1116f2502f199823f29d7410e37f4d57755b85e3b0f555422f8631047187b55295001847e7395e7d59752ee37d12f7f9b0d94f00f626eb330ebcf5fd520925036cc07e687e001befa33475b67d381f5d0d5c969fd603464520d9212df27dbb4665c139755795a42005fac94f0ceeb6dee1f3bb0c7c1b03bbaafe7a4b53257892fa6a0148a1bbb43f0b57c21e278730c53a888864a8fbf71a81e154d5f923bdc67a3557d081655d3a63c63609c0e1804dbb7242ca489ac2f2d425a4f8007d4f312ca7723bf3c6633b651177c0a54d6ac50ac45e5f36e474685ef3938775537a3c50f06eca472d7f8cee44239b2a4d29fbf2629eaf62d879ab8dcd2fd5d2345298f3fea84307f0d22a5ecbe2c728cec1b9ad4240926dc9d3d94d5476a0f9f088b0c21b040139bbe103417ae11a85f72d652c93351f8e062530c03cb842ef3b231ecf36ef32c470c67d48648740334ea670a200e4d87745784c270023ac2391b39319162a268c55d64c763d9e5079c286b0c2eb6c084adbdd0b1823d9d31a73aa181cb507bfce4d9f7752da2fbbd3d3eb366b7fcb4c7868a5d010ea3b4e7dd6e68aeb044edf20e2d4aa2837cd70814a556b5a4f90fc47ceab97b2f6ec437f46196398667cf927c900523154b3bfee8e96eb4b4c03dc0d818511a51b5defd3ebf6523816560ba03fc010fd34ab09fdb3aa355e48b6b3a0cb6ce89b4008104a4afe8265f1178d177027918ec1aca8a2ad98fa63bad1367d379e6ff13a57909d8f9ecf50bf5dedc6e49cb9459e4db15c4aa2098fec4e13eafebaf8c1ea118d05c51e799f8e843e0c722ececfcf2422ece64dd945b6c14e5843a393e84873d3dd84eab786955014f210686aea9b11062c70e829ef9ff9da1be19705d2a74110d82e141cb1da325441a8593780470656e6116d5bf16bb6fee6b980ae3448d782c5f8d658f6e9e8494d9357490485a1b9879d34f4e681a425e36627f4844a64bfee3c90bb2c93c4e791ecefb0917b45f9323524fa575472f9152b84ab51aca006e5672091554d95a598c2c09068673a857704b131dac07bff07985941f2510aa52dbb79246bb5193819fe06cfafd24ac8f2cb98b9f4a7bb5f27d962fcb733b9ac25f1dec5a1d6f6c4fde072048169fbfdde0854a993ae1f93d13b4cfbacd926c204d687f2f9feb696406a8aa83de5853cdb2fc110db3e3ee717851ebc9bfea5f7563e7f41d8edfac83f2b6d015fca0f9ca29e3d97f9c727bdddc5eab6bf603c0af7b421aa44f3a03296fde5d980b3c2c707059440b0e6fac05a66d919733989f69209303d91e09e7b6fac37c812bb880bd06b687958dac2608ec6e07f492732c44b3a304d0a11a7307abab29e31239bde8274ec53a6999c0ec36ef708d46b4e606ddd4e41b05e144147b5a3d786806873dad19d8b11209a0d0d3e93d17ba4b6b75b5e8e9c36289f9be1db428278c0c18bef8327d374fcb16007c595b8c59b15c90f0b2e302071a1e328282b94516af2a83bbcdd2912a5b2044582f21820df59cee9d45a8dc0e9baffffffff2475af0ce53bb0b25661ac5226e946f6cf87dab12601f2cb55573f17ac7d48a647a4ef38e3fca92377ffdd9b5f3bb75bad2b406d8d5656b4eea17a7e2f540c12985599bdb09793068b3151f5a7c39241c88c267f34cf342506338835a8e9975b76dde0e275f3522ff6be12402011868e658fba23ef0ea8eeb470f631ca1b5a2e5e35336320ed03ecc31212bf84467333730d96919e2ed9edddb71da5784fdbc23472da3840ac665cfafbc863d71f5e032d6cb1299375f96ae7a1658798561c5d3e549052751eda4d830109d0c7ccdd80afc7803e546738e3424cf77627330b9447ff34068585936bb60eadd47d40f171d80f5b4d3276a74a4ac606135b805a64d0d39a06344d3be8c1572cd33f9a3afd10dfefd4789a54e9cb55677b02f9330ed19a1f93a6cebd52f22e0d0000000000000082b4dabaf26e215872e11cc836b439b580ea013c76ea8629ed752b087bcf176fdc8cb6ae4e2947f5bcf9338d48ce1cf74e365b720d1b3d8c5145d1a78e8eb1b45d21bb62ed1b6e212c13a0ea21223103cd521cb73666cc7a5bacf02b5764251257dea8138e3683c0f7ec4037093a3b78a2d74185289a4803003619b1d9d1553ea217ca214be2cba732907692a769d398d52b816e3859f8ae81e5d0c089e1a87885dd5c86c50ac83db3a802ea67bc0224b4d4e5ed0347a7b144004a93826b01244e75b6e499d4b26bb1845afea8654ba9ade75f5310b458885ad78eff3712c02e62363c5dedd6c99d9aae4cff5cc5ed9406c248744cb4f091eb1f419d0efd1ef5c850b4176fa07a1a5a4e8d39d2e0308916abc77f6cf6b4a44a8a01fc21059d0e100daaeaf636bd177637a583eb9f45c67bc2c76760a58bf448e2e379831755f7a974384d3d62727ca3fec2194dd633a0ed411d6586651b4bbd8b4f5746ce4e72715ba9736c240747f98a01fd3df0b9bed007763c1a1968d4b6f7afd279d1c761f8d6a675ab2fced1793920b10c50af3520170b1d5041a0dde753a2fc210cf98ebcc5392a5deccaefdf4b002aeee716dcdca6cb6073881ddbfd37ee751edaca99b65202bfdbe1fec457bd502555b7dedc5d8e221d4093cf7acf89a3b801d6d2fdd3415d58bef856be0ff22eab5d75675081d85416ab70d7d36d617a2a7f0c8d6ed35a2a81588f01e80712534c3256fc52fb4ed5478325ae28efd78e7eaaabf08bd749226ecab7bdbab7a60b5b60f2d93714455ae6d3b88de9ebb5d2df81fc7e349af45d1b502cfaf36f4adc16886db2758b4f43f5a030912cb772def90d1a0fb555c8fb10d3a7bd8e2dd954860b8084ce5c72971f5df24ef5bc24937ccd545f964a86b6c466610e24cee92bf7a196c915975349b491e8bb1f164ae0af3fbe050d57dc7af839be63cdf1883ec31f5310c6e0d87c70902a66259bcf76588f14f96ebb85b95997f64814c73d6ff8b059536c70f7d72b5924258ffb706e2af7aaf580f327af6dff0c3b020b451c4b22d46fa72854af95b2b6a6d7a3e0b2b78c06eeec2edd5f9a2174ae8b7b6f4ce2e781314142b8482dc8ff4046e851a5d6b8347b4ac8b2326e1c359160ac49d637e4f5549d73369d3323223f179146a5426e21213c6e51a348bc9d55289837b42fa56f9084f6e268a9d041bde513b1e8ea13a7637bc53f67b2951b4bec7a44acb0d93ea325611c486806884b08192ed5768ca88e95db075d8d551b09c42d62a81769f1555707b163af0ff78d728ad0a1871704645f1ed8632e85735ff24e7541005d5409205940df84926ec581218a4ce89498715fb09dcdb44849d3ca7631c1d472ffcafeb37610e8ca77ba4b43176d825a27f59ec81b217b7aa6e01698fe45ffafa0ea2356ad423e581b632b6c627e0d827da58523a40aa19ea3e2ca93f93ed2a33e4fabc36ae56abcb11ae7944577230ec6c498033976fb8d9610d9d9eacf7302ecb060ea5002d70eb6f327ded18f5b2c79e04f09bff203b7d572a214c3684eb89470c28a1361333b32dd63df2163c039d129c5f766fe1a4110f95fc99b87ead844433ac309c3565bc9ca7a6f838a121fc44303ae248a366865e0a3da36ed3046e304f579ff422a7b9946b5cfb52d3e4463e4c5a1e3c7ec1dc16c18c1cdc641b8a8301cd2fcd271489528b4bb4a8515a71be236faadc7ea05173c21f4b8a9aadae38d2e8443199a08a8df1d502df62736812398e8df6eb17f938d529e8dccfe6a15470be9a8cb613a7fb337f213f77ebd136ddbab9471629169e24304e8d20f37e9a341559afc9ab598119e504c53d5c8ec5316e8336295c4101d8bdf6c71d1483355c00972636ea6831704008858cf823defbba5069c24ac7d5e1b7c8e664212d350832fbc767e09a6c2a08073dd8ac2661fec32d6f548b56d74201c274e2cc07a1712169d3db64ebd5bc111fc0aa41f69a5ef849a41a84cb0673db00cb6ae345fdbd44a5467f8588aa24ef57d05000000000000002ee7990c1e3d97375ffd800248f87789cedb94803c315728805b5c0394ab617eadacafebba89d103b28c9df323fc65d023539393ac18285246ffc5e4a7ba902dc234ac2383382f3f445f198cd82a494c8f7ea80c0517223f14e303cf7565e44cd650d4997202ac331355d2c734c61c8a1903d056eb03ce50d167a7a94854de234e45e3886287d01221c6d493ea078df81c2c0d7e5b61a34ceecbf83dd21edb2aeddd14869aaf034588076f6a604569e745f4400fa8ca7dfb9be8bfb85874283a5d1522ec70559abe4681c91112e3561841b2fad0540865944b5df385121b4c8d99cb4d5f9634ace1700c90dbc98f4086714f5f3fd8450f4067e32715aee5943c571fcdca2cb6115dcc373e3f5e96b08e626a1a776ffd5efbf898cfaac7405f75a40feb8ddf06cddf1258a09f3e58b424d409767966290c5c15d150e0f7d120f0078cb97337874f16838ce3cad921bad2573ecef3d853ee5d7e89c3fe517a0d1139ad3f1424c6e5e880cc8b33eb4762b7bd1fe5fd4e2d4c3249bb70b5fe2e74e3751e1b0d78dfbc78fbab4a35d7cd97f8be57eec3a6b3b5c63a5747f82bd3e7fba99bbf9ad1faee6f4b59e14049bbc7a78c285cc8be8cc3fac3451add460bdada49d65d2253adb3500ad3d163f9ae0e24d413ad348bc1a2ed940e6d1c28fa16b9ad05c2175b3374d765939148451b8daffb3f4e646397bc04b0f04a808b6f96dcab1dccbd5b55d4758279b67899dea10bbb61c58f6aad2aefe78f9e5d2b916ca6d717d78e978c25a527b912e7bddede9c2bf3cd464ff102d78332c1468fc2f2f5cd20baddb71736c30a4a302bb5412587e95f165bc12c05cebf5128ef67064fe9b9f14aed30708a4e5afe8b0cf6c904dbedcd2d7c467cef6544ddd020de4cc50f646d0ba0862030febee6af93b263ff983708b1c725a1310300", 0x1000}}, 0x1006) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000140)={0xc, r3, 0x0, 0x0, 0x0, 0xfffffffffffffffd}) 14.194740575s ago: executing program 2 (id=1921): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000240)=@abs, 0x6e) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0xd, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0x4e, &(0x7f00000000c0)=0x8, 0x4) r4 = dup(r3) bind$unix(r4, &(0x7f00000001c0)=@abs={0xa, 0x2}, 0x6e) r5 = socket$inet6(0xa, 0x2, 0x0) r6 = dup(r5) bind$unix(r6, &(0x7f0000000140)=@abs={0xa, 0x2, 0xfffffffd}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000de4266b4c01baa384d50ea00000000000000e1ffffff0000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x5, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 8.916446851s ago: executing program 2 (id=1953): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0200000004000000080000000800000000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fsetxattr$security_selinux(r0, &(0x7f0000000540), 0x0, 0x0, 0x3) 7.682163207s ago: executing program 2 (id=1954): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x11, 0xf, &(0x7f0000000a00)=ANY=[@ANYRESDEC=r0, @ANYRES8=r0], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x9a, &(0x7f0000000500)=ANY=[@ANYBLOB="000000000000ffffffffffff88470000020076b8b3d9026686ce565bba7af360c6897162d752e3b605b40a93d901c0b8635ee33d72122e992593a153c2a782dd3f26902a8f42038d5d4b1aefd4347c8931f700006d9f4d23be5a441355a87ecac39c941ad87fad0d98eafb1a8954649a240dd383c935124af72e2082f3a58d65befbf936455c6c97bccd43e58b5eaa12d7"], &(0x7f00000002c0)={0x1, 0x1, [0x816, 0xc40, 0x62d, 0x294]}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000"], 0x39) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001e00)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000700)=ANY=[@ANYRES32=r4, @ANYRES32=r0, @ANYRESOCT=r2, @ANYRES16=r2, @ANYRESDEC=r1, @ANYRESOCT], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5, 0x0, 0x3}, 0x18) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x5, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="23000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d000000"], &(0x7f0000000200)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x10000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r6}, 0x10) getgroups(0x1, &(0x7f0000000040)=[0x0]) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r7 = getpid() sched_setscheduler(r7, 0x2, 0x0) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000032680)=""/102400, 0x19000) r9 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r9, &(0x7f0000000100)={'syz0\x00', {0x0, 0x36df}, 0x7, [0x400, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x10, 0x0, 0x0, 0x8, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x4, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0xffffffff], [0x0, 0x0, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x44a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xa152, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x1, 0x0, 0xfdfffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c1e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1e00, 0x0, 0x10000000, 0x0, 0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x4, 0x0, 0x0, 0x0, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x10000, 0x7, 0x200, 0x0, 0x0, 0xd, 0x0, 0x0, 0x7, 0x0, 0xcb8], [0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x78a2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x7, 0x0, 0x0, 0xbace, 0xffffffff, 0x3, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}, 0x45c) ioctl$UI_DEV_SETUP(r9, 0x5501, 0x0) r10 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) ioctl$USBDEVFS_REAPURB(r10, 0x4008550c, 0x0) ioctl$USBDEVFS_SUBMITURB(r10, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20000009, 0x0, &(0x7f0000000240)={0x0, 0x0, 0xfffc, 0x360}, 0x8, 0x7, 0x80, 0x0, 0x1, 0x101, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffff12850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 4.545110167s ago: executing program 3 (id=1967): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002880)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x8000}}, 0x0, 0x0, 0x0) io_setup(0x6, &(0x7f0000002140)=0x0) io_submit(r6, 0x1, &(0x7f0000000280)=[&(0x7f0000000040)={0x0, 0x3000000, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x7ff, 0x0, 0x2}]) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x24008880) socket$inet_udp(0x2, 0x2, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 4.401949139s ago: executing program 7 (id=1969): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xe, 0x5, &(0x7f0000000c00)=@framed={{}, [@cb_func={0x18, 0x6, 0x4, 0x0, 0x4}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @sk_skb=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) socket$pppl2tp(0x18, 0x1, 0x1) socket$pppl2tp(0x18, 0x1, 0x1) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x10, &(0x7f00000004c0)={[{@i_version}, {@nodiscard}, {@min_batch_time={'min_batch_time', 0x3d, 0x3ff}}]}, 0x1, 0x3f7, &(0x7f0000003080)="$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") 4.233877312s ago: executing program 2 (id=1970): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYRESHEX, @ANYRES64=0x0], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYRES8=0x0, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000300)='./file1\x00', 0x10, &(0x7f0000000680), 0x1, 0x254, &(0x7f00000006c0)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) socket(0x10, 0x2, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'bridge0\x00'}) socket$netlink(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000280)) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70200001400f400b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x2d) sync() 3.499348572s ago: executing program 4 (id=1971): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18aa1a9ce993425ef90000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010005000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fsetxattr$system_posix_acl(r2, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f00000004c0)=ANY=[@ANYBLOB="020000"], 0xfe44, 0x0) 3.498643772s ago: executing program 6 (id=1972): openat$ptmx(0xffffffffffffff9c, 0x0, 0x40000, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000008000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x2, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000940)={{r1}, &(0x7f00000008c0), &(0x7f0000000900)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r2}, 0x18) r3 = socket$vsock_stream(0x28, 0x1, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x3, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002500)={{r5}, &(0x7f0000002480), &(0x7f00000024c0)=r4}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r5, &(0x7f0000000180), &(0x7f0000000040)=@udp6=r4, 0x1}, 0x20) connect$vsock_stream(r3, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) 3.372763224s ago: executing program 4 (id=1973): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) r2 = socket$inet6(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r3}, 0x10) sendto$inet6(r2, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) 3.119138337s ago: executing program 6 (id=1974): syz_emit_ethernet(0xfdef, 0x0, 0x0) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x202) r1 = getpid() userfaultfd(0x0) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) (async) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) mount$incfs(&(0x7f0000000b40)='./file0\x00', &(0x7f0000000b80)='.\x00', &(0x7f0000000bc0), 0x1, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) setrlimit(0x0, 0x0) (async) socket$key(0xf, 0x3, 0x2) (async) syz_open_procfs(r1, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$inet6_udp(0xa, 0x2, 0x0) (async) r6 = inotify_init1(0x0) inotify_add_watch(r6, &(0x7f00000000c0)='./file0\x00', 0x5200028d) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x20000, 0x104) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) (async) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) read$FUSE(r7, &(0x7f0000001280)={0x2020, 0x0, 0x0, 0x0}, 0x2020) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000380)={{{@in=@multicast2, @in=@dev={0xac, 0x14, 0x14, 0x24}, 0x4e21, 0x6, 0x4e24, 0x0, 0x2, 0x80, 0x20, 0x1d, 0x0, r8}, {0x8, 0x2, 0x9, 0x3, 0x0, 0x5, 0x9, 0x8}, {0x4, 0x9, 0x35, 0x6}, 0x1ff, 0x6e6bbd, 0x0, 0x0, 0x0, 0x3}, {{@in=@local, 0x4d5, 0x2b}, 0xa, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3507, 0x1, 0x0, 0xaa, 0xf, 0x3ff, 0x2}}, 0xe8) (async) ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'lo\x00'}) (async) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x404c4c1}, 0x0) 3.118450037s ago: executing program 3 (id=1975): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x222, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000004200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x3e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r2}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x1e6, 0x0, &(0x7f0000000980)="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", 0x0, 0x2f, 0xe8034000, 0x0, 0x6c, &(0x7f0000000000), &(0x7f00000000c0)="c6769e45b7c61302926682c7f9e9bb5ba2b3cdf023e8da0392a4cd62e2370f25ae5ba0dab896bcf5b774cd28bebbde39f796ae27d04582bb7c03e9fe830ea22c9fd03f6d2779515fdad3f5d0de07b7b70996102fdb67b1e77a34a5b7136a212fa2c0ea502588309dc3e42c55", 0x5dc}, 0x50) 3.117940607s ago: executing program 6 (id=1976): r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x50, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) read$FUSE(r3, &(0x7f00000047c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000002140)={0x50, 0x0, r4, {0x7, 0x27, 0x0, 0x1dd8a0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0xfffffb98}}, 0x50) read$FUSE(r3, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r3, &(0x7f0000008680)="b4b53918b2d3e41567caaf4a40bd0070fa730e5c4fb724862048e7f4565a6d7dd766badb0d4f446a32abffbaf736e8009c4633a0be35241f034b99e605c78212f62dccd38e0d148642585a0c519c2625af11e22a47958358b1d1e629f07d8a952d0d38407a20da1f5ead78ee41ca83173efa1406a286d3516b16b7b3261c6e4ff607d43b0d3cd60b7200322b83e1b5c8a63abcd8449aebc454d41c870a5018bb4f482b4d12a1572c2030a20de882f08183df9b17d05710c58e6905303f83f1832ea6badd66602a51b2701480f255dfe99e654b921a46838767704e6684e340567a91baf56e22198ceb2fd40e8a6089807f95f60da4aa4fb16ea127417b6be58ff57e794230f355cc207398463f727e4c18a748ccaf483f6d8b17c6b8b0a808768a03bfc932da5f1cb146ba2f4031c9ed3c6fb3442ee11976a0985a0220ba4ca51e2ed01c0bb76f37871651c9810c49bc8b8ce840649d0317a9a6e2d0c0593374141f09c03db906489bf42c55d81ef58ac1e574b0610b83aea7ea5384e02a8634de887ad5bab898b4e3a0a9c00c33c00fb8d6d54f89875b6ee5cfeb7286bee2af13c39a0fc09f7f96dce4e2d1195ea656772c9fc5a83f5616f88663f2ff95af70f530b8af78450ebd667ad4afb6577688d4eb05840947a6765a82852e0f96f5a670ab450beec5a9ea7ea0e58e05b20a572c0356df64829e948fb6f56b3359a09889b6b6222d0daa37505036165eb46781c63d4e3abbf2a89fc86c6dafe6d26e551d849b5564aa7b926b66b8be9256061aff88831c4f2b3f31ef25e7abe2621cd646a34f7bfb60badac46e368ce46396fdceab56a817a340a9a361e8d3cfccd5fe72c5a49a1349b26ae159f0228ec1ca2de8237c59776140269082e883af459ccdf07cc182ffa675b559a6a54bbac92b227b1229390aded89c007d87af878f46b63c84a9635d9e0d9ec640dc3d0eace492c0f6ede1a544f83067c30dd34fa3f3d464af6d19e5835eb4c47075a5bc82adee6b09375a364c9779d31d2efbcb25a76c90a92712c1df5218778dad0810c45e9ce02c8489a5da8afdbf9a28efdf1d6e5aa058506981bcafbfc532c4deee23da247825cd86793ed338a05681759a50379627801ab59ae5445b10dced5f05c5bc0dba6917b69be731e203b9cd3da1d2ad81abb97df13e68b72a61c434720c6ce29b6c3cb1f4264a12297becb0b2f7c9f28b7c47ee869c6d70611d3ca727454e18eea5ba9154e352b63d81a811a1ca97375531a8ecaf34d77df16d4bb229b57933d93ca4c0ef63191c164eb4a8c505076f49504c2f35f17a1660b3524609bcd14cd14324c50d0060b5b744a8119d964121f8b2cab72b9bac8c93249418e5f2452db5bad960cf256832069f17f556cf42b78c76e5dff113cf017a1a7ddd3a2f8c345f4265f8b19a1d4e38e862ff34c7f273725f7b3c4529247067e2a16c414d8674e5873f1ef9a8d7d2a7452824c3739d93cf5430d546cc88fb39b3750538cd10d80c822c0423fc405c9fde960bfcf5fa6c2cb9ff75067b45d2b082e848d2efab29da850298e274dcfd47e1572f67cbad056c52225fdf01d182627ab2030f675e4ab8c8cb81a978440d38cd8aec8dfab4a436724110f5fe5ee522a43a66a3f7d1b137ddb4c43cda73096d1655f7948cd14f797d8b20bb501ef3e18585408d299c053df5a6f447d93124bac19b2516d591cfbe97e7bfd856b2ca961035cba05e616f0a1b2e242e8cdbd31d160d18c72b8f121e317c5b5f759a1e8bad4462b020fa65339e9f1eead0ec6b01f7a12d65ca764370e3ecc8564fa7bb1479c49f0de1ab8434684d5de2892155d82af075bce5415ad995f459037d078c9617bbcde146218bfed98b8b0b926301ce57e171d15d747d68b5a93fc5034e59d32c8b9e1cc054974d593e891ae00642914babd727f05e06ca32d56b1a9e249bc279a5351e8aa6d17d911fa9d91dd50a22b9fc279d5f9ef47238e3801c8ebda01d15baeaf153b6c25f9f8af7abdd3040e8db71780876a5535cf05aa602a4929d6a314ac704016e6dbcb52e7f460662476fcd353738571c278284e32d90b4499242f668c36b64ed7f7478283ba22b0df04c3f22d6963796b6a0b208dd580609cc4068c837cd405e684ec3f26cbe7992b06c40550a68b78f44b67fcdd50f65e64c1e533eaae93616478695a8f9c9b6045f00bd8b61364f03a336fe1f78f88e16b57a6d43d5670113f715b2f6c37e6caf0d2cae0d129d24fdad02e4b87d9eda94de1c4c351ca15e92d3c0ceae5bd9e2518741362cbf650f33c6f6c89583b23f516d2533b7ec25ad64448d0a51cf13f170cbe1eb9e68a9bb1e7525ad67667561180fbd97bf34f4ad37ab769f3d077c5cea5d7eb320b6e0ecbfe27b5f159073f0b0e0c3d1244467b3a07fd85e893d1bdfa2d97fc161b293b106dbbfdf140d811788c5c221d0449e97a1d4f04d068da6d5c18260cce2f6bd1f0923f2b5881e3a00112f9486a6c6ce67e9cd93547644b8cb1077e395605dc39e90d7e5dae3aebcdc6c7335f181e33304bdcc3a5c7414ae4189a00dba7954807a06d4df6e5481507b809b7035892bc097be0dbf65224e04d36233cb88850a01f6133129920d5639188b3bbb7010bd329889314ca203a34d8a4695d6bd799be617a203b7ac9704aa819e660005d53aa01194682e4326770dd494299815a873d267083ed98163544c1b7e07e39db980afca471d4fb13872f9d863e7679f099192692ba06120df030acbb6be8a09523d7634830d3cb9e82f707933412c6ea84c34c5ba6ab2aecaa3db3f7a655324f77f3c3983836ddf88ee2b5621ab7ebe486ea33d8c140dd4cd221b6375df971ab7d34a73e168c37cad34fb6a41fa0b05feae3c73bb45bdeefb79e94a697aa82e5d655e310b4d8c145a29b41e24db416a29b93a4f2c3f501d8905c9f7d4cb97767de4b86dfa7b4d07aaf7ac5e6bcdda920b1f63564d5fbfc7437b540da0a29c93bf534b5f5f62f51bfecccfcbc9f77b117a7975c1dd3fb01977120834d765e9146862d2fd5f299960a660bbafe19e248b670b89a3b5ca674ebb1e0623890f97dbeb0f75e55e1ef0d045e1c1fc29aab5f0af56a5ac784a01082ed74d8db77f339cbcaaef253ceb6f107bb8e55c52f7f4b6c9b84caafb79d5d13d9b6fc1e75875e45bcef999094774037dde954b0a5c50f28da03b5aafa830d445fe4f4366df423df23d1cdbe902b44bdb4a7f06c1f392b8d097bf09565dc7d80c2024ab4b05cb2f496662dcf293a4472b16588b24e83c0ae0f016640dca2ca122dc413de3e6fd12afc850dc241c8d57ab2fda8a793498796c3a03c191ec31d625e4f8bd8eff538058da874c24e1b4350cfb4664848438fcf082f2db36443cd8c9bba93b3ffee8fdf4ad7d338d179c252e255491d4e41f6268e9ddd8d13e97eee1f7db3c4b51d3adb727a348b174308a9cbff2685654971de6ec06881787b0fe267ffa4c37e41bc6aee1ef