last executing test programs: 46.733285578s ago: executing program 1 (id=176): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]}) tgkill(0x0, 0x0, 0x19) 46.688995789s ago: executing program 1 (id=177): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000100)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@errors_remount}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x55a, &(0x7f0000000480)="$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") r0 = open$dir(&(0x7f0000000080)='./file1\x00', 0x8a900, 0x18d) r1 = openat(r0, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000170000009500000000000000133629fb8c30"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000400)={r4, r3, 0x25, 0x2, @val=@tracing}, 0x20) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) syz_emit_ethernet(0x26, &(0x7f0000000980)=ANY=[], 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000e40)=@bpf_tracing={0x1a, 0x5, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@jmp={0x5, 0x1, 0x0, 0xd, 0x9, 0x10, 0xfffffffffffffffa}, @generic={0x5, 0x9, 0xc, 0xe14a, 0x4ef0}]}, &(0x7f00000001c0)='GPL\x00', 0x1, 0xb2, &(0x7f00000003c0)=""/178, 0x41100, 0x40, '\x00', 0x0, 0x18, r0, 0x8, &(0x7f0000000300)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000000340)={0x0, 0x10, 0x5, 0x4}, 0x10, 0xcfaf, r1, 0x2, 0x0, &(0x7f0000000380)=[{0x2, 0x2, 0xd, 0x6}, {0x1, 0x4, 0x1, 0xb}], 0x10, 0x10, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000dc0)={r8, 0x0, 0x95, 0xc4, &(0x7f0000000a00)="c7c4dff54e49a4e1d8937392ef960050d4d1ba6aba46936caa21bbf9423e952da215431e0ea956bfd87d54f9e71feb6eb17ed819b08a58a9dde737341cd267d810eeed1ad0c9a45c22fb1beaa86b46e964eef5ec1bf8299c59564a3835a0a2a8f980b4d68739b83e2ad4870bd48358cbef49f99662888e1489f30241b6583457ff4e927e7e404dbe70eaff1d076340f28ffcf07c0f", &(0x7f0000000ac0)=""/196, 0x10001, 0x0, 0xf4, 0xdf, &(0x7f0000000bc0)="f7eae0c4668d9b9dc5a5e85882cae61e528249db346847bdc67f7c3a6289fbe601744b8861bfe7376c4d2f4ba940152a2c014465d3c211857f36a438e96dc786453f3c880baadc890733241d39b618e94b147980ae8ee6ec5dbd9d8e7bab83b9854c1d17e4274d0c855cabe498c0130b2b760ce8266f9298165fbed04b96df12d9c093826d52dd476c7ead344d4c59afe947ee539d56b73e245f4e5ed52c3343d4670567a62a11cc259a43c75b374285092f308c4dab86133aa3486b69d00e239d186aa4b7696ba7170847b9437d1b8a1791296439f11f22f53b3807b88ab1cf5fd1308e74b9d720bafbf2e89d5639a46e3224fa", &(0x7f0000000cc0)="bf2b00c705afdebc61299a7208aa998178a5183b889aeff2ec8ab0232a725576c100f1ff27c672c90b45cf004305a81cd5be7900e49e41b0a001b3e035eebe6382f701af1db0c4fcb930c9b22ef1d069d93a112303cd235b7da4aac41bfe3f8beac45caa0d1b4d10bab509b35bbda8623e1306e14f8e353a3417a13b45b4295096b4b89fc2c4340bb07be9c66a7b37411d34dfd99a7018a80ef75495850c11724948183d53defa347b59076a35939ae74e122ac48ffcf20e632bee50ab2c442e537eda013584f0fe0764ff7d79312f841a87cd93de6bbaa4dfde07d2b03823", 0x2, 0x0, 0x8}, 0x50) r9 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$KIOCSOUND(r9, 0x4b2f, 0x7) ftruncate(r7, 0xc17a) read$FUSE(r7, &(0x7f0000001f00)={0x2020}, 0xfffffee9) prctl$PR_GET_UNALIGN(0x24, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000000200)={0x200008000, 0x9, 0x5, 0x1001}) 46.245024685s ago: executing program 1 (id=178): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$search(0xa, r1, 0x0, 0x0, 0x0) keyctl$KEYCTL_PKEY_QUERY(0x18, r1, 0x0, &(0x7f0000000280)='\x00', &(0x7f00000002c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1b, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xa, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x7752, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 46.227171145s ago: executing program 1 (id=179): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = io_uring_setup(0x693a, &(0x7f00000005c0)={0x0, 0x3, 0x8000, 0x3, 0x3ba}) close_range(r2, 0xffffffffffffffff, 0x0) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) r4 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCGNAME(r4, 0x80404806, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0200000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="10000000000000000000000000eac212fda5fc33770000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=ANY=[@ANYRES8=r5, @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300"/72], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r8}, 0x10) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="a800000000010904000500000000000002000000240001801400018008000100e000000108000200ac1e01010c00028005000100000009002400028014000180080001000000010908000200ac1e00010c000280050001000000000044000f800800014000000006080003400000002b080003400000000808000240000000400800014000000000fb0001400000000708000140000044f10800034000000003080007"], 0xa8}}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000640)={[{@nobh}, {@auto_da_alloc}, {@data_err_ignore}, {@jqfmt_vfsv1}, {@test_dummy_encryption}]}, 0x3, 0x4cd, &(0x7f0000000c80)="$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") getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000003c0)={{{@in6=@empty, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f00000004c0)=0xe8) mount$tmpfs(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x1310034, &(0x7f0000000500)=ANY=[@ANYBLOB="6e725f626c6f636b733d2c71756f74612c756964f0", @ANYRESHEX=r10, @ANYBLOB=',grpquota_block_hardlimit=3,usrquota_block_hardlimit=32g,huge=never,indo64,nr_inodes=1,grpquota,usrquota,seclabel,\x00']) r11 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x44) sendfile(r11, r11, 0x0, 0x800000009) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r12 = dup(r1) write$FUSE_BMAP(r12, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r12, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r12]) stat(&(0x7f0000000200)='./file0\x00', 0x0) 41.288473523s ago: executing program 1 (id=210): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r4, 0x34, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000080)='task_rename\x00', r2}, 0x10) socket$inet(0x2, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xc66a71e1b212a0d1, 0xe, &(0x7f0000000dc0)=ANY=[@ANYRES8=r5], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = socket$packet(0x11, 0x3, 0x300) unshare(0x2000400) r7 = open(&(0x7f0000000540)='./file0\x00', 0x290400, 0x3) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r6, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) socket$netlink(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000380)='task_rename\x00', r8}, 0x18) r9 = syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x141aca, 0x0, 0xff, 0x0, &(0x7f0000000180)) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYRES64=r9, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r11}, 0x10) write$P9_RVERSION(r10, &(0x7f00000003c0)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) ioprio_get$pid(0x2, 0x0) dup(r10) 40.556029843s ago: executing program 1 (id=215): syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0300000001000000e27f00000140000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES64=r0, @ANYBLOB='\x00'/28], 0x48) readlink(&(0x7f0000000040)='./file0\x00', &(0x7f0000000700)=""/4096, 0x1000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="0304000000000000000000000000000010110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r4, @ANYBLOB="140001140040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) r5 = socket(0x10, 0x3, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0) sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0x0) 40.476668774s ago: executing program 32 (id=215): syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0300000001000000e27f00000140000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES64=r0, @ANYBLOB='\x00'/28], 0x48) readlink(&(0x7f0000000040)='./file0\x00', &(0x7f0000000700)=""/4096, 0x1000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="0304000000000000000000000000000010110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r4, @ANYBLOB="140001140040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) r5 = socket(0x10, 0x3, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0) sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0x0) 34.93284658s ago: executing program 4 (id=242): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b000000070000000100010009000000010000", @ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r2, 0x8983, &(0x7f0000000040)={0x2, 'macsec0\x00', {}, 0x101}) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x272400, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="01fbff0018000000070000778376bac439"], 0x48) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x13, r8, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r8, 0x4040aea0, &(0x7f0000000300)=@x86={0x2, 0x8, 0x8, 0x0, 0xd1, 0x39, 0x6, 0xfc, 0x3, 0x8, 0x5, 0x6, 0x0, 0x9, 0xb, 0xe, 0x0, 0x7f, 0x0, '\x00', 0x3d, 0xe}) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f00000000c0)={[0x0, 0x800000, 0x2, 0x0, 0x3, 0x4, 0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x0, 0x3, 0x4, 0xa, 0xfffffffffffffffe, 0x0, 0x5], 0x0, 0x84200}) ioctl$KVM_RUN(r8, 0xae80, 0x0) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x2f) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x1c, &(0x7f0000000580)=ANY=[@ANYBLOB="1808868645a1124420ed000000000000181100009aa65118dfa928d185311227c572fadf2dce78512f1980cd939ca439d9ae82d916ffbd33d3d3d90cf0c1c3b1f0e291", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b7060000050000008500000005000000bf0900000000000035090100000000009500000000000000b7020000000000007b9af8ff0000000065090000000000007baaf0ff00000000ad9900000000000007080000f8ffffffbfa400000000000007040000f0ffffffc70200000800000018260000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 34.476888317s ago: executing program 4 (id=246): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file2\x00', 0x800714, &(0x7f00000002c0)={[{@nodiscard}, {@nodelalloc}, {@errors_remount}, {@grpquota}, {@auto_da_alloc}, {@dioread_nolock}, {@acl}]}, 0xff, 0x493, &(0x7f0000000640)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x107042, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x103500, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, &(0x7f0000006880)=@v2={0x2, @adiantum, 0x4, '\x00', @a}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fee000/0x12000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000580)="4229ae9ac9856bb27475fbcb4a8efac4d87f54949823a92910b825fe42a04539c31f347795b040b9cad772e209b6f860dc072a5c986fa434d3e4565d4b9ff992c7734015da7066707c56b5ce8b22957343a31c65beb203b6b61d7c801d8a86553f9ecfbb1549883ab689e119ba6d3f474a62c952c6e54a9cf0cb3da946da81173f98288ec4579b100cd2fec2c4175f64c7ccf9f1f4f2363f8713cef8aa69ea2e741259d3cdc6131d93a74240a90e58be3f4d269b10cccc6d4f46151d3467ad797791dad184dbf18f879b3f01c2c8db3c61d302c06351fa", 0xd7, r1}, 0x68) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xd, &(0x7f0000000280)=@raw=[@call={0x85, 0x0, 0x0, 0xc2}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10001}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @call={0x85, 0x0, 0x0, 0x59}, @initr0={0x18, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x9}], 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = fsopen(&(0x7f0000000140)='proc\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r3}, 0x10) r5 = socket$packet(0x11, 0x2, 0x300) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x40000}, 0x1c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sendto$inet6(r6, &(0x7f0000000100)="a6", 0xd09fd0162b44d49e, 0x840, 0x0, 0x0) setsockopt$sock_int(r6, 0x1, 0x12, &(0x7f0000000340)=0x20000000, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="4eaa00000000000071101c000000000095000000000000009a789293e48c569bb022430256e204793a4f2da019538370078dc1c840bc63b2a2fe34855f7c0fd2fe9dff5f267446e752ca20e510060324bffd2814a24f716b82ec19efa5b0629a94b8ac773f03c0b6337c9b0c1d57567f996be653d49f55f74b3861bcfe4a5ec6429b2f6e61c576431e8e77cd"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r7, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000200)='smaps\x00') pread64(r9, &(0x7f0000000180)=""/116, 0x74, 0x27e) ioctl$PPPIOCATTACH(r9, 0x4004743d, &(0x7f00000001c0)=0x3) 34.135983192s ago: executing program 4 (id=247): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000031c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x924, 0x40801) ioctl$EVIOCSREP(r1, 0x40084503, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) timer_create(0x0, 0x0, &(0x7f0000000100)=0x0) timer_getoverrun(0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000003000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xb, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) fcntl$setpipe(r4, 0x407, 0x0) write$FUSE_INIT(r4, &(0x7f0000000340)={0x50}, 0x50) vmsplice(r4, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x1}], 0x1, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYRES16=r4, @ANYRESHEX=r2, @ANYBLOB='\x00'/20, @ANYBLOB="3e79d1a8b1737190100826e5ec0b444cb037e926937c2d6972e7dd773794dda0c8362a5b", @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r6}, 0x10) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r7, 0x40045402, &(0x7f0000000040)=0x1) r8 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x16, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000072000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000200000000000000001809"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000002c0)='sys_enter\x00', r9}, 0x18) io_getevents(0x0, 0x4, 0x0, 0x0, 0x0) getdents(r8, &(0x7f0000001fc0)=""/184, 0xb8) unshare(0x2040400) r10 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) signalfd(r10, &(0x7f0000000000)={[0x5]}, 0x8) 33.191625885s ago: executing program 4 (id=251): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = io_uring_setup(0x693a, &(0x7f00000005c0)={0x0, 0x3, 0x8000, 0x3, 0x3ba}) close_range(r2, 0xffffffffffffffff, 0x0) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) r4 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCGNAME(r4, 0x80404806, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0200000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="10000000000000000000000000eac212fda5fc33770000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=ANY=[@ANYRES8=r5, @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300"/72], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r8}, 0x10) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="a800000000010904000500000000000002000000240001801400018008000100e000000108000200ac1e01010c00028005000100000009002400028014000180080001000000010908000200ac1e00010c000280050001000000000044000f800800014000000006080003400000002b080003400000000808000240000000400800014000000000fb0001400000000708000140000044f10800034000000003080007"], 0xa8}}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000640)={[{@nobh}, {@auto_da_alloc}, {@data_err_ignore}, {@jqfmt_vfsv1}, {@test_dummy_encryption}]}, 0x3, 0x4cd, &(0x7f0000000c80)="$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") getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000003c0)={{{@in6=@empty, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f00000004c0)=0xe8) mount$tmpfs(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x1310034, &(0x7f0000000500)=ANY=[@ANYBLOB="6e725f626c6f636b733d2c71756f74612c756964f0", @ANYRESHEX=r10, @ANYBLOB=',grpquota_block_hardlimit=3,usrquota_block_hardlimit=32g,huge=never,indo64,nr_inodes=1,grpquota,usrquota,seclabel,\x00']) r11 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x44) sendfile(r11, r11, 0x0, 0x800000009) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r12 = dup(r1) write$FUSE_BMAP(r12, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r12, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r12]) stat(&(0x7f0000000200)='./file0\x00', 0x0) 31.741083644s ago: executing program 2 (id=259): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001040)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kmem_cache_free\x00', r1}, 0x10) fchmodat(0xffffffffffffffff, 0x0, 0x48) 31.34982759s ago: executing program 2 (id=260): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xc, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="660a00000000000061118371abe334134c000000000085000000a90000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/diskstats\x00', 0x0, 0x0) preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000440)=""/244, 0xf4}], 0x1, 0x800, 0xfff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bind$802154_raw(0xffffffffffffffff, 0x0, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000d39e9bb83a21e6aecbf12ee41a23dd6593e537aa222f18ffec8500"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0xc) r5 = memfd_create(0x0, 0x0) execveat(r5, 0x0, 0x0, 0x0, 0x1000) r6 = syz_open_procfs(0x0, &(0x7f0000000200)='timerslack_ns\x00') writev(r6, &(0x7f0000000300)=[{&(0x7f0000000240)="3483", 0x2}], 0x1) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) r8 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r8, 0x6, 0x0, 0x0, 0x0) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), r0) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010026bd7000fbdbdf2505000000200001800d0001005e090000000080009900"], 0x34}, 0x1, 0x0, 0x0, 0x40404}, 0x0) sendmsg$TIPC_NL_KEY_SET(r7, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRES16=r9, @ANYBLOB="000829bd7000fedbdf2517000000680004800900010073797a31000000000900010073797a31000000001300010062726f6164636173742d6c696e6b00000900010073797a31000000000900010073797a30000000000900010073797a30000000001400078008000300400000000800010000000000"], 0x7c}, 0x1, 0x0, 0x0, 0x4004801}, 0x20040004) syz_usb_connect(0x0, 0x3f, &(0x7f00000006c0)=ANY=[@ANYBLOB="12010000413b88400819151300000000000109022d00010000000009040000026bb22b000904fffffd0000000009"], 0x0) fsmount(r8, 0x0, 0x0) 28.908724443s ago: executing program 4 (id=272): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000001600)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=ANY=[], 0x18}}], 0x1, 0x4000) bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="160000000000000004000000", @ANYBLOB, @ANYRES32=0x0, @ANYRES32], 0x48) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="160000000000000004000000", @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0xffffffffffffffff], 0x48) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r3, 0x0, 0x8008000000010, &(0x7f00000003c0), 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYRESDEC=r2], 0x10}}, 0x4000000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xff48, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xff48, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) (async) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000157b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b704000008000000850000009500000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000157b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b704000008000000850000009500000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000400000005"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x101400, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r10, r11, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000001200)=[@textreal={0x8, &(0x7f0000000080)="740023d80f21f86635c00000f00f23f82e6426660fd939baf80c66b80c81d58666efbafc0cb8f656ef66b9800000c00f326635000100000f3026642678dd26f2a7e09ab829008ee0f30f1ef4", 0x4c}], 0x1, 0x48, 0x0, 0x0) fspick(0xffffffffffffff9c, &(0x7f00000004c0)='.\x00', 0x1) write(r11, &(0x7f00000001c0)="1e906565dbccd2fa1cf7a66d8c66ec9e911b06501c4a1ded9927f0b7cce5ae0742dbadd38d4e4e897c6e64c53dca19a10959d25959f4a305aecfbccc28c2af3951793351c7bc0056a93f96b2d3c35005c6d547aac44aad8f260c3d94faf98911a3fa82b4586b2c894db1c721cbb184b0cf0bc3fba9cf12d5f4acc9f0fe4e8f8f1d0d1ce78e7a3af4ad5f2393d14cdfceb7", 0x91) (async) write(r11, &(0x7f00000001c0)="1e906565dbccd2fa1cf7a66d8c66ec9e911b06501c4a1ded9927f0b7cce5ae0742dbadd38d4e4e897c6e64c53dca19a10959d25959f4a305aecfbccc28c2af3951793351c7bc0056a93f96b2d3c35005c6d547aac44aad8f260c3d94faf98911a3fa82b4586b2c894db1c721cbb184b0cf0bc3fba9cf12d5f4acc9f0fe4e8f8f1d0d1ce78e7a3af4ad5f2393d14cdfceb7", 0x91) ioctl$KVM_SET_VAPIC_ADDR(r11, 0x4008ae93, &(0x7f0000000640)=0x4) (async) ioctl$KVM_SET_VAPIC_ADDR(r11, 0x4008ae93, &(0x7f0000000640)=0x4) ioctl$KVM_SET_VCPU_EVENTS(r11, 0x4400ae8f, &(0x7f0000000140)=@arm64={0xf9, 0x3, 0x3, '\x00', 0x8}) socketpair$unix(0x1, 0x1, 0x0, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)) (async) mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x1000083, &(0x7f00000000c0), 0x3, 0x4f0, &(0x7f0000000940)="$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") ioctl$KVM_RUN(r11, 0xae80, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r8}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r8}, 0x10) 27.900934137s ago: executing program 2 (id=274): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000003000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) fcntl$lock(r4, 0x26, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x40, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x3ffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x100000000], 0x2, 0x280384}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000001, 0x10012, r2, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) io_setup(0x2278, &(0x7f0000000180)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_submit(r5, 0x2, &(0x7f0000000140)=[&(0x7f00000001c0)={0x0, 0x4, 0x0, 0x0, 0x0, r6, &(0x7f00000000c0)='5\n', 0x2, 0x0, 0x0, 0x2}, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x2, 0x2, r6, 0x0, 0x0, 0x80}]) eventfd(0x8) r7 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x141842, 0x9) ioctl$F2FS_IOC_SET_PIN_FILE(r7, 0x4004f50d, &(0x7f0000000000)=0x201) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r8, 0x0) preadv(r8, 0x0, 0x0, 0x0, 0x0) 27.315293595s ago: executing program 4 (id=277): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0xffffffffffffff4a, &(0x7f0000000200)={&(0x7f0000000080)={0x18, 0x16, 0xa01}, 0x78}}, 0x0) 27.276697746s ago: executing program 33 (id=277): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0xffffffffffffff4a, &(0x7f0000000200)={&(0x7f0000000080)={0x18, 0x16, 0xa01}, 0x78}}, 0x0) 26.903566081s ago: executing program 2 (id=284): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRES16=r1], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000d00)='sched_switch\x00'}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) socket$inet6(0xa, 0x400000000001, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "810000cc2b00000000ff00f825ffff00ffff00"}) r6 = syz_open_pts(r5, 0x141601) write(r6, 