last executing test programs: 1m12.190550038s ago: executing program 0 (id=1683): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0b00000008000000070000000900000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYRESOCT=r0], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r1}, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x2) readv(r2, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0x940}], 0x1) r3 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) r4 = socket$netlink(0x10, 0x3, 0xa) r5 = dup(r4) r6 = open(&(0x7f0000000140)='./file1\x00', 0x109cc2, 0x5c) ftruncate(r6, 0x200004) sendfile(r5, r6, 0x0, 0x80001d00c0d1) fcntl$setlease(r3, 0x400, 0x0) timer_create(0x0, &(0x7f00000005c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000640), 0x1, 0x775, &(0x7f0000001180)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) write(r8, &(0x7f0000004200)='t', 0x1) sendfile(r8, r7, 0x0, 0x3ffff) sendfile(r8, r7, 0x0, 0x7ffff000) fallocate(r7, 0x0, 0x0, 0x1001f0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x10, &(0x7f00000004c0)={[{@i_version}, {@nodiscard}, {@min_batch_time={'min_batch_time', 0x3d, 0x3ff}}]}, 0x1, 0x3f7, &(0x7f0000003080)="$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") syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000280)='./bus\x00', 0x3881403, 0x0, 0x1, 0x0, &(0x7f0000000080)) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) chdir(0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file1\x00', 0x0, &(0x7f0000000400)={[], [{@euid_gt={'euid>', 0xee00}}, {@euid_eq}, {@fowner_lt}, {@euid_lt}]}, 0x0, 0xb80, &(0x7f0000001900)="$eJzs3MtrXFUYAPDv3jyaNrGTiqgtggGpFcVp2hSFrlrXooIuuuyYTErI9GEmggldpHWvLkRcFKR/guDeunAluKgLrX9BEYsU3bQuInce6dBkktjO9PTx+8GZe86c6XzfN5fOPQfmJoAn1kTxkEfsjYiTWUSp9XweEcON3kjESvN1t2+eny5aFqur7/+VRRYRt26en26/V9Y6jrYGIxFx9a0snv50fdz60vJ8pVarLrTGBxdPnztYX1p+fe505VT1VPXMkak3j0y9MTXVw1qvn/vw6xd+eefli5c/m3z3q90/ZXEsxlpznXX0ykRMrH0mnQYjotLrYIkMtOrprDMbTJgQAACbyjvWcM9GKQbizuKtFD/+mjQ5AAAAoCdWByJWAQAAgMdcZv8PAAAAj7n27wBu3Tw/3W5pf5HwYN04HhHjzfrb9zc3ZwZjpXEciaGI2PV3Fp23tWbNf3bfJopI3/1cLVr06T7kzaxciIjnNzr/WaP+8cZd3OvrzyNisgfxJ+4aP0r1H+tB/NT1A/BkunK8eSFbf/3L19Y/scH1b3CDa9e9SH39a6//bq9b/92pf6DL+u+9bcbY9++rV7vNda7/Tnz++0wRvzjeV1H/w40LEfsGN6o/W6s/61L/yW3GGJ2+fqnbXFF/UW+7Pej6Vy9H7I+N62/LNvv7RAdn52rVyeZjlxj7fzhxoFv8zvNftCJ+ey/wIBTnf1eX+rc6/+e2GWP8uT/3dpvbuv78j+Hsg0ZvuPXMJ5XFxYVDEcPZ2+ufP7x5Lu3XtN+jqP+Vlzb//79R/cV3wkrrcyj2Ahdax2J88a6Yo/sPf3vv9fdXUf/MPZ7/L7YZ45vvL33UbS51/QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8GvKIGIssL6/187xcjhiNiGdiV147W198bfbsx2dmirmI8RjKZ+dq1cmIKDXHWTE+1OjfGR++azwVEXsi4svSzsa4PH22NpO6eAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANaMRsRYZHk5IvKI+KeU5+Vy6qwAAACAnhtPnQAAAADQd/b/AAAA8Piz/wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKDP9rx45VoWEStHdzZaYbg1N5Q0M6Df8tQJAMkMpE4ASGYwdQJAMvb4QLbF/EjXmR09zwUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAh9eBvVeuZRGxcnRnoxWGW3NDSTMD+i1PnQCQzEDqBIBkBlMnACRjjw9kW8yPdJ3Z0fNcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHh4jTValpcjIm/087xcjngqIsZjKJudq1UnI2J3RPxWGtpRjA+lThoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICeqy8tz1dqteqCjo6Ozlon9TcTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAp1JeW5yu1WnWhnjoTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAILX60vJ8pVarLvSxk7pGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADS+S8AAP//szUGGQ==") 1m9.597103539s ago: executing program 0 (id=1696): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000040000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0, r7}, 0x18) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$bind(0x0, &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r8 = userfaultfd(0x80801) write$P9_ROPEN(r2, &(0x7f0000000000)={0x18, 0x71, 0x1, {{0x40, 0x2, 0x5}, 0x40}}, 0x18) ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f0000000200)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) close_range(r8, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) 1m8.361475234s ago: executing program 0 (id=1699): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x8000000000002) sched_setscheduler(r0, 0x2, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bind$inet6(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x12, 0x5, &(0x7f0000000040)=@framed={{0x45, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x18}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80) 1m7.275208785s ago: executing program 0 (id=1702): r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000002340), 0x100, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000011c0)={0x0, 0x0, 0x0}, &(0x7f0000001200)=0xc) sched_setscheduler(r3, 0x3, &(0x7f0000001240)=0xf) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r5, 0xffffffffffffffff}, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kmem_cache_free\x00', r7}, 0x10) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f00000000c0)='./file0\x00', 0x1000000, &(0x7f00000003c0)=ANY=[@ANYBLOB="73686f72746e616d653d77696e39352c756e695f786c6174653d312c636865636b3d7374726963742c646f733178666c6f7070792c757466383d312c757466383d312c757466383d302c696f636861727365743d6370313235de26302c696f636861727365743d69736f383835392d342c696f636861727365743d64656661756c742c73686f72746e616d653d6d69786564", @ANYRES8=0x0], 0xfe, 0x19c, &(0x7f0000000200)="$eJzs281qE1EYBuA3tdW2LtKFK3Ex4MZVaHsFFqkgBgSlCwVBsQ1IRwIWArqw2bnwJrwct3olLrsQRppp7Q+piNoMJM+zyQfnvMl3DiSZMzAvbr3Z3e7v9Z73vmSx1crc3arKQSsrmcuxYQCAaXJQVfleVVV1bZilz6mqqumOAIDL5v8fAGbPk6fPHm50u5uPi2IxKT8OtgZb9Ws9vtHL65TZyWra+ZHDC4QjdX3/QXdztRhZyady/yi/P9i6cja/lnZWxufX6nxxNr+Q5dP59bRzY3x+fWz+au7cPpXvpJ1vr9JPme0cZk/yH9aK4t6j7rn89dE8AAAAmAad4pex5/dO56LxOr/R+uP7A+fO1/O5Od/s2gFgVu29e7/7six33jZWJBn+Zs7X5brRyTVW/GX8eEub3Mx/K5by/995Ic2va3qK/txlf8RiklHR4I8SMBEn3/6mOwEAAAAAAAAAAAAAAC4yiUeXml4jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALPnZwAAAP//RL2Oaw==") r9 = creat(&(0x7f0000000240)='./file1\x00', 0x0) io_setup(0x200, &(0x7f0000000140)=0x0) io_submit(r10, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x2, 0x1, 0x0, r9, &(0x7f0000000000), 0x4000, 0x8008}]) r11 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r11) ptrace$pokeuser(0x6, r11, 0x358, 0x0) write$cgroup_pid(r0, &(0x7f0000001040)=r11, 0x12) sendmsg(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x2004090) setpriority(0x2, 0xffffffffffffffff, 0x4d) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, 0x0, 0x0) ioctl$USBDEVFS_CLEAR_HALT(0xffffffffffffffff, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000580)=ANY=[@ANYRESOCT, @ANYRES32, @ANYBLOB="61dde44dae6b36f1988d5f7b2f354f37a7ac62e7d57ec013c7b8175d6a35cb81ac7d89baa1e55409d315441eb1e30aed3399f7bdd279baa025b33b42270e2514000e4c2c30fba627e4f54e81b990a015ea509cace5eae5d657fdf5fb8d97649497761e026aabb18e3be2d06a507020eecfa34fac85fc87fcaf73bc56dd1e11717bc3be065bd713c777f8e8d1900f4f918f000a8b23c2640bbf57342100eb9ac012415c889a81c8c4a306035e20d97660e6878ae0f5ff5dfabd3ec288efe4e800024b989db6b968f5e85a24b514ac98561e7292ed3ad07a055b911097168e341076452d0d7f92e072226e8813ce3b8a01fd324a32cd841e", @ANYRESOCT=0x0, @ANYRESOCT=r8, @ANYRESOCT=0x0, @ANYRES8=r4], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='hrtimer_init\x00', r13}, 0x10) 1m5.107126089s ago: executing program 0 (id=1712): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB='\x00'/16], 0x48) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0xc044) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="4c00000010004b0422000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b00010062726964676500001c00028008000400000000000800157fff000000050016"], 0x4c}, 0x1, 0x0, 0x0, 0x200400a0}, 0x0) 1m4.869272924s ago: executing program 0 (id=1714): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42041, 0x19a) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000001d00)=ANY=[@ANYRES32, @ANYRES64=r0, @ANYRES32=0x0, @ANYBLOB="e42a2a1b0497faff0000002f616df0865581cd1cb9b2f1318bd9442ba3c85d10c0432ef4b17f8c1fb182341f99f10f962e980c1fbaa278e2da7c520d4452fbfa5c388edf35cc36967f034e735c7ccd65289fdfdc41a7b59f5b238945fbe665339aa88960575d645911d8f44b254835b0e5481bf8afab39b8ff45280b2c58aee096bb38d8", @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48) r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r2) syz_usb_connect(0x4, 0x24, &(0x7f0000000000)=ANY=[], 0x0) ioctl$EVIOCRMFF(r2, 0xc0085504, &(0x7f0000000080)) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000ef00eef7cf55a1478efce11500ff0f0e00000000000000000000cbd2757fef3ef13c5a5e332b0fe6fd48f68d7677334b5489bf1fd9c9c08b87976e877dab8ad9cc112a1abdac45ac8adf8ee55cfa70b92e5b1dd2398ebe48f782d51388e06e31a8d8437cf1950ac21f8dad586b784809bf7ca4dbc0892ebfd0", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000440)=@bpf_lsm={0x6, 0x3, &(0x7f0000001c00)=ANY=[@ANYRES8=r1], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r4, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001c40)={r6, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0xffffffff, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) mount$incfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000000c0)={[], [{@defcontext={'defcontext', 0x3d, 'unconfined_u'}}]}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a00)={r0, 0x0, 0x83, 0xe7, &(0x7f0000000400)="e0f7ddf8c1e3d379b97ec5ee1f5beff4c9125a9560fcab299eaf8f6c4f7cf4f50835da2d470abcb88b82c65e2b387dc23b06a3f7378a3e058d18f5eb5db50ac9f4c485baaf6cf5e6cbb4b712d335828578018c9b06f9c596873fb3904685ae6752d192a8b210d2eabf90b71c38b4156eee3a95d86c9cf4d3019fb051a2dd6922b1e325", &(0x7f0000000740)=""/231, 0xe, 0x0, 0x84, 0xed, &(0x7f0000000840)="f2db63f53719c019fbe49a9f82e4cebad2f3ba3fceb26bf725b7e6b6acfa7428ceb0c0e847c22107e2ce9cd50e01453fb2e875a2f028772b109793b9e42c97b9c143a75ffd6652cd4f38bfb2c18df17401589dd574a66e637187c0b8215dc3dcfbf08d76066ca1dfd47f780bde741efc710be4c474a8e1b5cdb94b3fcfcec758d94371a5", &(0x7f0000000900)="0a550706b5dc7e6034dffdba2e75fcdb195aadf877963bd85f7152d35d82320aad1d0921b5445a9ed58470ca8f7489f2dc961dfffc1d791991e595435c9dcc5c909d2935c1ea7d898cbf3dba97634a6bb5fdb7304f229aded14503ec7bdbf3699bf4b7e8f9428c0d35f65876a935967157121e2fa6e1f0bea2e79175b200fba089cc150ae57d6fac13d7b88f9cce977a38037b646afaddb75eb1a1495c865cae4d8f02853f2ec50e485bea2be1d768a9cbc5774d3cfed88503bc3566845d5a29c14adc690938d36b88f51ba1da8b0c4c501546c6362af5d845fdc077769f3532f6fae00e3e63ab3790ed250b4b", 0x2, 0x0, 0x8001}, 0x50) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001e000100000002000000000007"], 0x28}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r8 = request_key(&(0x7f0000002740)='asymmetric\x00', &(0x7f0000002780)={'syz', 0x3}, &(0x7f00000027c0)=',*[\\/&)\x00', 0xffffffffffffffff) fstat(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000040)='\x00', &(0x7f0000000180), 0x200000b, &(0x7f0000000600)=ANY=[@ANYBLOB='fd=', @ANYBLOB="e9876ea6ca46992577581682ac7ff6", @ANYRES16=0x0, @ANYRESDEC=r8, @ANYRESDEC=0x0, @ANYBLOB=',allow_other,max_read=0x7fffffffffffffff,blksize=0x0000000000001000,max_read=0x0000000000000002,default_permissions,fowner<', @ANYRESDEC=r9, @ANYRES16=r0, @ANYRESDEC=0xee00, @ANYBLOB=',fsmagic=0x0000000000000009,fsname=/dev/ptmx\x00,\x00']) newfstatat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) mount$cgroup2(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200), 0x1400, &(0x7f00000004c0)={[{@subsystem='net'}, {@memory_localevents}, {@favordynmods}, {@memory_localevents}, {@memory_recursiveprot}, {@memory_localevents}, {@memory_hugetlb_accounting}, {@memory_hugetlb_accounting}], [{@subj_role={'subj_role', 0x3d, 'GPL\x00'}}, {@hash}, {@euid_eq={'euid', 0x3d, r9}}, {@subj_user={'subj_user', 0x3d, '^\':\x00'}}, {@func={'func', 0x3d, 'POLICY_CHECK'}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'defcontext'}}, {@fowner_lt={'fowner<', r10}}, {@fsmagic={'fsmagic', 0x3d, 0x1d35}}, {@uid_eq={'uid', 0x3d, 0xee01}}]}) 1m4.746655546s ago: executing program 32 (id=1714): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42041, 0x19a) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000001d00)=ANY=[@ANYRES32, @ANYRES64=r0, @ANYRES32=0x0, @ANYBLOB="e42a2a1b0497faff0000002f616df0865581cd1cb9b2f1318bd9442ba3c85d10c0432ef4b17f8c1fb182341f99f10f962e980c1fbaa278e2da7c520d4452fbfa5c388edf35cc36967f034e735c7ccd65289fdfdc41a7b59f5b238945fbe665339aa88960575d645911d8f44b254835b0e5481bf8afab39b8ff45280b2c58aee096bb38d8", @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48) r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r2) syz_usb_connect(0x4, 0x24, &(0x7f0000000000)=ANY=[], 0x0) ioctl$EVIOCRMFF(r2, 0xc0085504, &(0x7f0000000080)) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000ef00eef7cf55a1478efce11500ff0f0e00000000000000000000cbd2757fef3ef13c5a5e332b0fe6fd48f68d7677334b5489bf1fd9c9c08b87976e877dab8ad9cc112a1abdac45ac8adf8ee55cfa70b92e5b1dd2398ebe48f782d51388e06e31a8d8437cf1950ac21f8dad586b784809bf7ca4dbc0892ebfd0", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000440)=@bpf_lsm={0x6, 0x3, &(0x7f0000001c00)=ANY=[@ANYRES8=r1], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r4, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001c40)={r6, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0xffffffff, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) mount$incfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000000c0)={[], [{@defcontext={'defcontext', 0x3d, 'unconfined_u'}}]}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a00)={r0, 0x0, 0x83, 0xe7, &(0x7f0000000400)="e0f7ddf8c1e3d379b97ec5ee1f5beff4c9125a9560fcab299eaf8f6c4f7cf4f50835da2d470abcb88b82c65e2b387dc23b06a3f7378a3e058d18f5eb5db50ac9f4c485baaf6cf5e6cbb4b712d335828578018c9b06f9c596873fb3904685ae6752d192a8b210d2eabf90b71c38b4156eee3a95d86c9cf4d3019fb051a2dd6922b1e325", &(0x7f0000000740)=""/231, 0xe, 0x0, 0x84, 0xed, &(0x7f0000000840)="f2db63f53719c019fbe49a9f82e4cebad2f3ba3fceb26bf725b7e6b6acfa7428ceb0c0e847c22107e2ce9cd50e01453fb2e875a2f028772b109793b9e42c97b9c143a75ffd6652cd4f38bfb2c18df17401589dd574a66e637187c0b8215dc3dcfbf08d76066ca1dfd47f780bde741efc710be4c474a8e1b5cdb94b3fcfcec758d94371a5", &(0x7f0000000900)="0a550706b5dc7e6034dffdba2e75fcdb195aadf877963bd85f7152d35d82320aad1d0921b5445a9ed58470ca8f7489f2dc961dfffc1d791991e595435c9dcc5c909d2935c1ea7d898cbf3dba97634a6bb5fdb7304f229aded14503ec7bdbf3699bf4b7e8f9428c0d35f65876a935967157121e2fa6e1f0bea2e79175b200fba089cc150ae57d6fac13d7b88f9cce977a38037b646afaddb75eb1a1495c865cae4d8f02853f2ec50e485bea2be1d768a9cbc5774d3cfed88503bc3566845d5a29c14adc690938d36b88f51ba1da8b0c4c501546c6362af5d845fdc077769f3532f6fae00e3e63ab3790ed250b4b", 0x2, 0x0, 0x8001}, 0x50) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001e000100000002000000000007"], 0x28}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r8 = request_key(&(0x7f0000002740)='asymmetric\x00', &(0x7f0000002780)={'syz', 0x3}, &(0x7f00000027c0)=',*[\\/&)\x00', 0xffffffffffffffff) fstat(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000040)='\x00', &(0x7f0000000180), 0x200000b, &(0x7f0000000600)=ANY=[@ANYBLOB='fd=', @ANYBLOB="e9876ea6ca46992577581682ac7ff6", @ANYRES16=0x0, @ANYRESDEC=r8, @ANYRESDEC=0x0, @ANYBLOB=',allow_other,max_read=0x7fffffffffffffff,blksize=0x0000000000001000,max_read=0x0000000000000002,default_permissions,fowner<', @ANYRESDEC=r9, @ANYRES16=r0, @ANYRESDEC=0xee00, @ANYBLOB=',fsmagic=0x0000000000000009,fsname=/dev/ptmx\x00,\x00']) newfstatat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) mount$cgroup2(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200), 0x1400, &(0x7f00000004c0)={[{@subsystem='net'}, {@memory_localevents}, {@favordynmods}, {@memory_localevents}, {@memory_recursiveprot}, {@memory_localevents}, {@memory_hugetlb_accounting}, {@memory_hugetlb_accounting}], [{@subj_role={'subj_role', 0x3d, 'GPL\x00'}}, {@hash}, {@euid_eq={'euid', 0x3d, r9}}, {@subj_user={'subj_user', 0x3d, '^\':\x00'}}, {@func={'func', 0x3d, 'POLICY_CHECK'}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'defcontext'}}, {@fowner_lt={'fowner<', r10}}, {@fsmagic={'fsmagic', 0x3d, 0x1d35}}, {@uid_eq={'uid', 0x3d, 0xee01}}]}) 29.467216231s ago: executing program 1 (id=1844): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB, @ANYBLOB], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001180)={0x38, 0x0, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x38}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000000e255000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="180000e30021000000000000000000006593f0ff010000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) timer_create(0x0, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000080)='task_rename\x00'}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x10, 0x4, 0x8, 0x7, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000940)={{r3}, &(0x7f00000008c0), &(0x7f0000000900)=r2}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000500)='hrtimer_start\x00', r4}, 