2fdec4ed04ab7b6193228d3cac38a2c19228f3970615263a84c253fdc9f16ac9e0122abdfb494a6f04eb806d1d582d3502d7e3c9d758caf91453eef909723c6b8378fe5a69473ed7b22acd7e4cce84a6477c4a23934ee61535c44bfde5f547cc43179217b0087d9a57ed7874737b7e2c1c46a4426fea0655d3f0770d338a1d2999e77aaab58f4d3263e862a446805205ddf032f15a79c6935069114f4f4db6ade52a5569de0a214f3ab79905522f954d4292e2cfafaef546afdf2db396624eb3fd28c35996017edacd17816911b62efdaa72dd35262af71d285d6c5a9c462156d8531e4641e58e55470926e4dfcc1a7ef1a7703c7405f1cd920bf3e85670314b65ea0ca2afcaf54bc344b3f5953f24a2cc6f8ede6417b3af39f90ba1a50f0ba020bbc1543d66d0d61b22e7df64d57b0e7eab7a78781a506df813825b592dcd139321c7b30fb919c623be09dea86018e9e3ce7907894094cb8e315e6a3af6bdaae332eb5b9f4c3442682cb802c79d41f2c7bcec64544b783e81b0625cd04275173663bba8c04d7f52602f41699ad4c677d942184fefb3df9099422b9f97839c2eefdfa47dcca5f9cc5444fcca20e70dc00443f12d76fe2fcd9b4082c94fb8917140d63729fbc507816a981c37938678b3c1c855657b7243bcbdb4149318d9070a22c70035e0560582975df6e5c7d64ae3e8c484f46b26dd4be3475ca63db95366a2d25ba648704b56521744f0d8d8620c82aa26e46c6a73308bc22cb0e943bd572fe30cb40c8a6b45841d186e0a8eede3715f52b03534420c216df694968c78c3bff3dc0414380cb9c44daba0414533552a1bd2c5d98fb466fe07dacf8d894f47c7a8bb7eb204a228ee1b6e0aa2ddb750d2d7c9f270c686b805bc2a81f332672205f17ae8ae9eba7c2a011e80b4fd7778ee1a2d93008a4793a64e294bdcd73f4af0d89d81962d8a91bb66c1776d1c2ae3aa390337cbb2bb2e90a042e1bf67b350d7965aa136f39886bb14b4f645cde5adb7e518a613021bdb72e2a54fc2b1b0129a3b720af5c9a5a6a420585a146bdfe4fb54b85aafa7ea55eba8ac46337e84300d3d2e63ff8d7618037d4dafd5d20796f984a20a553eb6fb3580cada52278c60354604bde6eb4441480c2b3e67184167ca0d1933de04a794a3f178b4b42be5c53790a59495c38a8a164751d661b00a6a6b2f30500905069fc4b73501107291994036be8190cfda78aab1fd6f0eb12c1cb656871f9566b4db21fabc141aad7dd80b942b0758419ca2daec9b8e576e40e6cd7f6af203fe0cb390ad5d77ad82110a99b6ce3d4c1a516a52af2dd1abf4c1231869df26c12af918c319d0fb6e2bc60e159695a284fff4235b49a2097f015a7b0cc4fbafedae3219371e708438bae51b11738dd9f393557b0ab34c3f2488298955b38a62bdd45a3ee8d0bfefdeb099cec4a0d28400a8743f9ae873cc2d403f8873ff6ba4612e5a125886469c676743476c30ae9dd05cbf219352b85e60cada4d298aab7f3029a702f65da044186f23632eca42f989e4863ff299d6408bff0fce8abc8411bb730f6ed173ee8e8fb417ad3cc6d679c0555b59b608a70eda737f1444671b2aec0400663ad761e7b3cc095bffc30b94aa01ac39f93968c7a20891ef385e44613c9b4ebd0fd180311bd03200daa9837e2b10b7d1003b4d9ebde1d83b256b7ca8cc01804f722d7eba5bfb3c88cbd3e8922b6453e734322473d9267b98e5df8806680bb7f9df85cb963ce6245f6c87ada94ea72b5c1b559e2582af33d4353f068d633a27fbc933fe281763d21961f2342190486615a5a9482c0c09944308c8d89d37bbd705dfdcca3334e190171fcea1a297f9b516260c7c8c6a4c14fb2d85d6c2a0ec37310338a27a0f11dd75899c95a149d5cf4c224eb7b4aff8531fb7e625f1a0743a72e89edf09be0f2f1d0bb91f839e328b12ec1e22c460964b1032ded12bb7775091d981e2fa3566d3b55a48250115304548726615c800f433d36918f6e99852964f2a71ee1df288cdc97fddf2da25c625640561a7e1e2263a9d300af98d8432af7c89363d5d114f7b1872e3ed0c77a7792b006f9c8d6c8717f3df53f37df8df3f74e1f1463f2057ff862d11e7e14705ad92e57b1422057ccdf1ded779b1a85b5bbb0978cd4ca793bacc8b037c52a7b5a47aaaf605aa1dd886ea824118f64b89602a2f75a5b658d217aada9d6a5c9d2bdf324e82e649358e5c9ddc1a7d8e50c913ec349791b5475068256eba5ec955f56742e54f78c602389a322814fe5276a314b81ce13e966548c618bf896a259914b3d45a5b6b0d4afd98a31c775d80b2f944e39932bb8a2ba3deb740e07ca2877798e3e391df43c410b4fd4006c8552bbd333ba513aa2e382357619dab1280cd1e9188e801b1791c0256588503eeae4d3435f7d7f3ef3696f9d377640684bae2e08b6685314517d19163bf808e0ed910770db3026257505975e317b6eae79d7fa41938ae49b8e947b24637e57273237d95c3bd6466ac30f3377da79b6255a5c1602c5cf756178b2d7fcfe03807ac4854280417a728b160a6596152be6ad3435a9f70955c54e87fdcd36afd8a62a4d3675525bfb81919223059eec92489c4cc367c252f42d3bc14657a249d657448c2047df03176e4788f29d551fc245d358e9addb9b962640e4a9ff98ccfe09727a2e0711a93b1258ea0eeda14b872be19f57a670f6bf016bf26d63f9f0b3d17a31c8ebfa89c1c850bee54a2853d99d5a7112bfa09558a5dc759268c420f48c29db3f407917927c80b70894c1f6211a4878de0d9472116fab84fcde109065535313c31337164e7682b7b7da546be08a58f240a56c0801a182b57448c484c30acd47ff015f443a99d67aa71157bc514d84c98eaa2fac81e0b488e562dd5adb195f0dad871dcb69334b428daa99842c4251423f0cd53058744b61de8bd4c41a5b2e8cc239a145286a39309d6db5a980f7144ebd915e80b3acd3b1e9ffd4bcca09e3b6c2792372fa7101f64a81f47afa1e1c7f077a9f89a287b8e9668b0c0d43d3c548117fb07e92f081b671cb6a4666d4bf4c5cdc0a36816986ec32f4a77f0d3f04d6abe8e54440282cb06763f650dc59be1f912f6018dec954b0e26efd4ae5298271eb53fb32537c9f32da1eda40299b3e737c8a8dcebd493d5556d22ef3bda6f253a8725bde154d184e3f3ac994ae7d2d7b9b3ca1755f6c6abf08b32a286c5d0fabbe13d926693c446637b9ceee6f8422ca29e819edc455b1683acc86e00c903869acd1f9ad2bc0d42de882aa439b4364fd2ba63d762e7d84b85b93e6818d0d3ff259afd815668de940f93ccd4022c8c4f68713cd2c39c3e8cdbbb1c133f0a8294c1819cd24c71e6fd2e561da4e62ff644fccd54ee2f86bf9b4de378007fb74d2a1b187cc09fc3d9dc34f0c9027e3f1180af208890643d1787f73a87b42ec9111f5b1af37f5c812fbb9f1d1d149b7a97bc83e7e4bd9617bf9630809bddca820e5de57602277871652475e478ecf80c8726c2fb6ef9158a461493262ebd8599c155c8a8e23c8d106234c32f82db61faf464a0a19690aef713f75b2393b7d6618aef66785c6733da01b50092116f3b5b6de225b6eb931dc35b1e6defbeac36a896f621aa2ffac5a550cba0cfcc2b7fa5519167741540b0cc745d10c09130fa6ee57281062cc8bfca1353c92a00fd70bd60f7097c5b7d9b6e9436d99cdc1805af010c407e65807c6003e9fef137e22717571b7e647b65f057b975545c2bca567b1fd01c6da90a81633ae776f67bbac5a5cb711ae86c8248e479f7c5f23c0aa83028dda34935da1607d1215dd39520c39f0dfdf87002feb929bd4d5b9d68eab43ab604e3161f1465a736233f50c74b7eac49fed58e6f9d50f400fb8d25a44c293560093ebe0258281da5ad314aca942ad18d8622884c4a52267f26630ea773ae51475e222ef5db9330c2196e9a89a07d724283015c7aea53c82610dcef66bfc2d3838b97656911cbe7b788bf5a94c045e990cdbec9861bce597aa639c3bf0705eecb8b188c32f69582505751bc5adc17cd469e254c1d81be867603defbcd87c241b81bd9460fc11160b5f7b1768ac21147dba3aac11c42c5d7778696c75f37ab2b9ef2e89efe4d21fe9998fd7e01647e8ccbf28b7f450cf259afc0a1b55e948a98a5f10c1769c2eb2679898b91c73f373480904fe01bf8765594addd7ae6d52b4534cf7e95424f70a027eca378414e1aaa7eb2d138044e9a24428307b7514702ccd66417524f0e602ad035eb5628238b3bb50f2ac74e679540a49de8b9fef95e3cf1e9a01608a8cb82e11f43812243ee460ecb4607ec8cf252c7f39a097754228bcf28f90484f25cb8ed9cf454db5fcb49fa4686065e7f9b11fc4bafed171a59063e5976a006142c318d3ed5bb9e2002f9536b2caf1de0eda879ac7be473303ea1bdad1782b3515cc03b7695f06b08e32f23ded1c4da2c856c7e22e76f22c16aa83dfc4ed9bbe2e716a2175662f2dfddfcbd0566fddfae19955ca9598faffcd264fe4df8b74804d605ac79eba2b3cf52ea90ae6d679505317f5d522567aaccef3840c00fb4609758793e939e145c0eed8261b233f9fa33a62a167b48ce4398ca3a7b9a207b4286b2d50cb979837116edce3df04d84d497f3da2196272861d054b31959585fa1656e676102717ed9c1986c39e95aa314c2d289cf3cbcab6cd77da44bf1e1651b5134297607436154f6006b8aa5b768a1d4e65cb47ac199a005942c533904895e879c41bf2d957a8242ebe78c61e1c3eb583bac58f14d7d2f4d724958759a228ab111afc2e8460485f1a28125be09916c071a83d01766fcb02edc66bbba443bd5a5143cf43d7d7c3068aafb75fcc6d4f48a3b61bcdcdb156af7cea988d59299f474306aedad66b36cc6c9190324991639068a4c098b75b82975100a0669f57c28a765e6770fc8b029bc13cadbeb822cf6256fcf00d45afe4c083a8c75495132471b3240c213fa4a32c224962c061a658735df6195ae6fd817fcaf92bf4a08b747bfbe6c63ad28ee689805d5446839745718ba03143f7d57530407cc3bb77f9df28562f97573b5fefa8782fb571d2ae6b3b57576ad7dbe95a957c3d7d0a2f7067702feb792a0d1eabc2b414a3b7d0053f0f4c741dfa8e79373e07edcd12d77ea6bb7db1ccb9b736fc01e9380149e7d86af7d03d8a35cf1be59a77d72a91fc38d84c8c0071fc56b425b7b78d7ac41c1a2ba71b71087a32b9596896ee954ec9dcce920bcc9a0929779366cf12115b485b079e11daa176991dae4aa6887c61ba64d6795c7c5c29e7be1c10ca533e9d82ecfa9ad13e3095e7feb71946451c729c43e0ede3b12e757364ddd2a05f791dc4730e061b18eea1ca3a946052623e325be62695e3a8cdb805022a769e73f412cb19ebc783f1bbf8814d2bb57d14696531d990cb092f996b253da664187697f6fb079d099af7975be42f896c4c1fd9577986c6c658a8230260030ab962501c71e26cc9e6bdc204eb9c833ba10df5aa394dda1b95f5b29445126c0550c4db7c62bd08cac3e40aa598747e0473ec2de72f60399d8e3a67adfe7be46b559130818608864626b257482e15e0b48f0a8cb10b1cb1f2a56b3763e1d1daed78271fb4b36af882524cc14baed0fc7c6a8b54997afd70f618a91e0925d6e16cb872b8d45d0ad1254821998dd299b2b0f9e7360ee2d130375bdea082186dbaf531c8fda4d8dfeb9c84a40f7eec26ca044acd38dcd24753ca511cb9f3b50cf0f6f101f2a477d3cf769f4aa431850397997b874eda836a9d945225fb62b88393e8fce22ac31187f13bf7b8092cdf0b1a0e2a0cdfcb2d1a1f79502d9728d6f0875baba5aee04afdc20a14cc720309fff182c5a29e54bd0d56d8b5cd73fcd76a831ccc0e623c3dc0935ba74636f68c1a97ac55dd9886f45c8c3110f37b51e0e864167c93919fb9cdcb74f4e5a53f89e7c689d7831e4aa0f66ff666022b71453cb1b37893ae4491004bc13f198921f25b0918f565e4228c3201b3f004198b02d5dd0e55a29cae81536878d6563343c841cc7be49fad4ac095d31db1489385d486bf7a7877520a2b0d0cd752cce72ac4d1b7139c205e4c6eb59e8da8514e08a863ca30d36cee84252d4ee1dc2bce208cd2ab4b9d897e545edcaa48d30ba6de29331fb863dec5dc6d706528758066815aa73aad2f320e9d6f6568ef2fb8d67e9043d8fcae8985fd8fa0182584791c48e30184f7ae1de3e14c311467edcd9a2a180c1a781149a6a12fc6e92e6ca7897c8e24963889d067c77e07615e64c6df922bc9b0fbc4cc659f81fbf985cc188ad7460071c0628c7cf909409491cdad08b7af9ce28ffc379f902d1dc046b42807071dd87852c16e4de7826b2bd1c6f1adce346e6069ddc0e256df950cc5980ab9b20f80da40ea8399bc1ebae0e6b34df431bfbcbd121d2511235346dc09c00890c19bc54b3e74f5286d16dcffa2328a30c8fcafcf3f3aabd511a76737f0da79acecd994d034bc38066981a613679afa24f4076e4f63be566ddb5f2001f26a6c897967ebf4099f99ddb8bd9db7b0f716127eef059c7c662cd6e76d5af1fd932f37c2a56a5823b9d7565844e36a79424e6cc145e40885f990b25bb50ba7b3a2920f1f2dafa595ff50243a1bbd6b3b54581a31f0120d832aa4a3794f6f4359066df3bead35c7eb08949792a9a17559b3633151d7cd5c1d76117cb7e6db5ab95e4fa002a7911fb8328a8c4c9d83f676143824ee61a0e5346123aa8bb815c6c317fdf839e8cc0ab6476657d6b35bd62db9136c9aaa63a756e47c135389ea2fd5cc587d8e19864694952b6fb229c34d420bfb89e60e4d88b3d22339c96d52ae3ecbcbbc231405b8b4a52ede6143b91b37f4e3f4bfc2b69335d758e687bcea1ef9bdce4dfd45c3ea33f35b913e61324db34b0df26e0017566c80e193f8b5ca650a8dde30d750a619289cc469459d0be89a4ed127d0267f9b2b90a86b8b7593c546a5007ef9a3f12f961f77f511386f448abf496028424d680964c53c81aa80d5d0cbbad964d93acf3cb5394202dea85e6311ecec93f2863266748e922742c1c709c2cfac24535cc50a3b59f2b8e90b333876e869b81ec21930f1d93bac1386a2532d9da4b302f7e97f04c8eb188319642b89e78013f3a9c7df82bcf5d9d2ace1923633eaa2ab1c2409e351752c941e7bfd72d5002d1b0c0632cc34bb8ccfea1a017a130297be76a04a22201acc34993465306989f081747f96858785ae06407eb332aea5f430ad078db97114f5429dd0c237b2000db9f2e5f759048ef4754d3c1dcbebcf9e235b55db61b94ebad5b57ca784bea73d771fe553c461e610acd4fcb303ebce016506a457539701ed2198fb6040da048667e364ddfc7d5354314a61bef738c2c8044656f793427dfa1f5241dcf6de39c86a65a735598c10bf6dd095f18249af81fe4ab9fc4ddae6d70aad3b19583f90f2086be2ceaaedb5b7b490bee5ca76079767c4680891260357697eb206bb47cfa4d5007b0423a8423a87d6727a897d963d59bb84c0641a4faf8b5806a4f57795b2700739aa2b50195c07fec7da4d22e7b7ce3ac438cd58715910c6602e399ef16448a3ab117dccabc2e1fb5c5c6328a362cc9c3ab70cdd6e3909dc6e37c69f394067d7f3ec09dcc49edf6273ad2ab5301983f0877b22b8c6a8b7c28f480945c1dddbbc1f37feab72bc0d73e4386340d1bb333fd48a82a2d329c9c80cf1a708ab90b8083c8ba03a1eced74082a93e8ec74a5a421758399dabb4968f0dacbce996c2ef6aa2d7e9374b23b4746ccfbb37b58a6e839e43f9c2d1bdbb466ae4d2ba19d5f199764a94a9565c6adff3d029d73934f32801f236affefe17092b7e3f3aae59e4cfcddccddda7bdd83f4f8db184aca8df943d304d65bb20d2d6498467661198b38c22095ef63182615261d974919bf91f350165042e0902673b373eb2b6daf689d76bb611f90484dfc3199dcbde51f46c2222afda68d53edc5626e643e34c970c846bbd63f2b730e5fb6ea47bb141e45c9be1d73d7ef968ad4b6", 0x2000, &(0x7f0000006f00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002740)={0x78, 0x0, 0x40000000000000, {0x400, 0x8, 0x0, {0x0, 0xffffffffffffff31, 0x80000000, 0x8e1, 0x5, 0xffffffffffffffff, 0x1, 0x4, 0xfffffc01, 0x1000, 0xffffffff, r5, r6, 0xfffffffb, 0x5}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = socket$inet_udp(0x2, 0x2, 0x0) close(r9) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) r10 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r10, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$binfmt_misc(r8, &(0x7f0000000000), 0xfffffecc) splice(r7, 0x0, r9, 0x0, 0x4000, 0x0) mount$incfs(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x10000, &(0x7f0000000340)={[{@readahead={'readahead', 0x3d, 0x2}}, {@read_timeout_ms={'read_timeout_ms', 0x3d, 0xa}}, {@read_timeout_ms={'read_timeout_ms', 0x3d, 0xe}}, {@rlog_pages={'rlog_pages', 0x3d, 0x1}}, {@rlog_pages={'rlog_pages', 0x3d, 0x4}}], [{@smackfsfloor={'smackfsfloor', 0x3d, '{\\/\\/\x9b}'}}, {@fowner_lt={'fowner<', r5}}]}) 3.117308287s ago: executing program 3 (id=1977): bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r1}, 0x10) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~'], 0x1c}}, 0x4000054) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(0xffffffffffffffff, &(0x7f0000000500)={0xffffffffffffffff, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)={0x2c, r5, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0xb}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x49}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000800}, 0x4000) sendmsg$NL80211_CMD_GET_STATION(r3, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x34, r5, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x2}, @NL80211_ATTR_STA_FLAGS={0x8, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_MFP={0x4}]}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x10, 0xbd, [0x6, 0x4, 0x80, 0xb, 0xec, 0x7]}]}, 0x34}, 0x1, 0x0, 0x0, 0x8890}, 0x4000000) close(0xffffffffffffffff) execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) wait4(0x0, 0x0, 0x40000000, 0x0) r6 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$USBDEVFS_FORBID_SUSPEND(r6, 0x5521) setsockopt$CAN_RAW_ERR_FILTER(r6, 0x65, 0x2, &(0x7f0000000140)=0x4, 0x4) fsetxattr$trusted_overlay_origin(r0, &(0x7f0000000440), &(0x7f0000000540), 0x2, 0x0) r7 = socket(0x10, 0x3, 0x0) unshare(0x22020600) preadv2(r4, &(0x7f0000000640)=[{&(0x7f00000005c0)=""/67, 0x43}], 0x1, 0x10, 0x89a, 0x10) ioctl$FICLONERANGE(r7, 0x4020940d, &(0x7f0000000000)={{}, 0xf35c, 0x9, 0xfffffffffffffffc}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) socket$inet6_tcp(0xa, 0x1, 0x0) 3.116224647s ago: executing program 7 (id=1978): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)) ioctl$PPPIOCSACTIVE(r0, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) read(r0, 0x0, 0x38) pwrite64(r0, &(0x7f0000000340)="5da1", 0x4, 0x0) 3.094926167s ago: executing program 4 (id=1979): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}}) 2.065308102s ago: executing program 6 (id=1980): rt_sigqueueinfo(0x0, 0x9, &(0x7f000000df80)={0x0, 0x0, 0xffffffc0}) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') lseek(r0, 0x96, 0x1) 2.055145552s ago: executing program 6 (id=1981): socket$packet(0x11, 0x2, 0x300) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000e00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x31) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000000)='tlb_flush\x00', r0}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs2/binder1\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x7ff) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) fstat(r4, &(0x7f0000000440)) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) (fail_nth: 4) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r6, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x4008004) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r7, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000001200)=[{}], 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) getresuid(&(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000000400)=0x0) fchown(r3, r8, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) openat$sysfs(0xffffffffffffff9c, 0x0, 0x149a82, 0x185) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 1.928252244s ago: executing program 4 (id=1982): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}}) listxattr(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 1.925767434s ago: executing program 3 (id=1983): syslog(0x4, &(0x7f0000000a00)=""/4096, 0x1000) 1.922485924s ago: executing program 7 (id=1984): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_group_source_req(r2, 0x0, 0x2f, &(0x7f00000006c0)={0x0, {{0x2, 0x4e23, @loopback}}, {{0x2, 0x4e20, @loopback}}}, 0x108) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000002, 0x13, r1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x2f, &(0x7f0000000540)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xa947}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @ringbuf_query, @cb_func={0x18, 0x8, 0x4, 0x0, 0x2}, @map_val={0x18, 0x5, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}, @map_val={0x18, 0x0, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0xa642}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @exit, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @exit]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x2, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r5}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r6}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=@base={0x6, 0x4, 0x70be, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = socket$inet6(0xa, 0x3, 0x8) setsockopt$inet6_IPV6_RTHDR(r7, 0x29, 0x39, 0x0, 0x0) 1.921080224s ago: executing program 2 (id=1985): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="02000000040000000700000002", @ANYBLOB="09bce0f1e5a1305d3fca9ee8e64fd41f83235a53d4a6d3d3472d1d4aec6df8d19b323ccac0e11527f5d5ffa07c45cfc83724b2cb8174830682f2d21e188bafae1750a969d7a128db0413e7923f528969d3c41249ab616e8e12ac8f32816014dd5d66d6120cb4b5641858585c3bde6dafc71550711ab15cd503894e7ee254a2700c67b3e93a180de7ee04a9ed4478fe4891c46ba0a8cba4b9ab159e0bef336bc9b91c"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r4}, 0x10) timer_create(0x0, 0x0, &(0x7f0000000240)=0x0) ioctl$EVIOCGBITKEY(0xffffffffffffffff, 0x80404521, &(0x7f0000000bc0)=""/4096) timer_getoverrun(r5) sched_setscheduler(r2, 0x5, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f00000008c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x0, 0x42, 0x0) socket$inet6(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000440)=ANY=[], 0xfffffff4) r8 = socket$unix(0x1, 0x2, 0x0) r9 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r9, 0x65, 0x7, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) sendmsg$can_raw(r9, &(0x7f00000004c0)={&(0x7f00000005c0)={0x1d, r10}, 0x10, &(0x7f0000000500)={&(0x7f00000000c0)=@can={{}, 0x5, 0x0, 0x4, 0x0, '\b-\x00'}, 0x10}}, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="747266646e6f3d000000000000000002b6f45305880fc3615a32e5940587c509460bfe7fea71a3a95f517baa84df2f23ea87ee986d8acb1362d7510607e470c7e82aea6ffd9e5f66560acedebce5dc82f806b61793de34b4f883aa3314e9c86586f2c4ebba205fc3fe4acc7f3fc027504883", @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',\x00']) 1.909779464s ago: executing program 3 (id=1986): fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x80080, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000100000000000000000850000007d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='kmem_cache_free\x00', r4}, 0x18) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r7 = dup(r6) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) write$FUSE_BMAP(r7, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x4}}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r7, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000140), 0x8, &(0x7f0000000680)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) fchownat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xffd, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r9}, 0x10) unshare(0x62040200) 1.899130714s ago: executing program 4 (id=1987): r0 = socket$netlink(0x10, 0x3, 0x2) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, 0x0, 0x4000010) close(r0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYRESHEX, @ANYRES32=0x1, @ANYBLOB='\v\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sched_setscheduler(0x0, 0x6, 0x0) r2 = open(&(0x7f0000000040)='./bus\x00', 0x1612c2, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/timer_list\x00', 0x0, 0x0) rt_sigaction(0x7, &(0x7f00000000c0)={0x0, 0x80000004, &(0x7f0000000080)="c4a2312cb24441ede2c40225922c57c4417a7e4de9260f81ac4e2ae0670fc724628c120f5c243ec422ad3e6d00c4e22db7166467f36667ded9"}, 0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0700000004000000080000204000"], 0x50) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, 0x0) sendfile(r2, r3, 0x0, 0x4000000000010046) 1.597009768s ago: executing program 7 (id=1988): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x222, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000004200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x3e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r2}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x1e6, 0x0, &(0x7f0000000980)="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", 0x0, 0x2f, 0xe8034000, 0x0, 0x7e, &(0x7f0000000000), &(0x7f00000000c0)="c6769e45b7c61302926682c7f9e9bb5ba2b3cdf023e8da0392a4cd62e2370f25ae5ba0dab896bcf5b774cd28bebbde39f796ae27d04582bb7c03e9fe830ea22c9fd03f6d2779515fdad3f5d0de07b7b70996102fdb67b1e77a34a5b7136a212fa2c0ea502588309dc3e42c55a6f93e6ba5e1b492f9db48f0fdd2f9fb937b", 0x5dc}, 0x50) 1.578452779s ago: executing program 7 (id=1989): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xe, 0x5, &(0x7f0000000c00)=@framed={{}, [@cb_func={0x18, 0x6, 0x4, 0x0, 0x4}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @sk_skb=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) socket$pppl2tp(0x18, 0x1, 0x1) socket$pppl2tp(0x18, 0x1, 0x1) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x10, &(0x7f00000004c0)={[{@i_version}, {@nodiscard}, {@min_batch_time={'min_batch_time', 0x3d, 0x3ff}}]}, 0x1, 0x3f7, &(0x7f0000003080)="$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") 1.136765335s