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000400180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000d40)=ANY=[@ANYBLOB="b1a284fd2d7a97ffce38e901d7bf0ee9e48def08b5d9ce7b60331cc954cc2f50c04ac627a1b3ff56157da55dd0a0e303505aa9b6a207109f977d674d62e7392ac50f96efabbebfdf82ebb4f5b671643a42295e758da9240687de29784d4ce0c78b04669b87a79622c7f3d7ec832e285dcc36ae4b0cbb9250ffd4813703586b1b74042675171dc4caabbf86c37761c5", @ANYRESOCT, @ANYRESDEC=r3, @ANYBLOB="c6538adb70006c93ce6f40e1ae107dbb3c5fce896e383d7cbd2d083565a7d564c2a29abd3fc588b0b3cd1ddd0c21b002703a7d92ddb10f4bf22485aeb1297e28b680476c2cbdaa12071e83b4913985df3edd78e8a0ce1e424aa525e70e5ea6842d9ef84b9a98c6339167e7f55988b89437776998452c9a8ebb378f3b3df20ce952ac4dbba14d2e41c17b491d7a2d2172ec1afac853877a7f82b3f085952b74e53ef94658d2b42aec00f0332552eb60216a2927aa0c5a4c5e4cb9f2c9e605a8f5175e53334b9ff5739a4fb53ba64451cbad365b015a28394c2abc02c7ff9af6e2a777ef8490dac0890872716a6b67440c3731a4b85e46c39e7548e188861b431a0cf08f0fa91c95575ce6e024d24cbd1ae7e8ea4a5af35335055121f16cd5c51f9e64f64822aa77a93a98631cb61aef80a1cb6ad0d40facca6b205e609ae5627d4dfb48d03027a0f8319759bac9c688744d7d34cec1c3e846f8760fcb8158fac7fa1db82a182181921a7a306d554a05352b40edca650fa597abe510d65b25990f2bf622e98f2967c6c5945632cb8e59b9ec55970335fd06310fd28619456870cc280ccf35aa74f6fa11ea597e83e48bafee1040a5e0ce95eb571e02dd65d38648cbcebd218249ace8cacaab990b33502d6bffeec61e8f6f2ceba55305c411c0452f91cb3c367098db8ac6c26a6d6aa8104d034a0a1fb985628406ccbf248f8598c98a3fb37b98c1fcf759464a2e633392e78512a15ab959dcace69935b27842691f0a4bf58c21b79379358d47aac5de3633418a7d290af65060ce8e069b379264384e0e9590d504ad1dc0b492670a09b7fcb96201ba5ba12153b70524c2dfca4ec7d858a4cf2d57b6b63957bedbff133727c8a62763559d3ebf22b095142baec7d7c6fd2c90eebf5865c8c21cf80b27094aa888ff9b9e7459ea4b43085c4ab70f3933c1c3c0e0100e5092871853cb48aea9a1f56f04c8b6419f36d268dd2a68b94de75bdb3da60227523e145c661e67bec03466034e1cd868205a06e88c181ca2dab9bb90134dd130a734c2ce33e584ac5f295a1fc4b0f01b8e7b4c5896e150e70a935b1cbf4aa58552b72b1fab85b1efc1f0344b0ec7f70eb5ea222c4fd6584af13bb95e404f2cf42c61213f790443f0a07a0ba61ec66de14f7bfc8de1a0a886ae23c61a58ea94ffc2d139fa6edf43c995dd066ddb537479f6fe483baeab2416a88cc80b1e4fb2fd0833dbd87080fab237b222b39822635c08d72ac394a01fb19b1e11c9d1daffd7d7233e67af03ab4f934296d23b3cb82b79c3295d015b8975059279b9273c97a5f143050ccee4be058d6e028387a92709845f5d08704e9242cc62cb0d91855bd0bccfa328b2e25f94fa3bb2c1eae23ead0c62146f81002e92b4e31ef62cb5e39efc778cd177e5d109f771bcf18e1a7ee0032e4e0837a4b1adb92f5e0593baab0106e8f9cf3c22913ff74b383beb5436fca4559591f232ce7cbe7f12b795bbb0c2d961832e60a004c449df01d7edaf7b17998067e6503a4a72826cb74216b6a2f7a812e669f889b1f589f82de5d3dd4d18068f915e8af3780d54d59181069d506bd33c49779ee23e0c9cba2d22c4782c5fe4a1698e50b3e919bc82a8aed54fb5dc91951ed58873d752f2259b3ad3c82a60a66529da9e4168e49da2d726a83fead6eb2e5691670b12862e68943314c85dea5df667c8ec993386dde613d1b0de5fde42db1e39088385ba0b72892f632ec31bf36c64b85360aa365af86742b0aa3ba376ce7f0d7ba80a783b3de3b995a10fcde9407fe91b2ef50b3db9357dd19e29ce728a46a1d37f535b4eae9f63ce4afb4a38d950d6faa5dcdf26532676e2ed7b893bb8b1fcaf5af08eb1258260d46d23d01cdf490f467d42de7d05701524bee0234c5c4e9bcbd5e6a99cdc8c7bf306d23072f56b7d4b4871bc88e415ec3079639fd032ae3ce43be339fd8921a049fdab0656f668994df72c2f4755196e71f06c58c006e1e39394a48a93c829c675423105588d23007631f98575b840f32567c7ed32e06097bae20bfdc1a40fb37a1db9e0d53469053c8c22bb12f773b282c7c6661d38cfd848e64b6a38ff9aabf3143b67b56d9fb2d9273521d81c3b5b0962059b3e32d414bcffaf3d79f0caa27f68d5b467a02c8068051e100bb4f70af52c460010ee4d4dcdda3483793f3cbd26f9a7ad2ecf93b7f066c21fbe1abc30e8291ab71adb0102b9593ad61ad9151059209b88eb4f2832fcdeeca572cf1bae15b70b1f47a9b0c0f518863a5039f6fe2fa29ee4529a65853f7d82a0d8fbe11f359e08d8196cc4a79fdc876907c1200040667607f565c3a16eb2b7a2b81041b65bf9bf8467d924c93952bb760e482d061eed0806d927ec321ddd0726f64b0b407d173ada183ef71b892726827ea39e14d17280cd7dc33eea8b32ef60d253261550ca898c1c1eab08e77a98be764019382baf26aa0887c71f8b320007ede0ae6ffba9f1ccfdd4422826b17a274773570f2334c3ac00680c735524e34ddf501773e1693fc0e2bd31938c7b8b4c789fe70cd35316a3f778b73ae6006011698d10ed9c85d7ea894c089c3a7620cd9247491f5eac450e247f945562639094cf811bc5bb94c312576b5ca4db075627e35589b14f2485f560c692ccefea23c3f485b6c89c5871116f993b380493d9d04e785eaf6931e940b26943be4d7bbcaebc2d3702eebcefb1c0a66173fb5f4169c73b7015247ec9db63b0e86a467c30387b7f5d51c5fe11546227c3b8070387a40383c6fe474f48adcf83bb4263fbe4af66948fce8d341250ff2c0023266e6cedeaf4f36f12fcd0df8385b7f9ff13a9df138faf8b299808e7b0ea6a5bb42fbc94d016a623b12daf495a20d4b8591f36efe087677c76eb22f58c6100c7556122a5f2ef0391909b4a14f54cc36d1fae369e44ec526ad49aba34dcc651ff21316b981103380402d7ed8c5728ffe2c36f97f8eacda3538264478440f893505412a109859a249b2e90492bb283ecc5a9f91761dcda5f7edd962496e4ae135fa7236d9d033143dcc144069fe002502c9fc6b297eb0aa846d984e9031cb36bfc188752d687d23e91228a44db01e8d85e51e805b338e3ea85cd309e11851471dd82cdb78172717d8df464e264eec8ac023589a4609fe5a2fc9c4f286119942b5b1feb64eb708794d034043c07b5c3cd6ed5dd1025fd2bab4e69d28137b8a74ff14bbb8ab8284096cd79319ee10f9d1c8739bc56b3dfdc56243aec07c788513b5ee080a1b5927f9b38eff7b99fb9cb4b8bf945c2f5f81804545c19286732a055aae8b86caddf5e247d19fb45c3bba4e6dd3121395878bf7233adf3a4ea61995126933d97df6c41ddc788451148ec4d6ce9743760815a9c0d05056d512ce8e316784034468f01c3e633d2f33a1c0e9be8fa600735d72a141edf62982e90ece99e8ba2c09445df342a07f31e920d82b009ce60a81c2158a397f925e69c9b465e8cb465a810e808c1943aaa5225fed717e161c8a690ab0728391ae6657552fd2a00b1960e5af2d8fe940c2d868fdaca5d5379d7db9a2019a889838d24b5fcad1737c9ce1647d8606d41cfcc32aee4e8a112956d7cf4053886925bcc8b850108d255238bc0605936a5da9d748399d74b44949f59c42f0849224d296c0147b9ccb9ee71fa6533ace9ec8817512cf8abedea9955be9297803c8eea4d1621e2f6ad26009a0deeb50a6e1fe324615d3cfe0b3652aa45ca2d7866d3be54b2aa3b9da9ec14c14a97dd52705d2e9ea14f824679ac51362776d38a7b542dbace8c2817e2609a092bcb9f47db631820b64f2585b9eccc62fa39b97e138287ad6b3aa2d30615005de102b2a2bb7c3ec68a6f114e1f332335ad7d0aecc2684071d0cfe809adeb778885364494dc4a05fb5eec0556544e56a07749a645fd80456e911689ab8e365a6b012ab222f35839ab0dd2ffb6e5867588b2d3c97fbb4af30e006b4333f95a7f956224fd6677b51386c0afef74c9b5d58bad2f20003ed9a277ec9de4b36b779fb38abdb0a08fdef3822da908fd7c9a27c44f0a8a30d7943af1e9d264b1533cdbe510484bc0c1d35c637eb402f193c9ae395763a295e6c4441e116825c4504694322ae77fc0f7020bad4b6b4af469f4780d070c8cd56a75b28ab7c9b6b4e6ce5639ef9423b2e8a0d247b5134fe4bbc83dcc2b652318064e97c6135a3a871f0a12609f921925c0f0490ff37c838f2072ff759541840c3fc9824334db9bfa3136ac636af30c0bb0a99c12650bebf7a495e5d88fbb0d6ea8fb2968938c7df23ff3d9f8600b8e857a2887388d24240c5b9805ba141d4b0bc58a525f91aa6e4615713adb31c3bbd2414f859e6025691b4bdabb473bf3d0048fb1cff9ec3501ed9eca666b9a0822f8fed3e6cffd7b78ae10bef0778f25dec948196180a6e3a5b514b363f6da96e3eb9e1863072398b64d5265d14961044e8346532e28ef04b60bc4e9ed3af9b7bdd93bc061b8a1ab407108e4e6eef759f0c9e2452c78ae922416ad586672723ab875c1f38d03b7b075a39f802414cc87146041d2ede8689809fd0abb634abae16f9238ea72f823505945bd71b4582acd0a80f97e44fcba2e1a2c7c3434490c7294f56a6d672393b62114a6836dd3da3d7e8860de636a9f8d22ce573f9f11a42f02e8d1c01cdfb8b91236df0c55d4321a8aa10701d5f37330f72b225cf5e6bdc6bf07880451dccea2f88d7938a7e8583bb07e3a81c1556d492f1707c263417d7f87ac4e95ac2ee6f28b553bf56bddb4404e2079434277e6872707e56a2af1a14247d12282c46f52a69a8a3c8a3c16c9a4169e369226637267cbb0a7d2fb346e5f6bc53859daefd8de787fc099749b6919b8fcb3dd384e56855eabe8a89871aba7fa80a7d6c75a21b68fa1b0d51cb57dfd6b9009fce476d51c61c8e07b65345d1747d5339d366c9c6b8a9dc6b8f4bbae5d7656567d0884614815a98c51a4df3faa8d0183052c8f6804238421f4413c569948ff6a1df81fed4a6b08e3fcbd5c67fdf066293225197def71dd97940bca77c748083668862f3af2403240f16cf5674b3f4a915111c970f6bf179d21d28b2841d3fed10a4885b76a9c2ac3259b12db65476027d69426605840d4aded9bf3fc8bee2fa877fd3fbb63e5cb4915edcbe942c5c848007bcf9c0a93829fea253f0fec4e0d5c74e15619c0ecaffc76666ed9857657eebb308789dc83178b631a36273e63fa760853c724d9cb164a26040ea38c12b6d099ac36cace346f6ad91f28968a71429909566e3dc76ca45514cbf64c60e80aa96d04080f8c69b42eb2c4c739ab9a8d2962c6257053774e86b3f3ee726b36b217b835a92fa1b91e8e733f9c3930737047af7eda228c1bd0dc8766b4770f0e0af2f720afcf62ee0a89071189e37c5e31"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20f42, 0x0) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x88, &(0x7f00000002c0)={[{@nogrpid}, {@min_batch_time}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@nobarrier}, {@data_err_abort}, {@quota}]}, 0x3, 0x439, &(0x7f0000002800)="$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") mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='./file0\x00', &(0x7f0000000200), 0x800000, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000480)={0x8, 0x0, &(0x7f0000000440)=[0xffffffffffffffff, r7, r1, r4, r1, r1, r7, 0xffffffffffffffff]}, 0x8) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) signalfd4(r8, &(0x7f0000000000)={[0xffffffffffff857d]}, 0x8, 0x100800) 25.339866772s ago: executing program 2 (id=286): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40042, 0x1ff) write$binfmt_elf32(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c460000004000000000000000000300030000000000000000003800000000000000000000000000200080"], 0x158) write$binfmt_elf64(r0, &(0x7f000001dac0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x20000000000000, 0x0, 0x6, 0x0, 0xfffffffffffffffe, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2, 0x0, 0xb, 0x3}, [{0x3, 0x826, 0x104, 0x5, 0x0, 0x0, 0x200, 0x800000000000000}, {0x0, 0x0, 0x0, 0x4000000000, 0x0, 0x0, 0x1}], "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", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xee0) close(r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r4, 0x0, 0xc, &(0x7f0000000180)=0x9, 0x4) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x2d, 0x0) recvmmsg(r4, &(0x7f0000002200)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)=""/1, 0x1}, 0x7fff}], 0x1, 0x45833af92e4b39ff, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) 24.342135466s ago: executing program 2 (id=296): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400"], 0x50) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) setresgid(0x0, 0xee00, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000038000000380000000300000000000000000000030000000002000000020000000000000000000000000000010500000010000000010000000000000e0100001c00000000006100"], 0x0, 0x53, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r1 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) gettid() setresuid(0xee01, 0x0, 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x2, 0x8, 0x8, 0x2, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000640)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) setitimer(0x0, 0x0, 0x0) ioprio_get$uid(0x3, 0x0) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) r4 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000020000000000000", @ANYBLOB="94f1fa13f2c8789795a52cd0f2e2e113ff66766d3e7525", @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="005399371100000000000000953d9067000000000000000000000800"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}}]}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x24283) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) close(r1) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000700)={[{@grpid}, {@orlov}]}, 0xff, 0x48f, &(0x7f0000000b80)="$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") r5 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x27, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000200850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000001640)='kfree\x00', r6}, 0x10) 24.276648666s ago: executing program 34 (id=296): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400"], 0x50) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) setresgid(0x0, 0xee00, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000038000000380000000300000000000000000000030000000002000000020000000000000000000000000000010500000010000000010000000000000e0100001c00000000006100"], 0x0, 0x53, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r1 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) gettid() setresuid(0xee01, 0x0, 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x2, 0x8, 0x8, 0x2, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000640)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) setitimer(0x0, 0x0, 0x0) ioprio_get$uid(0x3, 0x0) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) r4 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000020000000000000", @ANYBLOB="94f1fa13f2c8789795a52cd0f2e2e113ff66766d3e7525", @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="005399371100000000000000953d9067000000000000000000000800"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}}]}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x24283) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) close(r1) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000700)={[{@grpid}, {@orlov}]}, 0xff, 0x48f, &(0x7f0000000b80)="$eJzs3MtvVNUfAPDvvW15/Hi0P0QUBK2gkfhoaUFl4UKNJi40MdEFLmtbEBmooTUR0mgxBpeGxL1xaeJf4M6NURfGxK0mLg0J0caE4qrmvugwnZa2tB3pfD7JdM6Ze+6c8733nplz7+mdANpWb/YnidgeEb9GRHeRvbVAb/E0Mz05fGN6cjiJ2dk3/kzyctenJ4erotV628rM4TQi/SSJ55P59Y5fuHhmqFYbPV/m+yfOvtc/fuHiU6fPDp0aPTV6bvD48WNHB559ZvDpVYkzi+v6vg/H9u995a0rrw2fuPL2D19nzdpzoFheH8dt3WgSUBO92Vb7azbXuOzRZbT9brCjLp10trAhLEtHRGS7qyvv/93REXM7rzte/riljQPWVPbdtHnhxVOzwAaWRKtbALRG9UWfnf9Wj3UaevwnXHshYlOZnpmeHJ65GX9npOXrXWtYf29EnJj654vsEcu9DgEAsAL52ObJZuO/NPbkz8Vcx85yDqUnIv4fEbsi4p6I2B0R90bkZe+LiPuLlWe7l1h/b0N+/vgnvdq0zaskG/89Vzf2m6mLv3zq6ShzO/L4u5KTp2ujR8ptcji6Nmf5gUXq+PalXz5baFn9+C97ZPVXY8GyAVc7Gy7QjQxNDK3WRrh2KWJfZ7P4k5szAdkRsDci9i3vrXdWidOPf7V/oUK3j38RqzDPNPtlxGPF/p+KhvgryeLzk/1bojZ6pL86Kub78efLry9U/x3FvwquHXygSMzt/4YS3X8nxXxtV9Rqo+fHl1/H5d8+XfCcZqXH/6bkzXzO+qd3itc+GJqYOD8QsSl5Nc9X53T564Nz61b5qnx2/B8+1Lz/7yrXyeLPtlJ2EB+IiAcj4qGy7Q9HxMGIOLRI/N+/+Mi7i8SfRBKt2/+XIkaafv7dPP57kvr5+hUkOs58981CM+ZL2//HYir/rC3kn3+3sdQG3uHmAwAAgLtCGhHbI0n7inTv9kjTvr7if/h3x//S2tj4xBMnx94/N1LcI9ATXWl1pau77nroQDJVvmORHyyvFVfLj5bXjT/v2Jrn+4bHaiMtjh3a3bZb+39U/T/zR0erWwesOfdrQftq7P9pi9oBrL+lfP87F4CN6db+vyX7s7VVbQHWl/N/aF/N+v9HDXnjf9iY5vf/35v8ZB2wERn/Q/vS/6F96f/Qlu7kvv6VJ6qbBVb+PluWfId/uySqX7xYy7q2xtwrkbY85DZKZD1mfSud+w0VAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAu9m/AQAA//+kuOWe") r5 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x27, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000200850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000001640)='kfree\x00', r6}, 0x10) 7.654536105s ago: executing program 0 (id=398): syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x1010082, &(0x7f00000000c0)=ANY=[@ANYBLOB='errors=remount-ro,discard,umask=00000000000000000047345,discard,discard,fmask=00000000000000000000002,uid=', @ANYRESHEX=0x0, @ANYBLOB=',allow_utime=00000000000000002000022,iocharset=cp857,errors=remount-ro,\x00'], 0x3, 0x1507, &(0x7f0000000440)="$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") lchown(&(0x7f0000000240)='./file1\x00', 0x0, 0x0) r0 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0)=@generic={&(0x7f0000000040)='./file1\x00', 0x0, 0x10}, 0x18) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001a40)={&(0x7f0000001980)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x6f, 0x6f, 0x2, [@var={0x9, 0x0, 0x0, 0xe, 0x3, 0x1}, @volatile={0x0, 0x0, 0x0, 0x9, 0x3}, @decl_tag={0x4, 0x0, 0x0, 0x11, 0x1, 0xa}, @fwd={0xb}, @var={0xb, 0x0, 0x0, 0xe, 0x1}, @datasec={0xb, 0x1, 0x0, 0xf, 0x3, [{0x4, 0x2b557041, 0x13}], "c0a2f0"}, @const={0x7}]}, {0x0, [0x72, 0x30, 0x1e, 0x30, 0x0, 0x2e, 0x2e, 0x61]}}, &(0x7f00000003c0)=""/122, 0x92, 0x7a, 0x1, 0x1, 0x0, @void, @value}, 0x28) r2 = syz_btf_id_by_name$bpf_lsm(&(0x7f0000001a80)='bpf_lsm_key_free\x00') r3 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000001b00)=@generic={&(0x7f0000001ac0)='./file0\x00', 0x0, 0x10}, 0x18) r4 = syz_io_uring_setup(0x4333, &(0x7f0000000000)={0x0, 0x43cb}, &(0x7f0000ff5000), &(0x7f0000ff4000)) io_uring_register$IORING_UNREGISTER_BUFFERS(r4, 0x1, 0x200000000000000, 0x0) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001c00)={0xffffffffffffffff, 0x2, 0x10}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000001cc0)={0x3, 0x5, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x9}, [@map_val={0x18, 0x8, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x66}]}, &(0x7f0000000280)='syzkaller\x00', 0x3, 0xc2, &(0x7f00000002c0)=""/194, 0x41000, 0x6, '\x00', 0x0, @fallback=0x25, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r2, r3, 0x2, &(0x7f0000001c40)=[0xffffffffffffffff, r5], &(0x7f0000001c80)=[{0x4, 0x1, 0xc, 0xa}, {0x1, 0x4, 0x7, 0xa}], 0x10, 0xd, @void, @value}, 0x94) r6 = creat(&(0x7f0000000100)='./file1\x00', 0x1c4) ioctl$sock_inet_SIOCGIFBRDADDR(r6, 0x8919, &(0x7f0000001d80)={'ip6_vti0\x00', {0x2, 0x0, @private}}) 7.185342751s ago: executing program 6 (id=401): r0 = socket$packet(0x11, 0x3, 0x300) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) (async) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000340)='.\x00', &(0x7f0000000400), 0x6, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r1}}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) (async) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async) openat$ashmem(0xffffffffffffff9c, &(0x7f00000001c0), 0x101000, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newqdisc={0x50, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x2, '\x00', 0x6, 0x83, 0x4, 0x100}}}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x40001) (async) r5 = socket$inet_udp(0x2, 0x2, 0x0) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000cdefd5c100000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000030000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r7}, 0x10) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{r6}, &(0x7f0000000680)=0x2, &(0x7f00000006c0)}, 0x20) (async) unshare(0x2040400) (async) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r8, 0x0, 0x0, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r5, 0x89f0, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000000)={@private0, @initdev={0xac, 0x1e, 0x0, 0x0}}}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r0, &(0x7f0000000800)="4103082c1116480401020200c52cf7c25975e005b02f000006892f000300897c6b118777faffffff3066090cb600c5471d130a66321a54e7df305fbe258161b6fd8f2428652265d94c6fdbaefc57376a57c2feffff188be9427c323ef024a37016d2a7f9ab6e7941a6fc4f95aa73c1dfff4941f6503b5bd8c91db22cd33795481c94085fa12cdc679ac2a5d7b5d99b93fb07acb0da680e78b74c74aae8d7690d5986a9af81622a0ac210bc7b5ca5fed11cb54d046642670041e846bb184ff5d39fe8516d2d2a8d84e6e7dfcb2b8a8023444db513a3d7a124b59f0a5cd36489dbbb75cce3145d0ea3c3aa21af7cbcbc7a7575db782e757ca543109f5ddcec4930aa91f4119ea3d1f56140cb86cfe0724b23904ef5d05c725ee23918a502b1afe09fb0757d", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) (async) r9 = open(&(0x7f0000000040)='./bus\x00', 0x1612c2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='fsi_master_read\x00', r9, 0x0, 0x1}, 0x2) (async) fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0) (async) r10 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000300)=@generic={&(0x7f00000002c0)='./bus\x00', 0x0, 0x10}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x18, 0xf, &(0x7f0000000340)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r9}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x63ce}, @map_val={0x18, 0xb, 0x2, 0x0, r10, 0x0, 0x0, 0x0, 0xfffffffd}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8}, @map_val={0x18, 0x1, 0x2, 0x0, r9, 0x0, 0x0, 0x0, 0x79d2}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}], &(0x7f0000000400)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', r4, @fallback=0x12, r9, 0x8, &(0x7f0000000440)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000000480)={0x5, 0x10, 0x2, 0x9}, 0x10, 0x0, r9, 0x0, &(0x7f0000000500)=[r9, r9, r9, r9, r9, r9, 0x1, r9, r9, r9], 0x0, 0x10, 0x9, @void, @value}, 0x94) 7.044940943s ago: executing program 6 (id=402): mkdir(0x0, 0x7) prlimit64(0x0, 0xe, &(0x7f0000000240)={0xb, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000400850000008200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r8 = dup(r7) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000400), 0x400, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r8}, 0x2c, {[{@fscache}, {@access_client}, {@afid={'afid', 0x3d, 0x44}}, {@cache_mmap}, {@directio}, {@cache_fscache}, {@access_user}, {@version_9p2000}, {@msize={'msize', 0x3d, 0xfffffffffffff800}}], [], 0x6b}}) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$binfmt_aout(r5, &(0x7f00000003c0)=ANY=[], 0xff2e) ioctl$TCSETS(r9, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0xf1}) r10 = syz_open_pts(r9, 0x60c40) dup3(r10, r9, 0x0) splice(r9, 0x0, r5, 0x0, 0x3, 0x0) ioctl$UI_GET_SYSNAME(r5, 0x8040552c, &(0x7f0000000180)) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) inotify_init1(0x0) 7.031898973s ago: executing program 0 (id=403): creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d5304886) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000300)=""/115, 0x73) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000482c9e8a49c34f010000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000faffffffffffffff000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0}, &(0x7f0000000200), &(0x7f0000000800)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x4517, &(0x7f0000000d40), 0x12, 0x4b3, &(0x7f0000001b00)="$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") 6.349022633s ago: executing program 0 (id=408): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="fb", 0x1}], 0x1}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000e40)=""/4096, 0x1000}], 0x1}, 0x0) 6.125032126s ago: executing program 6 (id=409): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r2 = dup(r1) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r4}, 0x38) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/anycast6\x00') syz_usb_connect(0x6, 0x36, &(0x7f0000000000)=ANY=[], 0x0) close_range(r6, 0xffffffffffffffff, 0x0) r7 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x54c, 0x268, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0xb1, [{{0x9, 0x4, 0x0, 0xfd, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x101, 0x0, 0x1, {0x22, 0x3}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0xc, 0x0, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io(r7, 0x0, 0x0) syz_usb_control_io(r7, &(0x7f0000000340)={0x2c, &(0x7f0000000040)={0x20, 0x1, 0x3, {0x3c, 0x35, '\x00'}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000200000000000bb0b113b788061bb54136b44ddf66bd800000000000018110000564f88ef7172ce30c0cfcff08b15f84d4a0d33104d022eb5d9bcb430bf26cf1be0673076a060aed610f817c7680bf428f7917e126dda5919662f8ce0c7980c08c80e1169c5f093c49032762a85991a0fd3046ddad0f21bb7e01cdd0ccd64c37c5b96dfc00c5283ae9320", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r9}, 0x10) getresgid(&(0x7f0000002cc0), &(0x7f0000002d00), &(0x7f0000002d40)) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x800, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 6.069822207s ago: executing program 7 (id=411): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r3}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x17, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffff7f850000006a00000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f00000000c0)=@ipv4_newaddr={0x3c, 0x14, 0x509, 0x70bd25, 0x25dfdbfd, {0x2, 0x20, 0x0, 0xcb, r6}, [@IFA_LOCAL={0x8, 0x2, @broadcast}, @IFA_RT_PRIORITY={0x8, 0x9, 0x31}, @IFA_CACHEINFO={0x14, 0x6, {0x6, 0x15e, 0x38, 0x6}}]}, 0x3c}}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r7}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000400)={{r2}, &(0x7f00000002c0), &(0x7f00000003c0)='%pK \x00'}, 0x20) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @broadcast}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r9, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7ffffdc1}]}) setregid(0xffffffffffffffff, 0x0) r10 = syz_open_dev$MSR(&(0x7f0000000740), 0x88f, 0x0) read$msr(r10, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r11 = getpid() sched_setscheduler(r11, 0x2, &(0x7f0000001700)=0x4) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) 5.958506298s ago: executing program 0 (id=413): bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0200000004000000010000000900000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000caa893bc6c29e409c203de524e5dd2fe430fd8f3027f1af607bbebf55a331cd3e8cb10975bc8ff0daca8855033aa34d8739181b965422a54a2209c2f960eec8ff3498ded66ad", @ANYRES32, @ANYRES32, @ANYBLOB="7a000000000000009e8024eb51f2d8348bc9d7b98ec5000000000000"], 0x50) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000340)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8840}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x404c051}, 0x2000c0c4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="c8010062", @ANYRES64=r1, @ANYRESOCT], 0x1c8}}, 0x0) getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, &(0x7f0000000140)={'raw\x00', 0x0, [0x0, 0xfffffffd, 0x5, 0x9, 0x10]}, &(0x7f0000000040)=0x54) r7 = socket(0x200000000000011, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000005500e500000000000000000007", @ANYRES32, @ANYRES32=r7], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48805}, 0x10) r8 = socket(0x1e, 0x4, 0x0) r9 