0x10) timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000180)={0x0, 0x0}) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(r6, 0x4b34, 0x3bf) ioctl$KDDISABIO(r6, 0x4b37) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) write(r5, &(0x7f0000000000)="fa", 0xfffffdef) 27.943896591s ago: executing program 1 (id=1850): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r2}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 27.825317514s ago: executing program 1 (id=1851): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x242, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000614603e3f324b6f764c740067b643bec15cbc963bccdc8988f3f779bde52b4555f00863a7d8fa9e52b4f", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r4, &(0x7f0000000100)={0x18, 0x2, {0x7fc, @loopback}}, 0x1e) r5 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r5, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e) connect$pptp(r5, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2300, 0x0) ioctl$PPPIOCATTCHAN(r6, 0x40047438, &(0x7f0000000040)=0x1) openat$kvm(0xffffffffffffff9c, 0x0, 0x2002, 0x0) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r7, 0x11b, 0x5, &(0x7f0000000000)=0x10000, 0x4) mmap$xdp(&(0x7f0000fee000/0x3000)=nil, 0x3000, 0x1000002, 0x11, r7, 0x100000000) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r9, r10, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000680)=[@text64={0x40, 0x0}], 0x1, 0x40, 0x0, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001240)=@raw={'raw\x00', 0x3c1, 0x3, 0x2f8, 0x0, 0xc8, 0x8, 0xc8, 0x5803, 0x228, 0x2e8, 0x2e8, 0x228, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xc8, 0x0, {0x0, 0x2000000000000}}, @unspec=@TRACE={0x20}}, {{@ipv6={@remote, @mcast2, [0x0, 0x0, 0xff000000], [], 'macvtap0\x00', 'syzkaller1\x00'}, 0x0, 0xf8, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x2, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x358) 26.837638613s ago: executing program 1 (id=1855): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x800, &(0x7f0000000c00)=ANY=[@ANYBLOB='iocharset=maccyrillic,discard,gid=', @ANYRESHEX=0x0, @ANYBLOB=',errors=remount-ro,iocharset=cp936,errors=continue,iocharset=cp863,errors=remount-ro,time_offset=0x0000000000000008,errors=remount-ro,utf8,uid=', @ANYRESHEX=0x0, @ANYBLOB="2c00da9e6281ed732202e92d385b355a8b25d5f39dadafad4bb7987fd8e29441bbc6e82871b48b3edc068c8629dccf3f5b446c25368d6872e0b16e23dbb4468ad8f7bf9f04ce7af7b48e32c74faaa501363aaf927834ab5356364b36f24655f86b3fff40d19d5bb954f3da29015cdb001605b6d29039f7b166c8b2f5"], 0x1, 0x1524, &(0x7f0000002280)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) epoll_create1(0x80000) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x0) ptrace$ARCH_GET_FS(0x1e, r3, &(0x7f0000000300), 0x1003) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x30, 0x0, 0xaf, 0xfffff024}, {0x6}]}, 0x10) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000240)={0xa, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x2125099, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) 25.435465451s ago: executing program 1 (id=1859): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) socket$key(0xf, 0x3, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x2a, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x98, 0x98, 0x6, [@restrict={0x2, 0x0, 0x0, 0xb, 0x5}, @decl_tag={0xa, 0x0, 0x0, 0x11, 0x2, 0x8}, @decl_tag={0x9, 0x0, 0x0, 0x11, 0x5, 0x8}, @struct={0x9, 0x2, 0x0, 0x4, 0x1, 0x0, [{0x9, 0x1, 0x6}, {0xa, 0x1, 0x3c6c}]}, @enum64={0xa, 0x2, 0x0, 0x13, 0x1, 0xe, [{0x4, 0x3, 0x1}, {0x2, 0x6, 0xd}]}, @struct={0xb, 0x2, 0x0, 0x4, 0x0, 0x6, [{0xe, 0x2, 0x80000000}, {0x5, 0x4, 0x1}]}]}, {0x0, [0x30, 0x0, 0x5f, 0x30]}}, &(0x7f00000004c0)=""/25, 0xb6, 0x19}, 0x28) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x70bd29, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe, 0x9}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) 24.309164594s ago: executing program 1 (id=1864): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r1) r2 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r2, &(0x7f0000007240)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0x6, @mcast2, 0x7}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f00000012c0)="1ce02c7a", 0xfe60}], 0x1}}, {{0x0, 0x0, &(0x7f0000000000), 0x1}}], 0x3, 0x1c000) mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x84, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) sendto$inet(r1, &(0x7f0000000400)="8dbaad2e57f9ece64a37949bb34286aa172dd1ebd9dabceb72cdeb153d17ae948f170f0024f64334d517b7eb233eeb3ae31f5bb0ee383981fbd22837c679e7ef6aeaf42915db74c51a520673b32461", 0x4f, 0x880, 0x0, 0x0) (fail_nth: 1) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getpid() r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = dup(r0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEAUTHENTICATE(r8, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000880)={0x124, r9, 0x2, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x7, 0xd}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x6}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_IE={0xd5, 0x2a, [@random={0x0, 0xaf, "7cef411203e650488e01f990293f8e627b1af83c00c6c27e9a3b58d52ecb54e08e0c1b062d8b2e02d834c74ff9de027ab785341c40c4defe215f7ba2a423c01ce00f79deef04cfa1634e84e54abb86882268d0c01f56a70eef240ade40c186aad459c266ddea7b9237612330b9d754afe38f850d14aedaf56a6cfd6b90c673c3b19c56198277e5cddc4d194c9e61ec252b4aedf0e4fc5d69b44077f4936c3e7df72f7d6d0d41e5f26cb45cd0b9c2f6"}, @ssid={0x0, 0x6, @default_ap_ssid}, @mesh_id={0x72, 0x6}, @ssid={0x0, 0x6, @default_ap_ssid}, @dsss={0x3, 0x1, 0xad}, @channel_switch={0x25, 0x3, {0x0, 0x24, 0xe}}]}, @NL80211_ATTR_MAC={0xa, 0x6, @random="527bb4ad27d6"}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x9f8}]}, 0x124}, 0x1, 0x0, 0x0, 0x4048000}, 0x4000840) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x2d) setsockopt$inet6_int(r0, 0x29, 0x35, 0x0, 0x0) bind$inet6(r0, 0x0, 0x0) r10 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$uinput_user_dev(r10, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x3, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x1, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8c, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x400, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x0, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x10000000, 0x5, 0xb, 0x4, 0x6, 0x5, 0x0, 0x6, 0x5, 0x1, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d03, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0xe, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x93a, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0x10000, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x96, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0x1, 0xfffff000, 0x10080, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x1, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) 24.196063736s ago: executing program 33 (id=1864): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r1) r2 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r2, &(0x7f0000007240)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0x6, @mcast2, 0x7}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f00000012c0)="1ce02c7a", 0xfe60}], 0x1}}, {{0x0, 0x0, &(0x7f0000000000), 0x1}}], 0x3, 0x1c000) mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x84, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) sendto$inet(r1, &(0x7f0000000400)="8dbaad2e57f9ece64a37949bb34286aa172dd1ebd9dabceb72cdeb153d17ae948f170f0024f64334d517b7eb233eeb3ae31f5bb0ee383981fbd22837c679e7ef6aeaf42915db74c51a520673b32461", 0x4f, 0x880, 0x0, 0x0) (fail_nth: 1) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getpid() r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = dup(r0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEAUTHENTICATE(r8, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000880)={0x124, r9, 0x2, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x7, 0xd}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x6}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_IE={0xd5, 0x2a, [@random={0x0, 0xaf, "7cef411203e650488e01f990293f8e627b1af83c00c6c27e9a3b58d52ecb54e08e0c1b062d8b2e02d834c74ff9de027ab785341c40c4defe215f7ba2a423c01ce00f79deef04cfa1634e84e54abb86882268d0c01f56a70eef240ade40c186aad459c266ddea7b9237612330b9d754afe38f850d14aedaf56a6cfd6b90c673c3b19c56198277e5cddc4d194c9e61ec252b4aedf0e4fc5d69b44077f4936c3e7df72f7d6d0d41e5f26cb45cd0b9c2f6"}, @ssid={0x0, 0x6, @default_ap_ssid}, @mesh_id={0x72, 0x6}, @ssid={0x0, 0x6, @default_ap_ssid}, @dsss={0x3, 0x1, 0xad}, @channel_switch={0x25, 0x3, {0x0, 0x24, 0xe}}]}, @NL80211_ATTR_MAC={0xa, 0x6, @random="527bb4ad27d6"}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x9f8}]}, 0x124}, 0x1, 0x0, 0x0, 0x4048000}, 0x4000840) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x2d) setsockopt$inet6_int(r0, 0x29, 0x35, 0x0, 0x0) bind$inet6(r0, 0x0, 0x0) r10 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$uinput_user_dev(r10, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x3, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x1, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8c, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x400, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x0, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x10000000, 0x5, 0xb, 0x4, 0x6, 0x5, 0x0, 0x6, 0x5, 0x1, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d03, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0xe, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x93a, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0x10000, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x96, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0x1, 0xfffff000, 0x10080, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x1, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) 8.098595568s ago: executing program 6 (id=1927): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES64=r0, @ANYRES16=r0], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x70, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000040)={'tunl0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) unshare(0x78000100) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b400000000000000791028000000000069004400000000009500740000000000", @ANYRESDEC], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/164, 0x0, 0x25, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff8f}, 0x48) close(r6) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), r1) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000440)={&(0x7f0000000240), 0xc, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="b0000002", @ANYRES16=r8, @ANYBLOB="00082dbd7000fddbdf25250000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008c00030000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008c0002000000080001007063690011000200303030303a30303a31302e300000000008008c00020000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008c0002000000"], 0xb0}, 0x1, 0x0, 0x0, 0x20000880}, 0x40800) ioctl$PPPIOCGL2TPSTATS(0xffffffffffffffff, 0x80487436, 0x0) capset(0x0, 0x0) pselect6(0x0, 0x0, &(0x7f0000000040)={0x6, 0x6, 0x9, 0x7fffffff, 0xba, 0x9, 0x7, 0x7}, &(0x7f0000000100)={0x3, 0xfffffffffffffffa, 0xfffffffffffff000, 0x63, 0x14, 0x9, 0x10000, 0x4}, &(0x7f0000000180), 0x0) 6.690780765s ago: executing program 6 (id=1930): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x101, 0x5, &(0x7f00000025c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ptrace$ARCH_ENABLE_TAGGED_ADDR(0x1e, r1, 0x4, 0x4002) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x18) r5 = socket$pppl2tp(0x18, 0x1, 0x1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) (fail_nth: 2) read$FUSE(r0, &(0x7f0000000580)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) r9 = dup(r8) write$UHID_INPUT(r9, &(0x7f0000000000)={0xc, {"a2e3ad2109c752f91b5a470987f70e06d038e7ff7fc6e5539b3245078b089b3208336d060890e0878f0e1ac6e70a9b3368959b6c9a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b38070d095d0936cd3b78130daa61f8e809ea882f5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4040d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a4d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6cb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1000}}, 0x1006) sendmsg$NL80211_CMD_TRIGGER_SCAN(r9, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000002780)=ANY=[@ANYBLOB="3be0c6", @ANYRES16=0x0, @ANYBLOB="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"], 0x1b0}, 0x1, 0x0, 0x0, 0x800}, 0x10) ptrace$setregs(0xf, r7, 0x7fffffffffffffff, &(0x7f0000000040)="74608531169da6ab9b06b0179d55d0a11739") connect$pppl2tp(r5, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, r6, {0x2, 0x4e20, @broadcast}, 0x1, 0x0, 0x2}}, 0x26) syz_usb_connect(0x5, 0x5a, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRESHEX=0x0], 0x0) 5.866814872s ago: executing program 4 (id=1934): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x1, 0xffffffff908811b9, 0xab2, 0x8, 0x0, 0x101, 0x0, 0x0, 0x0, 0x800}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x20, 0x0, 0x2, {0x0, 0xf}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) io_setup(0x2, &(0x7f0000000200)=0x0) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x18, 0x0, 0x8, {0x6}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) io_submit(r3, 0x140b, &(0x7f0000000700)=[&(0x7f0000000440)={0x18, 0x7000000, 0x4, 0x1, 0x0, r2, &(0x7f0000000180)='\x00', 0xfdfe}]) 5.765261204s ago: executing program 3 (id=1936): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x1, 0xffffffff908811b9, 0xab2, 0x8, 0x0, 0x101, 0x0, 0x0, 0x0, 0x800}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x20, 0x0, 0x2, {0x0, 0xf}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) io_setup(0x2, &(0x7f0000000200)=0x0) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x18, 0x0, 0x8, {0x6}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) io_submit(r3, 0x140b, &(0x7f0000000700)=[&(0x7f0000000440)={0x18, 0x7000000, 0x4, 0x1, 0x0, r2, &(0x7f0000000180)='\x00', 0xfdfe}]) (fail_nth: 2) 4.833395753s ago: executing program 3 (id=1939): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0}, 0x0, &(0x7f0000000040)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) socket$key(0xf, 0x3, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) io_submit(0x0, 0x1, &(0x7f0000002980)=[&(0x7f00000024c0)={0x0, 0x0, 0x0, 0x0, 0x5, r3, 0x0, 0x0, 0x10}]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x2a, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x98, 0x98, 0x6, [@restrict={0x2, 0x0, 0x0, 0xb, 0x5}, @decl_tag={0xa, 0x0, 0x0, 0x11, 0x2, 0x8}, @decl_tag={0x9, 0x0, 0x0, 0x11, 0x5, 0x8}, @struct={0x9, 0x2, 0x0, 0x4, 0x1, 0x0, [{0x9, 0x1, 0x6}, {0xa, 0x1, 0x3c6c}]}, @enum64={0xa, 0x2, 0x0, 0x13, 0x1, 0xe, [{0x4, 0x3, 0x1}, {0x2, 0x6, 0xd}]}, @struct={0xb, 0x2, 0x0, 0x4, 0x0, 0x6, [{0xe, 0x2, 0x80000000}, {0x5, 0x4, 0x1}]}]}, {0x0, [0x30, 0x0, 0x5f, 0x30]}}, &(0x7f00000004c0)=""/25, 0xb6, 0x19}, 0x28) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x70bd29, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe, 0x9}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) 4.543095319s ago: executing program 5 (id=1941): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4000000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x804810, &(0x7f0000000a40), 0x26, 0x756, &(0x7f00000002c0)="$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") chdir(&(0x7f0000000240)='./file0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) r4 = creat(&(0x7f0000000200)='./file0\x00', 0x35) close(r4) ioctl$FS_IOC_ENABLE_VERITY(r3, 0x40806685, &(0x7f0000000a80)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x200000, &(0x7f0000000600)={[{@nouser_xattr}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x8}}]}, 0x3, 0x570, &(0x7f0000000680)="$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") r6 = socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100004000000000000014000000180001801400020073797a5f74756e00000000000000000008000000000a00000473e48ae93ee247adf5891d8be2d8a0fcdea012bc6effe2cccd78e24116ebfdcd52ce472718142b9736240266ffd875b178e0eff788a34b4827d0c0a250b0ef1f01f1194b7d539edfc36d97750363fd04"], 0x34}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r8 = openat$ashmem(0xffffffffffffff9c, 0x0, 0x0, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r9}, 0x10) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r8, 0x0) 4.436215031s ago: executing program 2 (id=1942): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0}, 0x0, &(0x7f0000000040)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) socket$key(0xf, 0x3, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) io_setup(0xa, &(0x7f00000023c0)=0x0) io_submit(r4, 