last executing test programs: 1m33.537464699s ago: executing program 4 (id=3043): ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) connect$inet(r0, &(0x7f00000006c0)={0x2, 0x0, @dev}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp\x00') read$FUSE(r1, &(0x7f0000002500)={0x2020}, 0x2020) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xa7fe2000) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) unshare(0x22020600) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) vmsplice(r2, &(0x7f0000000580)=[{&(0x7f0000000440)="c9250965", 0x4}], 0x1, 0x4) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r3}, &(0x7f0000000040), &(0x7f0000000080)=r4}, 0x20) syslog(0x3, &(0x7f0000007080)=""/74, 0x4a) 1m33.348694007s ago: executing program 4 (id=3059): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546000677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289d01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5467a932b77674e802a0d42bc6099ad238af770b5ed8925161729298700000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eeb1948bf42bc7fc2cb274849c9524154fa24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809b5b9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed3957f813567f7a95435ac15fc0288d9b2a169cdcacc413b48dafb7a2c8cb482bac0ac559eaf39027ceb379a902d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff7a1ef3282830689da6b53b263339863297771429d120000003341bf4abacac94500fca0493cf29b33dcc9ffffffffffffffd39f6ce0c6ff01589646efd1cf870cd7bb2366fdf870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1293b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd000c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c7df8be5877050c91301fb997316dbf17866fb84d4173731efe895ff2e1c55ef08235a0126e01254c44060926e90109b598502d3e959efc71f665c4d75cf2458e3542c9062ece84c99a861887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc74aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7ad333545794f37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f4df90400000000000000d6b2c5ea139376f24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff070000001e48418046c216c1f895778cb25122a2a998de0842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec84ac3571f02f647b3385b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba2f58ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df986741517abf11389b751f4e109b60000000000000000d6d5210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288d139bd3da230ed05a8fe64680b0a3f9f2dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30235b9100000000a55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854356cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c776f4b4ce07e1c6fa66fcfc7a228805f76785efc0ceb1c8e5729c66418d169fc03aa18854693ad2a182068e1e3a0e2505bc7f41019645466ac96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7e478950aa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a8684853abf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab848753203b458b97ec1afb079b4b4ba686fcdf240430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7db3c4be290159f6bcd75f0dda9de5532e71ae9e48b0ed1254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b70ebc660309e1e245b0fdf9743af932cd6db49a47613808bad959719c0000000000378ac2e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6ca0400966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e3030108000000000000c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bffef97dcecc467ace456597685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4cba6e6390a9f302c6eb2df7766411bef0ebb5000000000006065d6735eb7a00e127c0000000000400000000000bfb0bba79344643b1d8daa9f38e4b62c1e2af68c6f500000010000000000944e4505da485a3a4154387a0a88370d9ed9467b09c5888a06431df3f68abf0b366c4d5f8bea7b29c257ed756dff7a21c6b661cbdd43de65afd7f661d5c84f915c90e3d6ea012b68b787eb01d8320000000000000060176dacba0ec503a37fae6b472ec369c79ee6a420c0fd8d8d82fe136d5af6c30bfeb0a7275babfdb96a127aa9386e0671c6454245a18c1c8c49552cff5d27b547cdc34c0858c77a47a9ff86ee9fbd9ceda428716a4218821176d8067997527230fa67d26950d3e4f2750fa7c872874ad3a2d11f9f6eb08e6d7b6fa257b04d8ce36360f524e3dfd2211641f3d2637d86b80681eca50ce0eecafdd22d41fa515c15591e70ded4b70efac3cb42fb352d82e8f7573e8ed8248da356fa91a252976d3a4d8c1843a808000000000000000562a3ea93117076dd4940b7df50d78289fe66197525f6095f8662d232970bef61b03fa83027963a1a2e07cfee30c0d0b4c5877f93b3637ca21eab5afcf5d4638dfe8f9202aaad51c979049dd76d65368cbd4187d9f74257c7c4a23ac4a34eec5aa17e78c5167216f5e72138d20f8325dd5f8f96c32189c904eaef580987f1ce601a7cdc35461db9981ac42f9e24b0699bbe4e3d986e38952b0b7938eefd9e7a292bbb66367ad77045fdc18855c81c031dedd185c723238373fc698d676791d04f1ff5f0825a6619e844892f31ed190233d58ecee949e310bf2b1a51b8a33ae65a06d2b6ad386bf8dc49dd328bcd75d1843a13d68560175a18af7efc3c0f20e32f84f6aaaf000000000000000000000013a6c66bce74a8fb9092023df695da2714a7933d699d42de2bc4a85e0a0e22228290a7a7553ab93a16e42453ed86869a02df2f47d4088fac1772d3cd955c81cbf91c2ca7942942f61723b558079b82547844f92df2499c4b2c2ef2539e5daa8d8727baaa6b57"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r2}, 0x18) (async) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x6) (async, rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='mm_page_alloc\x00', r0}, 0x10) (rerun: 64) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = accept4$nfc_llcp(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x800) tee(r3, r0, 0x7, 0x0) 1m33.292635149s ago: executing program 4 (id=3060): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) shutdown(r0, 0x1) setsockopt$sock_int(r1, 0x1, 0x22, &(0x7f0000000040)=0x7, 0x4) recvmmsg(r1, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/27, 0x1b}, 0x3}], 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r5}, &(0x7f0000000040), &(0x7f0000000280)}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r6}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x50a10, 0x33822}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e22}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x440c5}, 0x240408d0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xf, &(0x7f0000000000)=@ringbuf={{0x18, 0x2}, {{}, {0x7, 0x0, 0x2}, {}, {0x85, 0x0, 0x0, 0x9c}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, &(0x7f0000000200)='GPL\x00'}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1m31.725097743s ago: executing program 4 (id=3066): timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000001400)=0x0) timer_gettime(r0, &(0x7f0000000000)) r1 = socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) r3 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x58e, &(0x7f0000000180), 0x1, 0x451, &(0x7f0000000780)="$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") bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES16=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='mem_disconnect\x00', r4}, 0x10) openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0x210942, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='mem_disconnect\x00', r5}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000004100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x0, 0xe, 0x0, &(0x7f00000003c0)="131c8701feaa16bca4ac74ab821d", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) mount$incfs(&(0x7f0000000580)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000005c0), 0x0, 0x0) getdents64(r7, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r8, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000180)=[{0x30, 0x5, 0xfe, 0xfffff038}, {0x80000006, 0x0, 0x0, 0x9}]}, 0x10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) unshare(0x60000600) 1m31.55624432s ago: executing program 4 (id=3068): r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080)="390000001300090468fe0700200000000000ff3f08000000480100100000000019002b000e0001000500000000000072080003000500030000", 0x39}], 0x5a) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r1}, 0x10) r2 = accept4$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, &(0x7f0000000000)=0x6e, 0x800) accept4(r2, &(0x7f0000000280)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000080)=0x80, 0x80000) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) write$binfmt_register(r3, &(0x7f0000000340)={0x3a, 'syz1', 0x3a, 'E', 0x3a, 0x9, 0x3a, '\x00', 0x3a, '-^#]&}[)', 0x3a, './file2', 0x3a, [0x50, 0x46, 0x46, 0xc, 0x43]}, 0x35) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x5}, 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x20, 0x0) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x1a00404, &(0x7f0000000080)={[{@grpquota}, {@nomblk_io_submit}]}, 0x1, 0xbac, &(0x7f00000017c0)="$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") r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r5}, &(0x7f0000000000), &(0x7f00000005c0)=r6}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r7, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0xf0ffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r8 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0xce342, 0x0) pwrite64(r8, 0x0, 0x0, 0x9000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r4}, 0x10) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) 1m31.347528449s ago: executing program 4 (id=3069): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x4) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x101042, 0x40) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r5}, 0x10) linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file2\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./file7\x00', 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) ptrace$setregset(0x4205, r0, 0x200, &(0x7f0000000100)={0x0}) r6 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a500850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x10) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000480)={0x10, 0x0, &(0x7f0000000580)=[@clear_death={0x400c630f, 0xfffffffc}], 0x0, 0x1000000, 0x0}) fsconfig$FSCONFIG_SET_BINARY(r6, 0x6, 0x0, 0x0, 0x0) r9 = fsmount(r6, 0x0, 0x0) r10 = openat$cgroup_subtree(r9, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r10, &(0x7f0000000300)=ANY=[], 0x5) 1m31.30248172s ago: executing program 32 (id=3069): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x4) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x101042, 0x40) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r5}, 0x10) linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file2\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./file7\x00', 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) ptrace$setregset(0x4205, r0, 0x200, &(0x7f0000000100)={0x0}) r6 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a500850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x10) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000480)={0x10, 0x0, &(0x7f0000000580)=[@clear_death={0x400c630f, 0xfffffffc}], 0x0, 0x1000000, 0x0}) fsconfig$FSCONFIG_SET_BINARY(r6, 0x6, 0x0, 0x0, 0x0) r9 = fsmount(r6, 0x0, 0x0) r10 = openat$cgroup_subtree(r9, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r10, &(0x7f0000000300)=ANY=[], 0x5) 15.504825346s ago: executing program 5 (id=3479): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x8, 0x2, 0x4, 0x5}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r3, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x800700, &(0x7f0000000580)={[{@grpjquota}, {@stripe={'stripe', 0x3d, 0x3}}, {@norecovery}, {@noinit_itable}, {@orlov}, {@minixdf}, {@i_version}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@errors_continue}, {@dioread_lock}, {@noblock_validity}, {@noquota}]}, 0x3, 0x465, &(0x7f0000000f00)="$eJzs3M9vFFUcAPDvzLYgP1sRf4CoKDE2/mhpQeXgRaOJB4wmesBjbQshLNTQmgghUo3Bi4kh6tl4NPEv8ObFqCcTr3o3JES5gJ5qZnYGtsvusoXtLrCfTzLlvZ23fe/bN2/mzbxdAhhcQxGRRGyOiD8iYqSWvWZ3bcv+uXLpzMy/l87MJLG8/PbfSV7u8qUzM2XR8n2bisxYGpF+mtTe3GDh1Olj09Xq3MkiP7F4/P2JhVOnnzt6fPrI3JG5E1MHDuzfN/niC1PPt2n8+o7DzOK6vPOj+V07Xn/3/Bszh86/98v3WXs3F/vr4+iW3Vng/yzn6l7+MvvxZLcr67MtdelkqI8NYVUqxSlgOB//I1GJa503Eq990tfGAWsquza1uYouLQN3sSQ6LBadFQTuFOWFPrv/LbceTT1uCxdfrt0AZXFfKbbanqFIizLDDfe33bQ7Ig4t/fdNtsUaPYcAAKj3+czXB+PZZvO/NB6oK7e1WEMZjYh7I2JbRNwXEdsj4v6IvOyDEfFQy5rWNX21cWno+vlPeuGmg+tANv97qVjbWjn/K2d/ldFKkduSxz+cHD5andtb/E3GYnh9lp9sU8ePr/7+Rat99fO/bMvqL+eCRTsuDDU8oJudXpzOJ6VdcPHjiJ1DzeJPrq4EZLf+OyJi5+p+9dYycfTp73a1KnTj+NvowjrT8rcRT9X6fyka4i8l7dcnJ+6J6tzeifKouN6vv517q1X9txR/F2T9v3Hl8d9YZDSpX69dWH0d5/78rOU9zc0e/+uSd/J+Kc8qH04vLp6cjFiXHMzzK16fuvbeMl+Wz+If29N8/G+rJTZkPx6OiOwgfiQiHo2Ix4q2Px4RT0TEnjbx//xK6323Q//PNj3/XT3+G/p/9YnKsZ9+aFV/Z/2/P0+NFa/k578b6LSBt/K3AwAAgDtFmn8GPknHr6bTdHy89hn+7bExrc4vLD5zeP6DE7O1z8qPxnBaPukaqXseOpksFb+xlp8qnhWX+/cVz42/qmzI8+Mz89XZPscOg25Ti/Gf+avS79YBa67ZOtpU0/XaFV9kA+4CjeM/XZk9+2YvGwP0lO9rw+C6wfhPe9UOoPdc/2FwNRv/Zxvy1gLg7uT6D4PL+IfBZfzD4DL+YSDdyvf6BzmRnTJvg2ZUR4p+7H3tkfY7dom1SDT/f5oAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADuVP8HAAD//89k5Nk=") 10.462769502s ago: executing program 5 (id=3485): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe3}]}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r3, &(0x7f0000004a80)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000007c0)="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", 0x167}], 0x1}}], 0x1, 0x400c0) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000480)=0x1df9, 0x4) sendto$inet(r3, &(0x7f0000000580)="17", 0x1d4c, 0x10048095, 0x0, 0x6d00) 9.256987412s ago: executing program 5 (id=3493): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x124, 0x65, 0x0, 0x70bd27, 0x0, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x4}, {0x0, 0xa}}, [@TCA_CHAIN={0x8, 0xb, 0x89f}, @filter_kind_options=@f_u32={{0x8}, {0xf0, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0x2, 0x7, 0x2, 0x0, 0x7, 0xd, 0x94, 0x2}}, @TCA_U32_ACT={0xd8, 0x7, [@m_mirred={0xa8, 0x6, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x40, 0x1, 0x10000000, 0x8, 0x9}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0xa612, 0x7, 0x5, 0x465}, 0x1}}]}, {0x3c, 0x6, "b8083961885b543789ad967454f0db2b480bb18feb380df604b82889ca7f43b1572a3ed1870ab968575007960e243939a71fb85c511e100b"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ife={0x2c, 0x1a, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x124}, 0x1, 0x0, 0x0, 0x91}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb2570000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0xba01, 0x0, 0x4094}, 0x800) read$FUSE(0xffffffffffffffff, &(0x7f0000000200)={0x2020}, 0x2020) socket$inet6_udp(0xa, 0x2, 0x0) unshare(0x20000400) r7 = inotify_init() inotify_add_watch(r7, 0x0, 0x8c7) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000240)={'tunl0\x00'}) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000013c0)={0x0}}, 0x0) mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000180)='devtmpfs\x00', 0x22028c6, 0x0) pread64(r1, &(0x7f0000002240)=""/237, 0xed, 0x4eb) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 6.36253259s ago: executing program 2 (id=3501): prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0xfffffffe, @local, 0x1}, 0x1c) sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0xffffff7f00000000) 6.161083678s ago: executing program 5 (id=3502): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) preadv2(0xffffffffffffffff, &(0x7f0000000380), 0x0, 0x0, 0x0, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) write$UHID_INPUT(r1, &(0x7f0000002080)={0xc, {"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", 0xfffffffffffffedd}}, 0x1006) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_POWER(r6, 0x112, 0x9, 0x0, &(0x7f0000000240)) 5.691285227s ago: executing program 2 (id=3504): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000280)={0x3}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1200000003000000080000000800000000000000", @ANYRES32, @ANYBLOB="21000000000000000000000000000dccc800000000", @ANYRES32=0x0, @ANYRES32], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000e700000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000010"], 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000100000691824000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r6, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) setsockopt$inet_int(r6, 0x0, 0x17, &(0x7f0000000180)=0x6, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b000000050000000004000009"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r7, &(0x7f0000000780)="874b4c7b463c2134a72594ac9a73960cc88819b424bfc14f42018728789810dcc3e253bf7906b2cce8511fc62177d682bc9c3ea7a2fe58b1677a30847fb015a3310099f261db64bed7ece3ccf26693d3f3dd090fc71f4ee638ce31ae9490a44e7c40eba9e56c473f42c012e1d17e", &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018", @ANYRES32=r7], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='mem_disconnect\x00'}, 0x10) 5.63305498s ago: executing program 0 (id=3505): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000570000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008001500b7040000000000008500000058"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sys_enter\x00', r2}, 0x10) statx(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x0, 0xe5d, &(0x7f0000000280)) 5.63281929s ago: executing program 0 (id=3506): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r4, &(0x7f0000003040)='cpuset.mem_exclusive\x00', 0x2, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000850000000e00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f0000000040)='kfree\x00', r5}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_queued\x00', 0x26e1, 0x0) ioctl$TUNSETNOCSUM(r6, 0xc0189436, 0x8000001ffffffd) 5.592996581s ago: executing program 1 (id=3507): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mkdir(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$AUTOFS_IOC_READY(0xffffffffffffffff, 0x9360, 0x7f) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) clock_gettime(0x0, &(0x7f0000001e40)) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x7, 0x4, 0x8, 0x1}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$can_raw(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) 4.690558448s ago: executing program 0 (id=3509): syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRES32=r0], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[], 0x0}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000000c0)={0x10003, 0x2, 0x6000, 0x1000, &(0x7f0000ff5000/0x1000)=nil}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70200001400ea00b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000000)=0x800, 0x4) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x6, 0x8012, r4, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e22, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x20) listen(r5, 0x2) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000140)={0xa, 0xce22, 0x7e, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x1c) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000240), r0) 4.690329048s ago: executing program 1 (id=3510): syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r0}, 0x10) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0/file1\x00', 0x200810, 0x0, 0x0, 0x0, 0x0) (fail_nth: 5) 4.671220119s ago: executing program 2 (id=3511): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() getpgid(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee3, 0x8031, 0xffffffffffffffff, 0x28f42000) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="02000000040000000800", @ANYRES32=0x0, @ANYBLOB="0000000200"/20, @ANYBLOB], 0x50) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioprio_get$pid(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r3}, 0x18) listen(r1, 0x3) 4.667552659s ago: executing program 5 (id=3512): futex(0xfffffffffffffffc, 0x6, 0x0, 0x0, 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000008e80)="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", 0x2000, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x90, 0x0, 0x4, {0x5, 0x3, 0x0, 0x4000000000008, 0xfffffffd, 0x6, {0x2, 0x6, 0x8, 0x100000000000, 0x7, 0x81, 0x8, 0x6, 0x2008, 0x8000, 0xe44, 0x0, 0x0, 0x5, 0x81}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f0000002680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000028c0)={{{@in6=@private1, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@private2}}, &(0x7f00000029c0)=0xe8) r3 = getgid() r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff}) connect$unix(r5, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) recvmmsg(r5, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) stat(&(0x7f0000000d80)='./file0\x00', &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000e40)='./file0/file0\x00', &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$unix(r5, &(0x7f0000000f40)={&(0x7f0000000580)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000000800)=[{&(0x7f0000000600)="2743b9c84ff9878dbab69387b48c79847c18033f9cab7df3eb90647690694bee0e1d16fce83dd155f8198fe03c703f9836a5eb052531b42fb65611c763c309686e1e458d80f8b7e027926518de7bf4a8266dc236a98ff93fcecd7b9701f959f3c2aea8bb6d5f3f79f259f2c883636ba21dbd8e23e33aef8ae34b5f4c4fb3ef76cabdcd39c99c4c8f07beb30e0b8d20160d393ea74078e0cb5a", 0x99}, {&(0x7f00000006c0)="b4d57fda40c2bd1325e56a49a53d44acfb6a15fd57a8f35f023a06be971fd68e9f64eb0e22966e68a191ce1251b994f0c1", 0x31}, {&(0x7f0000000700)="e403fe073a6c509f649b6d6e26a0bccbd6341b40bcee563e81ea2ceab85e9abe7f0b0289a34c508629d58e29e19c76329c6a867c6d8d0a962a6716cfeecb58884576cb102955feb5c89fd6cee5642ad9e6528036f74f41b367cc4d2a1203f7b3f613d729fb8f1b2a8e8696b444a97f11d0efd011e93d9b51e383e922cbbf04c3d231fe9226861f5ecee16f105c2fbff6cc1ca20bce81a35b61b435be55ec911ece3143599bb97e0be5f3b604a911ad33dfa5a4e0d5f1ca2fbef03035bb0075f62eec8b3461333b164966a2581e5f82f03fa8adfe", 0xd4}, {&(0x7f0000000cc0)="393f5bca0e52dff42d9d2ad040dc7f3fd1efd4b905a3c1b9ddbe56bdcc4b439579e40d217dea7c7c4e269ae4b58ec49cf8ea2e5b12c6d2c5ac259fdc3174ff2c20098b7d56ffc7814723f120d515f26ee1555557c8f48855c6276cc6c82ad57eecca2f6af3d3725fcf45645b90c3693b2373592ea2c74624bbea8ed50fc5bc60b3a177fcba52d2fd7026ed79158e202d30146056e45b76013f33252a83a6fdf254861c8d3ff845", 0xa7}], 0x4, &(0x7f0000000f00)=[@cred={{0x1c, 0x1, 0x2, {r4, r6, r7}}}], 0x20, 0x4000000}, 0x80) r8 = getegid() r9 = getegid() ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000002a00)=0x0) r11 = getgid() read$FUSE(0xffffffffffffffff, &(0x7f0000002a40)={0x2020, 0x0, 0x0, 0x0}, 0x2020) getresgid(&(0x7f0000004a80), &(0x7f0000004ac0), &(0x7f0000004b00)=0x0) stat(&(0x7f0000004e80)='./file0\x00', &(0x7f0000004ec0)={0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(0xffffffffffffffff, &(0x7f0000004f40)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r16 = getuid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000007080)={0x0, 0x0, 0x0}, &(0x7f00000070c0)=0xc) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000200)="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", 0x2000, &(0x7f0000007240)={&(0x7f0000002200)={0x50, 0xfffffffffffffff5, 0x0, {0x7, 0x2b, 0x7fff, 0x20000020, 0x10, 0x1, 0x401, 0x3, 0x0, 0x0, 0x2}}, &(0x7f0000000140)={0x18, 0x0, 0x3, {0x715}}, &(0x7f0000002280)={0x18, 0x0, 0x1ffe0000, {0x4}}, &(0x7f00000022c0)={0x18, 0x0, 0x4, {0x4}}, &(0x7f0000002300)={0x18, 0x0, 0x0, {0x7}}, &(0x7f0000002340)={0x28, 0x8c4ebcd1bbf0a00f, 0x8, {{0xfffffffffffffffd, 0xfff}}}, &(0x7f0000002380)={0x60, 0xffffffffffffffda, 0x9, {{0x4, 0x5, 0xffffffffffffffff, 0x2, 0x8000, 0x0, 0x2, 0x1}}}, &(0x7f0000002400)={0x18, 0x0, 0x5, {0xa7e}}, &(0x7f0000002440)={0x13, 0x0, 0x40000000000, {'^/\x00'}}, &(0x7f0000002480)={0x20, 0x0, 0x4, {0x0, 0x2}}, &(0x7f0000002600)={0x78, 0x0, 0x8, {0x188d, 0x0, 0x0, {0x6, 0x7fffffffffffffff, 0xfffffffffffffff8, 0xc00000, 0x7, 0x6, 0xb, 0x9, 0xc, 0x6000, 0x9, 0x0, 0xffffffffffffffff, 0x0, 0x3df3}}}, &(0x7f0000002700)={0x90, 0xfffffffffffffffe, 0x3452b90d, {0x6, 0x3, 0xd, 0x3ff, 0xfffffffa, 0x8, {0x2, 0x8000000000000000, 0x9, 0x3, 0x4, 0x1, 0x7, 0xd, 0x80000000, 0xa000, 0x1, 0x0, r1, 0x2, 0x8}}}, &(0x7f00000027c0)={0xc8, 0x0, 0x9, [{0x0, 0x4, 0x8, 0x6, '\']/),!