ago: executing program 6 (id=1990): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0]) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kfree\x00', r5}, 0x18) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000000040)={0x50, 0x0, r6, {0x7, 0x1f, 0x0, 0x490420, 0x2}}, 0x50) sched_setscheduler(r7, 0x5, &(0x7f0000000240)) openat(r3, &(0x7f0000000000)='./file0\x00', 0x8c01, 0x1) io_setup(0x2, &(0x7f0000000200)) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) r9 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r9, 0x65, 0x2, &(0x7f0000000000)=0x929, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r10}, 0x10) r11 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r11, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) bind$can_raw(r9, &(0x7f0000000040)={0x1d, r12}, 0x10) close_range(r8, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) 557.560663ms ago: executing program 4 (id=1991): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0]) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kfree\x00', r5}, 0x18) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000000040)={0x50, 0x0, r6, {0x7, 0x1f, 0x0, 0x490420, 0x2}}, 0x50) sched_setscheduler(r7, 0x5, &(0x7f0000000240)) openat(r3, &(0x7f0000000000)='./file0\x00', 0x8c01, 0x1) io_setup(0x2, &(0x7f0000000200)) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) r9 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r9, 0x65, 0x2, &(0x7f0000000000)=0x929, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r10}, 0x10) r11 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r11, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) bind$can_raw(r9, &(0x7f0000000040)={0x1d, r12}, 0x10) close_range(r8, 0xffffffffffffffff, 0x0) (fail_nth: 1) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) 556.661703ms ago: executing program 2 (id=1992): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000380)='sys_enter\x00', r1}, 0x10) io_getevents(0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x4e22, @private=0xa010102}, 0x10) io_setup(0x4, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0xd26, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xb, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r8}, 0x10) syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x101301) prctl$PR_GET_IO_FLUSHER(0x3a) r9 = socket(0x10, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYRES32=0x0, @ANYRESHEX=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) syz_mount_image$f2fs(&(0x7f0000000100), &(0x7f00000001c0)='./bus\x00', 0x0, &(0x7f0000000340)={[{@nodiscard}, {}, {@background_gc_on}, {@alloc_mode_reuse}, {@compress_chksum}, {@disable_roll_forward}, {@gc_merge}, {@nouser_xattr}, {@checkpoint_diasble}, {@user_xattr}, {@gc_merge}, {@adaptive_mode}, {@block_mode}, {@noinline_dentry}]}, 0x0, 0x5557, &(0x7f0000005c00)="$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") 429.939345ms ago: executing program 7 (id=1993): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0]) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kfree\x00', r4}, 0x18) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0x490420, 0x2}}, 0x50) sched_setscheduler(r6, 0x5, &(0x7f0000000240)) openat(r2, &(0x7f0000000000)='./file0\x00', 0x8c01, 0x1) io_setup(0x2, &(0x7f0000000200)) socket$inet(0x2, 0x4000000000000001, 0x0) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r7, 0xaf01, 0x0) r8 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r7, 0x4004af07, &(0x7f0000000240)=r8) ioctl$VHOST_SET_VRING_KICK(r7, 0x4008af20, &(0x7f00000003c0)={0x3, r8}) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)=ANY=[@ANYBLOB="400000001e0004000000000000000000e0000002000000000000000000000000000000000000000000000000000000000000000100"/64], 0x40}}, 0x0) ioctl$VHOST_SET_VRING_ADDR(r7, 0x4028af11, &(0x7f0000000280)={0x0, 0x1, 0x0, &(0x7f00000002c0)=""/100, &(0x7f0000000500)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r7, 0x4008af03, &(0x7f0000000e40)) ioctl$VHOST_SET_VRING_ADDR(r7, 0x4028af11, &(0x7f0000000080)={0x0, 0x1, 0x0, &(0x7f00000009c0)=""/251, 0x0, 0x4000}) ioctl$VHOST_VSOCK_SET_RUNNING(r7, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$VHOST_SET_LOG_BASE(r7, 0x4008af04, &(0x7f0000000200)=0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x1200000, &(0x7f0000000940)={[{@usrjquota}, {}, {@sysvgroups}, {@discard}, {@noblock_validity}, {@noquota}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x1, 0x57e, &(0x7f0000001b40)="$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") r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) write$binfmt_script(r10, &(0x7f0000000000), 0x208e24b) 0s ago: executing program 3 (id=1994): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89101) fstatfs(r1, &(0x7f0000000140)=""/15) syz_pidfd_open(r0, 0x0) capset(&(0x7f0000000180)={0x19980330, r0}, &(0x7f00000001c0)={0x7, 0x7fffffff, 0xc495, 0x401, 0x6, 0x6}) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000990371e85a0406a65b726056143e084050dd79d38e45540758df214d08a84eaed5901f7cadba09e46a16679d24222f82da42f100df4168ba87aac00cbea052fcfb337ea5986695aa6ea080530792b2bcdc3d8c1b85eeac084cb4ae", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r5}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x19, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r6}, 0x10) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180), 0x40010) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r7, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) kernel console output (not intermixed with test programs): to 131072 [ 577.379865][ T5492] I/O error, dev loop2, sector 130944 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 577.461917][ T5593] FAULT_INJECTION: forcing a failure. [ 577.461917][ T5593] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 577.483349][ T5593] CPU: 1 PID: 5593 Comm: syz.3.1541 Not tainted 6.1.134-syzkaller-00039-g3c6d0251e1fb #0 [ 577.493193][ T5593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 577.503264][ T5593] Call Trace: [ 577.506556][ T5593] [ 577.509513][ T5593] __dump_stack+0x21/0x24 [ 577.513867][ T5593] dump_stack_lvl+0xee/0x150 [ 577.518481][ T5593] ? __cfi_dump_stack_lvl+0x8/0x8 [ 577.523524][ T5593] dump_stack+0x15/0x24 [ 577.527700][ T5593] should_fail_ex+0x3d4/0x520 [ 577.532393][ T5593] should_fail+0xb/0x10 [ 577.536562][ T5593] should_fail_usercopy+0x1a/0x20 [ 577.541608][ T5593] _copy_to_user+0x1e/0x90 [ 577.546038][ T5593] simple_read_from_buffer+0xe9/0x160 [ 577.551435][ T5593] proc_fail_nth_read+0x19a/0x210 [ 577.552148][ T28] audit: type=1400 audit(1748184158.611:371): avc: denied { write } for pid=5568 comm="syz.2.1534" dev="sockfs" ino=32917 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 577.556479][ T5593] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 577.583352][ T5593] ? security_file_permission+0x94/0xb0 [ 577.588919][ T5593] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 577.594495][ T5593] vfs_read+0x26e/0x8c0 [ 577.598663][ T5593] ? __cfi_vfs_read+0x10/0x10 [ 577.603344][ T5593] ? __kasan_check_write+0x14/0x20 [ 577.608458][ T5593] ? mutex_lock+0x8d/0x1a0 [ 577.612877][ T5593] ? __cfi_mutex_lock+0x10/0x10 [ 577.617731][ T5593] ? __fdget_pos+0x2cd/0x380 [ 577.622326][ T5593] ? ksys_read+0x71/0x240 [ 577.626669][ T5593] ksys_read+0x140/0x240 [ 577.630916][ T5593] ? __cfi_ksys_read+0x10/0x10 [ 577.635698][ T5593] ? fpregs_restore_userregs+0x128/0x260 [ 577.641326][ T5593] __x64_sys_read+0x7b/0x90 [ 577.645827][ T5593] x64_sys_call+0x2f/0x9a0 [ 577.650237][ T5593] do_syscall_64+0x4c/0xa0 [ 577.654651][ T5593] ? clear_bhb_loop+0x15/0x70 [ 577.659321][ T5593] ? clear_bhb_loop+0x15/0x70 [ 577.663993][ T5593] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 577.669886][ T5593] RIP: 0033:0x7f9e13f8d37c [ 577.674307][ T5593] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 577.693919][ T5593] RSP: 002b:00007f9e14e11030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 577.702346][ T5593] RAX: ffffffffffffffda RBX: 00007f9e141b5fa0 RCX: 00007f9e13f8d37c [ 577.710316][ T5593] RDX: 000000000000000f RSI: 00007f9e14e110a0 RDI: 0000000000000004 [ 577.718281][ T5593] RBP: 00007f9e14e11090 R08: 0000000000000000 R09: 0000000000000000 [ 577.726249][ T5593] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 577.734213][ T5593] R13: 0000000000000000 R14: 00007f9e141b5fa0 R15: 00007fffeaf4a9b8 [ 577.742180][ T5593] [ 577.746971][ T5596] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1542'. [ 577.758071][ T28] audit: type=1400 audit(1748184158.611:372): avc: denied { setattr } for pid=5568 comm="syz.2.1534" name="AF_VSOCK" dev="sockfs" ino=32917 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 577.771115][ T5596] loop5: detected capacity change from 0 to 4096 [ 577.788199][ T5600] incfs: Can't find or create .index dir in ./file0 [ 577.795320][ T28] audit: type=1400 audit(1748184158.611:373): avc: denied { bind } for pid=5568 comm="syz.2.1534" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 577.833432][ T5600] incfs: mount failed -14 [ 577.862105][ T28] audit: type=1400 audit(1748184158.611:374): avc: denied { listen } for pid=5568 comm="syz.2.1534" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 577.883298][ T5596] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 577.892900][ T5596] EXT4-fs (loop5): unmounting filesystem. [ 577.897927][ T5608] loop2: detected capacity change from 0 to 512 [ 577.901170][ T28] audit: type=1400 audit(1748184158.611:375): avc: denied { ioctl } for pid=5568 comm="syz.2.1534" path="socket:[32917]" dev="sockfs" ino=32917 ioctlcmd=0x5451 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 577.912430][ T5608] /dev/loop2: Can't open blockdev [ 577.980554][ T5492] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 578.390972][ T5618] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 578.408762][ T5619] loop5: detected capacity change from 0 to 4096 [ 578.411879][ T5618] tipc: Enabled bearer , priority 10 [ 578.428251][ T5619] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 578.496415][ T5625] loop6: detected capacity change from 0 to 128 [ 578.669293][ T5619] devpts: called with bogus options [ 578.733647][ T5625] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 578.743832][ T5625] ext4 filesystem being mounted at /87/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 579.076982][ T5618] loop4: detected capacity change from 0 to 128 [ 579.205638][ T5618] /dev/loop4: Can't open blockdev [ 579.375430][ T5629] loop2: detected capacity change from 0 to 256 [ 579.509621][ T513] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 579.551056][ T5492] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 579.562569][ T3969] EXT4-fs (loop6): unmounting filesystem. [ 579.694340][ T5634] syz.6.1552 uses obsolete (PF_INET,SOCK_PACKET) [ 579.712674][ T5634] overlayfs: missing 'lowerdir' [ 579.720604][ T513] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 579.734429][ T513] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 579.787151][ T513] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 579.843813][ T513] usb 6-1: config 0 descriptor?? [ 580.142423][ T513] usbhid 6-1:0.0: can't add hid device: -71 [ 580.149875][ T513] usbhid: probe of 6-1:0.0 failed with error -71 [ 580.159743][ T513] usb 6-1: USB disconnect, device number 3 [ 580.362186][ T5646] loop6: detected capacity change from 0 to 128 [ 580.414812][ T5646] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 580.452070][ T5646] ext4 filesystem being mounted at /89/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 580.563386][ T5656] loop2: detected capacity change from 0 to 16 [ 580.612943][ T5656] erofs: (device loop2): mounted with root inode @ nid 36. [ 580.650751][ T3468] EXT4-fs (loop5): unmounting filesystem. [ 580.966438][ T5669] input: syz0 as /devices/virtual/input/input53 [ 581.078036][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 581.078054][ T28] audit: type=1400 audit(1748184162.141:382): avc: denied { read } for pid=5657 comm="syz.2.1561" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 581.447311][ T5675] loop4: detected capacity change from 0 to 512 [ 581.454711][ T5675] EXT4-fs: Ignoring removed i_version option [ 581.461063][ T5675] /dev/loop4: Can't open blockdev [ 581.662681][ T5492] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 581.712372][ T5678] netlink: 'syz.3.1566': attribute type 25 has an invalid length. [ 581.720287][ T5678] netlink: 'syz.3.1566': attribute type 7 has an invalid length. [ 582.435391][ T5680] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1567'. [ 582.759206][ T4426] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 582.772818][ T5689] input: syz0 as /devices/virtual/input/input54 [ 582.908151][ T5680] loop3: detected capacity change from 0 to 40427 [ 582.915561][ T5680] F2FS-fs (loop3): Unrecognized mount option "nodisca#rd" or missing value [ 582.925768][ T28] audit: type=1400 audit(1748184164.001:383): avc: denied { ioctl } for pid=5691 comm="syz.2.1571" path="socket:[33053]" dev="sockfs" ino=33053 ioctlcmd=0x8919 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 582.950249][ T4426] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 582.979090][ T4426] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 582.990087][ T28] audit: type=1400 audit(1748184164.051:384): avc: denied { write } for pid=5679 comm="syz.3.1567" name="mcfilter" dev="proc" ino=4026532678 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 583.031349][ T4426] usb 5-1: config 1 has no interface number 0 [ 583.052024][ T4426] usb 5-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 583.100867][ T4426] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 583.130610][ T4426] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 583.155027][ T4426] usb 5-1: Product: syz [ 583.169232][ T4426] usb 5-1: Manufacturer: syz [ 583.183666][ T4426] usb 5-1: SerialNumber: syz [ 583.202279][ T4426] cdc_ncm 5-1:1.1: NCM or ECM functional descriptors missing [ 583.226946][ T4426] cdc_ncm 5-1:1.1: bind() failure [ 583.232998][ T3969] EXT4-fs (loop6): unmounting filesystem. [ 583.282209][ T28] audit: type=1400 audit(1748184164.351:385): avc: denied { read } for pid=88 comm="acpid" name="event6" dev="devtmpfs" ino=1392 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 583.305463][ T5700] 9pnet_fd: Insufficient options for proto=fd [ 583.326471][ T28] audit: type=1400 audit(1748184164.351:386): avc: denied { open } for pid=88 comm="acpid" path="/dev/input/event6" dev="devtmpfs" ino=1392 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 583.350490][ T28] audit: type=1400 audit(1748184164.351:387): avc: denied { ioctl } for pid=88 comm="acpid" path="/dev/input/event6" dev="devtmpfs" ino=1392 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 583.501378][ T5706] loop2: detected capacity change from 0 to 2048 [ 583.511095][ T5706] /dev/loop2: Can't open blockdev [ 583.829962][ T5492] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 583.869204][ T5708] loop4: detected capacity change from 0 to 256 [ 583.889202][ T5708] exfat: Unknown parameter 'iochar' [ 586.387570][ T513] usb 5-1: USB disconnect, device number 6 [ 586.625491][ T5719] loop6: detected capacity change from 0 to 512 [ 586.633122][ T5719] EXT4-fs: Ignoring removed i_version option [ 586.695946][ T5719] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 588.786923][ T5727] loop3: detected capacity change from 0 to 512 [ 588.793492][ T5727] EXT4-fs: Ignoring removed i_version option [ 588.803240][ T5728] loop2: detected capacity change from 0 to 512 [ 588.809799][ T5728] EXT4-fs: Ignoring removed i_version option [ 588.815853][ T5728] /dev/loop2: Can't open blockdev [ 588.870366][ T3969] EXT4-fs (loop6): unmounting filesystem. [ 588.905710][ T5733] process 'syz.4.1582' launched '/dev/fd/11' with NULL argv: empty string added [ 589.366910][ T5727] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 589.397907][ T28] audit: type=1400 audit(1748184170.461:388): avc: denied { execute } for pid=5730 comm="syz.4.1582" dev="tmpfs" ino=1849 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 589.600219][ T28] audit: type=1400 audit(1748184170.491:389): avc: denied { execute_no_trans } for pid=5730 comm="syz.4.1582" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=1849 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 589.700841][ T5741] loop6: detected capacity change from 0 to 512 [ 589.707407][ T5741] EXT4-fs: Ignoring removed i_version option [ 589.737492][ T288] EXT4-fs (loop3): unmounting filesystem. [ 589.851022][ T5741] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 590.848602][ T3969] EXT4-fs (loop6): unmounting filesystem. [ 590.919726][ T5756] netlink: 576 bytes leftover after parsing attributes in process `syz.4.1587'. [ 590.967712][ T5756] loop4: detected capacity change from 0 to 512 [ 590.975564][ T5756] /dev/loop4: Can't open blockdev [ 592.360055][ T5766] fuse: Unknown parameter 'kr' [ 592.367526][ T5766] loop4: detected capacity change from 0 to 16 [ 592.388768][ T5766] erofs: Unknown parameter '9Χxëcœ' [ 592.402564][ T28] audit: type=1400 audit(1748184173.431:390): avc: denied { mounton } for pid=5764 comm="syz.4.1591" path="/304/file0" dev="tmpfs" ino=1703 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 592.784113][ T28] audit: type=1400 audit(1748184173.431:391): avc: denied { getopt } for pid=5764 comm="syz.4.1591" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 593.801258][ T5794] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1598'. [ 593.919470][ T5799] loop5: detected capacity change from 0 to 512 [ 593.926922][ T5799] EXT4-fs: Ignoring removed i_version option [ 594.283030][ T5799] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 594.953838][ T3468] EXT4-fs (loop5): unmounting filesystem. [ 595.612218][ T28] audit: type=1400 audit(1748184176.681:392): avc: denied { sqpoll } for pid=5826 comm="syz.5.1609" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 595.633807][ T5828] input: syz0 as /devices/virtual/input/input55 [ 596.466346][ T28] audit: type=1400 audit(1748184177.531:393): avc: denied { setopt } for pid=5887 comm="syz.2.1612" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 596.926433][ T5903] fuse: Unknown parameter 'ff' [ 596.936790][ T5904] 9pnet_fd: Insufficient options for proto=fd [ 596.980479][ T5905] 9pnet_fd: Insufficient options for proto=fd [ 597.011474][ T5906] loop5: detected capacity change from 0 to 512 [ 597.018833][ T5906] EXT4-fs: Ignoring removed i_version option [ 597.292278][ T5906] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 597.361928][ T28] audit: type=1400 audit(1748184178.431:394): avc: denied { read } for pid=5908 comm="syz.3.1616" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 597.792265][ T5917] loop6: detected capacity change from 0 to 1024 [ 597.829498][ T5917] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 597.842403][ T5917] ext4 filesystem being mounted at /103/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 597.880068][ T5917] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.1618: bg 0: block 393: padding at end of block bitmap is not set [ 597.911192][ T5917] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 319 with max blocks 1 with error 117 [ 597.941786][ T5917] EXT4-fs (loop6): This should not happen!! Data will be lost [ 597.941786][ T5917] [ 597.969065][ T5920] overlayfs: './file1' not a directory [ 597.994732][ T3969] EXT4-fs (loop6): unmounting filesystem. [ 598.020149][ T3468] EXT4-fs (loop5): unmounting filesystem. [ 598.091757][ T5922] loop6: detected capacity change from 0 to 512 [ 598.105354][ T5928] loop5: detected capacity change from 0 to 1024 [ 598.114956][ T5924] loop4: detected capacity change from 0 to 1024 [ 598.122998][ T5922] EXT4-fs: Ignoring removed mblk_io_submit option [ 598.130145][ T5922] EXT4-fs: Ignoring removed bh option [ 598.136432][ T5924] /dev/loop4: Can't open blockdev [ 598.141862][ T5922] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 598.154368][ T5922] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 598.177822][ T5928] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 598.193876][ T5492] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 598.209294][ T5922] EXT4-fs (loop6): 1 truncate cleaned up [ 598.224869][ T28] audit: type=1400 audit(1748184179.291:395): avc: denied { bind } for pid=5929 comm="syz.2.1623" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 598.263182][ T5922] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 598.285386][ T28] audit: type=1400 audit(1748184179.351:396): avc: denied { setattr } for pid=5925 comm="syz.5.1620" name="work" dev="loop5" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 598.324861][ T3468] EXT4-fs error (device loop5): ext4_lookup:1862: inode #2: comm syz-executor: deleted inode referenced: 11 [ 598.927099][ T3468] EXT4-fs error (device loop5): ext4_lookup:1862: inode #2: comm syz-executor: deleted inode referenced: 11 [ 599.278144][ T28] audit: type=1400 audit(1748184179.351:397): avc: denied { write } for pid=5925 comm="syz.5.1620" name="work" dev="loop5" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 599.278828][ T5946] FAULT_INJECTION: forcing a failure. [ 599.278828][ T5946] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 599.303891][ T5948] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1627'. [ 599.333879][ T28] audit: type=1400 audit(1748184179.351:398): avc: denied { add_name } for pid=5925 comm="syz.5.1620" name="#b" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 599.344403][ T5946] CPU: 1 PID: 5946 Comm: syz.3.1629 Not tainted 6.1.134-syzkaller-00039-g3c6d0251e1fb #0 [ 599.363683][ T5946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 599.376791][ T5946] Call Trace: [ 599.380075][ T5946] [ 599.383003][ T5946] __dump_stack+0x21/0x24 [ 599.387334][ T5946] dump_stack_lvl+0xee/0x150 [ 599.391921][ T5946] ? __cfi_dump_stack_lvl+0x8/0x8 [ 599.396946][ T5946] ? kasan_save_stack+0x4c/0x60 [ 599.401792][ T5946] ? kasan_save_stack+0x3a/0x60 [ 599.406631][ T5946] ? __kasan_record_aux_stack+0xb6/0xc0 [ 599.412172][ T5946] ? call_rcu+0xd4/0xf90 [ 599.416410][ T5946] ? __fput+0x66a/0x8f0 [ 599.420554][ T5946] ? ____fput+0x15/0x20 [ 599.424710][ T5946] dump_stack+0x15/0x24 [ 599.428863][ T5946] should_fail_ex+0x3d4/0x520 [ 599.433537][ T5946] should_fail_alloc_page+0x61/0x90 [ 599.438730][ T5946] prepare_alloc_pages+0x148/0x5f0 [ 599.443838][ T5946] ? __alloc_pages_bulk+0x9c0/0x9c0 [ 599.449035][ T5946] __alloc_pages+0x115/0x3a0 [ 599.453620][ T5946] ? __cfi___alloc_pages+0x10/0x10 [ 599.458731][ T5946] ? __kasan_check_read+0x11/0x20 [ 599.463774][ T5946] ? call_rcu+0xb83/0xf90 [ 599.468100][ T5946] __folio_alloc+0x12/0x40 [ 599.472512][ T5946] handle_mm_fault+0x18ef/0x2640 [ 599.477447][ T5946] ? __cfi_handle_mm_fault+0x10/0x10 [ 599.482726][ T5946] ? lock_vma_under_rcu+0x3eb/0x4d0 [ 599.487925][ T5946] ? ksys_read+0x71/0x240 [ 599.492249][ T5946] ? ksys_read+0x110/0x240 [ 599.496667][ T5946] do_user_addr_fault+0x905/0x1050 [ 599.501778][ T5946] exc_page_fault+0x51/0xb0 [ 599.506276][ T5946] asm_exc_page_fault+0x27/0x30 [ 599.511131][ T5946] RIP: 0033:0x7f9e13f3bf6b [ 599.515543][ T5946] Code: c0 8b 87 c0 00 00 00 66 0f 6c c0 85 c0 0f 85 44 01 00 00 c7 87 c0 00 00 00 ff ff ff ff 48 8d 84 24 20 21 00 00 48 8d 7c 24 20 <0f> 29 44 24 40 49 89 e4 48 89 44 24 50 8b 43 74 48 89 9c 24 00 01 [ 599.535143][ T5946] RSP: 002b:00007f9e14e0ee10 EFLAGS: 00010246 [ 599.541202][ T5946] RAX: 00007f9e14e10f30 RBX: 00007f9e14183620 RCX: 0000000000000000 [ 599.549166][ T5946] RDX: 00007f9e14e10f78 RSI: 00007f9e13fedbf8 RDI: 00007f9e14e0ee30 [ 599.557137][ T5946] RBP: 0000000000000009 R08: 0000000000000000 R09: 0000000000000000 [ 599.565099][ T5946] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 599.573061][ T5946] R13: 0000000000000000 R14: 00007f9e141b5fa0 R15: 00007fffeaf4a9b8 [ 599.581026][ T5946] [ 599.592097][ T28] audit: type=1400 audit(1748184179.351:399): avc: denied { remove_name } for pid=5925 comm="syz.5.1620" name="#b" dev="loop5" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 599.622812][ T5953] loop4: detected capacity change from 0 to 128 [ 599.629839][ T5953] /dev/loop4: Can't open blockdev [ 599.632025][ T28] audit: type=1400 audit(1748184179.351:400): avc: denied { rename } for pid=5925 comm="syz.5.1620" name="#b" dev="loop5" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 599.658433][ T5951] input: syz0 as /devices/virtual/input/input56 [ 599.666813][ T3468] EXT4-fs (loop5): unmounting filesystem. [ 599.674807][ T28] audit: type=1400 audit(1748184179.351:401): avc: denied { unlink } for pid=5925 comm="syz.5.1620" name="#b" dev="loop5" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 599.761142][ T5946] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 599.890386][ T5956] loop4: detected capacity change from 0 to 256 [ 599.929441][ T3969] EXT4-fs (loop6): unmounting filesystem. [ 600.028192][ T5492] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 600.361211][ T5967] FAULT_INJECTION: forcing a failure. [ 600.361211][ T5967] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 600.399189][ T5967] CPU: 1 PID: 5967 Comm: syz.3.1635 Not tainted 6.1.134-syzkaller-00039-g3c6d0251e1fb #0 [ 600.409039][ T5967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 600.419109][ T5967] Call Trace: [ 600.422396][ T5967] [ 600.425331][ T5967] __dump_stack+0x21/0x24 [ 600.429679][ T5967] dump_stack_lvl+0xee/0x150 [ 600.434278][ T5967] ? __cfi_dump_stack_lvl+0x8/0x8 [ 600.439314][ T5967] ? detach_entity_load_avg+0x790/0x790 [ 600.444877][ T5967] dump_stack+0x15/0x24 [ 600.449044][ T5967] should_fail_ex+0x3d4/0x520 [ 600.453818][ T5967] should_fail_alloc_page+0x61/0x90 [ 600.459036][ T5967] prepare_alloc_pages+0x148/0x5f0 [ 600.464169][ T5967] ? __alloc_pages_bulk+0x9c0/0x9c0 [ 600.469396][ T5967] __alloc_pages+0x115/0x3a0 [ 600.474002][ T5967] ? __cfi___alloc_pages+0x10/0x10 [ 600.479136][ T5967] ? avc_policy_seqno+0x1b/0x70 [ 600.484025][ T5967] get_zeroed_page+0x19/0x40 [ 600.488630][ T5967] simple_transaction_get+0x4d/0x150 [ 600.493932][ T5967] ? selinux_transaction_write+0xa6/0x170 [ 600.499669][ T5967] selinux_transaction_write+0xd2/0x170 [ 600.505228][ T5967] ? __cfi_selinux_transaction_write+0x10/0x10 [ 600.511394][ T5967] vfs_write+0x40c/0xca0 [ 600.515650][ T5967] ? tracing_record_taskinfo_sched_switch+0x80/0x3a0 [ 600.522339][ T5967] ? __cfi_vfs_write+0x10/0x10 [ 600.527119][ T5967] ? __kasan_check_write+0x14/0x20 [ 600.532244][ T5967] ? mutex_lock+0x8d/0x1a0 [ 600.536675][ T5967] ? __cfi_mutex_lock+0x10/0x10 [ 600.541544][ T5967] ? __fdget_pos+0x2cd/0x380 [ 600.546147][ T5967] ? ksys_write+0x71/0x240 [ 600.550582][ T5967] ksys_write+0x140/0x240 [ 600.554923][ T5967] ? __cfi_ksys_write+0x10/0x10 [ 600.559791][ T5967] ? debug_smp_processor_id+0x17/0x20 [ 600.565179][ T5967] __x64_sys_write+0x7b/0x90 [ 600.569787][ T5967] x64_sys_call+0x27b/0x9a0 [ 600.574299][ T5967] do_syscall_64+0x4c/0xa0 [ 600.578726][ T5967] ? clear_bhb_loop+0x15/0x70 [ 600.583414][ T5967] ? clear_bhb_loop+0x15/0x70 [ 600.588108][ T5967] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 600.594021][ T5967] RIP: 0033:0x7f9e13f8e969 [ 600.598444][ T5967] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 600.618067][ T5967] RSP: 002b:00007f9e14e11038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 600.626495][ T5967] RAX: ffffffffffffffda RBX: 00007f9e141b5fa0 RCX: 00007f9e13f8e969 [ 600.634475][ T5967] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 600.642449][ T5967] RBP: 00007f9e14e11090 R08: 0000000000000000 R09: 0000000000000000 [ 600.650449][ T5967] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 600.658448][ T5967] R13: 0000000000000000 R14: 00007f9e141b5fa0 R15: 00007fffeaf4a9b8 [ 600.666455][ T5967] [ 600.716996][ T5968] loop6: detected capacity change from 0 to 512 [ 600.724429][ T5968] EXT4-fs: Ignoring removed i_version option [ 600.871784][ T5968] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 600.911050][ T5971] netlink: 'syz.4.1636': attribute type 25 has an invalid length. [ 600.967872][ T5971] netlink: 'syz.4.1636': attribute type 7 has an invalid length. [ 601.223028][ T5965] bridge0: port 1(bridge_slave_0) entered blocking state [ 601.239191][ T5965] bridge0: port 1(bridge_slave_0) entered disabled state [ 601.252772][ T5965] device bridge_slave_0 entered promiscuous mode [ 601.270049][ T5965] bridge0: port 2(bridge_slave_1) entered blocking state [ 601.278990][ T3969] EXT4-fs (loop6): unmounting filesystem. [ 601.291654][ T5965] bridge0: port 2(bridge_slave_1) entered disabled state [ 601.343944][ T5965] device bridge_slave_1 entered promiscuous mode [ 602.729499][ T5984] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1640'. [ 602.899192][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 602.899221][ T28] audit: type=1400 audit(1748184183.941:407): avc: denied { read } for pid=5977 comm="syz.6.1638" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 603.604711][ T1006] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 603.648583][ T1006] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 603.796059][ T1006] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 603.936971][ T5992] FAULT_INJECTION: forcing a failure. [ 603.936971][ T5992] name failslab, interval 1, probability 0, space 0, times 0 [ 603.949723][ T5992] CPU: 0 PID: 5992 Comm: syz.6.1643 Not tainted 6.1.134-syzkaller-00039-g3c6d0251e1fb #0 [ 603.959545][ T5992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 603.969617][ T5992] Call Trace: [ 603.972901][ T5992] [ 603.975840][ T5992] __dump_stack+0x21/0x24 [ 603.980189][ T5992] dump_stack_lvl+0xee/0x150 [ 603.984888][ T5992] ? __cfi_dump_stack_lvl+0x8/0x8 [ 603.989940][ T5992] ? __cfi_vfs_write+0x10/0x10 [ 603.994718][ T5992] dump_stack+0x15/0x24 [ 603.998890][ T5992] should_fail_ex+0x3d4/0x520 [ 604.003616][ T5992] __should_failslab+0xac/0xf0 [ 604.008391][ T5992] ? __se_sys_memfd_create+0xf2/0x3b0 [ 604.013778][ T5992] should_failslab+0x9/0x20 [ 604.018299][ T5992] __kmem_cache_alloc_node+0x3d/0x2c0 [ 604.023684][ T5992] ? ksys_write+0x1eb/0x240 [ 604.028200][ T5992] ? __se_sys_memfd_create+0xf2/0x3b0 [ 604.033811][ T5992] __kmalloc+0xa1/0x1e0 [ 604.037978][ T5992] ? strnlen_user+0x10d/0x190 [ 604.042671][ T5992] __se_sys_memfd_create+0xf2/0x3b0 [ 604.047886][ T5992] __x64_sys_memfd_create+0x5b/0x70 [ 604.053102][ T5992] x64_sys_call+0x235/0x9a0 [ 604.057623][ T5992] do_syscall_64+0x4c/0xa0 [ 604.062056][ T5992] ? clear_bhb_loop+0x15/0x70 [ 604.066743][ T5992] ? clear_bhb_loop+0x15/0x70 [ 604.071432][ T5992] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 604.077345][ T5992] RIP: 0033:0x7f1b9778e969 [ 604.081773][ T5992] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 604.101398][ T5992] RSP: 002b:00007f1b98524e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 604.109826][ T5992] RAX: ffffffffffffffda RBX: 00000000000002a2 RCX: 00007f1b9778e969 [ 604.117807][ T5992] RDX: 00007f1b98524ef0 RSI: 0000000000000000 RDI: 00007f1b97811444 [ 604.125783][ T5992] RBP: 0000200000001140 R08: 00007f1b98524bb7 R09: 00007f1b98524e40 [ 604.133762][ T5992] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000600 [ 604.141755][ T5992] R13: 00007f1b98524ef0 R14: 00007f1b98524eb0 R15: 0000200000000b80 [ 604.149743][ T5992] [ 604.456462][ T1006] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 604.546045][ T1006] bridge0: port 1(bridge_slave_0) entered blocking state [ 604.553141][ T1006] bridge0: port 1(bridge_slave_0) entered forwarding state [ 604.599287][ T1006] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 604.625871][ T1006] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 604.652899][ T1006] bridge0: port 2(bridge_slave_1) entered blocking state [ 604.660016][ T1006] bridge0: port 2(bridge_slave_1) entered forwarding state [ 604.718465][ T1006] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 604.738838][ T1006] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 604.827456][ T1006] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 604.850597][ T1006] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 604.868979][ T1006] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 605.137930][ T1006] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 605.173279][ T6014] loop2: detected capacity change from 0 to 512 [ 605.180232][ T6014] EXT4-fs: Ignoring removed i_version option [ 605.186444][ T6014] /dev/loop2: Can't open blockdev [ 605.261037][ T5492] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 605.280314][ T1006] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 605.363391][ T1006] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 605.488146][ T1006] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 605.522232][ T1006] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 605.529904][ T1006] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 605.538652][ T5965] device veth0_vlan entered promiscuous mode [ 607.039301][ T28] audit: type=1326 audit(1748184188.091:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6016 comm="syz.6.1651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b9778e969 code=0x7ffc0000 [ 607.084141][ T5840] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 607.095569][ T5840] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 607.116936][ T28] audit: type=1326 audit(1748184188.091:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6016 comm="syz.6.1651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b9778e969 code=0x7ffc0000 [ 607.160882][ T5965] device veth1_macvtap entered promiscuous mode [ 607.207812][ T28] audit: type=1326 audit(1748184188.091:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6016 comm="syz.6.1651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1b9778e969 code=0x7ffc0000 [ 607.233792][ T28] audit: type=1326 audit(1748184188.091:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6016 comm="syz.6.1651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b9778e969 code=0x7ffc0000 [ 607.257283][ T28] audit: type=1326 audit(1748184188.091:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6016 comm="syz.6.1651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b9778e969 code=0x7ffc0000 [ 607.280922][ T28] audit: type=1326 audit(1748184188.091:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6016 comm="syz.6.1651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f1b9778e969 code=0x7ffc0000 [ 607.282228][ T5897] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 607.313293][ T5897] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 607.321801][ T5897] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 607.330255][ T5897] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 607.471681][ T6027] loop4: detected capacity change from 0 to 512 [ 607.479334][ T6027] EXT4-fs: Ignoring removed i_version option [ 607.485675][ T6027] /dev/loop4: Can't open blockdev [ 607.595915][ T5492] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 608.286792][ T28] audit: type=1326 audit(1748184188.091:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6016 comm="syz.6.1651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b9778e969 code=0x7ffc0000 [ 608.338852][ T28] audit: type=1326 audit(1748184188.091:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6016 comm="syz.6.1651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b9778e969 code=0x7ffc0000 [ 608.389507][ T28] audit: type=1326 audit(1748184188.091:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6016 comm="syz.6.1651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=200 compat=0 ip=0x7f1b9778e969 code=0x7ffc0000 [ 608.438567][ T28] audit: type=1326 audit(1748184188.091:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6016 comm="syz.6.1651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1b9772ab39 code=0x7ffc0000 [ 608.484433][ T28] audit: type=1326 audit(1748184188.091:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6016 comm="syz.6.1651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b9778e969 code=0x7ffc0000 [ 608.547890][ T28] audit: type=1326 audit(1748184188.091:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6016 comm="syz.6.1651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b9778e969 code=0x7ffc0000 [ 608.695113][ T6041] netlink: 96 bytes leftover after parsing attributes in process `syz.6.1656'. [ 608.706781][ T28] audit: type=1400 audit(1748184188.491:420): avc: denied { mounton } for pid=5965 comm="syz-executor" path="/root/syzkaller.0WRntD/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 608.764233][ T28] audit: type=1400 audit(1748184188.821:421): avc: denied { write } for pid=6032 comm="syz.7.1641" name="rtc0" dev="devtmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 608.803400][ T6047] netlink: 68 bytes leftover after parsing attributes in process `syz.7.1658'. [ 610.896784][ T6074] loop6: detected capacity change from 0 to 256 [ 610.919872][ T6074] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 610.940719][ T6077] FAULT_INJECTION: forcing a failure. [ 610.940719][ T6077] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 610.954017][ T6074] exFAT-fs (loop6): Medium has reported failures. Some data may be lost. [ 610.961956][ T6063] loop7: detected capacity change from 0 to 40427 [ 610.962880][ T6077] CPU: 1 PID: 6077 Comm: syz.2.1669 Not tainted 6.1.134-syzkaller-00039-g3c6d0251e1fb #0 [ 610.978738][ T6077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 610.988805][ T6077] Call Trace: [ 610.992182][ T6077] [ 610.995130][ T6077] __dump_stack+0x21/0x24 [ 610.999478][ T6077] dump_stack_lvl+0xee/0x150 [ 611.004261][ T6077] ? __cfi_dump_stack_lvl+0x8/0x8 [ 611.009308][ T6077] dump_stack+0x15/0x24 [ 611.013473][ T6077] should_fail_ex+0x3d4/0x520 [ 611.018174][ T6077] should_fail+0xb/0x10 [ 611.022337][ T6077] should_fail_usercopy+0x1a/0x20 [ 611.027467][ T6077] _copy_to_user+0x1e/0x90 [ 611.031887][ T6077] simple_read_from_buffer+0xe9/0x160 [ 611.037264][ T6077] proc_fail_nth_read+0x19a/0x210 [ 611.042291][ T6077] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 611.047841][ T6077] ? security_file_permission+0x94/0xb0 [ 611.053388][ T6077] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 611.058931][ T6077] vfs_read+0x26e/0x8c0 [ 611.063085][ T6077] ? __cfi_vfs_read+0x10/0x10 [ 611.067763][ T6077] ? __kasan_check_write+0x14/0x20 [ 611.072874][ T6077] ? mutex_lock+0x8d/0x1a0 [ 611.077291][ T6077] ? __cfi_mutex_lock+0x10/0x10 [ 611.082140][ T6077] ? __fdget_pos+0x2cd/0x380 [ 611.086727][ T6077] ? ksys_read+0x71/0x240 [ 611.091056][ T6077] ksys_read+0x140/0x240 [ 611.095295][ T6077] ? __cfi_ksys_read+0x10/0x10 [ 611.100063][ T6077] ? do_user_addr_fault+0x9ac/0x1050 [ 611.105344][ T6077] ? debug_smp_processor_id+0x17/0x20 [ 611.110713][ T6077] __x64_sys_read+0x7b/0x90 [ 611.115216][ T6077] x64_sys_call+0x2f/0x9a0 [ 611.119627][ T6077] do_syscall_64+0x4c/0xa0 [ 611.124041][ T6077] ? clear_bhb_loop+0x15/0x70 [ 611.128718][ T6077] ? clear_bhb_loop+0x15/0x70 [ 611.133385][ T6077] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 611.139277][ T6077] RIP: 0033:0x7fae0fb8d37c [ 611.143685][ T6077] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 611.163288][ T6077] RSP: 002b:00007fae0f9ff030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 611.171697][ T6077] RAX: ffffffffffffffda RBX: 00007fae0fdb5fa0 RCX: 00007fae0fb8d37c [ 611.179673][ T6077] RDX: 000000000000000f RSI: 00007fae0f9ff0a0 RDI: 0000000000000003 [ 611.187639][ T6077] RBP: 00007fae0f9ff090 R08: 0000000000000000 R09: 0000000000000000 [ 611.195607][ T6077] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 611.203573][ T6077] R13: 0000000000000001 R14: 00007fae0fdb5fa0 R15: 00007ffe59ffbda8 [ 611.211541][ T6077] [ 611.225121][ T6063] F2FS-fs (loop7): Unrecognized mount option "" or missing value [ 611.228359][ T6074] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 611.237890][ T103] udevd[103]: worker [5492] terminated by signal 33 (Unknown signal 33) [ 611.262305][ T103] udevd[103]: worker [5492] failed while handling '/devices/virtual/block/loop7' [ 611.284099][ T6081] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1671'. [ 611.644057][ T6092] input: syz0 as /devices/virtual/input/input58 [ 612.786522][ T6097] syz.4.1676[6097] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 612.786611][ T6097] syz.4.1676[6097] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 612.819051][ T6082] loop3: detected capacity change from 0 to 40427 [ 612.837444][ T28] audit: type=1400 audit(1748184193.901:422): avc: denied { mounton } for pid=6096 comm="syz.4.1676" path="/326/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 612.904335][ T28] audit: type=1400 audit(1748184193.931:423): avc: denied { mount } for pid=6096 comm="syz.4.1676" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 612.963196][ T6082] F2FS-fs (loop3): Found nat_bits in checkpoint [ 613.058702][ T6108] loop7: detected capacity change from 0 to 256 [ 613.285180][ T6082] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 613.359287][ T1786] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 613.579708][ T1786] usb 8-1: Using ep0 maxpacket: 8 [ 613.588880][ T1786] usb 8-1: unable to get BOS descriptor or descriptor too short [ 613.657388][ T1786] usb 8-1: config 0 has an invalid interface number: 88 but max is 0 [ 613.679356][ T1786] usb 8-1: config 0 has no interface number 0 [ 613.693860][ T1786] usb 8-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 613.719259][ T1786] usb 8-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 613.730077][ T1786] usb 8-1: config 0 interface 88 has no altsetting 0 [ 613.737476][ T288] syz-executor: attempt to access beyond end of device [ 613.737476][ T288] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 613.770625][ T1786] usb 8-1: string descriptor 0 read error: -22 [ 613.776869][ T1786] usb 8-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 613.792369][ T1786] usb 8-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 613.804647][ T1786] usb 8-1: config 0 descriptor?? [ 613.818216][ T1786] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.88/input/input59 [ 613.949729][ T5285] udevd[5285]: Error opening device "/dev/input/event3": Input/output error [ 613.955819][ T6118] loop4: detected capacity change from 0 to 1024 [ 613.959058][ T5285] udevd[5285]: Unable to EVIOCGABS device "/dev/input/event3" [ 613.968849][ T6118] EXT4-fs: Ignoring removed orlov option [ 613.972725][ T5285] udevd[5285]: Unable to EVIOCGABS device "/dev/input/event3" [ 614.021519][ T6105] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 614.030229][ T6105] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 614.042595][ T6119] loop6: detected capacity change from 0 to 512 [ 614.049199][ T6119] EXT4-fs: Ignoring removed i_version option [ 614.159807][ T6118] /dev/loop4: Can't open blockdev [ 614.181084][ T6119] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 615.169293][ T3969] EXT4-fs (loop6): unmounting filesystem. [ 616.665474][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 616.665495][ T28] audit: type=1400 audit(1748184196.707:426): avc: denied { write } for pid=6124 comm="syz.6.1683" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 616.737286][ T889] usb 8-1: USB disconnect, device number 2 [ 616.904739][ T6136] syz.3.1678[6136] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 616.904817][ T6136] syz.3.1678[6136] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 617.570524][ T6151] input: syz0 as /devices/virtual/input/input60 [ 618.240814][ T6172] loop7: detected capacity change from 0 to 512 [ 618.351643][ T6175] loop3: detected capacity change from 0 to 512 [ 618.360311][ T28] audit: type=1400 audit(1748184199.397:427): avc: denied { create } for pid=6166 comm="syz.3.1693" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 618.389753][ T6175] EXT4-fs (loop3): Test dummy encryption mode enabled [ 618.396599][ T6175] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 618.432949][ T6172] EXT4-fs (loop7): Test dummy encryption mode enabled [ 618.567920][ T6172] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 618.603213][ T6175] EXT4-fs (loop3): 1 truncate cleaned up [ 618.608949][ T6175] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 618.779297][ T6175] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 618.893381][ T28] audit: type=1400 audit(1748184199.547:428): avc: denied { setattr } for pid=6169 comm="syz.4.1694" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 619.429645][ T6172] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00cc018, mo2=0002] [ 619.440510][ T6172] System zones: 1-12 [ 619.468091][ T6172] EXT4-fs (loop7): 1 truncate cleaned up [ 619.487788][ T6172] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 619.498770][ T288] EXT4-fs (loop3): unmounting filesystem. [ 619.622814][ T6189] loop3: detected capacity change from 0 to 512 [ 619.640394][ T6189] EXT4-fs: Ignoring removed oldalloc option [ 619.650695][ T6189] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 619.697371][ T6189] EXT4-fs (loop3): orphan cleanup on readonly fs [ 619.724914][ T6189] Quota error (device loop3): do_check_range: Getting block 196613 out of range 1-5 [ 619.775936][ T6189] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 619.785875][ T6189] EXT4-fs error (device loop3): ext4_acquire_dquot:6789: comm syz.3.1698: Failed to acquire dquot type 1 [ 619.808366][ T6189] EXT4-fs (loop3): 1 truncate cleaned up [ 619.817896][ T6189] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 619.841200][ T6189] loop3: Can't mount, would change RO state [ 619.879743][ T6191] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 619.888684][ T28] audit: type=1326 audit(1748184200.957:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6198 comm="syz.6.1701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b9778e969 code=0x7ffc0000 [ 620.014344][ T288] EXT4-fs (loop3): unmounting filesystem. [ 620.028127][ T28] audit: type=1326 audit(1748184200.997:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6198 comm="syz.6.1701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f1b9778e969 code=0x7ffc0000 [ 620.059240][ T28] audit: type=1326 audit(1748184200.997:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6198 comm="syz.6.1701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b9778e969 code=0x7ffc0000 [ 620.089248][ T28] audit: type=1326 audit(1748184200.997:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6198 comm="syz.6.1701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1b9778d2d0 code=0x7ffc0000 [ 620.356059][ T28] audit: type=1326 audit(1748184200.997:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6198 comm="syz.6.1701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b9778e969 code=0x7ffc0000 [ 620.383166][ T6210] loop3: detected capacity change from 0 to 512 [ 620.383971][ T6206] device bridge1 entered promiscuous mode [ 620.419243][ T6210] EXT4-fs (loop3): Test dummy encryption mode enabled [ 620.441017][ T6210] EXT4-fs error (device loop3): ext4_find_inline_data_nolock:164: inode #12: comm syz.3.1703: inline data xattr refers to an external xattr inode [ 620.461141][ T5965] EXT4-fs (loop7): unmounting filesystem. [ 620.470051][ T6210] EXT4-fs (loop3): Remounting filesystem read-only [ 620.477780][ T6210] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.1703: couldn't read orphan inode 12 (err -117) [ 620.526690][ T6210] EXT4-fs (loop3): Remounting filesystem read-only [ 620.538608][ T6210] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 621.831587][ T6226] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1707'. [ 623.383570][ T288] EXT4-fs (loop3): unmounting filesystem. [ 624.120008][ T6257] loop6: detected capacity change from 0 to 512 [ 624.155107][ T6256] input: syz0 as /devices/virtual/input/input62 [ 624.162651][ T6257] EXT4-fs error (device loop6): ext4_xattr_inode_iget:404: comm syz.6.1717: inode #1: comm syz.6.1717: iget: illegal inode # [ 624.234912][ T6257] EXT4-fs (loop6): Remounting filesystem read-only [ 624.256274][ T6268] loop2: detected capacity change from 0 to 256 [ 625.399931][ T6257] EXT4-fs error (device loop6): ext4_xattr_inode_iget:409: comm syz.6.1717: error while reading EA inode 1 err=-117 [ 625.795132][ T6257] EXT4-fs (loop6): Remounting filesystem read-only [ 625.811132][ T6257] EXT4-fs warning (device loop6): ext4_expand_extra_isize_ea:2809: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 625.854599][ T6257] EXT4-fs error (device loop6): ext4_xattr_inode_iget:404: comm syz.6.1717: inode #1: comm syz.6.1717: iget: illegal inode # [ 625.896249][ T6257] EXT4-fs (loop6): Remounting filesystem read-only [ 625.918009][ T6257] EXT4-fs error (device loop6): ext4_xattr_inode_iget:409: comm syz.6.1717: error while reading EA inode 1 err=-117 [ 625.965155][ T6257] EXT4-fs (loop6): Remounting filesystem read-only [ 625.992769][ T6257] EXT4-fs (loop6): 1 orphan inode deleted [ 626.011579][ T6257] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 626.067461][ T3969] EXT4-fs (loop6): unmounting filesystem. [ 626.466366][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 626.466393][ T28] audit: type=1400 audit(1748184207.527:439): avc: denied { create } for pid=6283 comm="syz.6.1724" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 626.495214][ T28] audit: type=1400 audit(1748184207.537:440): avc: denied { write } for pid=6283 comm="syz.6.1724" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 627.065125][ T28] audit: type=1400 audit(1748184207.537:441): avc: denied { name_bind } for pid=6283 comm="syz.6.1724" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 627.253095][ T6300] loop4: detected capacity change from 0 to 128 [ 627.343385][ T6305] loop3: detected capacity change from 0 to 256 [ 628.450194][ T6313] loop7: detected capacity change from 0 to 256 [ 628.605678][ T6327] syz.4.1738[6327] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 628.605757][ T6327] syz.4.1738[6327] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 628.640182][ T6327] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1738'. [ 628.679801][ T6327] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1738'. [ 629.053674][ T313] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 629.144188][ T6332] loop3: detected capacity change from 0 to 1024 [ 629.172719][ T6128] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 629.250221][ T313] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 629.260948][ T313] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 629.270073][ T313] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 629.298623][ T28] audit: type=1400 audit(1748184210.367:442): avc: denied { wake_alarm } for pid=6341 comm="syz.2.1744" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 629.337686][ T6343] loop3: detected capacity change from 0 to 256 [ 629.344176][ T6343] exfat: Unknown parameter '' [ 629.398702][ T313] usb 8-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5 [ 629.427978][ T6128] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 629.456791][ T313] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 629.466922][ T313] usb 8-1: Product: syz [ 629.473035][ T313] usb 8-1: Manufacturer: syz [ 629.480389][ T313] usb 8-1: SerialNumber: syz [ 629.486009][ T313] usb 8-1: config 0 descriptor?? [ 629.695919][ T313] usb 8-1: USB disconnect, device number 3 [ 630.030716][ T6357] loop3: detected capacity change from 0 to 512 [ 630.068928][ T6362] FAULT_INJECTION: forcing a failure. [ 630.068928][ T6362] name failslab, interval 1, probability 0, space 0, times 0 [ 630.081961][ T6362] CPU: 1 PID: 6362 Comm: syz.4.1751 Not tainted 6.1.134-syzkaller-00039-g3c6d0251e1fb #0 [ 630.091789][ T6362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 630.101857][ T6362] Call Trace: [ 630.104079][ T6357] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 630.105140][ T6362] [ 630.105151][ T6362] __dump_stack+0x21/0x24 [ 630.119668][ T6357] ext4 filesystem being mounted at /346/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 630.121261][ T6362] dump_stack_lvl+0xee/0x150 [ 630.136345][ T6362] ? __cfi_dump_stack_lvl+0x8/0x8 [ 630.141393][ T6362] dump_stack+0x15/0x24 [ 630.144186][ T6357] EXT4-fs (loop3): unmounting filesystem. [ 630.145565][ T6362] should_fail_ex+0x3d4/0x520 [ 630.155956][ T6362] __should_failslab+0xac/0xf0 [ 630.160737][ T6362] should_failslab+0x9/0x20 [ 630.165262][ T6362] slab_pre_alloc_hook+0x30/0x1e0 [ 630.170304][ T6362] kmem_cache_alloc_lru+0x49/0x280 [ 630.175428][ T6362] ? __d_alloc+0x34/0x6c0 [ 630.179770][ T6362] __d_alloc+0x34/0x6c0 [ 630.183947][ T6362] ? current_time+0x197/0x2b0 [ 630.188635][ T6362] d_alloc_pseudo+0x1d/0x70 [ 630.193155][ T6362] alloc_file_pseudo+0xc8/0x1f0 [ 630.198009][ T6362] ? __cfi_alloc_file_pseudo+0x10/0x10 [ 630.203466][ T6362] ? shmem_get_inode+0x807/0xc20 [ 630.208406][ T6362] ? __kasan_check_write+0x14/0x20 [ 630.213519][ T6362] ? clear_nlink+0x8a/0xe0 [ 630.217935][ T6362] __shmem_file_setup+0x1df/0x2b0 [ 630.222955][ T6362] shmem_file_setup+0x2f/0x40 [ 630.227808][ T6362] __se_sys_memfd_create+0x1e6/0x3b0 [ 630.233100][ T6362] __x64_sys_memfd_create+0x5b/0x70 [ 630.238300][ T6362] x64_sys_call+0x235/0x9a0 [ 630.242798][ T6362] do_syscall_64+0x4c/0xa0 [ 630.247216][ T6362] ? clear_bhb_loop+0x15/0x70 [ 630.251885][ T6362] ? clear_bhb_loop+0x15/0x70 [ 630.256557][ T6362] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 630.262539][ T6362] RIP: 0033:0x7ff313d8e969 [ 630.266948][ T6362] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 630.286547][ T6362] RSP: 002b:00007ff314bd6e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 630.294975][ T6362] RAX: ffffffffffffffda RBX: 00000000000001f0 RCX: 00007ff313d8e969 [ 630.302943][ T6362] RDX: 00007ff314bd6ef0 RSI: 0000000000000000 RDI: 00007ff313e11444 [ 630.310908][ T6362] RBP: 0000200000000900 R08: 00007ff314bd6bb7 R09: 00007ff314bd6e40 [ 630.318872][ T6362] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000140 [ 630.326839][ T6362] R13: 00007ff314bd6ef0 R14: 00007ff314bd6eb0 R15: 00002000000001c0 [ 630.334812][ T6362] [ 630.464378][ T6373] loop3: detected capacity change from 0 to 512 [ 630.491205][ T6373] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 630.503780][ T6373] EXT4-fs (loop3): 1 truncate cleaned up [ 630.509767][ T6373] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 630.612395][ T6377] loop4: detected capacity change from 0 to 256 [ 630.679170][ T6378] overlayfs: './file1' not a directory [ 630.812746][ T6128] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 630.825173][ T288] EXT4-fs (loop3): unmounting filesystem. [ 630.868163][ T6385] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1757'. [ 630.896431][ T6382] 9pnet_fd: Insufficient options for proto=fd [ 630.941397][ T6385] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1757'. [ 631.038828][ T6399] fuse: Bad value for 'rootmode' [ 631.039470][ T6402] netlink: 'syz.3.1763': attribute type 3 has an invalid length. [ 631.103096][ T6387] loop4: detected capacity change from 0 to 40427 [ 631.118562][ T28] audit: type=1400 audit(1748184212.187:443): avc: denied { remount } for pid=6404 comm="syz.2.1764" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 631.149957][ T6128] I/O error, dev loop4, sector 40192 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 631.203299][ T6387] FAULT_INJECTION: forcing a failure. [ 631.203299][ T6387] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 631.226655][ T6387] CPU: 0 PID: 6387 Comm: syz.4.1758 Not tainted 6.1.134-syzkaller-00039-g3c6d0251e1fb #0 [ 631.236495][ T6387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 631.246567][ T6387] Call Trace: [ 631.249861][ T6387] [ 631.252805][ T6387] __dump_stack+0x21/0x24 [ 631.257157][ T6387] dump_stack_lvl+0xee/0x150 [ 631.261766][ T6387] ? __cfi_dump_stack_lvl+0x8/0x8 [ 631.266816][ T6387] ? mutex_unlock+0x89/0x220 [ 631.271430][ T6387] dump_stack+0x15/0x24 [ 631.275602][ T6387] should_fail_ex+0x3d4/0x520 [ 631.280295][ T6387] should_fail+0xb/0x10 [ 631.284469][ T6387] should_fail_usercopy+0x1a/0x20 [ 631.289506][ T6387] strncpy_from_user+0x24/0x2d0 [ 631.294384][ T6387] ? getname_flags+0xb9/0x500 [ 631.299079][ T6387] getname_flags+0xf4/0x500 [ 631.303600][ T6387] __x64_sys_mkdirat+0x7c/0xa0 [ 631.308388][ T6387] x64_sys_call+0x73d/0x9a0 [ 631.312905][ T6387] do_syscall_64+0x4c/0xa0 [ 631.317342][ T6387] ? clear_bhb_loop+0x15/0x70 [ 631.322128][ T6387] ? clear_bhb_loop+0x15/0x70 [ 631.326818][ T6387] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 631.332735][ T6387] RIP: 0033:0x7ff313d8e969 [ 631.337159][ T6387] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 631.356782][ T6387] RSP: 002b:00007ff314bd7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 631.365211][ T6387] RAX: ffffffffffffffda RBX: 00007ff313fb5fa0 RCX: 00007ff313d8e969 [ 631.373197][ T6387] RDX: 0000000000000010 RSI: 0000200000002040 RDI: ffffffffffffff9c [ 631.381188][ T6387] RBP: 00007ff314bd7090 R08: 0000000000000000 R09: 0000000000000000 [ 631.389174][ T6387] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 631.397159][ T6387] R13: 0000000000000000 R14: 00007ff313fb5fa0 R15: 00007ffd67c3dfa8 [ 631.405142][ T6387] [ 631.409299][ T513] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 631.428340][ T6417] loop6: detected capacity change from 0 to 128 [ 631.455603][ T6417] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 631.465664][ T28] audit: type=1400 audit(1748184212.537:444): avc: denied { read write } for pid=6420 comm="syz.4.1769" name="uhid" dev="devtmpfs" ino=267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 631.483432][ T6417] ext4 filesystem being mounted at /129/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 631.509835][ T28] audit: type=1400 audit(1748184212.537:445): avc: denied { open } for pid=6420 comm="syz.4.1769" path="/dev/uhid" dev="devtmpfs" ino=267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 631.549261][ T28] audit: type=1400 audit(1748184212.577:446): avc: denied { map } for pid=6422 comm="syz.4.1770" path="socket:[35459]" dev="sockfs" ino=35459 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 631.556105][ T6415] loop7: detected capacity change from 0 to 40427 [ 631.573423][ T28] audit: type=1400 audit(1748184212.577:447): avc: denied { mount } for pid=6422 comm="syz.4.1770" name="/" dev="configfs" ino=13527 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 631.580379][ T6415] F2FS-fs (loop7): fault_injection options not supported [ 631.610076][ T6415] F2FS-fs (loop7): invalid crc value [ 631.632592][ T6415] F2FS-fs (loop7): Found nat_bits in checkpoint [ 631.660903][ T513] usb 4-1: Using ep0 maxpacket: 8 [ 631.674050][ T513] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 631.674619][ T6415] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 631.682558][ T513] usb 4-1: config 179 has no interface number 0 [ 631.696305][ T513] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 64, changing to 10 [ 631.707848][ T513] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 1029, setting to 1024 [ 631.719209][ T513] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 631.731282][ T6415] FAULT_INJECTION: forcing a failure. [ 631.731282][ T6415] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 631.743299][ T513] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 631.744679][ T6415] CPU: 0 PID: 6415 Comm: syz.7.1767 Not tainted 6.1.134-syzkaller-00039-g3c6d0251e1fb #0 [ 631.764179][ T6415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 631.773657][ T513] usb 4-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 631.774252][ T6415] Call Trace: [ 631.774262][ T6415] [ 631.793744][ T6415] __dump_stack+0x21/0x24 [ 631.798098][ T6415] dump_stack_lvl+0xee/0x150 [ 631.802697][ T6415] ? __cfi_dump_stack_lvl+0x8/0x8 [ 631.807738][ T6415] dump_stack+0x15/0x24 [ 631.811912][ T6415] should_fail_ex+0x3d4/0x520 [ 631.816603][ T6415] should_fail+0xb/0x10 [ 631.820773][ T6415] should_fail_usercopy+0x1a/0x20 [ 631.825798][ T6415] strncpy_from_user+0x24/0x2d0 [ 631.830654][ T6415] ? getname_flags+0xb9/0x500 [ 631.835423][ T6415] getname_flags+0xf4/0x500 [ 631.839928][ T6415] __x64_sys_mkdirat+0x7c/0xa0 [ 631.844686][ T6415] x64_sys_call+0x73d/0x9a0 [ 631.849187][ T6415] do_syscall_64+0x4c/0xa0 [ 631.853610][ T6415] ? clear_bhb_loop+0x15/0x70 [ 631.858280][ T6415] ? clear_bhb_loop+0x15/0x70 [ 631.862947][ T6415] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 631.868843][ T6415] RIP: 0033:0x7f65c378d1d7 [ 631.873250][ T6415] Code: 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 631.892861][ T6415] RSP: 002b:00007f65c455be68 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 631.901272][ T6415] RAX: ffffffffffffffda RBX: 00007f65c455bef0 RCX: 00007f65c378d1d7 [ 631.909242][ T6415] RDX: 00000000000001ff RSI: 00002000000005c0 RDI: 00000000ffffff9c [ 631.917259][ T6415] RBP: 0000200000000580 R08: 00002000000007c0 R09: 0000000000000000 [ 631.925228][ T6415] R10: 0000200000000580 R11: 0000000000000246 R12: 00002000000005c0 [ 631.933198][ T6415] R13: 00007f65c455beb0 R14: 0000000000000000 R15: 0000000000000000 [ 631.941276][ T6415] [ 631.950876][ T513] usb 4-1: config 179 interface 65 has no altsetting 0 [ 631.957934][ T513] usb 4-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 631.967253][ T513] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 631.978662][ T6408] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 631.995952][ T513] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input63 [ 632.029588][ T28] audit: type=1400 audit(1748184213.107:448): avc: denied { ioctl } for pid=6430 comm="syz.4.1771" path="socket:[36247]" dev="sockfs" ino=36247 ioctlcmd=0x48f0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 632.120361][ T28] audit: type=1400 audit(1748184213.127:449): avc: denied { map } for pid=6416 comm="syz.6.1768" path="socket:[36249]" dev="sockfs" ino=36249 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 632.183797][ T28] audit: type=1400 audit(1748184213.127:450): avc: denied { read } for pid=6416 comm="syz.6.1768" path="socket:[36249]" dev="sockfs" ino=36249 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 632.592583][ T6442] device wireguard0 entered promiscuous mode [ 632.651184][ T6432] loop4: detected capacity change from 0 to 40427 [ 632.795404][ T3969] EXT4-fs (loop6): unmounting filesystem. [ 633.272831][ T60] usb 4-1: USB disconnect, device number 4 [ 633.272884][ C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 633.288062][ T60] xpad 4-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 633.298481][ T6128] I/O error, dev loop4, sector 40192 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 633.392777][ T6451] loop7: detected capacity change from 0 to 512 [ 633.400248][ T6451] EXT4-fs: Ignoring removed i_version option [ 634.444954][ T6451] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 634.624050][ T6456] loop6: detected capacity change from 0 to 128 [ 634.661992][ T6459] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1779'. [ 634.757434][ T6456] FAT-fs (loop6): bogus number of reserved sectors [ 634.768143][ T6462] netlink: 196 bytes leftover after parsing attributes in process `syz.2.1778'. [ 634.797528][ T6456] FAT-fs (loop6): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 634.809575][ T5965] EXT4-fs (loop7): unmounting filesystem. [ 634.819940][ T6456] FAT-fs (loop6): Can't find a valid FAT filesystem [ 634.947736][ T28] audit: type=1400 audit(1748184216.017:451): avc: denied { read write } for pid=5965 comm="syz-executor" name="loop7" dev="devtmpfs" ino=125 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 634.995043][ T6464] netlink: 196 bytes leftover after parsing attributes in process `syz.2.1778'. [ 635.080070][ T28] audit: type=1400 audit(1748184216.047:452): avc: denied { open } for pid=5965 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=125 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 635.103640][ T6464] netlink: 196 bytes leftover after parsing attributes in process `syz.2.1778'. [ 635.104270][ T28] audit: type=1400 audit(1748184216.047:453): avc: denied { ioctl } for pid=5965 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=125 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 635.224579][ T28] audit: type=1400 audit(1748184216.167:454): avc: denied { bpf } for pid=6465 comm="syz.4.1781" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 635.687990][ T6482] loop2: detected capacity change from 0 to 512 [ 635.694788][ T6482] /dev/loop2: Can't open blockdev [ 635.739823][ T6128] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 635.925469][ T6468] loop7: detected capacity change from 0 to 40427 [ 636.006150][ T6468] F2FS-fs (loop7): Found nat_bits in checkpoint [ 636.123630][ T6505] loop3: detected capacity change from 0 to 512 [ 636.131076][ T6505] EXT4-fs: Ignoring removed i_version option [ 636.282398][ T6468] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 636.293597][ T6505] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 636.455203][ T6468] FAULT_INJECTION: forcing a failure. [ 636.455203][ T6468] name failslab, interval 1, probability 0, space 0, times 0 [ 636.678605][ T6468] CPU: 1 PID: 6468 Comm: syz.7.1780 