0x1, &(0x7f0000002980)=[&(0x7f00000024c0)={0x0, 0x0, 0x0, 0x0, 0x5, r3, 0x0, 0x0, 0x10}]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x2a, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x74, 0x74, 0x6, [@restrict={0x2, 0x0, 0x0, 0xb, 0x5}, @decl_tag={0xa, 0x0, 0x0, 0x11, 0x2, 0x8}, @decl_tag={0x9, 0x0, 0x0, 0x11, 0x5, 0x8}, @struct={0x9, 0x2, 0x0, 0x4, 0x1, 0x0, [{0x9, 0x1, 0x6}, {0xa, 0x1, 0x3c6c}]}, @enum64={0xa, 0x2, 0x0, 0x13, 0x1, 0xe, [{0x4, 0x3, 0x1}, {0x2, 0x6, 0xd}]}]}, {0x0, [0x30, 0x0, 0x5f, 0x30]}}, &(0x7f00000004c0)=""/25, 0x92, 0x19}, 0x28) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x70bd29, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe, 0x9}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) 4.003508539s ago: executing program 3 (id=1943): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.stat\x00', 0x275a, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000001664b62d8dc486874bf912acaac472f8ff684528fe93cfa759b9799e9b6ed76ad4d92712b7e5c036789435c7270256f8d9d6ffd918574bf1224a6edd62f1bf8117a39f14c32a7f76420c157afcc8743ee29e4492e6b3d469179002c666ddff7bc00ff781598b1b89ccb6b38e03656fa558e0343f996ac7102d851e61b448f7742d510bfe43b5b6dec70ae2a9c9fd7316c56b0c763fbd5c94ce9af2735f214cb0add341b568acf836"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10) timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000000280)=0x0) timer_getoverrun(r2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$uinput_user_dev(r3, &(0x7f0000000fc0)={'syz1\x00', {0x6, 0x8, 0x444, 0x8529}, 0x25, [0xf5, 0x8, 0x80000001, 0x2, 0x200, 0x3, 0x8e, 0x9, 0x9, 0x4, 0x0, 0x9, 0x7, 0x1, 0x8, 0x38, 0xffffff7f, 0xac, 0x5, 0x3ff, 0x0, 0xea7, 0x1, 0x9be4bf38, 0x0, 0x20002, 0xc, 0x0, 0x8, 0x6, 0x84, 0xd3, 0x8001, 0x3, 0x2001, 0xb, 0x2, 0x5f85, 0xfffffffe, 0xc1e, 0x9da, 0x939a, 0x8000, 0x1, 0x5c, 0x8, 0x7f, 0xd2, 0xf2b, 0x1, 0x6, 0xfffffffa, 0xffff, 0x8, 0x2, 0x6, 0xffffff80, 0x9, 0x6, 0xd2, 0x3ff, 0x5, 0x52, 0x1], [0x5, 0x2, 0xd91, 0x5, 0x401, 0xfffffff8, 0xa, 0x5, 0xfffffffe, 0x40a89, 0xffb, 0xffffff4b, 0x1, 0x2, 0x0, 0x10000, 0x8, 0x8, 0x0, 0x405, 0x2, 0x9, 0x5, 0x9, 0xd, 0x9, 0x206, 0x9, 0x8, 0x5, 0xf, 0xb2d1, 0x1, 0x200, 0x10000000, 0x9, 0xe22, 0x9, 0x5, 0x10001, 0x1, 0x865f, 0x80000000, 0x3, 0x801, 0x4, 0x3, 0x29e3, 0x7fc, 0xb4e5, 0x20000, 0x200, 0x6e99, 0x4, 0xff, 0x9, 0x1d, 0x3, 0x10000, 0xa, 0x26, 0x2, 0x6, 0x7fff], [0x4343fe9f, 0xfffffffd, 0x101, 0xffffffff, 0x7f, 0x8, 0x3, 0x3, 0xc, 0x9, 0xcb06, 0xfffeffff, 0x5, 0x37, 0x5, 0x80003, 0xc8, 0x8, 0x8000, 0x2, 0xdf9e, 0x40005, 0x8, 0xf9f, 0x3, 0x7, 0x401, 0x5, 0x2, 0x2, 0x3, 0x2, 0x1, 0x1, 0x10000004, 0x911, 0x6, 0x8000, 0x31c1, 0x8, 0xb, 0x4, 0x2, 0x1f85, 0x9, 0x3, 0x2, 0x8, 0x7, 0x402, 0x5, 0xffff, 0x40, 0x80000000, 0x3, 0x200000a, 0x80, 0xf, 0x8, 0x8, 0x9, 0x4, 0x4, 0xfffffdad], [0x27b, 0x5, 0x6, 0x10, 0x7, 0x8, 0x8, 0x6, 0x7fffffff, 0xe00e, 0xfffffff8, 0x8, 0xffff7bfb, 0x0, 0x401, 0x100, 0x404, 0x0, 0xa, 0x8, 0x3, 0x5, 0xfffffc00, 0x4, 0x9, 0x4, 0x2, 0x2, 0xa, 0x27, 0x400, 0x70, 0x2, 0xffc, 0x400002, 0xc, 0xffffffff, 0x49, 0x80088, 0x10, 0xfff, 0x9a2, 0x85, 0x3, 0x400, 0x8, 0x8, 0x5, 0x0, 0xfffffffe, 0xb, 0x1, 0xc3, 0x9, 0x807ff, 0x1, 0x3, 0xfffffbff, 0x4, 0xb, 0x5, 0x8, 0xa, 0xfffffff7]}, 0x45c) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r3, 0x0) utimensat(r0, 0x0, &(0x7f0000000080)={{}, {0x77359400}}, 0x0) syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000680)='./file2\x00', 0x802000, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x1, 0x5504, &(0x7f000000c0c0)="$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") r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040), 0x208e24b) fdatasync(r4) symlink(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000380)='./bus\x00') 3.764908014s ago: executing program 3 (id=1944): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x56, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000020000082505a5a4400000000101090244000101000000090400000302060000052406000005240000000d240f0100000000000000000009058103200000000009058202080000000009050302"], 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x9}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x4a, &(0x7f0000000340)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@updpolicy={0xb8, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in=@loopback, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x100000, 0x800000000000000, 0x0, 0x0, 0x9, 0x8000000000000001}, {0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3}}, 0xb8}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5}}}}}}}, 0x0) 3.646729647s ago: executing program 5 (id=1945): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd5cd7000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) tgkill(0x0, 0x0, 0x21) tkill(r0, 0x38) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) open$dir(0x0, 0x20040, 0x40) socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x5, 0x9, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) ioctl$BTRFS_IOC_WAIT_SYNC(r4, 0x40089416, &(0x7f00000000c0)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000030000850000001b000000b700000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="28010000100007000000000000000000ff0200000000000200000000000200000000000000f9a638bdd8d350be4342a32f3b04ee", @ANYRES32, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc00000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000001000000000000000000000000000000000000000000000000800000000000000000000000000002000000000000700000000000000000000000000000000000400fdffffffe800000080000000000000000a000200700000000000000014000e00fe8000000000000000000000000000bb24000900b4000000000000000100000000000080b40d00"/224], 0x128}}, 0x0) 3.559997378s ago: executing program 6 (id=1946): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x200000, &(0x7f00000018c0)=ANY=[@ANYBLOB="7472616e733d66e8e219d8f299642c7266646e6f3d", @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB="2c756e616d653dd0aedec1aa20ffd81d1bf89329217cb058a396eda2ab40a26d93dd083c0074dcab6cab21ae16c4cdf97bdc355f3b41d27b654301345cb3c4cec37953322d01beaa7257964fd30fe2d72f171da72e389f382dea3c8d91906aead5d5aeccc097ef1092ea987c2b00000000000000002c00"]) bpf$MAP_CREATE(0x1900000000000000, &(0x7f00000017c0)=ANY=[@ANYBLOB="1b00000000000000000000000020000000000000", @ANYRES32, @ANYBLOB="00000000000000003840e9aa54e2ba0000ef000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() r5 = bpf$MAP_CREATE(0x0, &(0x7f00000019c0)=ANY=[@ANYBLOB="0e00000004000000080009034bb6ab40271728738821c89ca108b8e72c22be2ea30a43f4650feb0caf11b0cae09f6c20899773fd20d5c953707eafcac953e070715d853c85d1550b3e066edbe4ba4e5fea0374a5d5418614e413f9695e64c24bdfe379632a5a3c49ca2a754f0ad01767b4ccdc05de28ec441607c44908"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r6}, 0x10) getresuid(&(0x7f0000000180), &(0x7f0000000200), &(0x7f0000000500)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='task\x00') getdents(r7, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r10}, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00'}, 0x10) syz_mount_image$exfat(&(0x7f0000002000), &(0x7f0000005840)='./file1\x00', 0x1000806, &(0x7f0000000580)=ANY=[@ANYRES16=0x0, @ANYRESDEC=r5, @ANYBLOB="2c666d61736b3d30303030b8463c983030303030303030303030303030362c696f6368617273652acf418b743d637e3737352c6769643d00", @ANYRESHEX=0x0, @ANYBLOB="2c646d61736b3d30303030303030303030303030303030303030303032372c6572726f72733d636f6e74696e75652c6572726f72733d72656d6f756e742d726f2c6e616d65636173653d312c666d61736b3d30303030303030303030303030303030303030303030332c756d61736b3d30303030303030303030303030303030303030303030332c616c6c6f775f7574696d653d303030303030c302c88da52420e0bc5dee4e62303030303030"], 0x9, 0x1513, &(0x7f0000002040)="$eJzs3AuYjlX3MPC19t73GNPQ0ySHYe+9bp7ksE2SRBJySJIkSXJKSJokSUgMOSUhCTlOksMQksPEpHE+H3JOkleSJCE5s79rer2f732r1/f//vV5r/+s33Xd1+w197PWs+5nzXO477lmfug8tEajmlUbEBH8t+Dfv6QAQCwADACA6wEgAICyCWUTsvbnlJjy37sT9ud6NO1ad8CuJZ5/9sbzz954/tkbzz974/lnbzz/7I3nn73x/BnLzjZPL3ADb/+jt8tX5uF39/P1/+yM3/+zN55/9sbzz954/tkbzz87I55/Nsfzz954/tkbz5+x7OxPucac43Kxa3+t+6/Y/vFQXes+rrIF/0951+4njzHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcZYdnLGX6EA4B/ra90XY4wxxhhjjDHG/jw+x7XugDHGGGOMMcYYY389BFASFAQQAzkgFnJCHFwH8ZALcsP1EIEbIAFuhDxwE+SFfJAfCkAiFIRCoMGABYIQCkMRiMLNUBRugWJQHEpASXBQCpLgVigNt0EZuB3Kwh1QDu6E8lAB7oKKcDdUgnugMlSBqnAvVIPqUANqwn1QC+6H2vAA1IEHoS48BPXgYagPj0ADeBQawmPQCB6HxvAENIGm0AyaQ4vfz5f/Pv8V6A6vQg/oKbMegd7wGvSBvtAP+sMAeB0GwhswCN6EwTAEhsJbMAzehuHwDoyAkTAK3oXRMAbGwjgYDxMgFd6DifA+TIIPYDJMgakwDdJgOsyAD2EmzILZ8BHMgY9hLsyD+bAA0uETWAiLIAM+hcXwGWTCElgKy2A5rICVsApWwxpYC+tgPWyAjbAJNsPnsAW2wjbYDjtgJ+yCL2A3fAl74CvYC1//F/NP/0t+FwQEFChQocIYjMFYjMU4jMN4jMfcmBsjGMEETMA8mAfzYl7Mj/kxEROxEBZCgwYJCQtjYYxiFItiUSyGxbAElkCHDpMwCUvjbVgGy2BZLIvlsByWxwpYAStiRayElbAyVsaqd84DwGpYA2vgfXgf3o+1sTbWwTpYF+tiPayH9bE+NsAG2BAbYiNshI2xMTbBJtgMm2ELbIEtsSW2wlbYBttgW2yL7bAdJmMytsf22AE7YEfsiJ2wE3bGztgFu2JXfAVfwVfxVeyJ1UQv7I29sQ/2wX7YH/vj6zgQ38A38E0cjENwKL6Fb+HbOBxP4QgciaNwFFYSY3AsjkMSEzAVU3EiTsRJOAkn4xScgtMwDafjDJyBM3EWzsKPcA5+jB/jPJyHCzAd03EhLsIMzMDFeBozcQkuxWW4HFfgclyFq3EVrhX/eGpuwk34OX6OW3ErbsftuBN34hf4BX6JX+Jg3It7cR/uw/24Hw/gATyIB/EQHsLDeBiP4BE8ikfxGB7HE3gcT+JJPIWn8QyewXN4Di/gS4nfNdxZfM1gEFmUUCJGxIhYESviRJyIF/Eit8gtIiIiEkSCyCPyiLwir8gv8otEkSgKiULCCCNIhKKwKCyiIiqKiqIAkCJKiBLCCSeSRJIoLUqLMqKMKCvuEOXEnaK8qCBau4qioqgk2rjKooqoKqqKaqK6qCFqipqilqglaovaoo6oI+qKuqKeeFjUF72wHz4qsibTSAzBxmIoNhFNRTPRXLyNT4qWYji2Eq1FG/G0GIkjsJ1o6ZLFc6K9GIsdxAtiHL4oOokJ2Fm8LLqIrqKbeEV0F61cD9FTTMZeoreYhn1EX9FP9BczsbrImlgN8aYYLIaIoeItsQDfFsPFO2KEGClGiXfFaDFGjBXjxHgxQaSK98RE8b6YJD4Qk8UUMVVME2liupghPhQzxSwxW3wk5oiPxVwxT8wXC0S6+EQsFItEhvhULBafiUyxRCwVy8RysUKsFKvEarFGrBXrxHqxQWwUm8Rm8bnYIraKbWK72CF2il3iC7FbfCn2iK/EXvG12Cf+JvaLb8QB8a04KL4Th8T34rD4QRwRP4qjoqc4Jo6LE+JncVL8Ik6J0+KMOCvOifPigrgoLgkvQKIUUkolAxkjc8hYmVPGyetkvMwlc8vrZUTeIBPkjTKPvEnmlflkfllAJsqCspDU0kgrSYaysCwio/JmWVTeIovJ4rKELCmdLCWT5K2ytLxNlpG3y7LyDllO3inLywryLllR3i0ryXtkZVlFVpX3ymqyuqwha8r7ZC15v6wtH5B15IOyrnxI1pMPy/ryEdlAPiobysdkI/m4bCyfkE1kU9lMNpct5JOypXxKtpKtZRv5tGwrn5Ht5LMyWT4n28vnZQf5guwoX5Sd5Euys3xZdpFdZTd5UV6SXvaQPWWK7CV7y9dkH9lX9pP95QD5uhwo35CD5JtysBwih8q35DD5thwu35Ej5Eg5Sr4rR8sxcqwcJ8fLCTJVvicnyvflJPmBnCynyKlymkyT02W/y5VmZ+Ur+Lf57/9O/qBf732T3Cw/l1vkVrlNbpc75E65S+6Su+VuuUfukXvlXrlP7pP75X55QB6QB+VBeUgekoflYXlEHpFH5VF5TB6XZ+XP8qT8RZ6Sp+VpeVaek+fkhcuPAShUQkmlVKBiVA4Vq3KqOHWdile5VG51vYqoG1SCulHlUTepvCqfyq8KqERVUBVSWhllFalQFVZFVFTdrIqqW1QxVVyVUCWVU6VUkrr1j/KDy69wV83/g/6WTb2c30K1UC1VS9VKtVJtVBvVVrVV7VQ7laySVXvVXnVQHVRH1VF1Up1UZ9VZdVFdVDfVTXVX3VUPBJWiUlRv9Zrqo/qqfqq/GqBeVwPVQDVIDVKD1WA1VA1Vw9QwNVwNVyPUCDVKjVKj1Wg1Vo1V49V4lapS1UQ1UU1Sk9RkNVlNVVNVmkpTWW+sWWar2WqOmqPmqrlqvpqv0lW6WqgWqgyVoRarxSpTLVFL1DK1TK1QK9QqtUqtUWvUOrVObVAbVKbarDarLWqL2qa2qR1qh9qldqndarfao/aovWqv2qf2qf1qvzqgDqiD6qA6pA6pw+qwOqKOqKPqqDqmjqkT6oQ6qU6qU+qUOqPOqHPqnLqgLqhL6lLWx75ABCJQgQpigpggNogN4oK4ID6ID3IHuYNIEAkSgoQgT3BTkDfIF+QPCgSJQcGgUKADE9iAgjAoHBQJosHNQdHglqBYUDwoEZQMXFAqSApuDUoHtwVlgtuDssEdQbngzqB8UCG4K6gY3B1UCu4JKgdVgqrBvUG1oHpQI6gZ3BfUCu4PagcPBHWCB4O6wUNBveDhoH7wSNAgeDRoGDwWNAoeDxoHTwRNgqZBs6B50OJPre/9qXxPuR66p84BvXRv/Zruo/vqfrq/HqBf1wP1G3qQflMP1kP0UP2WHqbf1sP1O3qEHqlH6Xf1aD1Gj9Xj9Hg9Qafq9/RE/b6epD/Qk/UUPVVP02l6up6hP9Qz9Sw9W3+k5+iP9Vw9T8/XC3S6/kQv1It0hv5UL9af6Uy9RC/Vy/RyvUKv1Kv0ar1Gr9Xr9Hq9QW/Um/Rm/bneorfqbXq73qF36l36C71bf6n36K/0Xv213qf/pvfrb/QB/a0+qL/Th/T3+rD+QR/RP+qj+id9TB/XJ/TP+qT+RZ/Sp/UZfVaf0+f1BX1RX9I+68N91tu7UUaZGBNjYk2siTNxJt7Em9wmt4mYiEkwCSaPyWPymrwmv8lvEk2iKWQKmSxkyBQ2hU3URE1RU9QUM8VMCVPCOONMkkkypU1pU8aUMWVNWVPOlLv8bAFzt7nb3GPuMVVMFXOvuddUN9VNTVPT1DK1TG1T29QxdUxdU9fUM/VMfVPfNDANTEPT0DQyjUxj09g0MU1MM9PMtDAtTEvT0rQyrUwb08a0NW1NO9POJJtk0960Nx1MB9PRdDSdTCfT2XQ2XUwX0810M91Nd9PD9DApJsX0Nr1NH9PH9DP9zAAzwAw0A80gM8gMNoPNUDPUDDPDzHAz3IwwI80o864ZbcaYsWacGW8mmFSTaiaaiWaSmWQmm8lmqplq0kyamWFmmJlmppltZps5Zo6Za+aa+Wa+STfpZqFZaDJMhllsFptMk2mWmqVmuVluVpqVZrVZbdaatWa9WW82mo1ms9lstpgtZpvZZnaYHWaX2WV2m91mj9lj9pq9Zp/ZZ/ab/eaAOWAOmoPmkDlkDpvD5og5Yo6ao+aYOWZOmBPmpDlpTplT5ow5Y86Z8+aCuWguGW9ibU4bZ6+z8TaXzW2vt/8a57cFbKItaAtZbfPafP8UG2ttMVvclrAlrbOlbJK99TdxeVvB3mUr2rttJXuPrfybuJa939a2D9g69kFb0973T3Fd+5CtZx+39e0TtoFtahva5raRfdw2tk/YJrapbWab27b2GdvOPmuT7XO2vX3+N/FCu8iutmvsWrvO7rZf2jP2rD1sf7Dn7Hnbw/a0A+zrdqB9ww6yb9rBdshv4lH2XTvajrFj7Tg73k74TTzVTrNpdrqdYT+0M+2s38Tp9hM7x2bYuXaenW8X/Bpn9ZRhP7WL7Wc20y6xS+0yu9yusCvtqv/d6zK7wW60m+wu+4XdYrfabXa73WF3/hpnHcce+5Xda7+2h+z3dr/9xh6wR+xB+92vcdbxHbE/2qP2J3vMHrcn7M/2pP3FnrKnfz3+rGP/2V60l6y3QEiCJCkKKIZyUCzlpDi6juIpF+Wm6ylCN1AC3Uh56CbKS/koPxWgRCpIhUiTIUtEIRWmIhSlm6ko3ULFqDiVoJLkqBQl0a1Umm6jMnQ7laU7qBzdSeWpAt1FFeluqkT3UGWqQlXpXqpG1akG1aT7qBbdT7XpAapDD1Jdeojq0cNUnx6hBvQoNaTHqBE9To3pCWpCTakZNacW9CS1pKeoFbWmNvQ0taVnqB09S8n0HLWn56kDvUAd6UXqRC9RZ3qZulBX6kavUHd6lXpQT0qhXtSbXqM+1Jf6UX8aQK/TQHqDBtGbNJiG0FB6i4bR2zSc3qERNJJG0bs0msbQWBpH42kCpdJ7NJHep0n0AU2mKTSVplEaTacZ9CHNpFk0mz6iOfQxzaV5NJ8WUDp9QgtpEWXQp7SYPqNMWkJLaRktpxW0klbRalpDa2kdracNtJE20Wb6nLbQVkLaTjtoJ+2iL2g3fUl76CvaS1/TPvob7adv6AB9SwfpOzpE39Nh+oGO0I90lH6iY3ScTtDPdJJ+oVN0ms7QWTpH5+kCXaRL5AlCDEUoQxUGYUyYI4wNc4Zx4XVhfJgrzB1eH0bCG8KE8MYwT3hTmDfMF+YPC4SJYcGwUKhDE9qQwjAsHBYJo+HNYdHwlrBYWDwsEZYMXVgqTApvDUuHt4VlwtvDsuEdYbnwzrB8WCF8/MGK4d1hpfCesHJYJawa3htWC6uHNcKa4X1hrfD+sHb4QFgnfDAsEz4U1gsfDuuHj4QNwkfDhuFjYaPw8bBx+ETYJGwaNgubhy3CJ8OW4VNhq7B12CZ8OmwbPhO2C58Nk8Pnwvbh81fdnxL2CnuHr4Wvhd4/IOdHF0TTo59EF0YXRTOin0YXRz+LZkaXRJdGl0WXR1dEV0ZXRVdH10TXRtdF10c3RDdGN0W9r5kDHDrhpFMucDEuh4t1OV2cu87Fu1wut7veRdwNLsHd6PK4m1xel8/ldwVcoivoCjntjLOOXOgKuyIu6m52Rd0trpgr7kq4ks65Ui7JNXctXAvX0j3lWrnWro172j3tnnHPuGfds+4519497zq4F1xH96Lr5F5yL7mXXRfX1XVzr7ju7lXXw/V0KS7F9Xa9XR/Xx/Vz/dwAN8ANdAPdIDfIDXYX3VA31A1zw9xwN9yNcCPcKDfKjXaj3Vg31o13412qS3UT3UQ3yU1yk2Mnu6luqktzaW6Gm+Fmuplutpvt5hSb4+a6uW6+m+/SXbpb6Ba6DJfhFrvFLtNluqVuqVvulruVbqVb7Va7tW6tW+/Wu41uo9vsNrstbovb5ra5HW6H2+V2ud1ut9vj9ri9znvfc98Z7/a7A+5bd9B95w65791h94M74n50R91P7pg77k64n91J94s75U67M+6sO+fOuwvuorvkvEuNvBeZGHk/MinyQWRyZEpkamRaJC0yPTIj8mFkZmRWZHbko8icyMeRuZF5kfmRBZH0yCeRhZFFkYzIp5HFkc8imZElkaWRZZHlkRUR7wtuCX1hX8RH/c2+qL/FF/PFfQlf0jtfyif5W31pf5sv42/3Zf0dvpy/05f3Ffxd/gnfxDf1zXxz38I/6Vv6p3wr39q38U/7tv4Z384/65P9c769f9538C/4jv5F38m/5Dv7l30X39V386/47v5V38P39Cm+l+/tX/N9fF9/3vf3A/zrfqB/ww/yb/rBfogf6t/yw/zbfrh/x4/wI/0o/64f7cf4sX6cH+8n+FT/np/o3/eT/Ad+sp/ip/ppPs1P9zP8h36mn+Vn+4/8HP+xn+vn+fl+gU/3n/iFfpHP8J/6xf4zn+mX+KV+mYfYFX6lX+VX+zV+rV/n1/sNfqPf5Df7z/0Wv9Vv89v9Dr/T7/Jf+N3+S7/Hf+X3+q/9Pv83v99/4w/4b/1B/50/5L/3h/0P/oj/0R/1P/lj/rg/4dGf9L/4U/60P+PP+nP+vL/gL/pL/DdrjDHGGGP/V+RV9vf6ne+Jyxv8+rtzgFxbCxz815rr8/593Vckto0AwHM9Oz/6j61atZSUlMu3zZQQFJkHAJEr+TFwJV4CbeAZSIbWUPp3++srup6jf1//N2IBIA7+tf5tf1B/zJyr1A+i8wCKFbmSkxOuxFfql/mD+vlaXqV+zm9SAVr9HznxcCW+Uj8JnoLnIfmfbskYY4wxxhhjjP1dX3FXx6ud32adnyeqKzk54Ep8tfNzxhhjjDHGGGOMXXsvdu327JPJya078uIaLDrn+vsU/lP6+YNFzH9GG3/eAi9fvfpP6eevXlS5/Gz/r2Rds5ckxhhjjDHG2F/kyof+a90JY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDGWff3/+Cdk1/oYGWOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMsWvtfwUAAP//X+UZFA==") mkdir(&(0x7f0000000540)='./file1\x00', 0xc5) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) capset(&(0x7f0000001840)={0x20080522, r4}, &(0x7f0000001880)={0x6, 0x3, 0x7, 0x7, 0x6, 0x2}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00'}, 0x18) 2.768308854s ago: executing program 2 (id=1947): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB, @ANYBLOB], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001180)={0x38, 0x0, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x38}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) process_vm_readv(0x0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000000c0)='./file0\x00', 0x400, &(0x7f0000000000)={[{@shortname_winnt}, {@utf8no}, {@fat=@check_strict}, {@fat=@discard}, {@utf8}, {@fat=@nfs}, {@shortname_win95}, {@shortname_lower}, {@utf8}]}, 0xfd, 0x2a0, &(0x7f0000000540)="$eJzs3M9rE0EUwPHXtGnTlDY5iKAgPvSil6WNf0GQFsSAUhtRD8LUbjRkTUo2RiJie/Pq31E8ehOs/0Av3ryLlyIIXnqQrnQ3a7Y12B823dh8P1B2ujMvM7s7CW8XdjbvvXlaKblWyTQkkVJJSGpVtkSykpDQUHub8MujErUqVyd+fL5w5/6Dm/lCYXZedS6/cC2nqlMXPzx/+fbSx8bE3XdT78dkI/tw83vuy8bZjXOb2wvhp9caanSxVmuYRcfWpbJbsVRvO7ZxbS1XXbu+q77k1JaXW2qqS5Pp5brtumqqLa3YLW3UtFFvqXlsylW1LEsn0zJohg8dUVybnzf5ngwGcRjvtrNez5vhrpXFtZMYFAAA6C9/5v9yIvn/k7KrZVer++X/CSH/7x0//9/umjTidEju3ADkTbr9/d2N/B8AAAAAAAAAAAAAAAAAAAAAgP/BludlPM/LhNvwb0xEUiIS/h/3ONEbR7j+QzEOF8cs8uJeSsR53Sw2i8E2qM+XpCyO2DKdFPnpz4e2oDx3ozA7rb6srDsr7Xj/JcGxMD6U7R4/E8RrJH6lWUxKOtp/TjJypnt8bk98UkSaxVG5cjkSb0lGPj2Smjiy5M/rTvyrGdXrtwp7+h/32wEAAAAAcBpY+lt29/1vsJqkZWm4bMie+mBn5/mAZPZ5PqCyPiqd+BE5PxLfcQMAAAAAMEjc1ouKcRy7PsiFcTl81CCeOisVTJq/NvY8b2Wn0b93mhCRmI70m4j0wQk/7sLXZ8EFPEjjOH+VAAAAAPRCJ+mPeyQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAyugy4eFrY/ytpjke6G4zlKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoD/8CgAA///JRBp/") bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000000e255000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="180000e30021000000000000000000006593f0ff010000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) timer_create(0x0, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000080)='task_rename\x00'}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x10, 