{\x00'}, {0x0, 0xb5e, 0x2, 0x80, ',.'}, {0x0, 0x3, 0x0, 0x295}, {0x3, 0x4, 0x2, 0x5, ']*'}, {0x3, 0x9, 0x4, 0x0, ']-)('}, {0x6, 0x305, 0x2, 0x100, '+\xe1'}]}, &(0x7f0000004b40)={0x328, 0xfffffffffffffff5, 0xffffffff, [{{0x1, 0x2, 0xe66, 0x7, 0x4, 0x81, {0x2, 0x1ff, 0x3ff, 0xfffffffffffffffa, 0x4, 0x6, 0xbc, 0x1, 0x2, 0x6000, 0x5, r2, r3, 0x6, 0x6}}, {0x2, 0xffffffffffff61f5, 0x0, 0x10001}}, {{0x2, 0x3, 0x9, 0x4, 0x1, 0x6, {0x2, 0x1, 0x0, 0x6, 0x10000, 0x5e76, 0x203b, 0x1, 0x400, 0xa000, 0xffffc83d, r6, r8, 0x5, 0x4}}, {0x1, 0x0, 0x3, 0x9, '&+!'}}, {{0x0, 0x0, 0x28a, 0x5, 0xffffff02, 0x81, {0x6, 0x9, 0x39b7, 0x3, 0x1800000000000, 0x7ff, 0x7, 0x7, 0x401, 0xc000, 0x2, 0xffffffffffffffff, r9, 0x7f, 0x4}}, {0x2, 0x1, 0x1, 0x3, ']'}}, {{0x4, 0x0, 0x1, 0x9, 0x0, 0xe239, {0x6, 0x0, 0x0, 0x7, 0x7, 0x9, 0x1, 0x2, 0x659f08e3, 0x1000, 0x4, r10, r11, 0x2, 0x80000001}}, {0x5, 0x6, 0x1, 0xffffffc9, '%'}}, {{0x0, 0x1, 0x5, 0x4, 0x1c, 0x8, {0x1, 0x1, 0x9a, 0x80000, 0x8000000000000000, 0x9, 0xfff, 0x9a, 0x7, 0x6000, 0x4, r12, r13, 0x5, 0x252}}, {0x6, 0x5, 0x7, 0x3, '+E#^%/]'}}]}, &(0x7f0000006f80)={0xa0, 0x8730bf19ebee8bd4, 0x866, {{0x3, 0x2, 0x34e, 0x1000, 0x80, 0x10001, {0x5, 0x7f, 0x0, 0x6, 0x5, 0x80000000, 0xaf7f, 0x6e4, 0x9, 0x2000, 0x1ff, r14, r15, 0x3, 0x7}}, {0x0, 0xe6498cb4c7412df0}}}, &(0x7f0000007040)={0x20, 0x0, 0x10, {0x3, 0x0, 0x0, 0xa13}}, &(0x7f0000007100)={0x130, 0xfffffffffffffffe, 0x0, {0x0, 0x7ff, 0x0, '\x00', {0x2000, 0x6, 0x7000000000, 0x4, r16, r17, 0x1000, '\x00', 0x3cad, 0x8000000000000001, 0x1, 0x7, {0x8, 0x5}, {0x3, 0x2}, {0x4, 0x9}, {0x3, 0x7}, 0x10000, 0xb0, 0x2, 0x7fff}}}}) r18 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r18, 0x10e, 0xc, &(0x7f0000000040)={0x200004c0, 0x0, 0xfffffff8, 0x200000}, 0x10) sendmsg$nl_route(r18, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c0000001a00010029bd70000000000002"], 0x2c}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @main=@item_012={0x2, 0x0, 0x9, '{|'}, @global=@item_4={0x3, 0x1, 0x8, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @global=@item_4={0x3, 0x1, 0x0, "060a0007"}, @main=@item_4={0x3, 0x0, 0x8}, @main=@item_4={0x3, 0x0, 0x9, "cdd2f361"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) 4.352408272s ago: executing program 3 (id=3513): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000fbdb0cf81c000000180001801400020074756e6c30"], 0x2c}}, 0x0) 4.203231668s ago: executing program 1 (id=3514): write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8, @ANYRES64], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, 0xffffffffffffffff, 0x0) r0 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000040)={0x0, &(0x7f00000008c0)=[@nested_amd_vmcb_write_mask={0x17c, 0x38, {0x1, @save_area=0x44c, 0x4, 0x100000000, 0x9}}, @rdmsr={0x66, 0x18, {0xbf0}}, @out_dx={0x6a, 0x28, {0xe22b, 0x0, 0x9}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x2, @control_area=0x69, 0x1, 0x6, 0xa2b8}}, @in_dx={0x69, 0x20, {0xb38, 0x3}}, @nested_intel_vmwrite_mask={0x154, 0x0, {0x1, @guest32=0x4804, 0x9, 0x1, 0x100000001}}, @wr_crn={0x67, 0x20, {0x2, 0x9}}, @nested_load_code={0x12e, 0x72, {0x0, "66baf80cb8b07aa18fef66bafc0cb800000000ef66410fc6f111f30fa7c0c462f1f72c280f013bb9370b0000b88e1b3878ba32d9895a0f3066baf80cb8201f0084ef66bafc0ced66b86d008ee8b9bb0900000f32f3460f0059aa"}}, @nested_vmresume={0x130, 0x0, 0x3}, @wr_drn={0x68, 0x20, {0x0, 0x80000001}}, @nested_load_code={0x12e, 0x51, {0x0, "c4c255ac0b2e430f01caddedc442bd29e366430f3881a700800000c42171d9eef242d9e0b805000000b9770000000f01d9f42e6526670f011f"}}, @uexit={0x0, 0x18, 0x5}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x0, @control_area=0x84, 0x8, 0x1, 0x6}}, @nested_create_vm={0x12d, 0x65, 0x2}, @set_irq_handler={0xc8, 0x20, {0xb7, 0x2}}, @nested_vmlaunch={0x12f, 0x18, 0x1}, @rdmsr={0x66, 0x18, {0x90c}}, @nested_load_code={0x12e, 0x9f, {0x0, "65440f0178bb66ba4200b8e63e0000efc744240000000000c744240283000000c7442406000000000f011c2466baf80cb860aa2c8aef66bafc0cedc4c1b5f5b700400000b9800000c00f3235008000000f30b9f2080000b800900000ba000000000f3066baf80cb8a043428bef66bafc0cb853ad0000efc483750a670086660f38818100000000"}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x1, @save_area=0x52f, 0xfffffffffffffff9, 0x4, 0x6}}, @set_irq_handler={0xc8, 0x20, {0xc9}}, @nested_vmlaunch={0x12f, 0x18}], 0x3ea}) ioctl$KVM_X86_SETUP_MCE(r0, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x6, 0x4}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0x7, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001900010000000000000000f7df0000020000000000000000000000000000000000000000000000000000000000000000000000000a00200000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0xb8}}, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003c00), 0x0, 0x4) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x3, &(0x7f0000000000), 0xbc, 0x55a, &(0x7f0000000900)="$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") socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x200040, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x30) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) fchdir(0xffffffffffffffff) pselect6(0x40, &(0x7f0000000180)={0xa, 0x8dc, 0xb, 0x8, 0x4f38, 0x60000000, 0x4, 0xffffffff00000000}, &(0x7f00000001c0)={0x8, 0x6, 0x5, 0x3, 0x8, 0x5, 0x8, 0x93}, &(0x7f0000000200)={0x401, 0x7, 0x2, 0x49, 0x6, 0x66, 0x5, 0x7ff}, &(0x7f0000000240)={0x0, 0x3938700}, &(0x7f0000000300)={&(0x7f0000000280)={[0x1]}, 0x8}) 4.196432758s ago: executing program 3 (id=3515): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x60}, [@IFLA_MASTER={0x8, 0x3, r3}, @IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x3d}}]}}}]}, 0x50}, 0x1, 0xd, 0x0, 0x480c5}, 0x0) 3.65759109s ago: executing program 2 (id=3516): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffff0001}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.565673084s ago: executing program 3 (id=3517): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000a8500000005000000850000009e00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='sys_enter\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000240)='4', 0x1}], 0x1) accept4$bt_l2cap(r3, &(0x7f00000002c0), &(0x7f0000000300)=0xe, 0x800) 3.077925144s ago: executing program 2 (id=3518): openat$kvm(0xffffffffffffff9c, 0x0, 0x80002, 0x0) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000002b40), 0x24, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000400)={0xa}) syz_usb_connect(0x3, 0x0, 0x0, 0x0) epoll_pwait(r0, &(0x7f0000000080)=[{}], 0x1, 0x4c6, 0x0, 0x0) 2.247055688s ago: executing program 3 (id=3519): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000800)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r2}, &(0x7f0000000240), &(0x7f0000000280)=r3}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="a1ab00000000000000003200000008001781"], 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) (fail_nth: 2) 2.246716058s ago: executing program 0 (id=3520): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r4, &(0x7f0000003040)='cpuset.mem_exclusive\x00', 0x2, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000850000000e00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f0000000040)='kfree\x00', r5}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_queued\x00', 0x26e1, 0x0) ioctl$TUNSETNOCSUM(r6, 0xc0189436, 0x8000001ffffffd) 1.912468322s ago: executing program 1 (id=3521): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000800)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r2}, &(0x7f0000000240), &(0x7f0000000280)=r3}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="a1ab00000000000000003200000008001781"], 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) 1.868945524s ago: executing program 3 (id=3522): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x6, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xc8, &(0x7f0000000200)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000280), &(0x7f00000002c0), 0x8, 0xc6, 0x8, 0x8, &(0x7f0000000340)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES16=0x0, @ANYRES32, @ANYBLOB="0000000000000000b7080000002000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1a"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r2}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000340)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r4, 0x0) r5 = pidfd_getfd(0xffffffffffffffff, r3, 0x0) r6 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, &(0x7f00000000c0)=0x47ad, 0x4) setsockopt$inet6_int(r6, 0x29, 0x4a, &(0x7f0000000080)=0x1, 0x4) sendmmsg$inet6(r6, &(0x7f00000002c0)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0x0, @loopback, 0x8}, 0x1c, 0x0}}], 0x1, 0x40000) recvmmsg(r6, &(0x7f0000000940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001f80)=""/129, 0xfffffffffffffcea}, 0x5}], 0x1, 0x40002042, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x0, 0xf, &(0x7f0000000980)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x3a, '\x00', r0, @fallback=0x8, r5, 0x8, &(0x7f0000000a00)={0x0, 0x4}, 0x8, 0x10, 0x0, 0x0, r1, r2, 0x3, &(0x7f0000000a40)=[r3], &(0x7f0000000a80)=[{0x0, 0x2, 0x10, 0x5}, {0x1, 0x4, 0x10}, {0x4, 0x3, 0x3}], 0x10, 0x5}, 0x94) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x60, &(0x7f0000000140)={&(0x7f00000002c0)={0x1c, r7, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_STATION(r4, &(0x7f0000000d00)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0xec, r7, 0x800, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x1}, @NL80211_ATTR_STA_WME={0x2c, 0x81, [@NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x3}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x8}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x7f}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x6}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x1c}]}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x67b}, @NL80211_ATTR_STA_WME={0x2c, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x5}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x6}, @NL80211_STA_WME_UAPSD_QUEUES={0x5}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x6}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x1}]}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x3}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x3f5}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xff}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x1}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x22, 0x13, [{0x30, 0x1}, {0x24}, {0xc, 0x1}, {0x1b, 0x1}, {0x24}, {0x24}, {}, {0x12, 0x1}, {0x48, 0x1}, {0x48}, {0x30, 0x1}, {0x4, 0x1}, {0xc}, {0x4}, {0xb}, {0x35}, {0x5, 0x1}, {0x9, 0x1}, {0x60, 0x1}, {0x1, 0x1}, {0xc, 0x1}, {0x18, 0x1}, {0x36, 0x1}, {0x6}, {0xc, 0x1}, {0x48}, {0x7, 0x1}, {0x9}, {0xc}, {0x2}]}, @NL80211_ATTR_STA_FLAGS={0x2c, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_MFP={0x4}, @NL80211_STA_FLAG_WME={0x4}, @NL80211_STA_FLAG_MFP={0x4}, @NL80211_STA_FLAG_MFP={0x4}, @NL80211_STA_FLAG_AUTHENTICATED={0x4}, @NL80211_STA_FLAG_TDLS_PEER={0x4}, @NL80211_STA_FLAG_ASSOCIATED={0x4}, @NL80211_STA_FLAG_MFP={0x4}, @NL80211_STA_FLAG_ASSOCIATED={0x4}, @NL80211_STA_FLAG_AUTHENTICATED={0x4}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x20}, 0x4080) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="8c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800b000100697036677265000030000280140007002001000000000000000000000000000014000600fc"], 0x8c}}, 0x0) r9 = openat(0xffffffffffffff9c, 0x0, 0x2c41, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x800, 0x20) r11 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000800), r9) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r10, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000880)={&(0x7f0000000900)={0x5c, r11, 0x800, 0x70bd2a, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x28, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r0}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x3}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000010}, 0x20004001) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r8, &(0x7f0000000800)={&(0x7f00000003c0), 0xc, &(0x7f00000007c0)={&(0x7f00000005c0)={0x3c, r11, 0x2, 0x70bd26, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x6}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x33}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x8}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000020}, 0x40080) 1.864162984s ago: executing program 1 (id=3523): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001000000000000", @ANYRES32, @ANYBLOB="0000000000000000dd7c4de30000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0x7, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYRESOCT=r1], 0x48) r8 = socket$tipc(0x1e, 0x4, 0x0) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x83f}, 0x10) r9 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r9, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r10 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r10, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(0xffffffffffffffff, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10) bind$tipc(r10, &(0x7f0000000100)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x4}}, 0x10) bind$tipc(r9, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.312992916s ago: executing program 0 (id=3524): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000840)={&(0x7f0000000680)='sys_exit\x00', r1}, 0x18) capset(&(0x7f0000a31000)={0x20071026}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x7fff}) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x442, 0x0) ioctl$TIOCSPTLCK(r4, 0x40045431, &(0x7f0000000080)) r5 = syz_open_pts(r4, 0x0) ioctl$TCSETSF(r4, 0x5404, &(0x7f0000000000)={0x7, 0x80007, 0x10, 0x1, 0xe, "2d0000000005040000003c00ff9404c005e0ff"}) read(r5, &(0x7f0000000100)=""/76, 0x4c) ioctl$TCSETSF2(r5, 0x402c542d, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x1216, 0x4, "77e2e6740ecf4f35d0c5a3668d8ecfaeca435f", 0xffffff5b, 0x5}) ioctl$TCSETAW(r5, 0x5407, &(0x7f0000000240)={0x9, 0x235f, 0xe24, 0x8007, 0x2, "00b37b009a0d00"}) ioctl$sock_inet6_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r3}) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f0000000000)=0x1, 0x6, 0x1, 0x0, 0x0, 0x3) futex(&(0x7f000000cffc), 0x5, 0x1, 0x0, &(0x7f0000000000), 0x0) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f0000000180)={0x0, 0x1, 0x4, 0x7de63db3}) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002220207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000006000000850000000400000085000000d000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='tlb_flush\x00', r7}, 0x10) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) 1.141988973s ago: executing program 3 (id=3525): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x40000000000000c, 0x2, 0x0) r3 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = syz_kvm_setup_syzos_vm$x86(r4, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$x86(r5, &(0x7f00000000c0)={0x0, &(0x7f0000000300)=[@enable_nested={0x12c, 0x18}, @code={0xa, 0x59, {"660fc7b2e11e0000654009bd0c9400002e420f01c8c462f98e7f6ec4022db6e3c4a1c35e4500470f01c266baf80cb82b38e58eef66bafc0cb042ee0f4a312e430f38cc8a04180000"}}], 0x71}) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000700)={{r6}, &(0x7f0000000680), 0x0}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_user(r7, 0x0, 0x27) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r9}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f0000005980)=ANY=[@ANYBLOB="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"], 0x3, 0x5505, &(0x7f0000000340)="$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") 873.724754ms ago: executing program 1 (id=3526): mknodat$loop(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1004, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000c300)={0x2020, 0x0, 0x0}, 0x2066) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, r1, {0x7, 0x1f, 0x1000001, 0x5069f481, 0x0, 0x7fff, 0x0, 0x800, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x400000000000000, {0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x24c01, 0x5) statx(r2, &(0x7f0000000180)='./file0\x00', 0x0, 0x1, &(0x7f0000000600)) io_setup(0x2206, &(0x7f00000005c0)=0x0) syz_fuse_handle_req(r0, &(0x7f0000002100)="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", 0x2000, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x18, 0x0, 0x2, {0x6}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) io_submit(r3, 0x1, &(0x7f0000000780)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x4, r2, &(0x7f0000000400)="0300cecd682b", 0x6, 0x6}]) 778.086368ms ago: executing program 5 (id=3527): write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8, @ANYRES64], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, 0xffffffffffffffff, 0x0) r0 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000040)={0x0, &(0x7f00000008c0)=[@nested_amd_vmcb_write_mask={0x17c, 0x38, {0x1, @save_area=0x44c, 0x4, 0x100000000, 0x9}}, @rdmsr={0x66, 0x18, {0xbf0}}, @out_dx={0x6a, 0x28, {0xe22b, 0x0, 0x9}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x2, @control_area=0x69, 0x1, 0x6, 0xa2b8}}, @in_dx={0x69, 0x20, {0xb38, 0x3}}, @nested_intel_vmwrite_mask={0x154, 0x0, {0x1, @guest32=0x4804, 0x9, 0x1, 0x100000001}}, @wr_crn={0x67, 0x20, {0x2, 0x9}}, @nested_load_code={0x12e, 0x72, {0x0, "66baf80cb8b07aa18fef66bafc0cb800000000ef66410fc6f111f30fa7c0c462f1f72c280f013bb9370b0000b88e1b3878ba32d9895a0f3066baf80cb8201f0084ef66bafc0ced66b86d008ee8b9bb0900000f32f3460f0059aa"}}, @nested_vmresume={0x130, 0x0, 0x3}, @wr_drn={0x68, 0x20, {0x0, 0x80000001}}, @nested_load_code={0x12e, 0x51, {0x0, "c4c255ac0b2e430f01caddedc442bd29e366430f3881a700800000c42171d9eef242d9e0b805000000b9770000000f01d9f42e6526670f011f"}}, @uexit={0x0, 0x18, 0x5}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x0, @control_area=0x84, 