last executing test programs: 4m18.781984209s ago: executing program 3 (id=980): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000140)='./file2\x00', 0x2001004c, &(0x7f0000000a00)=ANY=[@ANYRES16=0x0, @ANYRES8, @ANYRES8=0x0, @ANYBLOB="b71fe84fda50cf6fbefac5a5891d03a05027c0e6658ea94f09636160112a47b688552b72051bf0111daffbe0adef82589ee2fac726c31d20f98aa1f9761873cd604dab0d22b4b321f4c20044c5a8e018b51e52342814e4c33a7f4807781862b524b303c604203d95ef2f4feb698f5a4f3983ca0adeae0088c2e16969e9000a6a9d85bf9d4ee333cfeb763ad6506f66797f154f0923a63f106d908d1cf2a884e57ab63950b9883c40449a94847df80ca39e9394f8de077bfd7f0c81e773fe8ad33c339a0f92997d172adcde0c53c97cce8a0f42c862a0c88c9a25ccf6799b85dadc245f608d", @ANYRES8], 0xfe, 0x1518, &(0x7f0000000d80)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) mkdir(&(0x7f0000001100)='./file0\x00', 0x93) open(&(0x7f00000002c0)='./file0/file0\x00', 0x141840, 0x0) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, 0x0) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) open(&(0x7f0000000200)='./file0/file0\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00'}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a700000008"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000002780)) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x4}, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000a00)={r0, &(0x7f00000008c0)="3ae5a316f3c864"}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="02000000040000000600000005000000001000002b150132722f85f11ca9625a6003eb64f4dfcd0000000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffd98, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 4m17.251850227s ago: executing program 3 (id=985): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005000000000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000ad7e195a000000000000"], 0x48) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x4000, &(0x7f0000000740)={[{@test_dummy_encryption}, {@i_version}, {@noblock_validity}, {@commit={'commit', 0x3d, 0x5}}, {@inlinecrypt}, {@max_batch_time}, {@abort}, {@auto_da_alloc}, {@lazytime}, {@noauto_da_alloc}, {@block_validity}]}, 0xd, 0x5d8, &(0x7f0000000c00)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f00000004c0)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400f400b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x2d) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) fdatasync(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newlink={0x4c, 0x10, 0x403, 0x70b528, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0xa1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}, 0x1, 0xba01, 0x0, 0x4004}, 0x810) sendmmsg$inet(r2, &(0x7f0000000a40)=[{{&(0x7f00000000c0)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000340)="c803219bea55b4083513cbded92b01d4036f8f7786c6346c8027a3e339939e451c74794d284789ddd037a638532bf8d3d44db35350898144414ec2a5bf3e47bc2db9e8ef93b64e31", 0x48}], 0x1, &(0x7f00000003c0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x200}}, @ip_retopts={{0x2c, 0x0, 0x7, {[@rr={0x7, 0xb, 0xea, [@broadcast, @private=0xa010100]}, @timestamp={0x44, 0x8, 0xba, 0x0, 0xe, [0xec]}, @ra={0x94, 0x4, 0x1}, @generic={0xc3, 0x5, "4eed3d"}]}}}], 0x48}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000001c0)="db3fbf7e4b61b07b9e4d03acba2f085477a1e6cf6ef3bde389e773058bcb4bf2b9d75f0de190f9eb", 0x28}, {&(0x7f0000000440)}, {&(0x7f0000000800)="b35d7300053e183bc4962e19c939e10c25c7691419ee960f74e7f2203eefbfa041c018766413502e54be056ff99507515659524f4ef23242f0bd8c3132ffeca91b188672cdfa55dc4aa80193721ce152619ac8f7a87dc9e0d41e6e53a1713515c9dd7fee84f7b8695c1b629987b29f8a385bc1481d21c323407bff9c937fe437fff7b579235c13f1989ca96d4001637a715c502e5da28ffeb8f7c2b763290995c66619643182afd100f3b7abb4c513f0b2a04159", 0xb4}, {&(0x7f0000000600)="cfb358f82399da09ddd44366b6ba0798dc8a3ae7f54232f86a4b0c795ed1333215ec3b084fcd2bcc35a52d99553b3748571d749475285d78115373608bea334be6e6b4fba8488e9941bafce177da39424f7c3862af0b9351870f09e42fc0856817a2093729", 0x65}], 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="1400000000000000000000000200000009000000000000001400000000000000000000000700000000000000000000001400000000000000000600000700000000000000000000001100d2294fbd00000000000001000000ed000000000000002c00000000000000000000000700000094040100008317920000000000000000ac1414aaac14142ce0000002000000001c000000000000000000000008000000", @ANYRES32=r5, @ANYBLOB="64010100ac1414aa0000000014000000000000000000000001000000ff03000000000000110000000000000000000000010000008000000000000000"], 0xe0}}], 0x2, 0x20000000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ftruncate(r3, 0x81ff) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x9, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018010000756cff7c00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 4m14.367163481s ago: executing program 3 (id=990): bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@perf_event={0x4}}, 0x18) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000c40)={0x1, 0x0, [{0x0, 0xf3, &(0x7f00000008c0)=""/243}]}) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x12, @void, @value}, 0x94) 4m14.336566841s ago: executing program 3 (id=991): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="800000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c000280050001000000000008000740000000011c00108008000140000000000800024000000000080003"], 0x80}}, 0x0) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) fchdir(r2) mmap$KVM_VCPU(&(0x7f0000ffc000/0x4000)=nil, 0x0, 0x2, 0x110, 0xffffffffffffffff, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x101000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRES32=r3, @ANYRES32, @ANYBLOB], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r9}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x4517, &(0x7f0000000d40), 0x12, 0x4b3, &(0x7f0000001b00)="$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") mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [], 0x6b}}) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x1d, 0xf, &(0x7f0000000340)=@raw=[@map_fd={0x18, 0x6, 0x1, 0x0, r2}, @initr0={0x18, 0x0, 0x0, 0x0, 0xa86, 0x0, 0x0, 0x0, 0x6}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xffffffff}}, @call={0x85, 0x0, 0x0, 0x5e}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}], 0x0, 0x9, 0xca, &(0x7f00000003c0)=""/202, 0x41100, 0x14, '\x00', 0x0, @lsm=0x2b, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000580)={0x4, 0x3, 0x78c5, 0x4}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x7, &(0x7f00000005c0)=[r3, r7, r7, r7, r3], &(0x7f0000000600)=[{0x3, 0x2, 0xb, 0xc}, {0x4, 0x1, 0x7, 0xa}, {0x2, 0x3, 0x0, 0xb}, {0x0, 0x5, 0xa, 0x3}, {0x3, 0x2, 0xa, 0xb}, {0x0, 0x2, 0x5, 0x9}, {0x2, 0x1, 0xe, 0x4}], 0x10, 0x9, @void, @value}, 0x94) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x108) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x14, 0x3, 0x1, 0x401, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) 4m12.832439119s ago: executing program 3 (id=996): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) socket$inet6(0xa, 0x5, 0x8) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) socket$nl_xfrm(0x10, 0x3, 0x6) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x90}, 0x1, 0x7}, 0x0) chroot(&(0x7f0000000000)='./bus\x00') 4m10.395092527s ago: executing program 3 (id=1000): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x3, &(0x7f0000001300)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r3}, 0x18) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MON_PEER_GET(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16, @ANYBLOB="0d030000000000000000130000"], 0x60}}, 0x0) r5 = socket$inet6(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000004000000e27f000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000440)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r7}, &(0x7f0000000000), &(0x7f00000005c0)=r8}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r6}, 0x10) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r9}, 0x10) sendto$inet6(r5, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) setfsuid(0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800714, &(0x7f0000000000)={[{@nobarrier}]}, 0xff, 0x485, &(0x7f0000001040)="$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") 3m53.568153825s ago: executing program 32 (id=1000): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x3, &(0x7f0000001300)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r3}, 0x18) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MON_PEER_GET(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16, @ANYBLOB="0d030000000000000000130000"], 0x60}}, 0x0) r5 = socket$inet6(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000004000000e27f000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000440)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r7}, &(0x7f0000000000), &(0x7f00000005c0)=r8}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r6}, 0x10) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r9}, 0x10) sendto$inet6(r5, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) setfsuid(0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800714, &(0x7f0000000000)={[{@nobarrier}]}, 0xff, 0x485, &(0x7f0000001040)="$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") 1m8.549700827s ago: executing program 5 (id=1390): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x280008a, &(0x7f00000007c0)=ANY=[@ANYBLOB="6e6f6e756d7461696c3d302c73686f72746e616d653d77696e39352c73686f72746e616d653d6c6f7765722c696f636861727365743d64656661756c742c756e695f786c6174653d302c6e6f6e756d7461696c3d302c757466383d302c616c6c6f775f7574696d653d30303030303030303030303030303030303030303030322c726f6469722c73686f72866e616d653d6d697865642c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e39352c7569643d", @ANYRESHEX=0x0, @ANYBLOB=',uni_xlate=0,utf8=0,shortname=mixed,uni_xlate=0,shortname=winnt,\x00'], 0x96, 0x2a9, &(0x7f0000000500)="$eJzs3T9ra2UYAPDnpGkSdEgEJxE8oINTabu6pEgLxUxKBnXQYluQJggtFPyDsZOri6OriyC4+SVc/AaCq+BmwcKRk5xjkt40N+m9ae+f32/p2/c8z3ue9/QtpcN58vGr/ZPDNI4vvvojGo0kKu1ox2USrahE6ZuY0v4uAICn2WWWxd/ZyDJ5SUQ0VlcWALBCS//9/2XlJQEAK/be+x+8s9Pp7L6bpo3Y63973s3/s8+/jq7vHMen0Yuj2IxmXEVk/xuN97IsG1TTXCve6A/Ou3lm/6PfivV3/ooY5m9FM1rDqen8/c7uVjoykT/I63ihuH87z9+OZrw84/77nd3tGfnRrcWbr0/UvxHN+P2T+Cx6cTgsYpQflYivt9L07ez7f778MC8vz08G5936MG4sW7vjHw0AAAAAAAAAAAAAAAAAAAAAAM+wjaJ3Tj2G/XvyqaL/ztpV/s16pKXWdH+eUX5SLnStP9Agix/K/jybaZpmReA4vxqvVKN6P7sGAAAAAAAAAAAAAAAAAACAJ8vZ51+cHPR6R6ePZVB2Ayhf67/tOu2JmddifnB9fK9KMZyzcqyVMUnE3DLyTSxc879F24PbPbqXbqr5p58XXufHh++9GKwvEPOIg/J0nRwks59hPcqZRnlIfp2MqcWC96rddClb6vjVZl5qLr332ovDwWBOTCTzCnvrz9GTK2aS67uoDZ/qzPT1YjCRPh3TWPw8578pD0h06wAAAAAAAAAAAAAAAAAAgJUav/Q74+LF3NRKVl9ZWQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwp8af/7/EYFAkLxBci9Oze94iAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAz4H/AgAA///uD2MO") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket(0x26, 0x3, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/14, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8df00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = syz_open_dev$vcsa(&(0x7f0000000300), 0x1, 0x102) write$P9_RREMOVE(r4, &(0x7f00000002c0)={0x7, 0x7b, 0x2}, 0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00'}, 0x10) r5 = dup(0xffffffffffffffff) connect$bt_rfcomm(r5, &(0x7f00000008c0)={0x1f, @none, 0x6}, 0xa) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map=r7, 0xffffffffffffffff, 0x7, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r7, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r6}, 0x20) 1m7.561892919s ago: executing program 5 (id=1393): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x200, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a1121710950b2a17f4f7010203010902240001000000000904fb00026c5d650009050402100000fa000905820240"], 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000600)={0x14, &(0x7f00000049c0)={0x0, 0xf, 0xb0, {0xb0, 0x2, "701cd33493e7fd42ddeab747030fd802c433d7ed153cbd12822fd293d147b8fbc654b13037ae80d827bee8a539502f51af192a25d02451d6add02350eb1c5293517cb7fd486b1402e24bad9f3c7f32b13d91c1294c29eef7896eed0864d8272e770d7fbe1d630f93b89623c0b4bc9e28c1589c2254364a5afffa8de5832d7e0aaf600f0e7da42a8e7519b6656c270e883b3a8c00fdf33fd2accc6153b3e9b7dc0d83a7c9bbb4a1b9772d5e605646"}}, &(0x7f0000004a80)={0x0, 0x3, 0xef, @string={0xef, 0x3, "7212e92f1600e2bd77df489005bc6c9b206ed0c8269f4dd614aac0ba28d193acba7d6a6fb2dc9e52ca594e1af9fddc77f1d8368c56ce0ab46fca03ea6e86be800561e424f508b50dc844612801b56349074d4da6afd2ea7df1842888bacdd796ee32dd550ff0eeafbb346c1507d261263a44bcb81eabcef23dbb7670d7a4ac68f811d50471d5ad52b452cf969661e1a5e7cb2a9772c0a5bf8f8be1119363249fce8494a93221c171e816eb7a6ff49c330255453b3a9cc36d8f4b69ea4bbef1ac1a4a31cee93c36f5b0591fd70db446cfddeba87a66c2ded161d0ec84b3685841846a4add2475cf3679f7821b67"}}}, &(0x7f0000004dc0)={0x44, &(0x7f0000004b80)={0x0, 0x7, 0x7d, "77b084ae03e5b83ed30bdbc0a7f9c68ca3f71d6c28f2fe19b5ad97f28e643a3d528bf5df45d515cd51dfa7277a63afd0ba5a478144f3d5ebb12aa145c6b566e37c6d3a033953d0516021a69a3e418115d082c0447c576f646faddbbf6e70d8a71adec4cd4f690079232a575dbc3b8bca9b9d4f82997a39079e47bce0ac"}, &(0x7f0000000800)={0x0, 0xa, 0x1, 0xee}, &(0x7f0000004c40)={0x0, 0x8, 0x1}, &(0x7f0000004c80)={0x20, 0x81, 0x3, "ae4a53"}, &(0x7f0000004cc0)={0x20, 0x82, 0x2, "8c37"}, &(0x7f0000004d00)={0x20, 0x83, 0x3, "e5275d"}, &(0x7f0000004d40)={0x20, 0x84, 0x3, "5a2f17"}, 0x0}) 1m5.207915436s ago: executing program 4 (id=1401): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x34}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r3}, 0x18) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r4, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r5 = socket$inet6(0x10, 0x3, 0x0) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="190000000400000008000000"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r7}, &(0x7f0000000000), &(0x7f00000005c0)=r8}, 0x20) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r9}, 0x10) sendto$inet6(r5, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3b", 0x6c, 0x0, 0x0, 0x0) setfsuid(0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800714, &(0x7f0000000000)={[{@nobarrier}]}, 0xff, 0x485, &(0x7f0000001040)="$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") 1m3.829338052s ago: executing program 4 (id=1405): bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) setpgid(r0, r0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='br_fdb_add\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000001c000100000000000000000007000000", @ANYRES32=r4, @ANYBLOB="4000aa000a0002"], 0x28}}, 0x0) 1m2.901301133s ago: executing program 5 (id=1406): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) socket$inet6(0xa, 0x5, 0x8) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) socket$nl_xfrm(0x10, 0x3, 0x6) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r4}, 0x10) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x90}, 0x1, 0x7}, 0x0) chroot(&(0x7f0000000000)='./bus\x00') 1m2.259093061s ago: executing program 4 (id=1411): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="180000001a00000000000000a500"/26], 0x0, 0x8, 0x0, 0x0, 0x0, 0x1d, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000640)=@generic={0x0, 0x0, 0x4}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000440)={[{@redirect_dir_off}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@redirect_dir_on}, {@upperdir={'upperdir', 0x3d, './bus'}}], [{@subj_user={'subj_user', 0x3d, 'r\xce}\xf4/\xa0d\xe8\x8b\x17].0\x19\x01\x00'}}, {@pcr={'pcr', 0x3d, 0x38}}, {@fowner_gt}, {@fowner_eq}]}) chdir(&(0x7f00000001c0)='./file0\x00') open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) listen(r4, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x7f, 0x0, 0x7fffffff}]}) r6 = socket$unix(0x1, 0x5, 0x0) dup2(r6, r5) 1m1.47325083s ago: executing program 5 (id=1416): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) move_mount(r0, &(0x7f0000000080)='./file0/file0\x00', r0, &(0x7f0000000040)='./file0/../file0\x00', 0x0) (fail_nth: 1) 1m0.801233138s ago: executing program 5 (id=1418): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000340)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x280008a, &(0x7f00000007c0)=ANY=[@ANYBLOB="6e6f6e756d7461696c3d302c73686f72746e616d653d77696e39352c73686f72746e616d653d6c6f7765722c696f636861727365743d64656661756c742c756e695f786c6174653d302c6e6f6e756d7461696c3d302c757466383d302c616c6c6f775f7574696d653d30303030303030303030303030303030303030303030322c726f6469722c73686f72866e616d653d6d697865642c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e39352c7569643d", @ANYRESHEX=0x0, @ANYBLOB=',uni_xlate=0,utf8=0,shortname=mixed,uni_xlate=0,shortname=winnt,\x00'], 0x96, 0x2a9, &(0x7f0000000500)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket(0x26, 0x3, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$vcsa(&(0x7f0000000300), 0x1, 0x102) write$P9_RREMOVE(r4, &(0x7f00000002c0)={0x7, 0x7b, 0x2}, 0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00'}, 0x10) r5 = dup(0xffffffffffffffff) connect$bt_rfcomm(r5, &(0x7f00000008c0)={0x1f, @none, 0x6}, 0xa) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000000000000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x1, 0x98, &(0x7f0000000000)=""/152, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map=r8, r7, 0x7, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r8, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r6}, 0x20) 1m0.800933948s ago: executing program 5 (id=1419): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000340)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x280008a, &(0x7f00000007c0)=ANY=[@ANYBLOB="6e6f6e756d7461696c3d302c73686f72746e616d653d77696e39352c73686f72746e616d653d6c6f7765722c696f636861727365743d64656661756c742c756e695f786c6174653d302c6e6f6e756d7461696c3d302c757466383d302c616c6c6f775f7574696d653d30303030303030303030303030303030303030303030322c726f6469722c73686f72866e616d653d6d697865642c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e39352c7569643d", @ANYRESHEX=0x0, @ANYBLOB=',uni_xlate=0,utf8=0,shortname=mixed,uni_xlate=0,shortname=winnt,\x00'], 0x96, 0x2a9, &(0x7f0000000500)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket(0x26, 0x3, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$vcsa(&(0x7f0000000300), 0x1, 0x102) write$P9_RREMOVE(r4, &(0x7f00000002c0)={0x7, 0x7b, 0x2}, 0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00'}, 0x10) r5 = dup(0xffffffffffffffff) connect$bt_rfcomm(r5, &(0x7f00000008c0)={0x1f, @none, 0x6}, 0xa) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000000000000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x1, 0x98, &(0x7f0000000000)=""/152, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map=r8, r7, 0x7, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r8, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r6}, 0x20) 1m0.347189973s ago: executing program 33 (id=1419): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000340)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x280008a, &(0x7f00000007c0)=ANY=[@ANYBLOB="6e6f6e756d7461696c3d302c73686f72746e616d653d77696e39352c73686f72746e616d653d6c6f7765722c696f636861727365743d64656661756c742c756e695f786c6174653d302c6e6f6e756d7461696c3d302c757466383d302c616c6c6f775f7574696d653d30303030303030303030303030303030303030303030322c726f6469722c73686f72866e616d653d6d697865642c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e39352c7569643d", @ANYRESHEX=0x0, @ANYBLOB=',uni_xlate=0,utf8=0,shortname=mixed,uni_xlate=0,shortname=winnt,\x00'], 0x96, 0x2a9, &(0x7f0000000500)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket(0x26, 0x3, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$vcsa(&(0x7f0000000300), 0x1, 0x102) write$P9_RREMOVE(r4, &(0x7f00000002c0)={0x7, 0x7b, 0x2}, 0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00'}, 0x10) r5 = dup(0xffffffffffffffff) connect$bt_rfcomm(r5, &(0x7f00000008c0)={0x1f, @none, 0x6}, 0xa) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000000000000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x1, 0x98, &(0x7f0000000000)=""/152, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map=r8, r7, 0x7, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r8, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r6}, 0x20) 1m0.300024754s ago: executing program 4 (id=1421): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) move_mount(r0, &(0x7f0000000080)='./file0/file0\x00', r0, &(0x7f0000000040)='./file0/../file0\x00', 0x0) 1m0.242517024s ago: executing program 4 (id=1423): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="340000001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="000000faff00000008"], 0x34}}, 0x0) 1m0.144039085s ago: executing program 4 (id=1424): syz_usb_connect$hid(0x5, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="12011801000000405804155000000000000109022d00010000000909040004010300000009210400040122070009058103"], 0x0) r0 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000280)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x46d, 0x57, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x7, 0xe0, 0x8, [{{0x9, 0x4, 0x0, 0x6, 0x2, 0x3, 0x1, 0x3, 0x1, {0x9, 0x21, 0xa, 0x97, 0x1, {0x22, 0x53e}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x4, 0x7, 0x8}}, [{{0x9, 0x5, 0x2, 0x3, 0x40, 0x56, 0x53, 0x4}}]}}}]}}]}}, &(0x7f0000000400)={0xa, &(0x7f00000002c0)={0xa, 0x6, 0x310, 0x7, 0x1, 0x7, 0x8, 0x3}, 0xf, &(0x7f0000000300)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0xa, 0x8, 0x3, 0x5}]}}) syz_usb_control_io$hid(r0, &(0x7f0000000680)={0x24, &(0x7f0000000580)={0x0, 0x3, 0x8b, {0x8b, 0xb, "92365a183039223990b02f7fb855c2e7a31a6a64d6763309c9958022f7aac6d776ed14d31caf023588c88d8c708805b785610376454b89f884187b0b66bd848d914e93a9dad7f3a0619aa866e68ef50b5fa21f3eb539ad5f49ce3ee4da4dac06300e1cc9d6281cfe93e5f624c451f0587a1e7553d2093d78c2f5898667c24ef174f3bcc834a170610f"}}, &(0x7f0000000440)={0x0, 0x3, 0xa, @string={0xa, 0x3, "ea79bf1ea8434289"}}, 0x0, &(0x7f0000000640)={0x0, 0x21, 0x9, {0x9, 0x21, 0x80, 0xf, 0x1, {0x22, 0xd48}}}}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r4}, 0x18) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='task\x00') getdents(r5, &(0x7f0000001fc0)=""/184, 0xb8) 59.977593578s ago: executing program 34 (id=1424): syz_usb_connect$hid(0x5, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="12011801000000405804155000000000000109022d00010000000909040004010300000009210400040122070009058103"], 0x0) r0 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000280)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x46d, 0x57, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x7, 0xe0, 0x8, [{{0x9, 0x4, 0x0, 0x6, 0x2, 0x3, 0x1, 0x3, 0x1, {0x9, 0x21, 0xa, 0x97, 0x1, {0x22, 0x53e}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x4, 0x7, 0x8}}, [{{0x9, 0x5, 0x2, 0x3, 0x40, 0x56, 0x53, 0x4}}]}}}]}}]}}, &(0x7f0000000400)={0xa, &(0x7f00000002c0)={0xa, 0x6, 0x310, 0x7, 0x1, 0x7, 0x8, 0x3}, 0xf, &(0x7f0000000300)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0xa, 0x8, 0x3, 0x5}]}}) syz_usb_control_io$hid(r0, &(0x7f0000000680)={0x24, &(0x7f0000000580)={0x0, 0x3, 0x8b, {0x8b, 0xb, "92365a183039223990b02f7fb855c2e7a31a6a64d6763309c9958022f7aac6d776ed14d31caf023588c88d8c708805b785610376454b89f884187b0b66bd848d914e93a9dad7f3a0619aa866e68ef50b5fa21f3eb539ad5f49ce3ee4da4dac06300e1cc9d6281cfe93e5f624c451f0587a1e7553d2093d78c2f5898667c24ef174f3bcc834a170610f"}}, &(0x7f0000000440)={0x0, 0x3, 0xa, @string={0xa, 0x3, "ea79bf1ea8434289"}}, 0x0, &(0x7f0000000640)={0x0, 0x21, 0x9, {0x9, 0x21, 0x80, 0xf, 0x1, {0x22, 0xd48}}}}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r4}, 0x18) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='task\x00') getdents(r5, &(0x7f0000001fc0)=""/184, 0xb8) 26.059243765s ago: executing program 1 (id=1545): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000020000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400}) (fail_nth: 1) 25.582211481s ago: executing program 1 (id=1551): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0x7, &(0x7f0000000280)=ANY=[@ANYRES8=r0, @ANYRES16=r0, @ANYRES8=r0], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r1}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0600000004000000080000000800000000", @ANYBLOB], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x15, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000400)=@generic={&(0x7f00000003c0)='.