0x4, 0x8, 0x7, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000940)={{r2}, &(0x7f00000008c0), &(0x7f0000000900)=r1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000500)='hrtimer_start\x00', r3}, 0x10) timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000180)={0x0, 0x0}) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(r5, 0x4b34, 0x3bf) ioctl$KDDISABIO(r5, 0x4b37) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) write(r4, &(0x7f0000000000)="fa", 0xfffffdef) 2.446788201s ago: executing program 4 (id=1948): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB, @ANYBLOB], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001180)={0x38, 0x0, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x38}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) process_vm_readv(0x0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000000c0)='./file0\x00', 0x400, &(0x7f0000000000)={[{@shortname_winnt}, {@utf8no}, {@fat=@check_strict}, {@fat=@discard}, {@utf8}, {@fat=@nfs}, {@shortname_win95}, {@shortname_lower}, {@utf8}]}, 0xfd, 0x2a0, &(0x7f0000000540)="$eJzs3M9rE0EUwPHXtGnTlDY5iKAgPvSil6WNf0GQFsSAUhtRD8LUbjRkTUo2RiJie/Pq31E8ehOs/0Av3ryLlyIIXnqQrnQ3a7Y12B823dh8P1B2ujMvM7s7CW8XdjbvvXlaKblWyTQkkVJJSGpVtkSykpDQUHub8MujErUqVyd+fL5w5/6Dm/lCYXZedS6/cC2nqlMXPzx/+fbSx8bE3XdT78dkI/tw83vuy8bZjXOb2wvhp9caanSxVmuYRcfWpbJbsVRvO7ZxbS1XXbu+q77k1JaXW2qqS5Pp5brtumqqLa3YLW3UtFFvqXlsylW1LEsn0zJohg8dUVybnzf5ngwGcRjvtrNez5vhrpXFtZMYFAAA6C9/5v9yIvn/k7KrZVer++X/CSH/7x0//9/umjTidEju3ADkTbr9/d2N/B8AAAAAAAAAAAAAAAAAAAAAgP/BludlPM/LhNvwb0xEUiIS/h/3ONEbR7j+QzEOF8cs8uJeSsR53Sw2i8E2qM+XpCyO2DKdFPnpz4e2oDx3ozA7rb6srDsr7Xj/JcGxMD6U7R4/E8RrJH6lWUxKOtp/TjJypnt8bk98UkSaxVG5cjkSb0lGPj2Smjiy5M/rTvyrGdXrtwp7+h/32wEAAAAAcBpY+lt29/1vsJqkZWm4bMie+mBn5/mAZPZ5PqCyPiqd+BE5PxLfcQMAAAAAMEjc1ouKcRy7PsiFcTl81CCeOisVTJq/NvY8b2Wn0b93mhCRmI70m4j0wQk/7sLXZ8EFPEjjOH+VAAAAAPRCJ+mPeyQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAyugy4eFrY/ytpjke6G4zlKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoD/8CgAA///JRBp/") bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000000e255000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="180000e30021000000000000000000006593f0ff010000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) timer_create(0x0, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000080)='task_rename\x00'}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x10, 0x4, 0x8, 0x7, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000940)={{r2}, &(0x7f00000008c0), &(0x7f0000000900)=r1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000500)='hrtimer_start\x00', r3}, 0x10) timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000180)={0x0, 0x0}) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(r5, 0x4b34, 0x3bf) ioctl$KDDISABIO(r5, 0x4b37) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) write(r4, &(0x7f0000000000)="fa", 0xfffffdef) 2.295177894s ago: executing program 5 (id=1949): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_queued\x00', 0x275a, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0x8004587d, &(0x7f0000000080)={0x0, r1, 0x9, 0x7fff, 0x0, 0x6}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) r2 = io_uring_setup(0x1b05, &(0x7f0000000040)={0x0, 0xd7df, 0x80, 0x3, 0x2e7}) close(r2) io_setup(0x4fb, &(0x7f00000009c0)=0x0) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xd) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_netdev_private(r5, 0x89fa, &(0x7f0000000000)="a6cc04e2d8f1c38afbf14b2db86e3a") io_submit(r3, 0x1, &(0x7f00000001c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x3, 0x40, r4, &(0x7f0000000400)='B', 0x1, 0x4, 0x0, 0x997f18199400164}]) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) 2.186295656s ago: executing program 6 (id=1950): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000016c0)=ANY=[@ANYBLOB="0b00000005000000000400000d00000001"], 0x48) bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x4b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000001000000000b7080000000000007b8af8ff00000000190500000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1e, 0xc, &(0x7f00000007c0)=ANY=[@ANYRESOCT=r1, @ANYRES64=r1, @ANYBLOB="fda839349f5d8e3e8c44e47c03", @ANYRESOCT=r1, @ANYRESOCT=r2, @ANYRESOCT=r2, @ANYRES64=r0], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0) ftruncate(r4, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70300001d000000850000001b000000b700000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r9}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000100000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$EXT4_IOC_SETFSUUID(0xffffffffffffffff, 0x4008662c, 0x0) recvmmsg(r6, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) sendfile(r5, r4, 0x0, 0x578410e9) sendfile(r5, r4, 0x0, 0x100000000) r10 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000c40)=@generic={0x0, 0x0, 0x18}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000", @ANYRES32=r10, @ANYBLOB], 0x0}, 0x94) r11 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x404c094}, 0x80) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$NL80211_CMD_GET_WIPHY(r11, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x880) syz_pidfd_open(0x0, 0x0) 2.046849868s ago: executing program 5 (id=1951): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a80)={r1, 0x39, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fc, 0x0, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1a, 0xf, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x107a654, 0x0, 0x0, 0x0, 0x1}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000500)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48) r5 = syz_io_uring_setup(0x1593, &(0x7f0000001900)={0x0, 0xe5dc, 0x8, 0x3, 0x2f0}, &(0x7f0000001980), &(0x7f0000002c00)) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000) pwritev2(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0) r6 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000940)=@generic={&(0x7f0000000900)='./file0\x00', 0x0, 0x8}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x4, 0x23, &(0x7f0000000780)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8d, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@jmp={0x5, 0x1, 0x1, 0x7, 0x0, 0xffffffffffffffe0, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x184f, 0x0, 0x0, 0x0, 0x79}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x3}, @exit], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000540)='syzkaller\x00', 0x7fff, 0x1000, &(0x7f0000001ac0)=""/4096, 0x40f00, 0x40, '\x00', r2, @fallback=0x20, 0xffffffffffffffff, 0x8, &(0x7f0000000600)={0x4, 0x4}, 0x8, 0x10, &(0x7f00000008c0)={0x5, 0x5, 0x8001, 0x7}, 0x10, r3, r6, 0x3, &(0x7f0000000980)=[r4, r4, r4, r4], &(0x7f0000000a00)=[{0x1, 0x1, 0x2, 0x9}, {0x0, 0x1, 0x5, 0xa}, {0x1, 0x4, 0x2, 0x7}], 0x10, 0xea4}, 0x94) io_uring_register$IORING_UNREGISTER_RING_FDS(r5, 0x15, &(0x7f0000002ac0)=[{0x0, 0x0, 0x0, 0x0, 0x0}], 0x1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r4, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r7], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$tipc(0x1e, 0x5, 0x0) r9 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r9, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r9, 0x0) r10 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r10, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x801}, 0x4000045) socket$netlink(0x10, 0x3, 0x0) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r12}, 0x10) ppoll(&(0x7f0000000500)=[{r11}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r8}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r13, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) 1.680326876s ago: executing program 2 (id=1952): syz_usb_connect(0x5, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0x71, 0x51, 0x2a, 0x10, 0x41e, 0x3f19, 0x60ba, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x9, 0x4, 0x90, 0x1, [{{0x9, 0x4, 0xdf, 0x40, 0x1, 0xff, 0x29, 0x4f, 0xe, [@uac_control={{0xa, 0x24, 0x1, 0x3ff, 0x7f}}], [{{0x9, 0x5, 0x6, 0x1, 0x0, 0x7, 0x8, 0xff}}]}}]}}]}}, &(0x7f0000000880)={0xa, &(0x7f00000007c0)={0xa, 0x6, 0x250, 0x7a, 0x7, 0x3, 0x20, 0x2}, 0x0, 0x0, 0x1, [{0x6, &(0x7f0000000840)=@string={0x6, 0x3, "5831b557"}}]}) (async) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async) r0 = socket$inet_udplite(0x2, 0x2, 0x88) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000500)={0x0, r0}, 0x8) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000ffffffff000000000000000018114000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) (async) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x2000081, &(0x7f0000000640)=ANY=[], 0x0, 0x243, &(0x7f0000001ac0)="$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") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) setsockopt$ARPT_SO_SET_REPLACE(r0, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e8, 0x0, 0x130, 0x0, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x0, 0x0, {@empty, {[0x0, 0x0, 0xff]}}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'pimreg1\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d000000000000000500ffffffff00"}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {@empty, {[0x0, 0x0, 0x0, 0xff]}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@arp={@private=0xa010100, @remote, 0xff, 0xffffff, 0xc, 0xe, {@empty, {[0xff, 0x0, 0x0, 0xff, 0xff]}}, {@mac=@remote, {[0x0, 0xff, 0xff, 0xff, 0xff]}}, 0x2, 0x3, 0x5, 0x1, 0x7, 0x2d23, 'veth1_macvtap\x00', 'veth0_virt_wifi\x00', {}, {0xff}, 0x0, 0x1}, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) (async, rerun: 32) r3 = openat$incfs(0xffffffffffffffff, 0x0, 0x284101, 0x10) (rerun: 32) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) (async) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) (async, rerun: 64) r5 = socket$packet(0x11, 0x3, 0x300) (rerun: 64) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) sendto$packet(r5, &(0x7f0000000180)="0b03feff4f12021202004788aa96a13bb1000011000088ca1a00", 0x1fffc, 0x0, &(0x7f0000000140)={0x11, 0x0, r6}, 0x14) (async, rerun: 64) ioctl$KVM_GET_XSAVE2(0xffffffffffffffff, 0x9000aecf, &(0x7f0000ffd000/0x3000)=nil) (async, rerun: 64) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, 0x0) (async) write(r3, 0x0, 0x0) 1.625461387s ago: executing program 2 (id=1953): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB='\x00'/11], 0x48) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0xc044) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) bind$netlink(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="4c00000010004b0422000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b00010062726964676500001c00028008000400000000000800157fff000000050016"], 0x4c}, 0x1, 0x0, 0x0, 0x200400a0}, 0x0) 1.611634898s ago: executing program 3 (id=1954): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0xffffff4f, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffd98, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x3, 0x3, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xda, 0x0, 0x0, 0x0, 0xce4e}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000000}, 0x94) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, &(0x7f0000000280), &(0x7f0000000000)=""/3, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSCTTY(r3, 0x540e, 0x90000000) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_ABS_SETUP(r4, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) write$uinput_user_dev(r4, &(0x7f0000000800)={'syz1\x00', {0x0, 0x10, 0x2}, 0xfffffffc, [0x0, 0x0, 0x0, 0x40000, 0x1, 0x2, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x296, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x6, 0x5f1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x7, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x400, 0x0, 0x200, 0x0, 0x2, 0x0, 0x20000000, 0x5, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x8, 0x0, 0x80000, 0x0, 0xfffffffd, 0x2000, 0xc, 0x0, 0x0, 0x7, 0x0, 0x4, 0x0, 0xffff], [0x8001, 0xfc, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7ff, 0x0, 0x0, 0xf1, 0x9, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0xfffffffd, 0xffffffff, 0x0, 0x0, 0x9fa, 0x0, 0x0, 0x0, 0x4, 0x0, 0xc, 0x0, 0x0, 0x0, 0x2, 0x0, 0x6, 0x0, 0x0, 0xbda6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x52c, 0x0, 0x4, 0x0, 0xfff, 0x3, 0x0, 0x0, 0x0, 0xe727, 0x8], [0x40000000, 0x0, 0x74e2, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x40, 0x0, 0x0, 0xbd, 0x0, 0x0, 0x4, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x80000000, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x40, 0x22, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4]}, 0x45c) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r4, 0x5501) getresuid(&(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000200)={[{@bsdgroups}, {@journal_checksum}, {@nombcache}, {@lazytime}, {@jqfmt_vfsv0}], [{@dont_hash}, {@fowner_eq={'fowner', 0x3d, r6}}]}, 0x2, 0x553, &(0x7f0000001080)="$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") r7 = open(&(0x7f0000000080)='./file1\x00', 0xe4802, 0x6) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000800), 0x10, 0x0}, 0x14) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000100)=@rnullb, r5, &(0x7f0000000280)={0x9d, 0xce7, 0x1000, 0x0, 0x3, 0xbe, 0xb7, 0x4}) pwritev2(r7, &(0x7f0000000240), 0x0, 0x77ff, 0xf8, 0x1) 1.203765505s ago: executing program 4 (id=1955): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000016c0)=ANY=[@ANYBLOB="0b00000005000000000400000d00000001"], 0x48) bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x4b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x1c, 0x0, &(0x7f00000005c0)=[@clear_death, @dead_binder_done], 0x0, 0x1000000, 0x0}) (fail_nth: 2) 1.150437836s ago: executing program 3 (id=1956): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42041, 0x19a) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000001d00)=ANY=[@ANYRES32, @ANYRES64=r0, @ANYRES32=0x0, @ANYBLOB="e42a2a1b0497faff0000002f616df0865581cd1cb9b2f1318bd9442ba3c85d10c0432ef4b17f8c1fb182341f99f10f962e980c1fbaa278e2da7c520d4452fbfa5c388edf35cc36967f034e735c7ccd65289fdfdc41a7b59f5b238945fbe665339aa88960575d645911d8f44b254835b0e5481bf8afab39b8ff45280b2c58aee096bb38d8", @ANYBLOB='\x00'/12], 0x48) r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r2) syz_usb_connect(0x4, 0x24, &(0x7f0000000000)=ANY=[], 0x0) ioctl$EVIOCRMFF(r2, 0xc0085504, &(0x7f0000000080)) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000ef00eef7cf55a1478efce11500ff0f0e00000000000000000000cbd2757fef3ef13c5a5e332b0fe6fd48f68d7677334b5489bf1fd9c9c08b87976e877dab8ad9cc112a1abdac45ac8adf8ee55cfa70b92e5b1dd2398ebe48f782d51388e06e31a8d8437cf1950ac21f8dad586b784809bf7ca4dbc0892ebfd0", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000440)=@bpf_lsm={0x6, 0x3, &(0x7f0000001c00)=ANY=[@ANYRES8=r1], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r4, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001c40)={r6, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0xffffffff, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) mount$incfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000000c0)={[], [{@defcontext={'defcontext', 0x3d, 'unconfined_u'}}]}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a00)={r0, 0x0, 0x83, 0xe7, &(0x7f0000000400)="e0f7ddf8c1e3d379b97ec5ee1f5beff4c9125a9560fcab299eaf8f6c4f7cf4f50835da2d470abcb88b82c65e2b387dc23b06a3f7378a3e058d18f5eb5db50ac9f4c485baaf6cf5e6cbb4b712d335828578018c9b06f9c596873fb3904685ae6752d192a8b210d2eabf90b71c38b4156eee3a95d86c9cf4d3019fb051a2dd6922b1e325", &(0x7f0000000740)=""/231, 0xe, 0x0, 0x84, 0xed, &(0x7f0000000840)="f2db63f53719c019fbe49a9f82e4cebad2f3ba3fceb26bf725b7e6b6acfa7428ceb0c0e847c22107e2ce9cd50e01453fb2e875a2f028772b109793b9e42c97b9c143a75ffd6652cd4f38bfb2c18df17401589dd574a66e637187c0b8215dc3dcfbf08d76066ca1dfd47f780bde741efc710be4c474a8e1b5cdb94b3fcfcec758d94371a5", &(0x7f0000000900)="0a550706b5dc7e6034dffdba2e75fcdb195aadf877963bd85f7152d35d82320aad1d0921b5445a9ed58470ca8f7489f2dc961dfffc1d791991e595435c9dcc5c909d2935c1ea7d898cbf3dba97634a6bb5fdb7304f229aded14503ec7bdbf3699bf4b7e8f9428c0d35f65876a935967157121e2fa6e1f0bea2e79175b200fba089cc150ae57d6fac13d7b88f9cce977a38037b646afaddb75eb1a1495c865cae4d8f02853f2ec50e485bea2be1d768a9cbc5774d3cfed88503bc3566845d5a29c14adc690938d36b88f51ba1da8b0c4c501546c6362af5d845fdc077769f3532f6fae00e3e63ab3790ed250b4b", 0x2, 0x0, 0x8001}, 0x50) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001e000100000002000000000007"], 0x28}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r8 = request_key(&(0x7f0000002740)='asymmetric\x00', &(0x7f0000002780)={'syz', 0x3}, &(0x7f00000027c0)=',*[\\/&)\x00', 0xffffffffffffffff) fstat(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000040)='\x00', &(0x7f0000000180), 0x200000b, &(0x7f0000000600)=ANY=[@ANYBLOB='fd=', @ANYBLOB="e9876ea6ca46992577581682ac7ff6", @ANYRES16=0x0, @ANYRESDEC=r8, @ANYRESDEC=0x0, @ANYBLOB=',allow_other,max_read=0x7fffffffffffffff,blksize=0x0000000000001000,max_read=0x0000000000000002,default_permissions,fowner<', @ANYRESDEC=r9, @ANYRES16=r0, @ANYRESDEC=0xee00, @ANYBLOB=',fsmagic=0x0000000000000009,fsname=/dev/ptmx\x00,\x00']) newfstatat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) mount$cgroup2(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200), 0x1400, &(0x7f00000004c0)={[{@subsystem='net'}, {@memory_localevents}, {@favordynmods}, {@subsystem='cpu'}, {@memory_recursiveprot}, {@memory_localevents}, {@memory_hugetlb_accounting}, {@memory_hugetlb_accounting}], [{@subj_role={'subj_role', 0x3d, 'GPL\x00'}}, {@hash}, {@euid_eq={'euid', 0x3d, r9}}, {@subj_user={'subj_user', 0x3d, '^\':\x00'}}, {@func={'func', 0x3d, 'POLICY_CHECK'}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'defcontext'}}, {@fowner_lt={'fowner<', r10}}, {@fsmagic={'fsmagic', 0x3d, 0x1d35}}, {@uid_eq={'uid', 0x3d, 0xee01}}]}) 1.149998536s ago: executing program 5 (id=1957): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0}, 0x0, &(0x7f0000000040)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) socket$key(0xf, 0x3, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) io_setup(0xa, &(0x7f00000023c0)=0x0) io_submit(r4, 0x1, &(0x7f0000002980)=[&(0x7f00000024c0)={0x0, 0x0, 0x0, 0x0, 0x5, r3, 0x0, 0x0, 0x10}]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x2a, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x74, 0x74, 0x6, [@restrict={0x2, 0x0, 0x0, 0xb, 0x5}, @decl_tag={0xa, 0x0, 0x0, 0x11, 0x2, 0x8}, @decl_tag={0x9, 0x0, 0x0, 0x11, 0x5, 0x8}, @struct={0x9, 0x2, 0x0, 0x4, 0x1, 0x0, [{0x9, 0x1, 0x6}, {0xa, 0x1, 0x3c6c}]}, @enum64={0xa, 0x2, 0x0, 0x13, 0x1, 0xe, [{0x4, 0x3, 0x1}, {0x2, 0x6, 0xd}]}]}, {0x0, [0x30, 0x0, 0x5f, 0x30]}}, &(0x7f00000004c0)=""/25, 0x92, 0x19}, 0x28) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x70bd29, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe, 0x9}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) 1.148554016s ago: executing program 6 (id=1958): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080), 0x10) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000)={0x1ff, 0x9, 0x401, 0xf, 0xf63}, 0x14) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000001000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000004c0), 0xfe, 0x269, &(0x7f0000000200)="$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") r1 = creat(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r1, 0xc0096616, 0x0) 989.136309ms ago: executing program 4 (id=1959): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, 0x0, 0x0) sendmsg$inet6(r0, &(0x7f00000004c0)={&(0x7f0000000180)={0xa, 0x4e21, 0x35, @private0={0xfc, 0x0, '\x00', 0x1}, 0x6}, 0x1c, &(0x7f0000000440)=[{&(0x7f00000001c0)="a139abc399018d7879330c882e72b1b5", 0x10}, {0x0}, {&(0x7f0000000200)="7edf418b2cff8d9813998afbbeb4cf73f1e0", 0x12}, {&(0x7f0000000240)="e4641d90ba78965014e62d1aecfcad1c67e3397ac4b4481c9b2090a769807991c49998eb86", 0x25}, {&(0x7f00000003c0)="b4726b4b489e88e81affadbd55eee1e69fc0ac1991ef1cf1ca25d27350b47c41e2", 0x21}], 0x5}, 0x45) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000003640)=[{0x0}], 0x1}}], 0x1, 0x4040001) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000020000020000000002000000850000002f00000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x9}, 0x94) r1 = syz_open_dev$evdev(0x0, 0x4ee97ffd, 0x8e00) readv(r1, &(0x7f0000000080)=[{0x0}, {0x0}], 0x2) socket$netlink(0x10, 0x3, 0x0) open_tree(0xffffffffffffff9c, 0x0, 0x89901) syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x0, 0x10100}, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x83000000}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r6}, 0x18) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000580)=@base={0x18, 0x4, 0x41, 0x0, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4002, 0x4}, 0x50) sendmmsg$inet6(r5, &(0x7f0000000240)=[{{&(0x7f0000000080)={0xa, 0x4e22, 0x9, @mcast2, 0x80000000}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=[@rthdr={{0x28, 0x29, 0x39, {0x2c, 0x2, 0x2, 0x1, 0x0, [@private2]}}}], 0x28}}], 0x1, 0x20000000) 178.079786ms ago: executing program 2 (id=1960): prlimit64(0x0, 0xe, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) chdir(&(0x7f00000001c0)='./bus\x00') utime(&(0x7f0000000000)='./file0\x00', 0x0) 177.104746ms ago: executing program 4 (id=1961): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x18, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRESDEC=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @mcast2, 0x1}, 0x1c) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x4e20, 0xd, @remote, 0x1}, 0x1c) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffe80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r2}, 0x10) syz_clone(0x640c7100, 0x0, 0x0, 0x0, 0x0, 0x0) 111.743497ms ago: executing program 6 (id=1962): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB='\x00'/16], 0x48) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0xc044) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) bind$netlink(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="4c00000010004b0422000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b00010062726964676500001c00028008000400000000000800157fff000000050016"], 0x4c}, 0x1, 0x0, 0x0, 0x200400a0}, 0x0) 85.544938ms ago: executing program 2 (id=1963): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00'}) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x39}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) r2 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000000c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c00)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000a00)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_LOW_RATE_THRESHOLD={0x8, 0xb, 0xf}, @TCA_FQ_RATE_ENABLE={0x8}]}}]}, 0x40}}, 0x44080) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[@ANYRES64, @ANYBLOB="98fbf89f25"], 0x54}, 0x1, 0xba01, 0x0, 0x44010}, 0x4000000) 25.346419ms ago: executing program 4 (id=1964): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSBRKP(r1, 0x5425, 0x0) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0xd, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() clock_adjtime(0x5, &(0x7f0000000640)={0x10001, 0x2, 0xfffffffffffff000, 0x8, 0x4, 0x5, 0x5, 0x6, 0x1, 0x7, 0x3, 0x7, 0xfffffffffffffffa, 0x1, 0x8000000000000001, 0x1, 0x7, 0x4cfb, 0x8, 0x7ff, 0x1ff, 0x1c, 0x4, 0x612, 0x8, 0x1ff}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000760001007fa90f23cb42c5b7000000000000070200000000", @ANYRES32=0x0], 0x18}, 0x1, 0x5502000000000000}, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_int(r6, 0x0, 0x7, &(0x7f0000000080)=0x7, 0x4) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000003c0)='sys_enter\x00', r7}, 0x18) nanosleep(&(0x7f00000001c0)={0x0, 0x3938700}, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, 0x0, 0x20) syz_emit_ethernet(0x3e, &(0x7f0000000400)=ANY=[@ANYBLOB="aaaaaaaaaaaafad1e048716e08004a0000300000080000119078000000000000000044140a817f000009000000080000000000000c1300004e2000089078"], 0x0) recvmmsg(r6, &(0x7f0000004280)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x2, 0x0) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000001300), 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r8, 0x0, 0x0, 0x2, 0x0) 0s ago: executing program 5 (id=1965): r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x9, 0x0, 0x8a, 0x0, 0x0, 0x2000000}}) r1 = syz_usb_connect$hid(0x0, 0x57, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x32f, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x33, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0xc, 0x0, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x2}, {0x6, 0x0, 0x0, 0x400}]}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, 0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000000)={0x5}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b7030000000000f7850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) clock_nanosleep(0x9, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x0) munlock(&(0x7f0000cb5000/0x3000)=nil, 0x3000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): 1048576 [ 572.769597][ T6628] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 572.780935][ T6625] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 572.796128][ T6625] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1662'. [ 572.812723][ T6628] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1663'. [ 573.353292][ T6640] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 574.672119][ T6660] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 575.002310][ T6668] loop2: detected capacity change from 0 to 128 [ 575.024827][ T6668] FAT-fs (loop2): Directory bread(block 162) failed [ 575.066113][ T6668] FAT-fs (loop2): Directory bread(block 163) failed [ 575.066261][ T28] audit: type=1400 audit(1757016754.716:6386): avc: denied { create } for pid=6669 comm="syz.0.1674" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 575.074363][ T6668] FAT-fs (loop2): Directory bread(block 164) failed [ 575.101081][ T6670] loop0: detected capacity change from 0 to 256 [ 575.107611][ T6668] FAT-fs (loop2): Directory bread(block 165) failed [ 575.120956][ T6668] FAT-fs (loop2): Directory bread(block 166) failed [ 575.127675][ T6668] FAT-fs (loop2): Directory bread(block 167) failed [ 575.138003][ T6668] FAT-fs (loop2): Directory bread(block 168) failed [ 575.144855][ T6668] FAT-fs (loop2): Directory bread(block 169) failed [ 575.154572][ T6670] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x76dfe2a7, utbl_chksum : 0xe619d30d) [ 575.185513][ T6670] exFAT-fs (loop0): failed to load alloc-bitmap [ 575.191997][ T6670] exFAT-fs (loop0): failed to recognize exfat type [ 575.494521][ T6676] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1675'. [ 575.785440][ T6673] xt_hashlimit: max too large, truncated to 1048576 [ 575.803383][ T6680] xt_hashlimit: max too large, truncated to 1048576 [ 576.551801][ T6676] device wg2 entered promiscuous mode [ 576.558347][ T6679] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1676'. [ 577.105384][ T6687] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 577.158530][ T6688] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 577.227175][ T6687] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1677'. [ 577.318372][ T6688] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1679'. [ 577.588020][ T6702] serio: Serial port ptm0 [ 577.889581][ T6704] loop0: detected capacity change from 0 to 2048 [ 577.926318][ T6704] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 577.949569][ T6704] EXT4-fs (loop0): unmounting filesystem. [ 578.371766][ T6716] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1685'. [ 578.381855][ T6716] xt_hashlimit: max too large, truncated to 1048576 [ 578.469193][ T6714] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1684'. [ 578.479491][ T6714] device wg2 entered promiscuous mode [ 578.504377][ T6714] xt_hashlimit: max too large, truncated to 1048576 [ 578.858311][ T6720] loop0: detected capacity change from 0 to 512 [ 578.877544][ T6725] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1686'. [ 578.880584][ T6727] loop1: detected capacity change from 0 to 128 [ 578.887210][ T6720] EXT4-fs: Ignoring removed i_version option [ 579.043223][ T6720] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 579.056325][ T6720] EXT4-fs (loop0): unmounting filesystem. [ 579.169079][ T6733] FAULT_INJECTION: forcing a failure. [ 579.169079][ T6733] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 579.182265][ T6726] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1690'. [ 579.191357][ T6733] CPU: 1 PID: 6733 Comm: syz.1.1689 Not tainted syzkaller #0 [ 579.198751][ T6733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 579.208818][ T6733] Call Trace: [ 579.212109][ T6733] [ 579.215046][ T6733] __dump_stack+0x21/0x24 [ 579.219388][ T6733] dump_stack_lvl+0xee/0x150 [ 579.224000][ T6733] ? __cfi_dump_stack_lvl+0x8/0x8 [ 579.229059][ T6733] ? proc_fail_nth_write+0x17a/0x1f0 [ 579.234375][ T6733] dump_stack+0x15/0x24 [ 579.238551][ T6733] should_fail_ex+0x3d4/0x520 [ 579.243257][ T6733] should_fail+0xb/0x10 [ 579.247435][ T6733] should_fail_usercopy+0x1a/0x20 [ 579.252491][ T6733] strncpy_from_user+0x24/0x2d0 [ 579.257374][ T6733] ? getname_flags+0xb9/0x500 [ 579.262168][ T6733] getname_flags+0xf4/0x500 [ 579.266729][ T6733] getname+0x19/0x20 [ 579.270654][ T6733] do_sys_openat2+0xcb/0x7e0 [ 579.275272][ T6733] ? __kasan_check_write+0x14/0x20 [ 579.280415][ T6733] ? do_sys_open+0xe0/0xe0 [ 579.284863][ T6733] ? ksys_write+0x1eb/0x240 [ 579.289406][ T6733] ? __cfi_ksys_write+0x10/0x10 [ 579.294292][ T6733] __x64_sys_open+0x11c/0x140 [ 579.299007][ T6733] x64_sys_call+0x97b/0x9a0 [ 579.303536][ T6733] do_syscall_64+0x4c/0xa0 [ 579.307985][ T6733] ? clear_bhb_loop+0x30/0x80 [ 579.312686][ T6733] ? clear_bhb_loop+0x30/0x80 [ 579.317396][ T6733] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 579.323312][ T6733] RIP: 0033:0x7f8f5218ebe9 [ 579.327745][ T6733] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 579.347379][ T6733] RSP: 002b:00007f8f52fa3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 579.355833][ T6733] RAX: ffffffffffffffda RBX: 00007f8f523c6180 RCX: 00007f8f5218ebe9 [ 579.363834][ T6733] RDX: 0000000000000009 RSI: 000000000014927e RDI: 00002000000001c0 [ 579.371833][ T6733] RBP: 00007f8f52fa3090 R08: 0000000000000000 R09: 0000000000000000 [ 579.379830][ T6733] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 579.387826][ T6733] R13: 00007f8f523c6218 R14: 00007f8f523c6180 R15: 00007ffc7c6b8978 [ 579.395825][ T6733] [ 579.398974][ T6731] xt_hashlimit: max too large, truncated to 1048576 [ 579.554564][ T6739] loop3: detected capacity change from 0 to 256 [ 579.579690][ T6739] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x76dfe2a7, utbl_chksum : 0xe619d30d) [ 579.592557][ T6739] exFAT-fs (loop3): failed to load alloc-bitmap [ 579.600134][ T6739] exFAT-fs (loop3): failed to recognize exfat type [ 579.605861][ T6704] loop0: detected capacity change from 0 to 4096 [ 579.616453][ T6704] ext4: Unknown parameter 'euid>00000000000000060928' [ 579.669999][ T6741] loop3: detected capacity change from 0 to 128 [ 580.034768][ T6749] loop2: detected capacity change from 0 to 128 [ 580.068632][ T6746] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 580.107261][ T6746] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1695'. [ 580.144738][ T6749] FAT-fs (loop2): Directory bread(block 162) failed [ 580.151461][ T6749] FAT-fs (loop2): Directory bread(block 163) failed [ 580.158467][ T6749] FAT-fs (loop2): Directory bread(block 164) failed [ 580.165435][ T6749] FAT-fs (loop2): Directory bread(block 165) failed [ 580.172711][ T6749] FAT-fs (loop2): Directory bread(block 166) failed [ 580.179876][ T6749] FAT-fs (loop2): Directory bread(block 167) failed [ 580.192567][ T6749] FAT-fs (loop2): Directory bread(block 168) failed [ 580.200113][ T6749] FAT-fs (loop2): Directory bread(block 169) failed [ 581.063995][ T6757] loop3: detected capacity change from 0 to 512 [ 581.362816][ T6759] loop4: detected capacity change from 0 to 512 [ 581.369580][ T6759] ======================================================= [ 581.369580][ T6759] WARNING: The mand mount option has been deprecated and [ 581.369580][ T6759] and is ignored by this kernel. Remove the mand [ 581.369580][ T6759] option from the mount to silence this warning. [ 581.369580][ T6759] ======================================================= [ 581.422905][ T6759] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 581.432221][ T6759] ext4 filesystem being mounted at /334/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 581.520800][ T3254] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 582.278421][ T286] EXT4-fs (loop4): unmounting filesystem. [ 582.657119][ T6778] loop0: detected capacity change from 0 to 128 [ 582.769784][ T6783] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1700'. [ 582.842078][ T6784] xt_hashlimit: max too large, truncated to 1048576 [ 583.239292][ T6787] xt_hashlimit: max too large, truncated to 1048576 [ 583.895646][ T6783] device wg2 entered promiscuous mode [ 583.906728][ T6786] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1703'. [ 583.929375][ T6778] FAT-fs (loop0): Directory bread(block 32) failed [ 583.939551][ T6778] FAT-fs (loop0): Directory bread(block 33) failed [ 583.947671][ T6778] FAT-fs (loop0): Directory bread(block 34) failed [ 583.954396][ T6778] FAT-fs (loop0): Directory bread(block 35) failed [ 583.975965][ T6778] FAT-fs (loop0): Directory bread(block 36) failed [ 584.131694][ T6778] FAT-fs (loop0): Directory bread(block 37) failed [ 584.146781][ T6792] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 584.158057][ T6792] device wg2 left promiscuous mode [ 584.339842][ T6778] FAT-fs (loop0): Directory bread(block 38) failed [ 584.346427][ T6778] FAT-fs (loop0): Directory bread(block 39) failed [ 584.353308][ T6778] FAT-fs (loop0): Directory bread(block 40) failed [ 584.382632][ T6778] FAT-fs (loop0): Directory bread(block 41) failed [ 584.402440][ T6793] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1705'. [ 584.476235][ T6778] FAT-fs (loop0): error, fat_free_clusters: deleting FAT entry beyond EOF [ 584.484922][ T6778] FAT-fs (loop0): Filesystem has been set read-only [ 584.534806][ T6778] syz.0.1702: attempt to access beyond end of device [ 584.534806][ T6778] loop0: rw=2049, sector=4184, nr_sectors = 36 limit=128 [ 584.589049][ T6803] incfs: Can't find or create .index dir in ./file0 [ 584.599576][ T6803] incfs: mount failed -14 [ 584.637866][ T28] audit: type=1400 audit(1757016764.286:6387): avc: denied { read write } for pid=6809 comm="syz.4.1711" name="vhost-vsock" dev="devtmpfs" ino=268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 584.671494][ T284] FAT-fs (loop0): error, corrupted directory (invalid entries) [ 584.693565][ T28] audit: type=1400 audit(1757016764.286:6388): avc: denied { open } for pid=6809 comm="syz.4.1711" path="/dev/vhost-vsock" dev="devtmpfs" ino=268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 584.734307][ T28] audit: type=1400 audit(1757016764.326:6389): avc: denied { ioctl } for pid=6809 comm="syz.4.1711" path="/dev/vhost-vsock" dev="devtmpfs" ino=268 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 584.761367][ T6810] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1711'. [ 584.869654][ T6815] loop3: detected capacity change from 0 to 128 [ 584.878239][ T19] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 584.943123][ T6815] FAT-fs (loop3): Directory bread(block 162) failed [ 584.958695][ T6815] FAT-fs (loop3): Directory bread(block 163) failed [ 584.975669][ T6815] FAT-fs (loop3): Directory bread(block 164) failed [ 584.993795][ T6815] FAT-fs (loop3): Directory bread(block 165) failed [ 585.008239][ T6815] FAT-fs (loop3): Directory bread(block 166) failed [ 585.025178][ T6815] FAT-fs (loop3): Directory bread(block 167) failed [ 585.041669][ T6815] FAT-fs (loop3): Directory bread(block 168) failed [ 585.049623][ T6819] loop2: detected capacity change from 0 to 128 [ 585.063529][ T6819] FAT-fs (loop2): error, invalid access to FAT (entry 0x0fff0000) [ 585.071875][ T6819] FAT-fs (loop2): Filesystem has been set read-only [ 585.082204][ T19] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 585.115455][ T19] usb 2-1: New USB device found, idVendor=056a, idProduct=032f, bcdDevice= 0.00 [ 585.140082][ T19] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 585.145372][ T6815] FAT-fs (loop3): Directory bread(block 169) failed [ 585.210479][ T19] usb 2-1: config 0 descriptor?? [ 585.314941][ T28] audit: type=1400 audit(1757016764.966:6390): avc: denied { mounton } for pid=6821 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 585.379933][ T3123] device bridge_slave_1 left promiscuous mode [ 585.386205][ T3123] bridge0: port 2(bridge_slave_1) entered disabled state [ 585.394472][ T3123] device bridge_slave_0 left promiscuous mode [ 585.400848][ T3123] bridge0: port 1(bridge_slave_0) entered disabled state [ 585.409902][ T3123] device veth1_macvtap left promiscuous mode [ 585.416028][ T3123] device veth0_vlan left promiscuous mode [ 585.581848][ T6821] bridge0: port 1(bridge_slave_0) entered blocking state [ 585.589020][ T6821] bridge0: port 1(bridge_slave_0) entered disabled state [ 585.596717][ T6821] device bridge_slave_0 entered promiscuous mode [ 585.604625][ T6821] bridge0: port 2(bridge_slave_1) entered blocking state [ 585.611832][ T6821] bridge0: port 2(bridge_slave_1) entered disabled state [ 585.619427][ T6821] device bridge_slave_1 entered promiscuous mode [ 585.798393][ T6821] bridge0: port 2(bridge_slave_1) entered blocking state [ 585.805465][ T6821] bridge0: port 2(bridge_slave_1) entered forwarding state [ 585.812780][ T6821] bridge0: port 1(bridge_slave_0) entered blocking state [ 585.819859][ T6821] bridge0: port 1(bridge_slave_0) entered forwarding state [ 586.121161][ T6840] loop4: detected capacity change from 0 to 512 [ 586.153705][ T28] audit: type=1400 audit(1757016765.696:6391): avc: denied { create } for pid=6829 comm="syz.4.1718" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 586.220231][ T28] audit: type=1400 audit(1757016765.696:6392): avc: denied { setopt } for pid=6829 comm="syz.4.1718" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 587.246276][ T28] audit: type=1400 audit(1757016765.706:6393): avc: denied { getopt } for pid=6829 comm="syz.4.1718" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 587.268556][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 587.298934][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 587.615962][ T6852] incfs: Options parsing error. -22 [ 587.621537][ T6852] incfs: mount failed -22 [ 588.482028][ T6851] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1721'. [ 588.491421][ T6854] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1721'. [ 588.492758][ T19] usbhid 2-1:0.0: can't add hid device: -71 [ 588.506333][ T6840] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 588.515443][ T6840] ext4 filesystem being mounted at /339/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 588.526553][ T19] usbhid: probe of 2-1:0.0 failed with error -71 [ 588.534040][ T19] usb 2-1: USB disconnect, device number 18 [ 588.566679][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 588.581724][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 588.595840][ T6862] loop3: detected capacity change from 0 to 1024 [ 588.612908][ T6862] EXT4-fs: Ignoring removed nobh option [ 588.628025][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 588.639932][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 588.648529][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 588.655632][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 588.679574][ T28] audit: type=1400 audit(1757016768.336:6394): avc: denied { setattr } for pid=6863 comm="syz.1.1724" name="KEY" dev="sockfs" ino=34232 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 588.682039][ T6864] loop1: detected capacity change from 0 to 512 [ 588.708972][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 588.718100][ T6862] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 588.727524][ T6862] EXT4-fs warning (device loop3): ext4_resize_begin:74: won't resize using backup superblock at 1 [ 588.739354][ T6864] EXT4-fs: quotafile must be on filesystem root [ 588.747490][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 588.757698][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 588.764793][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 588.825417][ T6821] device veth0_vlan entered promiscuous mode [ 588.840466][ T6821] device veth1_macvtap entered promiscuous mode [ 588.848746][ T286] EXT4-fs (loop4): unmounting filesystem. [ 588.855516][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 588.874885][ T28] audit: type=1400 audit(1757016768.526:6395): avc: denied { remount } for pid=6863 comm="syz.1.1724" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 588.922920][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 588.964082][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 589.075726][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 589.118283][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 589.161395][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 589.193086][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 589.201253][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 589.209542][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 589.217851][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 589.226517][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 589.235408][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 589.243366][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 589.291122][ T3123] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 589.300434][ T3123] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 589.310593][ T3123] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 589.319323][ T3123] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 589.381660][ T6876] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1725'. [ 589.442016][ T287] EXT4-fs (loop3): unmounting filesystem. [ 589.662012][ T6882] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 589.671825][ T6882] device wg2 left promiscuous mode [ 590.988710][ T6906] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1731'. [ 591.003661][ T6906] xt_hashlimit: max too large, truncated to 1048576 [ 591.293504][ T6907] loop4: detected capacity change from 0 to 128 [ 591.327781][ T6907] FAT-fs (loop4): Directory bread(block 162) failed [ 591.341724][ T6907] FAT-fs (loop4): Directory bread(block 163) failed [ 591.416961][ T6907] FAT-fs (loop4): Directory bread(block 164) failed [ 591.430946][ T6907] FAT-fs (loop4): Directory bread(block 165) failed [ 591.439601][ T6907] FAT-fs (loop4): Directory bread(block 166) failed [ 591.446273][ T6907] FAT-fs (loop4): Directory bread(block 167) failed [ 592.388376][ T6914] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 592.464277][ T6914] device wg2 left promiscuous mode [ 592.692531][ T6907] FAT-fs (loop4): Directory bread(block 168) failed [ 592.708557][ T6907] FAT-fs (loop4): Directory bread(block 169) failed [ 592.760309][ T6920] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1737'. [ 593.084693][ T6925] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1736'. [ 593.094938][ T6925] device wg2 entered promiscuous mode [ 593.340293][ T6933] loop2: detected capacity change from 0 to 128 [ 594.335835][ T28] audit: type=1400 audit(1757016773.986:6396): avc: denied { name_bind } for pid=6947 comm="syz.1.1744" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 594.358358][ T28] audit: type=1400 audit(1757016773.986:6397): avc: denied { node_bind } for pid=6947 comm="syz.1.1744" saddr=::1 src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 594.394781][ T8] kworker/u4:0: attempt to access beyond end of device [ 594.394781][ T8] loop2: rw=1, sector=145, nr_sectors = 896 limit=128 [ 594.448808][ T6952] incfs: Error accessing: ./file0. [ 594.454008][ T6952] incfs: mount failed -2 [ 594.478199][ T4301] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 594.658308][ T6958] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1746'. [ 594.670586][ T6958] xt_hashlimit: max too large, truncated to 1048576 [ 594.881426][ T6959] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1745'. [ 594.890810][ T6959] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1745'. [ 594.903581][ T6959] FAULT_INJECTION: forcing a failure. [ 594.903581][ T6959] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 594.916835][ T6959] CPU: 0 PID: 6959 Comm: syz.2.1745 Not tainted syzkaller #0 [ 594.924235][ T6959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 594.934298][ T6959] Call Trace: [ 594.937590][ T6959] [ 594.940534][ T6959] __dump_stack+0x21/0x24 [ 594.944878][ T6959] dump_stack_lvl+0xee/0x150 [ 594.949484][ T6959] ? __cfi_dump_stack_lvl+0x8/0x8 [ 594.954537][ T6959] dump_stack+0x15/0x24 [ 594.958780][ T6959] should_fail_ex+0x3d4/0x520 [ 594.963480][ T6959] should_fail+0xb/0x10 [ 594.967655][ T6959] should_fail_usercopy+0x1a/0x20 [ 594.972699][ T6959] _copy_from_user+0x1e/0xc0 [ 594.977303][ T6959] iovec_from_user+0x1aa/0x2e0 [ 594.982088][ T6959] ? _parse_integer+0x2a/0x40 [ 594.986792][ T6959] __import_iovec+0x71/0x470 [ 594.991427][ T6959] import_iovec+0x7c/0xb0 [ 594.995788][ T6959] ___sys_sendmsg+0x1e4/0x290 [ 595.000486][ T6959] ? __sys_sendmsg+0x270/0x270 [ 595.005284][ T6959] ? __fdget+0x19c/0x220 [ 595.009548][ T6959] __x64_sys_sendmsg+0x1f0/0x2c0 [ 595.014510][ T6959] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 595.019992][ T6959] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 595.026081][ T6959] x64_sys_call+0x171/0x9a0 [ 595.030610][ T6959] do_syscall_64+0x4c/0xa0 [ 595.035040][ T6959] ? clear_bhb_loop+0x30/0x80 [ 595.039748][ T6959] ? clear_bhb_loop+0x30/0x80 [ 595.044453][ T6959] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 595.050362][ T6959] RIP: 0033:0x7f3b9f78ebe9 [ 595.054789][ T6959] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 595.074406][ T6959] RSP: 002b:00007f3ba051e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 595.082839][ T6959] RAX: ffffffffffffffda RBX: 00007f3b9f9c6180 RCX: 00007f3b9f78ebe9 [ 595.090828][ T6959] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000008 [ 595.098813][ T6959] RBP: 00007f3ba051e090 R08: 0000000000000000 R09: 0000000000000000 [ 595.106801][ T6959] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 595.114791][ T6959] R13: 00007f3b9f9c6218 R14: 00007f3b9f9c6180 R15: 00007ffcf000f518 [ 595.122783][ T6959] [ 595.215269][ T4301] usb 5-1: Using ep0 maxpacket: 16 [ 595.307789][ T28] audit: type=1326 audit(1757016774.956:6398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6960 comm="syz.1.1747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f5218ebe9 code=0x7ffc0000 [ 595.413280][ T28] audit: type=1326 audit(1757016774.956:6399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6960 comm="syz.1.1747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8f5218ebe9 code=0x7ffc0000 [ 595.430309][ T4301] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 595.446966][ T4301] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 596.360457][ T6965] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 596.714126][ T4301] usb 5-1: string descriptor 0 read error: -71 [ 596.743442][ T4301] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 596.781004][ T28] audit: type=1326 audit(1757016774.956:6400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6960 comm="syz.1.1747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f5218ebe9 code=0x7ffc0000 [ 596.804589][ T28] audit: type=1326 audit(1757016774.966:6401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6960 comm="syz.1.1747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8f5218ebe9 code=0x7ffc0000 [ 596.885622][ T4301] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 596.898204][ T28] audit: type=1326 audit(1757016774.966:6402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6960 comm="syz.1.1747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f5218ebe9 code=0x7ffc0000 [ 596.930689][ T4301] usb 5-1: can't set config #1, error -71 [ 596.976473][ T4301] usb 5-1: USB disconnect, device number 22 [ 596.986002][ T28] audit: type=1326 audit(1757016774.966:6403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6960 comm="syz.1.1747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8f5218ebe9 code=0x7ffc0000 [ 598.955938][ T28] audit: type=1326 audit(1757016774.966:6404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6960 comm="syz.1.1747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f5218ebe9 code=0x7ffc0000 [ 599.101438][ T28] audit: type=1326 audit(1757016774.966:6405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6960 comm="syz.1.1747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8f5218ebe9 code=0x7ffc0000 [ 599.217314][ T6985] loop2: detected capacity change from 0 to 128 [ 600.066676][ T6985] FAT-fs (loop2): Directory bread(block 162) failed [ 600.090304][ T6985] FAT-fs (loop2): Directory bread(block 163) failed [ 600.168458][ T6999] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 600.487710][ T6985] FAT-fs (loop2): Directory bread(block 164) failed [ 600.514375][ T7000] xt_CT: No such helper "netbios-ns" [ 600.522676][ T28] kauditd_printk_skb: 47 callbacks suppressed [ 600.522692][ T28] audit: type=1326 audit(1757016780.176:6453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7002 comm="syz.5.1758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55f318ebe9 code=0x7ffc0000 [ 600.525308][ T6985] FAT-fs (loop2): Directory bread(block 165) failed [ 600.556811][ T28] audit: type=1326 audit(1757016780.216:6454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7002 comm="syz.5.1758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55f318ebe9 code=0x7ffc0000 [ 600.560572][ T6985] FAT-fs (loop2): Directory bread(block 166) failed [ 600.591957][ T6985] FAT-fs (loop2): Directory bread(block 167) failed [ 600.599194][ T6985] FAT-fs (loop2): Directory bread(block 168) failed [ 600.605965][ T6985] FAT-fs (loop2): Directory bread(block 169) failed [ 600.700372][ T28] audit: type=1326 audit(1757016780.216:6455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7002 comm="syz.5.1758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f55f318ebe9 code=0x7ffc0000 [ 600.724397][ T28] audit: type=1326 audit(1757016780.216:6456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7002 comm="syz.5.1758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55f318ebe9 code=0x7ffc0000 [ 600.911559][ T28] audit: type=1326 audit(1757016780.216:6457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7002 comm="syz.5.1758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55f318ebe9 code=0x7ffc0000 [ 601.052057][ T28] audit: type=1326 audit(1757016780.216:6458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7002 comm="syz.5.1758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f55f318ebe9 code=0x7ffc0000 [ 601.084006][ T28] audit: type=1326 audit(1757016780.216:6459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7002 comm="syz.5.1758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55f318ebe9 code=0x7ffc0000 [ 601.126421][ T28] audit: type=1326 audit(1757016780.216:6460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7002 comm="syz.5.1758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55f318ebe9 code=0x7ffc0000 [ 601.244007][ T28] audit: type=1326 audit(1757016780.216:6461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7002 comm="syz.5.1758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f55f318ebe9 code=0x7ffc0000 [ 602.004649][ T28] audit: type=1326 audit(1757016780.216:6462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7002 comm="syz.5.1758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55f318ebe9 code=0x7ffc0000 [ 602.513033][ T7029] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 603.115633][ T7041] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1767'. [ 603.125366][ T7041] xt_hashlimit: max too large, truncated to 1048576 [ 603.709647][ T7055] loop3: detected capacity change from 0 to 128 [ 603.726398][ T7055] FAT-fs (loop3): Directory bread(block 162) failed [ 603.736103][ T7055] FAT-fs (loop3): Directory bread(block 163) failed [ 603.742925][ T7055] FAT-fs (loop3): Directory bread(block 164) failed [ 603.762990][ T7055] FAT-fs (loop3): Directory bread(block 165) failed [ 603.775100][ T7055] FAT-fs (loop3): Directory bread(block 166) failed [ 603.797907][ T7055] FAT-fs (loop3): Directory bread(block 167) failed [ 603.804927][ T7055] FAT-fs (loop3): Directory bread(block 168) failed [ 603.811809][ T7055] FAT-fs (loop3): Directory bread(block 169) failed [ 604.294871][ T7066] loop5: detected capacity change from 0 to 512 [ 604.309760][ T7066] EXT4-fs: quotafile must be on filesystem root [ 604.935210][ T7071] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 604.946690][ T7073] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 604.955312][ T7086] loop4: detected capacity change from 0 to 256 [ 604.956913][ T7073] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1779'. [ 604.973715][ T7071] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1778'. [ 605.422662][ T7096] loop5: detected capacity change from 0 to 256 [ 605.437482][ T7096] FAT-fs (loop5): Directory bread(block 64) failed [ 605.444550][ T7096] FAT-fs (loop5): Directory bread(block 65) failed [ 605.451295][ T7096] FAT-fs (loop5): Directory bread(block 66) failed [ 605.457968][ T7096] FAT-fs (loop5): Directory bread(block 67) failed [ 605.464644][ T7096] FAT-fs (loop5): Directory bread(block 68) failed [ 605.472149][ T7096] FAT-fs (loop5): Directory bread(block 69) failed [ 605.478869][ T7096] FAT-fs (loop5): Directory bread(block 70) failed [ 605.485433][ T7096] FAT-fs (loop5): Directory bread(block 71) failed [ 605.492109][ T7096] FAT-fs (loop5): Directory bread(block 72) failed [ 605.498716][ T7096] FAT-fs (loop5): Directory bread(block 73) failed [ 605.584644][ T28] kauditd_printk_skb: 61 callbacks suppressed [ 605.584662][ T28] audit: type=1400 audit(1757016785.236:6524): avc: denied { write } for pid=7097 comm="syz.5.1786" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 605.629860][ T28] audit: type=1400 audit(1757016785.286:6525): avc: denied { create } for pid=7099 comm="syz.1.1788" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 605.664249][ T7104] FAULT_INJECTION: forcing a failure. [ 605.664249][ T7104] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 605.677894][ T28] audit: type=1400 audit(1757016785.316:6526): avc: denied { bind } for pid=7099 comm="syz.1.1788" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 605.698481][ T464] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 605.701813][ T7104] CPU: 0 PID: 7104 Comm: syz.1.1790 Not tainted syzkaller #0 [ 605.713445][ T7104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 605.723509][ T7104] Call Trace: [ 605.726791][ T7104] [ 605.729727][ T7104] __dump_stack+0x21/0x24 [ 605.734074][ T7104] dump_stack_lvl+0xee/0x150 [ 605.738674][ T7104] ? __cfi_dump_stack_lvl+0x8/0x8 [ 605.743713][ T7104] dump_stack+0x15/0x24 [ 605.747884][ T7104] should_fail_ex+0x3d4/0x520 [ 605.752573][ T7104] should_fail+0xb/0x10 [ 605.756730][ T7104] should_fail_usercopy+0x1a/0x20 [ 605.761764][ T7104] _copy_to_user+0x1e/0x90 [ 605.766184][ T7104] simple_read_from_buffer+0xe9/0x160 [ 605.771654][ T7104] proc_fail_nth_read+0x19a/0x210 [ 605.776684][ T7104] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 605.782242][ T7104] ? security_file_permission+0x94/0xb0 [ 605.787809][ T7104] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 605.793361][ T7104] vfs_read+0x26e/0x8c0 [ 605.797531][ T7104] ? __cfi_vfs_read+0x10/0x10 [ 605.802254][ T7104] ? __kasan_check_write+0x14/0x20 [ 605.807384][ T7104] ? mutex_lock+0x8d/0x1a0 [ 605.811816][ T7104] ? __cfi_mutex_lock+0x10/0x10 [ 605.816683][ T7104] ? __fdget_pos+0x2cd/0x380 [ 605.821275][ T7104] ? ksys_read+0x71/0x240 [ 605.825615][ T7104] ksys_read+0x140/0x240 [ 605.829869][ T7104] ? __cfi_ksys_read+0x10/0x10 [ 605.834665][ T7104] ? debug_smp_processor_id+0x17/0x20 [ 605.840113][ T7104] __x64_sys_read+0x7b/0x90 [ 605.844653][ T7104] x64_sys_call+0x2f/0x9a0 [ 605.849082][ T7104] do_syscall_64+0x4c/0xa0 [ 605.853503][ T7104] ? clear_bhb_loop+0x30/0x80 [ 605.858199][ T7104] ? clear_bhb_loop+0x30/0x80 [ 605.862903][ T7104] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 605.868831][ T7104] RIP: 0033:0x7f8f5218d5fc [ 605.873259][ T7104] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 605.879439][ T464] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 605.892878][ T7104] RSP: 002b:00007f8f52fe5030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 605.892907][ T7104] RAX: ffffffffffffffda RBX: 00007f8f523c5fa0 RCX: 00007f8f5218d5fc [ 605.892923][ T7104] RDX: 000000000000000f RSI: 00007f8f52fe50a0 RDI: 0000000000000003 [ 605.892953][ T7104] RBP: 00007f8f52fe5090 R08: 0000000000000000 R09: 0000000000000000 [ 605.892967][ T7104] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 605.892979][ T7104] R13: 00007f8f523c6038 R14: 00007f8f523c5fa0 R15: 00007ffc7c6b8978 [ 605.906137][ T464] usb 4-1: New USB device found, idVendor=056a, idProduct=032f, bcdDevice= 0.00 [ 605.914163][ T7104] [ 606.048185][ T464] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 606.067411][ T464] usb 4-1: config 0 descriptor?? [ 606.121644][ T7114] loop1: detected capacity change from 0 to 128 [ 606.138796][ T7114] FAT-fs (loop1): Directory bread(block 162) failed [ 606.145536][ T7114] FAT-fs (loop1): Directory bread(block 163) failed [ 606.152344][ T7114] FAT-fs (loop1): Directory bread(block 164) failed [ 606.159108][ T7114] FAT-fs (loop1): Directory bread(block 165) failed [ 606.165845][ T7114] FAT-fs (loop1): Directory bread(block 166) failed [ 606.172910][ T7114] FAT-fs (loop1): Directory bread(block 167) failed [ 606.179668][ T7114] FAT-fs (loop1): Directory bread(block 168) failed [ 606.186397][ T7114] FAT-fs (loop1): Directory bread(block 169) failed [ 606.348269][ T1630] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 606.472291][ T28] audit: type=1326 audit(1757016786.126:6527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7115 comm="syz.2.1793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b9f78ebe9 code=0x7ffc0000 [ 606.565630][ T28] audit: type=1326 audit(1757016786.126:6528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7115 comm="syz.2.1793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3b9f78ebe9 code=0x7ffc0000 [ 606.596927][ T28] audit: type=1326 audit(1757016786.126:6529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7115 comm="syz.2.1793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b9f78ebe9 code=0x7ffc0000 [ 606.621658][ T28] audit: type=1326 audit(1757016786.126:6530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7115 comm="syz.2.1793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3b9f78ebe9 code=0x7ffc0000 [ 606.645528][ T28] audit: type=1326 audit(1757016786.126:6531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7115 comm="syz.2.1793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b9f78ebe9 code=0x7ffc0000 [ 606.714676][ T28] audit: type=1326 audit(1757016786.126:6532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7115 comm="syz.2.1793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3b9f78ebe9 code=0x7ffc0000 [ 606.800397][ T28] audit: type=1326 audit(1757016786.126:6533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7115 comm="syz.2.1793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b9f78ebe9 code=0x7ffc0000 [ 606.878786][ T1630] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 606.978890][ T1630] usb 5-1: New USB device found, idVendor=056a, idProduct=032f, bcdDevice= 0.00 [ 606.988312][ T1630] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 607.006130][ T1630] usb 5-1: config 0 descriptor?? [ 607.623735][ T7126] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 607.631466][ T7126] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 607.657890][ T7126] device wg2 left promiscuous mode [ 607.823697][ T670] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 608.024740][ T670] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 608.079763][ T670] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 608.088394][ T670] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 608.096947][ T670] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 608.105542][ T670] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 608.114652][ T670] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 608.137377][ T670] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 608.170981][ T7139] loop1: detected capacity change from 0 to 128 [ 608.193205][ T7139] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 608.202319][ T7139] ext4 filesystem being mounted at /372/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 608.802064][ T464] usbhid 4-1:0.0: can't add hid device: -71 [ 608.901964][ T7146] loop3: detected capacity change from 0 to 256 [ 608.908487][ T464] usbhid: probe of 4-1:0.0 failed with error -71 [ 608.919714][ T464] usb 4-1: USB disconnect, device number 29 [ 608.943424][ T285] EXT4-fs (loop1): unmounting filesystem. [ 608.987491][ T7148] loop3: detected capacity change from 0 to 256 [ 609.009505][ T7148] FAT-fs (loop3): Directory bread(block 64) failed [ 609.024127][ T7148] FAT-fs (loop3): Directory bread(block 65) failed [ 609.027329][ T7151] loop1: detected capacity change from 0 to 512 [ 609.032383][ T7148] FAT-fs (loop3): Directory bread(block 66) failed [ 609.044376][ T7148] FAT-fs (loop3): Directory bread(block 67) failed [ 609.051864][ T7151] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 609.087938][ T7148] FAT-fs (loop3): Directory bread(block 68) failed [ 609.117400][ T7154] loop2: detected capacity change from 0 to 256 [ 609.124854][ T7148] FAT-fs (loop3): Directory bread(block 69) failed [ 609.152816][ T7156] loop1: detected capacity change from 0 to 256 [ 609.166548][ T7148] FAT-fs (loop3): Directory bread(block 70) failed [ 609.177248][ T7148] FAT-fs (loop3): Directory bread(block 71) failed [ 609.185299][ T7148] FAT-fs (loop3): Directory bread(block 72) failed [ 609.202987][ T7156] FAULT_INJECTION: forcing a failure. [ 609.202987][ T7156] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 609.204621][ T7148] FAT-fs (loop3): Directory bread(block 73) failed [ 609.217747][ T7156] CPU: 0 PID: 7156 Comm: syz.1.1803 Not tainted syzkaller #0 [ 609.230086][ T7156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 609.240157][ T7156] Call Trace: [ 609.243455][ T7156] [ 609.246406][ T7156] __dump_stack+0x21/0x24 [ 609.250773][ T7156] dump_stack_lvl+0xee/0x150 [ 609.255417][ T7156] ? __cfi_dump_stack_lvl+0x8/0x8 [ 609.260479][ T7156] ? mutex_unlock+0x89/0x220 [ 609.265098][ T7156] dump_stack+0x15/0x24 [ 609.269278][ T7156] should_fail_ex+0x3d4/0x520 [ 609.273986][ T7156] should_fail+0xb/0x10 [ 609.278169][ T7156] should_fail_usercopy+0x1a/0x20 [ 609.283210][ T7156] strncpy_from_user+0x24/0x2d0 [ 609.288077][ T7156] ? getname_flags+0xb9/0x500 [ 609.292766][ T7156] getname_flags+0xf4/0x500 [ 609.297283][ T7156] __x64_sys_mkdirat+0x7c/0xa0 [ 609.302050][ T7156] x64_sys_call+0x73d/0x9a0 [ 609.306555][ T7156] do_syscall_64+0x4c/0xa0 [ 609.310998][ T7156] ? clear_bhb_loop+0x30/0x80 [ 609.315676][ T7156] ? clear_bhb_loop+0x30/0x80 [ 609.320359][ T7156] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 609.326271][ T7156] RIP: 0033:0x7f8f5218d457 [ 609.330686][ T7156] Code: 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 609.350291][ T7156] RSP: 002b:00007f8f52fe4e68 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 609.358711][ T7156] RAX: ffffffffffffffda RBX: 00007f8f52fe4ef0 RCX: 00007f8f5218d457 [ 609.366682][ T7156] RDX: 00000000000001ff RSI: 0000200000000580 RDI: 00000000ffffff9c [ 609.374651][ T7156] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 609.382622][ T7156] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000580 [ 609.390607][ T7156] R13: 00007f8f52fe4eb0 R14: 0000000000000000 R15: 0000000000000000 [ 609.398582][ T7156] [ 609.460548][ T7159] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1802'. [ 609.471771][ T7159] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1802'. [ 609.498502][ T7159] FAULT_INJECTION: forcing a failure. [ 609.498502][ T7159] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 609.511660][ T7159] CPU: 1 PID: 7159 Comm: syz.5.1802 Not tainted syzkaller #0 [ 609.519053][ T7159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 609.529127][ T7159] Call Trace: [ 609.532419][ T7159] [ 609.535373][ T7159] __dump_stack+0x21/0x24 [ 609.539728][ T7159] dump_stack_lvl+0xee/0x150 [ 609.544342][ T7159] ? __cfi_dump_stack_lvl+0x8/0x8 [ 609.549386][ T7159] ? __schedule+0xb8f/0x14e0 [ 609.553992][ T7159] dump_stack+0x15/0x24 [ 609.558163][ T7159] should_fail_ex+0x3d4/0x520 [ 609.562866][ T7159] should_fail+0xb/0x10 [ 609.567044][ T7159] should_fail_usercopy+0x1a/0x20 [ 609.572084][ T7159] _copy_from_user+0x1e/0xc0 [ 609.576690][ T7159] iovec_from_user+0x1aa/0x2e0 [ 609.581467][ T7159] ? sysvec_reschedule_ipi+0x78/0x80 [ 609.586768][ T7159] __import_iovec+0x71/0x470 [ 609.591372][ T7159] import_iovec+0x7c/0xb0 [ 609.595715][ T7159] ___sys_sendmsg+0x1e4/0x290 [ 609.600400][ T7159] ? __sys_sendmsg+0x270/0x270 [ 609.605171][ T7159] ? copy_from_kernel_nofault+0x211/0x360 [ 609.611029][ T7159] ? __fdget+0x19c/0x220 [ 609.615281][ T7159] __x64_sys_sendmsg+0x1f0/0x2c0 [ 609.620226][ T7159] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 609.625715][ T7159] ? __kasan_check_write+0x14/0x20 [ 609.630858][ T7159] ? fpregs_restore_userregs+0x128/0x260 [ 609.636504][ T7159] ? switch_fpu_return+0xe/0x10 [ 609.641376][ T7159] x64_sys_call+0x171/0x9a0 [ 609.645895][ T7159] do_syscall_64+0x4c/0xa0 [ 609.650318][ T7159] ? clear_bhb_loop+0x30/0x80 [ 609.655014][ T7159] ? clear_bhb_loop+0x30/0x80 [ 609.659723][ T7159] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 609.665644][ T7159] RIP: 0033:0x7f55f318ebe9 [ 609.670081][ T7159] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 609.689705][ T7159] RSP: 002b:00007f55f4059038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 609.698138][ T7159] RAX: ffffffffffffffda RBX: 00007f55f33c6180 RCX: 00007f55f318ebe9 [ 609.706126][ T7159] RDX: 0000000000000000 RSI: 0000200000005840 RDI: 0000000000000009 [ 609.714110][ T7159] RBP: 00007f55f4059090 R08: 0000000000000000 R09: 0000000000000000 [ 609.722092][ T7159] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 