0x8, 0x1, 0x6}}, @nested_create_vm={0x12d, 0x65, 0x2}, @set_irq_handler={0xc8, 0x20, {0xb7, 0x2}}, @nested_vmlaunch={0x12f, 0x18, 0x1}, @rdmsr={0x66, 0x18, {0x90c}}, @nested_load_code={0x12e, 0x9f, {0x0, "65440f0178bb66ba4200b8e63e0000efc744240000000000c744240283000000c7442406000000000f011c2466baf80cb860aa2c8aef66bafc0cedc4c1b5f5b700400000b9800000c00f3235008000000f30b9f2080000b800900000ba000000000f3066baf80cb8a043428bef66bafc0cb853ad0000efc483750a670086660f38818100000000"}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x1, @save_area=0x52f, 0xfffffffffffffff9, 0x4, 0x6}}, @set_irq_handler={0xc8, 0x20, {0xc9}}, @nested_vmlaunch={0x12f, 0x18}], 0x3ea}) ioctl$KVM_X86_SETUP_MCE(r0, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x6, 0x4}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0x7, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001900010000000000000000f7df0000020000000000000000000000000000000000000000000000000000000000000000000000000a00200000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0xb8}}, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003c00), 0x0, 0x4) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x3, &(0x7f0000000000), 0xbc, 0x55a, &(0x7f0000000900)="$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") r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x200040, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x30) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r8, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x4040800) pselect6(0x40, &(0x7f0000000180)={0xa, 0x8dc, 0xb, 0x8, 0x4f38, 0x60000000, 0x4, 0xffffffff00000000}, &(0x7f00000001c0)={0x8, 0x6, 0x5, 0x3, 0x8, 0x5, 0x8, 0x93}, &(0x7f0000000200)={0x401, 0x7, 0x2, 0x49, 0x6, 0x66, 0x5, 0x7ff}, &(0x7f0000000240)={0x0, 0x3938700}, &(0x7f0000000300)={&(0x7f0000000280)={[0x1]}, 0x8}) 201.036771ms ago: executing program 2 (id=3528): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000008f9000001"], 0x48) r2 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, @dev, @dev={0xfe, 0x80, '\x00', 0x37}, 0x10, 0x0, 0x0, 0x5}}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="20000000110001000000000000000000100000e60b"], 0x20}], 0x1}, 0x0) 0s ago: executing program 0 (id=3529): write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8, @ANYRES64], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, 0xffffffffffffffff, 0x0) r0 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000040)={0x0, &(0x7f00000008c0)=[@nested_amd_vmcb_write_mask={0x17c, 0x38, {0x1, @save_area=0x44c, 0x4, 0x100000000, 0x9}}, @rdmsr={0x66, 0x18, {0xbf0}}, @out_dx={0x6a, 0x28, {0xe22b, 0x0, 0x9}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x2, @control_area=0x69, 0x1, 0x6, 0xa2b8}}, @in_dx={0x69, 0x20, {0xb38, 0x3}}, @nested_intel_vmwrite_mask={0x154, 0x0, {0x1, @guest32=0x4804, 0x9, 0x1, 0x100000001}}, @wr_crn={0x67, 0x20, {0x2, 0x9}}, @nested_load_code={0x12e, 0x72, {0x0, "66baf80cb8b07aa18fef66bafc0cb800000000ef66410fc6f111f30fa7c0c462f1f72c280f013bb9370b0000b88e1b3878ba32d9895a0f3066baf80cb8201f0084ef66bafc0ced66b86d008ee8b9bb0900000f32f3460f0059aa"}}, @nested_vmresume={0x130, 0x0, 0x3}, @wr_drn={0x68, 0x20, {0x0, 0x80000001}}, @nested_load_code={0x12e, 0x51, {0x0, "c4c255ac0b2e430f01caddedc442bd29e366430f3881a700800000c42171d9eef242d9e0b805000000b9770000000f01d9f42e6526670f011f"}}, @uexit={0x0, 0x18, 0x5}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x0, @control_area=0x84, 0x8, 0x1, 0x6}}, @nested_create_vm={0x12d, 0x65, 0x2}, @set_irq_handler={0xc8, 0x20, {0xb7, 0x2}}, @nested_vmlaunch={0x12f, 0x18, 0x1}, @rdmsr={0x66, 0x18, {0x90c}}, @nested_load_code={0x12e, 0x9f, {0x0, "65440f0178bb66ba4200b8e63e0000efc744240000000000c744240283000000c7442406000000000f011c2466baf80cb860aa2c8aef66bafc0cedc4c1b5f5b700400000b9800000c00f3235008000000f30b9f2080000b800900000ba000000000f3066baf80cb8a043428bef66bafc0cb853ad0000efc483750a670086660f38818100000000"}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x1, @save_area=0x52f, 0xfffffffffffffff9, 0x4, 0x6}}, @set_irq_handler={0xc8, 0x20, {0xc9}}, @nested_vmlaunch={0x12f, 0x18}], 0x3ea}) ioctl$KVM_X86_SETUP_MCE(r0, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x6, 0x4}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0x7, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001900010000000000000000f7df0000020000000000000000000000000000000000000000000000000000000000000000000000000a00200000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0xb8}}, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003c00), 0x0, 0x4) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x3, &(0x7f0000000000), 0xbc, 0x55a, &(0x7f0000000900)="$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") socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x200040, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x30) fchdir(0xffffffffffffffff) pselect6(0x40, &(0x7f0000000180)={0xa, 0x8dc, 0xb, 0x8, 0x4f38, 0x60000000, 0x4, 0xffffffff00000000}, &(0x7f00000001c0)={0x8, 0x6, 0x5, 0x3, 0x8, 0x5, 0x8, 0x93}, &(0x7f0000000200)={0x401, 0x7, 0x2, 0x49, 0x6, 0x66, 0x5, 0x7ff}, &(0x7f0000000240)={0x0, 0x3938700}, &(0x7f0000000300)={&(0x7f0000000280)={[0x1]}, 0x8}) kernel console output (not intermixed with test programs): (bridge_slave_0) entered blocking state [ 549.141158][ T920] bridge0: port 1(bridge_slave_0) entered forwarding state [ 549.149859][ T920] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 549.158378][ T920] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 549.158710][ T19] usb 1-1: USB disconnect, device number 3 [ 549.166842][ T920] bridge0: port 2(bridge_slave_1) entered blocking state [ 549.179300][ T920] bridge0: port 2(bridge_slave_1) entered forwarding state [ 549.190478][ T920] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 549.198625][ T920] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 549.216585][ T920] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 549.233264][ T920] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 549.247947][ T920] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 549.258700][ T920] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 549.274377][ T920] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 549.282904][ T920] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 549.291359][ T920] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 549.299663][ T920] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 549.308419][T10188] device veth0_vlan entered promiscuous mode [ 549.329532][ T920] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 549.338458][ T920] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 549.348997][T10188] device veth1_macvtap entered promiscuous mode [ 549.360572][ T920] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 549.368822][ T920] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 549.379917][ T920] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 549.406144][ T920] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 549.490308][ T920] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 549.593758][T10223] syz.1.3078[10223] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 549.594387][T10223] syz.1.3078[10223] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 549.605933][T10223] syz.1.3078[10223] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 549.626842][T10223] bridge: RTM_NEWNEIGH with invalid ether address [ 549.670178][T10222] loop5: detected capacity change from 0 to 8192 [ 549.710556][T10223] syz.1.3078[10223] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 549.710648][T10223] syz.1.3078[10223] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 550.463651][ T28] audit: type=1400 audit(1764008396.026:1047): avc: denied { read } for pid=10236 comm="syz.3.3083" name="event0" dev="devtmpfs" ino=260 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 550.634419][ T891] device bridge_slave_1 left promiscuous mode [ 550.640615][ T891] bridge0: port 2(bridge_slave_1) entered disabled state [ 550.649850][ T891] device bridge_slave_0 left promiscuous mode [ 550.656392][ T891] bridge0: port 1(bridge_slave_0) entered disabled state [ 550.666799][ T891] device veth1_macvtap left promiscuous mode [ 550.673747][ T891] device veth0_vlan left promiscuous mode [ 550.736898][T10245] loop0: detected capacity change from 0 to 40427 [ 550.745539][T10245] F2FS-fs (loop0): Wrong MAIN_AREA boundary, start(4096) end(12800) block(12288) [ 550.755083][T10245] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 550.763657][T10245] F2FS-fs (loop0): fault_type options not supported [ 550.770349][T10245] F2FS-fs (loop0): fault_injection options not supported [ 550.778344][T10245] F2FS-fs (loop0): Image doesn't support compression [ 550.785864][T10245] F2FS-fs (loop0): invalid crc value [ 550.792315][T10245] F2FS-fs (loop0): Found nat_bits in checkpoint [ 550.820594][T10245] F2FS-fs (loop0): Start checkpoint disabled! [ 550.827663][T10245] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 550.834763][T10245] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 550.859251][ T28] audit: type=1400 audit(1764008396.416:1048): avc: denied { ioctl } for pid=10244 comm="syz.0.3086" path="/37/file2/file1" dev="loop0" ino=10 ioctlcmd=0xf514 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 550.859330][T10245] syz.0.3086: attempt to access beyond end of device [ 550.859330][T10245] loop0: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 551.010593][ T920] kworker/u4:44: attempt to access beyond end of device [ 551.010593][ T920] loop0: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 551.490887][ T28] audit: type=1400 audit(1764008397.046:1049): avc: denied { remount } for pid=10263 comm="syz.3.3090" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 551.882601][ T6] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 551.955818][ T28] audit: type=1400 audit(1764008397.516:1050): avc: denied { read } for pid=10279 comm="syz.0.3094" name="rtc0" dev="devtmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 551.999614][ T28] audit: type=1400 audit(1764008397.516:1051): avc: denied { open } for pid=10279 comm="syz.0.3094" path="/dev/rtc0" dev="devtmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 552.038453][T10280] futex_wake_op: syz.0.3094 tries to shift op by -1; fix this program [ 552.060170][ T28] audit: type=1400 audit(1764008397.616:1052): avc: denied { ioctl } for pid=10279 comm="syz.0.3094" path="/dev/rtc0" dev="devtmpfs" ino=263 ioctlcmd=0x7003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 552.085183][ T6] usb 3-1: Using ep0 maxpacket: 16 [ 552.091999][ T6] usb 3-1: config 0 has an invalid interface number: 64 but max is 0 [ 552.105291][ T6] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 552.124650][ T6] usb 3-1: config 0 has no interface number 0 [ 552.131802][ T28] audit: type=1400 audit(1764008397.646:1053): avc: denied { ioctl } for pid=10270 comm="syz.2.3091" path="/dev/raw-gadget" dev="devtmpfs" ino=258 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 552.162016][ T6] usb 3-1: New USB device found, idVendor=0bd3, idProduct=0555, bcdDevice= 0.5b [ 552.180446][ T6] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 552.193202][ T6] usb 3-1: config 0 descriptor?? [ 552.202976][T10283] binder: 10282:10283 ioctl c018620c 200000000340 returned -1 [ 552.242452][ T28] audit: type=1400 audit(1764008397.796:1054): avc: denied { read write } for pid=10286 comm="syz.0.3097" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 552.276704][ T28] audit: type=1400 audit(1764008397.796:1055): avc: denied { open } for pid=10286 comm="syz.0.3097" path="/dev/raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 552.310741][T10291] loop3: detected capacity change from 0 to 256 [ 552.317624][T10291] FAT-fs (loop3): Unrecognized mount option "Socase" or missing value [ 552.403062][T10271] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 552.411492][T10271] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 552.420169][ T19] usb 3-1: USB disconnect, device number 4 [ 552.647424][T10293] loop5: detected capacity change from 0 to 16 [ 552.654161][T10293] erofs: Unknown parameter 'vý÷Í’ÒB¤#^½ï4Ád.¡Y' [ 553.104410][T10295] syz.3.3098[10295] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 553.104792][T10295] syz.3.3098[10295] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 553.987643][T10300] syz.5.3101[10300] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 553.999350][T10300] syz.5.3101[10300] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 554.012934][T10300] bridge: RTM_NEWNEIGH with invalid ether address [ 554.077139][T10308] tipc: Started in network mode [ 554.082091][T10308] tipc: Node identity ac14142f, cluster identity 4711 [ 554.089118][T10308] tipc: Enabling of bearer rejected, failed to enable media [ 554.132816][ T6] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 554.149267][T10312] loop2: detected capacity change from 0 to 256 [ 554.155967][ T28] audit: type=1400 audit(1764008399.716:1056): avc: denied { sys_module } for pid=10307 comm="syz.3.3105" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 554.156232][T10312] FAT-fs (loop2): Unrecognized mount option "Socase" or missing value [ 554.363888][T10315] syz.2.3107[10315] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 554.755869][T10317] loop5: detected capacity change from 0 to 256 [ 554.779110][T10317] FAT-fs (loop5): Unrecognized mount option "01777777777777777777777" or missing value [ 555.224330][T10324] loop5: detected capacity change from 0 to 128 [ 555.402295][ T28] audit: type=1326 audit(1764008400.766:1057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10318 comm="syz.5.3109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cc8d8f749 code=0x7ffc0000 [ 555.413887][T10330] bpf_get_probe_write_proto: 1 callbacks suppressed [ 555.413906][T10330] syz.0.3112[10330] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 555.454059][ T28] audit: type=1326 audit(1764008400.766:1058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10318 comm="syz.5.3109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cc8d8f749 code=0x7ffc0000 [ 555.494366][ T6] usb 1-1: device descriptor read/all, error -71 [ 555.502827][T10330] syz.0.3112[10330] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 555.516190][T10324] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 555.654005][T10324] ext4 filesystem being mounted at /9/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 555.753673][T10332] bridge: RTM_NEWNEIGH with invalid ether address [ 555.786162][ T28] audit: type=1326 audit(1764008400.766:1059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10318 comm="syz.5.3109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5cc8d8f749 code=0x7ffc0000 [ 555.820329][T10336] 9pnet_fd: Insufficient options for proto=fd [ 555.994032][ T28] audit: type=1326 audit(1764008400.766:1060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10318 comm="syz.5.3109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cc8d8f749 code=0x7ffc0000 [ 556.021320][ T28] audit: type=1326 audit(1764008400.766:1061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10318 comm="syz.5.3109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cc8d8f749 code=0x7ffc0000 [ 556.131811][ T28] audit: type=1326 audit(1764008400.766:1062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10318 comm="syz.5.3109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=160 compat=0 ip=0x7f5cc8d8f749 code=0x7ffc0000 [ 556.210419][ T28] audit: type=1326 audit(1764008400.766:1063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10318 comm="syz.5.3109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cc8d8f749 code=0x7ffc0000 [ 556.251853][T10349] loop3: detected capacity change from 0 to 128 [ 556.256480][ T28] audit: type=1326 audit(1764008400.766:1064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10318 comm="syz.5.3109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cc8d8f749 code=0x7ffc0000 [ 556.282545][T10188] EXT4-fs (loop5): unmounting filesystem. [ 556.282621][ T28] audit: type=1326 audit(1764008400.766:1065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10318 comm="syz.5.3109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5cc8d8f749 code=0x7ffc0000 [ 556.317824][T10349] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 556.381548][T10349] ext4 filesystem being mounted at /28/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 556.742601][ T356] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 556.985304][T10367] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3125'. [ 556.994351][T10367] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3125'. [ 557.003294][T10367] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3125'. [ 557.017742][ T356] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 557.303219][ T356] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 557.356194][ T356] usb 6-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 557.382622][ T356] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 557.400753][T10373] loop2: detected capacity change from 0 to 256 [ 557.407831][ T356] usb 6-1: config 0 descriptor?? [ 557.414707][T10373] FAT-fs (loop2): Unrecognized mount option "Socase" or missing value [ 557.437971][T10375] bridge: RTM_NEWNEIGH with invalid ether address [ 557.476115][T10382] loop0: detected capacity change from 0 to 512 [ 557.482772][T10382] EXT4-fs: Ignoring removed orlov option [ 557.488752][T10382] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 557.540922][T10382] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2195: inode #15: comm syz.0.3129: corrupted in-inode xattr [ 557.553261][T10382] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.3129: couldn't read orphan inode 15 (err -117) [ 557.565648][T10382] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 557.584434][ T9618] EXT4-fs (loop0): unmounting filesystem. [ 557.616522][T10389] device bridge0 entered promiscuous mode [ 557.622759][T10389] device macsec1 entered promiscuous mode [ 557.682579][T10390] syz.2.3126[10390] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 557.682953][T10390] syz.2.3126[10390] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 558.025472][ T356] hid-led: probe of 0003:27B8:01ED.0005 failed with error -71 [ 558.618547][ T356] usb 6-1: USB disconnect, device number 2 [ 558.904988][ T891] tipc: Disabling bearer [ 558.910496][ T891] tipc: Disabling bearer [ 558.915918][ T891] tipc: Left network mode [ 558.928008][ T9823] EXT4-fs (loop3): unmounting filesystem. [ 558.944097][T10397] bridge0: port 1(bridge_slave_0) entered blocking state [ 558.952932][T10397] bridge0: port 1(bridge_slave_0) entered disabled state [ 558.960497][T10397] device bridge_slave_0 entered promiscuous mode [ 558.978197][T10397] bridge0: port 2(bridge_slave_1) entered blocking state [ 558.985420][T10397] bridge0: port 2(bridge_slave_1) entered disabled state [ 558.993638][T10397] device bridge_slave_1 entered promiscuous mode [ 559.045098][T10408] 9pnet_fd: Insufficient options for proto=fd [ 559.087277][T10397] bridge0: port 2(bridge_slave_1) entered blocking state [ 559.094367][T10397] bridge0: port 2(bridge_slave_1) entered forwarding state [ 559.101650][T10397] bridge0: port 1(bridge_slave_0) entered blocking state [ 559.108701][T10397] bridge0: port 1(bridge_slave_0) entered forwarding state [ 559.116861][ T24] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 559.137526][ T920] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 559.145112][ T920] bridge0: port 1(bridge_slave_0) entered disabled state [ 559.152422][ T920] bridge0: port 2(bridge_slave_1) entered disabled state [ 559.161703][ T920] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 559.170220][ T920] bridge0: port 1(bridge_slave_0) entered blocking state [ 559.177284][ T920] bridge0: port 1(bridge_slave_0) entered forwarding state [ 559.230013][ T920] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 559.256826][ T920] bridge0: port 2(bridge_slave_1) entered blocking state [ 559.263915][ T920] bridge0: port 2(bridge_slave_1) entered forwarding state [ 559.302692][ T28] kauditd_printk_skb: 46 callbacks suppressed [ 559.302716][ T28] audit: type=1400 audit(1764008404.806:1112): avc: denied { bind } for pid=10410 comm="syz.3.3137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 559.335202][ T24] usb 3-1: config 4 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 32 [ 559.394949][ T920] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 559.410932][ T24] usb 3-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 559.430570][ T920] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 559.441990][ T24] usb 3-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 559.447745][ T920] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 559.459176][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 559.464459][T10397] device veth0_vlan entered promiscuous mode [ 559.475967][ T24] usb 3-1: Product: syz [ 559.476449][ T920] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 559.480300][ T24] usb 3-1: Manufacturer: syz [ 559.492013][T10421] loop5: detected capacity change from 0 to 4096 [ 559.492942][ T24] usb 3-1: SerialNumber: syz [ 559.499791][ T920] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 559.510857][T10421] EXT4-fs (loop5): Test dummy encryption mode enabled [ 559.511066][ T920] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 559.529011][T10399] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 559.537250][ T24] usblp0: Disabling reads from problematic bidirectional printer [ 559.537648][ T920] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 559.554132][T10397] device veth1_macvtap entered promiscuous mode [ 559.565647][ T920] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 559.565660][T10421] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 559.582192][T10421] System zones: 0-5 [ 559.587627][ T891] device bridge_slave_0 left promiscuous mode [ 559.593321][T10421] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 559.595677][ T891] bridge0: port 1(bridge_slave_0) entered disabled state [ 559.609572][T10421] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 559.612437][ T28] audit: type=1400 audit(1764008405.166:1113): avc: denied { write } for pid=10420 comm="syz.5.3138" name="bus" dev="loop5" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 559.640650][ T891] device veth1_macvtap left promiscuous mode [ 559.643388][T10421] overlayfs: failed to resolve './bus/file0': -2 [ 559.652445][ T891] device veth0_vlan left promiscuous mode [ 559.653589][ T28] audit: type=1400 audit(1764008405.196:1114): avc: denied { add_name } for pid=10420 comm="syz.5.3138" name="work" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 559.679946][ T28] audit: type=1400 audit(1764008405.196:1115): avc: denied { setattr } for pid=10420 comm="syz.5.3138" name="work" dev="loop5" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 559.702040][ T28] audit: type=1400 audit(1764008405.196:1116): avc: denied { remove_name } for pid=10420 comm="syz.5.3138" name="#5" dev="loop5" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 559.725464][ T28] audit: type=1400 audit(1764008405.196:1117): avc: denied { rename } for pid=10420 comm="syz.5.3138" name="#5" dev="loop5" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 559.747947][ T28] audit: type=1400 audit(1764008405.206:1118): avc: denied { unlink } for pid=10420 comm="syz.5.3138" name="#5" dev="loop5" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 559.751171][ T24] usblp 3-1:4.0: usblp0: USB Unidirectional printer dev 5 if 0 alt 0 proto 1 vid 0x03F0 pid 0x0004 [ 559.770419][ T28] audit: type=1400 audit(1764008405.206:1119): avc: denied { unlink } for pid=10420 comm="syz.5.3138" name="#6" dev="loop5" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 559.782471][T10188] EXT4-fs (loop5): unmounting filesystem. [ 559.823970][T10428] loop5: detected capacity change from 0 to 1024 [ 559.830772][T10428] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 559.841781][T10428] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 559.852987][T10428] JBD2: no valid journal superblock found [ 559.858791][T10428] EXT4-fs (loop5): error loading journal [ 559.911245][T10424] bridge: RTM_NEWNEIGH with invalid ether address [ 559.918469][ T8138] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 560.025797][ T6] usb 3-1: USB disconnect, device number 5 [ 560.037269][T10438] device batadv_slave_0 entered promiscuous mode [ 560.048343][ T6] usblp0: removed [ 560.207049][T10440] xt_CONNSECMARK: invalid mode: 0 [ 560.220248][T10441] loop3: detected capacity change from 0 to 256 [ 560.240203][T10440] loop0: detected capacity change from 0 to 256 [ 560.659162][T10443] IPv6: ADDRCONF(NETDEV_CHANGE): vcan1: link becomes ready [ 560.737809][T10443] tipc: Started in network mode [ 560.742863][T10443] tipc: Node identity 4, cluster identity 4711 [ 560.742876][T10443] tipc: Node number set to 4 [ 560.744662][T10443] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3143'. [ 560.763016][T10443] device bridge_slave_1 left promiscuous mode [ 560.763094][T10443] bridge0: port 2(bridge_slave_1) entered disabled state [ 560.784860][T10446] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3144'. [ 560.827154][T10443] device bridge_slave_0 left promiscuous mode [ 560.842945][T10443] bridge0: port 1(bridge_slave_0) entered disabled state [ 561.753326][ T28] audit: type=1400 audit(1764008407.186:1120): avc: denied { write } for pid=10460 comm="syz.5.3149" path="socket:[42443]" dev="sockfs" ino=42443 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 562.981825][T10465] syz.1.3150[10465] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 562.981913][T10465] syz.1.3150[10465] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 563.363742][T10467] bridge: RTM_NEWNEIGH with invalid ether address [ 563.434522][ T28] audit: type=1400 audit(1764008408.996:1121): avc: denied { read } for pid=10472 comm="syz.1.3153" name="loop-control" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 563.787226][T10487] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3155'. [ 563.851158][ T665] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 564.069309][T10493] loop3: detected capacity change from 0 to 4096 [ 564.076956][ T665] usb 6-1: config 4 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 32 [ 564.087393][ T665] usb 6-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 564.097006][T10493] EXT4-fs (loop3): Test dummy encryption mode enabled [ 564.105799][ T665] usb 6-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 564.107705][T10493] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 564.121158][ T665] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 564.127502][T10493] System zones: 0-5 [ 564.139839][ T665] usb 6-1: Product: syz [ 564.144379][ T665] usb 6-1: Manufacturer: syz [ 564.149073][ T665] usb 6-1: SerialNumber: syz [ 564.169641][T10493] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 564.236440][T10493] overlayfs: failed to resolve './bus/file0': -2 [ 564.243629][T10477] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 564.253346][ T665] usblp0: Disabling reads from problematic bidirectional printer [ 564.285080][ T9823] EXT4-fs (loop3): unmounting filesystem. [ 564.463489][ T665] usblp 6-1:4.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 0 proto 1 vid 0x03F0 pid 0x0004 [ 564.681338][ T351] usb 6-1: USB disconnect, device number 3 [ 564.689104][ T351] usblp0: removed [ 564.937348][T10511] IPv6: ADDRCONF(NETDEV_CHANGE): vcan1: link becomes ready [ 564.987089][T10511] tipc: Started in network mode [ 564.991971][T10511] tipc: Node identity 4, cluster identity 4711 [ 564.998208][T10511] tipc: Node number set to 4 [ 565.004438][T10511] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3162'. [ 565.013882][T10511] device bridge_slave_1 left promiscuous mode [ 565.020044][T10511] bridge0: port 2(bridge_slave_1) entered disabled state [ 565.027555][T10511] device bridge_slave_0 left promiscuous mode [ 565.033789][T10511] bridge0: port 1(bridge_slave_0) entered disabled state [ 565.145981][T10514] syz.1.3164[10514] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 565.146029][T10514] syz.1.3164[10514] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 565.247803][T10522] loop5: detected capacity change from 0 to 512 [ 565.266597][T10524] 8021q: VLANs not supported on sit0 [ 565.274364][T10522] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 565.283435][T10522] ext4 filesystem being mounted at /18/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 565.301562][T10188] EXT4-fs (loop5): unmounting filesystem. [ 565.423513][T10530] overlayfs: missing 'lowerdir' [ 565.725665][T10532] loop0: detected capacity change from 0 to 1024 [ 565.734092][T10532] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 565.813828][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 565.813842][ T28] audit: type=1400 audit(1764008411.376:1124): avc: denied { create } for pid=10538 comm="syz.3.3173" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 565.840976][ T28] audit: type=1400 audit(1764008411.376:1125): avc: denied { create } for pid=10538 comm="syz.3.3173" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 565.862159][ T28] audit: type=1400 audit(1764008411.376:1126): avc: denied { write } for pid=10538 comm="syz.3.3173" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 565.883330][ T28] audit: type=1400 audit(1764008411.376:1127): avc: denied { read } for pid=10538 comm="syz.3.3173" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 565.904147][ T28] audit: type=1400 audit(1764008411.406:1128): avc: denied { read write } for pid=9823 comm="syz-executor" name="loop3" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 565.928455][ T28] audit: type=1400 audit(1764008411.406:1129): avc: denied { open } for pid=9823 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 565.952828][ T28] audit: type=1400 audit(1764008411.406:1130): avc: denied { ioctl } for pid=9823 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=121 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 565.978959][ T28] audit: type=1400 audit(1764008411.416:1131): avc: denied { execmem } for pid=10543 comm="syz.3.3174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 565.979870][ T9618] EXT4-fs (loop0): unmounting filesystem. [ 565.998436][ T28] audit: type=1400 audit(1764008411.476:1132): avc: denied { bpf } for pid=10531 comm="syz.0.3170" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 566.024762][ T28] audit: type=1400 audit(1764008411.476:1133): avc: denied { prog_load } for pid=10531 comm="syz.0.3170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 567.316833][T10551] sch_fq: defrate 0 ignored. [ 567.536412][T10559] syz.0.3175[10559] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 567.536487][T10559] syz.0.3175[10559] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 567.549472][T10559] bridge: RTM_NEWNEIGH with invalid ether address [ 567.801524][T10569] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3180'. [ 567.955510][T10571] loop5: detected capacity change from 0 to 8192 [ 567.973038][T10571] loop5: p4 < > [ 567.978994][T10571] overlayfs: './file1' not a directory [ 567.985463][T10571] overlayfs: workdir and upperdir must be separate subtrees [ 568.072636][ T6] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 568.135598][T10579] syz.1.3185[10579] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 568.135990][T10579] syz.1.3185[10579] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 568.392081][ T6] usb 4-1: config 4 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 32 [ 569.124602][T10599] syz.5.3192[10599] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 569.124682][T10599] syz.5.3192[10599] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 569.201917][T10586] overlayfs: missing 'lowerdir' [ 569.207633][ T6] usb 4-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 569.234883][T10599] bridge: RTM_NEWNEIGH with invalid ether address [ 569.235565][ T6] usb 4-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 569.254844][ T6] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 569.263103][ T6] usb 4-1: Product: syz [ 569.263121][ T6] usb 4-1: Manufacturer: syz [ 569.263133][ T6] usb 4-1: SerialNumber: syz [ 569.264369][T10560] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 569.264777][ T6] usblp0: Disabling reads from problematic bidirectional printer [ 569.296908][ T24] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 569.457235][T10607] loop5: detected capacity change from 0 to 256 [ 569.464710][T10607] FAT-fs (loop5): Unrecognized mount option "check=relaxdd" or missing value [ 569.474302][ T6] usblp 4-1:4.0: usblp0: USB Unidirectional printer dev 12 if 0 alt 0 proto 1 vid 0x03F0 pid 0x0004 [ 569.524145][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 569.543916][ T24] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 569.544096][ T24] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 569.544164][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 569.561148][ T24] usb 1-1: config 0 descriptor?? [ 569.714494][ T6] usb 4-1: USB disconnect, device number 12 [ 569.721439][ T6] usblp0: removed [ 569.972003][ T24] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 570.021455][ T24] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 570.062159][ T24] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 570.070386][ T24] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 570.078111][ T24] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 570.096808][ T24] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 570.104420][ T24] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 570.111896][ T24] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 570.121874][ T24] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 570.130419][ T24] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving [ 570.139626][ T24] plantronics 0003:047F:FFFF.0006: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 570.234065][ T24] usb 1-1: USB disconnect, device number 6 [ 570.270076][T10634] loop3: detected capacity change from 0 to 256 [ 570.276794][T10634] FAT-fs (loop3): Unrecognized mount option "Socase" or missing value [ 570.392625][ T6] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 570.612863][T10642] syz.3.3204[10642] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 570.612940][T10642] syz.3.3204[10642] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 575.559271][ T28] kauditd_printk_skb: 57 callbacks suppressed [ 575.559289][ T28] audit: type=1400 audit(1764008417.366:1191): avc: denied { setopt } for pid=10639 comm="syz.1.3206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 575.677593][T10656] bridge: RTM_NEWNEIGH with invalid ether address [ 575.687632][ T28] audit: type=1400 audit(1764008421.216:1192): avc: denied { name_bind } for pid=10645 comm="syz.2.3208" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 575.710993][ T28] audit: type=1400 audit(1764008421.216:1193): avc: denied { node_bind } for pid=10645 comm="syz.2.3208" saddr=224.0.0.1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 575.741432][ T28] audit: type=1400 audit(1764008421.246:1194): avc: denied { bpf } for pid=10652 comm="syz.0.3210" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 575.763688][ T28] audit: type=1400 audit(1764008421.246:1195): avc: denied { prog_load } for pid=10652 comm="syz.0.3210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 575.783410][ T28] audit: type=1400 audit(1764008421.246:1196): avc: denied { perfmon } for pid=10652 comm="syz.0.3210" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 575.805400][ T28] audit: type=1400 audit(1764008421.256:1197): avc: denied { mounton } for pid=10652 comm="syz.0.3210" path="/64/file0" dev="tmpfs" ino=365 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 575.839768][ T28] audit: type=1400 audit(1764008421.266:1198): avc: denied { read write } for pid=10188 comm="syz-executor" name="loop5" dev="devtmpfs" ino=123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 575.871474][ T28] audit: type=1400 audit(1764008421.266:1199): avc: denied { open } for pid=10188 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 575.895858][ T28] audit: type=1400 audit(1764008421.266:1200): avc: denied { ioctl } for pid=10188 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=123 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 575.936320][T10670] block device autoloading is deprecated and will be removed. [ 575.944672][T10670] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 3 [ 575.961962][T10670] FAT-fs (loop1): unable to read boot sector [ 576.082626][ T6] usb 3-1: device not accepting address 6, error -71 [ 576.092631][ T24] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 576.274560][ T24] usb 6-1: config 4 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 32 [ 576.301224][ T24] usb 6-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 576.410918][ T24] usb 6-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 576.434358][T10682] loop3: detected capacity change from 0 to 256 [ 576.440841][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 576.450136][T10682] FAT-fs (loop3): Unrecognized mount option "Socase" or missing value [ 576.452636][ T24] usb 6-1: Product: syz [ 576.462891][ T24] usb 6-1: Manufacturer: syz [ 576.467543][ T24] usb 6-1: SerialNumber: syz [ 576.474793][T10668] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 576.482724][ T24] usblp0: Disabling reads from problematic bidirectional printer [ 576.635926][T10684] syz.3.3219[10684] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 576.636254][T10684] syz.3.3219[10684] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 576.704198][ T24] usblp 6-1:4.0: usblp0: USB Unidirectional printer dev 4 if 0 alt 0 proto 1 vid 0x03F0 pid 0x0004 [ 577.076182][T10687] FAULT_INJECTION: forcing a failure. [ 577.076182][T10687] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 577.176375][ T24] usb 6-1: USB disconnect, device number 4 [ 577.194898][ T24] usblp0: removed [ 577.238835][T10687] CPU: 1 PID: 10687 Comm: syz.0.3221 Not tainted syzkaller #0 [ 577.246318][T10687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 577.256367][T10687] Call Trace: [ 577.259642][T10687] [ 577.262561][T10687] __dump_stack+0x21/0x24 [ 577.266890][T10687] dump_stack_lvl+0xee/0x150 [ 577.271472][T10687] ? __cfi_dump_stack_lvl+0x8/0x8 [ 577.276488][T10687] ? preempt_schedule_irq+0xbb/0x110 [ 577.281767][T10687] dump_stack+0x15/0x24 [ 577.285916][T10687] should_fail_ex+0x3d4/0x520 [ 577.290586][T10687] should_fail+0xb/0x10 [ 577.294751][T10687] should_fail_usercopy+0x1a/0x20 [ 577.299774][T10687] strncpy_from_user+0x24/0x2d0 [ 577.304618][T10687] ? asm_exc_page_fault+0x27/0x30 [ 577.309648][T10687] ? getname_flags+0xb9/0x500 [ 577.314315][T10687] getname_flags+0xf4/0x500 [ 577.318803][T10687] ? refcount_dec_and_lock_irqsave+0xd1/0x100 [ 577.324868][T10687] user_path_at_empty+0x30/0x1c0 [ 577.329799][T10687] __se_sys_mount+0x2e3/0x380 [ 577.334471][T10687] ? __x64_sys_mount+0xd0/0xd0 [ 577.339234][T10687] __x64_sys_mount+0xbf/0xd0 [ 577.343819][T10687] x64_sys_call+0x65d/0x9a0 [ 577.348318][T10687] do_syscall_64+0x4c/0xa0 [ 577.352727][T10687] ? clear_bhb_loop+0x30/0x80 [ 577.357407][T10687] ? clear_bhb_loop+0x30/0x80 [ 577.362079][T10687] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 577.367967][T10687] RIP: 0033:0x7f58a1b8f749 [ 577.372373][T10687] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 577.391979][T10687] RSP: 002b:00007f58a2a9a038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 577.400404][T10687] RAX: ffffffffffffffda RBX: 00007f58a1de5fa0 RCX: 00007f58a1b8f749 [ 577.408372][T10687] RDX: 00002000000001c0 RSI: 0000200000000040 RDI: 0000000000000000 [ 577.416424][T10687] RBP: 00007f58a2a9a090 R08: 0000200000000100 R09: 0000000000000000 [ 577.424393][T10687] R10: 0000000000000400 R11: 0000000000000246 R12: 0000000000000001 [ 577.432355][T10687] R13: 00007f58a1de6038 R14: 00007f58a1de5fa0 R15: 00007ffc92b50fb8 [ 577.440326][T10687] [ 579.936573][T10721] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3227'. [ 581.756543][T10730] loop2: detected capacity change from 0 to 4096 [ 581.765952][T10730] EXT4-fs: Ignoring removed mblk_io_submit option [ 581.775006][T10734] loop3: detected capacity change from 0 to 256 [ 581.781713][T10734] FAT-fs (loop3): Unrecognized mount option "Socase" or missing value [ 581.919619][T10738] syz.0.3230[10738] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 581.919948][T10738] syz.0.3230[10738] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 581.945611][T10738] netlink: 'syz.0.3230': attribute type 4 has an invalid length. [ 582.035221][T10740] netlink: 'syz.0.3230': attribute type 4 has an invalid length. [ 582.952761][T10745] syz.3.3234[10745] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 582.952842][T10745] syz.3.3234[10745] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 583.324800][T10730] EXT4-fs (loop2): Test dummy encryption mode enabled [ 583.333545][T10748] bridge: RTM_NEWNEIGH with invalid ether address [ 583.338054][T10730] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 583.358465][ T28] kauditd_printk_skb: 57 callbacks suppressed [ 583.358477][ T28] audit: type=1400 audit(1764008428.916:1258): avc: denied { mount } for pid=10729 comm="syz.2.3233" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 