\x00', r3}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) chroot(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r8 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001ac000/0x3000)=nil, 0x3000, 0x2, 0x50, r2, 0xd0db0000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)) 25.039755457s ago: executing program 1 (id=1556): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000340)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x280008a, &(0x7f00000007c0)=ANY=[@ANYBLOB="6e6f6e756d7461696c3d302c73686f72746e616d653d77696e39352c73686f72746e616d653d6c6f7765722c696f636861727365743d64656661756c742c756e695f786c6174653d302c6e6f6e756d7461696c3d302c757466383d302c616c6c6f775f7574696d653d30303030303030303030303030303030303030303030322c726f6469722c73686f72866e616d653d6d697865642c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e39352c7569643d", @ANYRESHEX=0x0, @ANYBLOB=',uni_xlate=0,utf8=0,shortname=mixed,uni_xlate=0,shortname=winnt,\x00'], 0x96, 0x2a9, &(0x7f0000000500)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket(0x26, 0x3, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/14, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8df00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = syz_open_dev$vcsa(&(0x7f0000000300), 0x1, 0x102) write$P9_RREMOVE(r3, &(0x7f00000002c0)={0x7, 0x7b, 0x2}, 0x7) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f00000008c0)={0x1f, @none, 0x6}, 0xa) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000000000000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x1, 0x98, &(0x7f0000000000)=""/152, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map=r6, r5, 0x7, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r6, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r4}, 0x20) 23.180597449s ago: executing program 1 (id=1561): r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000080)={0x0, 0x2, 0x100000001, 0x2}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x12, &(0x7f00000000c0)=0x348c, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4004080) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x20040010) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x1, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0xa4}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000005700)={{r8}, &(0x7f0000005680), &(0x7f00000056c0)}, 0x20) 21.029005224s ago: executing program 1 (id=1566): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x20081e, &(0x7f00000020c0), 0x1, 0x4fb, &(0x7f0000000500)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount(0x0, &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x31486c, &(0x7f0000000140)='usrjquota=') prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f00000000c0)={0x4, &(0x7f0000000000)=[{0x3, 0x0, 0x9, 0x1}, {0x9, 0x9, 0x2, 0x6fda}, {0x3, 0x9, 0x59, 0x7f}, {0xa, 0x80, 0x6, 0xd2}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001700)=ANY=[@ANYBLOB="160000000000000061b1000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0, 0xffffffffffffffff}, 0x0, &(0x7f0000000040)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000200)={r1, 0x0, &(0x7f0000001780)=""/4096}, 0x20) 20.139788704s ago: executing program 1 (id=1574): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f00000000c0)=@ethtool_cmd={0x3a, 0x4000a, 0x0, 0x7, 0x2, 0x0, 0x8, 0xfe, 0x0, 0x9, 0x0, 0x24660145, 0x0, 0x3, 0x0, 0x9, [0x8, 0xfffffffe]}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000400)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) process_mrelease(0xffffffffffffffff, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000480), r4) sendmsg$TIPC_NL_LINK_GET(r4, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f00000004c0)={0x14, r5, 0x70d, 0x40}, 0x14}}, 0x0) (fail_nth: 1) 14.093248205s ago: executing program 0 (id=1586): syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r0}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) close(r4) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f0000000180), 0x127) recvmmsg$unix(r5, &(0x7f0000006a40)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000380)=""/189, 0xbd}], 0x1, &(0x7f0000000600)}}], 0x1, 0x0, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 13.304159064s ago: executing program 0 (id=1592): r0 = syz_usb_connect$hid(0x5, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="12011801000000405804155000000000000109022d00010000000909040004010300000009210400040122070009058103"], 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000006c0)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4b, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r1 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000280)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x46d, 0x57, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x7, 0xe0, 0x8, [{{0x9, 0x4, 0x0, 0x6, 0x2, 0x3, 0x1, 0x3, 0x1, {0x9, 0x21, 0xa, 0x97, 0x1, {0x22, 0x53e}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x4, 0x7, 0x8}}, [{{0x9, 0x5, 0x2, 0x3, 0x40, 0x56, 0x53, 0x4}}]}}}]}}]}}, &(0x7f0000000400)={0x0, 0x0, 0xf, &(0x7f0000000300)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0xa, 0x8, 0x3, 0x5}]}, 0x1, [{0x4b, &(0x7f0000000340)=@string={0x4b, 0x3, "53bfcf6998695674fb7c519ab91f5c2ce9eecddcd8ad6ea724e8df672eab3049c5614bc0b4a7832b2b30f5a41ef4e987be8448ae3275f7b3ad314eb093908dd0e2b0e212ce1b7692f0"}}]}) syz_usb_control_io$hid(r1, &(0x7f0000000680)={0x24, &(0x7f0000000580)={0x0, 0x3, 0xb8, {0xb8, 0xb, "92365a183039223990b02f7fb855c2e7a31a6a64d6763309c9958022f7aac6d776ed14d31caf023588c88d8c708805b785610376454b89f884187b0b66bd848d914e93a9dad7f3a0619aa866e68ef50b5fa21f3eb539ad5f49ce3ee4da4dac06300e1cc9d6281cfe93e5f624c451f0587a1e7553d2093d78c2f5898667c24ef174f3bcc834a170610f47984c5f4017e2dedcbb93bee1cf304abe17832879353c65411bb6d88bec628adcb3cd94afc26c996a2b60de45"}}, &(0x7f0000000440)={0x0, 0x3, 0xa, @string={0xa, 0x3, "ea79bf1ea8434289"}}, &(0x7f0000000480), &(0x7f0000000640)={0x0, 0x21, 0x9, {0x9, 0x21, 0x80, 0xf, 0x1, {0x22, 0xd48}}}}, &(0x7f0000000900)={0x2c, &(0x7f0000000700)={0x0, 0x5, 0xe4, "3787760015fc23a89b7d63f2aa49b2e431cb9a9a8dc768a35bc3bc7f410684dfac98af97d066f167877585880e6cb6c636fb5089c1e9ad0fe9a46ea45101df1005570a123d9f2f8fc1675deb812f965761e5a443683cf73fcf070df19b32bce5e7c05a62fbe7614528409629732587c811e818de469b4ae3aee20000c82d8c67c6cfad7ee3e68c7e61388fbeb4945bef6aa7773d04b6837eab281e5a5d64c990d2924ba3f7bf6c725dc68874ceb37ccf5bcf899b7fbeb5709212f52d1778e3427574c48f3ff3eeff84a5d198a6aab9b70a62d17edc0db89a53e30dae238d07db4d4658be"}, &(0x7f0000000800)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000840)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000880)={0x20, 0x1, 0x20, "df8eaa9f6654c885ff3d388588933f29ddd8cc9b7c9062d888f95d704439c706"}, &(0x7f00000008c0)={0x20, 0x3, 0x1, 0x8}}) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r4}, 0x18) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) r5 = io_uring_setup(0x368f, &(0x7f0000000100)={0x0, 0x2b1f, 0x2, 0x3, 0x1e8}) r6 = eventfd(0x6) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r5, 0x7, &(0x7f0000000180)=r6, 0x1) io_uring_register$IORING_UNREGISTER_EVENTFD(r5, 0x5, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = getuid() sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001000)=ANY=[@ANYBLOB="6c0000002000010300000000000000000200000000000000030000000c000c40000000000000ef0a08000100e00000020800", @ANYRES32=r8, @ANYRES32], 0x6c}, 0x1, 0x0, 0x0, 0x90}, 0x40014) r9 = syz_open_procfs(0x0, &(0x7f0000000000)='task\x00') getdents(r9, &(0x7f0000001fc0)=""/184, 0xb8) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="003cfdac43264e9930aeb448a7"], 0x0}, 0x0) 10.132856071s ago: executing program 0 (id=1602): syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r0}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) close(r4) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f0000000180), 0x127) recvmmsg$unix(r5, &(0x7f0000006a40)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000380)=""/189, 0xbd}], 0x1, &(0x7f0000000600)}}], 0x1, 0x0, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 9.977104933s ago: executing program 7 (id=1603): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000170000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000feffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000200)='kmem_cache_free\x00', r1}, 0x10) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat(0xffffffffffffff9c, 0x0, 0x163c41, 0x98) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b708000002001e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000d00)='sched_switch\x00', r6}, 0x10) mount$overlay(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}], [], 0x2c}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="190000000400000008"], 0x48) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r8, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB=',wfdno=', @ANYRESHEX]) 8.966386555s ago: executing program 2 (id=1605): ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)=0x0) sched_setscheduler(r0, 0x6, &(0x7f0000000040)=0x2) timer_create(0x7, &(0x7f00000001c0)={0x0, 0x1e, 0x2, @thr={&(0x7f0000000080)="7e86ba6e925d797108145e69d4ebea023687e5737de58a9610d4eaef615414c67432ef36b79296ac36dab2c0cea5e43d2219530a5d0cdad643a5c0617d8ce51eb1c37ca8d9fa272d96f3e4a5e6f974f64bcdf0da39f7989c414c3477f1c2688bfe3fc03c3e6dbc0a7edc3a01f3260e661ddc26bbf30562dae140acdd705b217277fce7dc3b436cf31ef5f3702d64c80b4e8c30508f47cf331e326eec123fea46cfade668b2364a2f0955fa03028b8a7b8a13ecaf06a6c2725d4a36e178293651323fd3bfb95c8ed563b8976a9a782df0362881063741060e15f4", &(0x7f0000000180)="75b6ada9a7121dd4186bb014b702bdefa09c288583e096d049d57474413ce044072c4b88a63fa37c60e67c"}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x1, &(0x7f0000000240), &(0x7f0000000280)) rt_sigqueueinfo(r0, 0x26, &(0x7f00000002c0)={0x40, 0x8, 0x10001}) timer_create(0x1, &(0x7f0000000540)={0x0, 0xf, 0x2, @thr={&(0x7f0000000340)="22cd1f65f1e6bebd381fd546b892cc7291fb7758d95d4d909cced861ff5533ea63370f9dd6a12075fd8dca11dac629d19feb62f0019e48a820e407fe63a9c964f9f7252370238fe65c51252a4444e3f40291d9b5e41948eef14bccbc559714fdf3e09dc40fa33632eabd2a1797515c395c665a94d1015994104b6598bd228ff1a8a4c642a14f3c86d35cb17e538f32eb663862a15ef564e5373a44e74bf81f4b186d3b93d0888291e14f92d5d7de21d9d691331c417531f772b2dcf4c0b352e04805618200a46921950c7a654aebee5bfa27f332e78dae95192bee4f3ef49ada3f8aa1d328c9a2eec166", &(0x7f0000000440)="b71fd685128022ab30360c41b1f5fee4ec55b21ae11a66adc35de9fcf745ddf842f554ca68a8888df74e5f2fc64c7d3e1aa37ccea818e1ebd6bee8e3a170b9c7c3536af95f952746556837ccacd8408bdf7fab66f4b93e6d4e0d781eebc5a4687cf08ee716bc73cdfc6a4bbd7c4f36ca103eb8d93fcf82b4efdcb1e52f3e7f43ad17ff9ffc32a0d9027c6041b1c7f72c0abe60c256388d1588d664347650f7430819430269a48ba27de5bb2fa4c85022abb8573d39f268b231a6c597046aa931fa8be2651bc554a44507d2b29a364a95d763699c64e97ee322e738"}}, &(0x7f0000000580)=0x0) timer_settime(r2, 0x1, &(0x7f00000005c0)={{0x0, 0x989680}, {0x77359400}}, &(0x7f0000000600)) sched_setscheduler(r0, 0x4, &(0x7f0000000640)=0x3) r3 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000680), 0xc2, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r3, 0x80089419, &(0x7f00000006c0)) unshare(0x20000000) splice(r3, &(0x7f0000000700)=0x2, r3, &(0x7f0000000740)=0x81, 0x3d1a8000000, 0x3) eventfd2(0x1, 0x801) ptrace$ARCH_GET_MAX_TAG_BITS(0x1e, r0, &(0x7f0000000780), 0x4003) unshare(0xc020200) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000007c0)='blkio.bfq.io_serviced\x00', 0x0, 0x0) timerfd_settime(r4, 0x2, &(0x7f0000000800)={{0x77359400}, {0x0, 0x989680}}, &(0x7f0000000840)) getsockopt$TIPC_NODE_RECVQ_DEPTH(r4, 0x10f, 0x83, &(0x7f0000000880), &(0x7f00000008c0)=0x4) setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000900)=0x2, 0x4) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_icmp_ICMP_FILTER(r5, 0x1, 0x1, &(0x7f0000000940), 0x4) ptrace$getenv(0x4201, r0, 0x7, &(0x7f0000000980)) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000a00), r4) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r4, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x28, r6, 0x2, 0x70bd27, 0x25dfdbfc, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8811}, 0x8000) unshare(0x4000180) clock_gettime(0x0, &(0x7f0000000b00)={0x0, 0x0}) timerfd_settime(r4, 0x2, &(0x7f0000000b40)={{r7, r8+60000000}, {0x0, 0x989680}}, &(0x7f0000000b80)) eventfd2(0x988, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000bc0)='./file0\x00', 0x2) 8.950120925s ago: executing program 2 (id=1606): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x9) pipe(&(0x7f0000000140)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000010003", @ANYRES32=0x1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\x00'/11], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f0000000480), 0x400034f, 0x2, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file0\x00', 0x1000801, &(0x7f0000000080)=ANY=[@ANYRES16=0x0], 0x0, 0x1ca, &(0x7f00000008c0)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x42}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') (fail_nth: 1) linkat(r5, &(0x7f0000000100)='./file1\x00', r5, &(0x7f0000000240)='./file0\x00', 0x0) 7.975241826s ago: executing program 7 (id=1607): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x9) pipe(&(0x7f0000000140)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000010003", @ANYRES32=0x1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\x00'/11], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, 0x0}, 0x8) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000700)=r1, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000080)={r2, 0x20, &(0x7f00000000c0)={0x0, 0x0, 0x0, &(0x7f00000028c0)=""/4135, 0x1027}}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f0000000480), 0x400034f, 0x2, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file0\x00', 0x1000801, &(0x7f0000000080)=ANY=[@ANYRES16=0x0], 0x0, 0x1ca, &(0x7f00000008c0)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000a7edd8b26227c49700008510000002000000a50004000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r7 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') linkat(r7, &(0x7f0000000100)='./file1\x00', r7, &(0x7f0000000240)='./file0\x00', 0x0) 7.72527806s ago: executing program 6 (id=1608): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r3 = epoll_create(0x8) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)={0xf6c447fee59251f4}) close_range(r1, r2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESOCT=r3, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0xb, 0x5, 0x10001, 0xa, 0x1, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r5}, 0xc) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 7.70020862s ago: executing program 2 (id=1609): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @call={0x85, 0x0, 0x0, 0x50}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000c"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = socket$inet6(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r3}, 0x10) sendto$inet6(r1, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106a05310300000000000109022400010000c60009040002010300010009210000000122f80409058103"], 0x0) openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) syz_usb_connect$cdc_ncm(0x2, 0x0, 0x0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x48, &(0x7f0000000540)=@string={0x48, 0x3, "a1a7b0cc4b314fdc126f440a4290d49ec32c5f099719a125b5e37173d4fbc2345856a81288f2232a444bcf016c7d00fdeb06c237a43c97c574a20b7aa2c46e3b6fc5a06d49a1"}}]}) syz_usb_control_io$hid(r4, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_usb_control_io$hid(r4, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYRESHEX], 0x0}, 0x0) 7.591749091s ago: executing program 6 (id=1610): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) socket$inet6(0xa, 0x5, 0x8) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) socket$nl_xfrm(0x10, 0x3, 0x6) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x90}, 0x1, 0x7}, 0x0) chroot(&(0x7f0000000000)='./bus\x00') 7.570953701s ago: executing program 0 (id=1611): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000340)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x280008a, &(0x7f00000007c0)=ANY=[@ANYBLOB="6e6f6e756d7461696c3d302c73686f72746e616d653d77696e39352c73686f72746e616d653d6c6f7765722c696f636861727365743d64656661756c742c756e695f786c6174653d302c6e6f6e756d7461696c3d302c757466383d302c616c6c6f775f7574696d653d30303030303030303030303030303030303030303030322c726f6469722c73686f72866e616d653d6d697865642c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e39352c7569643d", @ANYRESHEX=0x0, @ANYBLOB=',uni_xlate=0,utf8=0,shortname=mixed,uni_xlate=0,shortname=winnt,\x00'], 0x96, 0x2a9, &(0x7f0000000500)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket(0x26, 0x3, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/14, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8df00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = syz_open_dev$vcsa(&(0x7f0000000300), 0x1, 0x102) write$P9_RREMOVE(r4, &(0x7f00000002c0)={0x7, 0x7b, 0x2}, 0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00'}, 0x10) r5 = dup(0xffffffffffffffff) connect$bt_rfcomm(r5, &(0x7f00000008c0)={0x1f, @none, 0x6}, 0xa) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000000000000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x1, 0x98, &(0x7f0000000000)=""/152, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map=r8, r7, 0x7, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r8, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r6}, 0x20) 7.136762676s ago: executing program 6 (id=1612): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000340)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d0000008500000023"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x280008a, &(0x7f00000007c0)=ANY=[@ANYBLOB="6e6f6e756d7461696c3d302c73686f72746e616d653d77696e39352c73686f72746e616d653d6c6f7765722c696f636861727365743d64656661756c742c756e695f786c6174653d302c6e6f6e756d7461696c3d302c757466383d302c616c6c6f775f7574696d653d30303030303030303030303030303030303030303030322c726f6469722c73686f72866e616d653d6d697865642c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e39352c7569643d", @ANYRESHEX=0x0, @ANYBLOB=',uni_xlate=0,utf8=0,shortname=mixed,uni_xlate=0,shortname=winnt,\x00'], 0x96, 0x2a9, &(0x7f0000000500)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket(0x26, 0x3, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$vcsa(&(0x7f0000000300), 0x1, 0x102) write$P9_RREMOVE(r4, &(0x7f00000002c0)={0x7, 0x7b, 0x2}, 0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00'}, 0x10) r5 = dup(0xffffffffffffffff) connect$bt_rfcomm(r5, &(0x7f00000008c0)={0x1f, @none, 0x6}, 0xa) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000000000000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x1, 0x98, &(0x7f0000000000)=""/152, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map=r8, r7, 0x7, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r8, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r6}, 0x20) 6.978792698s ago: executing program 7 (id=1613): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x34}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r3}, 0x18) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r4, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r5 = socket$inet6(0x10, 0x3, 0x0) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="190000000400000008000000"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r7}, &(0x7f0000000000), &(0x7f00000005c0)=r8}, 0x20) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r9}, 0x10) sendto$inet6(r5, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0", 0x8e, 0x0, 0x0, 0x0) setfsuid(0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800714, &(0x7f0000000000)={[{@nobarrier}]}, 0xff, 0x485, &(0x7f0000001040)="$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") 3.125798343s ago: executing program 35 (id=1574): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f00000000c0)=@ethtool_cmd={0x3a, 0x4000a, 0x0, 0x7, 0x2, 0x0, 0x8, 0xfe, 0x0, 0x9, 0x0, 0x24660145, 0x0, 0x3, 0x0, 0x9, [0x8, 0xfffffffe]}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000400)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) process_mrelease(0xffffffffffffffff, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000480), r4) sendmsg$TIPC_NL_LINK_GET(r4, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f00000004c0)={0x14, r5, 0x70d, 0x40}, 0x14}}, 0x0) (fail_nth: 1) 3.086555164s ago: executing program 0 (id=1615): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x172f, 0x34, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2}}}}]}}]}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000070000000300000048"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sys_enter\x00', r2}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{r1}, &(0x7f0000000500), &(0x7f00000006c0)}, 0x20) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x800) syz_usb_connect(0x0, 0x48, &(0x7f0000000680)={{0x12, 0x1, 0x200, 0x84, 0x5c, 0x33, 0x40, 0x12d1, 0x14c6, 0x4a45, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x36, 0x2, 0xa0, 0x8, 0x0, 0x8, [{{0x9, 0x4, 0x5c, 0x8a, 0x1, 0xff, 0xff, 0xff, 0xc6, [], [{{0x9, 0x5, 0x6, 0x3, 0x40, 0x2, 0x40, 0x0, [@generic={0x9, 0x4, "5cee58a4e29021"}]}}]}}, {{0x9, 0x4, 0xfa, 0x5, 0x1, 0x49, 0x2e, 0x6e, 0x9, [], [{{0x9, 0x5, 0x7, 0x10, 0x8, 0x80, 0x4, 0x4}}]}}]}}]}}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='.\x00', &(0x7f00000000c0), &(0x7f0000000100)='system_u:object_r:systemd_logger_exec_t:s0\x00', 0x2b, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000600)=@filter={'filter\x00', 0xc, 0x4, 0x268, 0xffffffff, 0x130, 0x1d0, 0x98, 0x98, 0xffffffff, 0x1d0, 0x98, 0x1d0, 0x98, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@ip={@local, @broadcast, 0x0, 0x0, 'ip6tnl0\x00', 'hsr0\x00'}, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c8) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f00000001c0)={@mcast2={0xff, 0x5}, @ipv4={'\x00', '\xff\xff', @broadcast}, @mcast2, 0x0, 0x0, 0x0, 0x100, 0x0, 0x140192}) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(0xffffffffffffffff, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0x10408}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004200)="a28096c80abf3543ecde7564abff5085d2227ebcb0f164ae92706ad0b083a3f469a3efd15b4921e9c3063b98b3082068e7c31950dde842eac55df0f991453cad62a6956b0b6f7b8cf49b506a3060fe1127eca99663ade8efa89ee189acb5f3b92f6bc4c46621c803eed0d0bb5f32384870ed08f89d4f74445762fb99715e083c4c92a8878be19ffacc30d0f2da64f971cd40563163adc15670ecf25cd3ad96138967c4b53ad9d04b5193ab5fb674aa0030a9d703d1baf810ce897f969121f142161919e583c275671b999e7f363891dfdfdf3556d01b86ee29eca8fccbfeaf1771395148706cc6e6be7ce29fc9ffef061b5420950c1a525bf75ad06edec51538d1c5bbc77da72dc90fd9998936fffdda2427e5a68966c7e2208f76304680182ec73007e482f034195712af922db2726195d997708734db9e7825a864be00b2a4f800881fc0363f5e618398454f35b148b4ccb88d418269fac868a8ba4a2d5b4f06a1ac01b5ad158b842e05adca22c7372585bf4ce95560b6c1e021a3ed2ff7bd3b6b3c7734c3b66d7e4c460096312082f89b16baa6e73814aa60925780cd92cd65087e260ec046fc363264366a9df2c849c0644911303946adad544521ceb469a3e193ecc9a7876403fac461a4a70d6193b2451189a5c5120b3535e9edf619108af7f517b58abd3fa7fb1ab832213430d2e6901076fba9c9e1acc6c6f48ff0e419bbc45589745a176f52a7407ad5e3dd49acb31b47862806f47077dda04905e45a80a12cbcd4d2dd9fe66c2d1f99394fed8ec60961cd2dc7115a96ece432fac86d51bebb08b95f447a83792fe80291fca7b298c9043ef2c26f0f7e42798d3f54c84b94c24c76c555d83ecc53b99bb22d71845e5cf21a5ba7fbeffeb6306e1730db14561b950a3f24bcfd78d4ab0d97de8054bb1a6077ae7cca6e45d846d3df82298d07212922742cb0facac3b77edfbab90e9ee2d4f7b0ee9b17bb11ec5e5721340d84cb6bd93428167e69b47759172557acda313c3decdfc6fe9336bfade459f43b39d0f2289f9142db280f4ee668e650e12858c577e12e2b9a57ee66c834be97979bcbe94747fa5d8d0b7d3a9f8f218df1bf960f828429a1efe838616b18faf6629236ddbded43a093efae163228e5c38fd7714743c2fcca47e3382bcfb1ab893fd7377527b4ec43f3fa60ebd338161d8de7cad65b15579e4af258f5fe3a63c2637a15703207029b0899b5427767647baef11e291358e6e54f6f13d3d2ca7a5e7969e04d2733b3b9ab822c69a3cfac097384de5071a9b74a656136d55eb1000008747b509fd610ff62b4950ef71c934fe21a48a4931d3d9458b415f112cee65c660f5490e982341da1c58634b3967ca6f3596d20cc90f508382156e36f16539093240ef5f2aa6a2c0dff2a67df30dcf50bf6e0b82a3d49f2d532a8dde1b3ceefcf0837190b74186090d1c18b59917d7efce1adfb238ef4a7b1d22c4cef09320221de883e97e6882466508de06fcdabad3b741bdca2cff879d57ddda52f42b3dcb8a78cfc05826af7e4ff155960ff8491194f4d321ef195990abaeeefdcb852d1e1e3703f317385a9458b6c2dd9db830f757ec29c9939fc7313e639fe485bc1e41ddaaef3fbf1f7cc527c8fad0d21b8082482caad7bee440e5097665f636c3dfec82f8c98afb6243bc3944939675a594277d278ba4361461f7da52e224e4ce5dee4a467bf6ae9f67b61ac6eb0a440406abac2016eec907e241c57f5f44be47290fd0fef785ff04df3810ccd637b4d97a84bae8486a36f75d872e645fe46625969fc2d1f032c56ed44bd98ea27bd9b6ddc8eb2dc2ec9f90f2f1ca1bd20e37ac58b03c84c872f4ba47310654986641460dfdd531ac62a76ad87b89c103ac5c9c2e7e70c66447b3412d4a1e5cbc30e16939505116c04de33ae054ed366de8d1f971c2de439957a194e22a488f58d7efd46439177f3f3c45a1475927eecd846d3d2e6a2ab5c7f8addd99062c2fc6b272d1f51bb8f22f1b6f8bb3faf8aa85e5eb9abf7df5cf8f26267323808b0833a987989cbe59205e7ad06556e2d1b8a4873ca1cbcbc8d43abc145fd4eb832e7a58ab2c793d003ce7b1850ce45eb7480417a1e9eb9d39a1028a2a04a2aa649c098c4f8eee514db5f6021173bb254b8e22b150b2ca01dc7ff235db46ed78d07f43d1adab13b8445d1b32069eb45f9d389fcf5a3f7d3ebe243c5b1fe17b1f5a3d571b65f21b9e471e818172554dc956749b99cb7a5f303ec480d7194a2ba86e204f06aa1becdddc8c49082c527e7064ac2ad77dc05639d3d2a7778f6943ed6105ebf6f0b9e94fddbe05c236ec000f4d1d4e496b10068211ab68ada4c7f7ac61f5f5ba5f1810d5bbe87ff4f8356af0d3f682baedb0ad8f8488b277421f0a03fc5e3095ee34bc4472d8f17e3f7013cf2f79f5ff3ea4b6bae56d1365a33b09bfa9a496323f7da923b7e29dce4beb80035f13130004c96e56d7ef6ca6c101d20c27a218e623227c33c9e488b17e7ae9ac20da8240501f7b614a1730f164553fe479ef149866e4ea47296814284a3d3eb7cbb294289ffb996e0eb053b9c16e54cf267832e3d360eb196ed51305630223309ea97215628f01ec9d3ea48096418d5e962cac5063460f0a18772ec7ce66d14a1cce14b52c40bbbfafccbf1e76f09e57ff0718048e5b993157a6cf4718826b1e09430413a3596a15c4a620fa8c8e1d1663e5739f9f790ddbb3be0e00187d43717d659242467d8681ac10303346157f894d9037641417010e9654c6a5b22383e73a5a37128f50078a980c30930321aa5c5e7851d5d392ddce3a14a96916fa8421ae6728f37f5de7c3e98feb4babd4e1bd2315d595e209d52748f70adc2284fcdaa6ad880470d2a071f3490aaf3491fb64b4547419e8eccdc491a8921156cb4811ad1e66514a32b0b31b641438881f28c1e6461b4f451938999af671e8c6a5cd0c072a9fe4cdbefe24ca616f3d0a15ac97cca835b1a440e04fa28340c6044176c8ecc8ee0d033d47db8a0aacfa0eabdfa1c9509fc2604008f01cbafeb5bd2b503b809ed672340b9a576593f1ef388391b54b605e7a15bef7b1345627a34fca57738b0f8f4f19eea93c903495274a4425a1a1cc6c4c6e335b631df5185c95b485a4257867b5347a40e4e14dcc560f061fd4fd265137dc68afd548adde778f1330f769acb1ccf5da14ff6992c24e210ea6e6179421881b803393bc6974e37106c5b5b3b5d0b3469f8969bffb7e4ceb2c98e928e74366492d27235ae4c74a2f48511aeeaa53a2beafa7a331b50e454c507af1b63350a5cef35668a5b9325014192277e509561008b3601088f79d42eaa8b1e4ae2000b31749e2b8094312ddb7f3c1cd625ef885c11fa22a66e374b52b3425e0b8016154e1fd8471339e32e7373d63ab646d893fbe09ae07b06074c01401ea76b3c382a9d32f24f93c789964e16bc4206ecd75c10917ab84ffd8d6cdf4cd28fd90375ff28518f8c1a3befc538e1b9e427fb671988d29f2fb2fcd039f4d341c84eb4d7cf600ddaba88bb094e4d87a1419180149f491368e648b69985b05ac39a4ecdd3c5135f3a5c8ad7792dacb6470144bb9e67805a211efb3ec9ccaf8e0901345fb19e4da579e1fbe86a1207f4f13c3436009c2c640b7cf3f8b77ca7bd994bf93308027359c6dd1b7db1e153fc0821968ef36c003b6c73fe890f4de24f5c6458dbaaf3819edeaa91783c3cfc7e773689236248195c7bbd60113f2476fa3687621d668d1728ee433d2f8f4db707345d30f1e52ab87a2a0afd547c6bb06500f59f17facde48f693490e22494b75d11df1a143b85068d143ef6a9bb5937a9df380c8948f1a01e9675e18409edb0f6b9605b68e34632fcce472dc50b90b0f6dcd57931f78e1e8861a0fb62e72b0baad6f9d23c1cfb0f19b25013c8d9fcd786a2f6f79768b5fb398f7b2baa31ce8156d1fc4a46c1c463fdf30360d42aeed2ef11611d0b7f654bb51052fd4dc39328f8ec4c58bbda05e6f1b3c8f6d8adca0268f2410e9a4a7d63b6616006d0e02f6edacc10e5c54fd85f15a8bd7648a293f23d6a699bd9a675250475a73a96d7475e4fabb89fb5e7de5d7a3479aa485c0befc60d0ac4fd5ac6dbecceb06cad86e219fc0ce4720758917811a3215f8d13e413bfb64fc065fc421aede0b56691797dac428c7e463479fa591b9072c309b7533e427c5cc11a1f6cf9a5b995d328d796d874c5b55dfc12a5039b413ce319cf5ba1f355c4e0717d32650b43e18010f37f048731931c52c4f36eb969dda702afe96c2a5241350a67ba2d026946189c5e281293c9a8e2cff3784776f1de78b917101b54e5ab00c045ea15f28a0e3f509962cf8bd3385d85250737eae5c34ece86b86669c13b00308a3b13c0ac3c83ff26fb52a4aa83c1233a9490cb9ca917a056908931751bddb88a62379a713395f0764e4a393faf253a4026d0472270e6036287d56850df1751543484d65b3062155b6300e0024241c59a862ae769c1a9232a2d9fb24705177a09cceb3eefbf9f106f67e01be14cdeb4d2fc7d8661df3e75de5ccd09a7e559f028fb9837c621ea0045b4d1b679067f246339c974631aa7134d4e910efb28d3c48929cef1df7e6c73668762d55086b6c59c36ac90154135fd7ca4e4047dd0aa161fa982d8edf9c0cb9666477e096c55718f6e4742415fefd4f696d1f1ccd6322bc19496ddebd36282a7c707d5b44113e30678e6e33ab7d34be04a59ac614d6a54134490998be02636fa91633d6294781c2b9a54c611c0045cfcfe81f49aa21b29d835cd2047c854486fd8e65a2ebf629f7ced602b9dd107bfde483e5c9b5cbba4a08cdce09920bda9978b7fc2b4a89bf1573a26389e52090fdf5dccf22111dc8c42fd3c8c477092895398086cc22cca665269e193fc650742a361a44b857d258429f701f22e9b7615bc3dab78c1479a41cf8575cdb17169470b347adfc03e03daea3e269725cfc72df5664b9df36d2f2b55013b71133e0b80577a47182511ebb308b6248d457bd2af7b28e77182c305241178c4124ab102771fd5a8c3dacb8775de881301d71587c76bcf0a97a72ad244d0c42fd71aceec32dd48bb5c9a95b391166c832ac5bac8c7cae4d18b3f7d9f2e4782fdf97732e3d51f67bbb57f989ee0d7589dbd0c2a5c63840e914b9d7d720fa120acbffebf816b588b2ccc052e7fa78992e0ea39dd21a122add41195f8e2e1acd777c1a4e8ef4362fef441feb4d9252c6bfbd2742152300a32027776e3341620d3c8d9365e10e81adcca7d87a0e555c98a0353c692557d90ee9be3fbaab766abf93e2462149fd99c92a5fc58d899ee75535cd1fe1386c5ab0b157c2102039d6015258f59cef3f15b951893a30ae839f740402a30b34e7be73796286403c5beb0853d856d83f1b00b48328f56dcb32e1faab08a3435b1482bf18b21c95aefeaafa7fd761c7f28d416fcde06bf7aee5c6e9eb50e55874253ba3f1d0ce2505b4fc7c3fc996bfbb8446bafe84f5bea94bfd7ca5aeaf237fe793b66e5c521d4092e4e1f9bde1dfcfe53fa55005d21cfa833a338fd9792614129336060e10d1911862070761aa20c2902eb7c5a355eff4cf6253d7102a2ca1fead4c53b57d576d104c081310d92797e4e2e8c269d19910d0d4cedf30fa28ba680c00137f83de940624229b6a125ce5233c6cf4a3640b74f58f288dad8451fbe37641c5559a5f3caf1299c8bfb230723652278fe378efd8e459b9da26cffeb58468a6301dbc06d713ba2d8d43d9038f5f2dc8b831ba58a88eeb5b1786b21e398aeeeb7c1f3d6f01d82b3947862fb9e7cbd7da5d04c5fcd34da28d53e2246e3ac1e3a619ad174efa6435eaa0fc94d610799ce0158421dce046306eb5042143daa336d52206b12610ea6389cdda49bf5af1d4ee42ac090a94ae7b7612073f3a5c36a2245eda887f41478f7d20f18667f941f71eebcfa76c1ab28f2a49a3bd56bd3f4e6bd079ab3fe2d94782236e83585a03e52907abaef7456a95d5d3f3d37efdc035dbfd7c41b8ba0af2df8adf1cf24f7ff0beccd3d26bc91caf42314ef7e466f74e19ae0df2e2298fc2f694a7ec134632035585d530e7e19f65c256f001d75382d9825ef741bc213af186377d9ca10d3722354e1897ca5c23ac6a52c9ad0e6b686e1776f7ec65df033e8f4d5db80c1bc354093b319cb70df93d610667675816328c99322f14e636b95f04e6497f139d508b453f53ddb5c289d849fd5407c9bdcefd1642abd46e28cb4e94371bdc606eeb67c9fe17747c68f2d50e82711da4d3edb0eda06f41b7f93fa8fb4d83cf21c79da67000bac2275508217ade1659fa8d24e5f8efb9f4bd21073ebef3d06368eb03fa3cf0d638448bd055ed20d292033ffdba538559c8ff9a2a5c8f83b5c393643d6585d1df994c3be43e72b8f3f53114d2a5f6bcedb573842b23b6a3eb7fca8495bf03bd03fde7b19bd39a16cec49e01f38e671af33cae082d9788e3202799bc466babec2080528d0609c0b731964719093735b4c1e73bd0705637c47516922197c552baeaf3516b5e3bbc2cd1afa3ef8215196ed580d9561092f620b897e98e786a0c7cbb0eedda8063292ba6482497f5f6bb62fb5ab4c97cb7658dc6579718eb97b547fcf47ced1426561af93a15fb4dc6d3d93b868644943c2c94b23b0570bbb81df2666c24f5abccfcdd71e209f3bb43c01d17f9bc8b9af2c26762fc6a741a150b7d1186e4f35175f3c315243e1c11e92c43a1fc492eef5a13c77a81fcf514ebfd0f8e645dae15a07e86b2f01fda065db4505a5eea83cb616f744f6bee731be191c65449c02603556d5a51422cf9c2f19f8d6843e0c1091e0708aa271e91f71c8602b9fa72189e036b7cb6af1569f21269283de94a6d7fe5849fd433d5b719c80419873db0587fc29786cc598d896fb16360bddd2ce12e54d05418f4f5e5f2d7aafe9fcd6268cbe2e9e6329ffb6c67fab8f3ce673028cc06aaa6b857556bba3b44d3fab5b6e875e70a2f3ad4b2ff76f31ead3462d3801ba373b3c2f545e94f57021575e2947f81f53283fc0a5137fd44fa3d074c92de54a0a3465c858f5a7ef08313faddbc3663e4e0167f3cba39612057a7518fbfb031f5ad0f9f75831973ebd733b82e554bf3fdec84e51f65dab6028c6c51366d9d4700fdf255e4c7bd70766e7f2281b3f2a5363f85ce49f9135904d14bcb117ad754c2594dcdca2d30e40ff265b5accfb116f64ed99aad570c4c5a91efdbb984ac651d8721405a0342cf77f448c17a152eabf29e88950558a86d0074e1cefab1eb7c366682f686ee1338737e675ea58eb8b4c86b9f28a6f6e96459f29e3b4dc59ff044c61a0dcc5c31d803e6e98420e446229ccdec3d0f705e92ffe016bb3696373eadab7f35ccf65ab4d9be09a085ce21bbd7c0555376e4d7fe68b5e7a64f48b5127825fb2be598d991f9c1a54bf52713417dcc599e812d85513a537e6eafa738edc972b67e065595d11678449bce6cd3d69800a649b560d0e057c502ca3e72e97820829ecfea801192c3f4e2c8763c095a43ee6fe45fe8730130937668df1d4ee577ada28238be03286481f2d2a004cc4d48856e71fbd64f1a0043a4520ecbbf1b3abdc96b87a27be8495a20542967aa4cd3a44a11502419a083d84e97abfde0901b66dde48388649a0ed6d93b9f20c530e990c7c52370a114d800d6ab3f6687d6bbc105b63738fe05fa6cac98ad6663936bb18cb923264e4c921012b68a26a70977446b8f15f9d62467d8b356560c183a6bd6cd76ec868c3bd94a595cd7bf996755a508a814980c5e588b275200c45afd900c8c2de329ec2484b0e3ecd7b0960e5e3425881d1ff7f8bd8b20f5cc98ffc3acb77f5e88775a4bd3ab9f9eb027e27d3af55ebdf4eebab48ea911128d668d00fc3f5b5480aa0d9a4af563ba577384448e5425157133d59e1cef3c722f33700bd372825046b1fa5824e405154a3af1440bc2b75acfbd07cf92e8c162587e74b5ab66b1c6aeab3ad5fa3ee91da4900ef30ad04baea326df912517dd96e1696b4a91faa66675978a375e81f25464a1073dc6737af08d7e25956bb31d438548a7da38662d49db812a8cf1d6cc65f5c63879fd9ee7fd2a66ca3fc1a768cb239aab88c87206470b4c60592afeb6d69ed97a8f990155862ba4e22b64804142c131a23792937aa8a8696e165c24d7692a04bb4471b0f0d2507fe7c8618421428fc7a0acc984ca5cc6bacb772e8a717bbaa646f9643275910a6037afaf5a80678d18edda138a4e13d06d04a5d06431eab48738225cf1567e960e765728dc12e91b91c6f2b33dfb6e033aa68c1c2334d24335abc4a7a1df5636dec29091da54d5f5a1fff41e4a35a0c2f04f968f7d78e2f51c73577e2192bb20f289aaba5a175c2ed533855bd9ed9a842ad482136dd5e0cf45eb5e2d31ff62a3be1cf8a94a58316e74f4ab9fc54f3a0bb83beef0f355993bdea2c83e61cdc796bf2564ae51fae616799e8711998cd88d35cd9824452fdd65226174b46792cb87f4dd282e4e6f67eb66da413ad877ed6ce775f7e19bc93f48bb9e5ec04009de3c042aeacf7f4b25ad6b30e017303f64fe07ac79e8744aab6926d117f13513d0469cef335fe1d0d787c2d0b2c031a9521786ac10e9f8b768271680337f2c3262abdccb5d3107c632bf1f74c83ee91f49988222fb080cc8faa9b1a02526d8b6087e0b2354173d29016b3309587c16f057dd812aa63c3169150de81f3af97d082a8f8da4ce4f909ff649821d7f96d97613552e8cc4902e046ecfa329b1d980ff5ece69b8f1615fdff5244f41cec0af924624ae1641ecae5fa26c5fb9006e57100ee71377ced7c255ae17a0845e2ee0287c62c1852f93877f9f86157ca9675d383fff5cd6f2b001ec0136c07cf37f5ace1853122c2baa1092d418e2a490c4a5c8f56b828ce1bafeef4e77f095d6b4ed99d56f66812cb19be540ebe5d52e7eff2d69cbb8477e11514f7e3604bf9999f78c2f1ca6f60a2216b87fa0f25269c425b7d50709b200912b3b7899c95e12d6e9c4dacc19e327721860e0477a53e6793fbb7fb9704a848f395f48c24a6e79b9e1358cc3497251de88b8d3a7b22c6d8af1a7fab81530d9f0cc98f62debb222b54780d89794238532717b447d71b46a60ed481c21db85b590b31720009695ecffd4ef029964e5d5149622233ac013e960a005c924f73ea82c318455546c53d74aa3f7e2ff26aa074c40a55aba8b08027fc19b596eec6c4f89bae39e74b9aad88344f7cc5ad3eefa5095f2ab47222e9a357ecd71c6700ac576025201490d9e446603dfd4bda7617dd500981b2d2ab8c43882a5208494cb3f8ebc720bca8a7cf6c80bd7aaaf89507bb3412ea490a78973f12cc30413e9df1458917ea3d68b438d424c1314bc8d01939c5a5a842438281e62d0c800dee704b2a6cd3e1e4b885a6b26b894a98765fa3308c9e4b87f93625faecdb17c29a27cd243bf6030a67874ec9f2443cf8154261ac2a834c01cbe1f314ee7aa3ca552e1648cf8b42a63f249e3538026e09e44d69dc259adb0d1a0cbccb5a5dd5d0dccc90d023da79d5634188ff060f7e35a5f9d7ad99546824d63975d4452de876093f4e997dc46eedcd80a9eebf5e4f077fbb10c7d9e19a3419e7b845972a3b62613c5404a209b16fa88e0ff49d7b4f21fecc1f773c5b4be61021e0cab8602c6e8257649303aaeafcbb178e7a460ff07f219c46eb6fe5bf8113723e454003bd707767c107daf4255751daaf8decf35262640058924eb6587868b2c08230b317e97396ebc928ba8d274ca0eed0bfcb637676003c64e8c1e1a0420b6c96a44226061ced41b8448382abd2f3d0c472afcde231fbc9ee90c2f1132f8e2391246f95ad93354c7460e20de996ad0f61b13b27646887a637cede90b94b7d8c3130f0fe060e8d955c711a2700b302a75bdeb32a0a6802ea795cb114f5f82a1a381a86bbff88b299e47728b746dff964c94c52b661b9429376b1320b46081426b7c340206dc0da151bf84be2a49e78b6b5938753d2b1be8d9e67c43c5d70e72519f5f90d0500e84ee38f82b191ac4d968b0a37901fd923cb289d585693ac3c3f8a94fca6df45e694e199a9cd0b1bc1fa7394bcc96aae670dca6605a998793b7e067ac410ba631057b8b76fcbe9524df820c02efef1608b743cd2aa6d60d3d8e476fa12d3acc329f8272b087d89471177ed531fec1f9c24a975ca2fcd8c246a33e291a3f00b7f234052067a0059c86762475256bb5e7dac6f121a0925506b18933c6e314915d4b3b2130aafc2483ef22ff8bb7b887565b1bd22fabca22037d8fc9437f675c5313526266f60bb7c7c47f30c7d567ed142ea5ec367c4298328d20e5344f01c0c90cf8a6302f4d84b6ba7495fba314a05ba29b63bb6d458fdb05a4411136958309f418fb178e19aa09ff9e62b29732fb2986c96e738f7a688cb2122dbb8f2ad9a5f28bc49ec0c462413552afee8e403259b55ad6dc334dde7f2d306929dd01f2aa6036cafd41874522689301b81c9e50e86828894140356db0a3317b081ed9d8148c41e77e6bda6287762532b86eb91f5480915680deb8a91fb8656b7f0109064865d2b846af0861f67d3f720d6e306540cd7b68f095ef3690b88ea93fb6a402ff5697597cda83171f159e85307d1a8c01611189bd4eb4f0453ab88d43ae181a562a76902a67c687514079d6f4304d9a7c0fa24b6e86074ea0a9fd8187c120312078f5ebfa674adc0303734bf8f6b5585943706594192ad64c9f7d9794fb83758924f862855ddd50bff58b522c43d73c03289baec628cd693cab93101b1e473b76532510e10f03e86812fea6f2d6f5467dcf29e6d7cf8524f383a0ded3f0951c3ffb171a6b8a6d97b5fa8899a19f1a3d0e934a1d4741076e4394ba225158f697bf7d5651717c6950229a0be22e8120d76a414edbcd03d505264b7ede8272ccbd6dbdcebaf11daf6a652f6f9eb74ba7a3ecc942892891388005ae5d971e4e79d696564906dffd44845b704a9abc2fa5ba1bb69a548423a08044ad6d0e365db7e6bea0f3844a452759716cb98dcf326001ec90c1c343174098cdf47ea2e13341058ca014d2a30e9ba3c526de72a6e387181bf76a278c9cbc518d8c374a3f1d9802a39464a100903dbec16f8f095f5d82d9d09507281e4f7fe0ce4fbeced193902a5f658af2a4c1d0952dabdc6ae5830b6b5a2c3f5b8d33a73665990822e5f4a7ce5366755a1615543bdf78299c71e890e0bedb6ec277b10a389d6a3ba9c037221421279e51ab50fb115de2076cc99444202e88ebd9d0fbe4e60234b7b761495ac6c9e615ddac8176164a88fb6d6cc2b52672c8949afe3efc1e87a598896bc93e421423844fcaafe65af898a015b3bcaf623ebeef9a57155af5278ceb52b995f7ca466d9e18b05e86380679e0257cff6d0c6750078462f2ee4701d6d8289ed848b877cf5918625b7937060d667c11119881c30809056892352c6c53c01e395af6866ea350e6f21fa3db772c1177c759999973b51e11ffc590800", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0x0, 0x0, 0x0, {0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3966, 0x3, 0x8000, 0x0, r6, r7, 0xe, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000001380)={{{@in=@private, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@mcast1}}, &(0x7f0000001480)=0xe8) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r9, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r9, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) chown(&(0x7f0000000280)='./file0\x00', r10, r11) r12 = geteuid() r13 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xa) setfsgid(r14) setresgid(0xffffffffffffffff, 0x0, r14) syz_fuse_handle_req(r9, &(0x7f0000001bc0)="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", 0x2000, &(0x7f0000001700)={&(0x7f0000000240)={0x50, 0x0, 0x3, {0x7, 0x2b, 0x2, 0x100, 0x1, 0x6, 0x0, 0x8, 0x0, 0x0, 0x8, 0x1}}, &(0x7f00000002c0)={0x18, 0x7fffffffffffffd0, 0x4, {0x4}}, &(0x7f0000000300)={0x18, 0x0, 0x2, {0x10000}}, &(0x7f0000000340)={0x18, 0x0, 0x72, {0x7}}, &(0x7f0000000380)={0x18, 0x0, 0xffffffffffffffff, {0x8}}, &(0x7f0000000440)={0x28, 0x0, 0x111, {{0x4, 0x6}}}, &(0x7f0000000480)={0x60, 0x0, 0x100000000, {{0x80, 0x800, 0x4, 0x2, 0x1, 0xc55, 0x7, 0xffff}}}, &(0x7f0000000540)={0x18, 0xffffffffffffffda, 0xffffffffffffffff, {0x3ff}}, &(0x7f0000000580)={0x13, 0xfffffffffffffffe, 0x9, {'\xe8,\x00'}}, &(0x7f00000005c0)={0x20, 0xfffffffffffffffe, 0x4, {0x0, 0x10}}, &(0x7f0000000ac0)={0x78, 0x0, 0x1000, {0x3, 0x9, 0x0, {0x6, 0x8000000000000000, 0x7fffffff, 0x6, 0x3, 0x8000000000000001, 0xfffffffc, 0x9, 0x88d7, 0x8000, 0x401, 0x0, 0x0, 0x0, 0x6}}}, &(0x7f0000000c80)={0x90, 0x0, 0x8000000000000000, {0x0, 0x2, 0x1, 0xa861, 0x0, 0x81, {0x1, 0x2, 0x3, 0x9, 0x401, 0xfffffffffffffffa, 0x6, 0x2, 0x6, 0x4000, 0x1, 0xffffffffffffffff, 0x0, 0x1ff, 0x41}}}, &(0x7f0000000d40)={0x50, 0x0, 0x0, [{0x0, 0x8, 0x1, 0x2, ','}, {0x2, 0x6, 0x2, 0x88, '@]'}]}, &(0x7f00000010c0)={0x2a8, 0x0, 0x2, [{{0x2, 0x1, 0x4, 0xc9, 0x6, 0x0, {0x3, 0xf5, 0xb74, 0x8ae4, 0xa9b3, 0x7fffffff, 0x80, 0x3, 0x9, 0xc000, 0x4, 0x0, 0xee00, 0x0, 0x7fff}}, {0x5, 0x3, 0x17, 0x3, '}-E[-\xf9+.$}[{*!{\'),:!}\\:'}}, {{0x0, 0x1, 0xaab13744000000, 0x7, 0x0, 0xf49d8e2, {0x4, 0xffffffffffffffff, 0x40, 0xfffffffffffffffc, 0x7, 0x4, 0x2a, 0xffffffff, 0x2, 0x8000, 0xc8, 0x0, 0xffffffffffffffff, 0x3, 0x605}}, {0x3, 0x15ba0000000000, 0x9, 0x0, 'CONNMARK\x00'}}, {{0x4, 0x0, 0x3, 0xfffffffffffffff7, 0x6, 0x8, {0x2, 0x80000000, 0x2, 0x737, 0x2, 0x9, 0x1, 0xc0, 0x6, 0xa000, 0x4, 0x0, 0x0, 0x81, 0x4}}, {0x3, 0x9, 0x2, 0xfffffffd, '!%'}}, {{0x6, 0x2, 0x8, 0x3, 0xb8, 0x9, {0x1, 0xffff, 0x9, 0x80000001, 0x7f, 0x7, 0x0, 0x2d6, 0x9, 0x8000, 0x98, 0xffffffffffffffff, r7, 0x94, 0x3ff}}, {0x0, 0x7, 0x7, 0xa0, 'filter\x00'}}]}, &(0x7f00000014c0)={0xa0, 0x0, 0xff, {{0x0, 0x1, 0x4, 0xa, 0x0, 0xd, {0x2, 0x10001, 0x1840000, 0x1, 0x6, 0xe496, 0x4284, 0x9, 0x0, 0x6000, 0x4, r8, r11, 0x1, 0x7e1}}}}, &(0x7f0000001580)={0x20, 0x0, 0x5, {0x9, 0x0, 0xa7, 0x7f}}, &(0x7f00000015c0)={0x130, 0xfffffffffffffff5, 0x4, {0xce60, 0x6aa, 0x0, '\x00', {0x43fc, 0xc, 0x8, 0x6, r12, r14, 0xc000, '\x00', 0x8000000000000001, 0x1, 0xaf, 0x5, {0x6, 0x1000}, {0xdeb, 0x6}, {0x3, 0x1df}, {0x40, 0x200}, 0xfffffff6, 0x7f, 0x8, 0x79a4}}}}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000100)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x3, "3ef12861"}]}}, 0x0}, 0x0) 3.085826844s ago: executing program 6 (id=1616): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000340)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b000085"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x280008a, &(0x7f00000007c0)=ANY=[@ANYBLOB="6e6f6e756d7461696c3d302c73686f72746e616d653d77696e39352c73686f72746e616d653d6c6f7765722c696f636861727365743d64656661756c742c756e695f786c6174653d302c6e6f6e756d7461696c3d302c757466383d302c616c6c6f775f7574696d653d30303030303030303030303030303030303030303030322c726f6469722c73686f72866e616d653d6d697865642c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e39352c7569643d", @ANYRESHEX=0x0, @ANYBLOB=',uni_xlate=0,utf8=0,shortname=mixed,uni_xlate=0,shortname=winnt,\x00'], 0x96, 0x2a9, &(0x7f0000000500)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket(0x26, 0x3, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/14, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8df00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = syz_open_dev$vcsa(&(0x7f0000000300), 0x1, 0x102) write$P9_RREMOVE(r4, &(0x7f00000002c0)={0x7, 0x7b, 0x2}, 0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00'}, 0x10) r5 = dup(0xffffffffffffffff) connect$bt_rfcomm(r5, &(0x7f00000008c0)={0x1f, @none, 0x6}, 0xa) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map=r7, 0xffffffffffffffff, 0x7, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r7, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r6}, 0x20) 3.055613104s ago: executing program 2 (id=1617): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000170000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000feffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000200)='kmem_cache_free\x00', r1}, 0x10) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat(0xffffffffffffff9c, 0x0, 0x163c41, 0x98) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b708000002001e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000d00)='sched_switch\x00', r6}, 0x10) mount$overlay(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}], [], 0x2c}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="190000000400000008"], 0x48) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r8, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB=',wfdno=', @ANYRESHEX]) 2.303755773s ago: executing program 7 (id=1618): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0b0000000500000000040000090000000100", @ANYRES32=0x0, @ANYRES32], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) (fail_nth: 1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) 2.126318935s ago: executing program 2 (id=1619): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$ext4(0x0, &(0x7f0000000580)='./file0\x00', 0x19560c0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r4, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) utime(&(0x7f0000000200)='./file0\x00', 0x0) 1.970451077s ago: executing program 6 (id=1620): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$ext4(0x0, &(0x7f0000000580)='./file0\x00', 0x19560c0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r4, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) utime(&(0x7f0000000200)='./file0\x00', 0x0) (fail_nth: 1) 1.69580617s ago: executing program 2 (id=1621): syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r0}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) close(r4) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f0000000180), 0x127) recvmmsg$unix(r5, &(0x7f0000006a40)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000380)=""/189, 0xbd}], 0x1, &(0x7f0000000600)}}], 0x1, 0x0, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 1.66831343s ago: executing program 7 (id=1622): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000003c0)=0x2, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r4}, 0x18) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001500)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="0000000000000000b70800000000396f7b8af8ff000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r6}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002500)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000fdfdfff67a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040000010000400404000001f7ff04b7050000040002006a0a00fe00000000850000000b000000b70000000000000095000000000000009cc6b3fcd62c061c6238975d43a4505f80e39c9f3c530cf08e467b592f868ee3b0a435df0a0e8c1bf176db2a6b2feb4b77d3d5707bfd2d84aaa3b1d4e984c46ea7e2b347a36f5662403e1b2be4284322a4908a0d411a9872971c7c56f0979bd10b97163c066d0e196bf0fb04e500b0c0502df9de9ca3c00cb9a323d9b401bf4e418d07fa22f0610a70f2bdf4000200000000b0c2c125080963f63223b7b80197aa3161f45346b100000000000000000089e399f6609876b588743794298b79dc192dff048fc207c81f28bdd3e26a1a8a0481e9f0da43bb6ca66e2f55a9ff19ffcafe3e64be06000000000000005064caec04a367c23d9fb6a6991ddb737d527d6acb15426406991c3b404984dfa2c6e94bd0339454c13ad3c328a182c15dc760a313e3b3ca5d3393404029e98fa883c71949a34d84030323e3d54fc5b29d27643453ad9226e3550ee5520211d9370175fba303f003073afd1ec9f7c6133f260c6882a146880b9387f1beb5418618bc83a3becf9bb5d80eff7da7ba8b913c685fc6700848dc6665d73248c1f74e08ad04ce905faf32706e0000249a028044ede964362cfb2f30a246c3b2f60000fc4deb91da1368b0960b8d69bd99c64893d44f962524429dc0584b8e7e541c903869d96989b9a986620cb2c95c83f2a082c52764f49e51188f9418b01bcd8ae164acdac95318ec8b2c6feacdcf4b528e5e58219bc54f6ad5679e7f430e6960ed048c46e1dccca05bfa1d67c83795eae2d31968c055d325a9c794ef88b30c2de4a274878b73c05ffa88b7073be648b12bb1fee58958d6a6f31bfe568215dfbde59dad00008a73b40f09cf018cd496b36050d7fd45e3620c28f76749262e33e16429a6da35ceb1a989de81c3f8b8bc348ef2ac3781b847611fcb0a26acafdd6d9a1b17dcb9f7c493d8f8cd344a1d470ca0d6f16ab0293774b5509fb0e7113936d59d5a60dbd84a938476adeebab9ff44f531bb0200000000000000cc1fbc455a64fd449284f71761092a0302000000000000008a05d36fd9b814b4292745418c92d944763a4bf5e138d810e29a31f08f7dea7762d2d8f7e1d24cabe17ad4135d8872935ceac6eb4f046f2acc1b0efb4438abddcabb4e4e72a450aab72b589bec83bbb688e659fb426cd43d0ee993516fd4e867232cde69b6ffad447dcd92e0ef8234ff850ec3948dd1fa7afb77d951fe4abf618121b7894c106beb49a71c62df5544ef221973432ccc7e62b151eb898a01010a7ec5acd0a5dcb2de443880c8a682515d1da9a3048744acb44384d1591df789883c0560495cb0cb32283529926d25e5c7f481112ab8a82247e927fb6f256830dab3671f00500d36a17790bab7d0e89e6c15314f2b963bfc867953476b0505c7d728326d666f39e82cfcf7e7a85df288d75df24c5e4d529c349923f9a4fb882310391dd58b4cbd8def239a227724d39c3e6c40e20e07e68a2288ff000000000000002bcb37f302487bcbd93ccf3a104021ff34ddf7ffcca1a04eae963e25516a114573779b24a341dfb2e80f1f345c6d96493ffc2a18478b5bf3aab2ea59c51cf0678e1a57d0ea042d911548ff612002ddb2d54d42fbdde42b56887003d27468225b2594a05044baf314113e889468cf13dd92aa0d7744db6b56557a5adad95cb9a69d4de50642b4b9d6d3ba7eb534b00d0fea62f0a61535dfc4da06e7f8695be614c557caed7eb0160516e1351fed7d8ffa31c8f4be364185469cfc5f25c90d71bce745dd2d58a30e0844f12c4cbbdd7a08465e665c2620d78673dfb6d9263ed7def8924cfcd48a8a3534f1a3eac9ee9f18a18106ba3d7c7a62330f5c0e98cb7982dd7bad02c8dba9c13894185bfc4bd2520b6e2043fcb3fc5eb55ecf9e6e363ea2ac40a14a6f00f0ffffa0fdb6487c51ef12c2e88beeb5aa6f6a4151cfb90644e50630ed474df7d1635afcb1ea3f6c47b5acbba2ce5099a9387c7acb9bbd1da497613174f76a656ba5bacccbb58dddaf9a3510d65383829a51e0f41e661fa80ca1eaaa6cf0824305ba4ec80400c50ffe83ccb0e6fef321190c58aca8c7c8c6d26ff5cbc2cadebda8e1219e04f8dacffd33db1a0a2e74c9eb978d80a12d0b5327bfd053000000000000000000be0d02a14708504412fa93d335992b2983c5addc191b4a21c7b340d0536b01958e15315eb5f3f9f4992c18f666359f40295fa73284c4b607669bae75bd68c3e2b770c324a0ab26b6065d7e95a7bd80052db57506ec7cc861bf3998d07484c66630ca8173fea3f06ed1dfc70a8b90418e2dc76137e0f68cb1c8a908aef9f0f85647dba54e05028c33d94d463fb20d2e7547184b8d3611e45dff02144387f342ef9b9bf650e9d049bf65258a7bc094a6965e24611c077e1ca0891362a9d68f3ec7610c0449acf18459500f024f9b75885cd79ba32776e4a511c8a4ad922b000000000002ef507ec6fc7f5dc431b9d8cbd9003972bf1dc6a71bedad8e19efc3edd2a7a7e555d5f3176af69920471e6e5bcb8966c813c132d65e2b99d3015e06b372e1aefaae14ee3fbc6349af362c19b59c214de66912d1a9a98d92dc197a51c29443de62caca334c46d110e50896fe50d0477771d387f40c8ef05750ca651e6e69a237dcf78666d6ab2bda1f853525494e4efdd93be38bb5fc671f8794002d7a951fd336aaf4ed1166cb459df70218c571ba1c40b028234505e5477e268326af8812c2fbb8785a223fce0a0601c2a3b58bea8c6216eadabcabe86ab46e4cd3d58ef7ce8d3c4b0bc5952e81dfc0a490d8568db6f9c51fe703c6864fae0053d2f91f49e977cdc1962dbc28c29471a72199862bc8fc6e211d13d8579cab4fba94b2b613c9b8148d05e0690a4c4ab35aabc45801d2b82081e62b23a01b58b1ffb624f63ad2246796796160cd3682374364edac52f1becb7c6eff50823b75fb2ef516ec4ec1cb20a2535b504502d744f2099674e58f2c117c980cf0d041c8ea5c4f166bab4aa5ed200ef4dcff96f7c9c1ab8c22db0f439b23b04bcd41ffc3a0e01976ca1cf43e12d7d72f3faa4979faabd62e2dc54a980eae4d5e8c6498de331c3aba1144ef1190ea6cda641d9416c4560cab2d819eac7b04c70f141754c3ffd79da363fe8859afee531710caf1b2bf5a51142f4755cbb700c28083525a9093790096cb93417f1216000000000000000000000000000040ceb244e4cae2b65a76d41793aabccd3d0c50486eae6793e1f54814a8ee2779c14ca94759266200229b58c12279817869e831cade7b09ddffffff9d93e2ad25eed43c0b9ee4fd209b5b919a42f676b9d7236fc8dd5040899d0676291407ce9ac8101dd3512f5b3ac8cf8179d1749de324000030d0f942ec4604c28d5c287d1435956784003a53eb5fe535ead88d7acf0166dbd9f30a9b9c8a9b9faf1356faf269cded935b07863e4fdad8aab52686c81babd1c08f6700a2fadd413443022ea5c774ffefdd426abed08d437a4db48611fc82a18ab9f54758a1aad86d95cd186ceb55fafa3930090467b8b7bb8ae7e1c8b4b4106a381cb67fdb86def4de2076dc538bb97502b4b4350e633dc0a53c2fc9a01bc5cfae0245f1fab843c633446f5f3a43226109b7dafe7815773bd6969f04cbe15236b90000000000000000000000000000000000000000000000000000ff0779b9c005da21073c6d9680d4e547cb727addb2efe11b8b3a706569f1522b57d71bb0beccab7c8fe9e1330b2f501b2ac3cf4eba7ceda6ff8a0c8b18c5e9e2f505e833217557abb257d61a73a758543651b250f8d8ef9c8481bb28a137d15040b0181c28dfad7c17b30c452a64c43a117cb948247c33abc765a6ba695c3cea5e32a4d1ae2dcbec2ff4268e03aad15efc6004e6b3d7f0edf8b5d4ae7846a6d43c16c90b7c5dc13ac2ff0439ab693498964cad2bb533bcd240778b7e49145c48efde42b44c01517f1a7c7707b4c4fc0900e7086ec40354504590696282286db9030f0320e2fcba8723939005347b3c99e3f1310d41ab328c1f351b3f744ff1973431000000000000000000000000000000000000003495d69aaf9a1d83e83511a3bf44fe753b8ad83bc34ea4d46b397e000fd267c50122aa5aaf8474ec2e57d960d963900bef84a4b3c7dd01ae4d6b5522aa8a35ae7996e298bcfe3f31a34e3e12c58cf172a4d3677a67b52041ec21ae8003aa1c9969178b1b00e4d12ac9741fd788fb6260ec043c013907523c77f8acc20b9e2fd224ca8f21fab2b10991881e0a12f4e1c4f54b9ca7c9a0c8298d60b8b6eaa023418992d6d62b0e9faca4a3b3a845e859137cd933ef5eb8db16f159f32505725da51414562d064b551246dacd586f42d04d3fed3c087bb52ae4bc09f3846c785d1b278e661ed01fbc2415288bc9c808c4aef648d431b3029da0dec8886c3ee9cad996843d00a3b5eb54e270dd2e96c8f2fdb4c27c2d1bd467f2a14867dec67730d8a68329839d9feff688dfbe25c73f936338e7b057980dc58a6303d95f17712d667d5a1066ae457ae32925ce658b559c1182a74e267da57fe25b19153f1cdebaddf3f7a3479c09f2303dff449c0513b552a75ed48215cc31264a6ff648a95daa0d599dbce303b3b5307572df30429a3b4b115cab0a018f2501272048dd9e69877535e20078e7c28a98f26ace7a266bdc15ce904f25ec7fb2434ee7b5b69bed702ba1e7ed72942f452f1a98a2d949450091075efa823b11f5f5eccd921c04c7c15a5a05750cd85b1300fc00ce275de7559e117f87cb6c3c9a4b9f96149e3fcffa44d7000000000000000000d43d07d546acb7009c0c4f6e57b8577d2113bfca1939b9bf757265e175c1863a7c8d7640675830dc11d5d59546daf2385a7074f770c8333b21e2fb660141bc4f1ed45f703da6ac2557ab6952fd0c300000000000000000005b44bff4e3966fdfc9b720412bec09936b08e440c774e2224f2d338fab2acc5014f74e420988486de2ace27ce59379378ca34eeedbd9a323a889f295e5d3bae64fc48ba194fc70973b39525123668e6a0be1e732aa5e2a0d4373a0b76d84f018d45bdf6f12d6d5d23a0331c3ae5e99a2bcdb52386135ea15890007e1cba5e52a04971139272012ae5542ba109a9d2f49963a195e2fdffe6bdce6fa78ab2ded1ff74f9e54f1b82da2d444f9727be708710b90a872282f4dce55468a681e"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r7, 