Not tainted 6.1.134-syzkaller-00039-g3c6d0251e1fb #0 [ 636.688462][ T6468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 636.698532][ T6468] Call Trace: [ 636.701825][ T6468] [ 636.704764][ T6468] __dump_stack+0x21/0x24 [ 636.709113][ T6468] dump_stack_lvl+0xee/0x150 [ 636.713718][ T6468] ? __cfi_dump_stack_lvl+0x8/0x8 [ 636.718755][ T6468] ? release_firmware_map_entry+0x194/0x194 [ 636.724672][ T6468] dump_stack+0x15/0x24 [ 636.728840][ T6468] should_fail_ex+0x3d4/0x520 [ 636.733538][ T6468] ? getname_flags+0xb9/0x500 [ 636.738321][ T6468] __should_failslab+0xac/0xf0 [ 636.743094][ T6468] should_failslab+0x9/0x20 [ 636.748043][ T6468] kmem_cache_alloc+0x3b/0x330 [ 636.752822][ T6468] getname_flags+0xb9/0x500 [ 636.757336][ T6468] __x64_sys_unlink+0x3c/0x50 [ 636.762018][ T6468] x64_sys_call+0x958/0x9a0 [ 636.766534][ T6468] do_syscall_64+0x4c/0xa0 [ 636.770972][ T6468] ? clear_bhb_loop+0x15/0x70 [ 636.775654][ T6468] ? clear_bhb_loop+0x15/0x70 [ 636.780342][ T6468] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 636.786250][ T6468] RIP: 0033:0x7f65c378e969 [ 636.790668][ T6468] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 636.810322][ T6468] RSP: 002b:00007f65c455c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000057 [ 636.818760][ T6468] RAX: ffffffffffffffda RBX: 00007f65c39b5fa0 RCX: 00007f65c378e969 [ 636.826764][ T6468] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000001c0 [ 636.834754][ T6468] RBP: 00007f65c455c090 R08: 0000000000000000 R09: 0000000000000000 [ 636.842743][ T6468] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 636.850725][ T6468] R13: 0000000000000000 R14: 00007f65c39b5fa0 R15: 00007ffe4d18b168 [ 636.858716][ T6468] [ 637.063504][ T28] kauditd_printk_skb: 34 callbacks suppressed [ 637.063519][ T28] audit: type=1400 audit(1748184218.137:487): avc: denied { unmount } for pid=288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 637.090696][ T288] EXT4-fs (loop3): unmounting filesystem. [ 637.179445][ T28] audit: type=1400 audit(1748184218.217:488): avc: denied { ioctl } for pid=6511 comm="syz.3.1795" path="socket:[35742]" dev="sockfs" ino=35742 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 637.307138][ T5965] syz-executor: attempt to access beyond end of device [ 637.307138][ T5965] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 637.327627][ T28] audit: type=1400 audit(1748184218.397:489): avc: denied { create } for pid=6502 comm="syz.6.1792" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 637.348529][ T28] audit: type=1400 audit(1748184218.417:490): avc: denied { name_bind } for pid=6502 comm="syz.6.1792" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 637.394931][ T28] audit: type=1400 audit(1748184218.417:491): avc: denied { node_bind } for pid=6502 comm="syz.6.1792" saddr=224.0.0.2 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 637.559214][ T28] audit: type=1400 audit(1748184218.607:492): avc: denied { create } for pid=6502 comm="syz.6.1792" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 637.656197][ T28] audit: type=1400 audit(1748184218.727:493): avc: denied { create } for pid=6524 comm="syz.2.1799" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 637.685074][ T6521] loop3: detected capacity change from 0 to 40427 [ 637.693404][ T28] audit: type=1400 audit(1748184218.727:494): avc: denied { read } for pid=6524 comm="syz.2.1799" name="file0" dev="tmpfs" ino=2232 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 637.720670][ T28] audit: type=1400 audit(1748184218.727:495): avc: denied { open } for pid=6524 comm="syz.2.1799" path="/398/file0" dev="tmpfs" ino=2232 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 637.743454][ T6521] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 637.751264][ T6521] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 637.761808][ T28] audit: type=1400 audit(1748184218.727:496): avc: denied { ioctl } for pid=6524 comm="syz.2.1799" path="/398/file0" dev="tmpfs" ino=2232 ioctlcmd=0x1271 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 637.786889][ T6521] F2FS-fs (loop3): invalid crc value [ 637.818554][ T6521] F2FS-fs (loop3): Found nat_bits in checkpoint [ 637.882398][ T6521] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 637.886068][ T6528] loop7: detected capacity change from 0 to 40427 [ 637.890911][ T6521] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 637.926246][ T6528] F2FS-fs (loop7): fault_injection options not supported [ 637.935616][ T6521] syz.3.1798: attempt to access beyond end of device [ 637.935616][ T6521] loop3: rw=2049, sector=77824, nr_sectors = 136 limit=40427 [ 637.951584][ T6528] F2FS-fs (loop7): invalid crc value [ 637.960879][ T6521] FAULT_INJECTION: forcing a failure. [ 637.960879][ T6521] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 637.974398][ T6521] CPU: 1 PID: 6521 Comm: syz.3.1798 Not tainted 6.1.134-syzkaller-00039-g3c6d0251e1fb #0 [ 637.984223][ T6521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 637.994296][ T6521] Call Trace: [ 637.997593][ T6521] [ 638.000528][ T6521] __dump_stack+0x21/0x24 [ 638.004877][ T6521] dump_stack_lvl+0xee/0x150 [ 638.009487][ T6521] ? __cfi_dump_stack_lvl+0x8/0x8 [ 638.014529][ T6521] dump_stack+0x15/0x24 [ 638.018704][ T6521] should_fail_ex+0x3d4/0x520 [ 638.023395][ T6521] should_fail+0xb/0x10 [ 638.027572][ T6521] should_fail_usercopy+0x1a/0x20 [ 638.032608][ T6521] strncpy_from_user+0x24/0x2d0 [ 638.035461][ T6528] F2FS-fs (loop7): Found nat_bits in checkpoint [ 638.037484][ T6521] ? getname_flags+0xb9/0x500 [ 638.048399][ T6521] getname_flags+0xf4/0x500 [ 638.052919][ T6521] user_path_at_empty+0x30/0x1c0 [ 638.057852][ T6521] do_sys_truncate+0xa3/0x190 [ 638.062532][ T6521] ? __cfi_do_sys_truncate+0x10/0x10 [ 638.067817][ T6521] ? debug_smp_processor_id+0x17/0x20 [ 638.073185][ T6521] __x64_sys_truncate+0x5b/0x70 [ 638.078036][ T6521] x64_sys_call+0x679/0x9a0 [ 638.082531][ T6521] do_syscall_64+0x4c/0xa0 [ 638.086947][ T6521] ? clear_bhb_loop+0x15/0x70 [ 638.091616][ T6521] ? clear_bhb_loop+0x15/0x70 [ 638.096282][ T6521] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 638.102178][ T6521] RIP: 0033:0x7f9e13f8e969 [ 638.106583][ T6521] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 638.126267][ T6521] RSP: 002b:00007f9e14e11038 EFLAGS: 00000246 ORIG_RAX: 000000000000004c [ 638.134763][ T6521] RAX: ffffffffffffffda RBX: 00007f9e141b5fa0 RCX: 00007f9e13f8e969 [ 638.142730][ T6521] RDX: 0000000000000000 RSI: 000000000000fbb0 RDI: 0000200000000000 [ 638.150722][ T6521] RBP: 00007f9e14e11090 R08: 0000000000000000 R09: 0000000000000000 [ 638.158686][ T6521] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 638.166647][ T6521] R13: 0000000000000000 R14: 00007f9e141b5fa0 R15: 00007fffeaf4a9b8 [ 638.174620][ T6521] [ 638.222636][ T6528] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 638.234750][ T5898] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 638.258517][ T5898] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 638.495359][ T6547] device bridge0 entered promiscuous mode [ 638.502798][ T6547] bridge0: port 3(macsec1) entered blocking state [ 638.509282][ T6547] bridge0: port 3(macsec1) entered disabled state [ 638.519571][ T6547] device bridge0 left promiscuous mode [ 638.881324][ T5965] syz-executor: attempt to access beyond end of device [ 638.881324][ T5965] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 638.914329][ T6543] loop4: detected capacity change from 0 to 40427 [ 638.949723][ T6128] I/O error, dev loop4, sector 40192 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 639.177097][ T6557] loop2: detected capacity change from 0 to 512 [ 639.184463][ T6557] EXT4-fs: Ignoring removed i_version option [ 639.190797][ T6557] /dev/loop2: Can't open blockdev [ 639.382761][ T6560] tipc: Started in network mode [ 639.465921][ T6560] tipc: Node identity 7f000001, cluster identity 4711 [ 639.534872][ T6560] tipc: Enabled bearer , priority 10 [ 639.589229][ T60] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 639.615372][ T6560] loop3: detected capacity change from 0 to 16 [ 639.674513][ T6128] udevd[6128]: incorrect erofs checksum on /dev/loop3 [ 639.685063][ T6560] erofs: (device loop3): erofs_superblock_csum_verify: invalid checksum 0x80a9593b, 0x7bbbea8c expected [ 639.859573][ T60] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 639.877081][ T6560] tipc: Enabling of bearer rejected, failed to enable media [ 639.901639][ T60] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 639.963841][ T60] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 639.992913][ T6570] loop3: detected capacity change from 0 to 256 [ 640.019191][ T60] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 640.041736][ T6570] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011a39, chksum : 0xd7c18d7b, utbl_chksum : 0xe619d30d) [ 640.060075][ T60] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 640.102205][ T60] usb 8-1: config 0 descriptor?? [ 640.844570][ T1786] tipc: Node number set to 2130706433 [ 640.923808][ T6580] netlink: 96 bytes leftover after parsing attributes in process `syz.6.1812'. [ 641.060906][ T60] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 641.228060][ T6591] loop6: detected capacity change from 0 to 512 [ 641.234955][ T6591] EXT4-fs: Ignoring removed i_version option [ 641.338946][ T6592] overlayfs: unrecognized mount option "verity=require" or missing value [ 642.213932][ T60] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 642.249699][ T28] kauditd_printk_skb: 37 callbacks suppressed [ 642.249751][ T28] audit: type=1400 audit(1748184222.397:534): avc: denied { create } for pid=6587 comm="syz.2.1814" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 642.328065][ T60] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 642.357889][ T6586] input: syz0 as /devices/virtual/input/input64 [ 642.385822][ T6591] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 642.470854][ T60] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 642.969816][ T60] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 642.993675][ T28] audit: type=1400 audit(1748184223.297:535): avc: denied { open } for pid=6581 comm="syz.4.1811" path="/dev/uinput" dev="devtmpfs" ino=262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 643.040378][ T6601] loop7: detected capacity change from 0 to 1024 [ 643.047618][ T60] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 643.144766][ T60] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 643.152612][ T6601] ext4: Unknown parameter 'nouser_xattr' [ 643.178882][ T60] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 643.186931][ T28] audit: type=1400 audit(1748184223.417:536): avc: denied { ioctl } for pid=6581 comm="syz.4.1811" path="/dev/uinput" dev="devtmpfs" ino=262 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 643.187843][ T3969] EXT4-fs (loop6): unmounting filesystem. [ 643.212199][ T28] audit: type=1400 audit(1748184224.067:537): avc: denied { read } for pid=88 comm="acpid" name="event3" dev="devtmpfs" ino=1568 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 643.238122][ T60] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 643.240360][ T28] audit: type=1400 audit(1748184224.067:538): avc: denied { open } for pid=88 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=1568 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 643.248119][ T60] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 643.270947][ T28] audit: type=1400 audit(1748184224.067:539): avc: denied { ioctl } for pid=88 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=1568 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 643.327154][ T6601] loop7: detected capacity change from 0 to 1024 [ 643.347462][ T60] plantronics 0003:047F:FFFF.0003: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 643.386611][ T6601] ext4: Unknown parameter 'nouser_xattr' [ 643.427743][ T28] audit: type=1400 audit(1748184224.497:540): avc: denied { connect } for pid=6607 comm="syz.6.1818" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 643.437309][ T60] usb 8-1: USB disconnect, device number 4 [ 643.450558][ T6609] SELinux: Context system_u:object_r:audisp_exec_t:s0 is not valid (left unmapped). [ 643.456208][ T6601] loop7: detected capacity change from 0 to 1024 [ 643.487237][ T6601] ext4: Unknown parameter 'nouser_xattr' [ 643.509849][ T28] audit: type=1400 audit(1748184224.537:541): avc: denied { relabelto } for pid=6607 comm="syz.6.1818" name="" dev="pipefs" ino=36506 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 trawcon="system_u:object_r:audisp_exec_t:s0" [ 643.517008][ T6610] fido_id[6610]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 643.594442][ T6601] loop7: detected capacity change from 0 to 1024 [ 643.611885][ T6601] ext4: Unknown parameter 'nouser_xattr' [ 643.617132][ T6612] loop6: detected capacity change from 0 to 512 [ 643.639365][ T5285] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 643.644446][ T6601] loop7: detected capacity change from 0 to 1024 [ 643.659774][ T5285] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 643.670733][ T6601] ext4: Unknown parameter 'nouser_xattr' [ 643.701590][ T5285] Buffer I/O error on dev loop7, logical block 0, async page read [ 643.729808][ T6612] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 643.744243][ T6612] ext4 filesystem being mounted at /140/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 643.769187][ T1786] usb 3-1: new low-speed USB device number 5 using dummy_hcd [ 643.790194][ T6612] EXT4-fs error (device loop6): ext4_do_update_inode:5226: inode #2: comm syz.6.1819: corrupted inode contents [ 643.810439][ T6601] loop7: detected capacity change from 0 to 1024 [ 643.837841][ T6612] EXT4-fs error (device loop6): ext4_dirty_inode:6091: inode #2: comm syz.6.1819: mark_inode_dirty error [ 643.859732][ T6601] ext4: Unknown parameter 'nouser_xattr' [ 643.893357][ T6612] EXT4-fs error (device loop6): ext4_do_update_inode:5226: inode #2: comm syz.6.1819: corrupted inode contents [ 643.901078][ T6601] loop7: detected capacity change from 0 to 1024 [ 643.911705][ T6612] EXT4-fs error (device loop6): __ext4_ext_dirty:202: inode #2: comm syz.6.1819: mark_inode_dirty error [ 643.922118][ T6601] ext4: Unknown parameter 'nouser_xattr' [ 643.964393][ T6601] loop7: detected capacity change from 0 to 1024 [ 643.972866][ T3969] EXT4-fs (loop6): unmounting filesystem. [ 643.991758][ T1786] usb 3-1: config 1 interface 0 altsetting 144 endpoint 0x1 is Bulk; changing to Interrupt [ 644.008222][ T1786] usb 3-1: config 1 interface 0 altsetting 144 endpoint 0x82 is Bulk; changing to Interrupt [ 644.021086][ T6601] ext4: Unknown parameter 'nouser_xattr' [ 644.040580][ T1786] usb 3-1: config 1 interface 0 has no altsetting 0 [ 644.049374][ T1786] usb 3-1: string descriptor 0 read error: -22 [ 644.055598][ T1786] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 644.085830][ T1786] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 644.114389][ T1786] usb 3-1: can't set config #1, error -71 [ 644.125937][ T6601] loop7: detected capacity change from 0 to 1024 [ 644.129329][ T6128] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 644.154023][ T6128] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 644.164233][ T6128] Buffer I/O error on dev loop7, logical block 0, async page read [ 644.173907][ T6601] ext4: Unknown parameter 'nouser_xattr' [ 644.175953][ T1786] usb 3-1: USB disconnect, device number 5 [ 644.296995][ T6601] loop7: detected capacity change from 0 to 1024 [ 644.317218][ T6601] ext4: Unknown parameter 'nouser_xattr' [ 644.354078][ T6624] netlink: 96 bytes leftover after parsing attributes in process `syz.6.1823'. [ 644.363883][ T6128] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 644.369579][ T6601] loop7: detected capacity change from 0 to 1024 [ 644.379261][ T6128] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 644.390032][ T6601] ext4: Unknown parameter 'nouser_xattr' [ 644.398909][ T6128] Buffer I/O error on dev loop7, logical block 0, async page read [ 644.429953][ T6601] loop7: detected capacity change from 0 to 1024 [ 644.457640][ T6601] ext4: Unknown parameter 'nouser_xattr' [ 644.515037][ T28] audit: type=1400 audit(1748184225.587:542): avc: denied { connect } for pid=6627 comm="syz.6.1825" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 644.528905][ T6601] loop7: detected capacity change from 0 to 1024 [ 644.543534][ T28] audit: type=1400 audit(1748184225.587:543): avc: denied { mounton } for pid=6627 comm="syz.6.1825" path="/144/file0" dev="tmpfs" ino=821 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 644.559282][ T6601] ext4: Unknown parameter 'nouser_xattr' [ 644.596305][ T6601] loop7: detected capacity change from 0 to 1024 [ 644.605502][ T6601] ext4: Unknown parameter 'nouser_xattr' [ 644.646811][ T6601] loop7: detected capacity change from 0 to 1024 [ 644.653528][ T6601] ext4: Unknown parameter 'nouser_xattr' [ 644.673091][ T1786] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 644.689589][ T6128] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 644.694749][ T6601] loop7: detected capacity change from 0 to 1024 [ 644.705881][ T6601] ext4: Unknown parameter 'nouser_xattr' [ 644.724812][ T6601] loop7: detected capacity change from 0 to 1024 [ 644.731379][ T6601] ext4: Unknown parameter 'nouser_xattr' [ 644.788017][ T6645] loop4: detected capacity change from 0 to 128 [ 644.795684][ T6645] /dev/loop4: Can't open blockdev [ 644.861036][ T1786] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 644.984662][ T6601] loop7: detected capacity change from 0 to 1024 [ 645.020562][ T1786] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 645.067495][ T6647] loop3: detected capacity change from 0 to 512 [ 645.096276][ T6601] ext4: Unknown parameter 'nouser_xattr' [ 645.165608][ T6647] EXT4-fs: quotafile must be on filesystem root [ 645.172939][ T1786] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 645.260543][ T6601] loop7: detected capacity change from 0 to 1024 [ 645.272399][ T1786] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 645.311133][ T6601] ext4: Unknown parameter 'nouser_xattr' [ 645.410956][ T1786] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 645.539718][ T1786] usb 3-1: Product: syz [ 645.556140][ T1786] usb 3-1: Manufacturer: syz [ 645.570372][ T1786] usb 3-1: SerialNumber: syz [ 645.811045][ T6654] loop7: detected capacity change from 0 to 512 [ 645.817659][ T6654] EXT4-fs: Ignoring removed i_version option [ 645.874388][ T1786] usb 3-1: 0:2 : does not exist [ 645.937081][ T1786] usb 3-1: USB disconnect, device number 6 [ 645.976459][ T6654] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 645.992260][ T513] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 647.108282][ T513] usb 4-1: config 1 has an invalid descriptor of length 133, skipping remainder of the config [ 647.143828][ T5965] EXT4-fs (loop7): unmounting filesystem. [ 647.222691][ T6619] udevd[6619]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 647.239548][ T513] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 647.610856][ T6668] xt_hashlimit: size too large, truncated to 1048576 [ 647.621143][ T513] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 647.631273][ T513] usb 4-1: SerialNumber: syz [ 647.637953][ T513] usb 4-1: bad CDC descriptors [ 647.776023][ T6677] loop2: detected capacity change from 0 to 16 [ 647.808247][ T6677] erofs: Unknown parameter '' [ 647.841082][ T513] usb 4-1: USB disconnect, device number 5 [ 648.202709][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 648.202725][ T28] audit: type=1400 audit(1748184229.277:550): avc: denied { write } for pid=6687 comm="syz.6.1841" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 648.336664][ T6691] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 649.559900][ T6692] loop4: detected capacity change from 0 to 512 [ 649.566746][ T6692] EXT4-fs: Ignoring removed i_version option [ 649.572959][ T6692] /dev/loop4: Can't open blockdev [ 649.802813][ T6694] loop2: detected capacity change from 0 to 1024 [ 649.832296][ T6696] loop6: detected capacity change from 0 to 256 [ 649.979625][ T6694] EXT4-fs: Ignoring removed i_version option [ 649.985738][ T6694] /dev/loop2: Can't open blockdev [ 650.437969][ T28] audit: type=1400 audit(1748184230.917:551): avc: denied { mount } for pid=6695 comm="syz.6.1843" name="/" dev="loop6" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 650.517069][ T6704] input: syz0 as /devices/virtual/input/input65 [ 650.557434][ T6705] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1842'. [ 650.881664][ T6711] loop4: detected capacity change from 0 to 512 [ 650.889163][ T6711] EXT4-fs: Ignoring removed i_version option [ 650.895532][ T6711] /dev/loop4: Can't open blockdev [ 650.965013][ T28] audit: type=1400 audit(1748184232.037:552): avc: denied { unmount } for pid=3969 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 651.709205][ T28] audit: type=1400 audit(1748184232.777:553): avc: denied { accept } for pid=6720 comm="syz.2.1850" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 651.824520][ T28] audit: type=1400 audit(1748184232.807:554): avc: denied { write } for pid=6720 comm="syz.2.1850" path="socket:[37264]" dev="sockfs" ino=37264 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 651.910109][ T6726] netlink: 'syz.2.1850': attribute type 11 has an invalid length. [ 651.927050][ T6726] overlayfs: failed to resolve './file0': -2 [ 652.245689][ T28] audit: type=1400 audit(1748184232.877:555): avc: denied { read } for pid=6721 comm="syz.6.1851" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=37271 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 652.817613][ T6734] netlink: 'syz.6.1853': attribute type 6 has an