583.780541][T10746] device bridge_slave_1 left promiscuous mode [ 583.786722][T10746] bridge0: port 2(bridge_slave_1) entered disabled state [ 583.827000][ T28] audit: type=1400 audit(1764008429.146:1259): avc: denied { mount } for pid=10732 comm="syz.5.3235" name="/" dev="configfs" ino=13085 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 584.160354][ T28] audit: type=1400 audit(1764008429.336:1260): avc: denied { search } for pid=10732 comm="syz.5.3235" name="/" dev="configfs" ino=13085 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 584.342956][ T28] audit: type=1400 audit(1764008429.336:1261): avc: denied { setattr } for pid=10732 comm="syz.5.3235" name="/" dev="configfs" ino=13085 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 584.449908][T10746] device bridge_slave_0 left promiscuous mode [ 584.457857][T10746] bridge0: port 1(bridge_slave_0) entered disabled state [ 585.247066][ T28] audit: type=1400 audit(1764008430.756:1262): avc: denied { write } for pid=10729 comm="syz.2.3233" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 585.322091][ T28] audit: type=1400 audit(1764008430.756:1263): avc: denied { add_name } for pid=10729 comm="syz.2.3233" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 585.343233][ T28] audit: type=1400 audit(1764008430.756:1264): avc: denied { create } for pid=10729 comm="syz.2.3233" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 585.369633][ T28] audit: type=1400 audit(1764008430.876:1265): avc: denied { write } for pid=10759 comm="syz.0.3240" name="001" dev="devtmpfs" ino=182 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 585.444998][ T9871] EXT4-fs (loop2): unmounting filesystem. [ 585.451930][ T28] audit: type=1400 audit(1764008431.006:1266): avc: denied { unmount } for pid=9871 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 585.485007][ T28] audit: type=1400 audit(1764008431.046:1267): avc: denied { create } for pid=10764 comm="syz.1.3241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 585.485621][T10775] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 3 [ 585.514795][T10775] FAT-fs (loop1): unable to read boot sector [ 585.551367][T10785] loop2: detected capacity change from 0 to 1024 [ 585.560214][T10785] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 585.583889][ T9871] EXT4-fs (loop2): unmounting filesystem. [ 585.747074][T10793] loop0: detected capacity change from 0 to 256 [ 585.753822][ T356] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 585.753877][T10702] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 585.946382][T10702] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 585.958394][ T356] usb 4-1: config 4 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 32 [ 585.969163][ T356] usb 4-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 585.982379][T10702] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 585.992832][T10702] usb 6-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 586.002241][T10702] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 586.013294][ T356] usb 4-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 586.023587][ T356] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 586.035691][T10702] usb 6-1: config 0 descriptor?? [ 586.041553][ T356] usb 4-1: Product: syz [ 586.046804][ T356] usb 4-1: Manufacturer: syz [ 586.051967][ T356] usb 4-1: SerialNumber: syz [ 586.065752][T10771] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 586.076195][ T356] usblp0: Disabling reads from problematic bidirectional printer [ 586.304105][ T356] usblp 4-1:4.0: usblp0: USB Unidirectional printer dev 13 if 0 alt 0 proto 1 vid 0x03F0 pid 0x0004 [ 586.695925][T10702] hid-led: probe of 0003:27B8:01ED.0007 failed with error -71 [ 586.804699][ T6] usb 4-1: USB disconnect, device number 13 [ 586.808216][T10702] usb 6-1: USB disconnect, device number 5 [ 586.816851][ T6] usblp0: removed [ 588.046854][T10839] device sit0 entered promiscuous mode [ 588.055150][T10839] netlink: 'syz.2.3264': attribute type 1 has an invalid length. [ 588.063596][T10839] netlink: 'syz.2.3264': attribute type 3 has an invalid length. [ 588.103540][T10839] loop2: detected capacity change from 0 to 4096 [ 588.110451][T10839] EXT4-fs: Ignoring removed nomblk_io_submit option [ 588.125557][T10839] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 588.138636][T10839] EXT4-fs (loop2): unmounting filesystem. [ 588.196160][T10849] FAULT_INJECTION: forcing a failure. [ 588.196160][T10849] name failslab, interval 1, probability 0, space 0, times 0 [ 588.290925][T10849] CPU: 1 PID: 10849 Comm: syz.1.3266 Not tainted syzkaller #0 [ 588.298425][T10849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 588.308475][T10849] Call Trace: [ 588.311746][T10849] [ 588.314673][T10849] __dump_stack+0x21/0x24 [ 588.319007][T10849] dump_stack_lvl+0xee/0x150 [ 588.323594][T10849] ? __cfi_dump_stack_lvl+0x8/0x8 [ 588.328615][T10849] ? __local_bh_enable_ip+0x58/0x80 [ 588.333810][T10849] ? release_sock+0x169/0x1c0 [ 588.338479][T10849] dump_stack+0x15/0x24 [ 588.342632][T10849] should_fail_ex+0x3d4/0x520 [ 588.347309][T10849] __should_failslab+0xac/0xf0 [ 588.352081][T10849] should_failslab+0x9/0x20 [ 588.356578][T10849] kmem_cache_alloc_node+0x42/0x340 [ 588.361774][T10849] ? __alloc_skb+0xea/0x4b0 [ 588.366273][T10849] __alloc_skb+0xea/0x4b0 [ 588.370595][T10849] ? netlink_autobind+0x168/0x1a0 [ 588.375616][T10849] netlink_sendmsg+0x626/0xbc0 [ 588.380374][T10849] ? __cfi_netlink_sendmsg+0x10/0x10 [ 588.385655][T10849] ? security_socket_sendmsg+0x93/0xb0 [ 588.391111][T10849] ? __cfi_netlink_sendmsg+0x10/0x10 [ 588.396395][T10849] ____sys_sendmsg+0x5a9/0x990 [ 588.401162][T10849] ? __sys_sendmsg_sock+0x40/0x40 [ 588.406185][T10849] ? import_iovec+0x7c/0xb0 [ 588.410688][T10849] ___sys_sendmsg+0x21c/0x290 [ 588.415371][T10849] ? __sys_sendmsg+0x270/0x270 [ 588.420134][T10849] ? __kasan_check_write+0x14/0x20 [ 588.425247][T10849] ? proc_fail_nth_write+0x17a/0x1f0 [ 588.430532][T10849] ? vfs_write+0x9d6/0xca0 [ 588.434958][T10849] ? __fdget+0x19c/0x220 [ 588.439192][T10849] __x64_sys_sendmsg+0x1f0/0x2c0 [ 588.444125][T10849] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 588.449591][T10849] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 588.455744][T10849] x64_sys_call+0x171/0x9a0 [ 588.460248][T10849] do_syscall_64+0x4c/0xa0 [ 588.464659][T10849] ? clear_bhb_loop+0x30/0x80 [ 588.469331][T10849] ? clear_bhb_loop+0x30/0x80 [ 588.474009][T10849] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 588.479899][T10849] RIP: 0033:0x7f08d9f8f749 [ 588.484306][T10849] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 588.503906][T10849] RSP: 002b:00007f08dae29038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 588.512320][T10849] RAX: ffffffffffffffda RBX: 00007f08da1e6090 RCX: 00007f08d9f8f749 [ 588.520286][T10849] RDX: 0000000000000800 RSI: 0000200000000000 RDI: 0000000000000005 [ 588.528253][T10849] RBP: 00007f08dae29090 R08: 0000000000000000 R09: 0000000000000000 [ 588.536304][T10849] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 588.544269][T10849] R13: 00007f08da1e6128 R14: 00007f08da1e6090 R15: 00007ffd5bc068e8 [ 588.552240][T10849] [ 588.574169][ T28] kauditd_printk_skb: 17 callbacks suppressed [ 588.580557][ T28] audit: type=1400 audit(1764008434.116:1285): avc: denied { nlmsg_write } for pid=10850 comm="syz.3.3267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 588.656543][T10852] loop3: detected capacity change from 0 to 512 [ 589.132947][T10852] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 589.284414][ T28] audit: type=1400 audit(1764008434.836:1286): avc: denied { execute } for pid=10856 comm="syz.5.3269" path="/34/blkio.bfq.group_wait_time" dev="tmpfs" ino=213 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 589.373078][ T28] audit: type=1400 audit(1764008434.926:1287): avc: denied { read write } for pid=10856 comm="syz.5.3269" dev="sockfs" ino=44526 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 589.402953][T10852] EXT4-fs (loop3): orphan cleanup on readonly fs [ 589.492751][ T1894] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 589.584220][T10852] EXT4-fs error (device loop3): ext4_orphan_get:1426: comm syz.3.3267: bad orphan inode 15 [ 589.663491][T10852] ext4_test_bit(bit=14, block=18) = 1 [ 589.768489][T10852] is_bad_inode(inode)=0 [ 589.785475][ T1894] usb 3-1: config 4 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 32 [ 589.821157][T10852] NEXT_ORPHAN(inode)=1023 [ 589.839260][ T1894] usb 3-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 589.882793][T10852] max_ino=32 [ 589.920032][T10852] i_nlink=0 [ 589.993465][T10852] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2934: inode #15: comm syz.3.3267: corrupted xattr block 19 [ 590.071273][T10852] EXT4-fs warning (device loop3): ext4_evict_inode:299: xattr delete (err -117) [ 590.162522][T10863] I/O error, dev loop11, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 590.174084][T10852] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 590.200917][T10863] FAT-fs (loop11): unable to read boot sector [ 590.330875][ T1894] usb 3-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 590.377163][ T1894] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 590.409288][ T1894] usb 3-1: Product: syz [ 590.431290][ T1894] usb 3-1: Manufacturer: syz [ 590.558679][ T1894] usb 3-1: SerialNumber: syz [ 590.639906][T10855] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 590.690014][ T1894] usblp0: Disabling reads from problematic bidirectional printer [ 590.926948][ T1894] usblp 3-1:4.0: usblp0: USB Unidirectional printer dev 8 if 0 alt 0 proto 1 vid 0x03F0 pid 0x0004 [ 591.058504][ T9823] EXT4-fs (loop3): unmounting filesystem. [ 591.080327][T10872] netlink: 'syz.0.3273': attribute type 12 has an invalid length. [ 591.108048][ T28] audit: type=1400 audit(1764008436.666:1288): avc: denied { read write } for pid=10874 comm="syz.1.3276" name="uhid" dev="devtmpfs" ino=267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 591.132232][ T28] audit: type=1400 audit(1764008436.666:1289): avc: denied { open } for pid=10874 comm="syz.1.3276" path="/dev/uhid" dev="devtmpfs" ino=267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 591.159141][ T28] audit: type=1400 audit(1764008436.666:1290): avc: denied { read } for pid=10875 comm="syz.3.3275" name="ppp" dev="devtmpfs" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 591.162106][ T351] usb 3-1: USB disconnect, device number 8 [ 591.188491][ T28] audit: type=1400 audit(1764008436.666:1291): avc: denied { open } for pid=10875 comm="syz.3.3275" path="/dev/ppp" dev="devtmpfs" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 591.193699][ T351] usblp0: removed [ 591.211875][ T28] audit: type=1400 audit(1764008436.666:1292): avc: denied { ioctl } for pid=10875 comm="syz.3.3275" path="/dev/ppp" dev="devtmpfs" ino=158 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 591.215898][T10880] netlink: 'syz.1.3277': attribute type 12 has an invalid length. [ 591.240552][ T28] audit: type=1400 audit(1764008436.716:1293): avc: denied { create } for pid=10875 comm="syz.3.3275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 591.280518][T10887] netlink: 'syz.1.3279': attribute type 1 has an invalid length. [ 591.288376][T10887] netlink: 'syz.1.3279': attribute type 2 has an invalid length. [ 591.308692][ T28] audit: type=1400 audit(1764008436.856:1294): avc: denied { unlink } for pid=10886 comm="syz.1.3279" name="#b" dev="tmpfs" ino=217 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 591.355205][T10893] bridge: RTM_NEWNEIGH with invalid ether address [ 591.407976][T10897] loop5: detected capacity change from 0 to 4096 [ 591.415196][T10897] EXT4-fs (loop5): Test dummy encryption mode enabled [ 591.424033][T10897] EXT4-fs error (device loop5): ext4_quota_enable:7011: comm syz.5.3284: inode #3439329280: comm syz.5.3284: iget: illegal inode # [ 591.437924][T10897] EXT4-fs error (device loop5): ext4_quota_enable:7014: comm syz.5.3284: Bad quota inode: 3439329280, type: 2 [ 591.452753][T10897] EXT4-fs warning (device loop5): ext4_enable_quotas:7055: Failed to enable quota tracking (type=2, err=-117, ino=3439329280). Please run e2fsck to fix. [ 591.470968][T10897] EXT4-fs (loop5): mount failed [ 591.912756][ T351] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 592.092697][ T351] usb 6-1: Using ep0 maxpacket: 8 [ 592.099339][ T351] usb 6-1: too many endpoints for config 0 interface 0 altsetting 254: 65, using maximum allowed: 30 [ 592.110436][ T351] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 66, changing to 10 [ 592.137499][ T351] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 592.147697][ T351] usb 6-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 65 [ 592.161118][ T351] usb 6-1: config 0 interface 0 has no altsetting 0 [ 592.168968][ T351] usb 6-1: New USB device found, idVendor=056a, idProduct=002a, bcdDevice= 0.00 [ 592.178495][ T351] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 592.187713][ T351] usb 6-1: config 0 descriptor?? [ 592.261330][T10924] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3290'. [ 592.335447][T10926] loop1: detected capacity change from 0 to 512 [ 592.342737][T10926] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 592.352522][T10926] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 592.362347][T10926] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 592.373180][T10926] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 592.381175][T10926] [EXT4 FS bs=4096, gc=2, bpg=35, ipg=32, mo=a04de01c, mo2=0000] [ 592.386321][T10929] loop3: detected capacity change from 0 to 256 [ 592.389338][T10926] EXT4-fs (loop1): failed to initialize system zone (-117) [ 592.402818][T10926] EXT4-fs (loop1): mount failed [ 592.408695][ T351] usbhid 6-1:0.0: can't add hid device: -71 [ 592.423717][ T351] usbhid: probe of 6-1:0.0 failed with error -71 [ 592.430736][ T351] usb 6-1: USB disconnect, device number 6 [ 592.533185][ T1174] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 592.713655][ T1174] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 592.723860][ T1174] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 592.733510][ T1174] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 592.742620][ T1174] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 592.750634][ T1174] usb 1-1: SerialNumber: syz [ 592.964616][ T1174] usb 1-1: 0:2 : does not exist [ 592.971448][ T1174] usb 1-1: USB disconnect, device number 7 [ 593.585205][T10952] loop2: detected capacity change from 0 to 128 [ 593.594792][T10952] FAT-fs (loop2): Directory bread(block 32) failed [ 593.601372][T10952] FAT-fs (loop2): Directory bread(block 33) failed [ 593.608011][T10952] FAT-fs (loop2): Directory bread(block 34) failed [ 593.614600][T10952] FAT-fs (loop2): Directory bread(block 35) failed [ 593.621229][T10952] FAT-fs (loop2): Directory bread(block 36) failed [ 593.627873][T10952] FAT-fs (loop2): Directory bread(block 37) failed [ 593.634530][T10952] FAT-fs (loop2): Directory bread(block 38) failed [ 593.641098][T10952] FAT-fs (loop2): Directory bread(block 39) failed [ 593.647703][T10952] FAT-fs (loop2): Directory bread(block 40) failed [ 593.654278][T10952] FAT-fs (loop2): Directory bread(block 41) failed [ 593.674968][T10952] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 593.682583][T10952] FAT-fs (loop2): Filesystem has been set read-only [ 593.704657][T10954] loop2: detected capacity change from 0 to 1024 [ 593.711567][T10954] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (52289!=20869) [ 593.721665][T10954] EXT4-fs (loop2): invalid journal inode [ 593.792664][ T1174] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 593.807920][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 593.807933][ T28] audit: type=1326 audit(1764008439.366:1306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10959 comm="syz.2.3304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa695b8f749 code=0x7ffc0000 [ 593.839474][ T28] audit: type=1326 audit(1764008439.366:1307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10959 comm="syz.2.3304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa695b8f749 code=0x7ffc0000 [ 593.863072][ T28] audit: type=1326 audit(1764008439.366:1308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10959 comm="syz.2.3304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fa695b8f749 code=0x7ffc0000 [ 593.893800][ T28] audit: type=1326 audit(1764008439.376:1309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10959 comm="syz.2.3304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa695b8f749 code=0x7ffc0000 [ 593.917906][ T28] audit: type=1326 audit(1764008439.376:1310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10959 comm="syz.2.3304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa695b8f749 code=0x7ffc0000 [ 593.941804][ T28] audit: type=1326 audit(1764008439.376:1311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10959 comm="syz.2.3304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7fa695b8f749 code=0x7ffc0000 [ 593.965691][ T28] audit: type=1326 audit(1764008439.376:1312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10959 comm="syz.2.3304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa695b8f749 code=0x7ffc0000 [ 593.989419][ T28] audit: type=1326 audit(1764008439.376:1313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10959 comm="syz.2.3304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa695b8f749 code=0x7ffc0000 [ 594.013217][ T28] audit: type=1326 audit(1764008439.376:1314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10959 comm="syz.2.3304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fa695b8f749 code=0x7ffc0000 [ 594.037007][ T28] audit: type=1326 audit(1764008439.376:1315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10959 comm="syz.2.3304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa695b8f749 code=0x7ffc0000 [ 594.061693][ T1174] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 594.066312][T10966] loop1: detected capacity change from 0 to 128 [ 594.081725][ T1174] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 594.117595][ T1174] usb 1-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 594.130989][ T1174] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 594.139872][ T1174] usb 1-1: Product: syz [ 594.144187][ T1174] usb 1-1: Manufacturer: syz [ 594.148873][ T1174] usb 1-1: SerialNumber: syz [ 594.164452][ T1174] usb 1-1: config 0 descriptor?? [ 594.170520][T10950] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 594.177843][T10950] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 594.397955][T10950] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 594.430612][T10950] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 594.445670][T10978] loop3: detected capacity change from 0 to 128 [ 594.480034][T10978] FAT-fs (loop3): Unrecognized mount option "utd8=1" or missing value [ 595.126551][T10996] loop5: detected capacity change from 0 to 128 [ 595.133940][T10996] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 595.333731][ T1174] dm9601 1-1:0.0 (unnamed net_device) (uninitialized): Error reading MODE_CTRL [ 595.343450][ T1174] usb 1-1: USB disconnect, device number 8 [ 595.351664][T11000] netlink: 'syz.5.3317': attribute type 12 has an invalid length. [ 595.594534][T11006] netlink: 120 bytes leftover after parsing attributes in process `syz.1.3319'. [ 595.603883][T11006] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3319'. [ 595.692935][ T2794] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 596.596172][T11024] loop5: detected capacity change from 0 to 1024 [ 596.606035][T11024] EXT4-fs: Ignoring removed bh option [ 596.611926][T11024] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 596.634385][T11024] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 596.690503][ T2794] usb 4-1: config 4 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 32 [ 596.706202][ T2794] usb 4-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 596.721954][ T2794] usb 4-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 596.731955][ T2794] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 596.740052][ T2794] usb 4-1: Product: syz [ 596.744272][ T2794] usb 4-1: Manufacturer: syz [ 596.748855][ T2794] usb 4-1: SerialNumber: syz [ 596.754431][T11004] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 596.872642][ T1894] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 596.895861][T11039] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:3836: comm syz.5.3325: Allocating blocks 481-513 which overlap fs metadata [ 596.910792][T11039] EXT4-fs (loop5): Remounting filesystem read-only [ 597.142661][ T1894] usb 2-1: Using ep0 maxpacket: 8 [ 597.150100][ T1894] usb 2-1: unable to get BOS descriptor or descriptor too short [ 597.160723][ T1894] usb 2-1: config 4 has an invalid interface number: 147 but max is 0 [ 597.170346][ T1894] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 597.181819][ T1894] usb 2-1: config 4 has no interface number 0 [ 597.191955][ T1894] usb 2-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 597.202657][ T1894] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 597.210965][ T1894] usb 2-1: Product: syz [ 597.216596][ T1894] usb 2-1: Manufacturer: syz [ 597.221484][ T1894] usb 2-1: SerialNumber: syz [ 597.392691][T10702] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 597.497979][T11023] EXT4-fs (loop5): pa ffff8881174dcf18: logic 16, phys. 113, len 25 [ 597.506025][T11023] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:4876: group 0, free 0, pa_free 2 [ 597.517515][T11023] EXT4-fs (loop5): Remounting filesystem read-only [ 598.178739][T11047] loop1: detected capacity change from 0 to 512 [ 598.220041][T10188] EXT4-fs (loop5): unmounting filesystem. [ 598.262305][T10702] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 598.276131][T11047] EXT4-fs (loop1): 1 orphan inode deleted [ 598.282020][T11047] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 598.299702][T11047] ext4 filesystem being mounted at /48/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 598.365095][T10702] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 598.377767][T10702] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 598.389937][T10702] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 598.434483][T10702] usb 3-1: config 0 descriptor?? [ 598.783374][T11042] loop2: detected capacity change from 0 to 128 [ 598.881547][T11042] FAT-fs (loop2): error, fat_free_clusters: deleting FAT entry beyond EOF [ 598.890128][T11042] FAT-fs (loop2): Filesystem has been set read-only [ 599.038559][ T8138] __quota_error: 69 callbacks suppressed [ 599.038605][ T8138] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 599.148702][ T28] audit: type=1400 audit(1764008444.706:1383): avc: denied { write } for pid=11055 comm="syz.0.3333" path="socket:[46269]" dev="sockfs" ino=46269 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 599.194394][ T8138] EXT4-fs error (device loop1): ext4_release_dquot:6839: comm kworker/u4:211: Failed to release dquot type 1 [ 599.224572][ T2794] usblp0: Disabling reads from problematic bidirectional printer [ 599.231611][T10702] usbhid 3-1:0.0: can't add hid device: -71 [ 599.250068][T10702] usbhid: probe of 3-1:0.0 failed with error -71 [ 599.257266][ T2794] usblp 4-1:4.0: usblp0: USB Unidirectional printer dev 14 if 0 alt 0 proto 1 vid 0x03F0 pid 0x0004 [ 599.265316][T11062] loop5: detected capacity change from 0 to 1024 [ 599.275609][ T2794] usb 4-1: USB disconnect, device number 14 [ 599.280756][T10702] usb 3-1: USB disconnect, device number 9 [ 599.290021][ T2794] usblp0: removed [ 599.296425][T11062] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 599.310396][ T28] audit: type=1400 audit(1764008444.866:1384): avc: denied { read append open } for pid=11061 comm="syz.5.3331" path="/49/file0/blkio.bfq.group_wait_time" dev="loop5" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 599.358935][ T28] audit: type=1400 audit(1764008444.896:1385): avc: denied { map } for pid=11061 comm="syz.5.3331" path="/49/file0/blkio.bfq.group_wait_time" dev="loop5" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 599.383693][ T28] audit: type=1400 audit(1764008444.896:1386): avc: denied { write execute } for pid=11061 comm="syz.5.3331" path="/49/file0/blkio.bfq.group_wait_time" dev="loop5" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 599.409328][ T28] audit: type=1400 audit(1764008444.896:1387): avc: denied { ioctl } for pid=11061 comm="syz.5.3331" path="/49/file0/blkio.bfq.group_wait_time" dev="loop5" ino=18 ioctlcmd=0xae9c scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 599.792227][T10188] EXT4-fs (loop5): unmounting filesystem. [ 599.867666][T11073] FAULT_INJECTION: forcing a failure. [ 599.867666][T11073] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 599.880826][T11073] CPU: 1 PID: 11073 Comm: syz.3.3335 Not tainted syzkaller #0 [ 599.888285][T11073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 599.898325][T11073] Call Trace: [ 599.901585][T11073] [ 599.904498][T11073] __dump_stack+0x21/0x24 [ 599.908813][T11073] dump_stack_lvl+0xee/0x150 [ 599.913383][T11073] ? __cfi_dump_stack_lvl+0x8/0x8 [ 599.918389][T11073] ? proc_fail_nth_write+0x17a/0x1f0 [ 599.923653][T11073] dump_stack+0x15/0x24 [ 599.927794][T11073] should_fail_ex+0x3d4/0x520 [ 599.932452][T11073] should_fail+0xb/0x10 [ 599.936593][T11073] should_fail_usercopy+0x1a/0x20 [ 599.941597][T11073] strncpy_from_user+0x24/0x2d0 [ 599.946427][T11073] ? getname_flags+0xb9/0x500 [ 599.951087][T11073] getname_flags+0xf4/0x500 [ 599.955567][T11073] getname+0x19/0x20 [ 599.959444][T11073] do_sys_openat2+0xcb/0x7e0 [ 599.964015][T11073] ? __kasan_check_write+0x14/0x20 [ 599.969106][T11073] ? do_sys_open+0xe0/0xe0 [ 599.973503][T11073] ? ksys_write+0x1eb/0x240 [ 599.977983][T11073] ? __cfi_ksys_write+0x10/0x10 [ 599.982811][T11073] __x64_sys_openat+0x136/0x160 [ 599.987644][T11073] x64_sys_call+0x783/0x9a0 [ 599.992127][T11073] do_syscall_64+0x4c/0xa0 [ 599.996532][T11073] ? clear_bhb_loop+0x30/0x80 [ 600.001190][T11073] ? clear_bhb_loop+0x30/0x80 [ 600.005848][T11073] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 600.011896][T11073] RIP: 0033:0x7f70bcf8f749 [ 600.016295][T11073] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 600.035879][T11073] RSP: 002b:00007f70bdda4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 600.044275][T11073] RAX: ffffffffffffffda RBX: 00007f70bd1e6180 RCX: 00007f70bcf8f749 [ 600.052242][T11073] RDX: 0000000000088040 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 600.060194][T11073] RBP: 00007f70bdda4090 R08: 0000000000000000 R09: 0000000000000000 [ 600.068143][T11073] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 600.076101][T11073] R13: 00007f70bd1e6218 R14: 00007f70bd1e6180 R15: 00007ffd8ab957c8 [ 600.084083][T11073] [ 600.341154][T10397] EXT4-fs (loop1): unmounting filesystem. [ 600.347747][ T1894] usb 2-1: Found UVC 0.02 device syz (04f2:b746) [ 600.374195][ T1894] usb 2-1: No valid video chain found. [ 600.445759][ T1894] usb 2-1: USB disconnect, device number 3 [ 600.460368][T11079] loop1: detected capacity change from 0 to 16 [ 600.471081][T11079] erofs: (device loop1): mounted with root inode @ nid 36. [ 600.479950][ T28] audit: type=1400 audit(1764008446.036:1388): avc: denied { map } for pid=11078 comm="syz.1.3338" path="/49/file1/file2" dev="loop1" ino=89 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 600.494019][ T46] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 600.514208][T11079] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 600.521479][T11082] loop5: detected capacity change from 0 to 2048 [ 600.525196][T11079] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 600.532099][T11082] EXT4-fs: Ignoring removed oldalloc option [ 600.543063][T11079] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 600.549673][ T28] audit: type=1400 audit(1764008446.106:1389): avc: denied { ioctl } for pid=11078 comm="syz.1.3338" path="/49/file1/file2" dev="loop1" ino=89 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 600.559433][T11079] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 600.597322][T11083] loop2: detected capacity change from 0 to 512 [ 600.621085][T11082] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 600.641037][T11083] EXT4-fs error (device loop2): ext4_do_update_inode:5256: inode #16: comm syz.2.3339: corrupted inode contents [ 600.653593][T11083] EXT4-fs (loop2): Remounting filesystem read-only [ 600.660142][ T28] audit: type=1400 audit(1764008446.216:1390): avc: denied { ioctl } for pid=11074 comm="syz.5.3336" path="socket:[45280]" dev="sockfs" ino=45280 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 600.670926][T11083] EXT4-fs error (device loop2): ext4_dirty_inode:6121: inode #16: comm syz.2.3339: mark_inode_dirty error [ 600.739631][T11098] loop3: detected capacity change from 0 to 512 [ 600.833117][T11098] EXT4-fs (loop3): Invalid log block size: 32 [ 600.862700][ T28] audit: type=1400 audit(1764008446.296:1391): avc: denied { setopt } for pid=11090 comm="syz.3.3342" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 600.891972][T11083] EXT4-fs (loop2): Remounting filesystem read-only [ 600.943308][T11083] EXT4-fs error (device loop2): ext4_do_update_inode:5256: inode #16: comm syz.2.3339: corrupted inode contents [ 601.013897][T11076] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 601.041355][T11083] EXT4-fs (loop2): Remounting filesystem read-only [ 601.070110][T11083] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #16: comm syz.2.3339: mark_inode_dirty error [ 601.141527][T11083] EXT4-fs (loop2): Remounting filesystem read-only [ 601.192344][T11083] EXT4-fs error (device loop2): ext4_do_update_inode:5256: inode #16: comm syz.2.3339: corrupted inode contents [ 601.252436][T10188] EXT4-fs (loop5): unmounting filesystem. [ 601.280016][T11083] EXT4-fs (loop2): Remounting filesystem read-only [ 601.310305][T11083] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 601.352483][T11083] EXT4-fs (loop2): Remounting filesystem read-only [ 601.384435][T11083] EXT4-fs error (device loop2): ext4_do_update_inode:5256: inode #16: comm syz.2.3339: corrupted inode contents [ 601.439963][T11083] EXT4-fs (loop2): Remounting filesystem read-only [ 601.469930][T11083] EXT4-fs error (device loop2): ext4_truncate:4314: inode #16: comm syz.2.3339: mark_inode_dirty error [ 601.519447][T11083] EXT4-fs (loop2): Remounting filesystem read-only [ 601.548580][T11083] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 601.588662][T11083] EXT4-fs (loop2): Remounting filesystem read-only [ 601.619320][T11083] EXT4-fs (loop2): 1 truncate cleaned up [ 601.633381][ T8138] EXT4-fs error (device loop2): ext4_release_dquot:6839: comm kworker/u4:211: Failed to release dquot type 1 [ 601.657600][T11083] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 601.675435][ T8138] EXT4-fs (loop2): Remounting filesystem read-only [ 601.705573][T11083] ext4 filesystem being mounted at /74/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 601.755936][T11083] EXT4-fs (loop2): unmounting filesystem. [ 601.935576][T11049] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 601.951151][T11112] device sit0 entered promiscuous mode [ 601.961885][T11112] netlink: 'syz.5.3345': attribute type 1 has an invalid length. [ 601.969864][T11112] netlink: 'syz.5.3345': attribute type 3 has an invalid length. [ 602.134912][T11049] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 602.145941][T11049] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 602.155748][T11049] usb 1-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 602.177765][T11049] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 602.200940][T11049] usb 1-1: config 0 descriptor?? [ 602.267727][T11161] loop1: detected capacity change from 0 to 128 [ 602.274639][T11161] EXT4-fs (loop1): Test dummy encryption mode enabled [ 602.281617][T11161] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 576460752303423507)! [ 602.293318][T11161] EXT4-fs (loop1): group descriptors corrupted! [ 602.408071][T11163] overlayfs: failed to resolve './file0': -2 [ 602.522691][ T60] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 602.578921][T11167] x_tables: unsorted underflow at hook 4 [ 602.714476][ T60] usb 6-1: config 4 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 32 [ 602.740413][ T60] usb 6-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 602.759103][ T60] usb 6-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 602.772284][ T60] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 602.786907][ T60] usb 6-1: Product: syz [ 602.791208][ T60] usb 6-1: Manufacturer: syz [ 602.797961][ T60] usb 6-1: SerialNumber: syz [ 602.858767][T11049] hid-led: probe of 0003:27B8:01ED.0008 failed with error -71 [ 602.875708][T11160] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 602.889344][T11049] usb 1-1: USB disconnect, device number 9 [ 602.895533][ T60] usblp0: Disabling reads from problematic bidirectional printer [ 603.052697][ T1894] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 603.096504][ T60] usblp 6-1:4.0: usblp0: USB Unidirectional printer dev 7 if 0 alt 0 proto 1 vid 0x03F0 pid 0x0004 [ 603.232602][ T1894] usb 2-1: Using ep0 maxpacket: 16 [ 603.238948][ T1894] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 603.247404][ T1894] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 603.261096][ T1894] usb 2-1: config 0 has no interface number 0 [ 603.262957][T11171] loop3: detected capacity change from 0 to 131072 [ 603.268935][ T1894] usb 2-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 603.274417][T11171] F2FS-fs (loop3): Test dummy encryption mode enabled [ 603.283088][ T1894] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 603.290367][T11171] F2FS-fs (loop3): invalid crc value [ 603.297889][ T1894] usb 2-1: Product: syz [ 603.304261][T11171] F2FS-fs (loop3): Found nat_bits in checkpoint [ 603.307144][ T1894] usb 2-1: Manufacturer: syz [ 603.321149][ T1894] usb 2-1: SerialNumber: syz [ 603.329059][ T1894] usb 2-1: config 0 descriptor?? [ 603.336244][ T60] usb 6-1: USB disconnect, device number 7 [ 603.338268][T11171] F2FS-fs (loop3): sanity_check_inode: corrupted inode ino=3, run fsck to fix. [ 603.343180][ T60] usblp0: removed [ 603.351406][T11171] F2FS-fs (loop3): Failed to read root inode [ 603.383676][ T920] device bridge_slave_1 left promiscuous mode [ 603.395293][ T920] bridge0: port 2(bridge_slave_1) entered disabled state [ 603.402918][ T920] device bridge_slave_0 left promiscuous mode [ 603.409485][ T920] bridge0: port 1(bridge_slave_0) entered disabled state [ 603.437210][ T920] device veth0_vlan left promiscuous mode [ 604.460347][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 604.498448][ T28] audit: type=1400 audit(1764008449.486:1398): avc: denied { mount } for pid=11174 comm="syz.0.3363" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 604.645294][ T28] audit: type=1400 audit(1764008450.206:1399): avc: denied { create } for pid=11170 comm="syz.3.3362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 604.838387][ T28] audit: type=1400 audit(1764008450.396:1400): avc: denied { unmount } for pid=9618 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 605.063547][T11198] netlink: 'syz.0.3367': attribute type 27 has an invalid length. [ 605.180590][T11200] loop2: detected capacity change from 0 to 256 [ 605.202089][ T28] audit: type=1400 audit(1764008450.756:1401): avc: denied { read } for pid=11189 comm="syz.0.3367" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 605.237415][ T28] audit: type=1400 audit(1764008450.786:1402): avc: denied { open } for pid=11189 comm="syz.0.3367" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 605.262067][T11198] bridge0: port 3(gretap0) entered disabled state [ 605.274255][T11198] bridge0: port 2(bridge_slave_1) entered disabled state [ 605.281425][T11198] bridge0: port 1(bridge_slave_0) entered disabled state [ 605.308005][T11198] device macsec1 left promiscuous mode [ 605.502611][ T60] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 605.542727][T11058] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 605.597710][ T2794] usb 2-1: USB disconnect, device number 4 [ 605.671978][T11215] loop5: detected capacity change from 0 to 512 [ 605.679321][T11215] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 605.687758][T11215] EXT4-fs (loop5): orphan cleanup on readonly fs [ 605.694324][T11215] EXT4-fs warning (device loop5): ext4_enable_quotas:7055: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 605.708876][T11215] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 605.715918][T11215] EXT4-fs error (device loop5): ext4_orphan_get:1400: inode #16: comm syz.5.3376: iget: immutable or append flags not allowed on symlinks [ 605.733920][ T60] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 605.745156][ T60] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 605.757565][ T60] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 605.774106][T11215] EXT4-fs error (device loop5): ext4_orphan_get:1405: comm syz.5.3376: couldn't read orphan inode 16 (err -117) [ 605.787204][T11215] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 605.826217][ T60] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 605.835079][ T60] usb 1-1: Product: syz [ 605.839682][ T60] usb 1-1: Manufacturer: syz [ 605.845178][ T60] usb 1-1: SerialNumber: syz [ 605.995629][T11058] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 606.006951][T11058] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 606.027127][T11058] usb 3-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 606.044303][T11223] loop3: detected capacity change from 0 to 512 [ 606.052452][T11223] EXT4-fs: Ignoring removed i_version option [ 606.149059][T11058] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 606.169422][T11223] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2818: Unable to expand inode 17. Delete some EAs or run e2fsck. [ 606.215717][T11223] EXT4-fs (loop3): 1 truncate cleaned up [ 606.219338][ T60] usb 1-1: 0:2 : does not exist [ 606.229112][T11223] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 606.243785][ T60] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 606.260869][ T60] usb 1-1: USB disconnect, device number 10 [ 607.194965][T11233] FAULT_INJECTION: forcing a failure. [ 607.194965][T11233] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 607.208576][T11233] CPU: 1 PID: 11233 Comm: syz.1.3380 Not tainted syzkaller #0 [ 607.216043][T11233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 607.226094][T11233] Call Trace: [ 607.229365][T11233] [ 607.232287][T11233] __dump_stack+0x21/0x24 [ 607.236617][T11233] dump_stack_lvl+0xee/0x150 [ 607.241199][T11233] ? __cfi_dump_stack_lvl+0x8/0x8 [ 607.246223][T11233] dump_stack+0x15/0x24 [ 607.250373][T11233] should_fail_ex+0x3d4/0x520 [ 607.255048][T11233] should_fail+0xb/0x10 [ 607.259199][T11233] should_fail_usercopy+0x1a/0x20 [ 607.264220][T11233] _copy_to_user+0x1e/0x90 [ 607.268633][T11233] simple_read_from_buffer+0xe9/0x160 [ 607.274002][T11233] proc_fail_nth_read+0x19a/0x210 [ 607.279035][T11233] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 607.284573][T11233] ? security_file_permission+0x94/0xb0 [ 607.290114][T11233] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 607.295662][T11233] vfs_read+0x26e/0x8c0 [ 607.299836][T11233] ? __cfi_vfs_read+0x10/0x10 [ 607.304511][T11233] ? __kasan_check_write+0x14/0x20 [ 607.309627][T11233] ? mutex_lock+0x8d/0x1a0 [ 607.314044][T11233] ? __cfi_mutex_lock+0x10/0x10 [ 607.318895][T11233] ? __fdget_pos+0x2cd/0x380 [ 607.323482][T11233] ? ksys_read+0x71/0x240 [ 607.327816][T11233] ksys_read+0x140/0x240 [ 607.332058][T11233] ? __cfi_ksys_read+0x10/0x10 [ 607.336821][T11233] ? fpregs_restore_userregs+0x128/0x260 [ 607.342452][T11233] __x64_sys_read+0x7b/0x90 [ 607.346945][T11233] x64_sys_call+0x2f/0x9a0 [ 607.351355][T11233] do_syscall_64+0x4c/0xa0 [ 607.355764][T11233] ? clear_bhb_loop+0x30/0x80 [ 607.360437][T11233] ? clear_bhb_loop+0x30/0x80 [ 607.365108][T11233] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 607.371003][T11233] RIP: 0033:0x7f08d9f8e15c [ 607.375410][T11233] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 607.395012][T11233] RSP: 002b:00007f08dae4a030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 607.403425][T11233] RAX: ffffffffffffffda RBX: 00007f08da1e5fa0 RCX: 00007f08d9f8e15c [ 607.411394][T11233] RDX: 000000000000000f RSI: 00007f08dae4a0a0 RDI: 0000000000000004 [ 607.413022][T11058] usb 3-1: config 0 descriptor?? [ 607.419445][T11233] RBP: 00007f08dae4a090 R08: 0000000000000000 R09: 0000000000000000 [ 607.419460][T11233] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 607.419469][T11233] R13: 00007f08da1e6038 R14: 00007f08da1e5fa0 R15: 00007ffd5bc068e8 [ 607.419487][T11233] [ 607.458084][ T9823] EXT4-fs (loop3): unmounting filesystem. [ 607.463599][ T28] audit: type=1400 audit(1764008453.016:1403): avc: denied { view } for pid=11234 comm="syz.1.3381" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 607.494406][T11235] netlink: 248 bytes leftover after parsing attributes in process `syz.1.3381'. [ 607.521843][ T28] audit: type=1400 audit(1764008453.076:1404): avc: denied { read } for pid=11239 comm="syz.3.3382" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 607.552124][ T28] audit: type=1400 audit(1764008453.106:1405): avc: denied { open } for pid=11239 comm="syz.3.3382" path="/79/file0/.pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 