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r9, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r8, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) 4.946870662s ago: executing program 0 (id=414): syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x1010082, &(0x7f00000000c0)=ANY=[@ANYBLOB='errors=remount-ro,discard,umask=00000000000000000047345,discard,discard,fmask=00000000000000000000002,uid=', @ANYRESHEX=0x0, @ANYBLOB=',allow_utime=00000000000000002000022,iocharset=cp857,errors=remount-ro,\x00'], 0x3, 0x1507, &(0x7f0000000440)="$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") lchown(&(0x7f0000000240)='./file1\x00', 0x0, 0x0) r0 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0)=@generic={&(0x7f0000000040)='./file1\x00', 0x0, 0x10}, 0x18) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001a40)={&(0x7f0000001980)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x6f, 0x6f, 0x2, [@var={0x9, 0x0, 0x0, 0xe, 0x3, 0x1}, @volatile={0x0, 0x0, 0x0, 0x9, 0x3}, @decl_tag={0x4, 0x0, 0x0, 0x11, 0x1, 0xa}, @fwd={0xb}, @var={0xb, 0x0, 0x0, 0xe, 0x1}, @datasec={0xb, 0x1, 0x0, 0xf, 0x3, [{0x4, 0x2b557041, 0x13}], "c0a2f0"}, @const={0x7}]}, {0x0, [0x72, 0x30, 0x1e, 0x30, 0x0, 0x2e, 0x2e, 0x61]}}, &(0x7f00000003c0)=""/122, 0x92, 0x7a, 0x1, 0x1, 0x0, @void, @value}, 0x28) r2 = syz_btf_id_by_name$bpf_lsm(&(0x7f0000001a80)='bpf_lsm_key_free\x00') r3 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000001b00)=@generic={&(0x7f0000001ac0)='./file0\x00', 0x0, 0x10}, 0x18) r4 = syz_io_uring_setup(0x4333, &(0x7f0000000000)={0x0, 0x43cb}, &(0x7f0000ff5000), &(0x7f0000ff4000)) io_uring_register$IORING_UNREGISTER_BUFFERS(r4, 0x1, 0x200000000000000, 0x0) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001c00)={0xffffffffffffffff, 0x2, 0x10}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000001cc0)={0x3, 0x5, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x9}, [@map_val={0x18, 0x8, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x66}]}, &(0x7f0000000280)='syzkaller\x00', 0x3, 0xc2, &(0x7f00000002c0)=""/194, 0x41000, 0x6, '\x00', 0x0, @fallback=0x25, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r2, r3, 0x2, &(0x7f0000001c40)=[0xffffffffffffffff, r5], &(0x7f0000001c80)=[{0x4, 0x1, 0xc, 0xa}, {0x1, 0x4, 0x7, 0xa}], 0x10, 0xd, @void, @value}, 0x94) r6 = creat(&(0x7f0000000100)='./file1\x00', 0x1c4) ioctl$sock_inet_SIOCGIFBRDADDR(r6, 0x8919, &(0x7f0000001d80)={'ip6_vti0\x00', {0x2, 0x0, @private}}) 4.905688982s ago: executing program 7 (id=417): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f00000002c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x11, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0x4}, {}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x1, 0xfe, &(0x7f00000001c0)=""/254, 0x37deab8c7400edea, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x2, 0x4}, 0x8, 0x10, &(0x7f0000000300)={0x5, 0xd, 0x2, 0x3}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)=[{0x1, 0x5, 0xe, 0x9}], 0x10, 0xff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1, 0x0, 0x1}, 0x18) capget(0x0, 0x0) 4.840193984s ago: executing program 7 (id=419): mkdir(0x0, 0x7) prlimit64(0x0, 0xe, &(0x7f0000000240)={0xb, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000400850000008200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r8 = dup(r7) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000400), 0x400, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r8}, 0x2c, {[{@fscache}, {@access_client}, {@afid={'afid', 0x3d, 0x44}}, {@cache_mmap}, {@directio}, {@cache_fscache}, {@access_user}, {@version_9p2000}, {@msize={'msize', 0x3d, 0xfffffffffffff800}}], [], 0x6b}}) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$binfmt_aout(r5, &(0x7f00000003c0)=ANY=[], 0xff2e) ioctl$TCSETS(r9, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0xf1}) r10 = syz_open_pts(r9, 0x60c40) dup3(r10, r9, 0x0) splice(r9, 0x0, r5, 0x0, 0x3, 0x0) ioctl$UI_GET_SYSNAME(r5, 0x8040552c, &(0x7f0000000180)) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) inotify_init1(0x0) 3.459237862s ago: executing program 0 (id=421): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="130100002add1e20ef050a0236910102030109022400010000000009040000", @ANYRES32], 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x48014}, 0x20004000) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000080)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x20, r2, 0x1, 0x70bd2d, 0x3, {0x18}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}}, 0x20008000) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000100)) r3 = socket$inet_udplite(0x2, 0x2, 0x88) socket(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000002500)={{0x2, 0x4e21, @multicast1}, {0x306, @multicast}, 0x1c, {0x2, 0x4e21, @remote}, 'veth0\x00'}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') preadv(r4, &(0x7f0000002280)=[{&(0x7f0000002180)=""/18, 0x12}, {&(0x7f0000002840)=""/231, 0xe7}], 0x2, 0x10001, 0x7) 3.412962023s ago: executing program 3 (id=423): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000002e80)=@newlink={0x28, 0x10, 0x403, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r2, 0x215}, [@IFLA_MASTER={0x8, 0xa, r2}]}, 0x28}, 0x1, 0xba01, 0x0, 0x20000841}, 0x4048000) 2.718560753s ago: executing program 6 (id=424): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB, @ANYBLOB], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000200)=@generic={&(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x1800}, 0x18) 2.689875703s ago: executing program 6 (id=425): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) (async) r2 = syz_open_dev$usbmon(&(0x7f00000002c0), 0x7fffffff, 0x80800) ioctl$MON_IOCX_GETX(r2, 0x4018920a, &(0x7f00000003c0)={0x0, 0x0}) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002780)=@newtaction={0x29c, 0x30, 0x2, 0x70bd2d, 0x25dfdbff, {}, [{0x288, 0x1, [@m_nat={0x54, 0x20, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0x678e, 0x8, 0x401, 0x7}, @dev={0xac, 0x14, 0x14, 0x1d}, @private=0xa010100, 0xff, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_tunnel_key={0x148, 0x1d, 0x0, 0x0, {{0xf}, {0x60, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @local}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @private=0xa010100}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x5, 0x5, 0x5, 0x8, 0x5305ffdc}, 0x4}}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0xfffffffd}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @loopback}]}, {0xb9, 0x6, "d88df9ef021ea236a7d1699029dc77d9fd00ce0c514fbb3a758813f82ddb3fe3880b43f994d2e04ea15db1e25efc934decf260e00dd17c6b46fbe19370874a3a9cb5378c0b2c4641a42c1d616920914def20b90a4be3c5b7698f247d7d8c404eefdacbc4dabb342372d24afd589f3ec6122c61b0e9a47e39d192630c65e3970d4c66c9d0d670fc04d957ef64620e5749ba417c5f994be77b301b1463476e75c9148c0784e719247a8785ed82b174e7bd3f243b68e6"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_sample={0xb8, 0x7, 0x0, 0x0, {{0xb}, {0x4}, {0x89, 0x6, "4d11ef01da7337625695ddc3d5012aa6f3638794346943b9ee757a1a4ac5f8ce5f6016d63b9db431952a32c8ea295bd8bea222698ce859490fd8784037c47670d89010426411cce59038883b69db801c8d08e1d6ea90e03c637d4dc6a17cefee6540c36dba3573d039f7b6e9fb810ecdc039c3105f3423c721e04c7b057f85097c23a753a9"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ctinfo={0x30, 0x13, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}]}]}, 0x29c}}, 0x0) (async) r3 = socket(0x10, 0x803, 0x0) sendto(r3, &(0x7f0000002a40)="120000001200e7ef007b8100000000000000", 0x12, 0x10, 0x0, 0x0) (async) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x401, 0x0) (async) syz_clone3(&(0x7f00000002c0)={0x8207400, 0x0, 0x0, 0x0, {0x3}, 0x0, 0x0, 0x0, 0x0}, 0x58) 2.334128348s ago: executing program 7 (id=426): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) write(r0, &(0x7f00000000c0)="49d87fc5ea324262707645fc8f08998d33727c4c674608679927df7eca7794c2295c02c21cae79b3d300257c360eb18cb0fe5a1db348e71303a98f0db255bbedea7a5014e58f8a8701ae242440020e48ecff33c27f0c05ae24b3d5a480acc0f7c91c86d85e16d974713647e6cf2581e49260b73857295db11a3f430ef229858b2bfb19ad39e512ae9e81812d49e15c725d82d82d27afd29d9c01b626e95de203a89933cb6b", 0xa5) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r1 = socket$inet(0x2, 0x3, 0x4) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'team_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0xd}}, @TCA_RATE={0x6}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x80) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r0, &(0x7f0000000280)="2f2f758bf34591", &(0x7f0000000000)=""/54}, 0x20) 2.305340548s ago: executing program 6 (id=427): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="05000000050000000200000004"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000230000000000000000000000000000000000ad"], 0x48) r1 = syz_usb_connect$printer(0x3, 0x36, &(0x7f00000001c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x81, 0x0, 0xae, [{{0x9, 0x4, 0x0, 0x6, 0x2, 0x7, 0x1, 0x2, 0x7, "", {{{0x9, 0x5, 0x1, 0x2, 0x8, 0x2, 0x4, 0x3}}, [{{0x9, 0x5, 0x82, 0x2, 0x10, 0x4d, 0x7e, 0x10}}]}}}]}}]}}, &(0x7f0000001380)={0xa, &(0x7f0000001280)={0xa, 0x6, 0x250, 0x3, 0x8, 0x6, 0x10, 0x4}, 0x1f, &(0x7f0000001b00)=ANY=[@ANYBLOB="050f1f00020a1003000800029f42ca10100a0ec100000000000600cfc000002be69c8c25497c137a654ec99dc7d663fbb266695638044a5e961a919443b0ba5946f2d44872d4276432c4d1cd0be28739a15587ae0c19dee4d6e40fd94f7c5369c6d4537d885a3c06b920bcd10d5a37f907e1375e62240f9c2f6cb6f576be1a323969c6850828bffb4a34049c0516068f129de369b4fc730818f5f6072a4a1f6b535ed74565b81e7f0000000000000040554a0412b4f3566f31cc7e52c691f902af68093401d414523411830a3a255c9c6bd602fd94256c54e1128efc1666087db3183cc47f"], 0x1, [{0x61, &(0x7f0000001300)=@string={0x61, 0x3, "9533375eb99fb5d114284153d8f141a6ac5cb241a6bf299f25d6087528497aea7235f18d1e702fe3355ce06cbe1516905348987d6b3ce9449be2f0858065822e104a124fe83d9eff2aea8241a2e10d7ade75e9b0f907cbe1af11864d058919"}}]}) syz_usb_control_io(r1, &(0x7f00000015c0)={0x2c, &(0x7f00000013c0)={0x40, 0x11, 0x73, {0x73, 0x31, "3d148de0c3c4b7eb940452960b09e3106d1a2eee8dea9d7465d069a79585a93757e1e64d90abd2c65aa64b0758d2bc727fb6c64ea034dccb4fa2aa05a69b25fe1b5328d69c830fe4cc4f864b8e4f27e9212d89265f1c1599916ea54d48ec884217a601e78793c1f79b27c10045b3e80a9b"}}, &(0x7f0000001440)={0x0, 0x3, 0x40, @string={0x40, 0x3, "cf63b7c15358e16ccdcb27a3de23d9582df73c2a5b7d0f6b827154c1e00e6394a8233d81fe5daacbc01991d8864e043a30f1304f48ebb60177c152521ae1"}}, &(0x7f00000014c0)={0x0, 0xf, 0x5c, {0x5, 0xf, 0x5c, 0x1, [@generic={0x57, 0x10, 0x3, "0b8261e9cf737d7c9fba5d1de26c26ea23214fa1223536be9640139dc316f79854f44815764664781a82adaee42caf2b8752a091e812c95c7b664aaf1f8cc935b0cf0cadd3b265aa7719273dd0d8bc0bcae12f55"}]}}, &(0x7f0000001540)={0x20, 0x29, 0xf, {0xf, 0x29, 0x6, 0x1, 0x10, 0xd, "686e989c", "a4c00a81"}}, &(0x7f0000001580)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x3, 0x9, 0x0, 0x8, 0x12, 0x40}}}, &(0x7f0000001a40)={0x84, &(0x7f0000001600)={0x24d72310147840df, 0xf, 0x55, "b6f56004ead6f2d492cf623ed6847daf6433ac3beb570a525329afb6f0a7d6893e67eac71b80618c9afd2ee1dbc66892f7ab464e5d1d25ad4c1ff7c76ce1ca2d09d2c2f032f71ccb95d11a627407eb82ad48ba2343"}, &(0x7f0000001680)={0x0, 0xa, 0x1, 0x5}, &(0x7f00000016c0)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000001700)={0x20, 0x0, 0x4, {0x0, 0x3}}, &(0x7f0000001740)={0x20, 0x0, 0x8, {0x200, 0x40, [0xf0]}}, &(0x7f0000001780)={0x40, 0x7, 0x2, 0x8000}, &(0x7f00000017c0)={0x40, 0x9, 0x1, 0x5}, &(0x7f0000001800)={0x40, 0xb, 0x2, "ce15"}, &(0x7f0000001840)={0x40, 0xf, 0x2, 0x7fff}, &(0x7f0000001880)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f00000018c0)={0x40, 0x17, 0x6, @random="81526fbfd769"}, &(0x7f0000001900)={0x40, 0x19, 0x2, "c099"}, &(0x7f0000001940)={0x40, 0x1a, 0x2, 0x6}, &(0x7f0000001980)={0x40, 0x1c, 0x1, 0x2}, &(0x7f00000019c0)={0x40, 0x1e, 0x1, 0x17}, &(0x7f0000001a00)={0x40, 0x21, 0x1, 0xf4}}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f00000011c0)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000007200000018110000", @ANYRES64=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='tlb_flush\x00', r2}, 0x10) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000001040)=ANY=[@ANYBLOB="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"], &(0x7f0000000200)=""/109, 0x142, 0x6d, 0x0, 0xe9, 0x0, @void, @value}, 0x28) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000ec0)=ANY=[@ANYBLOB="d5c7a59cb40000000000000061117c000000000085200000030000009500000c00000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, r3, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000440)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)=ANY=[@ANYBLOB="1c0000001a000f0c25bd7000fedbdf24028014b2fe03ff0100040000"], 0x1c}, 0x1, 0x0, 0x0, 0x24000800}, 0x55) sendfile(r3, 0xffffffffffffffff, &(0x7f0000001000)=0x3, 0xf1) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f00000006c0)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_BALANCE_V2(r3, 0xc4009420, &(0x7f0000000ac0)={0x18, 0x5, {0x3, @struct={0x5, 0xfffffffc}, 0x0, 0x3, 0xe07a, 0x5, 0x6, 0x155, 0xf8, @usage, 0xa610, 0x401, [0xc2f6, 0x3, 0x6, 0x0, 0x3ff, 0x2]}, {0x8, @usage=0x2, r5, 0x9, 0x3, 0x3, 0x400, 0x6, 0x400, @usage=0x1000, 0x7, 0x7, [0xffffffffffffffc0, 0x9, 0x80000000, 0x401, 0xff, 0xf]}, {0xffffffffffffffff, @struct={0x1, 0x9}, r6, 0x80000000, 0x3, 0x432ca689, 0xbe86, 0x5, 0x0, @struct={0x4, 0x3}, 0x101, 0x1, [0x7, 0x1, 0x4, 0x5, 0x0, 0xffffffffffffffff]}, {0x6d, 0x0, 0x7fffffff}}) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1600000000000000040000000180000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\b\x00\x00\x00\x00\x00\b\x00'/28], 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={0xffffffffffffffff, 0x0, 0x0}, 0x10) 2.303943028s ago: executing program 3 (id=428): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$binfmt_register(r2, &(0x7f0000000080)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x1, 0x3a, 'GPL\x00', 0x3a, ',!%', 0x3a, './file0'}, 0x2e) 2.286048959s ago: executing program 5 (id=429): syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f00000005c0)='./bus\x00', 0xc004, &(0x7f0000000380)={[], [{@appraise}, {@hash}, {@fowner_eq}]}, 0xd, 0x5e8, &(0x7f0000001200)="$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") r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000600000010000000", @ANYRES32, @ANYBLOB="0000000000000000000000deffffff0000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r2 = openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0x80087601, &(0x7f0000000180)) setsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000340)={@remote}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000400000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000540)='host1x_channel_submit_complete\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x62) r4 = open(&(0x7f00000003c0)='./bus\x00', 0x14507e, 0x0) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r6, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x4e20, @loopback}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[], 0x60}, 0x1, 0x0, 0x0, 0x40444}, 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x0) r7 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000004c40)={0x1, 0x0, &(0x7f00000015c0), 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x4, '\x00', r10, @fallback=0x7, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r7, 0x0, &(0x7f0000004bc0)=[r7, r7], 0x0, 0x10, 0x1ff, @void, @value}, 0x94) r11 = socket$key(0xf, 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1b, 0x0, 0x0, 0x400, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x5, 0xc, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000105d15c4400000000e3ffffff181200e647d4b96d860d2d0a6e73ecc6a7e6f4adc9b4dabfc4368fba330a059440686cc1bed6b78590922adebccac5227bc541b8de95cd2c7daaee07c4b6a47454475eaf718fceed4c90d3bc35db5d57c91ad4137e392d9fb6f94dbf59787f18336ed23370238c40b1aef51cb9dd85b8962c9f90ee316f9cef54db6a21cdc6ea50dcf0cdfb59bd45b6bd27ea8b9c68d2f3cb8992ffd5de3edde51628bf040c6d3f6b5e3c25f9bf48e15d653f5008354d2510a789480c0d98a0465180a4f5e3026413ab7c1ef3675ae4b8718ddaca86d944c71d826f31945a95f4e781f24552910883b9f7f28ee78f857291fe7469acfd57de274264ba59ea560e36c6735b1b30213ff2f8132d8b057e222f60eaea03", @ANYRES8=r3, @ANYRESHEX], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r12}, 0x10) sendmsg$key(r11, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x2, 0xa, 0xfc, 0x3, 0x2, 0x0, 0x70bd28, 0x25dfdbfe}, 0x10}}, 0x48c0) sendmsg$nl_route(r8, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000004d00)=ANY=[@ANYBLOB="20000000100024002dbd7000fedbdf2500000000", @ANYRES32=r10, @ANYBLOB="60c00000682d0000"], 0x20}, 0x1, 0x0, 0x0, 0x4004004}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x8, 0xfffffff9, 0x4, 0x4, 0x2080, r4, 0x0, '\x00', r10, r4, 0x4, 0x5, 0x1, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) 2.285706499s ago: executing program 3 (id=430): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x6, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000f52f0000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200000000000000, @void, @value, @void, @value}, 0x48) 2.208957749s ago: executing program 3 (id=431): syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x1010082, &(0x7f00000000c0)=ANY=[@ANYBLOB='errors=remount-ro,discard,umask=00000000000000000047345,discard,discard,fmask=00000000000000000000002,uid=', @ANYRESHEX=0x0, @ANYBLOB=',allow_utime=00000000000000002000022,iocharset=cp857,errors=remount-ro,\x00'], 0x3, 0x1507, &(0x7f0000000440)="$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") lchown(&(0x7f0000000240)='./file1\x00', 0x0, 0x0) r0 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0)=@generic={&(0x7f0000000040)='./file1\x00', 0x0, 0x10}, 0x18) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001a40)={&(0x7f0000001980)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x6f, 0x6f, 0x2, [@var={0x9, 0x0, 0x0, 0xe, 0x3, 0x1}, @volatile={0x0, 0x0, 0x0, 0x9, 0x3}, @decl_tag={0x4, 0x0, 0x0, 0x11, 0x1, 0xa}, @fwd={0xb}, @var={0xb, 0x0, 0x0, 0xe, 0x1}, @datasec={0xb, 0x1, 0x0, 0xf, 0x3, [{0x4, 0x2b557041, 0x13}], "c0a2f0"}, @const={0x7}]}, {0x0, [0x72, 0x30, 0x1e, 0x30, 0x0, 0x2e, 0x2e, 0x61]}}, &(0x7f00000003c0)=""/122, 0x92, 0x7a, 0x1, 0x1, 0x0, @void, @value}, 0x28) r2 = syz_btf_id_by_name$bpf_lsm(&(0x7f0000001a80)='bpf_lsm_key_free\x00') bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001bc0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001b40), &(0x7f0000001b80)}, 0x20) r4 = syz_io_uring_setup(0x4333, &(0x7f0000000000)={0x0, 0x43cb}, &(0x7f0000ff5000), &(0x7f0000ff4000)) io_uring_register$IORING_UNREGISTER_BUFFERS(r4, 0x1, 0x200000000000000, 0x0) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001c00)={0xffffffffffffffff, 0x2, 0x10}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000001cc0)={0x3, 0x5, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x9}, [@map_val={0x18, 0x8, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x66}]}, &(0x7f0000000280)='syzkaller\x00', 0x3, 0xc2, &(0x7f00000002c0)=""/194, 0x41000, 0x6, '\x00', 0x0, @fallback=0x25, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r2, 0xffffffffffffffff, 0x2, &(0x7f0000001c40)=[r3, r5], &(0x7f0000001c80)=[{0x4, 0x1, 0xc, 0xa}, {0x1, 0x4, 0x7, 0xa}], 0x10, 0xd, @void, @value}, 0x94) r6 = creat(&(0x7f0000000100)='./file1\x00', 0x1c4) ioctl$sock_inet_SIOCGIFBRDADDR(r6, 0x8919, &(0x7f0000001d80)={'ip6_vti0\x00', {0x2, 0x0, @private}}) 2.208727699s ago: executing program 7 (id=432): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x18) mknod$loop(0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001500)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setxattr$security_capability(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140), &(0x7f0000000400)=@v2={0x2000000, [{0x2, 0x1}, {0x2, 0x3ff}]}, 0x14, 0x3) 2.094050051s ago: executing program 3 (id=433): socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) prlimit64(r0, 0xe, &(0x7f0000000140)={0x1000000000008, 0x8b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x40010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000400), 0x0, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='module_free\x00', r3, 0x0, 0x4}, 0x18) r4 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000cc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2f8, 0x118, 0x130, 0x26010000, 0x118, 0x130, 0x228, 0x220, 0x220, 0x228, 0x220, 0x3, 0x0, {[{{@uncond, 0x0, 0xf8, 0x118, 0x0, {0x0, 0x25e}, [@inet=@rpfilter={{0x28}, {0xb}}, @common=@unspec=@state={{0x28}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@dev, @mcast1, [], [], 'pim6reg\x00', 'dummy0\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x4, 0xfffd, 0x6, 0x0, 'netbios-ns\x00', 'syz1\x00', {0x1d0000000000000}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x358) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) prlimit64(r0, 0x6, 0x0, &(0x7f0000000280)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, 0x0, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000"], 0x48) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000780)=@newtaction={0x230, 0x32, 0xff, 0x0, 0x0, {}, [{0x21c, 0x1, [@m_xt={0x218, 0x1f, 0x0, 0x0, {{0x7}, {0x168, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x9}, @TCA_IPT_TARG={0x103, 0x6, {0x3, 'nat\x00', 0x3, 0x5, "0a23ed5fc2d90a1a78ba0ab408d6d641b8b522336b82d74e314bf377226df8121c5933a0c493206e4d5c3a4104e8bf6902cea9901b358c6cc9389cc61a4571bca458848c3425e9549ef92eb758461715ab8994ac2d99c19a0ae7cece08032da865a5bde53387a9319a3de559ebde49dc6190ed1a70eacc4ae2182b9c2d1ecb1b15efd6f118f911adc9feafa8e0807425d652024038275f224745c505a157a7bfc2db35b73448734cd1681073a3a36555a2b754eaeb9110273d2d3066d5d40e3eb0446e22cc35e619bbfacabff2a0e1b27163bb2aac6234b867"}}, @TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}]}, {0x8b, 0x6, "e5ed2feeda93b51a6a53655cffa1e10b679478d54b62a67cd591b3fcef6c1f78abf600085d08ae4cb0c648c1531996782e090a5d6b383b11c541b24e924048f9d6591b6867789a869ef750af83767188db7e10923708d8a01d3a8d46e6044b7b3fd7185306e62f0f016b81f16c67a39985efb690fd5da2d3b4850adb5519200a4198127fc9cee6"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x230}}, 0x20048004) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r6}, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') move_mount(r7, &(0x7f0000000180)='./mnt\x00', r7, &(0x7f00000003c0)='./file0\x00', 0x71) syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') 1.964157683s ago: executing program 5 (id=434): mkdir(0x0, 0x7) prlimit64(0x0, 0xe, &(0x7f0000000240)={0xb, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000400850000008200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r8 = dup(r7) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000400), 0x400, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r8}, 0x2c, {[{@fscache}, {@access_client}, {@afid={'afid', 0x3d, 0x44}}, {@cache_mmap}, {@directio}, {@cache_fscache}, {@access_user}, {@version_9p2000}, {@msize={'msize', 0x3d, 0xfffffffffffff800}}], [], 0x6b}}) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$binfmt_aout(r5, &(0x7f00000003c0)=ANY=[], 0xff2e) ioctl$TCSETS(r9, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0xf1}) r10 = syz_open_pts(r9, 0x60c40) dup3(r10, r9, 0x0) splice(r9, 0x0, r5, 0x0, 0x3, 0x0) ioctl$UI_GET_SYSNAME(r5, 0x8040552c, &(0x7f0000000180)) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) inotify_init1(0x0) 1.183548324s ago: executing program 7 (id=435): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r2 = dup(r1) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r4}, 0x38) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/anycast6\x00') syz_usb_connect(0x6, 0x36, &(0x7f0000000000)=ANY=[], 0x0) close_range(r6, 0xffffffffffffffff, 0x0) r7 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x54c, 0x268, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0xb1, [{{0x9, 0x4, 0x0, 0xfd, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x101, 0x0, 0x1, {0x22, 0x3}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0xc, 