invalid length. [ 652.830870][ T6734] bridge0: port 2(bridge_slave_1) entered disabled state [ 652.849807][ T6734] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1853'. [ 652.939722][ T28] audit: type=1400 audit(1748184233.517:556): avc: denied { read write } for pid=6727 comm="syz.4.1852" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 653.240403][ T28] audit: type=1400 audit(1748184233.517:557): avc: denied { open } for pid=6727 comm="syz.4.1852" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 653.264478][ T28] audit: type=1400 audit(1748184233.807:558): avc: denied { ioctl } for pid=6727 comm="syz.4.1852" path="/dev/binderfs/binder0" dev="binder" ino=7 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 653.291900][ T28] audit: type=1400 audit(1748184233.807:559): avc: denied { set_context_mgr } for pid=6727 comm="syz.4.1852" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 653.339230][ T28] audit: type=1400 audit(1748184233.887:560): avc: denied { map } for pid=6727 comm="syz.4.1852" path="socket:[36785]" dev="sockfs" ino=36785 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 653.455960][ T28] audit: type=1400 audit(1748184233.887:561): avc: denied { read write } for pid=6727 comm="syz.4.1852" path="socket:[36785]" dev="sockfs" ino=36785 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 653.603219][ T28] audit: type=1400 audit(1748184234.677:562): avc: denied { wake_alarm } for pid=6749 comm="syz.2.1859" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 653.883393][ T6759] loop2: detected capacity change from 0 to 512 [ 653.902661][ T6759] EXT4-fs: Ignoring removed i_version option [ 653.915225][ T6759] /dev/loop2: Can't open blockdev [ 655.516899][ T6767] input: syz0 as /devices/virtual/input/input66 [ 655.939794][ T6776] syz.6.1867[6776] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 655.940177][ T6776] syz.6.1867[6776] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 655.970316][ T6776] loop6: detected capacity change from 0 to 512 [ 656.132507][ T6776] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 656.190085][ T28] audit: type=1400 audit(1748184237.217:563): avc: denied { read write } for pid=6773 comm="syz.6.1867" name="file1" dev="loop6" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 656.503013][ T28] audit: type=1400 audit(1748184237.217:564): avc: denied { open } for pid=6773 comm="syz.6.1867" path="/158/file1/file1" dev="loop6" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 656.758469][ T6784] input: syz0 as /devices/virtual/input/input67 [ 657.008975][ T3969] EXT4-fs (loop6): unmounting filesystem. [ 657.300849][ T6800] netlink: 96 bytes leftover after parsing attributes in process `syz.6.1874'. [ 661.033331][ T6817] loop7: detected capacity change from 0 to 512 [ 661.046459][ T6817] EXT4-fs: Ignoring removed i_version option [ 662.341118][ T6819] loop6: detected capacity change from 0 to 512 [ 662.352007][ T6819] EXT4-fs: Ignoring removed i_version option [ 662.815897][ T6819] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 662.827737][ T6817] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 663.102873][ T5965] EXT4-fs (loop7): unmounting filesystem. [ 663.731097][ T3969] EXT4-fs (loop6): unmounting filesystem. [ 663.795509][ T6826] loop4: detected capacity change from 0 to 40427 [ 663.813768][ T6833] netlink: 'syz.7.1881': attribute type 2 has an invalid length. [ 663.816217][ T6837] FAULT_INJECTION: forcing a failure. [ 663.816217][ T6837] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 663.834704][ T6835] device wireguard0 entered promiscuous mode [ 663.845978][ T6837] CPU: 1 PID: 6837 Comm: syz.3.1886 Not tainted 6.1.134-syzkaller-00039-g3c6d0251e1fb #0 [ 663.855822][ T6837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 663.865973][ T6837] Call Trace: [ 663.869256][ T6837] [ 663.872184][ T6837] __dump_stack+0x21/0x24 [ 663.876608][ T6837] dump_stack_lvl+0xee/0x150 [ 663.881282][ T6837] ? __cfi_dump_stack_lvl+0x8/0x8 [ 663.886306][ T6837] ? _parse_integer+0x2a/0x40 [ 663.890985][ T6837] dump_stack+0x15/0x24 [ 663.895137][ T6837] should_fail_ex+0x3d4/0x520 [ 663.899807][ T6837] should_fail+0xb/0x10 [ 663.903956][ T6837] should_fail_usercopy+0x1a/0x20 [ 663.908973][ T6837] _copy_from_user+0x1e/0xc0 [ 663.913556][ T6837] ___sys_sendmsg+0x155/0x290 [ 663.918234][ T6837] ? __sys_sendmsg+0x270/0x270 [ 663.922996][ T6837] ? __kasan_check_write+0x14/0x20 [ 663.928105][ T6837] ? proc_fail_nth_write+0x17a/0x1f0 [ 663.933389][ T6837] ? vfs_write+0x9d6/0xca0 [ 663.937803][ T6837] ? __fdget+0x19c/0x220 [ 663.942042][ T6837] __x64_sys_sendmsg+0x1f0/0x2c0 [ 663.946985][ T6837] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 663.952452][ T6837] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 663.958536][ T6837] x64_sys_call+0x171/0x9a0 [ 663.963051][ T6837] do_syscall_64+0x4c/0xa0 [ 663.967483][ T6837] ? clear_bhb_loop+0x15/0x70 [ 663.972248][ T6837] ? clear_bhb_loop+0x15/0x70 [ 663.976927][ T6837] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 663.982820][ T6837] RIP: 0033:0x7f9e13f8e969 [ 663.987226][ T6837] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 664.006918][ T6837] RSP: 002b:00007f9e14e11038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 664.015422][ T6837] RAX: ffffffffffffffda RBX: 00007f9e141b5fa0 RCX: 00007f9e13f8e969 [ 664.023399][ T6837] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000004 [ 664.031384][ T6837] RBP: 00007f9e14e11090 R08: 0000000000000000 R09: 0000000000000000 [ 664.039363][ T6837] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 664.047333][ T6837] R13: 0000000000000000 R14: 00007f9e141b5fa0 R15: 00007fffeaf4a9b8 [ 664.055305][ T6837] [ 664.069399][ T28] audit: type=1400 audit(1748184245.137:565): avc: denied { read write } for pid=6839 comm="syz.7.1887" name="vhost-vsock" dev="devtmpfs" ino=268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 664.092101][ T6619] I/O error, dev loop4, sector 40192 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 664.099362][ T28] audit: type=1400 audit(1748184245.137:566): avc: denied { open } for pid=6839 comm="syz.7.1887" path="/dev/vhost-vsock" dev="devtmpfs" ino=268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 666.343390][ T6858] netlink: 576 bytes leftover after parsing attributes in process `syz.2.1889'. [ 666.357770][ T6861] netlink: 576 bytes leftover after parsing attributes in process `syz.7.1891'. [ 666.435374][ T28] audit: type=1400 audit(1748184247.507:567): avc: denied { create } for pid=6824 comm="syz.4.1882" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 666.619628][ T28] audit: type=1400 audit(1748184247.537:568): avc: denied { write } for pid=6824 comm="syz.4.1882" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 667.148392][ T28] audit: type=1400 audit(1748184248.217:569): avc: denied { write } for pid=6863 comm="syz.2.1893" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 667.336726][ T6875] tipc: Started in network mode [ 667.347616][ T6875] tipc: Node identity 7f000001, cluster identity 4711 [ 667.355013][ T6875] tipc: Enabled bearer , priority 10 [ 667.361523][ T28] audit: type=1400 audit(1748184248.437:570): avc: denied { getopt } for pid=6880 comm="syz.2.1899" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 667.364608][ T6875] loop7: detected capacity change from 0 to 16 [ 667.462096][ T6885] loop6: detected capacity change from 0 to 512 [ 667.469044][ T6885] EXT4-fs: Ignoring removed i_version option [ 667.606882][ T6887] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1899'. [ 667.631031][ T6887] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1899'. [ 669.917352][ T6875] erofs: (device loop7): erofs_superblock_csum_verify: invalid checksum 0x80a9593b, 0x7bbbea8c expected [ 669.983914][ T6890] loop3: detected capacity change from 0 to 512 [ 670.200249][ T6885] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 670.260767][ T6890] EXT4-fs (loop3): 1 orphan inode deleted [ 670.266594][ T6890] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 670.277397][ T6890] ext4 filesystem being mounted at /378/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 670.433868][ T6875] tipc: Enabled bearer , priority 10 [ 670.579130][ T5076] tipc: Node number set to 2130706433 [ 670.617116][ T5882] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 670.626369][ T28] audit: type=1400 audit(1748184251.677:571): avc: denied { create } for pid=6903 comm="syz.4.1903" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 670.667367][ T5882] EXT4-fs error (device loop3): ext4_release_dquot:6812: comm kworker/u4:62: Failed to release dquot type 1 [ 670.680278][ T3969] EXT4-fs (loop6): unmounting filesystem. [ 670.815411][ T6910] loop7: detected capacity change from 0 to 256 [ 672.589502][ T28] audit: type=1400 audit(1748184252.377:572): avc: denied { bind } for pid=6903 comm="syz.4.1903" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 672.632465][ T6910] FAT-fs (loop7): Directory bread(block 64) failed [ 672.639311][ T6910] FAT-fs (loop7): Directory bread(block 65) failed [ 672.646001][ T6910] FAT-fs (loop7): Directory bread(block 66) failed [ 672.652602][ T6910] FAT-fs (loop7): Directory bread(block 67) failed [ 672.659276][ T6910] FAT-fs (loop7): Directory bread(block 68) failed [ 672.665854][ T6910] FAT-fs (loop7): Directory bread(block 69) failed [ 672.672569][ T6910] FAT-fs (loop7): Directory bread(block 70) failed [ 672.679153][ T6910] FAT-fs (loop7): Directory bread(block 71) failed [ 672.685820][ T6910] FAT-fs (loop7): Directory bread(block 72) failed [ 672.692399][ T6910] FAT-fs (loop7): Directory bread(block 73) failed [ 673.327980][ T6916] netlink: 576 bytes leftover after parsing attributes in process `syz.2.1905'. [ 674.019401][ T28] audit: type=1400 audit(1748184254.987:573): avc: denied { accept } for pid=6919 comm="syz.7.1908" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 674.100891][ T28] audit: type=1400 audit(1748184254.987:574): avc: denied { setopt } for pid=6919 comm="syz.7.1908" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 674.159169][ T28] audit: type=1400 audit(1748184255.127:575): avc: denied { sqpoll } for pid=6923 comm="syz.4.1909" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 674.284835][ T28] audit: type=1400 audit(1748184255.317:576): avc: denied { setopt } for pid=6927 comm="syz.6.1910" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 674.411915][ T28] audit: type=1400 audit(1748184255.487:577): avc: denied { mount } for pid=6933 comm="syz.4.1912" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 675.549175][ T6942] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1911'. [ 675.662192][ T6939] loop2: detected capacity change from 0 to 1024 [ 675.668801][ T6939] EXT4-fs: Ignoring removed nobh option [ 675.670265][ T28] audit: type=1400 audit(1748184256.227:578): avc: denied { bind } for pid=6931 comm="syz.2.1911" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 675.674981][ T6939] EXT4-fs: Ignoring removed oldalloc option [ 675.700869][ T6939] EXT4-fs: Ignoring removed bh option [ 675.706331][ T6939] /dev/loop2: Can't open blockdev [ 675.964767][ T6944] overlayfs: invalid redirect ((null)) [ 676.059691][ T28] audit: type=1400 audit(1748184256.327:579): avc: denied { setopt } for pid=6931 comm="syz.2.1911" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 676.080337][ T28] audit: type=1400 audit(1748184257.007:580): avc: denied { append } for pid=6933 comm="syz.4.1912" name="001" dev="devtmpfs" ino=164 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 676.175150][ T28] audit: type=1400 audit(1748184257.027:581): avc: denied { connect } for pid=6933 comm="syz.4.1912" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 676.203358][ T28] audit: type=1400 audit(1748184257.027:582): avc: denied { mounton } for pid=6933 comm="syz.4.1912" path="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 677.092557][ T6955] loop2: detected capacity change from 0 to 512 [ 677.099246][ T6955] EXT4-fs: Ignoring removed i_version option [ 677.105334][ T6955] /dev/loop2: Can't open blockdev [ 677.375683][ T6956] device bridge0 entered promiscuous mode [ 677.401698][ T28] audit: type=1400 audit(1748184257.237:583): avc: denied { unmount } for pid=284 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 677.472599][ T6956] bridge0: port 3(macsec0) entered blocking state [ 677.502039][ T28] audit: type=1400 audit(1748184257.237:584): avc: denied { unmount } for pid=284 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 677.564765][ T6956] bridge0: port 3(macsec0) entered disabled state [ 677.583824][ T28] audit: type=1400 audit(1748184258.527:585): avc: denied { bind } for pid=6960 comm="syz.4.1920" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 677.626936][ T6956] device bridge0 left promiscuous mode [ 677.646508][ T28] audit: type=1400 audit(1748184258.597:586): avc: denied { setopt } for pid=6960 comm="syz.4.1920" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 677.705813][ T28] audit: type=1400 audit(1748184258.647:587): avc: denied { watch watch_reads } for pid=6960 comm="syz.4.1920" path="/377" dev="tmpfs" ino=2105 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 677.917631][ T6967] kvm: pic: level sensitive irq not supported [ 677.917753][ T6967] kvm: pic: non byte read [ 677.929761][ T6970] netlink: 576 bytes leftover after parsing attributes in process `syz.4.1922'. [ 677.959225][ T6967] kvm: pic: non byte read [ 677.963583][ T6967] kvm: pic: non byte read [ 677.989654][ T6967] kvm: pic: non byte read [ 678.012563][ T6967] kvm: pic: non byte read [ 678.016940][ T6967] kvm: pic: non byte read [ 678.028276][ T6973] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1923'. [ 678.067800][ T6967] kvm: pic: non byte read [ 678.079235][ T6967] kvm: pic: non byte read [ 678.083649][ T6967] kvm: pic: non byte read [ 678.099196][ T6967] kvm: pic: non byte read [ 678.261891][ T6980] bridge_slave_0: default FDB implementation only supports local addresses [ 678.271419][ T6980] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6980 comm=syz.7.1924 [ 678.284050][ T6980] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=17 sclass=netlink_tcpdiag_socket pid=6980 comm=syz.7.1924 [ 678.602845][ T288] EXT4-fs (loop3): unmounting filesystem. [ 678.702538][ T6992] loop3: detected capacity change from 0 to 2048 [ 678.759750][ T6992] loop3: p1 < > p3 [ 678.765044][ T6992] loop3: p3 size 134217728 extends beyond EOD, truncated [ 678.956275][ T7000] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1931'. [ 679.409919][ T7009] netlink: 576 bytes leftover after parsing attributes in process `syz.4.1934'. [ 679.540185][ T7013] loop6: detected capacity change from 0 to 512 [ 679.547531][ T7013] EXT4-fs: Ignoring removed i_version option [ 679.752378][ T7013] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 680.618798][ T3969] EXT4-fs (loop6): unmounting filesystem. [ 680.628253][ T7011] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1935'. [ 680.853007][ T7026] loop6: detected capacity change from 0 to 128 [ 680.959925][ T7026] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 680.979416][ T7026] ext4 filesystem being mounted at /173/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 681.011506][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 681.011523][ T28] audit: type=1400 audit(1748184262.057:589): avc: denied { append } for pid=7030 comm="syz.4.1942" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 681.609879][ T7044] FAULT_INJECTION: forcing a failure. [ 681.609879][ T7044] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 681.623120][ T7044] CPU: 0 PID: 7044 Comm: syz.4.1943 Not tainted 6.1.134-syzkaller-00039-g3c6d0251e1fb #0 [ 681.632954][ T7044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 681.643022][ T7044] Call Trace: [ 681.646307][ T7044] [ 681.649245][ T7044] __dump_stack+0x21/0x24 [ 681.653603][ T7044] dump_stack_lvl+0xee/0x150 [ 681.658211][ T7044] ? __cfi_dump_stack_lvl+0x8/0x8 [ 681.663258][ T7044] dump_stack+0x15/0x24 [ 681.667428][ T7044] should_fail_ex+0x3d4/0x520 [ 681.672207][ T7044] should_fail+0xb/0x10 [ 681.676378][ T7044] should_fail_usercopy+0x1a/0x20 [ 681.681417][ T7044] _copy_to_user+0x1e/0x90 [ 681.685848][ T7044] simple_read_from_buffer+0xe9/0x160 [ 681.691241][ T7044] proc_fail_nth_read+0x19a/0x210 [ 681.696291][ T7044] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 681.701855][ T7044] ? security_file_permission+0x94/0xb0 [ 681.707414][ T7044] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 681.712980][ T7044] vfs_read+0x26e/0x8c0 [ 681.717154][ T7044] ? __cfi_vfs_read+0x10/0x10 [ 681.721846][ T7044] ? __kasan_check_write+0x14/0x20 [ 681.726974][ T7044] ? mutex_lock+0x8d/0x1a0 [ 681.731408][ T7044] ? __cfi_mutex_lock+0x10/0x10 [ 681.736278][ T7044] ? __fdget_pos+0x2cd/0x380 [ 681.740889][ T7044] ? ksys_read+0x71/0x240 [ 681.745263][ T7044] ksys_read+0x140/0x240 [ 681.749530][ T7044] ? __cfi_ksys_read+0x10/0x10 [ 681.754325][ T7044] ? debug_smp_processor_id+0x17/0x20 [ 681.759713][ T7044] __x64_sys_read+0x7b/0x90 [ 681.764235][ T7044] x64_sys_call+0x2f/0x9a0 [ 681.768683][ T7044] do_syscall_64+0x4c/0xa0 [ 681.773112][ T7044] ? clear_bhb_loop+0x15/0x70 [ 681.777795][ T7044] ? clear_bhb_loop+0x15/0x70 [ 681.782484][ T7044] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 681.788402][ T7044] RIP: 0033:0x7ff313d8d37c [ 681.792822][ T7044] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 681.812445][ T7044] RSP: 002b:00007ff314b95030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 681.820898][ T7044] RAX: ffffffffffffffda RBX: 00007ff313fb6160 RCX: 00007ff313d8d37c [ 681.828908][ T7044] RDX: 000000000000000f RSI: 00007ff314b950a0 RDI: 000000000000000b [ 681.836914][ T7044] RBP: 00007ff314b95090 R08: 0000000000000000 R09: 0000000000000000 [ 681.844903][ T7044] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 681.853000][ T7044] R13: 0000000000000000 R14: 00007ff313fb6160 R15: 00007ffd67c3dfa8 [ 681.861007][ T7044] [ 681.927718][ T28] audit: type=1400 audit(1748184262.677:590): avc: denied { write } for pid=7040 comm="syz.4.1943" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 682.018140][ T28] audit: type=1400 audit(1748184262.677:591): avc: denied { nlmsg_write } for pid=7040 comm="syz.4.1943" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 682.062661][ T3969] EXT4-fs (loop6): unmounting filesystem. [ 682.550443][ T28] audit: type=1326 audit(1748184263.627:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7051 comm="syz.3.1947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e13f8e969 code=0x7fc00000 [ 682.579345][ T650] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 682.588670][ T7059] random: crng reseeded on system resumption [ 682.669754][ T28] audit: type=1400 audit(1748184263.647:593): avc: denied { write } for pid=7058 comm="syz.6.1948" name="snapshot" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 682.699277][ T28] audit: type=1400 audit(1748184263.657:594): avc: denied { open } for pid=7058 comm="syz.6.1948" path="/dev/snapshot" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 682.746529][ T28] audit: type=1326 audit(1748184263.687:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7051 comm="syz.3.1947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e13f8e969 code=0x7fc00000 [ 682.800196][ T650] usb 8-1: config 0 has an invalid descriptor of length 83, skipping remainder of the config [ 682.815569][ T650] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 682.879149][ T650] usb 8-1: New USB device found, idVendor=172f, idProduct=0502, bcdDevice= 0.00 [ 682.888243][ T650] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 682.899251][ T28] audit: type=1326 audit(1748184263.977:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7051 comm="syz.3.1947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e13f8e969 code=0x7fc00000 [ 682.927946][ T650] usb 8-1: config 0 descriptor?? [ 682.934383][ T7064] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1949'. [ 682.944740][ T650] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 682.953857][ T28] audit: type=1326 audit(1748184263.987:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7051 comm="syz.3.1947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9e13f8e969 code=0x7fc00000 [ 682.995217][ T7062] loop6: detected capacity change from 0 to 40427 [ 683.009031][ T28] audit: type=1326 audit(1748184263.987:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7051 comm="syz.3.1947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e13f8e969 code=0x7fc00000 [ 683.037818][ T7062] F2FS-fs (loop6): Insane cp_payload (553648128 >= 504) [ 683.054119][ T7062] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 683.062841][ T7062] F2FS-fs (loop6): fault_injection options not supported [ 683.081364][ T7062] F2FS-fs (loop6): fault_type options not supported [ 683.089330][ T7062] F2FS-fs (loop6): heap/no_heap options were deprecated [ 683.101453][ T7070] loop4: detected capacity change from 0 to 1024 [ 683.107119][ T7062] F2FS-fs (loop6): invalid crc value [ 683.116329][ T7070] EXT4-fs: Ignoring removed i_version option [ 683.122757][ T7070] EXT4-fs: quotafile must be on filesystem root [ 683.181989][ T7077] loop3: detected capacity change from 0 to 512 [ 683.189368][ T7077] EXT4-fs: Ignoring removed i_version option [ 683.783723][ T7062] F2FS-fs (loop6): Found nat_bits in checkpoint [ 683.801328][ T7077] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 684.098761][ T7062] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 684.108419][ T7062] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 684.160627][ T7088] input: syz0 as /devices/virtual/input/input68 [ 684.288501][ T3969] syz-executor: attempt to access beyond