607.580877][T10188] EXT4-fs (loop5): unmounting filesystem. [ 607.583522][ T28] audit: type=1400 audit(1764008453.106:1406): avc: denied { ioctl } for pid=11239 comm="syz.3.3382" path="/79/file0/.pending_reads" dev="incremental-fs" ino=2 ioctlcmd=0x6723 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 607.613293][ T28] audit: type=1400 audit(1764008453.106:1407): avc: denied { ioctl } for pid=11236 comm="syz.0.3383" path="socket:[45954]" dev="sockfs" ino=45954 ioctlcmd=0x89f4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 607.797324][T11256] loop3: detected capacity change from 0 to 256 [ 607.873666][T11200] loop2: detected capacity change from 0 to 1024 [ 607.900522][T11200] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 607.937986][T11058] hid-generic 0003:04F3:0755.0009: failed to start in urb: -90 [ 607.947337][T11058] hid-generic 0003:04F3:0755.0009: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.2-1/input0 [ 608.157919][T11058] usb 3-1: USB disconnect, device number 10 [ 608.451534][T11263] loop1: detected capacity change from 0 to 1024 [ 608.483938][T11263] EXT4-fs: Ignoring removed bh option [ 608.506726][T11263] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 608.567665][T11263] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 608.780887][ T9871] EXT4-fs (loop2): unmounting filesystem. [ 609.311907][T11277] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:3836: comm syz.1.3389: Allocating blocks 481-513 which overlap fs metadata [ 609.327304][T11277] EXT4-fs (loop1): Remounting filesystem read-only [ 609.996724][T11261] EXT4-fs (loop1): pa ffff8881174dcb28: logic 16, phys. 113, len 25 [ 610.004748][T11261] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:4876: group 0, free 0, pa_free 2 [ 610.018860][T11261] EXT4-fs (loop1): Remounting filesystem read-only [ 610.063190][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 610.063204][ T28] audit: type=1400 audit(1764008455.626:1416): avc: denied { read } for pid=11262 comm="syz.5.3390" name="usbmon7" dev="devtmpfs" ino=180 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 610.157107][ T28] audit: type=1400 audit(1764008455.666:1417): avc: denied { open } for pid=11262 comm="syz.5.3390" path="/dev/usbmon7" dev="devtmpfs" ino=180 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 610.182098][T10397] EXT4-fs (loop1): unmounting filesystem. [ 610.828016][ T28] audit: type=1400 audit(1764008456.386:1418): avc: denied { setopt } for pid=11295 comm="syz.2.3398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 611.123125][ T28] audit: type=1400 audit(1764008456.686:1419): avc: denied { setopt } for pid=11310 comm="syz.3.3405" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 611.173499][T11309] xt_SECMARK: invalid mode: 2 [ 611.198439][ T28] audit: type=1400 audit(1764008456.756:1420): avc: denied { write } for pid=11310 comm="syz.3.3405" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 611.251207][ T28] audit: type=1400 audit(1764008456.806:1421): avc: denied { mounton } for pid=11310 comm="syz.3.3405" path="/83/file0" dev="tmpfs" ino=495 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 611.392694][ T1894] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 611.591238][T11332] loop3: detected capacity change from 0 to 128 [ 611.602858][T11332] FAT-fs (loop3): bogus sectors per cluster 0 [ 611.610076][T11332] FAT-fs (loop3): Can't find a valid FAT filesystem [ 611.617664][ T1894] usb 3-1: config 4 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 32 [ 611.631649][ T1894] usb 3-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 611.651064][ T1894] usb 3-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 611.664326][ T1894] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 611.672702][ T1894] usb 3-1: Product: syz [ 611.676967][ T1894] usb 3-1: Manufacturer: syz [ 611.681793][ T1894] usb 3-1: SerialNumber: syz [ 611.753033][T11314] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 611.760691][ T1894] usblp0: Disabling reads from problematic bidirectional printer [ 611.984014][ T1894] usblp 3-1:4.0: usblp0: USB Unidirectional printer dev 11 if 0 alt 0 proto 1 vid 0x03F0 pid 0x0004 [ 612.196476][ T28] audit: type=1400 audit(1764008457.756:1422): avc: denied { connect } for pid=11338 comm="syz.1.3412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 612.255655][ T2794] usb 3-1: USB disconnect, device number 11 [ 612.263102][ T2794] usblp0: removed [ 613.074543][T11349] loop5: detected capacity change from 0 to 256 [ 613.422633][ T1894] usb 3-1: new low-speed USB device number 12 using dummy_hcd [ 613.797699][ T1894] usb 3-1: device descriptor read/64, error -71 [ 613.808665][T11364] loop3: detected capacity change from 0 to 512 [ 613.820783][T11364] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 613.900238][T11369] syz.3.3419: attempt to access beyond end of device [ 613.900238][T11369] loop3: rw=2049, sector=2832, nr_sectors = 248 limit=512 [ 613.970060][ T997] kworker/u4:120: attempt to access beyond end of device [ 613.970060][ T997] loop3: rw=1, sector=3080, nr_sectors = 1320 limit=512 [ 614.124373][ T1894] usb 3-1: device descriptor read/64, error -71 [ 614.215062][ T2794] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 614.823856][ T1894] usb 3-1: new low-speed USB device number 13 using dummy_hcd [ 615.088773][ T1894] usb 3-1: device descriptor read/64, error -71 [ 615.138729][ T28] audit: type=1400 audit(1764008460.696:1423): avc: denied { append } for pid=11386 comm="syz.3.3425" name="usbmon7" dev="devtmpfs" ino=180 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 615.163584][ T28] audit: type=1400 audit(1764008460.696:1424): avc: denied { ioctl } for pid=11386 comm="syz.3.3425" path="/dev/usbmon7" dev="devtmpfs" ino=180 ioctlcmd=0x920a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 615.208925][ T2794] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 615.232578][ T2794] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 615.242345][ T2794] usb 2-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 615.252636][ T2794] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 615.261619][ T2794] usb 2-1: config 0 descriptor?? [ 615.402604][ T1894] usb 3-1: device descriptor read/64, error -71 [ 615.426646][T11387] loop3: detected capacity change from 0 to 40427 [ 615.434728][T11387] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 615.442501][T11387] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 615.451634][T11387] F2FS-fs (loop3): invalid crc value [ 615.457230][T11387] F2FS-fs (loop3): invalid crc value [ 615.462767][T11387] F2FS-fs (loop3): Failed to get valid F2FS checkpoint [ 615.522669][ T1894] usb usb3-port1: attempt power cycle [ 615.585807][T11396] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3427'. [ 615.601546][T11396] kvm [11395]: vcpu2, guest rIP: 0x9137 Unhandled WRMSR(0xc1) = 0x4000 [ 615.616141][T11396] kvm [11395]: vcpu2, guest rIP: 0x9137 Unhandled WRMSR(0xc2) = 0x4000 [ 615.627675][T11396] kvm [11395]: vcpu2, guest rIP: 0x9137 Unhandled WRMSR(0x11e) = 0x4000 [ 615.644448][T11396] kvm [11395]: vcpu2, guest rIP: 0x9137 Unhandled WRMSR(0x186) = 0x4000 [ 615.653075][T11396] kvm [11395]: vcpu2, guest rIP: 0x9137 Unhandled WRMSR(0x187) = 0x4000 [ 616.344282][ T2794] usbhid 2-1:0.0: can't add hid device: -71 [ 616.350262][ T2794] usbhid: probe of 2-1:0.0 failed with error -71 [ 616.360794][ T2794] usb 2-1: USB disconnect, device number 5 [ 616.647881][ T1894] usb 3-1: new low-speed USB device number 14 using dummy_hcd [ 616.663041][T11415] device sit0 entered promiscuous mode [ 616.672711][T11415] netlink: 'syz.0.3433': attribute type 1 has an invalid length. [ 616.680544][T11415] netlink: 'syz.0.3433': attribute type 3 has an invalid length. [ 616.681396][T11411] loop5: detected capacity change from 0 to 8192 [ 616.693577][ T1894] usb 3-1: device descriptor read/8, error -71 [ 618.292805][ T28] audit: type=1400 audit(1764008463.676:1425): avc: denied { write } for pid=11410 comm="syz.5.3431" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 618.327318][ T1894] usb 3-1: device descriptor read/8, error -71 [ 618.349002][ T28] audit: type=1400 audit(1764008463.816:1426): avc: denied { name_bind } for pid=11422 comm="syz.3.3437" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 618.966423][ T28] audit: type=1400 audit(1764008463.876:1427): avc: denied { mounton } for pid=11410 comm="syz.5.3431" path="/67/file2/file0" dev="loop5" ino=1048661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 619.077887][T11447] loop1: detected capacity change from 0 to 256 [ 619.094487][T11451] device sit0 entered promiscuous mode [ 619.100887][T11451] netlink: 'syz.1.3445': attribute type 1 has an invalid length. [ 619.108811][T11451] netlink: 'syz.1.3445': attribute type 3 has an invalid length. [ 619.501099][ T28] audit: type=1400 audit(1764008465.056:1428): avc: denied { sqpoll } for pid=11455 comm="syz.1.3447" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 619.537073][T11463] loop1: detected capacity change from 0 to 128 [ 619.560372][T11463] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 619.577930][T11463] ext4 filesystem being mounted at /81/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 619.606828][T10397] EXT4-fs (loop1): unmounting filesystem. [ 619.632715][T11058] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 619.762941][ T28] audit: type=1400 audit(1764008465.326:1429): avc: denied { getopt } for pid=11474 comm="syz.3.3453" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 619.773584][T11476] xt_CT: No such helper "pptp" [ 620.182608][T11058] usb 1-1: Using ep0 maxpacket: 32 [ 620.188839][T11058] usb 1-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 620.202596][T11058] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 620.213285][T11058] usb 1-1: config 0 descriptor?? [ 620.420054][T11449] fuse: Unknown parameter '' [ 620.453955][T11488] loop2: detected capacity change from 0 to 256 [ 620.462592][T11488] overlayfs: missing 'workdir' [ 620.572790][ T2794] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 620.579920][T11492] netlink: 'syz.1.3459': attribute type 1 has an invalid length. [ 620.588096][T11492] netlink: 'syz.1.3459': attribute type 3 has an invalid length. [ 620.619822][ T28] audit: type=1400 audit(1764008466.176:1430): avc: denied { execute_no_trans } for pid=11497 comm="syz.2.3462" path="/91/file1" dev="tmpfs" ino=532 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 621.545183][T11058] usbhid 1-1:0.0: can't add hid device: -71 [ 621.551172][T11058] usbhid: probe of 1-1:0.0 failed with error -71 [ 621.557575][T11511] bridge0: port 2(bridge_slave_1) entered disabled state [ 621.559050][T11058] usb 1-1: USB disconnect, device number 11 [ 621.564803][T11511] bridge0: port 1(bridge_slave_0) entered disabled state [ 621.571859][ T2794] usb 6-1: config 220 has an invalid interface number: 76 but max is 2 [ 621.579637][ T28] audit: type=1400 audit(1764008467.136:1431): avc: denied { block_suspend } for pid=11508 comm="syz.2.3466" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 621.586680][ T2794] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 621.618867][T11510] 9pnet_fd: Insufficient options for proto=fd [ 621.619461][ T2794] usb 6-1: config 220 has no interface number 2 [ 621.631423][ T2794] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 621.652083][ T2794] usb 6-1: config 220 interface 0 has no altsetting 0 [ 621.659150][ T2794] usb 6-1: config 220 interface 76 has no altsetting 0 [ 621.666442][ T2794] usb 6-1: config 220 interface 1 has no altsetting 0 [ 621.678513][T11511] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3467'. [ 621.680486][ T891] Bluetooth: hci0: Frame reassembly failed (-84) [ 621.695084][ T2794] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 621.704310][ T2794] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 621.712343][ T2794] usb 6-1: Product: syz [ 621.716827][ T2794] usb 6-1: Manufacturer: syz [ 621.721429][ T2794] usb 6-1: SerialNumber: syz [ 621.937684][ T2794] usb 6-1: selecting invalid altsetting 0 [ 621.945269][ T28] audit: type=1400 audit(1764008467.506:1432): avc: denied { setopt } for pid=11571 comm="syz.1.3468" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 621.965657][ T2794] usb 6-1: selecting invalid altsetting 0 [ 621.965751][T11590] loop1: detected capacity change from 0 to 16 [ 621.971482][ T2794] usb 6-1: Found UVC 7.01 device syz (8086:0b07) [ 621.985552][ T2794] usb 6-1: No valid video chain found. [ 621.996524][ T2794] usb 6-1: USB disconnect, device number 8 [ 622.038535][T11590] erofs: (device loop1): z_erofs_load_lz4_config: too large lz4 pclusterblks 16832 [ 622.349107][ T28] audit: type=1400 audit(1764008467.906:1433): avc: denied { remount } for pid=11595 comm="syz.0.3471" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 623.221986][T11590] loop1: detected capacity change from 0 to 40427 [ 623.237331][T11590] F2FS-fs (loop1): invalid crc value [ 623.258510][T11590] F2FS-fs (loop1): Found nat_bits in checkpoint [ 623.324320][T11590] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 623.339052][T11590] F2FS-fs (loop1): Inconsistent segment (8) type [1, 0] in SSA and SIT [ 623.450336][T11617] netlink: 'syz.2.3474': attribute type 1 has an invalid length. [ 623.474596][T11617] netlink: 'syz.2.3474': attribute type 3 has an invalid length. [ 623.733009][T11513] Bluetooth: hci0: command 0x1003 tx timeout [ 623.733046][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 624.032218][T11629] loop2: detected capacity change from 0 to 512 [ 624.451012][T11635] loop5: detected capacity change from 0 to 512 [ 624.462639][T11635] EXT4-fs: Ignoring removed orlov option [ 624.468496][T11635] EXT4-fs: Ignoring removed i_version option [ 624.562620][T11635] EXT4-fs (loop5): inodes count not valid: 1024 vs 32 [ 627.902819][ T60] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 628.929866][T11657] fuse: Bad value for 'fd' [ 628.978770][T11659] device sit0 entered promiscuous mode [ 629.059159][T11659] netlink: 'syz.3.3487': attribute type 1 has an invalid length. [ 629.061187][T11653] loop2: detected capacity change from 0 to 32768 [ 629.073934][T11659] netlink: 'syz.3.3487': attribute type 3 has an invalid length. [ 629.230512][T11653] loop2: p1 p2 p3 < > p4 < p5 p6 > [ 629.241463][T11653] loop2: p1 start 460800 is beyond EOD, truncated [ 629.251511][T11653] loop2: p2 size 83886080 extends beyond EOD, truncated [ 629.258777][T11665] loop3: detected capacity change from 0 to 2048 [ 629.266029][T11665] EXT4-fs: Ignoring removed oldalloc option [ 629.272481][T11653] loop2: p5 start 460800 is beyond EOD, truncated [ 629.279101][T11653] loop2: p6 size 83886080 extends beyond EOD, truncated [ 629.289498][T11665] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 629.319453][T11665] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 629.342540][ T9823] EXT4-fs (loop3): unmounting filesystem. [ 629.591341][T11677] loop1: detected capacity change from 0 to 512 [ 629.786322][T11677] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 630.062274][T11677] EXT4-fs (loop1): orphan cleanup on readonly fs [ 630.193119][T11677] EXT4-fs error (device loop1): ext4_orphan_get:1426: comm syz.1.3490: bad orphan inode 15 [ 630.255630][T11677] ext4_test_bit(bit=14, block=18) = 1 [ 630.261181][T11677] is_bad_inode(inode)=0 [ 630.319515][T11677] NEXT_ORPHAN(inode)=1023 [ 630.460632][T11677] max_ino=32 [ 630.489650][T11677] i_nlink=0 [ 630.733056][T11677] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2934: inode #15: comm syz.1.3490: corrupted xattr block 19 [ 630.889295][T11677] EXT4-fs warning (device loop1): ext4_evict_inode:299: xattr delete (err -117) [ 631.014420][T11677] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 632.513720][T10397] EXT4-fs (loop1): unmounting filesystem. [ 632.534398][T11697] netlink: 'syz.3.3499': attribute type 1 has an invalid length. [ 632.542173][ T28] audit: type=1400 audit(1764008478.096:1434): avc: denied { wake_alarm } for pid=11698 comm="syz.0.3497" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 632.551116][T11697] netlink: 'syz.3.3499': attribute type 3 has an invalid length. [ 632.624144][T11703] loop2: detected capacity change from 0 to 256 [ 632.660755][T11706] device syzkaller0 entered promiscuous mode [ 633.363975][ T28] audit: type=1400 audit(1764008478.916:1435): avc: denied { getopt } for pid=11715 comm="syz.5.3502" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 634.574427][T11738] FAULT_INJECTION: forcing a failure. [ 634.574427][T11738] name failslab, interval 1, probability 0, space 0, times 0 [ 634.642647][T11738] CPU: 0 PID: 11738 Comm: syz.1.3510 Not tainted syzkaller #0 [ 634.650144][T11738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 634.660189][T11738] Call Trace: [ 634.663460][T11738] [ 634.666382][T11738] __dump_stack+0x21/0x24 [ 634.670710][T11738] dump_stack_lvl+0xee/0x150 [ 634.675287][T11738] ? __cfi_dump_stack_lvl+0x8/0x8 [ 634.680295][T11738] ? is_bpf_text_address+0x177/0x190 [ 634.685565][T11738] ? kernel_text_address+0xa0/0xd0 [ 634.690660][T11738] dump_stack+0x15/0x24 [ 634.694797][T11738] should_fail_ex+0x3d4/0x520 [ 634.699459][T11738] ? p9_client_prepare_req+0x16e/0xe00 [ 634.704900][T11738] __should_failslab+0xac/0xf0 [ 634.709733][T11738] should_failslab+0x9/0x20 [ 634.714216][T11738] kmem_cache_alloc+0x3b/0x330 [ 634.718964][T11738] p9_client_prepare_req+0x16e/0xe00 [ 634.724232][T11738] ? kasan_set_track+0x60/0x70 [ 634.728976][T11738] ? kasan_set_track+0x4b/0x70 [ 634.733721][T11738] ? kasan_save_alloc_info+0x25/0x30 [ 634.738992][T11738] ? trace_raw_output_9p_fid_ref+0x170/0x170 [ 634.745001][T11738] ? p9_client_attach+0x9e/0x3c0 [ 634.749941][T11738] ? v9fs_fid_lookup_with_uid+0x859/0x9c0 [ 634.755665][T11738] ? v9fs_fid_lookup+0x125/0x180 [ 634.760601][T11738] ? v9fs_vfs_lookup+0x12f/0x510 [ 634.765520][T11738] ? lookup_one_qstr_excl+0x125/0x270 [ 634.771221][T11738] ? filename_create+0x219/0x450 [ 634.776137][T11738] ? do_mkdirat+0x5c/0x4c0 [ 634.780623][T11738] ? __x64_sys_mkdirat+0x89/0xa0 [ 634.785542][T11738] ? x64_sys_call+0x73d/0x9a0 [ 634.790202][T11738] ? delete_node+0x3dc/0xa60 [ 634.794774][T11738] p9_client_rpc+0x185/0xac0 [ 634.799342][T11738] ? __kasan_check_write+0x14/0x20 [ 634.804428][T11738] ? node_tag_clear+0x1fb/0x330 [ 634.809263][T11738] ? p9_fid_create+0x350/0x350 [ 634.814006][T11738] ? __cfi_idr_alloc_u32+0x10/0x10 [ 634.819094][T11738] ? _raw_spin_lock_irq+0x8f/0xe0 [ 634.824096][T11738] ? debug_smp_processor_id+0x17/0x20 [ 634.829446][T11738] p9_client_attach+0x157/0x3c0 [ 634.834276][T11738] ? __cfi__raw_spin_lock+0x10/0x10 [ 634.839466][T11738] ? __cfi_p9_client_attach+0x10/0x10 [ 634.844837][T11738] ? _raw_spin_unlock+0x4c/0x70 [ 634.849687][T11738] ? v9fs_fid_find+0x32a/0x3a0 [ 634.854440][T11738] v9fs_fid_lookup_with_uid+0x859/0x9c0 [ 634.859971][T11738] ? slab_post_alloc_hook+0x12/0x2d0 [ 634.865242][T11738] v9fs_fid_lookup+0x125/0x180 [ 634.869990][T11738] v9fs_vfs_lookup+0x12f/0x510 [ 634.874738][T11738] ? __cfi_v9fs_vfs_lookup+0x10/0x10 [ 634.880009][T11738] ? _raw_spin_unlock+0x4c/0x70 [ 634.884841][T11738] ? d_alloc+0x199/0x1d0 [ 634.889067][T11738] lookup_one_qstr_excl+0x125/0x270 [ 634.894244][T11738] filename_create+0x219/0x450 [ 634.898986][T11738] ? kasan_save_alloc_info+0x25/0x30 [ 634.904256][T11738] ? kern_path_create+0x1b0/0x1b0 [ 634.909261][T11738] do_mkdirat+0x5c/0x4c0 [ 634.913481][T11738] ? getname_flags+0x206/0x500 [ 634.918222][T11738] __x64_sys_mkdirat+0x89/0xa0 [ 634.922966][T11738] x64_sys_call+0x73d/0x9a0 [ 634.927450][T11738] do_syscall_64+0x4c/0xa0 [ 634.931848][T11738] ? clear_bhb_loop+0x30/0x80 [ 634.936521][T11738] ? clear_bhb_loop+0x30/0x80 [ 634.941202][T11738] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 634.947093][T11738] RIP: 0033:0x7f08d9f8de97 [ 634.951493][T11738] Code: 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 634.971092][T11738] RSP: 002b:00007f08dae49e68 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 634.979500][T11738] RAX: ffffffffffffffda RBX: 00007f08dae49ef0 RCX: 00007f08d9f8de97 [ 634.987457][T11738] RDX: 00000000000001ff RSI: 00002000000000c0 RDI: 00000000ffffff9c [ 634.995416][T11738] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 635.003384][T11738] R10: 0000000000000000 R11: 0000000000000246 R12: 00002000000000c0 [ 635.011346][T11738] R13: 00007f08dae49eb0 R14: 0000000000000000 R15: 0000000000000000 [ 635.019306][T11738] [ 635.047050][ T28] audit: type=1400 audit(1764008480.606:1436): avc: denied { create } for pid=11741 comm="syz.0.3509" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 635.078317][ T28] audit: type=1400 audit(1764008480.626:1437): avc: denied { setopt } for pid=11741 