0x0, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io(r7, 0x0, 0x0) syz_usb_control_io(r7, &(0x7f0000000340)={0x2c, &(0x7f0000000040)={0x20, 0x1, 0x3, {0x3c, 0x35, '\x00'}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000200000000000bb0b113b788061bb54136b44ddf66bd800000000000018110000564f88ef7172ce30c0cfcff08b15f84d4a0d33104d022eb5d9bcb430bf26cf1be0673076a060aed610f817c7680bf428f7917e126dda5919662f8ce0c7980c08c80e1169c5f093c49032762a85991a0fd3046ddad0f21bb7e01cdd0ccd64c37c5b96dfc00c5283ae9320", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r9}, 0x10) getresgid(&(0x7f0000002cc0), &(0x7f0000002d00), &(0x7f0000002d40)) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x800, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 836.962158ms ago: executing program 3 (id=436): mkdir(0x0, 0x7) prlimit64(0x0, 0xe, &(0x7f0000000240)={0xb, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000400850000008200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r8 = dup(r7) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000400), 0x400, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r8}, 0x2c, {[{@fscache}, {@access_client}, {@afid={'afid', 0x3d, 0x44}}, {@cache_mmap}, {@directio}, {@cache_fscache}, {@access_user}, {@version_9p2000}, {@msize={'msize', 0x3d, 0xfffffffffffff800}}], [], 0x6b}}) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$binfmt_aout(r5, &(0x7f00000003c0)=ANY=[], 0xff2e) ioctl$TCSETS(r9, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0xf1}) r10 = syz_open_pts(r9, 0x60c40) dup3(r10, r9, 0x0) splice(r9, 0x0, r5, 0x0, 0x3, 0x0) ioctl$UI_GET_SYSNAME(r5, 0x8040552c, &(0x7f0000000180)) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) inotify_init1(0x0) 736.51765ms ago: executing program 5 (id=437): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='coredump_filter\x00') setns(r0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x16, 0x0, 0x83fc, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000170000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000feffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000200)='kmem_cache_free\x00', r4}, 0x10) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000001280)="$eJzs3E+LHEUYB+B315iNG/ePGqMJiIVe9NJk9+BFL4tsQDKgJFkhEYSO26vDtDPD9LAwIkZPXv0cIojgTRBvetmL30DwthePEcSWndEko5PDSEiH5Xku80LVb6jqphuq6erD1774sLNXZXv5MBYXFmKxH5FupUixGP/4NF5+9cefnrty7fqlrVZr+3JKF7eubrySUlp9/vt3Pv7qhR+Gp9/+dvW7pThYf/fwt81fD84enDv88+oH7Sq1q9TtDVOebvR6w/xGWaTddtXJUnqrLPKqSO1uVQym2vfKXr8/Snl3d2W5PyiqKuXdUeoUozTspeFglPL383Y3ZVmWVpaD+Z24Xe18eauu64i6fjRORl3X9WOxHKfj8ViJ1ViL9Xginoyn4kw8HWfjmXg2vvnl69FRAgAAAAAAAAAAAAAAAAAAALh/5t3/f27cq+lRAwAAAAAAAAAAAAAAAAAAwPFy5dr1S1ut1vbllE5FlJ/v7+zvTH4n7Vt70Y4yirgQa/FHjHf/T0zqi2+0ti+ksfX4rLz5d/7m/s4j0/mN8ecEZuY3Jvk0nV+K5bvzm7EWZ2bnN2fmT8VLL96Vz2Itfn4velHGbhxl7+Q/2Ujp9Tdb/8qfH/cDAACA4yBLt81cv2fZvdon+TmeD0ytr4+y5080OnUiohp91MnLshgoHvriZLPD+L2u6+YPQkPFva+UpYj43/+8EBEPxwT/UzR9Z+JBuHPSmx4JAAAAAAAAAAAA83gQrxM2PUcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+YgeOBQAAAACE+Vun0bEBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHwVAAD//+pd0x0=") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) truncate(&(0x7f0000000140)='./file2\x00', 0x5c00) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10) r6 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x60842, 0x4) pwritev2(r6, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) fsync(r6) syz_emit_ethernet(0x4a, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd608a37f200142c00fe80000083a4fe710000000000000000000000bbfe8000000000000000000000000000aa", @ANYRES32=r6, @ANYRES16=r1], 0x0) bpf$MAP_DELETE_ELEM(0x15, &(0x7f0000000400)={r1, 0x0, 0x20000000}, 0x20) 311.437336ms ago: executing program 5 (id=438): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x18d811, 0x0) umount2(&(0x7f00000001c0)='./file0/file0\x00', 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x3) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000300000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) close_range(r1, r2, 0x0) 96.211899ms ago: executing program 5 (id=439): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x141200, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_GET_NESTED_STATE(r4, 0xc080aebe, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='mm_lru_activate\x00', r6}, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), r0) write$cgroup_int(r5, &(0x7f0000000200), 0x43451) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='mm_lru_activate\x00', r7}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r10, 0x4140aecd, &(0x7f00000000c0)) r11 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x20, &(0x7f00000000c0)={@mcast1, 0x800, 0x0, 0x103, 0x1, 0x0, 0x3}, 0x20) setsockopt$inet6_int(r11, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x4) 45.007979ms ago: executing program 5 (id=440): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setregid(0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000600)='sys_enter\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r3, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r4}, 0x10) syz_clone(0x500, 0x0, 0x0, 0x0, 0x0, 0x0) tgkill(r0, r0, 0x1a) 0s ago: executing program 35 (id=440): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setregid(0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000600)='sys_enter\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r3, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r4}, 0x10) syz_clone(0x500, 0x0, 0x0, 0x0, 0x0, 0x0) tgkill(r0, r0, 0x1a) kernel console output (not intermixed with test programs): file_ioctl+0x3cc/0x540 [ 65.118208][ T930] sock_ioctl+0x455/0x740 [ 65.122368][ T930] ? sock_poll+0x400/0x400 [ 65.126943][ T930] ? __fget_files+0x31e/0x380 [ 65.133951][ T930] ? security_file_ioctl+0x84/0xb0 [ 65.140667][ T930] ? sock_poll+0x400/0x400 [ 65.145067][ T930] __se_sys_ioctl+0x114/0x190 [ 65.151475][ T930] __x64_sys_ioctl+0x7b/0x90 [ 65.156268][ T930] x64_sys_call+0x98/0x9a0 [ 65.160699][ T930] do_syscall_64+0x3b/0xb0 [ 65.165371][ T930] ? clear_bhb_loop+0x35/0x90 [ 65.171832][ T930] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 65.177856][ T930] RIP: 0033:0x7ff1dc6fd169 [ 65.182659][ T930] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 65.203114][ T930] RSP: 002b:00007ff1dad67038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 65.211541][ T930] RAX: ffffffffffffffda RBX: 00007ff1dc915fa0 RCX: 00007ff1dc6fd169 [ 65.219472][ T930] RDX: 0000200000000000 RSI: 0000000000008916 RDI: 0000000000000003 [ 65.227346][ T930] RBP: 00007ff1dad67090 R08: 0000000000000000 R09: 0000000000000000 [ 65.235241][ T930] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 65.243146][ T930] R13: 0000000000000000 R14: 00007ff1dc915fa0 R15: 00007ffefddd5b08 [ 65.251573][ T930] [ 65.288928][ T940] process 'syz.2.160' launched './file0' with NULL argv: empty string added [ 65.526407][ T958] loop1: detected capacity change from 0 to 128 [ 65.559348][ T956] loop4: detected capacity change from 0 to 8192 [ 65.616023][ T958] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 65.627154][ T958] ext4 filesystem being mounted at /31/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 65.640508][ T958] fscrypt (loop1, inode 12): Unsupported encryption flags (0x10) [ 66.202456][ T594] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 1 proto 1 vid 0x0525 pid 0xA4A8 [ 66.204396][ T594] usb 1-1: USB disconnect, device number 3 [ 66.205290][ T594] usblp0: removed [ 66.210375][ T969] loop3: detected capacity change from 0 to 256 [ 66.235927][ T969] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011e5d, chksum : 0x63a11b78, utbl_chksum : 0xe619d30d) [ 66.355218][ T972] syz.4.172 uses obsolete (PF_INET,SOCK_PACKET) [ 66.492692][ T976] loop2: detected capacity change from 0 to 512 [ 66.552158][ T594] usb 1-1: new low-speed USB device number 4 using dummy_hcd [ 66.560460][ T976] EXT4-fs (loop2): corrupt root inode, run e2fsck [ 66.560504][ T976] EXT4-fs (loop2): mount failed [ 66.664362][ T989] loop1: detected capacity change from 0 to 1024 [ 66.695277][ T39] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 66.713233][ T989] EXT4-fs (loop1): Ignoring removed nobh option [ 66.719360][ T989] EXT4-fs (loop1): Ignoring removed bh option [ 66.725805][ T989] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 66.744258][ T989] EXT4-fs (loop1): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,errors=remount-ro,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,. Quota mode: writeback. [ 66.862257][ T26] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 66.882266][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 66.882294][ T30] audit: type=1400 audit(1744552148.275:259): avc: denied { append } for pid=988 comm="syz.1.177" path="/35/file1/blkio.bfq.io_queued_recursive" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 67.122552][ T39] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 4 [ 67.134010][ T39] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 52, changing to 4 [ 67.146513][ T39] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 13368, setting to 1023 [ 67.158680][ T39] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 67.168233][ T39] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.212274][ T594] usb 1-1: config 1 has an invalid interface descriptor of length 6, skipping [ 67.213791][ T39] snd-usb-audio: probe of 5-1:27.0 failed with error -2 [ 67.221902][ T594] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 67.238949][ T594] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 67.248164][ T594] usb 1-1: config 1 has no interface number 1 [ 67.292269][ T26] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 67.304044][ T26] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 67.313903][ T26] usb 4-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 67.326602][ T26] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.366825][ T26] usb 4-1: config 0 descriptor?? [ 67.398290][ T30] audit: type=1326 audit(1744552148.795:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1003 comm="syz.2.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5167c68169 code=0x7ffc0000 [ 67.402235][ T308] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 67.422570][ T30] audit: type=1326 audit(1744552148.795:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1003 comm="syz.2.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5167c68169 code=0x7ffc0000 [ 67.459545][ T642] usb 5-1: USB disconnect, device number 5 [ 67.471635][ T30] audit: type=1326 audit(1744552148.825:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1003 comm="syz.2.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5167c68169 code=0x7ffc0000 [ 67.496368][ T30] audit: type=1326 audit(1744552148.825:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1003 comm="syz.2.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5167c68169 code=0x7ffc0000 [ 67.519649][ T594] usb 1-1: string descriptor 0 read error: -22 [ 67.519807][ T30] audit: type=1326 audit(1744552148.825:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1003 comm="syz.2.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5167c68169 code=0x7ffc0000 [ 67.526158][ T594] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 67.558788][ T30] audit: type=1326 audit(1744552148.835:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1003 comm="syz.2.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5167c68169 code=0x7ffc0000 [ 67.582079][ T594] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.582618][ T30] audit: type=1326 audit(1744552148.835:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1003 comm="syz.2.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5167c68169 code=0x7ffc0000 [ 67.613809][ T30] audit: type=1326 audit(1744552148.835:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1003 comm="syz.2.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5167c68169 code=0x7ffc0000 [ 67.645100][ T30] audit: type=1326 audit(1744552148.835:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1003 comm="syz.2.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f5167c68169 code=0x7ffc0000 [ 67.672667][ T594] usb 1-1: MIDIStreaming interface descriptor not found [ 67.680158][ T594] snd-usb-audio: probe of 1-1:1.2 failed with error -16 [ 67.709900][ T1006] FAULT_INJECTION: forcing a failure. [ 67.709900][ T1006] name failslab, interval 1, probability 0, space 0, times 0 [ 67.723196][ T1006] CPU: 0 PID: 1006 Comm: syz.2.182 Not tainted 5.15.178-syzkaller-00385-ga8a88afaecee #0 [ 67.733238][ T1006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 67.743517][ T1006] Call Trace: [ 67.746761][ T1006] [ 67.749945][ T1006] dump_stack_lvl+0x151/0x1c0 [ 67.754699][ T1006] ? io_uring_drop_tctx_refs+0x190/0x190 [ 67.760358][ T1006] ? pcpu_memcg_post_alloc_hook+0x1b1/0x260 [ 67.766077][ T1006] ? trace_raw_output_percpu_destroy_chunk+0xc0/0xc0 [ 67.772680][ T1006] dump_stack+0x15/0x20 [ 67.776662][ T1006] should_fail+0x3c6/0x510 [ 67.781006][ T1006] __should_failslab+0xa4/0xe0 [ 67.785946][ T1006] should_failslab+0x9/0x20 [ 67.790436][ T1006] slab_pre_alloc_hook+0x37/0xd0 [ 67.795200][ T1006] __kmalloc+0x6d/0x2c0 [ 67.799185][ T1006] ? bpf_map_kmalloc_node+0xdb/0x160 [ 67.804585][ T1006] bpf_map_kmalloc_node+0xdb/0x160 [ 67.809804][ T1006] cpu_map_update_elem+0x5a4/0xea0 [ 67.815538][ T1006] ? __kasan_kmalloc+0x9/0x10 [ 67.820907][ T1006] ? cpu_map_lookup_elem+0x100/0x100 [ 67.826140][ T1006] ? kvmalloc_node+0x281/0x4d0 [ 67.830740][ T1006] bpf_map_update_value+0x1a3/0x3c0 [ 67.836046][ T1006] map_update_elem+0x644/0x770 [ 67.840752][ T1006] __sys_bpf+0x405/0x760 [ 67.844829][ T1006] ? fput_many+0x160/0x1b0 [ 67.849107][ T1006] ? bpf_link_show_fdinfo+0x300/0x300 [ 67.854635][ T1006] ? debug_smp_processor_id+0x17/0x20 [ 67.860805][ T1006] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 67.868011][ T1006] __x64_sys_bpf+0x7c/0x90 [ 67.872358][ T1006] x64_sys_call+0x87f/0x9a0 [ 67.876932][ T1006] do_syscall_64+0x3b/0xb0 [ 67.881654][ T1006] ? clear_bhb_loop+0x35/0x90 [ 67.886257][ T1006] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 67.892098][ T1006] RIP: 0033:0x7f5167c68169 [ 67.896367][ T1006] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 67.915997][ T1006] RSP: 002b:00007f51662d2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 67.924206][ T1006] RAX: ffffffffffffffda RBX: 00007f5167e80fa0 RCX: 00007f5167c68169 [ 67.932252][ T1006] RDX: 0000000000000020 RSI: 0000200000000940 RDI: 0000000000000002 [ 67.940026][ T1006] RBP: 00007f51662d2090 R08: 0000000000000000 R09: 0000000000000000 [ 67.948124][ T1006] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 67.956189][ T1006] R13: 0000000000000000 R14: 00007f5167e80fa0 R15: 00007fffb5ba8798 [ 67.964434][ T1006] [ 67.998349][ T20] usb 1-1: USB disconnect, device number 4 [ 68.011380][ T1008] loop2: detected capacity change from 0 to 128 [ 68.021990][ T1010] FAULT_INJECTION: forcing a failure. [ 68.021990][ T1010] name failslab, interval 1, probability 0, space 0, times 0 [ 68.035050][ T1010] CPU: 0 PID: 1010 Comm: syz.4.184 Not tainted 5.15.178-syzkaller-00385-ga8a88afaecee #0 [ 68.045110][ T1010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 68.055007][ T1010] Call Trace: [ 68.058130][ T1010] [ 68.060998][ T1010] dump_stack_lvl+0x151/0x1c0 [ 68.065612][ T1010] ? io_uring_drop_tctx_refs+0x190/0x190 [ 68.071225][ T1010] dump_stack+0x15/0x20 [ 68.075367][ T1010] should_fail+0x3c6/0x510 [ 68.080010][ T1010] __should_failslab+0xa4/0xe0 [ 68.084776][ T1010] ? skb_clone+0x1d1/0x360 [ 68.089026][ T1010] should_failslab+0x9/0x20 [ 68.093646][ T1010] slab_pre_alloc_hook+0x37/0xd0 [ 68.098404][ T1010] ? skb_clone+0x1d1/0x360 [ 68.102652][ T1010] kmem_cache_alloc+0x44/0x250 [ 68.107281][ T1010] skb_clone+0x1d1/0x360 [ 68.111419][ T1010] bpf_clone_redirect+0xa6/0x390 [ 68.116293][ T1010] ? _raw_spin_lock+0x1b0/0x1b0 [ 68.121275][ T1010] bpf_prog_6893982b85ceadf7+0x56/0xd80 [ 68.127226][ T1010] ? dma_direct_supported+0xa0/0x1f0 [ 68.132704][ T1010] ? _raw_spin_unlock_irqrestore+0x5c/0x80 [ 68.138508][ T1010] ? __stack_depot_save+0x40d/0x470 [ 68.143758][ T1010] ? __kasan_slab_alloc+0xc3/0xe0 [ 68.149287][ T1010] ? __kasan_slab_alloc+0xb1/0xe0 [ 68.155106][ T1010] ? slab_post_alloc_hook+0x53/0x2c0 [ 68.161346][ T1010] ? kmem_cache_alloc+0xf5/0x250 [ 68.166377][ T1010] ? __build_skb+0x2a/0x300 [ 68.170716][ T1010] ? build_skb+0x25/0x1f0 [ 68.175248][ T1010] ? bpf_prog_test_run_skb+0x38e/0x1420 [ 68.181101][ T1010] ? bpf_prog_test_run+0x3b0/0x630 [ 68.186044][ T1010] ? __sys_bpf+0x525/0x760 [ 68.190474][ T1010] ? __x64_sys_bpf+0x7c/0x90 [ 68.195120][ T1010] ? x64_sys_call+0x87f/0x9a0 [ 68.199647][ T1010] ? do_syscall_64+0x3b/0xb0 [ 68.204055][ T1010] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 68.210221][ T1010] ? ktime_get+0x12f/0x160 [ 68.214816][ T1010] bpf_test_run+0x478/0xa10 [ 68.219202][ T1010] ? convert___skb_to_skb+0x570/0x570 [ 68.224468][ T1010] ? eth_type_trans+0x2e4/0x620 [ 68.229149][ T1010] ? eth_get_headlen+0x240/0x240 [ 68.234128][ T1010] ? convert___skb_to_skb+0x44/0x570 [ 68.239272][ T1010] bpf_prog_test_run_skb+0xb41/0x1420 [ 68.244611][ T1010] ? __kasan_check_write+0x14/0x20 [ 68.250170][ T1010] ? __bpf_prog_test_run_raw_tp+0x2e0/0x2e0 [ 68.256360][ T1010] ? __kasan_check_write+0x14/0x20 [ 68.261344][ T1010] ? fput_many+0x160/0x1b0 [ 68.265638][ T1010] ? __bpf_prog_test_run_raw_tp+0x2e0/0x2e0 [ 68.271339][ T1010] bpf_prog_test_run+0x3b0/0x630 [ 68.276180][ T1010] ? bpf_prog_query+0x220/0x220 [ 68.280860][ T1010] ? selinux_bpf+0xd2/0x100 [ 68.285202][ T1010] ? security_bpf+0x82/0xb0 [ 68.289718][ T1010] __sys_bpf+0x525/0x760 [ 68.293793][ T1010] ? fput_many+0x160/0x1b0 [ 68.298132][ T1010] ? bpf_link_show_fdinfo+0x300/0x300 [ 68.303354][ T1010] ? debug_smp_processor_id+0x17/0x20 [ 68.308564][ T1010] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 68.314484][ T1010] __x64_sys_bpf+0x7c/0x90 [ 68.318972][ T1010] x64_sys_call+0x87f/0x9a0 [ 68.323939][ T1010] do_syscall_64+0x3b/0xb0 [ 68.328186][ T1010] ? clear_bhb_loop+0x35/0x90 [ 68.332790][ T1010] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 68.338691][ T1010] RIP: 0033:0x7f5c2317c169 [ 68.342951][ T1010] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 68.363144][ T1010] RSP: 002b:00007f5c217e6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 68.371986][ T1010] RAX: ffffffffffffffda RBX: 00007f5c23394fa0 RCX: 00007f5c2317c169 [ 68.380020][ T1010] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 68.387921][ T1010] RBP: 00007f5c217e6090 R08: 0000000000000000 R09: 0000000000000000 [ 68.396068][ T1010] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 68.403870][ T1010] R13: 0000000000000000 R14: 00007f5c23394fa0 R15: 00007ffd917e48a8 [ 68.411785][ T1010] [ 68.415460][ T308] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 68.427717][ T1013] incfs: Error accessing: ./file0. [ 68.428247][ T308] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 68.449049][ T1013] incfs: mount failed -20 [ 68.457079][ T308] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 68.471137][ T308] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 68.474531][ T1011] tipc: Started in network mode [ 68.489084][ T1011] tipc: Node identity ac14140f, cluster identity 4711 [ 68.496897][ T1011] tipc: New replicast peer: 255.255.255.0 [ 68.502962][ T1011] tipc: Enabled bearer , priority 10 [ 68.563298][ T308] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 68.573187][ T1024] FAULT_INJECTION: forcing a failure. [ 68.573187][ T1024] name failslab, interval 1, probability 0, space 0, times 0 [ 68.573219][ T1024] CPU: 1 PID: 1024 Comm: syz.2.188 Not tainted 5.15.178-syzkaller-00385-ga8a88afaecee #0 [ 68.573243][ T1024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 68.573256][ T1024] Call Trace: [ 68.573262][ T1024] [ 68.573270][ T1024] dump_stack_lvl+0x151/0x1c0 [ 68.573297][ T1024] ? io_uring_drop_tctx_refs+0x190/0x190 [ 68.573317][ T1024] ? pcpu_memcg_post_alloc_hook+0x1b1/0x260 [ 68.573341][ T1024] ? trace_raw_output_percpu_destroy_chunk+0xc0/0xc0 [ 68.573365][ T1024] dump_stack+0x15/0x20 [ 68.573383][ T1024] should_fail+0x3c6/0x510 [ 68.573406][ T1024] __should_failslab+0xa4/0xe0 [ 68.573430][ T1024] should_failslab+0x9/0x20 [ 68.573451][ T1024] slab_pre_alloc_hook+0x37/0xd0 [ 68.573475][ T1024] __kmalloc+0x6d/0x2c0 [ 68.573496][ T1024] ? bpf_map_kmalloc_node+0xdb/0x160 [ 68.573518][ T1024] bpf_map_kmalloc_node+0xdb/0x160 [ 68.573539][ T1024] cpu_map_update_elem+0x5a4/0xea0 [ 68.573561][ T1024] ? __kasan_kmalloc+0x9/0x10 [ 68.573583][ T1024] ? cpu_map_lookup_elem+0x100/0x100 [ 68.573611][ T1024] ? kvmalloc_node+0x281/0x4d0 [ 68.573639][ T1024] bpf_map_update_value+0x1a3/0x3c0 [ 68.573662][ T1024] map_update_elem+0x644/0x770 [ 68.586762][ T308] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 68.596446][ T1024] __sys_bpf+0x405/0x760 [ 68.596481][ T1024] ? fput_many+0x160/0x1b0 [ 68.596504][ T1024] ? bpf_link_show_fdinfo+0x300/0x300 [ 68.606785][ T308] usb 2-1: Manufacturer: syz [ 68.609837][ T1024] ? debug_smp_processor_id+0x17/0x20 [ 68.619164][ T308] usb 2-1: config 0 descriptor?? [ 68.622717][ T1024] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 68.622753][ T1024] __x64_sys_bpf+0x7c/0x90 [ 68.622775][ T1024] x64_sys_call+0x87f/0x9a0 [ 68.756260][ T1024] do_syscall_64+0x3b/0xb0 [ 68.760490][ T1024] ? clear_bhb_loop+0x35/0x90 [ 68.760521][ T1024] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 68.760543][ T1024] RIP: 0033:0x7f5167c68169 [ 68.760562][ T1024] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 68.760582][ T1024] RSP: 002b:00007f51662d2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 68.760606][ T1024] RAX: ffffffffffffffda RBX: 00007f5167e80fa0 RCX: 00007f5167c68169 [ 68.760622][ T1024] RDX: 0000000000000020 RSI: 0000200000000180 RDI: 0000000000000002 [ 68.760636][ T1024] RBP: 00007f51662d2090 R08: 0000000000000000 R09: 0000000000000000 [ 68.760649][ T1024] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 68.760662][ T1024] R13: 0000000000000000 R14: 00007f5167e80fa0 R15: 00007fffb5ba8798 [ 68.760683][ T1024] [ 68.851842][ T1029] loop0: detected capacity change from 0 to 512 [ 68.890596][ T1033] loop2: detected capacity change from 0 to 1024 [ 68.916460][ T1033] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 68.916492][ T1033] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 68.917358][ T1033] EXT4-fs error (device loop2): ext4_get_journal_inode:5151: inode #5: comm syz.2.192: unexpected bad inode w/o EXT4_IGET_BAD [ 68.917524][ T1033] EXT4-fs (loop2): no journal found [ 68.917539][ T1033] EXT4-fs (loop2): can't get journal size [ 68.932572][ T1033] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,stripe=0x0000000000000002,norecovery,min_batch_time=0x000000000000071d,bsdgroups,,errors=continue. Quota mode: writeback. [ 68.935297][ T1029] EXT4-fs (loop0): corrupt root inode, run e2fsck [ 68.935344][ T1029] EXT4-fs (loop0): mount failed [ 69.050024][ T1033] EXT4-fs error (device loop2): __ext4_iget:4903: inode #15: block 1803188595: comm syz.2.192: invalid block [ 69.068022][ T1033] EXT4-fs error (device loop2): __ext4_iget:4903: inode #15: block 1803188595: comm syz.2.192: invalid block [ 69.068595][ T1033] EXT4-fs error (device loop2): __ext4_iget:4903: inode #15: block 1803188595: comm syz.2.192: invalid block [ 69.098050][ T1033] EXT4-fs (loop2): re-mounted. Opts: . Quota mode: writeback. [ 69.109020][ T308] appleir 0003:05AC:8243.0003: unknown main item tag 0x0 [ 69.118672][ T308] appleir 0003:05AC:8243.0003: No inputs registered, leaving [ 69.128807][ T308] appleir 0003:05AC:8243.0003: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 69.542212][ T26] hid-led: probe of 0003:0FC5:B080.0002 failed with error -71 [ 69.550379][ T1044] ªªªªªª: renamed from vlan0 [ 69.558364][ T26] usb 4-1: USB disconnect, device number 4 [ 69.590003][ T1044] FAULT_INJECTION: forcing a failure. [ 69.590003][ T1044] name failslab, interval 1, probability 0, space 0, times 0 [ 69.639358][ T1044] CPU: 1 PID: 1044 Comm: syz.4.194 Not tainted 5.15.178-syzkaller-00385-ga8a88afaecee #0 [ 69.649111][ T1044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 69.659934][ T1044] Call Trace: [ 69.663144][ T1044] [ 69.666070][ T1044] dump_stack_lvl+0x151/0x1c0 [ 69.670846][ T1044] ? io_uring_drop_tctx_refs+0x190/0x190 [ 69.676498][ T1044] ? preempt_schedule_irq+0xe7/0x140 [ 69.681619][ T1044] ? __cond_resched+0x20/0x20 [ 69.687180][ T1044] dump_stack+0x15/0x20 [ 69.691576][ T1044] should_fail+0x3c6/0x510 [ 69.695894][ T1044] __should_failslab+0xa4/0xe0 [ 69.700859][ T1044] should_failslab+0x9/0x20 [ 69.705734][ T1044] slab_pre_alloc_hook+0x37/0xd0 [ 69.710698][ T1044] ? kernfs_rename_ns+0x2c9/0x8b0 [ 69.716793][ T1044] __kmalloc_track_caller+0x6c/0x2c0 [ 69.721903][ T1044] ? kernfs_find_ns+0x327/0x4a0 [ 69.727118][ T1044] ? kernfs_rename_ns+0x2c9/0x8b0 [ 69.732065][ T1044] kstrdup_const+0x55/0x90 [ 69.736311][ T1044] kernfs_rename_ns+0x2c9/0x8b0 [ 69.741006][ T1044] sysfs_rename_dir_ns+0x6d/0x90 [ 69.745952][ T1044] kobject_rename+0x3db/0x520 [ 69.751170][ T1044] ? kobject_init_and_add+0x190/0x190 [ 69.751311][ T318] tipc: Node number set to 2886997007 [ 69.756459][ T1044] ? sysfs_rename_link_ns+0x17b/0x1b0 [ 69.756482][ T1044] device_rename+0x16d/0x190 [ 69.771444][ T1044] dev_change_name+0x344/0x9c0 [ 69.776034][ T1044] ? __ww_mutex_lock_interruptible_slowpath+0x20/0x20 [ 69.782759][ T1044] ? avc_denied+0x1b0/0x1b0 [ 69.787150][ T1044] ? do_sys_openat2+0x1fc/0x820 [ 69.792207][ T1044] ? dev_alloc_name+0x130/0x130 [ 69.796902][ T1044] dev_ifsioc+0x24c/0x10c0 [ 69.801158][ T1044] ? dev_ioctl+0xe70/0xe70 [ 69.805486][ T1044] ? mutex_lock+0x135/0x1e0 [ 69.809832][ T1044] ? wait_for_completion_killable_timeout+0x10/0x10 [ 69.816256][ T1044] ? security_capable+0x87/0xb0 [ 69.820932][ T1044] dev_ioctl+0x35c/0xe70 [ 69.825185][ T1044] sock_do_ioctl+0x34f/0x5a0 [ 69.829724][ T1044] ? sock_show_fdinfo+0xa0/0xa0 [ 69.834386][ T1044] ? selinux_file_ioctl+0x3cc/0x540 [ 69.839503][ T1044] sock_ioctl+0x455/0x740 [ 69.843667][ T1044] ? sock_poll+0x400/0x400 [ 69.848067][ T1044] ? __fget_files+0x31e/0x380 [ 69.852605][ T1044] ? security_file_ioctl+0x84/0xb0 [ 69.857655][ T1044] ? sock_poll+0x400/0x400 [ 69.861899][ T1044] __se_sys_ioctl+0x114/0x190 [ 69.866417][ T1044] __x64_sys_ioctl+0x7b/0x90 [ 69.870934][ T1044] x64_sys_call+0x98/0x9a0 [ 69.875186][ T1044] do_syscall_64+0x3b/0xb0 [ 69.879429][ T1044] ? clear_bhb_loop+0x35/0x90 [ 69.884154][ T1044] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 69.890139][ T1044] RIP: 0033:0x7f5c2317c169 [ 69.894498][ T1044] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 69.914080][ T1044] RSP: 002b:00007f5c217e6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 69.922324][ T1044] RAX: ffffffffffffffda RBX: 00007f5c23394fa0 RCX: 00007f5c2317c169 [ 69.930825][ T1044] RDX: 0000200000000000 RSI: 0000000000008923 RDI: 0000000000000006 [ 69.939013][ T1044] RBP: 00007f5c217e6090 R08: 0000000000000000 R09: 0000000000000000 [ 69.947550][ T1044] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 69.956196][ T1044] R13: 0000000000000000 R14: 00007f5c23394fa0 R15: 00007ffd917e48a8 [ 69.964494][ T1044] [ 70.037528][ T1056] loop4: detected capacity change from 0 to 16 [ 70.045957][ T1053] loop0: detected capacity change from 0 to 512 [ 70.059005][ T1058] netlink: 24 bytes leftover after parsing attributes in process `syz.1.179'. [ 70.078575][ T1058] loop1: detected capacity change from 0 to 512 [ 70.123336][ T1058] EXT4-fs (loop1): Ignoring removed nobh option [ 70.125664][ T1056] erofs: (device loop4): mounted with root inode @ nid 36. [ 70.130040][ T1058] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 70.150301][ T1062] loop3: detected capacity change from 0 to 256 [ 70.159580][ T1058] EXT4-fs (loop1): Test dummy encryption mode enabled [ 70.179067][ T1065] FAULT_INJECTION: forcing a failure. [ 70.179067][ T1065] name failslab, interval 1, probability 0, space 0, times 0 [ 70.222383][ T1058] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.179: invalid indirect mapped block 256 (level 2) [ 70.241404][ T1058] EXT4-fs (loop1): 2 truncates cleaned up [ 70.247096][ T1058] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobh,auto_da_alloc,data_err=ignore,jqfmt=vfsv1,test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 70.262437][ T1065] CPU: 0 PID: 1065 Comm: syz.0.200 Not tainted 5.15.178-syzkaller-00385-ga8a88afaecee #0 [ 70.274064][ T1065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 70.275648][ T1058] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm syz.1.179: bg 0: block 5: invalid block bitmap [ 70.284045][ T1065] Call Trace: [ 70.284059][ T1065] [ 70.284069][ T1065] dump_stack_lvl+0x151/0x1c0 [ 70.284097][ T1065] ? io_uring_drop_tctx_refs+0x190/0x190 [ 70.284119][ T1065] dump_stack+0x15/0x20 [ 70.284137][ T1065] should_fail+0x3c6/0x510 [ 70.296532][ T1058] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 64 with error 28 [ 70.299181][ T1065] __should_failslab+0xa4/0xe0 [ 70.301947][ T1058] EXT4-fs (loop1): This should not happen!! Data will be lost [ 70.301947][ T1058] [ 70.306474][ T1065] ? skb_clone+0x1d1/0x360 [ 70.306506][ T1065] should_failslab+0x9/0x20 [ 70.306536][ T1065] slab_pre_alloc_hook+0x37/0xd0 [ 70.306562][ T1065] ? skb_clone+0x1d1/0x360 [ 70.312037][ T1058] EXT4-fs (loop1): Total free blocks count 0 [ 70.315989][ T1065] kmem_cache_alloc+0x44/0x250 [ 70.316031][ T1065] skb_clone+0x1d1/0x360 [ 70.320539][ T1058] EXT4-fs (loop1): Free/Dirty block details [ 70.332304][ T1065] bpf_clone_redirect+0xa6/0x390 [ 70.332341][ T1065] bpf_prog_6893982b85ceadf7+0x56/0x5a8 [ 70.332363][ T1065] ? dma_direct_supported+0xa0/0x1f0 [ 70.332387][ T1065] ? __stack_depot_save+0x34/0x470 [ 70.404916][ T1065] ? __kasan_slab_alloc+0xc3/0xe0 [ 70.409776][ T1065] ? __kasan_slab_alloc+0xb1/0xe0 [ 70.414653][ T1065] ? slab_post_alloc_hook+0x53/0x2c0 [ 70.419748][ T1065] ? kmem_cache_alloc+0xf5/0x250 [ 70.424521][ T1065] ? __build_skb+0x2a/0x300 [ 70.429044][ T1065] ? build_skb+0x25/0x1f0 [ 70.433198][ T1065] ? bpf_prog_test_run_skb+0x38e/0x1420 [ 70.438677][ T1065] ? bpf_prog_test_run+0x3b0/0x630 [ 70.443969][ T1065] ? __sys_bpf+0x525/0x760 [ 70.448490][ T1065] ? __x64_sys_bpf+0x7c/0x90 [ 70.453238][ T1065] ? x64_sys_call+0x87f/0x9a0 [ 70.457739][ T1065] ? do_syscall_64+0x3b/0xb0 [ 70.462168][ T1065] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 70.468335][ T1065] ? ktime_get+0x12f/0x160 [ 70.472573][ T1065] bpf_test_run+0x478/0xa10 [ 70.476927][ T1065] ? convert___skb_to_skb+0x570/0x570 [ 70.482244][ T1065] ? eth_type_trans+0x2e4/0x620 [ 70.487137][ T1065] ? eth_get_headlen+0x240/0x240 [ 70.492065][ T1065] ? convert___skb_to_skb+0x44/0x570 [ 70.497388][ T1065] bpf_prog_test_run_skb+0xb41/0x1420 [ 70.502594][ T1065] ? __kasan_check_write+0x14/0x20 [ 70.507882][ T1065] ? __bpf_prog_test_run_raw_tp+0x2e0/0x2e0 [ 70.513691][ T1065] ? __kasan_check_write+0x14/0x20 [ 70.518717][ T1065] ? fput_many+0x160/0x1b0 [ 70.523134][ T1065] ? __bpf_prog_test_run_raw_tp+0x2e0/0x2e0 [ 70.528860][ T1065] bpf_prog_test_run+0x3b0/0x630 [ 70.533636][ T1065] ? bpf_prog_query+0x220/0x220 [ 70.538409][ T1065] ? selinux_bpf+0xd2/0x100 [ 70.543182][ T1065] ? security_bpf+0x82/0xb0 [ 70.547698][ T1065] __sys_bpf+0x525/0x760 [ 70.551951][ T1065] ? fput_many+0x160/0x1b0 [ 70.556307][ T1065] ? bpf_link_show_fdinfo+0x300/0x300 [ 70.561589][ T1065] ? debug_smp_processor_id+0x17/0x20 [ 70.567389][ T1065] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 70.573682][ T1065] __x64_sys_bpf+0x7c/0x90 [ 70.577930][ T1065] x64_sys_call+0x87f/0x9a0 [ 70.582283][ T1065] do_syscall_64+0x3b/0xb0 [ 70.586557][ T1065] ? clear_bhb_loop+0x35/0x90 [ 70.591205][ T1065] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 70.597211][ T1065] RIP: 0033:0x7f07f4043169 [ 70.601837][ T1065] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 70.622014][ T1065] RSP: 002b:00007f07f26ad038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 70.630266][ T1065] RAX: ffffffffffffffda RBX: 00007f07f425bfa0 RCX: 00007f07f4043169 [ 70.638327][ T1065] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 70.646128][ T1065] RBP: 00007f07f26ad090 R08: 0000000000000000 R09: 0000000000000000 [ 70.654036][ T1065] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 70.661949][ T1065] R13: 0000000000000000 R14: 00007f07f425bfa0 R15: 00007fff70800e08 [ 70.669986][ T1065] [ 70.674139][ T1058] EXT4-fs (loop1): free_blocks=0 [ 70.679163][ T1058] EXT4-fs (loop1): dirty_blocks=64 [ 70.687379][ T1074] loop2: detected capacity change from 0 to 256 [ 70.693605][ T1058] EXT4-fs (loop1): Block reservation details [ 70.699501][ T1058] EXT4-fs (loop1): i_reserved_data_blocks=64 [ 70.728725][ T1062] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 70.743073][ T1062] exFAT-fs (loop3): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 70.842192][ T39] usb 2-1: reset high-speed USB device number 9 using dummy_hcd [ 70.888540][ T1084] loop0: detected capacity change from 0 to 4096 [ 70.947595][ T1084] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 70.968483][ T1084] EXT4-fs (loop0): re-mounted. Opts: (null). Quota mode: writeback. [ 71.021182][ T1093] loop0: detected capacity change from 0 to 512 [ 71.124800][ T1093] EXT4-fs (loop0): corrupt root inode, run e2fsck [ 71.124847][ T1093] EXT4-fs (loop0): mount failed [ 71.237289][ T1099] loop3: detected capacity change from 0 to 128 [ 71.369553][ T1099] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 71.369947][ T1099] ext4 filesystem being mounted at /44/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 71.602319][ T318] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 71.746166][ T1058] syz.1.179 (1058) used greatest stack depth: 20208 bytes left [ 71.950124][ T406] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 72.132750][ T1109] xt_CT: You must specify a L4 protocol and not use inversions on it [ 72.142608][ T1109] netlink: 104 bytes leftover after parsing attributes in process `syz.0.212'. [ 72.236912][ T1116] FAULT_INJECTION: forcing a failure. [ 72.236912][ T1116] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 72.250047][ T1116] CPU: 1 PID: 1116 Comm: syz.2.211 Not tainted 5.15.178-syzkaller-00385-ga8a88afaecee #0 [ 72.259692][ T1116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 72.269915][ T1116] Call Trace: [ 72.273111][ T1116] [ 72.275906][ T1116] dump_stack_lvl+0x151/0x1c0 [ 72.280410][ T1116] ? io_uring_drop_tctx_refs+0x190/0x190 [ 72.286373][ T1116] ? find_lock_lowest_rq+0x75/0x480 [ 72.291920][ T1116] dump_stack+0x15/0x20 [ 72.295907][ T1116] should_fail+0x3c6/0x510 [ 72.300263][ T1116] should_fail_usercopy+0x1a/0x20 [ 72.305124][ T1116] _copy_from_user+0x20/0xd0 [ 72.309565][ T1116] do_ipt_set_ctl+0x75f/0x1200 [ 72.314221][ T1116] ? __schedule+0xcd4/0x1590 [ 72.318659][ T1116] ? ipt_unregister_table_exit+0x210/0x210 [ 72.324288][ T1116] ? release_firmware_map_entry+0x190/0x190 [ 72.330291][ T1116] ? preempt_schedule_irq+0xe7/0x140 [ 72.335510][ T1116] ? __cond_resched+0x20/0x20 [ 72.340008][ T1116] ? __kasan_check_write+0x14/0x20 [ 72.345032][ T1116] ? mutex_unlock+0xb2/0x260 [ 72.349473][ T1116] ? __mutex_lock_slowpath+0x10/0x10 [ 72.354589][ T1116] ? sysvec_reschedule_ipi+0x8c/0x160 [ 72.359968][ T1116] nf_setsockopt+0x274/0x2a0 [ 72.364487][ T1116] ip_setsockopt+0x2ae7/0x4730 [ 72.369100][ T1116] ? ipv4_pktinfo_prepare+0x530/0x530 [ 72.374280][ T1116] ? find_lowest_rq+0x196/0x760 [ 72.378977][ T1116] ? pick_next_pushable_task+0x210/0x210 [ 72.384448][ T1116] ? __kasan_check_write+0x14/0x20 [ 72.389413][ T1116] ? __switch_to+0x62a/0x1190 [ 72.394037][ T1116] ? find_lock_lowest_rq+0x75/0x480 [ 72.399114][ T1116] ? __kasan_check_write+0x14/0x20 [ 72.404327][ T1116] ? push_rt_task+0x46e/0x5c0 [ 72.408936][ T1116] ? _raw_spin_unlock+0x4d/0x70 [ 72.413691][ T1116] ? finish_task_switch+0x167/0x7b0 [ 72.418814][ T1116] ? requeue_task_rt+0x410/0x410 [ 72.423674][ T1116] ? __schedule+0xcd4/0x1590 [ 72.428487][ T1116] ? release_firmware_map_entry+0x190/0x190 [ 72.434438][ T1116] ? __kasan_check_read+0x11/0x20 [ 72.439309][ T1116] ? preempt_schedule_irq+0xe7/0x140 [ 72.444589][ T1116] ? __cond_resched+0x20/0x20 [ 72.449103][ T1116] ? finish_task_switch+0x167/0x7b0 [ 72.454223][ T1116] ? requeue_task_rt+0x410/0x410 [ 72.459348][ T1116] udp_setsockopt+0x8f/0xa0 [ 72.463801][ T1116] ipv6_setsockopt+0x295/0x4240 [ 72.468574][ T1116] ? __kasan_check_read+0x11/0x20 [ 72.474411][ T1116] ? cpupri_find+0xe4/0x2a0 [ 72.479257][ T1116] ? ipv6_update_options+0x400/0x400 [ 72.484381][ T1116] ? find_lowest_rq+0x196/0x760 [ 72.489240][ T1116] ? pick_next_pushable_task+0x210/0x210 [ 72.494914][ T1116] ? __kasan_check_write+0x14/0x20 [ 72.500129][ T1116] ? __switch_to+0x62a/0x1190 [ 72.504627][ T1116] ? find_lock_lowest_rq+0x75/0x480 [ 72.509731][ T1116] ? __kasan_check_write+0x14/0x20 [ 72.514875][ T1116] ? push_rt_task+0x46e/0x5c0 [ 72.519466][ T1116] ? _raw_spin_unlock+0x4d/0x70 [ 72.524153][ T1116] ? finish_task_switch+0x167/0x7b0 [ 72.529183][ T1116] ? requeue_task_rt+0x410/0x410 [ 72.533960][ T1116] ? __schedule+0xcd4/0x1590 [ 72.538390][ T1116] ? release_firmware_map_entry+0x190/0x190 [ 72.544108][ T1116] ? kasan_set_track+0x5d/0x70 [ 72.548706][ T1116] ? kasan_set_free_info+0x23/0x40 [ 72.553771][ T1116] ? ____kasan_slab_free+0x126/0x160 [ 72.558978][ T1116] ? __kasan_slab_free+0x11/0x20 [ 72.563762][ T1116] ? kmem_cache_free+0x115/0x330 [ 72.568699][ T1116] ? avc_has_perm_noaudit+0x348/0x430 [ 72.574020][ T1116] ? __kasan_check_read+0x11/0x20 [ 72.579037][ T1116] ? preempt_schedule_irq+0xe7/0x140 [ 72.584150][ T1116] ? __cond_resched+0x20/0x20 [ 72.588857][ T1116] ? avc_has_perm_noaudit+0x2dd/0x430 [ 72.594069][ T1116] ? irqentry_exit_cond_resched+0x2a/0x30 [ 72.599616][ T1116] ? irqentry_exit+0x30/0x40 [ 72.604226][ T1116] ? sysvec_reschedule_ipi+0x8c/0x160 [ 72.609433][ T1116] ? asm_sysvec_reschedule_ipi+0x1b/0x20 [ 72.615523][ T1116] tcp_setsockopt+0x22d/0x3800 [ 72.620206][ T1116] ? fsnotify_perm+0x6a/0x5b0 [ 72.624840][ T1116] ? tcp_set_window_clamp+0x1b0/0x1b0 [ 72.630179][ T1116] ? selinux_socket_setsockopt+0x260/0x360 [ 72.635802][ T1116] ? selinux_socket_getsockopt+0x340/0x340 [ 72.641720][ T1116] sock_common_setsockopt+0xa2/0xc0 [ 72.647036][ T1116] ? sock_common_recvmsg+0x240/0x240 [ 72.652265][ T1116] __sys_setsockopt+0x4dc/0x840 [ 72.657129][ T1116] ? __ia32_sys_recv+0xb0/0xb0 [ 72.661834][ T1116] ? debug_smp_processor_id+0x17/0x20 [ 72.667210][ T1116] __x64_sys_setsockopt+0xbf/0xd0 [ 72.672249][ T1116] x64_sys_call+0x1a2/0x9a0 [ 72.676582][ T1116] do_syscall_64+0x3b/0xb0 [ 72.680849][ T1116] ? clear_bhb_loop+0x35/0x90 [ 72.685368][ T1116] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 72.691160][ T1116] RIP: 0033:0x7f5167c68169 [ 72.695583][ T1116] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 72.715629][ T1116] RSP: 002b:00007f5166290038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 72.723956][ T1116] RAX: ffffffffffffffda RBX: 00007f5167e81160 RCX: 00007f5167c68169 [ 72.731796][ T1116] RDX: 0000000000000040 RSI: 0004000000000000 RDI: 0000000000000009 [ 72.740044][ T1116] RBP: 00007f5166290090 R08: 0000000000000308 R09: 0000000000000000 [ 72.748178][ T1116] R10: 0000200000000400 R11: 0000000000000246 R12: 0000000000000001 [ 72.755999][ T1116] R13: 0000000000000000 R14: 00007f5167e81160 R15: 00007fffb5ba8798 [ 72.763817][ T1116] [ 72.767229][ T1115] netlink: 104 bytes leftover after parsing attributes in process `syz.2.211'. [ 72.782182][ T318] usb 5-1: Using ep0 maxpacket: 32 [ 72.787054][ T30] kauditd_printk_skb: 65 callbacks suppressed [ 72.787075][ T30] audit: type=1400 audit(1744552154.185:334): avc: denied { getopt } for pid=1117 comm="syz.0.214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 72.823601][ T30] audit: type=1400 audit(1744552154.215:335): avc: denied { shutdown } for pid=1117 comm="syz.0.214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 72.855255][ T30] audit: type=1400 audit(1744552154.215:336): avc: denied { create } for pid=1117 comm="syz.0.214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 72.877562][ T30] audit: type=1400 audit(1744552154.215:337): avc: denied { setopt } for pid=1117 comm="syz.0.214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 72.897883][ T30] audit: type=1400 audit(1744552154.215:338): avc: denied { getopt } for pid=1117 comm="syz.0.214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 72.917709][ T318] usb 5-1: config 0 interface 0 has no altsetting 0 [ 72.924414][ T318] usb 5-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 72.941117][ T318] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.943434][ T406] usb 4-1: config 0 has an invalid interface number: 72 but max is 0 [ 72.957633][ T318] usb 5-1: config 0 descriptor?? [ 72.973715][ T406] usb 4-1: config 0 descriptor has 1 excess byte, ignoring [ 72.982570][ T1122] ªªªªªª: renamed from vlan0 [ 72.987267][ T406] usb 4-1: config 0 has no interface number 0 [ 73.000031][ T406] usb 4-1: New USB device found, idVendor=12d1, idProduct=d03d, bcdDevice=2f.07 [ 73.014138][ T406] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.025000][ T406] usb 4-1: config 0 descriptor?? [ 73.056587][ T1126] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.063973][ T1126] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.071270][ T1126] device bridge_slave_0 entered promiscuous mode [ 73.078577][ T1126] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.085959][ T1126] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.093616][ T1126] device bridge_slave_1 entered promiscuous mode [ 73.153558][ T1126] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.161152][ T1126] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.168296][ T1126] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.175340][ T1126] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.201626][ T1101] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.209788][ T26] usb 2-1: USB disconnect, device number 9 [ 73.216340][ T1101] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.224522][ T1101] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.232219][ T594] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 73.241500][ T1101] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.250091][ T1101] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.257011][ T1101] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.267870][ T1101] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.275964][ T1101] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.282814][ T1101] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.292285][ T752] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 73.302469][ T1096] device bridge0 entered promiscuous mode [ 73.308988][ T1096] bridge0: port 3(macsec1) entered blocking state [ 73.315489][ T1096] bridge0: port 3(macsec1) entered disabled state [ 73.322958][ T1096] device bridge0 left promiscuous mode [ 73.338891][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.349429][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.365532][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.380431][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.388879][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.396315][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.404840][ T1126] device veth0_vlan entered promiscuous mode [ 73.413389][ T841] device bridge_slave_1 left promiscuous mode [ 73.419380][ T841] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.426998][ T841] device bridge_slave_0 left promiscuous mode [ 73.434122][ T841] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.436774][ T318] sony 0003:054C:0268.0004: hiddev96,hidraw0: USB HID v81.01 Device [HID 054c:0268] on usb-dummy_hcd.4-1/input0 [ 73.454171][ T318] sony 0003:054C:0268.0004: failed to claim input [ 73.460967][ T841] device veth1_macvtap left promiscuous mode [ 73.467291][ T841] device veth0_vlan left promiscuous mode [ 73.482245][ T594] usb 3-1: Using ep0 maxpacket: 16 [ 73.559013][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.568560][ T1126] device veth1_macvtap entered promiscuous mode [ 73.575262][ T752] usb 1-1: Using ep0 maxpacket: 16 [ 73.582538][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.594515][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.610189][ T30] audit: type=1400 audit(1744552155.005:339): avc: denied { mount } for pid=1126 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 73.641140][ T30] audit: type=1400 audit(1744552155.035:340): avc: denied { mounton } for pid=1126 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=514 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 73.667222][ T1133] FAULT_INJECTION: forcing a failure. [ 73.667222][ T1133] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 73.670078][ T318] usb 5-1: USB disconnect, device number 6 [ 73.680877][ T1133] CPU: 1 PID: 1133 Comm: syz.5.217 Not tainted 5.15.178-syzkaller-00385-ga8a88afaecee #0 [ 73.696256][ T1133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 73.706406][ T1133] Call Trace: [ 73.709526][ T1133] [ 73.713347][ T1133] dump_stack_lvl+0x151/0x1c0 [ 73.717883][ T1133] ? io_uring_drop_tctx_refs+0x190/0x190 [ 73.723349][ T1133] ? __kasan_check_read+0x11/0x20 [ 73.728372][ T1133] dump_stack+0x15/0x20 [ 73.732355][ T1133] should_fail+0x3c6/0x510 [ 73.736640][ T1133] should_fail_usercopy+0x1a/0x20 [ 73.741465][ T1133] copy_page_from_iter_atomic+0x423/0x10e0 [ 73.747206][ T1133] ? pipe_zero+0x4e0/0x4e0 [ 73.751455][ T1133] generic_perform_write+0x360/0x750 [ 73.756661][ T1133] ? __mark_inode_dirty+0x54e/0xa50 [ 73.761941][ T1133] ? grab_cache_page_write_begin+0xa0/0xa0 [ 73.767625][ T1133] ? file_remove_privs+0x610/0x610 [ 73.772664][ T1133] ? rwsem_write_trylock+0x153/0x340 [ 73.778311][ T1133] ? rwsem_mark_wake+0x770/0x770 [ 73.783205][ T1133] __generic_file_write_iter+0x25b/0x4b0 [ 73.788664][ T1133] generic_file_write_iter+0xaf/0x1c0 [ 73.793881][ T1133] vfs_write+0xd5d/0x1110 [ 73.798055][ T1133] ? file_end_write+0x1c0/0x1c0 [ 73.802726][ T1133] ? mutex_lock+0xb6/0x1e0 [ 73.806979][ T1133] ? wait_for_completion_killable_timeout+0x10/0x10 [ 73.813992][ T1133] ? __fdget_pos+0x2e7/0x3a0 [ 73.818408][ T1133] ? ksys_write+0x77/0x2c0 [ 73.822665][ T1133] ksys_write+0x199/0x2c0 [ 73.826822][ T1133] ? __ia32_sys_read+0x90/0x90 [ 73.831635][ T1133] ? debug_smp_processor_id+0x17/0x20 [ 73.836932][ T1133] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 73.842807][ T1133] __x64_sys_write+0x7b/0x90 [ 73.847228][ T1133] x64_sys_call+0x2f/0x9a0 [ 73.851587][ T1133] do_syscall_64+0x3b/0xb0 [ 73.855838][ T1133] ? clear_bhb_loop+0x35/0x90 [ 73.860362][ T1133] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 73.866336][ T1133] RIP: 0033:0x7fcb3a806169 [ 73.870589][ T1133] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 73.890329][ T1133] RSP: 002b:00007fcb38e70038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 73.900020][ T1133] RAX: ffffffffffffffda RBX: 00007fcb3aa1efa0 RCX: 00007fcb3a806169 [ 73.908543][ T1133] RDX: 0000000000040010 RSI: 0000200000000180 RDI: 0000000000000009 [ 73.916484][ T1133] RBP: 00007fcb38e70090 R08: 0000000000000000 R09: 0000000000000000 [ 73.924310][ T1133] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 73.932478][ T1133] R13: 0000000000000000 R14: 00007fcb3aa1efa0 R15: 00007ffe52ed0a38 [ 73.940649][ T1133] [ 73.962341][ T594] usb 3-1: config 1 interface 0 altsetting 6 bulk endpoint 0x1 has invalid maxpacket 8 [ 73.972891][ T594] usb 3-1: config 1 interface 0 altsetting 6 bulk endpoint 0x82 has invalid maxpacket 16 [ 73.982632][ T594] usb 3-1: config 1 interface 0 has no altsetting 0 [ 74.052221][ T752] usb 1-1: config 1 interface 0 altsetting 6 bulk endpoint 0x1 has invalid maxpacket 8 [ 74.052258][ T752] usb 1-1: config 1 interface 0 altsetting 6 bulk endpoint 0x82 has invalid