0x18000000000002a0, 0x204, 0x0, &(0x7f0000000040)="5aee41dea43e63a3f7fb7f11c72b", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000080), 0x21e, 0x40010002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xd0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@dioread_nolock}, {@data_err_abort}, {@inlinecrypt}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xa}}, {@data_err_ignore}, {@grpquota}, {@noblock_validity}, {@user_xattr}, {@bh}, {@errors_remount}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r8 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) pwritev2(r8, &(0x7f0000000100)=[{&(0x7f00000000c0)='`T', 0x2}], 0x1, 0x5401, 0x0, 0x0) 1.374145724s ago: executing program 6 (id=1623): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$selinux_member(0xffffffffffffff9c, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000005c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r2, 0xffffffffffffffff, 0x0) (fail_nth: 1) 56.941159ms ago: executing program 7 (id=1624): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) socket$inet6(0xa, 0x5, 0x8) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) socket$nl_xfrm(0x10, 0x3, 0x6) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r4}, 0x10) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x90}, 0x1, 0x7}, 0x0) chroot(&(0x7f0000000000)='./bus\x00') 0s ago: executing program 0 (id=1625): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001b00)=[{&(0x7f00000009c0)=""/239, 0xef}], 0x1, 0x2, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) fcntl$setpipe(r0, 0x407, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r1, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) sendto$inet(r1, &(0x7f0000000200)="e1", 0xfea8, 0x0, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0xfea8, 0xa) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x84, 0x84, 0x6, [@type_tag={0x2, 0x0, 0x0, 0x12, 0x4}, @enum={0x7, 0x6, 0x0, 0x6, 0x4, [{0x3, 0x15}, {0xb, 0x59b9d052}, {0x4, 0x5}, {0x1, 0x80000}, {0x7, 0x31}, {0xf, 0x7}]}, @union={0x1, 0x4, 0x0, 0x5, 0x1, 0x0, [{0xd, 0x3, 0x7}, {0x5, 0x4, 0x10000}, {0xf, 0x4, 0xcdb}, {0x8, 0x4}]}]}, {0x0, [0x5f, 0x30, 0x30, 0x0]}}, &(0x7f00000002c0)=""/226, 0xa2, 0xe2, 0x1, 0x0, 0x10000, @value=r0}, 0x28) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000240), 0x36, 0xcc800) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000c, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x20000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) syz_mount_image$ext4(&(0x7f0000000800)='ext4\x00', &(0x7f0000000540)='./bus\x00', 0x2040d0, &(0x7f0000000580), 0x1, 0x4b3, &(0x7f0000000840)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.events\x00', 0x275a, 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f0000001dc0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYBLOB=',group_id=', @ANYBLOB="32d0bf931ac1c11eeaaaa132f03b5df064eecba34daaa3ebf92fc0c7a2bcfbd1700618193d7882be95f946909c84a1ae7dd5769cd1e9ed7365d12dbc4e955283dc580c441e0393e88620dcbd1b3fa0afbcb08e7d561498aeb65b3db8d57b735b380c5a36f4498e0f7dd9c71f80a7f14d7bc5c5b6d9fed58a82fe795418e373729e690bfaf86c93360f0d3b4d8dd97d4171917b56cfff78e8f8764cf783cf564075d5e8"]) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0x800f00, &(0x7f0000000200)={[{@usrjquota}, {@nolazytime}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xffff}}, {@minixdf}, {@resgid}, {@grpquota}, {@usrjquota}, {@journal_dev={'journal_dev', 0x3d, 0xdcc}}]}, 0x3, 0x464, &(0x7f0000000880)="$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") syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x0, 0x96, 0xd1, 0xca}}]}}]}}, 0x0) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) kernel console output (not intermixed with test programs): 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 546.903851][ T5859] RSP: 002b:00007fa3eac34038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ad [ 546.912381][ T5859] RAX: ffffffffffffffda RBX: 00007fa3e9fb5fa0 RCX: 00007fa3e9d8e969 [ 546.920658][ T5859] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 0000000000000003 [ 546.928627][ T5859] RBP: 00007fa3eac34090 R08: 0000000000000000 R09: 0000000000000000 [ 546.936635][ T5859] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 546.944702][ T5859] R13: 0000000000000000 R14: 00007fa3e9fb5fa0 R15: 00007ffdbf30bd88 [ 546.952876][ T5859] [ 546.973404][ T1767] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 547.161293][ T5864] loop0: detected capacity change from 0 to 1024 [ 547.170504][ T5864] EXT4-fs: Ignoring removed bh option [ 547.207261][ T1767] usb 3-1: Using ep0 maxpacket: 16 [ 547.232284][ T1767] usb 3-1: config 0 has an invalid interface number: 251 but max is 0 [ 547.283845][ T5864] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 547.407059][ T1767] usb 3-1: config 0 has no interface number 0 [ 547.473498][ T1767] usb 3-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 547.614376][ T1767] usb 3-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 547.628663][ T1767] usb 3-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 547.657289][ T1767] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 547.665636][ T1767] usb 3-1: Product: syz [ 547.675745][ T1767] usb 3-1: Manufacturer: syz [ 547.685586][ T1767] usb 3-1: SerialNumber: syz [ 547.701603][ T1767] usb 3-1: config 0 descriptor?? [ 547.711006][ T5854] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 547.731215][ T5854] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 547.921486][ T282] EXT4-fs (loop0): unmounting filesystem. [ 547.967359][ T5854] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 547.977305][ T5854] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 547.993890][ T5869] bridge0: port 1(bridge_slave_0) entered blocking state [ 548.084195][ T5869] bridge0: port 1(bridge_slave_0) entered disabled state [ 548.118007][ T5869] device bridge_slave_0 entered promiscuous mode [ 548.155752][ T5869] bridge0: port 2(bridge_slave_1) entered blocking state [ 548.162894][ T5869] bridge0: port 2(bridge_slave_1) entered disabled state [ 548.170629][ T5869] device bridge_slave_1 entered promiscuous mode [ 548.178078][ T1417] device bridge_slave_1 left promiscuous mode [ 548.184418][ T1417] bridge0: port 2(bridge_slave_1) entered disabled state [ 548.193720][ T1417] device bridge_slave_0 left promiscuous mode [ 548.200162][ T1417] bridge0: port 1(bridge_slave_0) entered disabled state [ 548.213411][ T1417] device veth1_macvtap left promiscuous mode [ 548.220372][ T1417] device veth0_vlan left promiscuous mode [ 548.233239][ T5620] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 548.246516][ T5882] loop0: detected capacity change from 0 to 1024 [ 548.254117][ T5620] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 548.264580][ T5882] EXT4-fs: Ignoring removed nomblk_io_submit option [ 548.286941][ T5882] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 548.314471][ T5882] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 548.325703][ T5882] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 548.393944][ T1767] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 548.414934][ T1767] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -71 [ 548.427368][ T1767] asix: probe of 3-1:0.251 failed with error -71 [ 548.435799][ T5882] FAULT_INJECTION: forcing a failure. [ 548.435799][ T5882] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 548.449144][ T5882] CPU: 1 PID: 5882 Comm: syz.0.1426 Not tainted 6.1.138-syzkaller-00045-g9e207186c745 #0 [ 548.459007][ T5882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 548.469182][ T5882] Call Trace: [ 548.472550][ T5882] [ 548.475509][ T5882] __dump_stack+0x21/0x24 [ 548.479944][ T5882] dump_stack_lvl+0xee/0x150 [ 548.484547][ T5882] ? __cfi_dump_stack_lvl+0x8/0x8 [ 548.489578][ T5882] dump_stack+0x15/0x24 [ 548.493742][ T5882] should_fail_ex+0x3d4/0x520 [ 548.498422][ T5882] should_fail+0xb/0x10 [ 548.502674][ T5882] should_fail_usercopy+0x1a/0x20 [ 548.508372][ T5882] _copy_from_user+0x1e/0xc0 [ 548.513161][ T5882] iovec_from_user+0x1aa/0x2e0 [ 548.518023][ T5882] ? __kasan_check_write+0x14/0x20 [ 548.523252][ T5882] __import_iovec+0x71/0x470 [ 548.527847][ T5882] import_iovec+0x7c/0xb0 [ 548.532390][ T5882] do_preadv+0x1bd/0x330 [ 548.536672][ T5882] ? vfs_writev+0x590/0x590 [ 548.541547][ T5882] ? __kasan_check_write+0x14/0x20 [ 548.546687][ T5882] ? fput+0x154/0x1a0 [ 548.550682][ T5882] __x64_sys_preadv+0x9e/0xb0 [ 548.555373][ T5882] x64_sys_call+0x370/0x9a0 [ 548.559887][ T5882] do_syscall_64+0x4c/0xa0 [ 548.564324][ T5882] ? clear_bhb_loop+0x15/0x70 [ 548.569100][ T5882] ? clear_bhb_loop+0x15/0x70 [ 548.574041][ T5882] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 548.580031][ T5882] RIP: 0033:0x7fb0ce18e969 [ 548.584457][ T5882] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 548.604674][ T5882] RSP: 002b:00007fb0cefbc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 548.613727][ T5882] RAX: ffffffffffffffda RBX: 00007fb0ce3b5fa0 RCX: 00007fb0ce18e969 [ 548.622063][ T5882] RDX: 0000000000000001 RSI: 0000200000000380 RDI: 0000000000000005 [ 548.630105][ T5882] RBP: 00007fb0cefbc090 R08: 0000000000000002 R09: 0000000000000000 [ 548.638716][ T5882] R10: 0000000000000033 R11: 0000000000000246 R12: 0000000000000001 [ 548.647488][ T5882] R13: 0000000000000000 R14: 00007fb0ce3b5fa0 R15: 00007fffa03970a8 [ 548.655477][ T5882] [ 548.659340][ T5879] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1417'. [ 548.667888][ T1767] usb 3-1: USB disconnect, device number 26 [ 548.668815][ T5879] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1417'. [ 548.683465][ T5879] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1417'. [ 548.692710][ T5879] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1417'. [ 548.701712][ T5879] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1417'. [ 548.711026][ T5879] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1417'. [ 548.720010][ T5879] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1417'. [ 548.729569][ T5879] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1417'. [ 548.738667][ T5879] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1417'. [ 548.739184][ T282] EXT4-fs (loop0): unmounting filesystem. [ 548.749615][ T5879] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 548.762396][ T5879] bridge0: port 1(bridge_slave_0) entered blocking state [ 548.769568][ T5879] bridge0: port 1(bridge_slave_0) entered forwarding state [ 548.914444][ T5886] bridge0: port 1(bridge_slave_0) entered blocking state [ 548.922110][ T5886] bridge0: port 1(bridge_slave_0) entered disabled state [ 548.929956][ T5886] device bridge_slave_0 entered promiscuous mode [ 548.937389][ T5886] bridge0: port 2(bridge_slave_1) entered blocking state [ 548.944529][ T5886] bridge0: port 2(bridge_slave_1) entered disabled state [ 548.952590][ T5886] device bridge_slave_1 entered promiscuous mode [ 549.043248][ T5891] bridge: RTM_NEWNEIGH with invalid ether address [ 549.080688][ T1349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 549.100086][ T1349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 549.119980][ T1349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 549.138700][ T1349] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 549.148841][ T5899] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 549.157830][ T1349] bridge0: port 1(bridge_slave_0) entered blocking state [ 549.164894][ T1349] bridge0: port 1(bridge_slave_0) entered forwarding state [ 549.175553][ T1349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 549.185110][ T1349] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 549.193822][ T1349] bridge0: port 2(bridge_slave_1) entered blocking state [ 549.195949][ T5902] loop1: detected capacity change from 0 to 256 [ 549.200925][ T1349] bridge0: port 2(bridge_slave_1) entered forwarding state [ 549.219512][ T5902] FAT-fs (loop1): Unrecognized mount option "shor†name=mixed" or missing value [ 549.233471][ T1349] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 549.247812][ T1349] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 549.257779][ T1349] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 549.273205][ T5869] device veth0_vlan entered promiscuous mode [ 549.286466][ T1349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 549.297732][ T1349] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 549.305525][ T1349] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 549.313894][ T1349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 549.341201][ T1349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 549.358779][ T5869] device veth1_macvtap entered promiscuous mode [ 549.413756][ T3198] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 549.437994][ T3198] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 549.717304][ T3198] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 549.726243][ T3198] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 549.735452][ T3198] bridge0: port 1(bridge_slave_0) entered blocking state [ 549.742634][ T3198] bridge0: port 1(bridge_slave_0) entered forwarding state [ 549.753446][ T3198] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 549.765724][ T3198] bridge0: port 2(bridge_slave_1) entered blocking state [ 549.773050][ T3198] bridge0: port 2(bridge_slave_1) entered forwarding state [ 549.782871][ T3198] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 549.792976][ T3198] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 550.508178][ T5918] loop2: detected capacity change from 0 to 1024 [ 550.515143][ T5918] EXT4-fs: Ignoring removed bh option [ 550.540025][ T28] kauditd_printk_skb: 98 callbacks suppressed [ 550.540080][ T28] audit: type=1326 audit(1748315195.585:14137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5901 comm="syz.1.1430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f703778e969 code=0x7ffc0000 [ 550.673377][ T5916] bridge0: port 1(bridge_slave_0) entered disabled state [ 550.751390][ T5918] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 550.840742][ T3198] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 550.842442][ T28] audit: type=1326 audit(1748315195.585:14138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5901 comm="syz.1.1430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f703778e969 code=0x7ffc0000 [ 550.992862][ T286] EXT4-fs (loop2): unmounting filesystem. [ 551.007973][ T3198] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 551.066296][ T28] audit: type=1326 audit(1748315196.155:14139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5930 comm="syz.0.1437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0ce18e969 code=0x7ffc0000 [ 551.091765][ T28] audit: type=1326 audit(1748315196.185:14140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5930 comm="syz.0.1437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0ce18e969 code=0x7ffc0000 [ 551.131645][ T3198] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 551.142871][ T5931] loop0: detected capacity change from 0 to 256 [ 551.161826][ T5931] FAT-fs (loop0): Unrecognized mount option "shor†name=mixed" or missing value [ 551.177887][ T28] audit: type=1326 audit(1748315196.225:14141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5930 comm="syz.0.1437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb0ce18e969 code=0x7ffc0000 [ 551.180624][ T5886] device veth0_vlan entered promiscuous mode [ 551.201895][ T28] audit: type=1326 audit(1748315196.235:14142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5930 comm="syz.0.1437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0ce18e969 code=0x7ffc0000 [ 551.236486][ T1296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 551.246093][ T1296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 551.303227][ T1296] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 551.414107][ T1296] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 551.421782][ T5929] FAULT_INJECTION: forcing a failure. [ 551.421782][ T5929] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 551.434957][ T5929] CPU: 1 PID: 5929 Comm: syz.2.1436 Not tainted 6.1.138-syzkaller-00045-g9e207186c745 #0 [ 551.444782][ T5929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 551.454853][ T5929] Call Trace: [ 551.458145][ T5929] [ 551.461172][ T5929] __dump_stack+0x21/0x24 [ 551.465520][ T5929] dump_stack_lvl+0xee/0x150 [ 551.465570][ T304] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 551.470217][ T5929] ? __cfi_dump_stack_lvl+0x8/0x8 [ 551.470252][ T5929] dump_stack+0x15/0x24 [ 551.470276][ T5929] should_fail_ex+0x3d4/0x520 [ 551.470299][ T5929] should_fail+0xb/0x10 [ 551.470319][ T5929] should_fail_usercopy+0x1a/0x20 [ 551.470342][ T5929] _copy_from_user+0x1e/0xc0 [ 551.470361][ T5929] __sys_bpf+0x277/0x780 [ 551.480008][ T28] audit: type=1326 audit(1748315196.235:14143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5930 comm="syz.0.1437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb0ce18e969 code=0x7ffc0000 [ 551.483119][ T5929] ? bpf_link_show_fdinfo+0x320/0x320 [ 551.483162][ T5929] ? __cfi_ksys_write+0x10/0x10 [ 551.488380][ T28] audit: type=1326 audit(1748315196.235:14144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5930 comm="syz.0.1437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0ce18e969 code=0x7ffc0000 [ 551.491980][ T5929] ? debug_smp_processor_id+0x17/0x20 [ 551.492013][ T5929] __x64_sys_bpf+0x7c/0x90 [ 551.496268][ T28] audit: type=1326 audit(1748315196.235:14145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5930 comm="syz.0.1437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fb0ce18e969 code=0x7ffc0000 [ 551.501228][ T5929] x64_sys_call+0x488/0x9a0 [ 551.501256][ T5929] do_syscall_64+0x4c/0xa0 [ 551.506564][ T28] audit: type=1326 audit(1748315196.235:14146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5930 comm="syz.0.1437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fb0ce18e9a3 code=0x7ffc0000 [ 551.510154][ T5929] ? clear_bhb_loop+0x15/0x70 [ 551.510181][ T5929] ? clear_bhb_loop+0x15/0x70 [ 551.647919][ T5929] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 551.653825][ T5929] RIP: 0033:0x7f8a9d58e969 [ 551.658242][ T5929] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 551.677851][ T5929] RSP: 002b:00007f8a9e31a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 551.686292][ T5929] RAX: ffffffffffffffda RBX: 00007f8a9d7b5fa0 RCX: 00007f8a9d58e969 [ 551.694549][ T5929] RDX: 0000000000000070 RSI: 0000200000000440 RDI: 0000000000000005 [ 551.702709][ T5929] RBP: 00007f8a9e31a090 R08: 0000000000000000 R09: 0000000000000000 [ 551.711021][ T5929] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 551.719890][ T5929] R13: 0000000000000000 R14: 00007f8a9d7b5fa0 R15: 00007ffd279ec0c8 [ 551.728242][ T5929] [ 551.743832][ T5886] device veth1_macvtap entered promiscuous mode [ 551.751982][ T1296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 551.760356][ T304] usb 2-1: Using ep0 maxpacket: 16 [ 551.767094][ T304] usb 2-1: config index 0 descriptor too short (expected 30768, got 72) [ 551.776688][ T1296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 551.785685][ T304] usb 2-1: config 48 has too many interfaces: 48, using maximum allowed: 32 [ 551.795354][ T1296] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 551.803430][ T304] usb 2-1: config 48 has an invalid descriptor of length 0, skipping remainder of the config [ 551.824306][ T1296] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 551.834376][ T304] usb 2-1: config 48 has 0 interfaces, different from the descriptor's value: 48 [ 551.844883][ T1296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 551.856052][ T1296] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 551.870315][ T304] usb 2-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 551.942367][ T1296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 551.951229][ T304] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 551.964440][ T304] usb 2-1: Product: syz [ 551.969404][ T304] usb 2-1: Manufacturer: syz [ 551.974279][ T304] usb 2-1: SerialNumber: syz [ 552.008431][ T1417] device bridge_slave_1 left promiscuous mode [ 552.013205][ T539] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 552.015738][ T1417] bridge0: port 2(bridge_slave_1) entered disabled state [ 552.028742][ T5946] loop7: detected capacity change from 0 to 1024 [ 552.036460][ T539] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz1] on syz0 [ 552.046752][ T1417] device bridge_slave_0 left promiscuous mode [ 552.049048][ T5946] EXT4-fs: Ignoring removed nomblk_io_submit option [ 552.058938][ T1417] bridge0: port 1(bridge_slave_0) entered disabled state [ 552.070653][ T1417] device veth1_macvtap left promiscuous mode [ 552.083568][ T1417] device veth0_vlan left promiscuous mode [ 552.097159][ T5946] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 552.117242][ T5946] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 552.148587][ T5946] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 552.295721][ T5954] FAULT_INJECTION: forcing a failure. [ 552.295721][ T5954] name failslab, interval 1, probability 0, space 0, times 0 [ 552.312986][ T5954] CPU: 0 PID: 5954 Comm: syz.0.1442 Not tainted 6.1.138-syzkaller-00045-g9e207186c745 #0 [ 552.322935][ T5954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 552.333426][ T5954] Call Trace: [ 552.336887][ T5954] [ 552.340093][ T5954] __dump_stack+0x21/0x24 [ 552.344538][ T5954] dump_stack_lvl+0xee/0x150 [ 552.349143][ T5954] ? __cfi_dump_stack_lvl+0x8/0x8 [ 552.354475][ T5954] dump_stack+0x15/0x24 [ 552.358677][ T5954] should_fail_ex+0x3d4/0x520 [ 552.363451][ T5954] __should_failslab+0xac/0xf0 [ 552.368298][ T5954] ? kvmalloc_node+0x294/0x480 [ 552.373141][ T5954] should_failslab+0x9/0x20 [ 552.377750][ T5954] __kmem_cache_alloc_node+0x3d/0x2c0 [ 552.383470][ T5954] ? kvmalloc_node+0x294/0x480 [ 552.388288][ T5954] __kmalloc_node+0xa1/0x1e0 [ 552.392913][ T5954] ? timer_update_keys+0xb0/0xb0 [ 552.397887][ T5954] kvmalloc_node+0x294/0x480 [ 552.402702][ T5954] ? __kasan_check_write+0x14/0x20 [ 552.408207][ T5954] ? __cfi_kvmalloc_node+0x10/0x10 [ 552.413592][ T5954] ? __kasan_check_write+0x14/0x20 [ 552.418836][ T5954] ? enqueue_timer+0x1b6/0x480 [ 552.423630][ T5954] __kvm_mmu_topup_memory_cache+0x35e/0x500 [ 552.429568][ T5954] ? __kasan_check_write+0x14/0x20 [ 552.434711][ T5954] ? mutex_unlock+0x89/0x220 [ 552.439342][ T5954] kvm_mmu_topup_memory_cache+0x20/0x30 [ 552.445012][ T5954] kvm_mmu_load+0x9c/0x25a0 [ 552.449517][ T5954] ? kvm_hv_setup_tsc_page+0x5ea/0xa70 [ 552.455021][ T5954] ? queue_delayed_work_on+0x101/0x150 [ 552.460838][ T5954] ? kvm_apic_has_interrupt+0x78f/0x7a0 [ 552.466508][ T5954] vcpu_enter_guest+0x4958/0x6be0 [ 552.471621][ T5954] ? __kasan_check_write+0x14/0x20 [ 552.476745][ T5954] ? pvclock_gtod_update_fn+0x270/0x270 [ 552.482400][ T5954] ? 