end of device [ 684.288501][ T3969] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 684.347608][ T288] EXT4-fs (loop3): unmounting filesystem. [ 685.669603][ T650] usb 8-1: USB disconnect, device number 5 [ 686.270803][ T7106] loop7: detected capacity change from 0 to 256 [ 686.298034][ T7106] FAT-fs (loop7): Directory bread(block 64) failed [ 686.304708][ T7106] FAT-fs (loop7): Directory bread(block 65) failed [ 686.311429][ T7106] FAT-fs (loop7): Directory bread(block 66) failed [ 686.318072][ T7106] FAT-fs (loop7): Directory bread(block 67) failed [ 686.324840][ T7106] FAT-fs (loop7): Directory bread(block 68) failed [ 686.331506][ T7106] FAT-fs (loop7): Directory bread(block 69) failed [ 686.338181][ T7106] FAT-fs (loop7): Directory bread(block 70) failed [ 686.344760][ T7106] FAT-fs (loop7): Directory bread(block 71) failed [ 686.351572][ T7106] FAT-fs (loop7): Directory bread(block 72) failed [ 686.358189][ T7106] FAT-fs (loop7): Directory bread(block 73) failed [ 687.061928][ T7109] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1961'. [ 687.194855][ T28] kauditd_printk_skb: 67 callbacks suppressed [ 687.194873][ T28] audit: type=1326 audit(1748184268.267:666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7119 comm="syz.6.1964" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1b9778e969 code=0x0 [ 687.343953][ T7125] loop7: detected capacity change from 0 to 128 [ 687.352575][ T7123] fuse: Bad value for 'user_id' [ 687.359082][ T28] audit: type=1400 audit(1748184268.427:667): avc: denied { name_bind } for pid=7121 comm="syz.4.1965" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 687.390977][ T6128] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 687.394162][ T7125] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 687.425186][ T7125] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 687.474963][ T5870] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 687.486813][ T5870] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 687.496103][ T5870] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 687.505534][ T5870] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 687.509436][ T7125] syz.7.1966 (7125) used greatest stack depth: 20032 bytes left [ 687.513947][ T5870] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 687.530731][ T5870] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 687.539760][ T5870] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 687.548125][ T5870] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 687.569998][ T28] audit: type=1400 audit(1748184268.647:668): avc: denied { setcurrent } for pid=7130 comm="syz.7.1968" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 687.590143][ T28] audit: type=1401 audit(1748184268.667:669): op=security_bounded_transition seresult=denied oldcontext=root:sysadm_r:sysadm_t newcontext=system_u:object_r:hugetlbfs_t [ 687.882928][ T7136] loop7: detected capacity change from 0 to 512 [ 687.890461][ T7136] EXT4-fs: Ignoring removed i_version option [ 687.960546][ T7136] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 688.774122][ T7154] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1977'. [ 688.886610][ T28] audit: type=1400 audit(1748184269.957:670): avc: denied { mounton } for pid=7151 comm="syz.6.1976" path="/179/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 688.911177][ T7143] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1973'. [ 688.921876][ T5965] EXT4-fs (loop7): unmounting filesystem. [ 688.993396][ T7163] loop2: detected capacity change from 0 to 128 [ 689.000969][ T7163] /dev/loop2: Can't open blockdev [ 689.047362][ T7164] incfs: Options parsing error. -22 [ 689.282885][ T28] audit: type=1400 audit(1748184270.357:671): avc: denied { read write } for pid=7167 comm="syz.7.1978" name="ppp" dev="devtmpfs" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 689.326011][ T7164] incfs: mount failed -22 [ 689.540295][ T28] audit: type=1400 audit(1748184270.377:672): avc: denied { open } for pid=7167 comm="syz.7.1978" path="/dev/ppp" dev="devtmpfs" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 689.630343][ T28] audit: type=1400 audit(1748184270.437:673): avc: denied { ioctl } for pid=7167 comm="syz.7.1978" path="/dev/ppp" dev="devtmpfs" ino=158 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 690.368827][ T7188] loop4: detected capacity change from 0 to 128 [ 690.433428][ T7188] /dev/loop4: Can't open blockdev [ 690.446970][ T28] audit: type=1400 audit(1748184271.517:674): avc: denied { write } for pid=7182 comm="syz.2.1985" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 690.564035][ T28] audit: type=1400 audit(1748184271.637:675): avc: denied { setattr } for pid=7184 comm="syz.3.1986" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 690.833140][ T7198] loop7: detected capacity change from 0 to 512 [ 690.839934][ T7198] EXT4-fs: Ignoring removed i_version option [ 690.940750][ T7198] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 691.410241][ T7201] syz.6.1990[7201] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 691.410330][ T7201] syz.6.1990[7201] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 691.441146][ T7206] syz.4.1991[7206] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 691.459267][ T7206] syz.4.1991[7206] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 691.606601][ T5965] EXT4-fs (loop7): unmounting filesystem. [ 691.663463][ T7210] syz.7.1993[7210] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 691.663661][ T7210] syz.7.1993[7210] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 691.677484][ T7206] FAULT_INJECTION: forcing a failure. [ 691.677484][ T7206] name failslab, interval 1, probability 0, space 0, times 0 [ 691.703610][ T7206] CPU: 0 PID: 7206 Comm: syz.4.1991 Not tainted 6.1.134-syzkaller-00039-g3c6d0251e1fb #0 [ 691.713444][ T7206] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 691.714196][ T7210] loop7: detected capacity change from 0 to 1024 [ 691.723519][ T7206] Call Trace: [ 691.723530][ T7206] [ 691.723537][ T7206] __dump_stack+0x21/0x24 [ 691.723569][ T7206] dump_stack_lvl+0xee/0x150 [ 691.730302][ T7210] EXT4-fs: Ignoring removed nomblk_io_submit option [ 691.733163][ T7206] ? __cfi_dump_stack_lvl+0x8/0x8 [ 691.756591][ T7206] ? ____fput+0x15/0x20 [ 691.760758][ T7206] ? exit_to_user_mode_loop+0x9b/0xb0 [ 691.766145][ T7206] ? exit_to_user_mode_prepare+0x5a/0xa0 [ 691.770564][ T7210] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 691.771781][ T7206] ? syscall_exit_to_user_mode+0x1a/0x30 [ 691.785810][ T7206] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 691.791978][ T7206] dump_stack+0x15/0x24 [ 691.796159][ T7206] should_fail_ex+0x3d4/0x520 [ 691.800854][ T7206] __should_failslab+0xac/0xf0 [ 691.805647][ T7206] ? tracepoint_probe_unregister+0x1e6/0x8b0 [ 691.811649][ T7206] should_failslab+0x9/0x20 [ 691.816175][ T7206] __kmem_cache_alloc_node+0x3d/0x2c0 [ 691.821559][ T7206] ? __cfi_mutex_lock+0x10/0x10 [ 691.826428][ T7206] ? delete_node+0x2f4/0xa60 [ 691.831029][ T7206] ? tracepoint_probe_unregister+0x1e6/0x8b0 [ 691.837021][ T7206] __kmalloc+0xa1/0x1e0 [ 691.841188][ T7206] ? __cfi___bpf_trace_sched_switch+0x10/0x10 [ 691.847268][ T7206] tracepoint_probe_unregister+0x1e6/0x8b0 [ 691.853087][ T7206] bpf_probe_unregister+0x61/0x70 [ 691.858127][ T7206] bpf_raw_tp_link_release+0x63/0x90 [ 691.863422][ T7206] bpf_link_free+0x13a/0x390 [ 691.868028][ T7206] ? bpf_link_put_deferred+0x20/0x20 [ 691.873327][ T7206] ? security_file_free+0xd8/0xf0 [ 691.878361][ T7206] bpf_link_release+0x15f/0x170 [ 691.883225][ T7206] ? __cfi_bpf_link_release+0x10/0x10 [ 691.888609][ T7206] __fput+0x1fc/0x8f0 [ 691.892599][ T7206] ? _raw_spin_unlock+0x4c/0x70 [ 691.897462][ T7206] ____fput+0x15/0x20 [ 691.901459][ T7206] task_work_run+0x1db/0x240 [ 691.906058][ T7206] ? __cfi_task_work_run+0x10/0x10 [ 691.911184][ T7206] ? __cfi___close_range+0x10/0x10 [ 691.916311][ T7206] exit_to_user_mode_loop+0x9b/0xb0 [ 691.921527][ T7206] exit_to_user_mode_prepare+0x5a/0xa0 [ 691.927009][ T7206] syscall_exit_to_user_mode+0x1a/0x30 [ 691.932486][ T7206] do_syscall_64+0x58/0xa0 [ 691.936924][ T7206] ? clear_bhb_loop+0x15/0x70 [ 691.941612][ T7206] ? clear_bhb_loop+0x15/0x70 [ 691.946293][ T7206] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 691.952284][ T7206] RIP: 0033:0x7ff313d8e969 [ 691.956704][ T7206] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 691.976314][ T7206] RSP: 002b:00007ff314bb6038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 691.984742][ T7206] RAX: 0000000000000000 RBX: 00007ff313fb6080 RCX: 00007ff313d8e969 [ 691.992729][ T7206] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000009 [ 692.000716][ T7206] RBP: 00007ff314bb6090 R08: 0000000000000000 R09: 0000000000000000 [ 692.008690][ T7206] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 692.016667][ T7206] R13: 0000000000000000 R14: 00007ff313fb6080 R15: 00007ffd67c3dfa8 [ 692.024651][ T7206] [ 692.092806][ T7206] CFI failure at __traceiter_sched_switch+0x9b/0xd0 (target: tp_stub_func+0x0/0x10; expected type: 0xee1f7a69) [ 692.104600][ T7206] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 692.110681][ T7206] CPU: 1 PID: 7206 Comm: syz.4.1991 Not tainted 6.1.134-syzkaller-00039-g3c6d0251e1fb #0 [ 692.120501][ T7206] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 692.130574][ T7206] RIP: 0010:__traceiter_sched_switch+0x9b/0xd0 [ 692.136769][ T7206] Code: 80 3c 30 00 74 05 e8 94 4b 69 00 49 8b 7d 08 44 89 e6 48 8b 55 c8 48 8b 4d c0 44 8b 45 d4 41 ba 97 85 e0 11 45 03 57 fc 74 02 <0f> 0b 41 ff d7 48 83 c3 18 48 89 d8 48 c1 e8 03 42 80 3c 30 00 74 [ 692.156399][ T7206] RSP: 0018:ffffc9000dacf690 EFLAGS: 00010096 [ 692.162490][ T7206] RAX: 1ffff11021a984c6 RBX: ffff88810d4c2628 RCX: ffff88813a4ea880 [ 692.170482][ T7206] RDX: ffff88813b9f5100 RSI: 0000000000000001 RDI: ffffc9000dc8d000 [ 692.171447][ T7213] loop2: detected capacity change from 0 to 40427 [ 692.178465][ T7206] RBP: ffffc9000dacf6d0 R08: 0000000000000000 R09: fffffbfff0ee4416 [ 692.185539][ T7213] CFI failure at __traceiter_sched_switch+0x9b/0xd0 (target: tp_stub_func+0x0/0x10; expected type: 0xee1f7a69) [ 692.192848][ T7206] R10: 00000000b720eca3 R11: 1ffffffff0ee4415 R12: 0000000000000001 [ 692.212511][ T7206] R13: ffff88810d4c2628 R14: dffffc0000000000 R15: ffffffff817104f0 [ 692.220460][ T7206] FS: 00007ff314bb66c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 692.229456][ T7206] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 692.236201][ T7206] CR2: 0000200000151000 CR3: 0000000119369000 CR4: 00000000003526a0 [ 692.244247][ T7206] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 692.252224][ T7206] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 692.260188][ T7206] Call Trace: [ 692.263453][ T7206] [ 692.266366][ T7206] __schedule+0x1263/0x14e0 [ 692.270859][ T7206] ? release_firmware_map_entry+0x194/0x194 [ 692.276733][ T7206] ? check_preempt_wakeup+0x5be/0xbc0 [ 692.282082][ T7206] ? preempt_schedule+0xa7/0xb0 [ 692.286910][ T7206] preempt_schedule_common+0x9b/0xf0 [ 692.292170][ T7206] preempt_schedule+0xa7/0xb0 [ 692.296821][ T7206] ? __cfi_preempt_schedule+0x10/0x10 [ 692.302166][ T7206] ? probe_sched_wakeup+0x71/0x90 [ 692.307207][ T7206] ? ttwu_do_wakeup+0x468/0x490 [ 692.312049][ T7206] preempt_schedule_thunk+0x16/0x18 [ 692.317222][ T7206] try_to_wake_up+0x6b8/0x1220 [ 692.321958][ T7206] ? _raw_spin_lock+0x8e/0xe0 [ 692.326609][ T7206] wake_up_q+0xdc/0x1b0 [ 692.330737][ T7206] __mutex_unlock_slowpath+0x262/0x3b0 [ 692.336174][ T7206] ? exit_to_user_mode_loop+0x9b/0xb0 [ 692.341517][ T7206] ? exit_to_user_mode_prepare+0x5a/0xa0 [ 692.347136][ T7206] ? mutex_unlock+0x220/0x220 [ 692.351800][ T7206] ? should_fail_ex+0x2a3/0x520 [ 692.356638][ T7206] ? __should_failslab+0xac/0xf0 [ 692.361647][ T7206] mutex_unlock+0xd8/0x220 [ 692.366040][ T7206] ? __cfi_mutex_unlock+0x10/0x10 [ 692.371038][ T7206] ? __kasan_kmalloc+0x24/0xb0 [ 692.375773][ T7206] ? tracepoint_probe_unregister+0x1e6/0x8b0 [ 692.381739][ T7206] ? __kmalloc+0xb1/0x1e0 [ 692.386042][ T7206] ? __cfi___bpf_trace_sched_switch+0x10/0x10 [ 692.392083][ T7206] tracepoint_probe_unregister+0x84e/0x8b0 [ 692.397868][ T7206] bpf_probe_unregister+0x61/0x70 [ 692.402885][ T7206] bpf_raw_tp_link_release+0x63/0x90 [ 692.408149][ T7206] bpf_link_free+0x13a/0x390 [ 692.412715][ T7206] ? bpf_link_put_deferred+0x20/0x20 [ 692.417973][ T7206] ? security_file_free+0xd8/0xf0 [ 692.422999][ T7206] bpf_link_release+0x15f/0x170 [ 692.427838][ T7206] ? __cfi_bpf_link_release+0x10/0x10 [ 692.433185][ T7206] __fput+0x1fc/0x8f0 [ 692.437141][ T7206] ? _raw_spin_unlock+0x4c/0x70 [ 692.441966][ T7206] ____fput+0x15/0x20 [ 692.445918][ T7206] task_work_run+0x1db/0x240 [ 692.450481][ T7206] ? __cfi_task_work_run+0x10/0x10 [ 692.455562][ T7206] ? __cfi___close_range+0x10/0x10 [ 692.460647][ T7206] exit_to_user_mode_loop+0x9b/0xb0 [ 692.465815][ T7206] exit_to_user_mode_prepare+0x5a/0xa0 [ 692.471245][ T7206] syscall_exit_to_user_mode+0x1a/0x30 [ 692.476675][ T7206] do_syscall_64+0x58/0xa0 [ 692.481070][ T7206] ? clear_bhb_loop+0x15/0x70 [ 692.485720][ T7206] ? clear_bhb_loop+0x15/0x70 [ 692.490386][ T7206] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 692.496275][ T7206] RIP: 0033:0x7ff313d8e969 [ 692.500682][ T7206] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 692.520282][ T7206] RSP: 002b:00007ff314bb6038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 692.528836][ T7206] RAX: 0000000000000000 RBX: 00007ff313fb6080 RCX: 00007ff313d8e969 [ 692.536779][ T7206] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000009 [ 692.544720][ T7206] RBP: 00007ff314bb6090 R08: 0000000000000000 R09: 0000000000000000 [ 692.552664][ T7206] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 692.560608][ T7206] R13: 0000000000000000 R14: 00007ff313fb6080 R15: 00007ffd67c3dfa8 [ 692.568554][ T7206] [ 692.571557][ T7206] Modules linked in: [ 692.575432][ T7206] ---[ end trace 0000000000000000 ]--- [ 692.575466][ T7213] invalid opcode: 0000 [#2] PREEMPT SMP KASAN [ 692.580875][ T7206] RIP: 0010:__traceiter_sched_switch+0x9b/0xd0 [ 692.586940][ T7213] CPU: 0 PID: 7213 Comm: syz.2.1992 Tainted: G D 6.1.134-syzkaller-00039-g3c6d0251e1fb #0 [ 692.593080][ T7206] Code: 80 3c 30 00 74 05 e8 94 4b 69 00 49 8b 7d 08 44 89 e6 48 8b 55 c8 48 8b 4d c0 44 8b 45 d4 41 ba 97 85 e0 11 45 03 57 fc 74 02 <0f> 0b 41 ff d7 48 83 c3 18 48 89 d8 48 c1 e8 03 42 80 3c 30 00 74 [ 692.604338][ T7213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 692.624011][ T7206] RSP: 0018:ffffc9000dacf690 EFLAGS: 00010096 [ 692.634057][ T7213] RIP: 0010:__traceiter_sched_switch+0x9b/0xd0 [ 692.640111][ T7206] RAX: 1ffff11021a984c6 RBX: ffff88810d4c2628 RCX: ffff88813a4ea880 [ 692.646246][ T7213] Code: 80 3c 30 00 74 05 e8 94 4b 69 00 49 8b 7d 08 44 89 e6 48 8b 55 c8 48 8b 4d c0 44 8b 45 d4 41 ba 97 85 e0 11 45 03 57 fc 74 02 <0f> 0b 41 ff d7 48 83 c3 18 48 89 d8 48 c1 e8 03 42 80 3c 30 00 74 [ 692.654203][ T7206] RDX: ffff88813b9f5100 RSI: 0000000000000001 RDI: ffffc9000dc8d000 [ 692.673792][ T7213] RSP: 0018:ffffc90009de72b0 EFLAGS: 00010096 [ 692.681756][ T7206] RBP: ffffc9000dacf6d0 R08: 0000000000000000 R09: fffffbfff0ee4416 [ 692.681780][ T7206] R10: 00000000b720eca3 R11: 1ffffffff0ee4415 R12: 0000000000000001 [ 692.687827][ T7213] RAX: 1ffff11021a984c6 RBX: ffff88810d4c2628 RCX: ffff8881182d1440 [ 692.695798][ T7206] R13: ffff88810d4c2628 R14: dffffc0000000000 R15: ffffffff817104f0 [ 692.703849][ T7213] RDX: ffff888120e8e540 RSI: 0000000000000000 RDI: ffffc9000dc8d000 [ 692.711814][ T7206] FS: 00007ff314bb66c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 692.719773][ T7213] RBP: ffffc90009de72f0 R08: 0000000000000002 R09: fffffbfff0ee4416 [ 692.727732][ T7206] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 692.736658][ T7213] R10: 00000000b720eca3 R11: 1ffffffff0ee4415 R12: 0000000000000000 [ 692.744617][ T7206] CR2: 0000200000151000 CR3: 0000000119369000 CR4: 00000000003526a0 [ 692.751189][ T7213] R13: ffff88810d4c2628 R14: dffffc0000000000 R15: ffffffff817104f0 [ 692.759155][ T7206] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 692.767127][ T7213] FS: 00007fae0f9de6c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 692.775116][ T7206] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 692.783090][ T7213] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 692.792096][ T7206] Kernel panic - not syncing: Fatal exception [ 692.800062][ T7213] CR2: 00000000ffffffff CR3: 0000000132c2e000 CR4: 00000000003526b0 [ 692.800083][ T7213] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 692.800093][ T7213] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 692.800105][ T7213] Call Trace: [ 692.800112][ T7213] [ 692.800122][ T7213] __schedule+0x1263/0x14e0 [ 692.800155][ T7213] ? release_firmware_map_entry+0x194/0x194 [ 692.800178][ T7213] ? _raw_spin_unlock_irqrestore+0x5a/0x80 [ 692.800201][ T7213] schedule+0xbd/0x170 [ 692.800222][ T7213] blk_mq_freeze_queue_wait+0xe2/0x170 [ 692.800242][ T7213] ? __cfi_blk_mq_freeze_queue_wait+0x10/0x10 [ 692.800261][ T7213] ? blk_mq_run_hw_queues+0x36e/0x430 [ 692.800280][ T7213] ? __cfi_autoremove_wake_function+0x10/0x10 [ 692.800304][ T7213] ? __cfi_blk_mq_run_hw_queues+0x10/0x10 [ 692.800323][ T7213] ? _raw_spin_unlock_irqrestore+0x5a/0x80 [ 692.800345][ T7213] ? percpu_ref_kill_and_confirm+0xf0/0x210 [ 692.800370][ T7213] blk_freeze_queue+0xc3/0xf0 [ 692.800390][ T7213] blk_mq_freeze_queue+0x15/0x20 [ 692.800409][ T7213] __loop_clr_fd+0xd1/0x690 [ 692.800432][ T7213] lo_ioctl+0x135b/0x1cf0 [ 692.800454][ T7213] ? __cfi__raw_spin_lock+0x10/0x10 [ 692.800474][ T7213] ? __cfi_avc_has_perm_noaudit+0x10/0x10 [ 692.800497][ T7213] ? __cfi_lo_ioctl+0x10/0x10 [ 692.800517][ T7213] ? find_inode_fast+0x39d/0x3c0 [ 692.800536][ T7213] ? iget_locked+0x8b0/0x8b0 [ 692.800559][ T7213] ? 0xffffffffa000064c [ 692.800571][ T7213] ? is_bpf_text_address+0x177/0x190 [ 692.800593][ T7213] ? kernel_text_address+0xa0/0xd0 [ 692.800613][ T7213] ? __kernel_text_address+0xd/0x30 [ 692.800633][ T7213] ? unwind_get_return_address+0x4d/0x90 [ 692.800651][ T7213] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 692.800672][ T7213] ? arch_stack_walk+0xfc/0x150 [ 692.800711][ T7213] ? memcpy+0x56/0x70 [ 692.800735][ T7213] ? avc_has_extended_perms+0x95f/0xdc0 [ 692.800757][ T7213] ? __cfi_avc_has_extended_perms+0x10/0x10 [ 692.800779][ T7213] ? kasan_set_track+0x60/0x70 [ 692.800794][ T7213] ? kasan_set_track+0x4b/0x70 [ 692.800809][ T7213] ? kasan_save_free_info+0x31/0x50 [ 692.800831][ T7213] ? do_vfs_ioctl+0xc36/0x1c80 [ 692.800854][ T7213] ? __ia32_compat_sys_ioctl+0x790/0x790 [ 692.800883][ T7213] ? blkdev_common_ioctl+0x636/0x1d70 [ 692.800913][ T7213] ? blkdev_bszset+0x1f0/0x1f0 [ 692.800935][ T7213] ? ioctl_has_perm+0x391/0x4c0 [ 692.800952][ T7213] ? has_cap_mac_admin+0x330/0x330 [ 692.800971][ T7213] ? slab_free_freelist_hook+0xc2/0x190 [ 692.800995][ T7213] ? selinux_file_ioctl+0x377/0x480 [ 692.801013][ T7213] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 692.801030][ T7213] ? __cfi_lo_ioctl+0x10/0x10 [ 692.801051][ T7213] blkdev_ioctl+0x359/0x690 [ 692.801073][ T7213] ? __cfi_blkdev_ioctl+0x10/0x10 [ 692.801095][ T7213] ? security_file_ioctl+0x95/0xc0 [ 692.801113][ T7213] ? __cfi_blkdev_ioctl+0x10/0x10 [ 692.801135][ T7213] __se_sys_ioctl+0x12f/0x1b0 [ 692.801159][ T7213] __x64_sys_ioctl+0x7b/0x90 [ 692.801182][ T7213] x64_sys_call+0x58b/0x9a0 [ 692.801202][ T7213] do_syscall_64+0x4c/0xa0 [ 692.801224][ T7213] ? clear_bhb_loop+0x15/0x70 [ 692.801239][ T7213] ? clear_bhb_loop+0x15/0x70 [ 692.801256][ T7213] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 692.801280][ T7213] RIP: 0033:0x7fae0fb8e56b [ 692.801294][ T7213] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 692.801310][ T7213] RSP: 002b:00007fae0f9dde10 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 692.801329][ T7213] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 00007fae0fb8e56b [ 692.801342][ T7213] RDX: 0000000000000000 RSI: 0000000000004c01 RDI: 000000000000000c [ 692.801353][ T7213] RBP: 000000000000000c R08: 0000000000000000 R09: 0000000000000000 [ 692.801364][ T7213] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000d [ 692.801375][ T7213] R13: 00007fae0f9ddeb0 R14: 0000000000005557 R15: 0000200000000340 [ 692.801392][ T7213] [ 692.801397][ T7213] Modules linked in: [ 692.807979][ T7213] ---[ end trace 0000000000000000 ]--- [ 692.807988][ T7213] RIP: 0010:__traceiter_sched_switch+0x9b/0xd0 [ 692.808009][ T7213] Code: 80 3c 30 00 74 05 e8 94 4b 69 00 49 8b 7d 08 44 89 e6 48 8b 55 c8 48 8b 4d c0 44 8b 45 d4 41 ba 97 85 e0 11 45 03 57 fc 74 02 <0f> 0b 41 ff d7 48 83 c3 18 48 89 d8 48 c1 e8 03 42 80 3c 30 00 74 [ 692.808023][ T7213] RSP: 0018:ffffc9000dacf690 EFLAGS: 00010096 [ 692.808037][ T7213] RAX: 1ffff11021a984c6 RBX: ffff88810d4c2628 RCX: ffff88813a4ea880 [ 692.808051][ T7213] RDX: ffff88813b9f5100 RSI: 0000000000000001 RDI: ffffc9000dc8d000 [ 692.808063][ T7213] RBP: ffffc9000dacf6d0 R08: 0000000000000000 R09: fffffbfff0ee4416 [ 692.808075][ T7213] R10: 00000000b720eca3 R11: 1ffffffff0ee4415 R12: 0000000000000001 [ 692.808087][ T7213] R13: ffff88810d4c2628 R14: dffffc0000000000 R15: ffffffff817104f0 [ 692.808100][ T7213] FS: 00007fae0f9de6c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 692.808116][ T7213] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 692.808129][ T7213] CR2: 00000000ffffffff CR3: 0000000132c2e000 CR4: 00000000003526b0 [ 692.808145][ T7213] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 692.808156][ T7213] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 693.921842][ T7206] Shutting down cpus with NMI [ 694.433677][ T7206] Kernel Offset: disabled [ 694.437991][ T7206] Rebooting in 86400 seconds..