maxpacket 16 [ 74.052284][ T752] usb 1-1: config 1 interface 0 has no altsetting 0 [ 74.142215][ T594] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 74.151399][ T594] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.151427][ T594] usb 3-1: Product: syz [ 74.151443][ T594] usb 3-1: Manufacturer: syz [ 74.151457][ T594] usb 3-1: SerialNumber: syz [ 74.172579][ T1125] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 74.180675][ T1125] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 74.212239][ T752] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 74.212270][ T752] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.212295][ T752] usb 1-1: Product: syz [ 74.212310][ T752] usb 1-1: Manufacturer: syz [ 74.212325][ T752] usb 1-1: SerialNumber: syz [ 74.234325][ T1128] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 74.257324][ T1128] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 74.432203][ T406] usb 4-1: string descriptor 0 read error: -71 [ 74.433062][ T406] cdc_mbim 4-1:0.72: skipping garbage [ 74.444828][ T406] cdc_mbim 4-1:0.72: CDC Union missing and no IAD found [ 74.444858][ T406] cdc_mbim 4-1:0.72: bind() failure [ 74.457556][ T406] usb 4-1: USB disconnect, device number 5 [ 74.472727][ T1141] loop3: detected capacity change from 0 to 512 [ 74.512513][ T1141] EXT4-fs (loop3): corrupt root inode, run e2fsck [ 74.512561][ T1141] EXT4-fs (loop3): mount failed [ 74.533497][ T30] audit: type=1400 audit(1744552155.935:341): avc: denied { setopt } for pid=1144 comm="syz.4.223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 74.856870][ T1147] loop4: detected capacity change from 0 to 1024 [ 75.230108][ T1147] EXT4-fs (loop4): Unrecognized mount option "fowner=00000000000000000000" or missing value [ 75.483400][ T1153] loop5: detected capacity change from 0 to 1024 [ 75.533276][ T594] usblp 3-1:1.0: usblp0: USB Bidirectional printer dev 7 if 0 alt 6 proto 2 vid 0x0525 pid 0xA4A8 [ 75.548723][ T594] usb 3-1: USB disconnect, device number 7 [ 75.563952][ T594] usblp0: removed [ 75.578209][ T1153] EXT4-fs error (device loop5): ext4_ext_check_inode:501: inode #11: comm syz.5.224: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 75.593304][ T752] usblp 1-1:1.0: usblp0: USB Bidirectional printer dev 5 if 0 alt 6 proto 2 vid 0x0525 pid 0xA4A8 [ 75.608257][ T1153] EXT4-fs error (device loop5): ext4_orphan_get:1406: comm syz.5.224: couldn't read orphan inode 11 (err -117) [ 75.614023][ T752] usb 1-1: USB disconnect, device number 5 [ 75.628542][ T752] usblp0: removed [ 75.642250][ T1153] EXT4-fs (loop5): mounted filesystem without journal. Opts: mb_optimize_scan=0x0000000000000001,nodiscard,nodelalloc,usrquota,nolazytime,noblock_validity,block_validity,barrier,,errors=continue. Quota mode: writeback. [ 75.756418][ T1153] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:476: comm syz.5.224: Invalid block bitmap block 0 in block_group 0 [ 75.770177][ T1153] Quota error (device loop5): write_blk: dquota write failed [ 75.778159][ T1153] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 75.838761][ T1153] EXT4-fs error (device loop5): ext4_acquire_dquot:6188: comm syz.5.224: Failed to acquire dquot type 0 [ 76.043327][ T1165] 9pnet: Insufficient options for proto=fd [ 76.806830][ T1172] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1172 comm=syz.0.228 [ 76.939580][ T1179] loop0: detected capacity change from 0 to 512 [ 77.023056][ T1179] EXT4-fs (loop0): Ignoring removed nobh option [ 77.031472][ T1179] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 77.062287][ T1179] EXT4-fs (loop0): Number of reserved GDT blocks insanely large: 1536 [ 77.255709][ T1186] binfmt_misc: register: failed to install interpreter file ./file0 [ 77.329412][ T1188] loop3: detected capacity change from 0 to 512 [ 77.343391][ T1153] EXT4-fs error (device loop5): ext4_lookup:1858: inode #15: comm syz.5.224: iget: bad extra_isize 65535 (inode size 256) [ 77.374676][ T1193] loop0: detected capacity change from 0 to 512 [ 77.404571][ T1188] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 77.448478][ T1188] ext4 filesystem being mounted at /49/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 77.487049][ T1193] EXT4-fs (loop0): corrupt root inode, run e2fsck [ 77.493591][ T1193] EXT4-fs (loop0): mount failed [ 77.646718][ T1210] FAULT_INJECTION: forcing a failure. [ 77.646718][ T1210] name failslab, interval 1, probability 0, space 0, times 0 [ 77.659254][ T1210] CPU: 1 PID: 1210 Comm: syz.4.239 Not tainted 5.15.178-syzkaller-00385-ga8a88afaecee #0 [ 77.669501][ T1210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 77.679647][ T1210] Call Trace: [ 77.682765][ T1210] [ 77.685537][ T1210] dump_stack_lvl+0x151/0x1c0 [ 77.690172][ T1210] ? io_uring_drop_tctx_refs+0x190/0x190 [ 77.695734][ T1210] dump_stack+0x15/0x20 [ 77.699909][ T1210] should_fail+0x3c6/0x510 [ 77.704619][ T1210] __should_failslab+0xa4/0xe0 [ 77.710005][ T1210] ? dst_alloc+0x164/0x1e0 [ 77.712197][ T594] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 77.714502][ T1210] should_failslab+0x9/0x20 [ 77.714531][ T1210] slab_pre_alloc_hook+0x37/0xd0 [ 77.731446][ T1210] ? dst_alloc+0x164/0x1e0 [ 77.735698][ T1210] kmem_cache_alloc+0x44/0x250 [ 77.740295][ T1210] ? unwind_get_return_address+0x4d/0x90 [ 77.745765][ T1210] dst_alloc+0x164/0x1e0 [ 77.749848][ T1210] ip_route_input_rcu+0xd38/0x29b0 [ 77.754890][ T1210] ? __local_bh_enable_ip+0x58/0x80 [ 77.760106][ T1210] ? ip_route_input_noref+0x110/0x110 [ 77.765311][ T1210] ? ipt_do_table+0x14df/0x17e0 [ 77.770021][ T1210] ip_route_input_noref+0xba/0x110 [ 77.775047][ T1210] ? ip_route_use_hint+0x550/0x550 [ 77.779982][ T1210] ip_rcv_finish_core+0x4c8/0x1490 [ 77.785015][ T1210] ip_rcv+0xef/0x310 [ 77.788845][ T1210] ? bpf_flow_dissect+0x3f0/0x3f0 [ 77.793706][ T1210] ? ip_local_deliver_finish+0x240/0x240 [ 77.799496][ T1210] ? ip_rcv_core+0xb50/0xb50 [ 77.804649][ T1210] ? ip_local_deliver_finish+0x240/0x240 [ 77.810046][ T1210] __netif_receive_skb+0x1c6/0x530 [ 77.815512][ T1210] ? tun_chr_write_iter+0x1e1/0x2e0 [ 77.820553][ T1210] ? vfs_write+0xd5d/0x1110 [ 77.824983][ T1210] ? ksys_write+0x199/0x2c0 [ 77.829464][ T1210] ? x64_sys_call+0x2f/0x9a0 [ 77.834116][ T1210] ? do_syscall_64+0x3b/0xb0 [ 77.838548][ T1210] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 77.844458][ T1210] ? deliver_ptype_list_skb+0x3b0/0x3b0 [ 77.849845][ T1210] netif_receive_skb+0xb0/0x480 [ 77.854518][ T1210] ? netif_receive_skb_core+0x210/0x210 [ 77.860023][ T1210] tun_rx_batched+0x6d9/0x870 [ 77.864652][ T1210] ? eth_type_trans+0x2e4/0x620 [ 77.869324][ T1210] ? local_bh_enable+0x30/0x30 [ 77.874096][ T1210] tun_get_user+0x2cb7/0x3aa0 [ 77.878867][ T1210] ? __x64_sys_openat+0x1d0/0x290 [ 77.883985][ T1210] ? tun_do_read+0x2010/0x2010 [ 77.888606][ T1210] ? kstrtouint_from_user+0x20a/0x2a0 [ 77.894041][ T1210] ? kstrtol_from_user+0x310/0x310 [ 77.898991][ T1210] ? avc_policy_seqno+0x1b/0x70 [ 77.903792][ T1210] ? selinux_file_permission+0x2c4/0x570 [ 77.909243][ T1210] tun_chr_write_iter+0x1e1/0x2e0 [ 77.914213][ T1210] vfs_write+0xd5d/0x1110 [ 77.918378][ T1210] ? file_end_write+0x1c0/0x1c0 [ 77.923156][ T1210] ? __fdget_pos+0x209/0x3a0 [ 77.927944][ T1210] ? ksys_write+0x77/0x2c0 [ 77.932465][ T1210] ksys_write+0x199/0x2c0 [ 77.936577][ T1210] ? __ia32_sys_read+0x90/0x90 [ 77.941260][ T1210] ? debug_smp_processor_id+0x17/0x20 [ 77.946561][ T1210] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 77.952625][ T1210] __x64_sys_write+0x7b/0x90 [ 77.957170][ T1210] x64_sys_call+0x2f/0x9a0 [ 77.961957][ T1210] do_syscall_64+0x3b/0xb0 [ 77.962200][ T594] usb 6-1: Using ep0 maxpacket: 16 [ 77.966462][ T1210] ? clear_bhb_loop+0x35/0x90 [ 77.966492][ T1210] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 77.966514][ T1210] RIP: 0033:0x7f5c2317ac1f [ 77.986017][ T1210] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 78.006028][ T1210] RSP: 002b:00007f5c217e6000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 78.014305][ T1210] RAX: ffffffffffffffda RBX: 00007f5c23394fa0 RCX: 00007f5c2317ac1f [ 78.022081][ T1210] RDX: 000000000000003e RSI: 0000200000000300 RDI: 00000000000000c8 [ 78.030194][ T1210] RBP: 00007f5c217e6090 R08: 0000000000000000 R09: 0000000000000000 [ 78.038029][ T1210] R10: 000000000000003e R11: 0000000000000293 R12: 0000000000000001 [ 78.045814][ T1210] R13: 0000000000000000 R14: 00007f5c23394fa0 R15: 00007ffd917e48a8 [ 78.053637][ T1210] [ 78.478445][ T30] kauditd_printk_skb: 40 callbacks suppressed [ 78.478518][ T30] audit: type=1400 audit(1744552159.875:382): avc: denied { bind } for pid=1222 comm="syz.0.243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 78.511131][ T30] audit: type=1400 audit(1744552159.905:383): avc: denied { unmount } for pid=292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 78.601626][ T1225] loop0: detected capacity change from 0 to 512 [ 78.716879][ T1230] binfmt_misc: register: failed to install interpreter file ./file0 [ 78.750586][ T1225] EXT4-fs (loop0): mounted filesystem without journal. Opts: sb=0x0000000000000001,nodioread_nolock,,errors=continue. Quota mode: writeback. [ 78.765041][ T1225] ext4 filesystem being mounted at /50/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 78.777269][ T1105] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 78.804451][ T594] usb 6-1: config 1 interface 0 altsetting 6 bulk endpoint 0x1 has invalid maxpacket 8 [ 78.814164][ T594] usb 6-1: config 1 interface 0 altsetting 6 bulk endpoint 0x82 has invalid maxpacket 16 [ 78.832227][ T594] usb 6-1: config 1 interface 0 has no altsetting 0 [ 78.843171][ T1237] loop4: detected capacity change from 0 to 512 [ 78.922714][ T1237] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 78.943893][ T1237] EXT4-fs error (device loop4): ext4_orphan_get:1401: inode #15: comm syz.4.246: casefold flag without casefold feature [ 78.957610][ T1237] EXT4-fs (loop4): Remounting filesystem read-only [ 78.965951][ T1237] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.246: couldn't read orphan inode 15 (err -117) [ 78.979734][ T1237] EXT4-fs (loop4): Remounting filesystem read-only [ 79.056532][ T1237] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodiscard,nodelalloc,errors=remount-ro,grpquota,auto_da_alloc,dioread_nolock,acl,. Quota mode: writeback. [ 79.102395][ T1105] usb 3-1: Using ep0 maxpacket: 32 [ 79.180556][ T1237] EXT4-fs warning (device loop4): ext4_empty_dir:3147: inode #2: comm syz.4.246: directory missing '.' [ 79.293331][ T30] audit: type=1326 audit(1744552160.695:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1242 comm="syz.4.247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c2317c169 code=0x7ffc0000 [ 79.324787][ T30] audit: type=1326 audit(1744552160.725:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1242 comm="syz.4.247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c2317c169 code=0x7ffc0000 [ 79.351897][ T30] audit: type=1326 audit(1744552160.745:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1242 comm="syz.4.247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f5c2317c169 code=0x7ffc0000 [ 79.375417][ T30] audit: type=1326 audit(1744552160.745:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1242 comm="syz.4.247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c2317c169 code=0x7ffc0000 [ 79.399308][ T30] audit: type=1326 audit(1744552160.745:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1242 comm="syz.4.247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=225 compat=0 ip=0x7f5c2317c169 code=0x7ffc0000 [ 79.425976][ T30] audit: type=1326 audit(1744552160.745:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1242 comm="syz.4.247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c2317c169 code=0x7ffc0000 [ 79.452642][ T30] audit: type=1326 audit(1744552160.745:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1242 comm="syz.4.247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5c2317c169 code=0x7ffc0000 [ 79.477021][ T594] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 79.487578][ T30] audit: type=1326 audit(1744552160.745:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1242 comm="syz.4.247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c2317c169 code=0x7ffc0000 [ 79.512069][ T594] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.520163][ T594] usb 6-1: Product: syz [ 79.524726][ T594] usb 6-1: Manufacturer: syz [ 79.529288][ T594] usb 6-1: SerialNumber: syz [ 79.554797][ T1201] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 79.561964][ T1201] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 79.655139][ T1105] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 79.663641][ T1105] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 79.672641][ T1105] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 79.681595][ T1105] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 79.692322][ T1105] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 79.709073][ T1105] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 79.724042][ T1105] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 79.733446][ T1105] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.742475][ T1105] usb 3-1: config 0 descriptor?? [ 79.811220][ T1253] xt_CT: You must specify a L4 protocol and not use inversions on it [ 80.005292][ T1105] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 8 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 80.019804][ T1105] usb 3-1: USB disconnect, device number 8 [ 80.029296][ T1105] usblp0: removed [ 80.139253][ T594] usblp 6-1:1.0: usblp0: USB Bidirectional printer dev 2 if 0 alt 6 proto 2 vid 0x0525 pid 0xA4A8 [ 80.177861][ T594] usb 6-1: USB disconnect, device number 2 [ 80.208670][ T594] usblp0: removed [ 80.465384][ T406] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 80.542173][ T1105] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 80.582665][ T1260] loop3: detected capacity change from 0 to 256 [ 80.620918][ T1264] loop5: detected capacity change from 0 to 2048 [ 80.643462][ T1260] exFAT-fs (loop3): Invalid boot checksum (boot checksum : 0x111906d0, checksum : 0x1119abd0) [ 80.656062][ T1260] exFAT-fs (loop3): invalid boot region [ 80.662001][ T1260] exFAT-fs (loop3): failed to recognize exfat type [ 80.703343][ T1264] loop5: p1 < > p3 [ 80.708007][ T1264] loop5: p3 size 134217728 extends beyond EOD, truncated [ 81.271069][ T1274] syz.3.257[1274] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 81.271157][ T1274] syz.3.257[1274] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 81.303281][ T409] udevd[409]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 81.303325][ T408] udevd[408]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 81.335226][ T1264] loop5: detected capacity change from 0 to 1024 [ 81.358169][ T1264] kvm: emulating exchange as write [ 81.402326][ T406] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 81.439727][ T406] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 81.560711][ T406] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 81.573871][ T406] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 81.672453][ T1105] usb 3-1: device descriptor read/all, error -71 [ 81.709345][ T1277] FAULT_INJECTION: forcing a failure. [ 81.709345][ T1277] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 81.722684][ T1277] CPU: 1 PID: 1277 Comm: syz.0.258 Not tainted 5.15.178-syzkaller-00385-ga8a88afaecee #0 [ 81.732328][ T1277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 81.742429][ T1277] Call Trace: [ 81.745549][ T1277] [ 81.748432][ T1277] dump_stack_lvl+0x151/0x1c0 [ 81.752940][ T1277] ? io_uring_drop_tctx_refs+0x190/0x190 [ 81.758402][ T1277] ? __kasan_slab_free+0x11/0x20 [ 81.763186][ T1277] ? do_sys_openat2+0x1fc/0x820 [ 81.768162][ T1277] ? x64_sys_call+0x6bf/0x9a0 [ 81.772914][ T1277] dump_stack+0x15/0x20 [ 81.776933][ T1277] should_fail+0x3c6/0x510 [ 81.781561][ T1277] should_fail_usercopy+0x1a/0x20 [ 81.786703][ T1277] _copy_from_user+0x20/0xd0 [ 81.791995][ T1277] iovec_from_user+0xc7/0x330 [ 81.797160][ T1277] ? bpf_get_current_ancestor_cgroup_id+0x168/0x190 [ 81.804377][ T1277] __import_iovec+0x6d/0x420 [ 81.810355][ T1277] ? proc_fail_nth_write+0x20b/0x290 [ 81.816036][ T1277] import_iovec+0xe5/0x120 [ 81.820897][ T1277] vfs_writev+0x114/0x560 [ 81.825238][ T1277] ? do_writev+0x340/0x340 [ 81.829752][ T1277] ? wait_for_completion_killable_timeout+0x10/0x10 [ 81.836173][ T1277] ? __fdget_pos+0x2e7/0x3a0 [ 81.840681][ T1277] ? do_writev+0x7b/0x340 [ 81.845085][ T1277] do_writev+0x1aa/0x340 [ 81.849251][ T1277] ? do_readv+0x460/0x460 [ 81.853578][ T1277] ? debug_smp_processor_id+0x17/0x20 [ 81.858779][ T1277] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 81.864684][ T1277] __x64_sys_writev+0x7d/0x90 [ 81.869217][ T1277] x64_sys_call+0xb4/0x9a0 [ 81.873622][ T1277] do_syscall_64+0x3b/0xb0 [ 81.878221][ T1277] ? clear_bhb_loop+0x35/0x90 [ 81.882781][ T1277] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 81.889811][ T1277] RIP: 0033:0x7f07f4043169 [ 81.894439][ T1277] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 81.914051][ T1277] RSP: 002b:00007f07f268c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 81.922309][ T1277] RAX: ffffffffffffffda RBX: 00007f07f425c080 RCX: 00007f07f4043169 [ 81.930866][ T1277] RDX: 0000000000000001 RSI: 0000200000000300 RDI: 0000000000000007 [ 81.938764][ T1277] RBP: 00007f07f268c090 R08: 0000000000000000 R09: 0000000000000000 [ 81.947056][ T1277] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 81.955171][ T1277] R13: 0000000000000000 R14: 00007f07f425c080 R15: 00007fff70800e08 [ 81.963217][ T1277] [ 82.122331][ T406] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 82.134993][ T406] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 82.143937][ T406] usb 5-1: Manufacturer: syz [ 82.156753][ T406] usb 5-1: config 0 descriptor?? [ 82.599560][ T1105] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 82.832937][ T406] appleir 0003:05AC:8243.0005: unknown main item tag 0x0 [ 82.840630][ T406] appleir 0003:05AC:8243.0005: No inputs registered, leaving [ 82.848310][ T1304] overlayfs: missing 'lowerdir' [ 82.859658][ T406] appleir 0003:05AC:8243.0005: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 83.056980][ T1308] loop3: detected capacity change from 0 to 256 [ 83.063530][ T1105] usb 3-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 255 [ 83.078315][ T1105] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 83.088639][ T1105] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 83.102025][ T1105] usb 3-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 83.111396][ T1105] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.120968][ T1105] usb 3-1: config 0 descriptor?? [ 83.172707][ T1105] usb-storage 3-1:0.0: USB Mass Storage device detected [ 83.188003][ T1310] netlink: 24 bytes leftover after parsing attributes in process `syz.4.251'. [ 83.205923][ T1105] usb-storage 3-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 83.216142][ T1310] loop4: detected capacity change from 0 to 512 [ 83.230831][ T1310] EXT4-fs (loop4): Ignoring removed nobh option [ 83.237154][ T1310] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 83.246964][ T1310] EXT4-fs (loop4): Test dummy encryption mode enabled [ 83.257843][ T1310] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.251: invalid indirect mapped block 256 (level 2) [ 83.272267][ T1310] EXT4-fs (loop4): 2 truncates cleaned up [ 83.278034][ T1310] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobh,auto_da_alloc,data_err=ignore,jqfmt=vfsv1,test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 83.301309][ T1310] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm syz.4.251: bg 0: block 5: invalid block bitmap [ 83.314413][ T1310] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 64 with error 28 [ 83.327154][ T1310] EXT4-fs (loop4): This should not happen!! Data will be lost [ 83.327154][ T1310] [ 83.337056][ T1310] EXT4-fs (loop4): Total free blocks count 0 [ 83.343153][ T1310] EXT4-fs (loop4): Free/Dirty block details [ 83.349155][ T1310] EXT4-fs (loop4): free_blocks=0 [ 83.354109][ T1310] EXT4-fs (loop4): dirty_blocks=64 [ 83.359686][ T1310] EXT4-fs (loop4): Block reservation details [ 83.366273][ T1310] EXT4-fs (loop4): i_reserved_data_blocks=64 [ 84.210766][ T1330] syz.3.271[1330] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 84.210854][ T1330] syz.3.271[1330] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 84.292170][ T1105] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 84.382200][ T39] usb 5-1: reset high-speed USB device number 7 using dummy_hcd [ 84.735817][ T1105] usb 1-1: Using ep0 maxpacket: 32 [ 85.530961][ T1344] FAULT_INJECTION: forcing a failure. [ 85.530961][ T1344] name failslab, interval 1, probability 0, space 0, times 0 [ 85.555498][ T30] kauditd_printk_skb: 27 callbacks suppressed [ 85.555515][ T30] audit: type=1400 audit(1744552166.955:419): avc: denied { mount } for pid=1340 comm="syz.5.275" name="/" dev="ramfs" ino=19182 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 85.633354][ T1344] CPU: 0 PID: 1344 Comm: syz.2.274 Not tainted 5.15.178-syzkaller-00385-ga8a88afaecee #0 [ 85.643711][ T1344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 85.653961][ T1344] Call Trace: [ 85.657264][ T1344] [ 85.660133][ T1344] dump_stack_lvl+0x151/0x1c0 [ 85.664904][ T1344] ? io_uring_drop_tctx_refs+0x190/0x190 [ 85.670564][ T1344] dump_stack+0x15/0x20 [ 85.674806][ T1344] should_fail+0x3c6/0x510 [ 85.679075][ T1344] __should_failslab+0xa4/0xe0 [ 85.683702][ T1344] ? kvm_mmu_topup_memory_cache+0xe5/0x2a0 [ 85.689394][ T1344] should_failslab+0x9/0x20 [ 85.693814][ T1344] slab_pre_alloc_hook+0x37/0xd0 [ 85.698599][ T1344] ? kvm_mmu_topup_memory_cache+0xe5/0x2a0 [ 85.704231][ T1344] kmem_cache_alloc+0x44/0x250 [ 85.709093][ T1344] kvm_mmu_topup_memory_cache+0xe5/0x2a0 [ 85.715161][ T1344] kvm_mmu_load+0xdf/0x2120 [ 85.719723][ T1344] ? vmx_flush_tlb_all+0x380/0x380 [ 85.724612][ T1344] ? __kasan_check_read+0x11/0x20 [ 85.729568][ T1344] ? kvm_apic_accept_events+0x143/0x5e0 [ 85.735294][ T1344] ? __kasan_check_read+0x11/0x20 [ 85.740322][ T1344] ? kvm_mmu_unload+0xe0/0xe0 [ 85.744833][ T1344] ? kvm_apic_has_interrupt+0x4be/0xa70 [ 85.750311][ T1344] vcpu_enter_guest+0x832b/0x8ed0 [ 85.755446][ T1344] ? avc_has_perm+0x16f/0x260 [ 85.760219][ T1344] ? local_bh_enable+0x30/0x30 [ 85.764831][ T1344] ? 