0xffffffffa0000710 [ 552.486567][ T5954] ? is_bpf_text_address+0x177/0x190 [ 552.492017][ T5954] ? kernel_text_address+0xa0/0xd0 [ 552.497137][ T5954] ? __kernel_text_address+0xd/0x30 [ 552.502350][ T5954] ? unwind_get_return_address+0x4d/0x90 [ 552.508070][ T5954] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 552.514244][ T5954] ? arch_stack_walk+0xfc/0x150 [ 552.529014][ T5954] ? vmx_vcpu_pi_load+0x12d/0x810 [ 552.534135][ T5954] ? stack_trace_save+0x98/0xe0 [ 552.539033][ T5954] ? __cfi_vmx_vcpu_pi_load+0x10/0x10 [ 552.544618][ T5954] ? __stack_depot_save+0x36/0x480 [ 552.549841][ T5954] ? _parse_integer_limit+0x18a/0x1d0 [ 552.555263][ T5954] ? do_vfs_ioctl+0xc36/0x1c80 [ 552.560126][ T5954] ? __this_cpu_preempt_check+0x13/0x20 [ 552.565874][ T5954] ? xfd_validate_state+0x70/0x150 [ 552.570990][ T5954] ? __local_bh_enable_ip+0x58/0x80 [ 552.576365][ T5954] ? fpu_swap_kvm_fpstate+0x4ef/0x5d0 [ 552.581926][ T5954] ? fpu_swap_kvm_fpstate+0x81/0x5d0 [ 552.587223][ T5954] kvm_arch_vcpu_ioctl_run+0xec4/0x1fa0 [ 552.592788][ T5954] kvm_vcpu_ioctl+0x882/0xb70 [ 552.597475][ T5954] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 552.602854][ T5954] ? selinux_file_ioctl+0x377/0x480 [ 552.608412][ T5954] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 552.613962][ T5954] ? mutex_unlock+0x89/0x220 [ 552.618601][ T5954] ? __cfi_mutex_unlock+0x10/0x10 [ 552.623811][ T5954] ? __fget_files+0x2d5/0x330 [ 552.628597][ T5954] ? security_file_ioctl+0x95/0xc0 [ 552.633918][ T5954] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 552.639229][ T5954] __se_sys_ioctl+0x12f/0x1b0 [ 552.644020][ T5954] __x64_sys_ioctl+0x7b/0x90 [ 552.648709][ T5954] x64_sys_call+0x58b/0x9a0 [ 552.653402][ T5954] do_syscall_64+0x4c/0xa0 [ 552.657900][ T5954] ? clear_bhb_loop+0x15/0x70 [ 552.662778][ T5954] ? clear_bhb_loop+0x15/0x70 [ 552.667473][ T5954] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 552.673389][ T5954] RIP: 0033:0x7fb0ce18e969 [ 552.677812][ T5954] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 552.697425][ T5954] RSP: 002b:00007fb0cefbc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 552.705934][ T5954] RAX: ffffffffffffffda RBX: 00007fb0ce3b5fa0 RCX: 00007fb0ce18e969 [ 552.714058][ T5954] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 552.722345][ T5954] RBP: 00007fb0cefbc090 R08: 0000000000000000 R09: 0000000000000000 [ 552.730479][ T5954] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 552.738552][ T5954] R13: 0000000000000000 R14: 00007fb0ce3b5fa0 R15: 00007fffa03970a8 [ 552.746534][ T5954] [ 552.780741][ T5886] EXT4-fs (loop7): unmounting filesystem. [ 552.962181][ T5962] loop2: detected capacity change from 0 to 256 [ 553.003952][ T5962] FAT-fs (loop2): Unrecognized mount option "shor†name=mixed" or missing value [ 553.074527][ T5959] device wireguard0 entered promiscuous mode [ 553.080678][ T5959] IPv6: ADDRCONF(NETDEV_CHANGE): wireguard0: link becomes ready [ 553.225746][ T5970] loop0: detected capacity change from 0 to 256 [ 553.235873][ T5970] FAT-fs (loop0): Unrecognized mount option "shor†name=mixed" or missing value [ 555.340807][ T5976] loop6: detected capacity change from 0 to 1024 [ 555.348655][ T5976] EXT4-fs: Ignoring removed bh option [ 556.387733][ T28] kauditd_printk_skb: 144 callbacks suppressed [ 556.387876][ T28] audit: type=1326 audit(1748315198.415:14291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5969 comm="syz.0.1446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0ce18e969 code=0x7ffc0000 [ 556.528128][ T304] usb 2-1: USB disconnect, device number 24 [ 556.583407][ T5980] loop1: detected capacity change from 0 to 1024 [ 556.595886][ T5983] FAULT_INJECTION: forcing a failure. [ 556.595886][ T5983] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 556.612508][ T5980] EXT4-fs: Ignoring removed i_version option [ 556.618998][ T2646] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 556.629578][ T5983] CPU: 0 PID: 5983 Comm: syz.7.1449 Not tainted 6.1.138-syzkaller-00045-g9e207186c745 #0 [ 556.641464][ T5983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 556.656159][ T5983] Call Trace: [ 556.659546][ T5983] [ 556.662596][ T5983] __dump_stack+0x21/0x24 [ 556.666960][ T5983] dump_stack_lvl+0xee/0x150 [ 556.671579][ T5983] ? __cfi_dump_stack_lvl+0x8/0x8 [ 556.676633][ T5983] dump_stack+0x15/0x24 [ 556.680891][ T5983] should_fail_ex+0x3d4/0x520 [ 556.685586][ T5983] should_fail+0xb/0x10 [ 556.689924][ T5983] should_fail_usercopy+0x1a/0x20 [ 556.694961][ T5983] _copy_from_user+0x1e/0xc0 [ 556.699938][ T5983] __sys_sendto+0x2c0/0x5e0 [ 556.704543][ T5983] ? slab_free_freelist_hook+0xc2/0x190 [ 556.710315][ T5983] ? __cfi___sys_sendto+0x10/0x10 [ 556.715457][ T5983] ? ksys_write+0x1eb/0x240 [ 556.720226][ T5983] ? __cfi_ksys_write+0x10/0x10 [ 556.725089][ T5983] __x64_sys_sendto+0xe5/0x100 [ 556.730045][ T5983] x64_sys_call+0x83/0x9a0 [ 556.735363][ T5983] do_syscall_64+0x4c/0xa0 [ 556.739803][ T5983] ? clear_bhb_loop+0x15/0x70 [ 556.744483][ T5983] ? clear_bhb_loop+0x15/0x70 [ 556.749508][ T5983] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 556.755667][ T5983] RIP: 0033:0x7f940398e969 [ 556.760078][ T5983] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 556.779953][ T5983] RSP: 002b:00007f9404836038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 556.788453][ T5983] RAX: ffffffffffffffda RBX: 00007f9403bb5fa0 RCX: 00007f940398e969 [ 556.797038][ T5983] RDX: 000000000000e90c RSI: 00002000000000c0 RDI: 0000000000000006 [ 556.805187][ T5983] RBP: 00007f9404836090 R08: 0000200000000540 R09: 0000000000000014 [ 556.813261][ T5983] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 556.821241][ T5983] R13: 0000000000000000 R14: 00007f9403bb5fa0 R15: 00007ffd0d947578 [ 556.829403][ T5983] [ 556.832635][ T5980] EXT4-fs (loop1): Test dummy encryption mode enabled [ 556.863189][ T5976] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 556.885644][ T28] audit: type=1326 audit(1748315198.415:14292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5969 comm="syz.0.1446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0ce18e969 code=0x7ffc0000 [ 556.910715][ T28] audit: type=1326 audit(1748315198.415:14293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5961 comm="syz.2.1444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f8a9d58e969 code=0x7ffc0000 [ 556.942832][ T28] audit: type=1326 audit(1748315198.545:14294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5961 comm="syz.2.1444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a9d58e969 code=0x7ffc0000 [ 556.967761][ T5980] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 556.977779][ T28] audit: type=1326 audit(1748315198.545:14295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5961 comm="syz.2.1444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a9d58e969 code=0x7ffc0000 [ 557.003583][ T28] audit: type=1326 audit(1748315198.545:14296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5969 comm="syz.0.1446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fb0ce18e969 code=0x7ffc0000 [ 557.044421][ T28] audit: type=1326 audit(1748315198.545:14297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5969 comm="syz.0.1446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0ce18e969 code=0x7ffc0000 [ 557.070608][ T28] audit: type=1326 audit(1748315198.545:14298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5969 comm="syz.0.1446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0ce18e969 code=0x7ffc0000 [ 557.070750][ T5869] EXT4-fs (loop6): unmounting filesystem. [ 557.095388][ T28] audit: type=1326 audit(1748315198.545:14299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5969 comm="syz.0.1446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fb0ce18e969 code=0x7ffc0000 [ 557.106060][ T5999] FAULT_INJECTION: forcing a failure. [ 557.106060][ T5999] name failslab, interval 1, probability 0, space 0, times 0 [ 557.138388][ T5999] CPU: 0 PID: 5999 Comm: syz.0.1454 Not tainted 6.1.138-syzkaller-00045-g9e207186c745 #0 [ 557.148234][ T5999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 557.157282][ T28] audit: type=1326 audit(1748315198.545:14300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5969 comm="syz.0.1446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0ce18e969 code=0x7ffc0000 [ 557.158572][ T5999] Call Trace: [ 557.158619][ T5999] [ 557.188474][ T5999] __dump_stack+0x21/0x24 [ 557.192834][ T5999] dump_stack_lvl+0xee/0x150 [ 557.197465][ T5999] ? __cfi_dump_stack_lvl+0x8/0x8 [ 557.202609][ T5999] ? avc_has_perm+0x158/0x240 [ 557.207956][ T5999] dump_stack+0x15/0x24 [ 557.212238][ T5999] should_fail_ex+0x3d4/0x520 [ 557.216957][ T5999] __should_failslab+0xac/0xf0 [ 557.222289][ T5999] ? p9_client_getattr_dotl+0x5a/0x280 [ 557.227938][ T5999] should_failslab+0x9/0x20 [ 557.232475][ T5999] __kmem_cache_alloc_node+0x3d/0x2c0 [ 557.237881][ T5999] ? p9_client_getattr_dotl+0x5a/0x280 [ 557.243581][ T5999] kmalloc_trace+0x29/0xb0 [ 557.248032][ T5999] p9_client_getattr_dotl+0x5a/0x280 [ 557.253706][ T5999] v9fs_vfs_getattr_dotl+0x117/0x2b0 [ 557.258090][ T5980] bridge0: port 3(vlan2) entered blocking state [ 557.259286][ T5999] ? __cfi_v9fs_vfs_getattr_dotl+0x10/0x10 [ 557.266149][ T5980] bridge0: port 3(vlan2) entered disabled state [ 557.271958][ T5999] vfs_fstat+0x2ea/0x3a0 [ 557.272000][ T5999] __se_sys_newfstat+0xb6/0x330 [ 557.272019][ T5999] ? __x64_sys_newfstat+0x70/0x70 [ 557.272037][ T5999] ? __cfi_bpf_trace_printk+0x10/0x10 [ 557.298537][ T5999] ? __cfi_vfs_write+0x10/0x10 [ 557.303421][ T5999] ? __kasan_check_write+0x14/0x20 [ 557.308559][ T5999] ? mutex_unlock+0x89/0x220 [ 557.313324][ T5999] ? prandom_u32_state+0x1d/0x170 [ 557.318463][ T5999] ? __cfi_ksys_write+0x10/0x10 [ 557.323497][ T5999] ? __bpf_trace_sys_enter+0x62/0x70 [ 557.329416][ T5999] __x64_sys_newfstat+0x5b/0x70 [ 557.334361][ T5999] x64_sys_call+0x140/0x9a0 [ 557.338977][ T5999] do_syscall_64+0x4c/0xa0 [ 557.344043][ T5999] ? clear_bhb_loop+0x15/0x70 [ 557.349344][ T5999] ? clear_bhb_loop+0x15/0x70 [ 557.354042][ T5999] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 557.359940][ T5999] RIP: 0033:0x7fb0ce18e969 [ 557.364536][ T5999] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 557.384313][ T5999] RSP: 002b:00007fb0cefbc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000005 [ 557.393174][ T5999] RAX: ffffffffffffffda RBX: 00007fb0ce3b5fa0 RCX: 00007fb0ce18e969 [ 557.401509][ T5999] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 557.410032][ T5999] RBP: 00007fb0cefbc090 R08: 0000000000000000 R09: 0000000000000000 [ 557.418367][ T5999] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 557.426817][ T5999] R13: 0000000000000000 R14: 00007fb0ce3b5fa0 R15: 00007fffa03970a8 [ 557.435067][ T5999] [ 557.440374][ T4788] usb 3-1: new full-speed USB device number 27 using dummy_hcd [ 557.516142][ T6009] loop6: detected capacity change from 0 to 256 [ 557.527589][ T6009] FAT-fs (loop6): Unrecognized mount option "shor†name=mixed" or missing value [ 557.651188][ T283] EXT4-fs (loop1): unmounting filesystem. [ 557.657398][ T4788] usb 3-1: config index 0 descriptor too short (expected 8192, got 27) [ 557.659428][ T6011] __nla_validate_parse: 96 callbacks suppressed [ 557.659524][ T6011] netlink: 136 bytes leftover after parsing attributes in process `syz.7.1453'. [ 557.665861][ T4788] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 558.853513][ T6010] loop0: detected capacity change from 0 to 512 [ 558.860519][ T4788] usb 3-1: config 0 has no interfaces? [ 558.866039][ T4788] usb 3-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 558.875511][ T4788] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 559.071180][ T6010] EXT4-fs error (device loop0): ext4_orphan_get:1400: inode #15: comm syz.0.1457: casefold flag without casefold feature [ 559.084268][ T6010] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.1457: couldn't read orphan inode 15 (err -117) [ 559.096977][ T6010] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 559.112010][ T4788] usb 3-1: config 0 descriptor?? [ 559.166781][ T6021] device pim6reg1 entered promiscuous mode [ 559.289743][ T282] EXT4-fs (loop0): unmounting filesystem. [ 559.350401][ T5988] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1450'. [ 559.357080][ T1767] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 559.370468][ T5988] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1450'. [ 559.389786][ T2646] usb 3-1: USB disconnect, device number 27 [ 559.401815][ T6030] loop0: detected capacity change from 0 to 1024 [ 559.409283][ T6030] EXT4-fs: Ignoring removed nomblk_io_submit option [ 559.416455][ T6030] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 559.428682][ T6030] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 559.433840][ T1767] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz1] on syz0 [ 559.459558][ T4788] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 559.493522][ T6030] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 559.575494][ T6037] tmpfs: Bad value for 'nr_blocks' [ 559.806384][ T6035] netlink: 96 bytes leftover after parsing attributes in process `syz.6.1461'. [ 559.839799][ T6035] loop6: detected capacity change from 0 to 512 [ 559.865182][ T6035] EXT4-fs error (device loop6): ext4_orphan_get:1400: inode #15: comm syz.6.1461: casefold flag without casefold feature [ 559.887904][ T6035] EXT4-fs error (device loop6): ext4_orphan_get:1405: comm syz.6.1461: couldn't read orphan inode 15 (err -117) [ 559.918712][ T4788] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 559.927322][ T6035] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 559.934051][ T4788] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 559.975907][ T4788] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 559.993502][ T4788] usb 2-1: config 0 interface 0 has no altsetting 0 [ 560.005995][ T4788] usb 2-1: New USB device found, idVendor=0458, idProduct=5015, bcdDevice= 0.00 [ 560.030590][ T4788] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 560.050405][ T4788] usb 2-1: config 0 descriptor?? [ 560.151303][ T282] EXT4-fs (loop0): unmounting filesystem. [ 560.227814][ T6042] FAULT_INJECTION: forcing a failure. [ 560.227814][ T6042] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 560.258677][ T6022] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 560.278122][ T6042] CPU: 0 PID: 6042 Comm: syz.2.1466 Not tainted 6.1.138-syzkaller-00045-g9e207186c745 #0 [ 560.288329][ T6042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 560.298417][ T6042] Call Trace: [ 560.301708][ T6042] [ 560.304648][ T6042] __dump_stack+0x21/0x24 [ 560.309008][ T6042] dump_stack_lvl+0xee/0x150 [ 560.313656][ T6042] ? __cfi_dump_stack_lvl+0x8/0x8 [ 560.318804][ T6042] dump_stack+0x15/0x24 [ 560.323166][ T6042] should_fail_ex+0x3d4/0x520 [ 560.328048][ T6042] should_fail+0xb/0x10 [ 560.332219][ T6042] should_fail_usercopy+0x1a/0x20 [ 560.337358][ T6042] _copy_from_user+0x1e/0xc0 [ 560.342050][ T6042] __sys_bpf+0x277/0x780 [ 560.346330][ T6042] ? bpf_link_show_fdinfo+0x320/0x320 [ 560.351921][ T6042] ? __cfi_ksys_write+0x10/0x10 [ 560.356812][ T6042] ? debug_smp_processor_id+0x17/0x20 [ 560.362214][ T6042] __x64_sys_bpf+0x7c/0x90 [ 560.366758][ T6042] x64_sys_call+0x488/0x9a0 [ 560.371312][ T6042] do_syscall_64+0x4c/0xa0 [ 560.375762][ T6042] ? clear_bhb_loop+0x15/0x70 [ 560.377411][ T6022] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 560.380448][ T6042] ? clear_bhb_loop+0x15/0x70 [ 560.393238][ T6042] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 560.399172][ T6042] RIP: 0033:0x7f8a9d58e969 [ 560.403615][ T6042] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 560.423871][ T6042] RSP: 002b:00007f8a9e31a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 560.432485][ T6042] RAX: ffffffffffffffda RBX: 00007f8a9d7b5fa0 RCX: 00007f8a9d58e969 [ 560.440522][ T6042] RDX: 0000000000000020 RSI: 0000200000000340 RDI: 0000000000000003 [ 560.448516][ T6042] RBP: 00007f8a9e31a090 R08: 0000000000000000 R09: 0000000000000000 [ 560.456510][ T6042] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 560.464627][ T6042] R13: 0000000000000000 R14: 00007f8a9d7b5fa0 R15: 00007ffd279ec0c8 [ 560.472793][ T6042] [ 560.532753][ T6049] syz.1.1459[6049] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 560.532850][ T6049] syz.1.1459[6049] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 560.547520][ T6049] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1459'. [ 561.028308][ T6057] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1468'. [ 561.660374][ T6052] loop0: detected capacity change from 0 to 1024 [ 561.675864][ T6052] EXT4-fs: Ignoring removed bh option [ 561.706877][ T6054] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 561.716789][ T6054] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 561.762811][ T6054] syz.7.1468 (6054) used greatest stack depth: 20032 bytes left [ 561.951165][ T6052] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 562.049087][ T28] kauditd_printk_skb: 192 callbacks suppressed [ 562.049114][ T28] audit: type=1326 audit(1748315207.135:14493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6059 comm="syz.2.1469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a9d58e969 code=0x7ffc0000 [ 562.220752][ T6061] loop2: detected capacity change from 0 to 256 [ 562.259440][ T6061] FAT-fs (loop2): Unrecognized mount option "shor†name=mixed" or missing value [ 562.290945][ T28] audit: type=1326 audit(1748315207.305:14494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6059 comm="syz.2.1469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8a9d58e969 code=0x7ffc0000 [ 562.341809][ T28] audit: type=1326 audit(1748315207.315:14495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6059 comm="syz.2.1469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a9d58e969 code=0x7ffc0000 [ 562.609735][ T282] EXT4-fs (loop0): unmounting filesystem. [ 562.957234][ T28] audit: type=1326 audit(1748315207.315:14496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6059 comm="syz.2.1469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a9d58e969 code=0x7ffc0000 [ 563.027578][ T4788] usbhid 2-1:0.0: can't add hid device: -71 [ 563.033774][ T4788] usbhid: probe of 2-1:0.0 failed with error -71 [ 563.046208][ T4788] usb 2-1: USB disconnect, device number 25 [ 563.053411][ T28] audit: type=1326 audit(1748315207.315:14497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6059 comm="syz.2.1469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8a9d58e969 code=0x7ffc0000 [ 563.064760][ T6068] loop0: detected capacity change from 0 to 256 [ 563.081706][ T28] audit: type=1326 audit(1748315207.315:14498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6059 comm="syz.2.1469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a9d58e969 code=0x7ffc0000 [ 563.108597][ T6068] FAT-fs (loop0): Unrecognized mount option "shor†name=mixed" or missing value [ 563.118393][ T28] audit: type=1326 audit(1748315207.315:14499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6059 comm="syz.2.1469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a9d58e969 code=0x7ffc0000 [ 563.142226][ T28] audit: type=1326 audit(1748315207.315:14500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6059 comm="syz.2.1469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f8a9d58e969 code=0x7ffc0000 [ 563.166327][ T28] audit: type=1326 audit(1748315207.315:14501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6059 comm="syz.2.1469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f8a9d58e9a3 code=0x7ffc0000 [ 563.190264][ T28] audit: type=1326 audit(1748315207.315:14502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6059 comm="syz.2.1469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f8a9d58d41f code=0x7ffc0000 [ 563.328577][ T6076] IPv6: syztnl0: Disabled Multicast RS [ 563.377568][ T6074] FAULT_INJECTION: forcing a failure. [ 563.377568][ T6074] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 563.433011][ T6074] CPU: 1 PID: 6074 Comm: syz.2.1473 Not tainted 6.1.138-syzkaller-00045-g9e207186c745 #0 [ 563.442879][ T6074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 563.452945][ T6074] Call Trace: [ 563.456241][ T6074] [ 563.459277][ T6074] __dump_stack+0x21/0x24 [ 563.463725][ T6074] dump_stack_lvl+0xee/0x150 [ 563.468430][ T6074] ? __cfi_dump_stack_lvl+0x8/0x8 [ 563.473491][ T6074] dump_stack+0x15/0x24 [ 563.477669][ T6074] should_fail_ex+0x3d4/0x520 [ 563.482365][ T6074] should_fail+0xb/0x10 [ 563.486533][ T6074] should_fail_usercopy+0x1a/0x20 [ 563.491659][ T6074] copy_fpstate_to_sigframe+0x849/0xaa0 [ 563.497401][ T6074] ? copy_fpstate_to_sigframe+0x17c/0xaa0 [ 563.503145][ T6074] ? __cfi_copy_fpstate_to_sigframe+0x10/0x10 [ 563.509339][ T6074] ? get_signal+0x124b/0x1520 [ 563.514134][ T6074] ? fpu__alloc_mathframe+0xb3/0x130 [ 563.519455][ T6074] arch_do_signal_or_restart+0x5bd/0x1030 [ 563.525282][ T6074] ? __this_cpu_preempt_check+0x13/0x20 [ 563.531021][ T6074] ? _raw_spin_unlock+0x4c/0x70 [ 563.535898][ T6074] ? finish_task_switch+0x16b/0x7b0 [ 563.541120][ T6074] ? __switch_to_asm+0x3a/0x60 [ 563.545903][ T6074] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 563.552271][ T6074] ? __cfi_ksys_write+0x10/0x10 [ 563.557149][ T6074] ? __kasan_check_read+0x11/0x20 [ 563.562454][ T6074] exit_to_user_mode_loop+0x7a/0xb0 [ 563.567924][ T6074] exit_to_user_mode_prepare+0x5a/0xa0 [ 563.573482][ T6074] syscall_exit_to_user_mode+0x1a/0x30 [ 563.579039][ T6074] do_syscall_64+0x58/0xa0 [ 563.583479][ T6074] ? clear_bhb_loop+0x15/0x70 [ 563.588248][ T6074] ? clear_bhb_loop+0x15/0x70 [ 563.592938][ T6074] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 563.598853][ T6074] RIP: 0033:0x7f8a9d58e969 [ 563.603275][ T6074] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 563.622985][ T6074] RSP: 002b:00007f8a9d3ff038 EFLAGS: 00000246 ORIG_RAX: 000000000000003d [ 563.631501][ T6074] RAX: 00000000000003e0 RBX: 00007f8a9d7b6080 RCX: 00007f8a9d58e969 [ 563.639580][ T6074] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000000003e0 [ 563.647568][ T6074] RBP: 00007f8a9d3ff090 R08: 0000000000000000 R09: 0000000000000000 [ 563.655562][ T6074] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 563.663666][ T6074] R13: 0000000000000000 R14: 00007f8a9d7b6080 R15: 00007ffd279ec0c8 [ 563.671862][ T6074] [ 563.681336][ T5869] EXT4-fs (loop6): unmounting filesystem. [ 563.978961][ T6088] FAULT_INJECTION: forcing a failure. [ 563.978961][ T6088] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 563.998270][ T6089] loop0: detected capacity change from 0 to 256 [ 564.030794][ T6087] netlink: 136 bytes leftover after parsing attributes in process `syz.6.1474'. [ 564.057396][ T6088] CPU: 1 PID: 6088 Comm: syz.1.1476 Not tainted 6.1.138-syzkaller-00045-g9e207186c745 #0 [ 564.067517][ T6088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 564.077674][ T6088] Call Trace: [ 564.080970][ T6088] [ 564.083905][ T6088] __dump_stack+0x21/0x24 [ 564.088255][ T6088] dump_stack_lvl+0xee/0x150 [ 564.093052][ T6088] ? __cfi_dump_stack_lvl+0x8/0x8 [ 564.098467][ T6088] ? _parse_integer+0x2a/0x40 [ 564.103611][ T6088] dump_stack+0x15/0x24 [ 564.107969][ T6088] should_fail_ex+0x3d4/0x520 [ 564.112655][ T6088] should_fail+0xb/0x10 [ 564.116828][ T6088] should_fail_usercopy+0x1a/0x20 [ 564.121942][ T6088] _copy_from_user+0x1e/0xc0 [ 564.126554][ T6088] ___sys_sendmsg+0x155/0x290 [ 564.131435][ T6088] ? __sys_sendmsg+0x270/0x270 [ 564.136232][ T6088] ? __kasan_check_write+0x14/0x20 [ 564.141449][ T6088] ? proc_fail_nth_write+0x17a/0x1f0 [ 564.146919][ T6088] ? vfs_write+0x9d6/0xca0 [ 564.151368][ T6088] ? __fdget+0x19c/0x220 [ 564.155653][ T6088] __x64_sys_sendmsg+0x1f0/0x2c0 [ 564.160618][ T6088] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 564.166176][ T6088] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 564.172245][ T6088] x64_sys_call+0x171/0x9a0 [ 564.176747][ T6088] do_syscall_64+0x4c/0xa0 [ 564.181173][ T6088] ? clear_bhb_loop+0x15/0x70 [ 564.186216][ T6088] ? clear_bhb_loop+0x15/0x70 [ 564.190891][ T6088] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 564.196788][ T6088] RIP: 0033:0x7f703778e969 [ 564.201285][ T6088] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 564.220975][ T6088] RSP: 002b:00007f70385d7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 564.229396][ T6088] RAX: ffffffffffffffda RBX: 00007f70379b5fa0 RCX: 00007f703778e969 [ 564.237597][ T6088] RDX: 0000000000000000 RSI: 0000200000001200 RDI: 0000000000000005 [ 564.245698][ T6088] RBP: 00007f70385d7090 R08: 0000000000000000 R09: 0000000000000000 [ 564.253973][ T6088] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 564.262036][ T6088] R13: 0000000000000000 R14: 00007f70379b5fa0 R15: 00007ffff072d9e8 [ 564.270020][ T6088] [ 564.298980][ T6089] FAT-fs (loop0): Unrecognized mount option "shor†name=mixed" or missing value [ 564.446070][ T6092] loop2: detected capacity change from 0 to 512 [ 564.604976][ T6092] EXT4-fs error (device loop2): ext4_orphan_get:1400: inode #15: comm syz.2.1477: casefold flag without casefold feature [ 564.618706][ T6092] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.1477: couldn't read orphan inode 15 (err -117) [ 564.632498][ T6092] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 565.423367][ T286] EXT4-fs (loop2): unmounting filesystem. [ 565.466031][ T6098] netlink: 'syz.2.1478': attribute type 4 has an invalid length. [ 565.493382][ T6098] sch_fq: defrate 0 ignored. [ 565.880496][ T6103] loop0: detected capacity change from 0 to 256 [ 565.985556][ T6103] FAT-fs (loop0): Directory bread(block 64) failed [ 566.013500][ T6103] FAT-fs (loop0): Directory bread(block 65) failed [ 566.026584][ T6103] FAT-fs (loop0): Directory bread(block 66) failed [ 566.033530][ T6103] FAT-fs (loop0): Directory bread(block 67) failed [ 566.040285][ T6103] FAT-fs (loop0): Directory bread(block 68) failed [ 566.047123][ T6103] FAT-fs (loop0): Directory bread(block 69) failed [ 566.054125][ T6103] FAT-fs (loop0): Directory bread(block 70) failed [ 566.060945][ T6103] FAT-fs (loop0): Directory bread(block 71) failed [ 566.067708][ T6103] FAT-fs (loop0): Directory bread(block 72) failed [ 566.074334][ T6103] FAT-fs (loop0): Directory bread(block 73) failed [ 566.144396][ T6109] IPv6: syztnl0: Disabled Multicast RS [ 566.168182][ T5602] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 566.359192][ T5602] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 566.398677][ T5602] usb 3-1: config 0 has no interface number 0 [ 566.432853][ T5602] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 566.522008][ T6116] loop1: detected capacity change from 0 to 256 [ 566.628751][ T5602] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 566.653755][ T6116] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011a39, chksum : 0xd7c18d7b, utbl_chksum : 0xe619d30d) [ 