comm="syz.0.3509" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 635.097931][ T28] audit: type=1400 audit(1764008480.626:1438): avc: denied { map } for pid=11741 comm="syz.0.3509" path="socket:[49104]" dev="sockfs" ino=49104 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 635.123607][ T28] audit: type=1400 audit(1764008480.626:1439): avc: denied { read accept } for pid=11741 comm="syz.0.3509" path="socket:[49104]" dev="sockfs" ino=49104 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 635.241529][T11753] loop1: detected capacity change from 0 to 512 [ 635.312752][ T3391] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 635.326283][T11753] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 635.613953][ T3391] usb 6-1: Using ep0 maxpacket: 16 [ 635.639084][ T3391] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 635.658313][T11753] EXT4-fs (loop1): orphan cleanup on readonly fs [ 635.669649][T11753] EXT4-fs error (device loop1): ext4_orphan_get:1426: comm syz.1.3514: bad orphan inode 15 [ 635.712524][T11753] ext4_test_bit(bit=14, block=18) = 1 [ 635.752355][T11753] is_bad_inode(inode)=0 [ 635.772846][T11753] NEXT_ORPHAN(inode)=1023 [ 635.799272][T11753] max_ino=32 [ 635.803794][T11753] i_nlink=0 [ 635.813982][T11753] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2934: inode #15: comm syz.1.3514: corrupted xattr block 19 [ 635.912848][T11753] EXT4-fs warning (device loop1): ext4_evict_inode:299: xattr delete (err -117) [ 635.954058][ T3391] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 635.965753][ T3391] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 635.980797][ T3391] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 635.991433][ T3391] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 636.027416][T11753] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 636.134206][ T3391] usb 6-1: config 0 descriptor?? [ 636.466587][ T28] audit: type=1400 audit(1764008482.026:1440): avc: denied { bpf } for pid=11760 comm="syz.2.3518" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 636.519639][T11762] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3512'. [ 636.731817][ T28] audit: type=1400 audit(1764008482.106:1441): avc: denied { map_create } for pid=11760 comm="syz.2.3518" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 636.895025][T11766] FAULT_INJECTION: forcing a failure. [ 636.895025][T11766] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 636.926665][ T28] audit: type=1400 audit(1764008482.126:1443): avc: denied { map_read map_write } for pid=11760 comm="syz.2.3518" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 637.072636][T11766] CPU: 0 PID: 11766 Comm: syz.3.3519 Not tainted syzkaller #0 [ 637.076922][ T28] audit: type=1400 audit(1764008482.126:1442): avc: denied { map_read map_write } for pid=11760 comm="syz.2.3518" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 637.080118][T11766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 637.080130][T11766] Call Trace: [ 637.080135][T11766] [ 637.080142][T11766] __dump_stack+0x21/0x24 [ 637.120492][T11766] dump_stack_lvl+0xee/0x150 [ 637.125072][T11766] ? __cfi_dump_stack_lvl+0x8/0x8 [ 637.130076][T11766] dump_stack+0x15/0x24 [ 637.134212][T11766] should_fail_ex+0x3d4/0x520 [ 637.138874][T11766] should_fail+0xb/0x10 [ 637.143010][T11766] should_fail_usercopy+0x1a/0x20 [ 637.148017][T11766] _copy_from_user+0x1e/0xc0 [ 637.152588][T11766] iovec_from_user+0x1aa/0x2e0 [ 637.157336][T11766] ? sysvec_reschedule_ipi+0x78/0x80 [ 637.162630][T11766] __import_iovec+0x71/0x470 [ 637.167211][T11766] import_iovec+0x7c/0xb0 [ 637.171524][T11766] ___sys_sendmsg+0x1e4/0x290 [ 637.176179][T11766] ? __sys_sendmsg+0x270/0x270 [ 637.180927][T11766] ? __kasan_check_read+0x11/0x20 [ 637.185930][T11766] ? preempt_schedule_irq+0xbb/0x110 [ 637.191207][T11766] ? __fdget+0x19c/0x220 [ 637.195428][T11766] __x64_sys_sendmsg+0x1f0/0x2c0 [ 637.200360][T11766] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 637.205832][T11766] ? __kasan_check_write+0x14/0x20 [ 637.210922][T11766] ? fpregs_restore_userregs+0x128/0x260 [ 637.216564][T11766] ? switch_fpu_return+0xe/0x10 [ 637.221394][T11766] x64_sys_call+0x171/0x9a0 [ 637.225970][T11766] do_syscall_64+0x4c/0xa0 [ 637.230365][T11766] ? clear_bhb_loop+0x30/0x80 [ 637.235021][T11766] ? clear_bhb_loop+0x30/0x80 [ 637.239680][T11766] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 637.245556][T11766] RIP: 0033:0x7f70bcf8f749 [ 637.249956][T11766] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 637.269538][T11766] RSP: 002b:00007f70bdde6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 637.277929][T11766] RAX: ffffffffffffffda RBX: 00007f70bd1e5fa0 RCX: 00007f70bcf8f749 [ 637.285897][T11766] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 637.293850][T11766] RBP: 00007f70bdde6090 R08: 0000000000000000 R09: 0000000000000000 [ 637.301801][T11766] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 637.309752][T11766] R13: 00007f70bd1e6038 R14: 00007f70bd1e5fa0 R15: 00007ffd8ab957c8 [ 637.317716][T11766] [ 637.321365][T10397] EXT4-fs (loop1): unmounting filesystem. [ 637.324004][ T3391] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.000A/input/input9 [ 637.340332][ T3391] microsoft 0003:045E:07DA.000A: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 637.351557][T11772] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3521'. [ 637.376293][T11774] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3522'. [ 637.385371][T11774] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3522'. [ 637.398464][T11774] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11774 comm=syz.3.3522 [ 638.370164][ T28] kauditd_printk_skb: 26 callbacks suppressed [ 638.370178][ T28] audit: type=1400 audit(1764008483.926:1470): avc: denied { read } for pid=11780 comm="syz.3.3525" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 638.375528][ T3391] usb 6-1: USB disconnect, device number 9 [ 638.407288][ T28] audit: type=1400 audit(1764008483.926:1471): avc: denied { read write } for pid=11783 comm="syz.1.3526" name="fuse" dev="devtmpfs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 638.432867][ T28] audit: type=1400 audit(1764008483.926:1472): avc: denied { open } for pid=11783 comm="syz.1.3526" path="/dev/fuse" dev="devtmpfs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 638.458842][ T28] audit: type=1400 audit(1764008483.926:1473): avc: denied { mounton } for pid=11783 comm="syz.1.3526" path="/96/file0" dev="tmpfs" ino=547 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 638.497890][ T28] audit: type=1400 audit(1764008483.926:1474): avc: denied { mount } for pid=11783 comm="syz.1.3526" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 638.520146][ T28] audit: type=1400 audit(1764008483.926:1475): avc: denied { create } for pid=11778 comm="syz.0.3524" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 638.543868][ T28] audit: type=1400 audit(1764008483.936:1476): avc: denied { open } for pid=11780 comm="syz.3.3525" path="/dev/kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 638.567898][ T28] audit: type=1400 audit(1764008483.936:1477): avc: denied { ioctl } for pid=11780 comm="syz.3.3525" path="/dev/kvm" dev="devtmpfs" ino=83 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 638.617823][ T28] audit: type=1400 audit(1764008484.046:1478): avc: denied { ioctl } for pid=11778 comm="syz.0.3524" path="socket:[47990]" dev="sockfs" ino=47990 ioctlcmd=0x5828 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 638.660453][ T28] audit: type=1400 audit(1764008484.216:1479): avc: denied { nlmsg_write } for pid=11786 comm="syz.5.3527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 638.815256][T11794] loop5: detected capacity change from 0 to 512 [ 638.913486][T11794] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 639.217778][T11794] EXT4-fs (loop5): orphan cleanup on readonly fs [ 639.359132][T11794] EXT4-fs error (device loop5): ext4_orphan_get:1426: comm syz.5.3527: bad orphan inode 15 [ 739.412550][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 739.419537][ C0] (detected by 0, t=10002 jiffies, g=49933, q=146 ncpus=2) [ 739.426817][ C0] rcu: All QSes seen, last rcu_preempt kthread activity 10002 (4295011168-4295001166), jiffies_till_next_fqs=1, root ->qsmask 0x0 [ 739.440173][ C0] rcu: rcu_preempt kthread starved for 10002 jiffies! g49933 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 739.451451][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 739.461511][ C0] rcu: RCU grace-period kthread stack dump: [ 739.467383][ C0] task:rcu_preempt state:R running task stack:28064 pid:14 ppid:2 flags:0x00004000 [ 739.478154][ C0] Call Trace: [ 739.481427][ C0] [ 739.484354][ C0] __schedule+0xb87/0x14e0 [ 739.488778][ C0] ? __sched_text_start+0x8/0x8 [ 739.493621][ C0] ? __mod_timer+0x7ae/0xb30 [ 739.498204][ C0] schedule+0xbd/0x170 [ 739.502264][ C0] schedule_timeout+0x12c/0x2e0 [ 739.507115][ C0] ? __cfi_schedule_timeout+0x10/0x10 [ 739.512479][ C0] ? __cfi_process_timeout+0x10/0x10 [ 739.517763][ C0] ? prepare_to_swait_event+0x308/0x320 [ 739.523305][ C0] rcu_gp_fqs_loop+0x2d8/0x10a0 [ 739.528149][ C0] ? rcu_gp_init+0xc5b/0xf10 [ 739.532731][ C0] ? rcu_gp_init+0xf10/0xf10 [ 739.537316][ C0] rcu_gp_kthread+0x95/0x370 [ 739.541982][ C0] ? __cfi_rcu_gp_kthread+0x10/0x10 [ 739.547172][ C0] ? __kasan_check_read+0x11/0x20 [ 739.552189][ C0] ? __kthread_parkme+0x142/0x180 [ 739.557208][ C0] kthread+0x281/0x320 [ 739.561264][ C0] ? __cfi_rcu_gp_kthread+0x10/0x10 [ 739.566453][ C0] ? __cfi_kthread+0x10/0x10 [ 739.571038][ C0] ret_from_fork+0x1f/0x30 [ 739.575452][ C0] [ 739.578461][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 739.584775][ C0] Sending NMI from CPU 0 to CPUs 1: [ 739.589969][ C1] NMI backtrace for cpu 1 [ 739.589978][ C1] CPU: 1 PID: 11787 Comm: syz.5.3527 Not tainted syzkaller #0 [ 739.589993][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 739.590002][ C1] RIP: 0010:pvclock_clocksource_read+0x4f/0x710 [ 739.590021][ C1] Code: 89 fb 49 c1 eb 03 4c 89 d2 48 c1 ea 03 49 8d 48 07 4c 89 c0 48 c1 e8 03 48 89 85 38 ff ff ff 48 89 8d 78 ff ff ff 48 c1 e9 03 <48> 89 8d 40 ff ff ff 49 8d 49 03 4c 89 c8 48 c1 e8 03 48 89 85 48 [ 739.590034][ C1] RSP: 0018:ffffc900001b0d40 EFLAGS: 00000807 [ 739.590047][ C1] RAX: 1ffffffff0f2d409 RBX: ffffc900001b0e80 RCX: 1ffffffff0f2d409 [ 739.590059][ C1] RDX: 1ffffffff0f2d408 RSI: ffffffff8796a05c RDI: ffffffff8796a040 [ 739.590071][ C1] RBP: ffffc900001b0e10 R08: ffffffff8796a048 R09: ffffffff8796a058 [ 739.590082][ C1] R10: ffffffff8796a043 R11: 1ffffffff0f2d408 R12: ffff8881f71273c8 [ 739.590093][ C1] R13: dffffc0000000000 R14: 1ffff920000361cc R15: ffff888117f6a880 [ 739.590104][ C1] FS: 00007f5cc9b736c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 739.590118][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 739.590129][ C1] CR2: 000020000006b000 CR3: 000000011b7e8000 CR4: 00000000003526a0 [ 739.590143][ C1] DR0: fffffffffffffff1 DR1: 0000000000000000 DR2: 0000000000000000 [ 739.590152][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 739.590162][ C1] Call Trace: [ 739.590167][ C1] [ 739.590177][ C1] kvm_sched_clock_read+0x18/0x40 [ 739.590198][ C1] sched_clock+0x9/0x10 [ 739.590214][ C1] sched_clock_cpu+0x6e/0x250 [ 739.590231][ C1] ? __cfi_sched_clock_cpu+0x10/0x10 [ 739.590252][ C1] ? _raw_spin_unlock_irqrestore+0x5a/0x80 [ 739.590270][ C1] irqtime_account_irq+0x75/0x240 [ 739.590290][ C1] handle_softirqs+0x543/0x600 [ 739.590307][ C1] __do_softirq+0xb/0xd [ 739.590326][ C1] do_softirq+0xc6/0x120 [ 739.590339][ C1] [ 739.590344][ C1] [ 739.590348][ C1] ? __cfi_do_softirq+0x10/0x10 [ 739.590364][ C1] ? fpu__clear_user_states+0x38/0x1f0 [ 739.590380][ C1] ? fpu__clear_user_states+0x38/0x1f0 [ 739.590396][ C1] __local_bh_enable_ip+0x75/0x80 [ 739.590410][ C1] fpu__clear_user_states+0x166/0x1f0 [ 739.590426][ C1] arch_do_signal_or_restart+0x410/0x1030 [ 739.590448][ C1] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 739.590471][ C1] exit_to_user_mode_loop+0x7a/0xb0 [ 739.590486][ C1] exit_to_user_mode_prepare+0x87/0xd0 [ 739.590502][ C1] syscall_exit_to_user_mode+0x1a/0x30 [ 739.590522][ C1] do_syscall_64+0x58/0xa0 [ 739.590536][ C1] ? clear_bhb_loop+0x30/0x80 [ 739.590554][ C1] ? clear_bhb_loop+0x30/0x80 [ 739.590572][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 739.590590][ C1] RIP: 0033:0x7f5cc8db7e80 [ 739.590601][ C1] Code: 83 c0 16 83 e0 f7 74 12 50 48 8d 3d 8a 54 08 00 e8 05 8f f8 ff 0f 1f 44 00 00 c3 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 <83> ff 21 74 0b c3 66 2e 0f 1f 84 00 00 00 00 00 55 53 48 89 f3 48 [ 739.590614][ C1] RSP: 002b:00007f5cc9b72a78 EFLAGS: 00000246 [ 739.590625][ C1] RAX: 0000000000000000 RBX: 00007f5cc8fe5fa0 RCX: 00007f5cc8d8f749 [ 739.590635][ C1] RDX: 00007f5cc9b72a80 RSI: 00007f5cc9b72bb0 RDI: 0000000000000021 [ 739.590645][ C1] RBP: 00007f5cc8e13f91 R08: 0000000000000007 R09: 0000000000000000 [ 739.590655][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 739.590664][ C1] R13: 00007f5cc8fe6038 R14: 00007f5cc8fe5fa0 R15: 00007fff693878e8 [ 739.590684][ C1] [ 858.772717][ C0] BUG: workqueue lockup - pool cpus=0-1 flags=0x4 nice=0 stuck for 219s! [ 858.781206][ C0] Showing busy workqueues and worker pools: [ 858.787099][ C0] workqueue events: flags=0x0 [ 858.791769][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 858.791810][ C0] pending: psi_avgs_work [ 858.791842][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=2/256 refcnt=3 [ 858.791878][ C0] pending: vmstat_shepherd, kfree_rcu_monitor [ 858.791920][ C0] workqueue events_unbound: flags=0x2 [ 858.823504][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=2/512 refcnt=4 [ 858.823542][ C0] pending: toggle_allocation_gate, flush_memcg_stats_dwork [ 858.823593][ C0] workqueue events_power_efficient: flags=0x80 [ 858.844436][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=6/256 refcnt=7 [ 858.844476][ C0] pending: neigh_periodic_work, neigh_managed_work, neigh_managed_work, neigh_periodic_work, gc_worker, check_lifetime [ 858.844600][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=2/256 refcnt=3 [ 858.844635][ C0] pending: wg_ratelimiter_gc_entries, reg_check_chans_work [ 858.844679][ C0] workqueue rcu_gp: flags=0x8 [ 858.884814][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 858.884855][ C0] pending: process_srcu [ 858.884883][ C0] workqueue mm_percpu_wq: flags=0x8 [ 858.902161][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 858.902199][ C0] pending: vmstat_update [ 858.902227][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 858.902261][ C0] pending: vmstat_update [ 858.902291][ C0] workqueue writeback: flags=0x4a [ 858.931664][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=2/256 refcnt=4 [ 858.931701][ C0] pending: wb_workfn, wb_workfn [ 858.931742][ C0] workqueue kblockd: flags=0x18 [ 858.948943][ C0] pwq 3: cpus=1 node=0 flags=0x0 nice=-20 active=3/256 refcnt=4 [ 858.948983][ C0] pending: blk_mq_timeout_work, blk_mq_timeout_work, blk_mq_timeout_work [ 858.949048][ C0] workqueue dm_bufio_cache: flags=0x8 [ 858.970936][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 858.970977][ C0] pending: work_fn [ 858.971010][ C0] workqueue ipv6_addrconf: flags=0x40008 [ 858.988331][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/1 refcnt=4 [ 858.988373][ C0] pending: addrconf_verify_work [ 858.988399][ C0] inactive: addrconf_verify_work, addrconf_verify_work [ 858.988434][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/1 refcnt=4 [ 858.988468][ C0] pending: addrconf_verify_work [ 858.988490][ C0] inactive: addrconf_verify_work, addrconf_verify_work [ 858.988534][ C0] workqueue wg-kex-wg0: flags=0x6 [ 859.033165][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 859.033204][ C0] pending: wg_packet_handshake_send_worker [ 859.033235][ C0] workqueue wg-crypt-wg0: flags=0x28 [ 859.051810][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 859.051848][ C0] pending: wg_packet_encrypt_worker [ 859.051875][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 859.051910][ C0] pending: wg_packet_encrypt_worker [ 859.051937][ C0] workqueue wg-kex-wg1: flags=0x6 [ 859.083235][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 859.083274][ C0] pending: wg_packet_handshake_send_worker [ 859.083302][ C0] workqueue wg-crypt-wg1: flags=0x28 [ 859.101882][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 859.101922][ C0] pending: wg_packet_encrypt_worker [ 859.101950][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 859.101986][ C0] pending: wg_packet_encrypt_worker [ 859.102010][ C0] workqueue wg-kex-wg2: flags=0x6 [ 859.133312][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=2/256 refcnt=4 [ 859.133347][ C0] pending: wg_packet_handshake_send_worker, wg_packet_handshake_send_worker [ 859.133392][ C0] workqueue wg-crypt-wg2: flags=0x28 [ 859.154847][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 859.154885][ C0] pending: wg_packet_encrypt_worker [ 859.154913][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 859.154948][ C0] pending: wg_packet_encrypt_worker [ 859.154975][ C0] workqueue wg-kex-wg0: flags=0x6 [ 859.186272][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 859.186310][ C0] pending: wg_packet_handshake_send_worker [ 859.186338][ C0] workqueue wg-crypt-wg0: flags=0x28 [ 859.204935][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 859.204974][ C0] pending: wg_packet_encrypt_worker [ 859.205001][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 859.205036][ C0] pending: wg_packet_encrypt_worker [ 859.205062][ C0] workqueue wg-kex-wg1: flags=0x6 [ 859.236357][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 859.236392][ C0] pending: wg_packet_handshake_send_worker [ 859.236421][ C0] workqueue wg-crypt-wg1: flags=0x28 [ 859.255110][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 859.255153][ C0] pending: wg_packet_encrypt_worker [ 859.255182][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 859.255217][ C0] pending: wg_packet_encrypt_worker [ 859.255242][ C0] workqueue wg-kex-wg2: flags=0x6 [ 859.286548][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 859.286585][ C0] pending: wg_packet_handshake_send_worker [ 859.286612][ C0] workqueue wg-crypt-wg2: flags=0x28 [ 859.305219][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 859.305261][ C0] pending: wg_packet_encrypt_worker [ 859.305288][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 859.305324][ C0] pending: wg_packet_encrypt_worker [ 859.305353][ C0] workqueue wg-kex-wg1: flags=0x6 [ 859.336656][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 859.336695][ C0] pending: wg_packet_handshake_send_worker [ 859.336723][ C0] workqueue wg-crypt-wg1: flags=0x28 [ 859.355318][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 859.355360][ C0] pending: wg_packet_encrypt_worker [ 859.355388][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 859.355423][ C0] pending: wg_packet_encrypt_worker [ 859.355449][ C0] workqueue wg-kex-wg2: flags=0x6 [ 859.386764][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 859.386803][ C0] pending: wg_packet_handshake_send_worker [ 859.386832][ C0] workqueue wg-crypt-wg2: flags=0x28 [ 859.405441][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 859.405482][ C0] pending: wg_packet_encrypt_worker [ 859.405511][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 859.405548][ C0] pending: wg_packet_encrypt_worker [ 859.405574][ C0] workqueue wg-kex-wg0: flags=0x6 [ 859.436883][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 859.436921][ C0] pending: wg_packet_handshake_send_worker [ 859.436954][ C0] workqueue wg-crypt-wg0: flags=0x28 [ 859.455552][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 859.455592][ C0] pending: wg_packet_encrypt_worker [ 859.455620][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 859.455654][ C0] pending: wg_packet_encrypt_worker [ 859.455681][ C0] workqueue wg-kex-wg1: flags=0x6 [ 859.486988][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 859.487026][ C0] pending: wg_packet_handshake_send_worker [ 859.487055][ C0] workqueue wg-crypt-wg1: flags=0x28 [ 859.505657][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 859.505697][ C0] pending: wg_packet_encrypt_worker [ 859.505725][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 859.505760][ C0] pending: wg_packet_encrypt_worker [ 859.505786][ C0] workqueue wg-kex-wg2: flags=0x6 [ 859.537086][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 859.537124][ C0] pending: wg_packet_handshake_send_worker [ 859.537152][ C0] workqueue wg-crypt-wg2: flags=0x28 [ 859.555742][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 859.555784][ C0] pending: wg_packet_encrypt_worker [ 859.555811][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 859.555847][ C0] pending: wg_packet_encrypt_worker