0xffffffffa002e000 [ 85.768820][ T1344] ? is_bpf_text_address+0x172/0x190 [ 85.774022][ T1344] ? stack_trace_save+0x1c0/0x1c0 [ 85.778881][ T1344] ? __kernel_text_address+0x9b/0x110 [ 85.784086][ T1344] ? unwind_get_return_address+0x4d/0x90 [ 85.789553][ T1344] ? arch_stack_walk+0xf3/0x140 [ 85.794589][ T1344] ? stack_trace_save+0x113/0x1c0 [ 85.799458][ T1344] ? stack_trace_snprint+0xf0/0xf0 [ 85.804403][ T1344] ? __stack_depot_save+0x34/0x470 [ 85.809783][ T1344] ? kmem_cache_free+0x115/0x330 [ 85.814568][ T1344] ? vmx_vcpu_load_vmcs+0x4ad/0x7a0 [ 85.819850][ T1344] ? ____kasan_slab_free+0x126/0x160 [ 85.825470][ T1344] ? kmem_cache_free+0x115/0x330 [ 85.830357][ T1344] ? __kasan_check_read+0x11/0x20 [ 85.835209][ T1344] ? vmx_vcpu_pi_load+0xa5/0x360 [ 85.839986][ T1344] ? __kasan_check_write+0x14/0x20 [ 85.844943][ T1344] ? kvm_arch_vcpu_load+0x577/0x760 [ 85.850071][ T1344] ? local_bh_enable+0x1f/0x30 [ 85.854657][ T1344] ? kvm_load_guest_fpu+0x13d/0x280 [ 85.859687][ T1344] kvm_arch_vcpu_ioctl_run+0xc4d/0x2270 [ 85.865079][ T1344] ? selinux_file_permission+0x2c4/0x570 [ 85.870532][ T1344] ? ioctl_has_perm+0x1f8/0x560 [ 85.875326][ T1344] ? __kvm_request_immediate_exit+0x70/0x70 [ 85.881136][ T1344] kvm_vcpu_ioctl+0x7eb/0xcf0 [ 85.885671][ T1344] ? kvm_clear_stat_per_vcpu+0x200/0x200 [ 85.891200][ T1344] ? selinux_file_ioctl+0x3cc/0x540 [ 85.896242][ T1344] ? __mutex_lock_slowpath+0x10/0x10 [ 85.901571][ T1344] ? selinux_file_alloc_security+0x120/0x120 [ 85.907955][ T1344] ? __fget_files+0x31e/0x380 [ 85.912676][ T1344] ? security_file_ioctl+0x84/0xb0 [ 85.917642][ T1344] ? kvm_clear_stat_per_vcpu+0x200/0x200 [ 85.923165][ T1344] __se_sys_ioctl+0x114/0x190 [ 85.927775][ T1344] __x64_sys_ioctl+0x7b/0x90 [ 85.932203][ T1344] x64_sys_call+0x98/0x9a0 [ 85.936455][ T1344] do_syscall_64+0x3b/0xb0 [ 85.940712][ T1344] ? clear_bhb_loop+0x35/0x90 [ 85.945307][ T1344] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 85.951034][ T1344] RIP: 0033:0x7f5167c68169 [ 85.955480][ T1344] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 85.975779][ T1344] RSP: 002b:00007f51662b0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 85.984274][ T1344] RAX: ffffffffffffffda RBX: 00007f5167e81080 RCX: 00007f5167c68169 [ 85.992364][ T1344] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 86.000259][ T1344] RBP: 00007f51662b0090 R08: 0000000000000000 R09: 0000000000000000 [ 86.008060][ T1344] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 86.015921][ T1344] R13: 0000000000000000 R14: 00007f5167e81080 R15: 00007fffb5ba8798 [ 86.024055][ T1344] [ 86.027343][ T1331] usb 3-1: USB disconnect, device number 10 [ 86.056167][ T30] audit: type=1400 audit(1744552166.995:420): avc: denied { unmount } for pid=1126 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 86.290920][ T1355] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.298207][ T1105] usb 1-1: New USB device found, idVendor=148f, idProduct=2070, bcdDevice=a6.af [ 86.302028][ T1355] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.308711][ T1105] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.323932][ T1105] usb 1-1: Product: syz [ 86.327916][ T1105] usb 1-1: Manufacturer: syz [ 86.329790][ T1355] device bridge_slave_0 entered promiscuous mode [ 86.332603][ T1105] usb 1-1: SerialNumber: syz [ 86.337957][ T1105] usb 1-1: config 0 descriptor?? [ 86.348020][ T1355] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.356216][ T1355] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.364210][ T1355] device bridge_slave_1 entered promiscuous mode [ 86.382636][ T1105] usb-storage 1-1:0.0: USB Mass Storage device detected [ 86.470369][ T406] usb 5-1: USB disconnect, device number 7 [ 86.819574][ T1376] loop2: detected capacity change from 0 to 512 [ 87.656983][ T1376] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 87.698769][ T1376] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2816: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 87.711991][ T1376] EXT4-fs (loop2): 1 truncate cleaned up [ 87.718113][ T1376] EXT4-fs (loop2): mounted filesystem without journal. Opts: nogrpid,min_batch_time=0x0000000000000000,debug_want_extra_isize=0x0000000000000068,nobarrier,data_err=abort,quota,,errors=continue. Quota mode: writeback. [ 87.849902][ T1101] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 87.857889][ T1101] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 87.975887][ T290] EXT4-fs error (device loop2): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /47/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 88.002930][ T1101] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 88.021114][ T1101] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 88.033953][ T30] audit: type=1400 audit(1744552169.435:421): avc: denied { rmdir } for pid=290 comm="syz-executor" name="lost+found" dev="loop2" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 88.057899][ T290] EXT4-fs error (device loop2): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 88.081333][ T1101] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.088236][ T1101] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.100060][ T290] EXT4-fs error (device loop2): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /47/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 88.123311][ T290] EXT4-fs error (device loop2): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 88.144459][ T1101] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 88.154334][ T1101] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 88.163307][ T1101] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.170249][ T1101] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.177722][ T290] EXT4-fs error (device loop2): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /47/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 88.199134][ T1101] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 88.207686][ T290] EXT4-fs error (device loop2): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 88.228738][ T1101] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 88.236912][ T1101] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 88.245432][ T1101] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 88.253966][ T290] EXT4-fs error (device loop2): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /47/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 88.279275][ T290] EXT4-fs error (device loop2): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 88.299787][ T290] EXT4-fs error (device loop2): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /47/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 88.323115][ T290] EXT4-fs error (device loop2): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 88.342359][ T1355] device veth0_vlan entered promiscuous mode [ 88.366742][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 88.378210][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 88.390900][ T594] usb 1-1: USB disconnect, device number 6 [ 88.422071][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 88.430236][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 88.478888][ T1101] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 88.497596][ T1355] device veth1_macvtap entered promiscuous mode [ 88.498246][ T1395] FAULT_INJECTION: forcing a failure. [ 88.498246][ T1395] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 88.517901][ T1395] CPU: 1 PID: 1395 Comm: syz.0.290 Not tainted 5.15.178-syzkaller-00385-ga8a88afaecee #0 [ 88.517990][ T30] audit: type=1400 audit(1744552169.915:422): avc: denied { rmdir } for pid=290 comm="syz-executor" name=".index" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 88.527892][ T1395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 88.527920][ T1395] Call Trace: [ 88.527928][ T1395] [ 88.527937][ T1395] dump_stack_lvl+0x151/0x1c0 [ 88.527969][ T1395] ? io_uring_drop_tctx_refs+0x190/0x190 [ 88.527989][ T1395] ? kstrtol_from_user+0x310/0x310 [ 88.528013][ T1395] dump_stack+0x15/0x20 [ 88.528029][ T1395] should_fail+0x3c6/0x510 [ 88.528052][ T1395] should_fail_usercopy+0x1a/0x20 [ 88.528072][ T1395] _copy_to_user+0x20/0x90 [ 88.601926][ T1396] syz.3.289[1396] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 88.602370][ T1395] simple_read_from_buffer+0xc7/0x150 [ 88.602402][ T1395] sel_read_policy+0x14d/0x1a0 [ 88.613585][ T1396] syz.3.289[1396] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 88.618613][ T1395] do_iter_read+0x519/0x7b0 [ 88.638921][ T1395] do_readv+0x268/0x460 [ 88.642903][ T1395] ? do_iter_readv_writev+0x790/0x790 [ 88.648431][ T1395] ? ksys_write+0x260/0x2c0 [ 88.652878][ T1395] ? debug_smp_processor_id+0x17/0x20 [ 88.658266][ T1395] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 88.664342][ T1395] __x64_sys_readv+0x7d/0x90 [ 88.668899][ T1395] x64_sys_call+0xad/0x9a0 [ 88.674158][ T1395] do_syscall_64+0x3b/0xb0 [ 88.678803][ T1395] ? clear_bhb_loop+0x35/0x90 [ 88.683583][ T1395] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 88.689685][ T1395] RIP: 0033:0x7f07f4043169 [ 88.694013][ T1395] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 88.714026][ T1395] RSP: 002b:00007f07f26ad038 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 88.722255][ T1395] RAX: ffffffffffffffda RBX: 00007f07f425bfa0 RCX: 00007f07f4043169 [ 88.730419][ T1395] RDX: 0000000000000002 RSI: 00002000000015c0 RDI: 0000000000000003 [ 88.738410][ T1395] RBP: 00007f07f26ad090 R08: 0000000000000000 R09: 0000000000000000 [ 88.746467][ T1395] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 88.754391][ T1395] R13: 0000000000000000 R14: 00007f07f425bfa0 R15: 00007fff70800e08 [ 88.762245][ T1395] [ 88.822348][ T1101] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 88.830807][ T1101] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 88.841467][ T1402] SELinux: security_context_str_to_sid(u) failed for (dev ?, type ?) errno=-22 [ 88.850649][ T1402] SELinux: security_context_str_to_sid(u) failed for (dev incremental-fs, type incremental-fs) errno=-22 [ 88.877346][ T1101] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 88.888400][ T1101] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 88.984286][ T8] device bridge_slave_1 left promiscuous mode [ 88.984897][ T290] syz-executor (290) used greatest stack depth: 20192 bytes left [ 89.002545][ T30] audit: type=1400 audit(1744552170.405:423): avc: denied { unlink } for pid=83 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 89.022953][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.050815][ T8] device bridge_slave_0 left promiscuous mode [ 89.057240][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.071630][ T8] device veth1_macvtap left promiscuous mode [ 89.079490][ T1412] loop0: detected capacity change from 0 to 128 [ 89.201428][ T1415] syz.6.278[1415] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 89.201516][ T1415] syz.6.278[1415] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 89.306396][ T1420] FAULT_INJECTION: forcing a failure. [ 89.306396][ T1420] name failslab, interval 1, probability 0, space 0, times 0 [ 89.330567][ T1420] CPU: 1 PID: 1420 Comm: syz.0.298 Not tainted 5.15.178-syzkaller-00385-ga8a88afaecee #0 [ 89.340155][ T1420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 89.350279][ T1420] Call Trace: [ 89.353499][ T1420] [ 89.356385][ T1420] dump_stack_lvl+0x151/0x1c0 [ 89.360908][ T1420] ? io_uring_drop_tctx_refs+0x190/0x190 [ 89.366547][ T1420] ? __kasan_check_read+0x11/0x20 [ 89.371577][ T1420] ? preempt_schedule_irq+0xe7/0x140 [ 89.377840][ T1420] dump_stack+0x15/0x20 [ 89.381817][ T1420] should_fail+0x3c6/0x510 [ 89.386071][ T1420] __should_failslab+0xa4/0xe0 [ 89.390793][ T1420] should_failslab+0x9/0x20 [ 89.395180][ T1420] slab_pre_alloc_hook+0x37/0xd0 [ 89.399989][ T1420] kmem_cache_alloc_trace+0x48/0x270 [ 89.405113][ T1420] ? vfat_add_entry+0x1d8/0x34d0 [ 89.410066][ T1420] vfat_add_entry+0x1d8/0x34d0 [ 89.414658][ T1420] ? preempt_schedule_thunk+0x16/0x18 [ 89.419884][ T1420] ? xas_set_mark+0x1fd/0x3c0 [ 89.424384][ T1420] ? __kasan_check_write+0x14/0x20 [ 89.429325][ T1420] ? _raw_spin_lock+0xa4/0x1b0 [ 89.434160][ T1420] ? _raw_spin_trylock_bh+0x190/0x190 [ 89.439357][ T1420] ? _raw_spin_unlock+0x4d/0x70 [ 89.444299][ T1420] ? vfat_rename+0xf10/0xf10 [ 89.448908][ T1420] ? __kasan_check_write+0x14/0x20 [ 89.454246][ T1420] ? __brelse+0x5b/0x90 [ 89.458412][ T1420] ? fat_zeroed_cluster+0x80f/0x870 [ 89.463529][ T1420] ? fat_alloc_new_dir+0x89f/0xe00 [ 89.468903][ T1420] ? __fat_remove_entries+0x4b0/0x4b0 [ 89.474106][ T1420] ? file_update_time+0x31f/0x460 [ 89.478958][ T1420] vfat_mkdir+0x1a8/0x420 [ 89.483265][ T1420] ? vfat_unlink+0x3a0/0x3a0 [ 89.487673][ T1420] ? selinux_inode_mkdir+0x22/0x30 [ 89.492925][ T1420] ? security_inode_mkdir+0xbc/0x100 [ 89.498229][ T1420] vfs_mkdir+0x3f6/0x610 [ 89.502252][ T1420] do_mkdirat+0x1eb/0x450 [ 89.506526][ T1420] ? vfs_mkdir+0x610/0x610 [ 89.511025][ T1420] ? getname_flags+0x1fd/0x520 [ 89.515831][ T1420] __x64_sys_mkdir+0x6e/0x80 [ 89.520356][ T1420] x64_sys_call+0x26d/0x9a0 [ 89.524787][ T1420] do_syscall_64+0x3b/0xb0 [ 89.529038][ T1420] ? clear_bhb_loop+0x35/0x90 [ 89.533573][ T1420] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 89.539376][ T1420] RIP: 0033:0x7f07f4043169 [ 89.543633][ T1420] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 89.563560][ T1420] RSP: 002b:00007f07f266b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 89.571846][ T1420] RAX: ffffffffffffffda RBX: 00007f07f425c160 RCX: 00007f07f4043169 [ 89.579739][ T1420] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000003c0 [ 89.587555][ T1420] RBP: 00007f07f266b090 R08: 0000000000000000 R09: 0000000000000000 [ 89.595442][ T1420] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 89.603669][ T1420] R13: 0000000000000000 R14: 00007f07f425c160 R15: 00007fff70800e08 [ 89.611641][ T1420] [ 89.634826][ T30] audit: type=1400 audit(1744552171.035:424): avc: denied { setopt } for pid=1416 comm="syz.3.299" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 89.667557][ T1426] loop5: detected capacity change from 0 to 512 [ 89.697199][ T30] audit: type=1400 audit(1744552171.095:425): avc: denied { relabelfrom } for pid=1419 comm="syz.6.300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 89.718317][ T30] audit: type=1400 audit(1744552171.095:426): avc: denied { relabelto } for pid=1419 comm="syz.6.300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 89.746423][ T30] audit: type=1400 audit(1744552171.145:427): avc: denied { write } for pid=1416 comm="syz.3.299" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 89.763807][ T1413] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.773518][ T1413] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.782757][ T1413] device bridge_slave_0 entered promiscuous mode [ 89.790117][ T1413] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.797610][ T1413] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.806219][ T1413] device bridge_slave_1 entered promiscuous mode [ 89.814909][ T1426] EXT4-fs (loop5): corrupt root inode, run e2fsck [ 89.821433][ T1426] EXT4-fs (loop5): mount failed [ 90.044949][ T1438] syz.3.305 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 90.458579][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 90.472006][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 90.495200][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 90.504006][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 90.528060][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.535045][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.542941][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 90.551527][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 90.562386][ T1453] syz.0.304[1453] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 90.562466][ T1453] syz.0.304[1453] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 90.577538][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.595821][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.606671][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 90.708592][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 90.720404][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 90.801169][ T1464] netlink: 12 bytes leftover after parsing attributes in process `syz.3.311'. [ 91.082550][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 91.097600][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 91.129581][ T1413] device veth0_vlan entered promiscuous mode [ 91.142566][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 91.155637][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 91.192310][ T1413] device veth1_macvtap entered promiscuous mode [ 91.199272][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 91.216876][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 91.225059][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 91.242690][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 91.261051][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 91.288553][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 91.302872][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 91.336944][ T30] audit: type=1400 audit(1744552172.735:428): avc: denied { unmount } for pid=1413 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 91.337019][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 91.392867][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 91.549555][ T1463] loop5: detected capacity change from 0 to 40427 [ 91.956593][ T1463] F2FS-fs (loop5): fault_injection options not supported [ 91.981735][ T1476] loop3: detected capacity change from 0 to 1024 [ 91.996521][ T1463] F2FS-fs (loop5): invalid crc value [ 92.044850][ T1463] F2FS-fs (loop5): Found nat_bits in checkpoint [ 92.063739][ T1476] EXT4-fs (loop3): Ignoring removed nobh option [ 92.074064][ T1476] EXT4-fs (loop3): Ignoring removed bh option [ 92.100187][ T1476] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 92.189215][ T1476] EXT4-fs (loop3): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,errors=remount-ro,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,. Quota mode: writeback. [ 92.222307][ T30] audit: type=1400 audit(1744552173.625:429): avc: denied { mount } for pid=1475 comm="syz.3.314" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 92.248644][ T1463] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 92.333486][ T8] device bridge_slave_1 left promiscuous mode [ 92.339951][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.361138][ T8] device bridge_slave_0 left promiscuous mode [ 92.377725][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.388401][ T30] audit: type=1400 audit(1744552173.785:430): avc: denied { write } for pid=1484 comm="syz.7.315" name="map_files" dev="proc" ino=19864 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 92.415116][ T8] device veth1_macvtap left promiscuous mode [ 92.431322][ T8] device veth0_vlan left promiscuous mode [ 92.458129][ T30] audit: type=1400 audit(1744552173.785:431): avc: denied { write } for pid=1462 comm="syz.5.312" name="file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 92.493970][ T1491] binfmt_misc: register: failed to install interpreter file ./file0 [ 92.518051][ T30] audit: type=1400 audit(1744552173.785:432): avc: denied { add_name } for pid=1462 comm="syz.5.312" name="file2" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 92.563506][ T30] audit: type=1400 audit(1744552173.825:433): avc: denied { add_name } for pid=1484 comm="syz.7.315" name="freezer.parent_freezing" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 92.603688][ T1452] loop6: detected capacity change from 0 to 131072 [ 92.610355][ T30] audit: type=1400 audit(1744552173.825:434): avc: denied { create } for pid=1484 comm="syz.7.315" name="freezer.parent_freezing" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=file permissive=1 [ 92.632321][ T30] audit: type=1400 audit(1744552173.825:435): avc: denied { associate } for pid=1484 comm="syz.7.315" name="freezer.parent_freezing" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 92.674263][ T1126] attempt to access beyond end of device [ 92.674263][ T1126] loop5: rw=2049, want=45112, limit=40427 [ 92.718287][ T1452] F2FS-fs (loop6): Invalid segment/section count (31, 24 x 150994945) [ 92.732765][ T1331] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 92.737040][ T1452] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 92.753226][ T1452] F2FS-fs (loop6): invalid crc value [ 92.761707][ T1452] F2FS-fs (loop6): Found nat_bits in checkpoint [ 92.804871][ T1452] F2FS-fs (loop6): Cannot turn on quotas: -2 on 2 [ 92.811954][ T1452] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 92.818880][ T1452] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4 [ 92.833779][ T30] audit: type=1400 audit(1744552174.235:436): avc: denied { map } for pid=1451 comm="syz.6.309" path="/5/bus/bus" dev="loop6" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 92.875148][ T30] audit: type=1400 audit(1744552174.255:437): avc: denied { execute } for pid=1451 comm="syz.6.309" path="/5/bus/bus" dev="loop6" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 93.000574][ T1331] usb 4-1: Using ep0 maxpacket: 32 [ 93.232395][ T1105] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 93.312713][ T1331] usb 4-1: config 0 interface 0 has no altsetting 0 [ 93.330635][ T1331] usb 4-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 93.380442][ T1331] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.409647][ T1506] loop6: detected capacity change from 0 to 256 [ 93.449117][ T1331] usb 4-1: config 0 descriptor?? [ 93.502148][ T1105] usb 6-1: Using ep0 maxpacket: 16 [ 93.555046][ T1506] exFAT-fs (loop6): failed to load upcase table (idx : 0x00011e5d, chksum : 0x63a11b78, utbl_chksum : 0xe619d30d) [ 93.762261][ T1105] usb 6-1: config 1 interface 0 altsetting 6 bulk endpoint 0x1 has invalid maxpacket 8 [ 93.788290][ T1105] usb 6-1: config 1 interface 0 altsetting 6 bulk endpoint 0x82 has invalid maxpacket 16 [ 93.956014][ T1331] sony 0003:054C:0268.0006: hiddev96,hidraw0: USB HID v81.01 Device [HID 054c:0268] on usb-dummy_hcd.3-1/input0 [ 93.968704][ T1105] usb 6-1: config 1 interface 0 has no altsetting 0 [ 93.978598][ T1331] sony 0003:054C:0268.0006: failed to claim input [ 94.132253][ T1105] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 94.143434][ T1509] loop6: detected capacity change from 0 to 256 [ 94.149820][ T1105] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.163930][ T1105] usb 6-1: Product: syz [ 94.165882][ T594] usb 4-1: USB disconnect, device number 6 [ 94.168235][ T1105] usb 6-1: Manufacturer: syz [ 94.181801][ T1105] usb 6-1: SerialNumber: syz [ 94.189126][ T1509] exFAT-fs (loop6): failed to load upcase table (idx : 0x00011e5d, chksum : 0x63a11b78, utbl_chksum : 0xe619d30d) [ 94.322552][ T1499] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 94.333309][ T1499] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 94.934919][ T1520] loop3: detected capacity change from 0 to 1024 [ 95.044395][ T1520] EXT4-fs (loop3): Unrecognized mount option "measure" or missing value [ 95.508050][ T1535] loop5: detected capacity change from 0 to 512 [ 95.521111][ T1535] EXT4-fs (loop5): dax option not supported [ 95.662619][ T1542] syz.6.331[1542] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 95.662704][ T1542] syz.6.331[1542] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 95.695440][ T1541] loop3: detected capacity change from 0 to 512 [ 95.748223][ T1541] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 95.776178][ T1541] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2219: inode #15: comm syz.3.334: corrupted in-inode xattr [ 95.779872][ T1105] usblp 6-1:1.