566.695653][ T5602] usb 3-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 566.734862][ T5602] usb 3-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 566.758266][ T5602] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 566.780835][ T5602] usb 3-1: config 0 descriptor?? [ 567.138283][ T28] kauditd_printk_skb: 191 callbacks suppressed [ 567.138375][ T28] audit: type=1400 audit(1748315212.195:14694): avc: denied { setopt } for pid=6118 comm="syz.7.1485" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 567.411887][ T28] audit: type=1326 audit(1748315212.505:14695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6123 comm="syz.0.1486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0ce18e969 code=0x7ffc0000 [ 567.416108][ T6124] loop0: detected capacity change from 0 to 256 [ 567.443237][ T6124] FAT-fs (loop0): Unrecognized mount option "shor†name=mixed" or missing value [ 567.461189][ T6126] fuse: Unknown parameter 'dd' [ 567.461618][ T28] audit: type=1326 audit(1748315212.505:14696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6123 comm="syz.0.1486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb0ce18e969 code=0x7ffc0000 [ 567.480445][ T6126] loop1: detected capacity change from 0 to 512 [ 567.489770][ T28] audit: type=1326 audit(1748315212.505:14697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6123 comm="syz.0.1486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0ce18e969 code=0x7ffc0000 [ 567.510860][ T6126] journal_path: Lookup failure for './file0' [ 567.526525][ T28] audit: type=1326 audit(1748315212.505:14698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6123 comm="syz.0.1486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb0ce18e969 code=0x7ffc0000 [ 567.547778][ T6126] EXT4-fs: error: could not find journal device path [ 567.574194][ T28] audit: type=1326 audit(1748315212.505:14699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6123 comm="syz.0.1486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0ce18e969 code=0x7ffc0000 [ 567.607263][ T28] audit: type=1326 audit(1748315212.505:14700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6123 comm="syz.0.1486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fb0ce18e969 code=0x7ffc0000 [ 567.639137][ T28] audit: type=1326 audit(1748315212.505:14701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6123 comm="syz.0.1486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fb0ce18e9a3 code=0x7ffc0000 [ 567.677031][ T28] audit: type=1326 audit(1748315212.505:14702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6123 comm="syz.0.1486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fb0ce18d41f code=0x7ffc0000 [ 568.464658][ T28] audit: type=1326 audit(1748315212.505:14703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6123 comm="syz.0.1486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fb0ce18e9f7 code=0x7ffc0000 [ 568.501036][ T6126] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1487'. [ 568.552420][ T6131] process 'syz.1.1487' launched './file0' with NULL argv: empty string added [ 568.838827][ T5602] uclogic 0003:28BD:0042.0009: failed retrieving string descriptor #100: -71 [ 569.020522][ T5602] uclogic 0003:28BD:0042.0009: failed retrieving pen parameters: -71 [ 569.076806][ T5602] uclogic 0003:28BD:0042.0009: pen probing failed: -71 [ 569.090407][ T6139] FAULT_INJECTION: forcing a failure. [ 569.090407][ T6139] name failslab, interval 1, probability 0, space 0, times 0 [ 569.120458][ T6139] CPU: 0 PID: 6139 Comm: syz.1.1491 Not tainted 6.1.138-syzkaller-00045-g9e207186c745 #0 [ 569.130350][ T6139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 569.140522][ T6139] Call Trace: [ 569.143813][ T6139] [ 569.146751][ T6139] __dump_stack+0x21/0x24 [ 569.151101][ T6139] dump_stack_lvl+0xee/0x150 [ 569.155720][ T6139] ? __cfi_dump_stack_lvl+0x8/0x8 [ 569.160857][ T6139] ? 0xffffffffa00019e8 [ 569.165036][ T6139] ? is_bpf_text_address+0x177/0x190 [ 569.170358][ T6139] dump_stack+0x15/0x24 [ 569.174552][ T6139] should_fail_ex+0x3d4/0x520 [ 569.179253][ T6139] ? dst_alloc+0x16a/0x1e0 [ 569.183771][ T6139] __should_failslab+0xac/0xf0 [ 569.183803][ T5602] uclogic 0003:28BD:0042.0009: failed probing parameters: -71 [ 569.188551][ T6139] should_failslab+0x9/0x20 [ 569.188583][ T6139] kmem_cache_alloc+0x3b/0x330 [ 569.205463][ T6139] dst_alloc+0x16a/0x1e0 [ 569.209851][ T6139] ip_route_output_key_hash_rcu+0x1516/0x2060 [ 569.216135][ T6139] ip_route_output_flow+0x12e/0x2e0 [ 569.216875][ T5602] uclogic: probe of 0003:28BD:0042.0009 failed with error -71 [ 569.221623][ T6139] ? memcpy+0x56/0x70 [ 569.221661][ T6139] ? __cfi_ip_route_output_flow+0x10/0x10 [ 569.221690][ T6139] ? avc_has_perm_noaudit+0x2f4/0x460 [ 569.245321][ T6139] ? __cfi_avc_has_perm_noaudit+0x10/0x10 [ 569.251346][ T6139] raw_sendmsg+0xa80/0x12e0 [ 569.256145][ T6139] ? __cfi_raw_sendmsg+0x10/0x10 [ 569.258741][ T5602] usb 3-1: USB disconnect, device number 28 [ 569.261264][ T6139] ? selinux_socket_sendmsg+0x208/0x2e0 [ 569.272917][ T6139] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 569.279200][ T6139] ? inet_send_prepare+0x60/0x4d0 [ 569.284420][ T6139] ? memcpy+0x56/0x70 [ 569.288448][ T6139] inet_sendmsg+0xb6/0xd0 [ 569.292902][ T6139] ? __cfi_inet_sendmsg+0x10/0x10 [ 569.298307][ T6139] kernel_sendmsg+0x222/0x320 [ 569.303111][ T6139] ? __cfi_kernel_sendmsg+0x10/0x10 [ 569.308350][ T6139] sock_no_sendpage+0xf4/0x150 [ 569.313196][ T6139] ? __cfi_sock_no_sendpage+0x10/0x10 [ 569.318768][ T6139] ? 0xffffffffa00019e8 [ 569.322953][ T6139] ? inet_send_prepare+0x60/0x4d0 [ 569.328060][ T6139] inet_sendpage+0xf0/0x110 [ 569.332603][ T6139] kernel_sendpage+0x256/0x2d0 [ 569.337405][ T6139] sock_sendpage+0x86/0xb0 [ 569.342123][ T6139] pipe_to_sendpage+0x22d/0x320 [ 569.347185][ T6139] ? __cfi_sock_sendpage+0x10/0x10 [ 569.352629][ T6139] ? __cfi_pipe_to_sendpage+0x10/0x10 [ 569.358218][ T6139] __splice_from_pipe+0x33b/0x910 [ 569.363362][ T6139] ? __cfi_pipe_to_sendpage+0x10/0x10 [ 569.368764][ T6139] generic_splice_sendpage+0xf3/0x150 [ 569.374246][ T6139] ? __cfi_generic_splice_sendpage+0x10/0x10 [ 569.380430][ T6139] ? security_file_permission+0x94/0xb0 [ 569.386173][ T6139] ? rw_verify_area+0xa7/0x1c0 [ 569.391337][ T6139] ? __cfi_generic_splice_sendpage+0x10/0x10 [ 569.398328][ T6139] do_splice+0xdb3/0x14d0 [ 569.402753][ T6139] ? security_file_permission+0x94/0xb0 [ 569.408473][ T6139] ? __fget_files+0x2d5/0x330 [ 569.413311][ T6139] ? __cfi_do_splice+0x10/0x10 [ 569.418465][ T6139] ? __fdget+0x19c/0x220 [ 569.422924][ T6139] __se_sys_splice+0x32b/0x420 [ 569.427875][ T6139] ? __x64_sys_splice+0x100/0x100 [ 569.433027][ T6139] ? __cfi_ksys_write+0x10/0x10 [ 569.438001][ T6139] __x64_sys_splice+0xe5/0x100 [ 569.443061][ T6139] x64_sys_call+0x22e/0x9a0 [ 569.447679][ T6139] do_syscall_64+0x4c/0xa0 [ 569.452201][ T6139] ? clear_bhb_loop+0x15/0x70 [ 569.456891][ T6139] ? clear_bhb_loop+0x15/0x70 [ 569.461671][ T6139] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 569.467687][ T6139] RIP: 0033:0x7f703778e969 [ 569.472120][ T6139] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 569.492212][ T6139] RSP: 002b:00007f70385d7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 569.500826][ T6139] RAX: ffffffffffffffda RBX: 00007f70379b5fa0 RCX: 00007f703778e969 [ 569.509614][ T6139] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 569.518151][ T6139] RBP: 00007f70385d7090 R08: 0000000000008000 R09: 0000000000000000 [ 569.526235][ T6139] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 569.534554][ T6139] R13: 0000000000000000 R14: 00007f70379b5fa0 R15: 00007ffff072d9e8 [ 569.542545][ T6139] [ 570.978875][ T2646] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 571.178978][ T2646] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 571.221803][ T2646] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 571.645468][ T2646] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 571.720024][ T2646] usb 2-1: config 0 interface 0 has no altsetting 0 [ 571.786399][ T2646] usb 2-1: New USB device found, idVendor=0458, idProduct=5015, bcdDevice= 0.00 [ 571.863262][ T2646] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 572.348320][ T2646] usb 2-1: config 0 descriptor?? [ 572.365368][ T6161] netlink: 136 bytes leftover after parsing attributes in process `syz.0.1492'. [ 572.529756][ T6166] loop7: detected capacity change from 0 to 256 [ 572.557510][ T6142] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 572.566247][ T6142] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 572.583374][ T6166] exFAT-fs (loop7): failed to load upcase table (idx : 0x00011a39, chksum : 0xd7c18d7b, utbl_chksum : 0xe619d30d) [ 572.654954][ T28] kauditd_printk_skb: 42 callbacks suppressed [ 572.654984][ T28] audit: type=1326 audit(1748315217.745:14746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6168 comm="syz.2.1499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8a9d585927 code=0x7ffc0000 [ 572.691219][ T6169] loop2: detected capacity change from 0 to 256 [ 572.709021][ T6169] FAT-fs (loop2): Unrecognized mount option "shor†name=mixed" or missing value [ 572.720797][ T28] audit: type=1326 audit(1748315217.775:14747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6168 comm="syz.2.1499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8a9d52ab39 code=0x7ffc0000 [ 572.753279][ T28] audit: type=1326 audit(1748315217.775:14748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6168 comm="syz.2.1499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8a9d585927 code=0x7ffc0000 [ 572.778614][ T28] audit: type=1326 audit(1748315217.775:14749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6168 comm="syz.2.1499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8a9d52ab39 code=0x7ffc0000 [ 572.810605][ T28] audit: type=1326 audit(1748315217.775:14750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6168 comm="syz.2.1499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a9d58e969 code=0x7ffc0000 [ 572.835486][ T28] audit: type=1326 audit(1748315217.785:14751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6168 comm="syz.2.1499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8a9d58e969 code=0x7ffc0000 [ 572.860616][ T28] audit: type=1326 audit(1748315217.785:14752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6168 comm="syz.2.1499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8a9d585927 code=0x7ffc0000 [ 572.982347][ T6172] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1493'. [ 573.024571][ T28] audit: type=1326 audit(1748315217.785:14753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6168 comm="syz.2.1499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8a9d52ab39 code=0x7ffc0000 [ 574.064683][ T28] audit: type=1326 audit(1748315217.785:14754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6168 comm="syz.2.1499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8a9d585927 code=0x7ffc0000 [ 574.550705][ T28] audit: type=1326 audit(1748315217.785:14755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6168 comm="syz.2.1499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8a9d52ab39 code=0x7ffc0000 [ 574.591226][ T6178] loop2: detected capacity change from 0 to 256 [ 574.608134][ T6178] FAT-fs (loop2): Unrecognized mount option "shor†name=mixed" or missing value [ 574.677453][ T2646] usbhid 2-1:0.0: can't add hid device: -71 [ 574.683648][ T2646] usbhid: probe of 2-1:0.0 failed with error -71 [ 575.290064][ T2646] usb 2-1: USB disconnect, device number 26 [ 575.677262][ T304] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 575.687951][ T6195] loop2: detected capacity change from 0 to 256 [ 575.725077][ T6195] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011a39, chksum : 0xd7c18d7b, utbl_chksum : 0xe619d30d) [ 575.881703][ T6197] loop1: detected capacity change from 0 to 512 [ 575.903674][ T304] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 575.993697][ T6208] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 576.003243][ T6208] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 576.132560][ T6197] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 576.154202][ T304] usb 8-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 576.165567][ T304] usb 8-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 576.175445][ T304] usb 8-1: config 0 interface 0 has no altsetting 0 [ 576.182146][ T304] usb 8-1: New USB device found, idVendor=0458, idProduct=5015, bcdDevice= 0.00 [ 576.191334][ T304] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 576.200354][ T304] usb 8-1: config 0 descriptor?? [ 576.207318][ T6197] ext4 filesystem being mounted at /282/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 576.294992][ T6203] loop2: detected capacity change from 0 to 512 [ 576.317545][ T6203] EXT4-fs: Ignoring removed nomblk_io_submit option [ 576.333290][ T6203] ext4: Unknown parameter 'nodelalloc2' [ 576.407769][ T6181] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 576.424514][ T6181] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 576.435244][ T6211] loop2: detected capacity change from 0 to 256 [ 576.444670][ T6211] FAT-fs (loop2): Unrecognized mount option "shor†name=mixed" or missing value [ 576.549675][ T283] EXT4-fs (loop1): unmounting filesystem. [ 576.574495][ T6212] syz.7.1501[6212] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 576.574594][ T6212] syz.7.1501[6212] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 576.588471][ T6212] netlink: 52 bytes leftover after parsing attributes in process `syz.7.1501'. [ 576.722416][ T6216] loop1: detected capacity change from 0 to 256 [ 576.736115][ T6218] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6218 comm=syz.0.1512 [ 576.832688][ T6216] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011a39, chksum : 0xd7c18d7b, utbl_chksum : 0xe619d30d) [ 577.376587][ T6229] loop6: detected capacity change from 0 to 512 [ 577.448777][ T4644] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 577.662760][ T6247] loop2: detected capacity change from 0 to 16 [ 577.687649][ T6247] erofs: (device loop2): mounted with root inode @ nid 36. [ 577.738017][ T6247] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=86 [ 577.752605][ T6247] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=46 [ 578.538444][ T6254] netlink: 136 bytes leftover after parsing attributes in process `syz.1.1518'. [ 578.642747][ T304] usbhid 8-1:0.0: can't add hid device: -71 [ 578.650875][ T304] usbhid: probe of 8-1:0.0 failed with error -71 [ 578.659514][ T304] usb 8-1: USB disconnect, device number 3 [ 578.675021][ T6261] FAULT_INJECTION: forcing a failure. [ 578.675021][ T6261] name failslab, interval 1, probability 0, space 0, times 0 [ 578.690852][ T6261] CPU: 0 PID: 6261 Comm: syz.2.1522 Not tainted 6.1.138-syzkaller-00045-g9e207186c745 #0 [ 578.701256][ T6261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 578.711700][ T6261] Call Trace: [ 578.714999][ T6261] [ 578.718245][ T6261] __dump_stack+0x21/0x24 [ 578.722848][ T6261] dump_stack_lvl+0xee/0x150 [ 578.727476][ T6261] ? __cfi_dump_stack_lvl+0x8/0x8 [ 578.733238][ T6261] dump_stack+0x15/0x24 [ 578.737519][ T6261] should_fail_ex+0x3d4/0x520 [ 578.742227][ T6261] ? getname_flags+0xb9/0x500 [ 578.746938][ T6261] __should_failslab+0xac/0xf0 [ 578.751840][ T6261] should_failslab+0x9/0x20 [ 578.757426][ T6261] kmem_cache_alloc+0x3b/0x330 [ 578.762400][ T6261] getname_flags+0xb9/0x500 [ 578.767203][ T6261] ? __kasan_check_write+0x14/0x20 [ 578.772511][ T6261] user_path_at_empty+0x30/0x1c0 [ 578.777536][ T6261] path_getxattr+0xc9/0x400 [ 578.782134][ T6261] ? vfs_write+0x9d6/0xca0 [ 578.786577][ T6261] ? setxattr+0x2d0/0x2d0 [ 578.791011][ T6261] ? __kasan_check_write+0x14/0x20 [ 578.796215][ T6261] ? mutex_unlock+0x89/0x220 [ 578.801336][ T6261] ? __cfi_mutex_unlock+0x10/0x10 [ 578.806888][ T6261] ? __kasan_check_write+0x14/0x20 [ 578.812012][ T6261] ? fput+0x154/0x1a0 [ 578.816190][ T6261] ? ksys_write+0x1eb/0x240 [ 578.820741][ T6261] ? __cfi_ksys_write+0x10/0x10 [ 578.825609][ T6261] __x64_sys_lgetxattr+0x9e/0xb0 [ 578.830598][ T6261] x64_sys_call+0x194/0x9a0 [ 578.835303][ T6261] do_syscall_64+0x4c/0xa0 [ 578.839755][ T6261] ? clear_bhb_loop+0x15/0x70 [ 578.844454][ T6261] ? clear_bhb_loop+0x15/0x70 [ 578.849239][ T6261] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 578.855327][ T6261] RIP: 0033:0x7f8a9d58e969 [ 578.859966][ T6261] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 578.879577][ T6261] RSP: 002b:00007f8a9e31a038 EFLAGS: 00000246 ORIG_RAX: 00000000000000c0 [ 578.887994][ T6261] RAX: ffffffffffffffda RBX: 00007f8a9d7b5fa0 RCX: 00007f8a9d58e969 [ 578.896070][ T6261] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000200000000000 [ 578.904061][ T6261] RBP: 00007f8a9e31a090 R08: 0000000000000000 R09: 0000000000000000 [ 578.912123][ T6261] R10: 000000000000c300 R11: 0000000000000246 R12: 0000000000000001 [ 578.920118][ T6261] R13: 0000000000000000 R14: 00007f8a9d7b5fa0 R15: 00007ffd279ec0c8 [ 578.928183][ T6261] [ 578.940445][ T6264] overlayfs: failed to resolve './file0': -2 [ 578.974823][ T28] kauditd_printk_skb: 239 callbacks suppressed [ 578.974841][ T28] audit: type=1326 audit(1748315224.065:14995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6265 comm="syz.6.1523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb1798e969 code=0x7ffc0000 [ 579.015280][ T6266] loop6: detected capacity change from 0 to 256 [ 579.021279][ T6268] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6268 comm=syz.2.1524 [ 579.036312][ T6266] FAT-fs (loop6): Unrecognized mount option "shor†name=mixed" or missing value [ 579.056036][ T28] audit: type=1326 audit(1748315224.105:14996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6265 comm="syz.6.1523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7feb1798e969 code=0x7ffc0000 [ 579.122275][ T28] audit: type=1326 audit(1748315224.105:14997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6265 comm="syz.6.1523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb1798e969 code=0x7ffc0000 [ 579.193947][ T28] audit: type=1326 audit(1748315224.105:14998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6265 comm="syz.6.1523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7feb1798e969 code=0x7ffc0000 [ 579.534653][ T28] audit: type=1326 audit(1748315224.105:14999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6265 comm="syz.6.1523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7feb1798e9a3 code=0x7ffc0000 [ 579.558471][ T28] audit: type=1326 audit(1748315224.105:15000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6265 comm="syz.6.1523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7feb1798d41f code=0x7ffc0000 [ 579.582320][ T28] audit: type=1326 audit(1748315224.105:15001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6265 comm="syz.6.1523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7feb1798e9f7 code=0x7ffc0000 [ 579.606286][ T28] audit: type=1326 audit(1748315224.105:15002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6265 comm="syz.6.1523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7feb1798d2d0 code=0x7ffc0000 [ 579.630469][ T28] audit: type=1326 audit(1748315224.105:15003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6265 comm="syz.6.1523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7feb1798e56b code=0x7ffc0000 [ 579.654835][ T28] audit: type=1326 audit(1748315224.115:15004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6265 comm="syz.6.1523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7feb1798d5ca code=0x7ffc0000 [ 579.689588][ T6276] loop7: detected capacity change from 0 to 256 [ 579.719015][ T6276] FAT-fs (loop7): Unrecognized mount option "shor†name=mixed" or missing value [ 579.767037][ T6283] device veth1_to_bond entered promiscuous mode [ 579.774171][ T6283] device veth0 entered promiscuous mode [ 579.867123][ T1767] usb 3-1: new full-speed USB device number 29 using dummy_hcd [ 579.899774][ T6287] loop1: detected capacity change from 0 to 1024 [ 579.966457][ T6287] EXT4-fs: Ignoring removed i_version option [ 580.058946][ T1767] usb 3-1: config 0 has no interfaces? [ 580.067283][ T1767] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 580.143772][ T6287] EXT4-fs (loop1): Test dummy encryption mode enabled [ 580.206751][ T1767] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 580.237782][ T6287] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 580.247007][ T1767] usb 3-1: SerialNumber: syz [ 580.271421][ T1767] usb 3-1: config 0 descriptor?? [ 580.369207][ T6287] bridge0: port 3(vlan2) entered blocking state [ 580.389006][ T6287] bridge0: port 3(vlan2) entered disabled state [ 580.456259][ T6289] loop6: detected capacity change from 0 to 40427 [ 580.471365][ T6289] F2FS-fs (loop6): fault_injection options not supported [ 580.485040][ T6289] F2FS-fs (loop6): invalid crc value [ 580.497629][ T6289] F2FS-fs (loop6): Found nat_bits in checkpoint [ 580.552093][ T283] EXT4-fs (loop1): unmounting filesystem. [ 580.674104][ T6289] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 580.730279][ T6302] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1532'. [ 580.763106][ T6302] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1532'. [ 580.790068][ T6302] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1532'. [ 580.807769][ T5869] syz-executor: attempt to access beyond end of device [ 580.807769][ T5869] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 581.184051][ T6310] bridge: RTM_NEWNEIGH with invalid ether address [ 581.196042][ T6314] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6314 comm=syz.0.1536 [ 581.250867][ T6316] FAULT_INJECTION: forcing a failure. [ 581.250867][ T6316] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 581.281846][ T6316] CPU: 1 PID: 6316 Comm: syz.0.1537 Not tainted 6.1.138-syzkaller-00045-g9e207186c745 #0 [ 581.291968][ T6316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 581.302062][ T6316] Call Trace: [ 581.305443][ T6316] [ 581.308397][ T6316] __dump_stack+0x21/0x24 [ 581.312778][ T6316] dump_stack_lvl+0xee/0x150 [ 581.317602][ T6316] ? __cfi_dump_stack_lvl+0x8/0x8 [ 581.322679][ T6316] ? _parse_integer+0x2a/0x40 [ 581.327392][ T6316] dump_stack+0x15/0x24 [ 581.331574][ T6316] should_fail_ex+0x3d4/0x520 [ 581.336293][ T6316] should_fail+0xb/0x10 [ 581.340569][ T6316] should_fail_usercopy+0x1a/0x20 [ 581.345704][ T6316] _copy_from_user+0x1e/0xc0 [ 581.350387][ T6316] ___sys_sendmsg+0x155/0x290 [ 581.355096][ T6316] ? __sys_sendmsg+0x270/0x270 [ 581.359888][ T6316] ? __kasan_check_write+0x14/0x20 [ 581.365041][ T6316] ? proc_fail_nth_write+0x17a/0x1f0 [ 581.370529][ T6316] ? vfs_write+0x9d6/0xca0 [ 581.375071][ T6316] ? __fdget+0x19c/0x220 [ 581.379512][ T6316] __x64_sys_sendmsg+0x1f0/0x2c0 [ 581.384504][ T6316] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 581.389998][ T6316] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 581.396107][ T6316] x64_sys_call+0x171/0x9a0 [ 581.400692][ T6316] do_syscall_64+0x4c/0xa0 [ 581.405140][ T6316] ? clear_bhb_loop+0x15/0x70 [ 581.409839][ T6316] ? clear_bhb_loop+0x15/0x70 [ 581.414534][ T6316] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 581.420812][ T6316] RIP: 0033:0x7fb0ce18e969 [ 581.425247][ T6316] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 581.445136][ T6316] RSP: 002b:00007fb0cefbc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 581.453575][ T6316] RAX: ffffffffffffffda RBX: 00007fb0ce3b5fa0 RCX: 00007fb0ce18e969 [ 581.461570][ T6316] RDX: 0000000000040814 RSI: 0000200000006040 RDI: 0000000000000004 [ 581.469939][ T6316] RBP: 00007fb0cefbc090 R08: 0000000000000000 R09: 0000000000000000 [ 581.478813][ T6316] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 581.486817][ T6316] R13: 0000000000000000 R14: 00007fb0ce3b5fa0 R15: 00007fffa03970a8 [ 581.494902][ T6316] [ 581.498455][ T6284] device veth0 left promiscuous mode [ 581.505977][ T6284] device veth1_to_bond left promiscuous mode [ 581.615833][ T6320] netlink: 136 bytes leftover after parsing attributes in process `syz.6.1538'. [ 581.712948][ T6327] loop7: detected capacity change from 0 to 1024 [ 581.733594][ T6327] EXT4-fs: Ignoring removed i_version option [ 581.903637][ T6327] EXT4-fs (loop7): Test dummy encryption mode enabled [ 582.052237][ T6327] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 582.132755][ T4788] usb 3-1: USB disconnect, device number 29 [ 582.160533][ T6327] bridge0: port 3(vlan2) entered blocking state [ 582.179985][ T6327] bridge0: port 3(vlan2) entered disabled state [ 582.262951][ T6339] FAULT_INJECTION: forcing a failure. [ 582.262951][ T6339] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 582.277720][ T6339] CPU: 0 PID: 6339 Comm: syz.1.1545 Not tainted 6.1.138-syzkaller-00045-g9e207186c745 #0 [ 582.288690][ T6339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 582.298878][ T6339] Call Trace: [ 582.302299][ T6339] [ 582.305321][ T6339] __dump_stack+0x21/0x24 [ 582.310022][ T6339] dump_stack_lvl+0xee/0x150 [ 582.314705][ T6339] ? __cfi_dump_stack_lvl+0x8/0x8 [ 582.319763][ T6339] ? ioctl_has_perm+0x391/0x4c0 [ 582.325181][ T6339] dump_stack+0x15/0x24 [ 582.329747][ T6339] should_fail_ex+0x3d4/0x520 [ 582.334614][ T6339] should_fail+0xb/0x10 [ 582.338962][ T6339] should_fail_usercopy+0x1a/0x20 [ 582.344812][ T6339] _copy_from_user+0x1e/0xc0 [ 582.349678][ T6339] __tun_chr_ioctl+0x1ed/0x1e70 [ 582.354600][ T6339] ? tun_flow_create+0x320/0x320 [ 582.359555][ T6339] ? mutex_unlock+0x89/0x220 [ 582.364276][ T6339] tun_chr_ioctl+0x2a/0x40 [ 582.368989][ T6339] ? __cfi_tun_chr_ioctl+0x10/0x10 [ 582.374288][ T6339] __se_sys_ioctl+0x12f/0x1b0 [ 582.379065][ T6339] __x64_sys_ioctl+0x7b/0x90 [ 582.383705][ T6339] x64_sys_call+0x58b/0x9a0 [ 582.388218][ T6339] do_syscall_64+0x4c/0xa0 [ 582.392645][ T6339] ? clear_bhb_loop+0x15/0x70 [ 582.397363][ T6339] ? clear_bhb_loop+0x15/0x70 [ 582.402072][ T6339] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 582.408417][ T6339] RIP: 0033:0x7f703778e969 [ 582.413456][ T6339] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 582.433793][ T6339] RSP: 002b:00007f70385d7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 582.442508][ T6339] RAX: ffffffffffffffda RBX: 00007f70379b5fa0 RCX: 00007f703778e969 [ 582.450497][ T6339] RDX: 0000200000000100 RSI: 00000000400454d9 RDI: 0000000000000008 [ 582.458658][ T6339] RBP: 00007f70385d7090 R08: 0000000000000000 R09: 0000000000000000 [ 582.466930][ T6339] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 582.474899][ T6339] R13: 0000000000000000 R14: 00007f70379b5fa0 R15: 00007ffff072d9e8 [ 582.482981][ T6339] [ 582.487149][ T6347] syz.2.1546[6347] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 582.487468][ T6347] syz.2.1546[6347] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 582.541633][ T6350] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6350 comm=syz.0.1548 [ 582.543799][ T5886] EXT4-fs (loop7): unmounting filesystem. [ 582.574779][ T6352] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1550'. [ 582.621801][ T6357] FAULT_INJECTION: forcing a failure. [ 582.621801][ T6357] name failslab, interval 1, probability 0, space 0, times 0 [ 582.643324][ T6357] CPU: 0 PID: 6357 Comm: syz.0.1552 Not tainted 6.1.138-syzkaller-00045-g9e207186c745 #0 [ 582.653271][ T6357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 582.663434][ T6357] Call Trace: [ 582.666729][ T6357] [ 582.669674][ T6357] __dump_stack+0x21/0x24 [ 582.674050][ T6357] dump_stack_lvl+0xee/0x150 [ 582.678663][ T6357] ? __cfi_dump_stack_lvl+0x8/0x8 [ 582.683712][ T6357] ? __local_bh_enable_ip+0x58/0x80 [ 582.688929][ T6357] ? release_sock+0x169/0x1c0 [ 582.693709][ T6357] dump_stack+0x15/0x24 [ 582.697881][ T6357] should_fail_ex+0x3d4/0x520 [ 582.702612][ T6357] __should_failslab+0xac/0xf0 [ 582.707544][ T6357] should_failslab+0x9/0x20 [ 582.712169][ T6357] kmem_cache_alloc_node+0x42/0x340 [ 582.717393][ T6357] ? __alloc_skb+0xdf/0x7e0 [ 582.721901][ T6357] __alloc_skb+0xdf/0x7e0 [ 582.726257][ T6357] ? netlink_autobind+0x168/0x1a0 [ 582.731400][ T6357] netlink_sendmsg+0x626/0xbc0 [ 582.736373][ T6357] ? __cfi_netlink_sendmsg+0x10/0x10 [ 582.741756][ T6357] ? security_socket_sendmsg+0x93/0xb0 [ 582.747220][ T6357] __sys_sendto+0x464/0x5e0 [ 582.751740][ T6357] ? slab_free_freelist_hook+0xc2/0x190 [ 582.757289][ T6357] ? __cfi___sys_sendto+0x10/0x10 [ 582.762324][ T6357] ? ksys_write+0x1eb/0x240 [ 582.767005][ T6357] ? __cfi_ksys_write+0x10/0x10 [ 582.771861][ T6357] __x64_sys_sendto+0xe5/0x100 [ 582.776716][ T6357] x64_sys_call+0x83/0x9a0 [ 582.781217][ T6357] do_syscall_64+0x4c/0xa0 [ 582.785653][ T6357] ? clear_bhb_loop+0x15/0x70 [ 582.790354][ T6357] ? clear_bhb_loop+0x15/0x70 [ 582.795047][ T6357] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 582.800972][ T6357] RIP: 0033:0x7fb0ce18e969 [ 582.805410][ T6357] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 582.826243][ T6357] RSP: 002b:00007fb0cefbc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 582.835106][ T6357] RAX: ffffffffffffffda RBX: 00007fb0ce3b5fa0 RCX: 00007fb0ce18e969 [ 582.843449][ T6357] RDX: 0000000000000090 RSI: 00002000000000c0 RDI: 0000000000000003 [ 582.851631][ T6357] RBP: 00007fb0cefbc090 R08: 0000000000000000 R09: 0000000000000000 [ 582.860044][ T6357] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 582.868391][ T6357] R13: 0000000000000000 R14: 00007fb0ce3b5fa0 R15: 00007fffa03970a8 [ 582.876460][ T6357] [ 582.884383][ T6363] loop6: detected capacity change from 0 to 256 [ 582.899265][ T6363] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 583.099438][ T6364] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 583.108281][ T6364] bridge0: port 1(bridge_slave_0) entered blocking state [ 583.115349][ T6364] bridge0: port 1(bridge_slave_0) entered forwarding state [ 583.157650][ T6372] loop1: detected capacity change from 0 to 256 [ 583.176847][ T6372] FAT-fs (loop1): Unrecognized mount option "shor†name=mixed" or missing value [ 583.716038][ T6375] FAULT_INJECTION: forcing a failure. [ 583.716038][ T6375] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 583.729935][ T6375] CPU: 1 PID: 6375 Comm: syz.2.1555 Not tainted 6.1.138-syzkaller-00045-g9e207186c745 #0 [ 583.739763][ T6375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 583.750062][ T6375] Call Trace: [ 583.753350][ T6375] [ 583.756398][ T6375] __dump_stack+0x21/0x24 [ 583.760785][ T6375] dump_stack_lvl+0xee/0x150 [ 583.765417][ T6375] ? __cfi_dump_stack_lvl+0x8/0x8 [ 583.770567][ T6375] ? ioctl_has_perm+0x391/0x4c0 [ 583.775442][ T6375] dump_stack+0x15/0x24 [ 583.779624][ T6375] should_fail_ex+0x3d4/0x520 [ 583.784334][ T6375] should_fail+0xb/0x10 [ 583.788683][ T6375] should_fail_usercopy+0x1a/0x20 [ 583.793864][ T6375] _copy_from_user+0x1e/0xc0 [ 583.798547][ T6375] __tun_chr_ioctl+0x1ed/0x1e70 [ 583.803409][ T6375] ? tun_flow_create+0x320/0x320 [ 583.808350][ T6375] ? mutex_unlock+0x89/0x220 [ 583.813240][ T6375] tun_chr_ioctl+0x2a/0x40 [ 583.817750][ T6375] ? __cfi_tun_chr_ioctl+0x10/0x10 [ 583.822886][ T6375] __se_sys_ioctl+0x12f/0x1b0 [ 583.828123][ T6375] __x64_sys_ioctl+0x7b/0x90 [ 583.832806][ T6375] x64_sys_call+0x58b/0x9a0 [ 583.837321][ T6375] do_syscall_64+0x4c/0xa0 [ 583.841924][ T6375] ? clear_bhb_loop+0x15/0x70 [ 583.846601][ T6375] ? clear_bhb_loop+0x15/0x70 [ 583.851293][ T6375] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 583.857206][ T6375] RIP: 0033:0x7f8a9d58e969 [ 583.861839][ T6375] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 583.881788][ T6375] RSP: 002b:00007f8a9d3de038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 583.890212][ T6375] RAX: ffffffffffffffda RBX: 00007f8a9d7b6160 RCX: 00007f8a9d58e969 [ 583.898356][ T6375] RDX: 0000200000000040 RSI: 00000000400454ca RDI: 0000000000000009 [ 583.906412][ T6375] RBP: 00007f8a9d3de090 R08: 0000000000000000 R09: 0000000000000000 [ 583.914563][ T6375] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 583.922615][ T6375] R13: 0000000000000000 R14: 00007f8a9d7b6160 R15: 00007ffd279ec0c8 [ 583.930860][ T6375] [ 583.977388][ T28] kauditd_printk_skb: 137 callbacks suppressed [ 583.977506][ T28] audit: type=1326 audit(1748315229.065:15142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6370 comm="syz.1.1556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f703778e969 code=0x7ffc0000 [ 584.177732][ T28] audit: type=1326 audit(1748315229.265:15143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6378 comm="syz.7.1558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f940398e969 code=0x7ffc0000 [ 584.239931][ T6381] loop2: detected capacity change from 0 to 1024 [ 584.246800][ T6379] loop7: detected capacity change from 0 to 256 [ 584.259307][ T28] audit: type=1326 audit(1748315229.265:15144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6378 comm="syz.7.1558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f940398e969 code=0x7ffc0000 [ 584.283131][ T28] audit: type=1326 audit(1748315229.265:15145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6378 comm="syz.7.1558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f940398e969 code=0x7ffc0000 [ 584.410530][ T6381] EXT4-fs: Ignoring removed i_version option [ 584.418170][ T6379] FAT-fs (loop7): Unrecognized mount option "shor†name=mixed" or missing value [ 584.428594][ T6383] loop6: detected capacity change from 0 to 256 [ 584.445054][ T28] audit: type=1326 audit(1748315229.265:15146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6378 comm="syz.7.1558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f940398e969 code=0x7ffc0000 [ 584.958909][ T6381] EXT4-fs (loop2): Test dummy encryption mode enabled [ 584.966977][ T28] audit: type=1326 audit(1748315229.265:15147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6378 comm="syz.7.1558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f940398e9a3 code=0x7ffc0000 [ 585.016873][ T6383] FAT-fs (loop6): Directory bread(block 64) failed [ 585.034193][ T28] audit: type=1326 audit(1748315229.265:15148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6378 comm="syz.7.1558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f940398d41f code=0x7ffc0000 [ 585.066262][ T6383] FAT-fs (loop6): Directory bread(block 65) failed [ 585.073901][ T6383] FAT-fs (loop6): Directory bread(block 66) failed [ 585.080549][ T6383] FAT-fs (loop6): Directory bread(block 67) failed [ 585.087726][ T6383] FAT-fs (loop6): Directory bread(block 68) failed [ 585.094965][ T6383] FAT-fs (loop6): Directory bread(block 69) failed [ 585.173730][ T5000] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 585.184629][ T6383] FAT-fs (loop6): Directory bread(block 70) failed [ 585.209004][ T6383] FAT-fs (loop6): Directory bread(block 71) failed [ 585.219541][ T6383] FAT-fs (loop6): Directory bread(block 72) failed [ 585.224666][ T28] audit: type=1326 audit(1748315229.265:15149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6378 comm="syz.7.1558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f940398e9f7 code=0x7ffc0000 [ 586.026722][ T28] audit: type=1326 audit(1748315229.265:15150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6378 comm="syz.7.1558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f940398d2d0 code=0x7ffc0000 [ 586.035418][ T6383] FAT-fs (loop6): Directory bread(block 73) failed [ 586.061942][ T28] audit: type=1326 audit(1748315229.265:15151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6378 comm="syz.7.1558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f940398e56b code=0x7ffc0000 [ 586.082421][ T6381] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 586.483710][ T6404] bridge0: port 3(vlan2) entered blocking state [ 586.490340][ T6404] bridge0: port 3(vlan2) entered disabled state [ 587.169472][ T6411] loop1: detected capacity change from 0 to 512 [ 587.273641][ T6419] loop7: detected capacity change from 0 to 1024 [ 587.447298][ T286] EXT4-fs (loop2): unmounting filesystem. [ 587.483620][ T6411] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 587.520922][ T6419] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 587.523069][ T6411] ext4 filesystem being mounted at /298/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 587.568890][ T6430] FAULT_INJECTION: forcing a failure. [ 587.568890][ T6430] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 587.582727][ T6430] CPU: 0 PID: 6430 Comm: syz.6.1570 Not tainted 6.1.138-syzkaller-00045-g9e207186c745 #0 [ 587.592763][ T6430] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 587.603025][ T6430] Call Trace: [ 587.606522][ T6430] [ 587.609471][ T6430] __dump_stack+0x21/0x24 [ 587.614270][ T6430] dump_stack_lvl+0xee/0x150 [ 587.618983][ T6430] ? __cfi_dump_stack_lvl+0x8/0x8 [ 587.624043][ T6430] dump_stack+0x15/0x24 [ 587.628396][ T6430] should_fail_ex+0x3d4/0x520 [ 587.633189][ T6430] should_fail+0xb/0x10 [ 587.637555][ T6430] should_fail_usercopy+0x1a/0x20 [ 587.642782][ T6430] copy_fpstate_to_sigframe+0x849/0xaa0 [ 587.648442][ T6430] ? copy_fpstate_to_sigframe+0x17c/0xaa0 [ 587.654319][ T6430] ? __cfi_copy_fpstate_to_sigframe+0x10/0x10 [ 587.660580][ T6430] ? get_signal+0x124b/0x1520 [ 587.665369][ T6430] ? fpu__alloc_mathframe+0xb3/0x130 [ 587.667942][ T6411] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 587.670723][ T6430] arch_do_signal_or_restart+0x5bd/0x1030 [ 587.685040][ T6430] ? slab_free_freelist_hook+0xc2/0x190 [ 587.690633][ T6430] ? __fget_files+0x2d5/0x330 [ 587.692621][ T6411] EXT4-fs (loop1): re-mounted. Quota mode: writeback. [ 587.695342][ T6430] ? __cfi_do_splice+0x10/0x10 [ 587.695374][ T6430] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 587.695399][ T6430] ? __kasan_check_write+0x14/0x20 [ 587.695428][ T6430] ? fput+0x154/0x1a0 [ 587.723259][ T6430] ? __se_sys_splice+0x21a/0x420 [ 587.728635][ T6430] ? __cfi_ksys_write+0x10/0x10 [ 587.733679][ T6430] exit_to_user_mode_loop+0x7a/0xb0 [ 587.738996][ T6430] exit_to_user_mode_prepare+0x5a/0xa0 [ 587.744470][ T6430] syscall_exit_to_user_mode+0x1a/0x30 [ 587.749951][ T6430] do_syscall_64+0x58/0xa0 [ 587.754396][ T6430] ? clear_bhb_loop+0x15/0x70 [ 587.759091][ T6430] ? clear_bhb_loop+0x15/0x70 [ 587.763801][ T6430] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 587.769899][ T6430] RIP: 0033:0x7feb1798e967 [ 587.774339][ T6430] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 [ 587.794480][ T6430] RSP: 002b:00007feb188be038 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 587.803707][ T6430] RAX: 0000000000000113 RBX: 00007feb17bb5fa0 RCX: 00007feb1798e969 [ 587.812219][ T6430] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000005 [ 587.820392][ T6430] RBP: 00007feb188be090 R08: 0000000000000003 R09: 0000000000000000 [ 587.828475][ T6430] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 587.836813][ T6430] R13: 0000000000000000 R14: 00007feb17bb5fa0 R15: 00007fff7bb1b398 [ 587.844943][ T6430] [ 587.901709][ T5886] EXT4-fs (loop7): unmounting filesystem. [ 588.005733][ T283] EXT4-fs error (device loop1): ext4_readdir:263: inode #12: block 32: comm syz-executor: path /298/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 589.257591][ T28] kauditd_printk_skb: 68 callbacks suppressed [ 589.257612][ T28] audit: type=1326 audit(1748315233.305:15220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6433 comm="syz.0.1571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0ce18e969 code=0x7ffc0000 [ 591.321164][ T28] audit: type=1326 audit(1748315233.305:15221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6433 comm="syz.0.1571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0ce18e969 code=0x7ffc0000 [ 591.399178][ T28] audit: type=1326 audit(1748315233.325:15222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6433 comm="syz.0.1571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb0ce18e969 code=0x7ffc0000 [ 591.433827][ T28] audit: type=1326 audit(1748315233.335:15223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6433 comm="syz.0.1571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0ce18e969 code=0x7ffc0000 [ 591.467289][ T28] audit: type=1326 audit(1748315233.335:15224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6433 comm="syz.0.1571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0ce18e969 code=0x7ffc0000 [ 591.517416][ T6451] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 591.537230][ T6451] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 591.578438][ T28] audit: type=1326 audit(1748315233.365:15225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6433 comm="syz.0.1571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb0ce18e969 code=0x7ffc0000 [ 591.602613][ T28] audit: type=1326 audit(1748315233.365:15226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6433 comm="syz.0.1571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0ce18e969 code=0x7ffc0000 [ 591.626303][ T28] audit: type=1326 audit(1748315233.365:15227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6433 comm="syz.0.1571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0ce18e969 code=0x7ffc0000 [ 591.674019][ T28] audit: type=1326 audit(1748315233.385:15228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6433 comm="syz.0.1571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb0ce18e969 code=0x7ffc0000 [ 591.815233][ T6455] loop7: detected capacity change from 0 to 1024 [ 592.110714][ T28] audit: type=1326 audit(1748315233.385:15229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6433 comm="syz.0.1571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0ce18e969 code=0x7ffc0000 [ 592.131297][ T6455] EXT4-fs: Ignoring removed i_version option [ 592.141449][ T6455] EXT4-fs (loop7): Test dummy encryption mode enabled [ 592.173519][ T6462] loop2: detected capacity change from 0 to 256 [ 592.193002][ T6462] FAT-fs (loop2): Unrecognized mount option "shor†name=mixed" or missing value [ 592.238893][ T6455] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 592.456864][ T6468] bridge0: port 3(vlan2) entered blocking state [ 592.473520][ T6468] bridge0: port 3(vlan2) entered disabled state [ 592.877587][ T5886] EXT4-fs (loop7): unmounting filesystem. [ 592.887089][ T6473] netlink: 96 bytes leftover after parsing attributes in process `syz.6.1581'. [ 592.969617][ T6473] loop6: detected capacity change from 0 to 512 [ 593.000838][ T6473] EXT4-fs error (device loop6): ext4_orphan_get:1400: inode #15: comm syz.6.1581: casefold flag without casefold feature [ 593.120713][ T6478] loop7: detected capacity change from 0 to 16 [ 593.130753][ T6478] erofs: (device loop7): mounted with root inode @ nid 36. [ 593.186212][ T6478] overlayfs: missing 'workdir' [ 593.201783][ T6478] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=86 [ 593.218747][ T6478] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=46 [ 593.384052][ T6473] EXT4-fs error (device loop6): ext4_orphan_get:1405: comm syz.6.1581: couldn't read orphan inode 15 (err -117) [ 593.898119][ T6473] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 594.125524][ T6490] FAULT_INJECTION: forcing a failure. [ 594.125524][ T6490] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 594.187213][ T6490] CPU: 0 PID: 6490 Comm: syz.7.1587 Not tainted 6.1.138-syzkaller-00045-g9e207186c745 #0 [ 594.197076][ T6490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 594.207150][ T6490] Call Trace: [ 594.210455][ T6490] [ 594.213396][ T6490] __dump_stack+0x21/0x24 [ 594.217754][ T6490] dump_stack_lvl+0xee/0x150 [ 594.222632][ T6490] ? __cfi_dump_stack_lvl+0x8/0x8 [ 594.227956][ T6490] ? _parse_integer+0x2a/0x40 [ 594.232670][ T6490] dump_stack+0x15/0x24 [ 594.236943][ T6490] should_fail_ex+0x3d4/0x520 [ 594.242186][ T6490] should_fail+0xb/0x10 [ 594.246587][ T6490] should_fail_usercopy+0x1a/0x20 [ 594.251641][ T6490] _copy_from_user+0x1e/0xc0 [ 594.256574][ T6490] ___sys_sendmsg+0x155/0x290 [ 594.261505][ T6490] ? __sys_sendmsg+0x270/0x270 [ 594.266288][ T6490] ? __kasan_check_write+0x14/0x20 [ 594.271468][ T6490] ? proc_fail_nth_write+0x17a/0x1f0 [ 594.276777][ T6490] ? vfs_write+0x9d6/0xca0 [ 594.281209][ T6490] ? __fdget+0x19c/0x220 [ 594.285581][ T6490] __x64_sys_sendmsg+0x1f0/0x2c0 [ 594.290953][ T6490] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 594.296421][ T6490] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 594.302506][ T6490] x64_sys_call+0x171/0x9a0 [ 594.307276][ T6490] do_syscall_64+0x4c/0xa0 [ 594.311698][ T6490] ? clear_bhb_loop+0x15/0x70 [ 594.316643][ T6490] ? clear_bhb_loop+0x15/0x70 [ 594.321534][ T6490] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 594.328350][ T6490] RIP: 0033:0x7f940398e969 [ 594.332876][ T6490] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 594.352489][ T6490] RSP: 002b:00007f9404836038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 594.360913][ T6490] RAX: ffffffffffffffda RBX: 00007f9403bb5fa0 RCX: 00007f940398e969 [ 594.369482][ T6490] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000007 [ 594.377535][ T6490] RBP: 00007f9404836090 R08: 0000000000000000 R09: 0000000000000000 [ 594.394187][ T6490] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 594.402700][ T6490] R13: 0000000000000000 R14: 00007f9403bb5fa0 R15: 00007ffd0d947578 [ 594.411201][ T6490] [ 594.656229][ T6499] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 594.665364][ T6499] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 595.187235][ T5602] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 595.378870][ T5602] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 595.399816][ T5602] usb 1-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 595.437786][ T5602] usb 1-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 595.507017][ T5602] usb 1-1: config 0 interface 0 has no altsetting 0 [ 595.520887][ T5602] usb 1-1: New USB device found, idVendor=0458, idProduct=5015, bcdDevice= 0.00 [ 595.642704][ T5602] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 595.807137][ T6508] loop2: detected capacity change from 0 to 8192 [ 595.814046][ T5602] usb 1-1: config 0 descriptor?? [ 595.837824][ T6508] loop2: p4 < > [ 596.058486][ T6505] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 596.108664][ T6505] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 596.132280][ T6453] udevd[6453]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 596.236839][ T5869] EXT4-fs (loop6): unmounting filesystem. [ 596.262760][ T6517] FAULT_INJECTION: forcing a failure. [ 596.262760][ T6517] name failslab, interval 1, probability 0, space 0, times 0 [ 596.276159][ T6517] CPU: 1 PID: 6517 Comm: syz.6.1595 Not tainted 6.1.138-syzkaller-00045-g9e207186c745 #0 [ 596.285995][ T6517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 596.296321][ T6517] Call Trace: [ 596.299609][ T6517] [ 596.302653][ T6517] __dump_stack+0x21/0x24 [ 596.307109][ T6517] dump_stack_lvl+0xee/0x150 [ 596.311813][ T6517] ? __cfi_dump_stack_lvl+0x8/0x8 [ 596.317029][ T6517] ? __cfi_vfs_write+0x10/0x10 [ 596.322164][ T6517] dump_stack+0x15/0x24 [ 596.326519][ T6517] should_fail_ex+0x3d4/0x520 [ 596.331300][ T6517] __should_failslab+0xac/0xf0 [ 596.333781][ T6518] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1592'. [ 596.336081][ T6517] ? do_epoll_create+0x109/0x390 [ 596.349941][ T6517] should_failslab+0x9/0x20 [ 596.354714][ T6517] __kmem_cache_alloc_node+0x3d/0x2c0 [ 596.360285][ T6517] ? do_epoll_create+0x109/0x390 [ 596.365413][ T6517] kmalloc_trace+0x29/0xb0 [ 596.369959][ T6517] do_epoll_create+0x109/0x390 [ 596.375086][ T6517] __x64_sys_epoll_create1+0x37/0x40 [ 596.380390][ T6517] x64_sys_call+0x346/0x9a0 [ 596.384994][ T6517] do_syscall_64+0x4c/0xa0 [ 596.389496][ T6517] ? clear_bhb_loop+0x15/0x70 [ 596.394185][ T6517] ? clear_bhb_loop+0x15/0x70 [ 596.398876][ T6517] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 596.404992][ T6517] RIP: 0033:0x7feb1798e969 [ 596.409411][ T6517] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 596.429293][ T6517] RSP: 002b:00007feb188be038 EFLAGS: 00000246 ORIG_RAX: 0000000000000123 [ 596.438074][ T6517] RAX: ffffffffffffffda RBX: 00007feb17bb5fa0 RCX: 00007feb1798e969 [ 596.446313][ T6517] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 596.454381][ T6517] RBP: 00007feb188be090 R08: 0000000000000000 R09: 0000000000000000 [ 596.462445][ T6517] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 596.470420][ T6517] R13: 0000000000000000 R14: 00007feb17bb5fa0 R15: 00007fff7bb1b398 [ 596.478401][ T6517] [ 597.217124][ T6532] loop7: detected capacity change from 0 to 512 [ 597.257636][ T28] kauditd_printk_skb: 121 callbacks suppressed [ 597.257732][ T28] audit: type=1326 audit(1748315242.225:15351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6528 comm="syz.7.1599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f940398e969 code=0x7ffc0000 [ 597.422304][ T6532] EXT4-fs error (device loop7): ext4_orphan_get:1400: inode #15: comm syz.7.1599: casefold flag without casefold feature [ 597.436677][ T6532] EXT4-fs error (device loop7): ext4_orphan_get:1405: comm syz.7.1599: couldn't read orphan inode 15 (err -117) [ 597.451312][ T6532] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 598.044961][ T5602] usbhid 1-1:0.0: can't add hid device: -71 [ 598.051940][ T5886] EXT4-fs (loop7): unmounting filesystem. [ 598.053483][ T28] audit: type=1326 audit(1748315242.225:15352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6528 comm="syz.7.1599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f940398e969 code=0x7ffc0000 [ 598.058839][ T5602] usbhid: probe of 1-1:0.0 failed with error -71 [ 598.293620][ T6542] loop6: detected capacity change from 0 to 512 [ 598.340450][ T28] audit: type=1326 audit(1748315242.235:15353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6528 comm="syz.7.1599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f940398e969 code=0x7ffc0000 [ 598.366753][ T5602] usb 1-1: USB disconnect, device number 27 [ 598.430009][ T6542] EXT4-fs error (device loop6): ext4_orphan_get:1400: inode #15: comm syz.6.1600: casefold flag without casefold feature [ 598.443904][ T6542] EXT4-fs error (device loop6): ext4_orphan_get:1405: comm syz.6.1600: couldn't read orphan inode 15 (err -117) [ 598.458384][ T6542] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 599.109771][ T6547] binder: BINDER_SET_CONTEXT_MGR already set [ 599.115901][ T6547] binder: 6546:6547 ioctl 4018620d 200000000040 returned -16 [ 599.133031][ T28] audit: type=1326 audit(1748315242.235:15354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6528 comm="syz.7.1599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f940398e969 code=0x7ffc0000 [ 599.162270][ T28] audit: type=1326 audit(1748315242.235:15355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6528 comm="syz.7.1599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f940398e969 code=0x7ffc0000 [ 599.190845][ T28] audit: type=1326 audit(1748315242.235:15356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6528 comm="syz.7.1599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f940398e969 code=0x7ffc0000 [ 599.644836][ T6554] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 599.653966][ T6554] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 599.653975][ T28] audit: type=1326 