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 6 proto 2 vid 0x0525 pid 0xA4A8 [ 95.793928][ T1541] EXT4-fs (loop3): Remounting filesystem read-only [ 95.872501][ T1548] 9pnet_virtio: no channels available for device ./file0/file0 [ 96.222698][ T1541] EXT4-fs (loop3): 1 truncate cleaned up [ 96.228441][ T1541] EXT4-fs (loop3): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000068,quota,errors=remount-ro,barrier,. Quota mode: writeback. [ 96.506087][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 96.506104][ T30] audit: type=1400 audit(1744552177.905:460): avc: denied { append } for pid=1536 comm="syz.3.334" name="001" dev="devtmpfs" ino=156 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 96.536010][ T406] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 96.589505][ T1552] syz.5.336[1552] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 96.589603][ T1552] syz.5.336[1552] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 96.629491][ T1105] usb 6-1: USB disconnect, device number 3 [ 96.661265][ T30] audit: type=1400 audit(1744552177.985:461): avc: denied { connect } for pid=1551 comm="syz.5.336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 96.708516][ T1105] usblp0: removed [ 96.752380][ T30] audit: type=1400 audit(1744552178.055:462): avc: denied { create } for pid=1551 comm="syz.5.336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 96.802325][ T406] usb 1-1: Using ep0 maxpacket: 8 [ 96.942304][ T406] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 96.972382][ T406] usb 1-1: config 0 has no interface number 0 [ 96.998998][ T406] usb 1-1: config 0 interface 1 has no altsetting 0 [ 97.193574][ T406] usb 1-1: New USB device found, idVendor=041e, idProduct=0005, bcdDevice=da.9a [ 97.193611][ T406] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.193633][ T406] usb 1-1: Product: syz [ 97.193649][ T406] usb 1-1: Manufacturer: syz [ 97.193664][ T406] usb 1-1: SerialNumber: syz [ 97.194585][ T406] usb 1-1: config 0 descriptor?? [ 97.706125][ T1562] loop6: detected capacity change from 0 to 512 [ 97.782586][ T1562] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 97.795037][ T1562] EXT4-fs error (device loop6): ext4_xattr_ibody_find:2219: inode #15: comm syz.6.339: corrupted in-inode xattr [ 97.795830][ T1562] EXT4-fs (loop6): Remounting filesystem read-only [ 97.817836][ T1562] EXT4-fs (loop6): 1 truncate cleaned up [ 97.824311][ T1562] EXT4-fs (loop6): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000068,quota,errors=remount-ro,barrier,. Quota mode: writeback. [ 97.899579][ T1565] FAULT_INJECTION: forcing a failure. [ 97.899579][ T1565] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 97.899610][ T1565] CPU: 1 PID: 1565 Comm: syz.6.339 Not tainted 5.15.178-syzkaller-00385-ga8a88afaecee #0 [ 97.899634][ T1565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 97.899647][ T1565] Call Trace: [ 97.899653][ T1565] [ 97.899661][ T1565] dump_stack_lvl+0x151/0x1c0 [ 97.899687][ T1565] ? io_uring_drop_tctx_refs+0x190/0x190 [ 97.899710][ T1565] ? vsnprintf+0x1dd/0x1c70 [ 97.899732][ T1565] dump_stack+0x15/0x20 [ 97.899750][ T1565] should_fail+0x3c6/0x510 [ 97.899773][ T1565] should_fail_usercopy+0x1a/0x20 [ 97.899794][ T1565] _copy_from_user+0x20/0xd0 [ 97.899815][ T1565] kstrtouint_from_user+0xca/0x2a0 [ 97.899836][ T1565] ? kstrtol_from_user+0x310/0x310 [ 97.899857][ T1565] ? snprintf+0xd6/0x120 [ 97.899877][ T1565] ? check_stack_object+0x114/0x130 [ 97.899911][ T1565] ? __kasan_check_read+0x11/0x20 [ 97.899932][ T1565] ? _copy_to_user+0x78/0x90 [ 97.899952][ T1565] proc_fail_nth_write+0xa6/0x290 [ 97.899972][ T1565] ? selinux_file_permission+0x2c4/0x570 [ 97.899992][ T1565] ? proc_fail_nth_read+0x210/0x210 [ 97.900010][ T1565] ? fsnotify_perm+0x6a/0x5b0 [ 97.900030][ T1565] ? security_file_permission+0x86/0xb0 [ 97.900049][ T1565] ? proc_fail_nth_read+0x210/0x210 [ 97.900068][ T1565] vfs_write+0x406/0x1110 [ 97.900089][ T1565] ? file_end_write+0x1c0/0x1c0 [ 97.900108][ T1565] ? __kasan_check_write+0x14/0x20 [ 97.900130][ T1565] ? mutex_lock+0xb6/0x1e0 [ 97.900152][ T1565] ? wait_for_completion_killable_timeout+0x10/0x10 [ 98.064214][ T1565] ? __fdget_pos+0x2e7/0x3a0 [ 98.064246][ T1565] ? ksys_write+0x77/0x2c0 [ 98.064262][ T1565] ksys_write+0x199/0x2c0 [ 98.064287][ T1565] ? __ia32_sys_read+0x90/0x90 [ 98.064308][ T1565] ? debug_smp_processor_id+0x17/0x20 [ 98.064332][ T1565] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 98.064357][ T1565] __x64_sys_write+0x7b/0x90 [ 98.098294][ T1565] x64_sys_call+0x2f/0x9a0 [ 98.102546][ T1565] do_syscall_64+0x3b/0xb0 [ 98.106803][ T1565] ? clear_bhb_loop+0x35/0x90 [ 98.111657][ T1565] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 98.117638][ T1565] RIP: 0033:0x7f1e16d8bc1f [ 98.122053][ T1565] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 98.141746][ T1565] RSP: 002b:00007f1e153b5030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 98.150088][ T1565] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f1e16d8bc1f [ 98.159045][ T1565] RDX: 0000000000000001 RSI: 00007f1e153b50a0 RDI: 0000000000000009 [ 98.168542][ T1565] RBP: 00007f1e153b5090 R08: 0000000000000000 R09: 0000000000000000 [ 98.177553][ T1565] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 98.185626][ T1565] R13: 0000000000000001 R14: 00007f1e16fa6160 R15: 00007ffddb247578 [ 98.193777][ T1565] [ 98.312613][ T406] snd-usb-audio: probe of 1-1:0.1 failed with error -22 [ 98.468380][ T1585] loop3: detected capacity change from 0 to 512 [ 98.517473][ T1585] EXT4-fs (loop3): corrupt root inode, run e2fsck [ 98.524419][ T1585] EXT4-fs (loop3): mount failed [ 98.613740][ T406] usb 1-1: USB disconnect, device number 7 [ 99.542298][ T406] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 99.616026][ T30] audit: type=1326 audit(1744552181.015:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1601 comm="syz.3.351" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6b0e80d169 code=0x0 [ 99.672456][ T1604] syz.5.349[1604] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 99.672543][ T1604] syz.5.349[1604] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 99.673976][ T30] audit: type=1400 audit(1744552181.075:464): avc: denied { bind } for pid=1601 comm="syz.3.351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 99.762295][ T30] audit: type=1400 audit(1744552181.075:465): avc: denied { listen } for pid=1601 comm="syz.3.351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 99.785368][ T30] audit: type=1400 audit(1744552181.075:466): avc: denied { connect } for pid=1601 comm="syz.3.351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 99.842153][ T406] usb 1-1: Using ep0 maxpacket: 32 [ 99.973918][ T406] usb 1-1: config 0 interface 0 has no altsetting 0 [ 99.983633][ T406] usb 1-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 99.994720][ T406] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.043153][ T406] usb 1-1: config 0 descriptor?? [ 100.319484][ T30] audit: type=1400 audit(1744552181.715:467): avc: denied { bind } for pid=1609 comm="syz.7.353" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 100.491390][ T1622] netlink: 11 bytes leftover after parsing attributes in process `syz.3.357'. [ 100.502734][ T1622] netlink: 7 bytes leftover after parsing attributes in process `syz.3.357'. [ 100.698324][ T1630] xt_CT: You must specify a L4 protocol and not use inversions on it [ 100.967934][ T406] sony 0003:054C:0268.0007: hiddev96,hidraw0: USB HID v81.01 Device [HID 054c:0268] on usb-dummy_hcd.0-1/input0 [ 101.432219][ T406] sony 0003:054C:0268.0007: failed to claim input [ 101.442675][ T406] usb 1-1: USB disconnect, device number 8 [ 101.512269][ T30] audit: type=1326 audit(1744552182.895:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1637 comm="syz.0.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07f4043169 code=0x7ffc0000 [ 101.616017][ T30] audit: type=1326 audit(1744552182.895:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1637 comm="syz.0.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07f4043169 code=0x7ffc0000 [ 101.670113][ T1643] netlink: 8 bytes leftover after parsing attributes in process `syz.0.364'. [ 101.751052][ T30] audit: type=1326 audit(1744552182.895:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1637 comm="syz.0.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f07f4043169 code=0x7ffc0000 [ 101.813421][ T30] audit: type=1326 audit(1744552182.895:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1637 comm="syz.0.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07f4043169 code=0x7ffc0000 [ 101.878660][ T30] audit: type=1326 audit(1744552182.895:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1637 comm="syz.0.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f07f4043169 code=0x7ffc0000 [ 101.942165][ T30] audit: type=1326 audit(1744552182.895:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1637 comm="syz.0.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07f4043169 code=0x7ffc0000 [ 102.010174][ T30] audit: type=1326 audit(1744552182.895:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1637 comm="syz.0.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=127 compat=0 ip=0x7f07f4043169 code=0x7ffc0000 [ 102.051193][ T30] audit: type=1326 audit(1744552182.895:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1637 comm="syz.0.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07f4043169 code=0x7ffc0000 [ 102.155619][ T30] audit: type=1326 audit(1744552183.555:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1656 comm="syz.3.370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b0e80d169 code=0x7ffc0000 [ 102.197027][ T30] audit: type=1326 audit(1744552183.555:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1656 comm="syz.3.370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6b0e80d169 code=0x7ffc0000 [ 102.242153][ T752] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 102.256851][ T1659] fuse: Unknown parameter '0x00000000000000040x0000000000000003Év' [ 102.402150][ T594] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 102.502218][ T752] usb 7-1: Using ep0 maxpacket: 16 [ 102.612961][ T1663] loop3: detected capacity change from 0 to 512 [ 102.652162][ T594] usb 6-1: Using ep0 maxpacket: 32 [ 102.662650][ T1663] EXT4-fs error (device loop3): ext4_orphan_get:1427: comm syz.3.372: bad orphan inode 15 [ 102.681869][ T1663] ext4_test_bit(bit=14, block=5) = 0 [ 102.687996][ T1663] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,stripe=0x0000000000000001,journal_dev=0x0000000000000003,grpid,journal_ioprio=0x0000000000000002,journal_ioprio=0x0000000000000003,nolazytime,noload,,errors=continue. Quota mode: none. [ 102.719100][ T752] usb 7-1: config 1 interface 0 altsetting 6 bulk endpoint 0x1 has invalid maxpacket 8 [ 102.733638][ T1674] loop0: detected capacity change from 0 to 8192 [ 102.739522][ T752] usb 7-1: config 1 interface 0 altsetting 6 bulk endpoint 0x82 has invalid maxpacket 16 [ 102.755714][ T752] usb 7-1: config 1 interface 0 has no altsetting 0 [ 102.792476][ T594] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 102.810165][ T594] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 24 [ 102.826398][ T594] usb 6-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 102.836490][ T594] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.865244][ T594] usb 6-1: config 0 descriptor?? [ 102.922314][ T752] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 102.933548][ T752] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.942451][ T752] usb 7-1: Product: syz [ 102.946565][ T752] usb 7-1: Manufacturer: syz [ 102.951767][ T752] usb 7-1: SerialNumber: syz [ 102.972234][ T1636] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 102.979564][ T1636] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 102.997822][ T1677] attempt to access beyond end of device [ 102.997822][ T1677] loop0: rw=0, want=57848, limit=8192 [ 103.010151][ T1677] Buffer I/O error on dev loop0, logical block 57847, async page read [ 103.022208][ T1677] attempt to access beyond end of device [ 103.022208][ T1677] loop0: rw=0, want=57848, limit=8192 [ 103.036699][ T1677] Buffer I/O error on dev loop0, logical block 57847, async page read [ 103.082204][ T1677] attempt to access beyond end of device [ 103.082204][ T1677] loop0: rw=0, want=57848, limit=8192 [ 103.102457][ T1677] Buffer I/O error on dev loop0, logical block 57847, async page read [ 103.141005][ T1651] netem: change failed [ 103.383387][ T594] ntrig 0003:1B96:000A.0008: unknown main item tag 0x0 [ 103.394518][ T594] ntrig 0003:1B96:000A.0008: unknown main item tag 0x0 [ 103.411399][ T594] ntrig 0003:1B96:000A.0008: hidraw0: USB HID v0.00 Device [HID 1b96:000a] on usb-dummy_hcd.5-1/input0 [ 103.583979][ T752] usblp 7-1:1.0: usblp0: USB Bidirectional printer dev 2 if 0 alt 6 proto 2 vid 0x0525 pid 0xA4A8 [ 103.595072][ T594] ntrig 0003:1B96:000A.0008: Firmware version: 0.0.0.0.0 (0000 0000) [ 103.636257][ T752] usb 7-1: USB disconnect, device number 2 [ 103.661188][ T752] usblp0: removed [ 103.806746][ T594] usb 6-1: USB disconnect, device number 4 [ 103.961201][ T1685] syz.3.377[1685] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 103.961290][ T1685] syz.3.377[1685] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 104.168493][ T1693] loop0: detected capacity change from 0 to 40427 [ 104.273942][ T1693] F2FS-fs (loop0): invalid crc value [ 104.287362][ T1693] F2FS-fs (loop0): Found nat_bits in checkpoint [ 104.322525][ T1693] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 104.339592][ T1693] attempt to access beyond end of device [ 104.339592][ T1693] loop0: rw=2049, want=45104, limit=40427 [ 104.350996][ T1707] attempt to access beyond end of device [ 104.350996][ T1707] loop0: rw=2049, want=45112, limit=40427 [ 104.445871][ T1714] loop5: detected capacity change from 0 to 256 [ 104.474148][ T1718] loop0: detected capacity change from 0 to 512 [ 104.506083][ T1714] exFAT-fs (loop5): failed to load upcase table (idx : 0x00011e5d, chksum : 0x63a11b78, utbl_chksum : 0xe619d30d) [ 104.534704][ T1718] EXT4-fs (loop0): 1 orphan inode deleted [ 104.540819][ T1718] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 104.556330][ T1718] ext4 filesystem being mounted at /81/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 104.684566][ T1723] loop5: detected capacity change from 0 to 256 [ 104.716141][ T1723] exFAT-fs (loop5): failed to load upcase table (idx : 0x00011e5d, chksum : 0x63a11b78, utbl_chksum : 0xe619d30d) [ 105.100748][ T1739] syz.7.392[1739] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 105.100836][ T1739] syz.7.392[1739] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 105.484610][ T1745] loop7: detected capacity change from 0 to 512 [ 105.514602][ T1745] EXT4-fs (loop7): orphan cleanup on readonly fs [ 105.516074][ T1745] EXT4-fs (loop7): 1 orphan inode deleted [ 105.516488][ T1745] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 105.722935][ T1751] loop0: detected capacity change from 0 to 256 [ 105.832545][ T1751] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011e5d, chksum : 0x63a11b78, utbl_chksum : 0xe619d30d) [ 106.021315][ T594] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 106.139844][ T1758] loop5: detected capacity change from 0 to 256 [ 106.162494][ T1760] 9pnet: Insufficient options for proto=fd [ 106.177819][ T1758] exfat: Deprecated parameter 'utf8' [ 106.187827][ T1761] netlink: 12 bytes leftover after parsing attributes in process `syz.6.401'. [ 106.205277][ T1758] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xdd33351c, utbl_chksum : 0xe619d30d) [ 106.345966][ T1768] loop0: detected capacity change from 0 to 512 [ 106.362236][ T594] usb 4-1: Using ep0 maxpacket: 16 [ 106.546063][ T1772] syz.5.405[1772] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 106.546267][ T1772] syz.5.405[1772] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 106.786049][ T1768] EXT4-fs (loop0): orphan cleanup on readonly fs [ 106.824593][ T1768] EXT4-fs (loop0): 1 orphan inode deleted [ 106.831366][ T1768] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 107.181098][ T1780] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.195875][ T1780] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.226297][ T30] kauditd_printk_skb: 50 callbacks suppressed [ 107.226315][ T30] audit: type=1326 audit(1744552188.625:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1783 comm="syz.7.410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50a5e03169 code=0x7ffc0000 [ 107.286760][ T30] audit: type=1326 audit(1744552188.625:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1783 comm="syz.7.410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f50a5e03169 code=0x7ffc0000 [ 107.292736][ T1788] syz.7.411[1788] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 107.339552][ T30] audit: type=1326 audit(1744552188.625:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1783 comm="syz.7.410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50a5e03169 code=0x7ffc0000 [ 107.340395][ T1788] syz.7.411[1788] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 107.354409][ T30] audit: type=1326 audit(1744552188.625:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1783 comm="syz.7.410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f50a5e03169 code=0x7ffc0000 [ 107.394515][ T594] usb 4-1: config 1 interface 0 altsetting 6 bulk endpoint 0x1 has invalid maxpacket 8 [ 107.421819][ T1794] device pim6reg1 entered promiscuous mode [ 107.435982][ T594] usb 4-1: config 1 interface 0 altsetting 6 bulk endpoint 0x82 has invalid maxpacket 16 [ 107.447000][ T594] usb 4-1: config 1 interface 0 has no altsetting 0 [ 107.455338][ T30] audit: type=1326 audit(1744552188.625:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1783 comm="syz.7.410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50a5e03169 code=0x7ffc0000 [ 107.495247][ T30] audit: type=1326 audit(1744552188.625:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1783 comm="syz.7.410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f50a5e03169 code=0x7ffc0000 [ 107.537579][ T30] audit: type=1326 audit(1744552188.625:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1783 comm="syz.7.410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50a5e03169 code=0x7ffc0000 [ 108.337954][ T30] audit: type=1326 audit(1744552188.625:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1783 comm="syz.7.410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f50a5e03169 code=0x7ffc0000 [ 108.367921][ T30] audit: type=1326 audit(1744552188.625:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1783 comm="syz.7.410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50a5e03169 code=0x7ffc0000 [ 108.409636][ T30] audit: type=1326 audit(1744552188.625:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1783 comm="syz.7.410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f50a5e03169 code=0x7ffc0000 [ 108.443904][ T1804] loop0: detected capacity change from 0 to 256 [ 108.472259][ T594] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 108.486824][ T1804] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011e5d, chksum : 0x63a11b78, utbl_chksum : 0xe619d30d) [ 108.507976][ T594] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.537166][ T406] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 108.544941][ T594] usb 4-1: can't set config #1, error -71 [ 108.566396][ T594] usb 4-1: USB disconnect, device number 7 [ 108.667039][ T1818] syz.5.418[1818] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 108.667131][ T1818] syz.5.418[1818] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 109.902332][ T406] usb 7-1: Using ep0 maxpacket: 32 [ 110.577687][ T1829] capability: warning: `syz.5.422' uses deprecated v2 capabilities in a way that may be insecure [ 110.672223][ T406] usb 7-1: device descriptor read/all, error -71 [ 111.068783][ T1846] loop5: detected capacity change from 0 to 1024 [ 111.098957][ T1851] loop3: detected capacity change from 0 to 256 [ 111.109133][ T1851] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011e5d, chksum : 0x63a11b78, utbl_chksum : 0xe619d30d) [ 111.143422][ T1846] EXT4-fs (loop5): Unrecognized mount option "appraise" or missing value [ 111.267381][ T1846] tipc: Started in network mode [ 111.275085][ T1846] tipc: Node identity ac14140f, cluster identity 4711 [ 111.284788][ T1846] tipc: New replicast peer: 127.0.0.1 [ 111.308319][ T1846] tipc: Enabled bearer , priority 10 [ 111.328284][ T1857] syz.7.432[1857] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 111.328380][ T1857] syz.7.432[1857] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 111.496266][ T26] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 112.099780][ T406] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 112.242215][ T26] usb 1-1: Using ep0 maxpacket: 32 [ 112.362198][ T26] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 112.373743][ T406] usb 7-1: Using ep0 maxpacket: 16 [ 112.379745][ T26] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 112.402438][ T26] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 112.597039][ T594] tipc: Node number set to 2886997007 [ 112.652969][ T26] usb 1-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 112.653008][ T406] usb 7-1: config 1 interface 0 altsetting 6 bulk endpoint 0x1 has invalid maxpacket 8 [ 112.702378][ T406] usb 7-1: config 1 interface 0 altsetting 6 bulk endpoint 0x82 has invalid maxpacket 16 [ 112.741566][ T406] usb 7-1: config 1 interface 0 has no altsetting 0 [ 112.837320][ T26] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.855478][ T1870] loop5: detected capacity change from 0 to 8192 [ 112.863008][ T26] usb 1-1: Product: syz [ 112.867176][ T26] usb 1-1: Manufacturer: syz [ 112.871952][ T26] usb 1-1: SerialNumber: syz [ 112.901817][ T26] usb 1-1: config 0 descriptor?? [ 112.940097][ T1870] attempt to access beyond end of device [ 112.940097][ T1870] loop5: rw=0, want=57848, limit=8192 [ 112.963241][ T1870] FAT-fs (loop5): error, invalid access to FAT (entry 0x0000e1b1) [ 112.973146][ T1870] FAT-fs (loop5): Filesystem has been set read-only [ 112.980510][ T1870] FAT-fs (loop5): error, invalid access to FAT (entry 0x0000e1b1) [ 112.990905][ T1870] FAT-fs (loop5): error, invalid access to FAT (entry 0x0000e1b1) [ 113.002311][ T406] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 113.012052][ T406] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.028855][ T406] usb 7-1: Product: syz [ 113.035319][ T406] usb 7-1: Manufacturer: syz [ 113.040177][ T406] usb 7-1: SerialNumber: syz [ 113.062498][ T1843] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 113.070474][ T1843] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 113.122339][ T30] kauditd_printk_skb: 31 callbacks suppressed [ 113.122358][ T30] audit: type=1400 audit(1744552194.515:569): avc: denied { unmount } for pid=1875 comm="syz.5.438" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 113.214095][ T30] audit: type=1400 audit(1744552194.555:570): avc: denied { write } for pid=1839 comm="syz.0.421" name="vga_arbiter" dev="devtmpfs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 113.248934][ T30] audit: type=1400 audit(1744552194.555:571): avc: denied { open } for pid=1839 comm="syz.0.421" path="/dev/vga_arbiter" dev="devtmpfs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 113.296302][ T8] tipc: Disabling bearer [ 113.308434][ T8] tipc: Left network mode SYZFAIL: posix_spawnp failed (errno 2: No such file or directory) [ 113.639562][ T320] usb 1-1: USB disconnect, device number 9 [ 113.693915][ T406] usblp 7-1:1.0: usblp0: USB Bidirectional printer dev 4 if 0 alt 6 proto 2 vid 0x0525 pid 0xA4A8 [ 113.720246][ T406] usb 7-1: USB disconnect, device number 4 [ 113.734875][ T406] usblp0: removed [ 114.083467][ T8] device bridge_slave_1 left promiscuous mode [ 114.090479][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.098452][ T8] device bridge_slave_0 left promiscuous mode [ 114.105222][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.115087][ T8] device veth1_macvtap left promiscuous mode [ 114.122742][ T8] device veth0_vlan left promiscuous mode [ 114.656703][ T8] tipc: Disabling bearer [ 114.662474][ T8] tipc: Left network mode [ 115.523637][ T8] device bridge_slave_1 left promiscuous mode [ 115.530018][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.538406][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.547187][ T8] device bridge_slave_1 left promiscuous mode [ 115.553733][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.563914][ T8] device bridge_slave_0 left promiscuous mode [ 115.573501][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.582351][ T8] device bridge_slave_1 left promiscuous mode [ 115.588548][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.596044][ T8] device bridge_slave_0 left promiscuous mode [ 115.602666][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.610837][ T8] device bridge_slave_1 left promiscuous mode [ 115.617456][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.625815][ T8] device bridge_slave_0 left promiscuous mode [ 115.633795][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.643441][ T8] device veth1_macvtap left promiscuous mode [ 115.649872][ T8] device veth1_macvtap left promiscuous mode [ 115.656089][ T8] device veth0_vlan left promiscuous mode [ 115.662413][ T8] device veth1_macvtap left promiscuous mode [ 115.668636][ T8] device veth0_vlan left promiscuous mode [ 115.674885][ T8] device veth1_macvtap left promiscuous mode [ 115.681340][ T8] device veth0_vlan left promiscuous mode