audit(1748315242.235:15357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6528 comm="syz.7.1599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f940398e969 code=0x7ffc0000 [ 599.654010][ T28] audit: type=1326 audit(1748315242.235:15358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6528 comm="syz.7.1599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f940398e969 code=0x7ffc0000 [ 599.710741][ T6554] 9pnet_fd: Insufficient options for proto=fd [ 599.717616][ T28] audit: type=1326 audit(1748315242.235:15359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6528 comm="syz.7.1599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f940398e969 code=0x7ffc0000 [ 599.741702][ T28] audit: type=1326 audit(1748315242.235:15360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6528 comm="syz.7.1599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f940398e969 code=0x7ffc0000 [ 599.770488][ T6558] loop2: detected capacity change from 0 to 16 [ 599.781033][ T6558] erofs: (device loop2): mounted with root inode @ nid 36. [ 599.801140][ T6558] FAULT_INJECTION: forcing a failure. [ 599.801140][ T6558] name failslab, interval 1, probability 0, space 0, times 0 [ 599.814233][ T6558] CPU: 1 PID: 6558 Comm: syz.2.1606 Not tainted 6.1.138-syzkaller-00045-g9e207186c745 #0 [ 599.824153][ T6558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 599.835409][ T6558] Call Trace: [ 599.838970][ T6558] [ 599.841918][ T6558] __dump_stack+0x21/0x24 [ 599.846623][ T6558] dump_stack_lvl+0xee/0x150 [ 599.851689][ T6558] ? __cfi_dump_stack_lvl+0x8/0x8 [ 599.856833][ T6558] dump_stack+0x15/0x24 [ 599.861026][ T6558] should_fail_ex+0x3d4/0x520 [ 599.865815][ T6558] ? getname_flags+0xb9/0x500 [ 599.871093][ T6558] __should_failslab+0xac/0xf0 [ 599.876153][ T6558] should_failslab+0x9/0x20 [ 599.880863][ T6558] kmem_cache_alloc+0x3b/0x330 [ 599.885730][ T6558] ? __schedule+0xb8f/0x14e0 [ 599.890343][ T6558] getname_flags+0xb9/0x500 [ 599.894964][ T6558] user_path_at_empty+0x30/0x1c0 [ 599.899930][ T6558] __se_sys_chdir+0x91/0x280 [ 599.904543][ T6558] ? __x64_sys_chdir+0x40/0x40 [ 599.909318][ T6558] ? fpregs_restore_userregs+0x128/0x260 [ 599.915138][ T6558] __x64_sys_chdir+0x38/0x40 [ 599.919739][ T6558] x64_sys_call+0xbb/0x9a0 [ 599.924353][ T6558] do_syscall_64+0x4c/0xa0 [ 599.928882][ T6558] ? clear_bhb_loop+0x15/0x70 [ 599.933663][ T6558] ? clear_bhb_loop+0x15/0x70 [ 599.938400][ T6558] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 599.944404][ T6558] RIP: 0033:0x7f8a9d58e969 [ 599.948840][ T6558] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 599.969083][ T6558] RSP: 002b:00007f8a9d3de038 EFLAGS: 00000246 ORIG_RAX: 0000000000000050 [ 599.977603][ T6558] RAX: ffffffffffffffda RBX: 00007f8a9d7b6160 RCX: 00007f8a9d58e969 [ 599.985667][ T6558] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000003c0 [ 599.993637][ T6558] RBP: 00007f8a9d3de090 R08: 0000000000000000 R09: 0000000000000000 [ 600.001612][ T6558] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 600.009699][ T6558] R13: 0000000000000000 R14: 00007f8a9d7b6160 R15: 00007ffd279ec0c8 [ 600.017761][ T6558] [ 600.021487][ T6558] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=86 [ 600.030548][ T6558] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=46 [ 600.209301][ T5869] EXT4-fs (loop6): unmounting filesystem. [ 600.530850][ T6565] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1609'. [ 600.541171][ T6566] loop7: detected capacity change from 0 to 16 [ 600.552766][ T6566] erofs: (device loop7): mounted with root inode @ nid 36. [ 600.562574][ T6566] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=86 [ 600.572313][ T6566] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=46 [ 601.157992][ T6576] loop6: detected capacity change from 0 to 256 [ 601.187255][ T2646] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 601.195867][ T6576] FAT-fs (loop6): Unrecognized mount option "shor†name=mixed" or missing value [ 603.434424][ T6580] loop7: detected capacity change from 0 to 512 [ 604.847923][ T28] kauditd_printk_skb: 143 callbacks suppressed [ 604.848116][ T28] audit: type=1326 audit(1748315246.455:15504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6575 comm="syz.6.1612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb1798e969 code=0x7ffc0000 [ 605.006946][ T28] audit: type=1326 audit(1748315246.455:15505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6575 comm="syz.6.1612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb1798e969 code=0x7ffc0000 [ 605.033494][ T2646] usb 3-1: Using ep0 maxpacket: 16 [ 605.066588][ T28] audit: type=1326 audit(1748315247.225:15506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6577 comm="syz.7.1613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f940398e969 code=0x7ffc0000 [ 605.115307][ T2646] usb 3-1: device descriptor read/all, error -71 [ 605.118283][ T28] audit: type=1326 audit(1748315247.225:15507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6577 comm="syz.7.1613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f940398e969 code=0x7ffc0000 [ 605.209676][ T28] audit: type=1326 audit(1748315247.325:15508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6577 comm="syz.7.1613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f940398e969 code=0x7ffc0000 [ 605.237519][ T6580] EXT4-fs error (device loop7): ext4_orphan_get:1400: inode #15: comm syz.7.1613: casefold flag without casefold feature [ 605.251506][ T6580] EXT4-fs error (device loop7): ext4_orphan_get:1405: comm syz.7.1613: couldn't read orphan inode 15 (err -117) [ 605.263799][ T6580] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 605.264987][ T28] audit: type=1326 audit(1748315247.325:15509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6577 comm="syz.7.1613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f940398e969 code=0x7ffc0000 [ 605.360380][ T6593] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 605.369740][ T6593] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 605.385863][ T6593] 9pnet_fd: Insufficient options for proto=fd [ 605.395485][ T5602] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 605.549029][ T28] audit: type=1326 audit(1748315247.325:15510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6577 comm="syz.7.1613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f940398e969 code=0x7ffc0000 [ 605.603744][ T28] audit: type=1326 audit(1748315247.425:15511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6577 comm="syz.7.1613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f940398e969 code=0x7ffc0000 [ 605.628681][ T5602] usb 1-1: Using ep0 maxpacket: 16 [ 605.634267][ T28] audit: type=1326 audit(1748315247.425:15512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6577 comm="syz.7.1613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f940398e969 code=0x7ffc0000 [ 605.659133][ T28] audit: type=1326 audit(1748315247.425:15513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6577 comm="syz.7.1613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f940398e969 code=0x7ffc0000 [ 605.683859][ T5602] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 605.700393][ T6586] loop6: detected capacity change from 0 to 256 [ 605.711966][ T6586] FAT-fs (loop6): Unrecognized mount option "shor†name=mixed" or missing value [ 605.721179][ T5602] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 605.721601][ T283] EXT4-fs (loop1): unmounting filesystem. [ 605.757985][ T6594] bridge0: port 1(bridge_slave_0) entered blocking state [ 605.765415][ T6594] bridge0: port 1(bridge_slave_0) entered disabled state [ 605.773875][ T6594] device bridge_slave_0 entered promiscuous mode [ 605.781156][ T6594] bridge0: port 2(bridge_slave_1) entered blocking state [ 605.788690][ T6594] bridge0: port 2(bridge_slave_1) entered disabled state [ 605.796538][ T6594] device bridge_slave_1 entered promiscuous mode [ 605.813684][ T5602] usb 1-1: New USB device found, idVendor=172f, idProduct=0034, bcdDevice= 0.00 [ 605.830315][ T5602] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 605.879837][ T5602] usb 1-1: config 0 descriptor?? [ 605.966064][ T5886] EXT4-fs (loop7): unmounting filesystem. [ 606.215807][ T6588] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 606.233932][ T6603] FAULT_INJECTION: forcing a failure. [ 606.233932][ T6603] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 606.247394][ T6603] CPU: 0 PID: 6603 Comm: syz.7.1618 Not tainted 6.1.138-syzkaller-00045-g9e207186c745 #0 [ 606.257577][ T6603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 606.262792][ T6588] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 606.268258][ T6603] Call Trace: [ 606.268270][ T6603] [ 606.283279][ T6603] __dump_stack+0x21/0x24 [ 606.285399][ T6588] SELinux: Context system_u:object_r:systemd_logger_exec_t:s0 is not valid (left unmapped). [ 606.287653][ T6603] dump_stack_lvl+0xee/0x150 [ 606.301870][ T6588] x_tables: unsorted entry at hook 3 [ 606.302475][ T6603] ? __cfi_dump_stack_lvl+0x8/0x8 [ 606.312886][ T6603] dump_stack+0x15/0x24 [ 606.317263][ T6603] should_fail_ex+0x3d4/0x520 [ 606.322158][ T6603] should_fail+0xb/0x10 [ 606.326562][ T6603] should_fail_usercopy+0x1a/0x20 [ 606.331631][ T6603] _copy_from_user+0x1e/0xc0 [ 606.336254][ T6603] iovec_from_user+0x1aa/0x2e0 [ 606.341237][ T6603] ? __kasan_check_write+0x14/0x20 [ 606.346385][ T6603] __import_iovec+0x71/0x470 [ 606.351010][ T6603] import_iovec+0x7c/0xb0 [ 606.355619][ T6603] do_preadv+0x1bd/0x330 [ 606.359985][ T6603] ? vfs_writev+0x590/0x590 [ 606.364531][ T6603] ? bpf_trace_run2+0x104/0x250 [ 606.369498][ T6603] ? fput+0x154/0x1a0 [ 606.373680][ T6603] ? __bpf_trace_sys_enter+0x62/0x70 [ 606.378991][ T6603] __x64_sys_preadv+0x9e/0xb0 [ 606.383811][ T6603] x64_sys_call+0x370/0x9a0 [ 606.388438][ T6603] do_syscall_64+0x4c/0xa0 [ 606.393087][ T6603] ? clear_bhb_loop+0x15/0x70 [ 606.397871][ T6603] ? clear_bhb_loop+0x15/0x70 [ 606.402662][ T6603] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 606.408844][ T6603] RIP: 0033:0x7f940398e969 [ 606.413509][ T6603] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 606.433475][ T6603] RSP: 002b:00007f9404836038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 606.441925][ T6603] RAX: ffffffffffffffda RBX: 00007f9403bb5fa0 RCX: 00007f940398e969 [ 606.450014][ T6603] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000006 [ 606.458105][ T6603] RBP: 00007f9404836090 R08: 0000000000000000 R09: 0000000000000000 [ 606.466191][ T6603] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 606.474268][ T6603] R13: 0000000000000000 R14: 00007f9403bb5fa0 R15: 00007ffd0d947578 [ 606.482342][ T6603] [ 606.500170][ T6605] FAULT_INJECTION: forcing a failure. [ 606.500170][ T6605] name failslab, interval 1, probability 0, space 0, times 0 [ 606.546217][ T6605] CPU: 0 PID: 6605 Comm: syz.6.1620 Not tainted 6.1.138-syzkaller-00045-g9e207186c745 #0 [ 606.556175][ T6605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 606.566384][ T6605] Call Trace: [ 606.569689][ T6605] [ 606.572685][ T6605] __dump_stack+0x21/0x24 [ 606.577189][ T6605] dump_stack_lvl+0xee/0x150 [ 606.581811][ T6605] ? __cfi_dump_stack_lvl+0x8/0x8 [ 606.586959][ T6605] dump_stack+0x15/0x24 [ 606.591146][ T6605] should_fail_ex+0x3d4/0x520 [ 606.595940][ T6605] ? getname_flags+0xb9/0x500 [ 606.600702][ T6605] __should_failslab+0xac/0xf0 [ 606.605839][ T6605] should_failslab+0x9/0x20 [ 606.610484][ T6605] kmem_cache_alloc+0x3b/0x330 [ 606.615369][ T6605] getname_flags+0xb9/0x500 [ 606.620000][ T6605] user_path_at_empty+0x30/0x1c0 [ 606.624495][ T5602] waltop 0003:172F:0034.000A: item fetching failed at offset 0/2 [ 606.625404][ T6605] do_utimes+0x138/0x2a0 [ 606.637527][ T6605] ? __htab_map_lookup_elem+0x1df/0x240 [ 606.643251][ T6605] ? __cfi_do_utimes+0x10/0x10 [ 606.643773][ T5602] waltop: probe of 0003:172F:0034.000A failed with error -22 [ 606.648138][ T6605] __x64_sys_utime+0x12a/0x1d0 [ 606.648175][ T6605] ? __cfi___x64_sys_utime+0x10/0x10 [ 606.648204][ T6605] ? __bpf_trace_sys_enter+0x62/0x70 [ 606.671277][ T6605] ? trace_sys_enter+0x3d/0x50 [ 606.676156][ T6605] x64_sys_call+0x14e/0x9a0 [ 606.680705][ T6605] do_syscall_64+0x4c/0xa0 [ 606.685348][ T6605] ? clear_bhb_loop+0x15/0x70 [ 606.690579][ T6605] ? clear_bhb_loop+0x15/0x70 [ 606.695284][ T6605] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 606.701470][ T6605] RIP: 0033:0x7feb1798e969 [ 606.706001][ T6605] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 606.714739][ T3443] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 606.726071][ T6605] RSP: 002b:00007feb188be038 EFLAGS: 00000246 ORIG_RAX: 0000000000000084 [ 606.726102][ T6605] RAX: ffffffffffffffda RBX: 00007feb17bb5fa0 RCX: 00007feb1798e969 [ 606.726118][ T6605] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000200 [ 606.726131][ T6605] RBP: 00007feb188be090 R08: 0000000000000000 R09: 0000000000000000 [ 606.726143][ T6605] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 606.726155][ T6605] R13: 0000000000000000 R14: 00007feb17bb5fa0 R15: 00007fff7bb1b398 [ 606.734492][ T3443] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 606.742132][ T6605] [ 606.806386][ T3443] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 606.815280][ T3443] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 606.824721][ T3443] bridge0: port 1(bridge_slave_0) entered blocking state [ 606.831900][ T3443] bridge0: port 1(bridge_slave_0) entered forwarding state [ 606.842139][ T5620] usb 1-1: USB disconnect, device number 28 [ 606.861330][ T3443] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 606.871166][ T3443] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 606.881229][ T3443] bridge0: port 2(bridge_slave_1) entered blocking state [ 606.888311][ T3443] bridge0: port 2(bridge_slave_1) entered forwarding state [ 607.547930][ T6615] loop7: detected capacity change from 0 to 1024 [ 607.557924][ T6615] EXT4-fs: Ignoring removed bh option [ 607.663867][ T3443] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 607.765736][ T6615] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 607.839482][ T3443] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 607.859792][ T3443] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 607.876150][ T3443] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 608.027830][ T3443] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 608.099164][ T6613] FAULT_INJECTION: forcing a failure. [ 608.099164][ T6613] name failslab, interval 1, probability 0, space 0, times 0 [ 608.124561][ T6613] CPU: 1 PID: 6613 Comm: syz.6.1623 Not tainted 6.1.138-syzkaller-00045-g9e207186c745 #0 [ 608.126744][ T5886] EXT4-fs (loop7): unmounting filesystem. [ 608.134592][ T6613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 608.134608][ T6613] Call Trace: [ 608.134614][ T6613] [ 608.134623][ T6613] __dump_stack+0x21/0x24 [ 608.134655][ T6613] dump_stack_lvl+0xee/0x150 [ 608.134681][ T6613] ? __cfi_dump_stack_lvl+0x8/0x8 [ 608.134707][ T6613] ? call_rcu+0xb83/0xf90 [ 608.134728][ T6613] ? exit_to_user_mode_loop+0x9b/0xb0 [ 608.134751][ T6613] dump_stack+0x15/0x24 [ 608.134776][ T6613] should_fail_ex+0x3d4/0x520 [ 608.134800][ T6613] __should_failslab+0xac/0xf0 [ 608.134824][ T6613] ? tracepoint_probe_unregister+0x1e6/0x8b0 [ 608.201440][ T6613] should_failslab+0x9/0x20 [ 608.206141][ T6613] __kmem_cache_alloc_node+0x3d/0x2c0 [ 608.211690][ T6613] ? __cfi_mutex_lock+0x10/0x10 [ 608.216726][ T6613] ? delete_node+0x2b3/0xa60 [ 608.221575][ T6613] ? tracepoint_probe_unregister+0x1e6/0x8b0 [ 608.227780][ T6613] __kmalloc+0xa1/0x1e0 [ 608.232207][ T6613] ? __cfi___bpf_trace_sched_switch+0x10/0x10 [ 608.238571][ T6613] tracepoint_probe_unregister+0x1e6/0x8b0 [ 608.244576][ T6613] bpf_probe_unregister+0x61/0x70 [ 608.249966][ T6613] bpf_raw_tp_link_release+0x63/0x90 [ 608.255257][ T6613] bpf_link_free+0x13a/0x390 [ 608.260103][ T6613] ? bpf_link_put_deferred+0x20/0x20 [ 608.265466][ T6613] ? security_file_free+0xd8/0xf0 [ 608.270632][ T6613] bpf_link_release+0x15f/0x170 [ 608.275620][ T6613] ? __cfi_bpf_link_release+0x10/0x10 [ 608.281268][ T6613] __fput+0x1fc/0x8f0 [ 608.285258][ T6613] ? _raw_spin_unlock+0x4c/0x70 [ 608.290462][ T6613] ____fput+0x15/0x20 [ 608.294559][ T6613] task_work_run+0x1db/0x240 [ 608.299191][ T6613] ? __cfi_task_work_run+0x10/0x10 [ 608.304750][ T6613] ? __cfi___close_range+0x10/0x10 [ 608.310044][ T6613] exit_to_user_mode_loop+0x9b/0xb0 [ 608.315601][ T6613] exit_to_user_mode_prepare+0x5a/0xa0 [ 608.321458][ T6613] syscall_exit_to_user_mode+0x1a/0x30 [ 608.326997][ T6613] do_syscall_64+0x58/0xa0 [ 608.333086][ T6613] ? clear_bhb_loop+0x15/0x70 [ 608.337895][ T6613] ? clear_bhb_loop+0x15/0x70 [ 608.342588][ T6613] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 608.348688][ T6613] RIP: 0033:0x7feb1798e969 [ 608.353350][ T6613] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 608.373233][ T6613] RSP: 002b:00007feb188be038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 608.381731][ T6613] RAX: 0000000000000000 RBX: 00007feb17bb5fa0 RCX: 00007feb1798e969 [ 608.389822][ T6613] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000000 [ 608.397835][ T6613] RBP: 00007feb188be090 R08: 0000000000000000 R09: 0000000000000000 [ 608.406216][ T6613] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 608.414498][ T6613] R13: 0000000000000000 R14: 00007feb17bb5fa0 R15: 00007fff7bb1b398 [ 608.422696][ T6613] [ 608.430092][ T6613] CFI failure at __traceiter_sched_switch+0x9b/0xd0 (target: tp_stub_func+0x0/0x10; expected type: 0xee1f7a69) [ 608.430468][ T5602] CFI failure at __traceiter_sched_switch+0x9b/0xd0 (target: tp_stub_func+0x0/0x10; expected type: 0xee1f7a69) [ 608.442021][ T6613] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 608.459804][ T6613] CPU: 0 PID: 6613 Comm: syz.6.1623 Not tainted 6.1.138-syzkaller-00045-g9e207186c745 #0 [ 608.469700][ T6613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 608.480000][ T6613] RIP: 0010:__traceiter_sched_switch+0x9b/0xd0 [ 608.486250][ T6613] Code: 80 3c 30 00 74 05 e8 24 54 69 00 49 8b 7d 08 44 89 e6 48 8b 55 c8 48 8b 4d c0 44 8b 45 d4 41 ba 97 85 e0 11 45 03 57 fc 74 02 <0f> 0b 41 ff d7 48 83 c3 18 48 89 d8 48 c1 e8 03 42 80 3c 30 00 74 [ 608.505947][ T6613] RSP: 0018:ffffc9000279fb90 EFLAGS: 00010096 [ 608.512123][ T6613] RAX: 1ffff110266acdd6 RBX: ffff888133566ea8 RCX: ffff88811d3f6540 [ 608.520448][ T6613] RDX: ffff888120059440 RSI: 0000000000000000 RDI: ffffc90000ab3000 [ 608.528590][ T6613] RBP: ffffc9000279fbd0 R08: 0000000000000080 R09: fffffbfff0ee424e [ 608.536561][ T6613] R10: 00000000b720eca3 R11: 1ffffffff0ee424d R12: 0000000000000000 [ 608.544625][ T6613] R13: ffff888133566ea8 R14: dffffc0000000000 R15: ffffffff81710d60 [ 608.552868][ T6613] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 608.561901][ T6613] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 608.568759][ T6613] CR2: 00007feb179edbf8 CR3: 0000000117af4000 CR4: 00000000003506b0 [ 608.576812][ T6613] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 608.584820][ T6613] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 608.592788][ T6613] Call Trace: [ 608.596147][ T6613] [ 608.599166][ T6613] __schedule+0x1263/0x14e0 [ 608.603678][ T6613] ? release_firmware_map_entry+0x194/0x194 [ 608.609704][ T6613] ? memcpy+0x56/0x70 [ 608.614238][ T6613] ? __kasan_check_write+0x14/0x20 [ 608.619664][ T6613] do_task_dead+0x9c/0xa0 [ 608.624097][ T6613] do_exit+0x1baa/0x2650 [ 608.628439][ T6613] ? __cfi_do_exit+0x10/0x10 [ 608.633221][ T6613] ? kick_process+0xee/0x160 [ 608.638012][ T6613] ? zap_other_threads+0x2b7/0x2f0 [ 608.643138][ T6613] do_group_exit+0x210/0x2d0 [ 608.647838][ T6613] __x64_sys_exit_group+0x3f/0x40 [ 608.652960][ T6613] x64_sys_call+0x7b4/0x9a0 [ 608.657508][ T6613] do_syscall_64+0x4c/0xa0 [ 608.661961][ T6613] ? clear_bhb_loop+0x15/0x70 [ 608.666727][ T6613] ? clear_bhb_loop+0x15/0x70 [ 608.671489][ T6613] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 608.677469][ T6613] RIP: 0033:0x7feb1798e969 [ 608.681968][ T6613] Code: Unable to access opcode bytes at 0x7feb1798e93f. [ 608.688977][ T6613] RSP: 002b:00007feb188bdf48 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 608.697556][ T6613] RAX: ffffffffffffffda RBX: 00007feb179edbf8 RCX: 00007feb1798e969 [ 608.706041][ T6613] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 608.714356][ T6613] RBP: 0000000000000009 R08: 00007feb188bbce7 R09: 0000000000000001 [ 608.722520][ T6613] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 608.730495][ T6613] R13: 0000000000000000 R14: 00007feb17bb5fa0 R15: 00007fff7bb1b398 [ 608.738646][ T6613] [ 608.741745][ T6613] Modules linked in: [ 608.745652][ T6613] ---[ end trace 0000000000000000 ]--- [ 608.745688][ T5602] invalid opcode: 0000 [#2] PREEMPT SMP KASAN [ 608.751118][ T6613] RIP: 0010:__traceiter_sched_switch+0x9b/0xd0 [ 608.757204][ T5602] CPU: 1 PID: 5602 Comm: kworker/1:0 Tainted: G D 6.1.138-syzkaller-00045-g9e207186c745 #0 [ 608.763344][ T6613] Code: 80 3c 30 00 74 05 e8 24 54 69 00 49 8b 7d 08 44 89 e6 48 8b 55 c8 48 8b 4d c0 44 8b 45 d4 41 ba 97 85 e0 11 45 03 57 fc 74 02 <0f> 0b 41 ff d7 48 83 c3 18 48 89 d8 48 c1 e8 03 42 80 3c 30 00 74 [ 608.775224][ T5602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 608.795005][ T6613] RSP: 0018:ffffc9000279fb90 EFLAGS: 00010096 [ 608.805585][ T5602] Workqueue: 0x0 (ipv6_addrconf) [ 608.811915][ T6613] RAX: 1ffff110266acdd6 RBX: ffff888133566ea8 RCX: ffff88811d3f6540 [ 608.811939][ T6613] RDX: ffff888120059440 RSI: 0000000000000000 RDI: ffffc90000ab3000 [ 608.817037][ T5602] [ 608.817046][ T5602] RIP: 0010:__traceiter_sched_switch+0x9b/0xd0 [ 608.825433][ T6613] RBP: ffffc9000279fbd0 R08: 0000000000000080 R09: fffffbfff0ee424e [ 608.833482][ T5602] Code: 80 3c 30 00 74 05 e8 24 54 69 00 49 8b 7d 08 44 89 e6 48 8b 55 c8 48 8b 4d c0 44 8b 45 d4 41 ba 97 85 e0 11 45 03 57 fc 74 02 <0f> 0b 41 ff d7 48 83 c3 18 48 89 d8 48 c1 e8 03 42 80 3c 30 00 74 [ 608.836763][ T6613] R10: 00000000b720eca3 R11: 1ffffffff0ee424d R12: 0000000000000000 [ 608.843352][ T5602] RSP: 0018:ffffc90006c9fc30 EFLAGS: 00010096 [ 608.851581][ T6613] R13: ffff888133566ea8 R14: dffffc0000000000 R15: ffffffff81710d60 [ 608.871970][ T5602] [ 608.871982][ T5602] RAX: 1ffff110266acdd6 RBX: ffff888133566ea8 RCX: ffff88811cea1440 [ 608.880648][ T6613] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 608.887171][ T5602] RDX: ffff8881186bd100 RSI: 0000000000000000 RDI: ffffc90000ab3000 [ 608.895490][ T6613] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 608.897988][ T5602] RBP: ffffc90006c9fc70 R08: 0000000000000402 R09: fffffbfff0ee424e [ 608.906472][ T6613] CR2: 00007feb179edbf8 CR3: 0000000117af4000 CR4: 00000000003506b0 [ 608.915900][ T5602] R10: 00000000b720eca3 R11: 1ffffffff0ee424d R12: 0000000000000000 [ 608.924409][ T6613] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 608.931298][ T5602] R13: ffff888133566ea8 R14: dffffc0000000000 R15: ffffffff81710d60 [ 608.939978][ T6613] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 608.948096][ T5602] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 608.956591][ T6613] Kernel panic - not syncing: Fatal exception [ 608.964940][ T5602] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 608.964964][ T5602] CR2: 0000001b33a02ff8 CR3: 0000000006e0f000 CR4: 00000000003506a0 [ 608.964987][ T5602] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 608.964999][ T5602] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 608.965011][ T5602] Call Trace: [ 608.965018][ T5602] [ 608.965033][ T5602] __schedule+0x1263/0x14e0 [ 608.965065][ T5602] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 608.965100][ T5602] ? release_firmware_map_entry+0x194/0x194 [ 608.965126][ T5602] ? process_one_work+0x88f/0xc40 [ 608.965145][ T5602] ? wq_worker_sleeping+0x64/0x280 [ 608.965168][ T5602] schedule+0xbd/0x170 [ 608.965192][ T5602] worker_thread+0xea5/0x11f0 [ 608.965208][ T5602] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 608.965238][ T5602] kthread+0x281/0x320 [ 608.965256][ T5602] ? __cfi_worker_thread+0x10/0x10 [ 608.965272][ T5602] ? __cfi_kthread+0x10/0x10 [ 608.965291][ T5602] ret_from_fork+0x1f/0x30 [ 608.965315][ T5602] [ 608.965321][ T5602] Modules linked in: [ 608.974183][ T5602] ---[ end trace 0000000000000000 ]--- [ 608.974200][ T5602] RIP: 0010:__traceiter_sched_switch+0x9b/0xd0 [ 608.974230][ T5602] Code: 80 3c 30 00 74 05 e8 24 54 69 00 49 8b 7d 08 44 89 e6 48 8b 55 c8 48 8b 4d c0 44 8b 45 d4 41 ba 97 85 e0 11 45 03 57 fc 74 02 <0f> 0b 41 ff d7 48 83 c3 18 48 89 d8 48 c1 e8 03 42 80 3c 30 00 74 [ 608.974247][ T5602] RSP: 0018:ffffc9000279fb90 EFLAGS: 00010096 [ 608.974264][ T5602] RAX: 1ffff110266acdd6 RBX: ffff888133566ea8 RCX: ffff88811d3f6540 [ 608.974279][ T5602] RDX: ffff888120059440 RSI: 0000000000000000 RDI: ffffc90000ab3000 [ 608.974292][ T5602] RBP: ffffc9000279fbd0 R08: 0000000000000080 R09: fffffbfff0ee424e [ 608.974305][ T5602] R10: 00000000b720eca3 R11: 1ffffffff0ee424d R12: 0000000000000000 [ 608.974318][ T5602] R13: ffff888133566ea8 R14: dffffc0000000000 R15: ffffffff81710d60 [ 608.974333][ T5602] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 608.974349][ T5602] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 608.974361][ T5602] CR2: 0000001b33a02ff8 CR3: 0000000006e0f000 CR4: 00000000003506a0 [ 608.974377][ T5602] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 608.974388][ T5602] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 610.156159][ T6613] Shutting down cpus with NMI [ 610.407208][ T6613] Kernel Offset: disabled [ 610.411708][ T6613] Rebooting in 86400 seconds..