609.730079][ T7159] R13: 00007f55f33c6218 R14: 00007f55f33c6180 R15: 00007fffea2ae158 [ 609.738078][ T7159] [ 609.922328][ T1630] usbhid 5-1:0.0: can't add hid device: -71 [ 609.942191][ T1630] usbhid: probe of 5-1:0.0 failed with error -71 [ 610.058826][ T1630] usb 5-1: USB disconnect, device number 23 [ 610.075881][ T7169] FAULT_INJECTION: forcing a failure. [ 610.075881][ T7169] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 610.410517][ T7169] CPU: 0 PID: 7169 Comm: syz.1.1808 Not tainted syzkaller #0 [ 610.417951][ T7169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 610.428035][ T7169] Call Trace: [ 610.431334][ T7169] [ 610.434274][ T7169] __dump_stack+0x21/0x24 [ 610.438624][ T7169] dump_stack_lvl+0xee/0x150 [ 610.443248][ T7169] ? __cfi_dump_stack_lvl+0x8/0x8 [ 610.448358][ T7169] dump_stack+0x15/0x24 [ 610.452540][ T7169] should_fail_ex+0x3d4/0x520 [ 610.457225][ T7169] should_fail+0xb/0x10 [ 610.461382][ T7169] should_fail_usercopy+0x1a/0x20 [ 610.466409][ T7169] _copy_from_user+0x1e/0xc0 [ 610.471002][ T7169] __se_sys_memfd_create+0x131/0x3b0 [ 610.476380][ T7169] __x64_sys_memfd_create+0x5b/0x70 [ 610.481590][ T7169] x64_sys_call+0x235/0x9a0 [ 610.486098][ T7169] do_syscall_64+0x4c/0xa0 [ 610.490522][ T7169] ? clear_bhb_loop+0x30/0x80 [ 610.495203][ T7169] ? clear_bhb_loop+0x30/0x80 [ 610.499886][ T7169] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 610.505781][ T7169] RIP: 0033:0x7f8f5218ebe9 [ 610.510199][ T7169] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 610.530155][ T7169] RSP: 002b:00007f8f52fe4e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 610.538583][ T7169] RAX: ffffffffffffffda RBX: 00000000000105c1 RCX: 00007f8f5218ebe9 [ 610.546569][ T7169] RDX: 00007f8f52fe4ef0 RSI: 0000000000000000 RDI: 00007f8f522127e8 [ 610.554548][ T7169] RBP: 0000200000000c00 R08: 00007f8f52fe4bb7 R09: 00007f8f52fe4e40 [ 610.562525][ T7169] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000000 [ 610.570496][ T7169] R13: 00007f8f52fe4ef0 R14: 00007f8f52fe4eb0 R15: 0000200000000180 [ 610.578475][ T7169] [ 610.589578][ T28] kauditd_printk_skb: 94 callbacks suppressed [ 610.589596][ T28] audit: type=1326 audit(1757016790.236:6628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7164 comm="syz.2.1805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f3b9f78ebe9 code=0x7ffc0000 [ 610.606847][ T7174] loop3: detected capacity change from 0 to 128 [ 610.624577][ T28] audit: type=1326 audit(1757016790.246:6629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7164 comm="syz.2.1805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b9f78ebe9 code=0x7ffc0000 [ 610.662826][ T28] audit: type=1326 audit(1757016790.246:6630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7164 comm="syz.2.1805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b9f78ebe9 code=0x7ffc0000 [ 610.686628][ T28] audit: type=1326 audit(1757016790.246:6631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7164 comm="syz.2.1805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f3b9f78ebe9 code=0x7ffc0000 [ 610.713663][ T7174] FAT-fs (loop3): Directory bread(block 162) failed [ 610.729632][ T7174] FAT-fs (loop3): Directory bread(block 163) failed [ 610.736399][ T28] audit: type=1326 audit(1757016790.246:6632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7164 comm="syz.2.1805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b9f78ebe9 code=0x7ffc0000 [ 610.747746][ T7174] FAT-fs (loop3): Directory bread(block 164) failed [ 610.786027][ T7174] FAT-fs (loop3): Directory bread(block 165) failed [ 610.794136][ T28] audit: type=1326 audit(1757016790.246:6633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7164 comm="syz.2.1805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b9f78ebe9 code=0x7ffc0000 [ 610.817865][ T7174] FAT-fs (loop3): Directory bread(block 166) failed [ 610.828769][ T7174] FAT-fs (loop3): Directory bread(block 167) failed [ 610.846753][ T7174] FAT-fs (loop3): Directory bread(block 168) failed [ 610.873004][ T7174] FAT-fs (loop3): Directory bread(block 169) failed [ 610.879864][ T28] audit: type=1326 audit(1757016790.246:6634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7164 comm="syz.2.1805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f3b9f78ebe9 code=0x7ffc0000 [ 610.919715][ T7185] FAULT_INJECTION: forcing a failure. [ 610.919715][ T7185] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 610.969051][ T7185] CPU: 1 PID: 7185 Comm: syz.4.1811 Not tainted syzkaller #0 [ 610.976517][ T7185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 610.986600][ T7185] Call Trace: [ 610.989898][ T7185] [ 610.992840][ T7185] __dump_stack+0x21/0x24 [ 610.997186][ T7185] dump_stack_lvl+0xee/0x150 [ 611.001803][ T7185] ? __cfi_dump_stack_lvl+0x8/0x8 [ 611.006857][ T7185] ? asm_exc_int3+0x3a/0x40 [ 611.011380][ T7185] dump_stack+0x15/0x24 [ 611.015558][ T7185] should_fail_ex+0x3d4/0x520 [ 611.020262][ T7185] should_fail+0xb/0x10 [ 611.024469][ T7185] should_fail_usercopy+0x1a/0x20 [ 611.029524][ T7185] strncpy_from_user+0x24/0x2d0 [ 611.034424][ T7185] ? getname_flags+0xb9/0x500 [ 611.039156][ T7185] getname_flags+0xf4/0x500 [ 611.043706][ T7185] getname+0x19/0x20 [ 611.047623][ T7185] do_sys_openat2+0xcb/0x7e0 [ 611.048910][ T7190] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1013 sclass=netlink_route_socket pid=7190 comm=syz.5.1812 [ 611.052257][ T7185] ? __kasan_check_write+0x14/0x20 [ 611.069963][ T7185] ? do_sys_open+0xe0/0xe0 [ 611.074408][ T7185] ? ksys_write+0x1eb/0x240 [ 611.078946][ T7185] ? __cfi_ksys_write+0x10/0x10 [ 611.083830][ T7185] __x64_sys_openat+0x136/0x160 [ 611.088709][ T7185] x64_sys_call+0x783/0x9a0 [ 611.093279][ T7185] do_syscall_64+0x4c/0xa0 [ 611.097711][ T7185] ? clear_bhb_loop+0x30/0x80 [ 611.102419][ T7185] ? clear_bhb_loop+0x30/0x80 [ 611.107126][ T7185] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 611.113039][ T7185] RIP: 0033:0x7f23db58ebe9 [ 611.117471][ T7185] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 611.137100][ T7185] RSP: 002b:00007f23dc362038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 611.145556][ T7185] RAX: ffffffffffffffda RBX: 00007f23db7c6090 RCX: 00007f23db58ebe9 [ 611.145582][ T7185] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 611.145599][ T7185] RBP: 00007f23dc362090 R08: 0000000000000000 R09: 0000000000000000 [ 611.145614][ T7185] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 611.145640][ T7185] R13: 00007f23db7c6128 R14: 00007f23db7c6090 R15: 00007ffd2553f438 [ 611.145661][ T7185] [ 611.146278][ T28] audit: type=1400 audit(1757016790.626:6635): avc: denied { nlmsg_read } for pid=7186 comm="syz.5.1812" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 611.203318][ T28] audit: type=1400 audit(1757016790.866:6636): avc: denied { accept } for pid=7188 comm="syz.1.1813" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 611.204579][ T28] audit: type=1400 audit(1757016790.866:6637): avc: denied { setopt } for pid=7195 comm="syz.5.1815" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 611.250463][ T7189] loop1: detected capacity change from 0 to 1024 [ 611.261581][ T7189] EXT4-fs: Ignoring removed i_version option [ 611.342378][ T7189] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:477: comm syz.1.1813: Invalid block bitmap block 0 in block_group 0 [ 611.342569][ T7189] EXT4-fs error (device loop1): ext4_acquire_dquot:6801: comm syz.1.1813: Failed to acquire dquot type 0 [ 611.342701][ T7189] EXT4-fs error (device loop1): ext4_free_blocks:6210: comm syz.1.1813: Freeing blocks not in datazone - block = 0, count = 4096 [ 611.342895][ T7189] EXT4-fs error (device loop1): ext4_read_inode_bitmap:140: comm syz.1.1813: Invalid inode bitmap blk 0 in block_group 0 [ 611.342993][ T7189] EXT4-fs error (device loop1) in ext4_free_inode:362: Corrupt filesystem [ 611.343091][ T7189] EXT4-fs (loop1): 1 orphan inode deleted [ 611.343114][ T7189] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 611.368684][ T1705] EXT4-fs error (device loop1): ext4_release_dquot:6837: comm kworker/u4:7: Failed to release dquot type 0 [ 611.390464][ T7201] Zero length message leads to an empty skb [ 611.443612][ T406] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 611.524808][ T7208] capability: warning: `syz.4.1819' uses 32-bit capabilities (legacy support in use) [ 611.628230][ T406] usb 3-1: Using ep0 maxpacket: 16 [ 611.634595][ T406] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 611.645616][ T406] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 611.655590][ T406] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 611.668506][ T406] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 611.677616][ T406] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 611.686437][ T406] usb 3-1: config 0 descriptor?? [ 611.814655][ T285] EXT4-fs (loop1): unmounting filesystem. [ 611.822543][ T7215] loop4: detected capacity change from 0 to 512 [ 611.832746][ T7215] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 611.847890][ T7215] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 611.863349][ T7215] EXT4-fs error (device loop4): ext4_find_inline_data_nolock:164: inode #17: comm syz.4.1821: inline data xattr refers to an external xattr inode [ 611.878715][ T7215] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.1821: couldn't read orphan inode 17 (err -117) [ 611.891228][ T7215] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 612.062079][ T7217] xt_CT: No such helper "netbios-ns" [ 612.197744][ T7224] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1821'. [ 612.431586][ T7224] EXT4-fs error (device loop4): ext4_lookup:1858: inode #15: comm syz.4.1821: iget: bad extra_isize 46 (inode size 256) [ 612.469744][ T406] microsoft 0003:045E:07DA.0028: ignoring exceeding usage max [ 612.478781][ T406] microsoft 0003:045E:07DA.0028: ignoring exceeding usage max [ 612.486280][ T406] microsoft 0003:045E:07DA.0028: usage index exceeded [ 612.493172][ T406] microsoft 0003:045E:07DA.0028: item 0 2 2 2 parsing failed [ 612.500816][ T406] microsoft 0003:045E:07DA.0028: parse failed [ 612.507005][ T406] microsoft: probe of 0003:045E:07DA.0028 failed with error -22 [ 612.787476][ T286] EXT4-fs (loop4): unmounting filesystem. [ 613.400606][ T7241] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 614.459189][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth3: link becomes ready [ 614.474252][ T7244] loop1: detected capacity change from 0 to 128 [ 614.485538][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth2: link becomes ready [ 614.569173][ T7244] syz.1.1827: attempt to access beyond end of device [ 614.569173][ T7244] loop1: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 614.626834][ T7251] loop2: detected capacity change from 0 to 256 [ 614.633224][ T6] usb 3-1: USB disconnect, device number 20 [ 615.164426][ T7257] FAULT_INJECTION: forcing a failure. [ 615.164426][ T7257] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 615.177572][ T7257] CPU: 0 PID: 7257 Comm: syz.4.1831 Not tainted syzkaller #0 [ 615.184964][ T7257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 615.195065][ T7257] Call Trace: [ 615.198354][ T7257] [ 615.201324][ T7257] __dump_stack+0x21/0x24 [ 615.205674][ T7257] dump_stack_lvl+0xee/0x150 [ 615.210284][ T7257] ? __cfi_dump_stack_lvl+0x8/0x8 [ 615.215335][ T7257] dump_stack+0x15/0x24 [ 615.219500][ T7257] should_fail_ex+0x3d4/0x520 [ 615.224197][ T7257] should_fail+0xb/0x10 [ 615.228376][ T7257] should_fail_usercopy+0x1a/0x20 [ 615.233425][ T7257] _copy_from_user+0x1e/0xc0 [ 615.238033][ T7257] iovec_from_user+0x1aa/0x2e0 [ 615.242820][ T7257] ? _parse_integer+0x2a/0x40 [ 615.247521][ T7257] __import_iovec+0x71/0x470 [ 615.252128][ T7257] import_iovec+0x7c/0xb0 [ 615.256481][ T7257] ___sys_sendmsg+0x1e4/0x290 [ 615.261174][ T7257] ? __sys_sendmsg+0x270/0x270 [ 615.265951][ T7257] ? __kasan_check_write+0x14/0x20 [ 615.271083][ T7257] ? proc_fail_nth_write+0x17a/0x1f0 [ 615.276391][ T7257] ? vfs_write+0x9d6/0xca0 [ 615.280832][ T7257] ? __kasan_check_read+0x11/0x20 [ 615.285877][ T7257] ? __fdget+0x15b/0x220 [ 615.290133][ T7257] __x64_sys_sendmsg+0x1f0/0x2c0 [ 615.295084][ T7257] ? __kasan_check_read+0x11/0x20 [ 615.300123][ T7257] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 615.305598][ T7257] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 615.311686][ T7257] x64_sys_call+0x171/0x9a0 [ 615.316214][ T7257] do_syscall_64+0x4c/0xa0 [ 615.320670][ T7257] ? clear_bhb_loop+0x30/0x80 [ 615.325377][ T7257] ? clear_bhb_loop+0x30/0x80 [ 615.330068][ T7257] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 615.335976][ T7257] RIP: 0033:0x7f23db58ebe9 [ 615.340405][ T7257] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 615.360106][ T7257] RSP: 002b:00007f23dc341038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 615.368536][ T7257] RAX: ffffffffffffffda RBX: 00007f23db7c6180 RCX: 00007f23db58ebe9 [ 615.376526][ T7257] RDX: 0000000000000000 RSI: 0000200000000480 RDI: 0000000000000008 [ 615.384505][ T7257] RBP: 00007f23dc341090 R08: 0000000000000000 R09: 0000000000000000 [ 615.392488][ T7257] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 615.400472][ T7257] R13: 00007f23db7c6218 R14: 00007f23db7c6180 R15: 00007ffd2553f438 [ 615.408459][ T7257] [ 615.565065][ T7251] FAT-fs (loop2): Unrecognized mount option "18446744073709551615" or missing value [ 615.688029][ T7244] syz.1.1827: attempt to access beyond end of device [ 615.688029][ T7244] loop1: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 615.717343][ T28] kauditd_printk_skb: 119 callbacks suppressed [ 615.717360][ T28] audit: type=1326 audit(1757016795.366:6754): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7260 comm="syz.3.1832" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdd7eb8ebe9 code=0x0 [ 615.804810][ T7244] syz.1.1827: attempt to access beyond end of device [ 615.804810][ T7244] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 615.821657][ T7263] loop3: detected capacity change from 0 to 512 [ 615.859927][ T7263] EXT4-fs: Ignoring removed nomblk_io_submit option [ 615.885372][ T7263] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 615.894174][ T7264] syz.1.1827: attempt to access beyond end of device [ 615.894174][ T7264] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 615.941799][ T7244] syz.1.1827: attempt to access beyond end of device [ 615.941799][ T7244] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 615.955819][ T7263] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 615.968268][ T7263] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 615.997407][ T7263] EXT4-fs (loop3): 1 truncate cleaned up [ 616.011636][ T7263] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 616.066187][ T7263] EXT4-fs error (device loop3): ext4_map_blocks:635: inode #2: block 4: comm syz.3.1832: lblock 0 mapped to illegal pblock 4 (length 1) [ 616.080501][ T7263] EXT4-fs (loop3): Remounting filesystem read-only [ 616.093044][ T7263] EXT4-fs error (device loop3): ext4_map_blocks:635: inode #2: block 4: comm syz.3.1832: lblock 0 mapped to illegal pblock 4 (length 1) [ 616.093112][ T28] audit: type=1400 audit(1757016795.746:6755): avc: denied { create } for pid=7260 comm="syz.3.1832" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=fifo_file permissive=1 [ 616.133006][ T7263] EXT4-fs (loop3): Remounting filesystem read-only [ 616.167739][ T7274] loop4: detected capacity change from 0 to 256 [ 616.185660][ T7274] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x76dfe2a7, utbl_chksum : 0xe619d30d) [ 616.199766][ T7274] exFAT-fs (loop4): failed to load alloc-bitmap [ 616.206098][ T7274] exFAT-fs (loop4): failed to recognize exfat type [ 617.220184][ T287] EXT4-fs (loop3): unmounting filesystem. [ 617.231382][ T28] audit: type=1326 audit(1757016796.886:6756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7279 comm="syz.1.1837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f5218ebe9 code=0x7ffc0000 [ 617.362618][ T7272] loop5: detected capacity change from 0 to 131072 [ 617.365089][ T28] audit: type=1326 audit(1757016796.896:6757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7279 comm="syz.1.1837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f5218ebe9 code=0x7ffc0000 [ 617.397592][ T7272] F2FS-fs (loop5): invalid crc value [ 617.405499][ T28] audit: type=1326 audit(1757016796.916:6758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7279 comm="syz.1.1837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8f5218ebe9 code=0x7ffc0000 [ 617.433795][ T28] audit: type=1326 audit(1757016796.916:6759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7279 comm="syz.1.1837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f5218ebe9 code=0x7ffc0000 [ 617.559620][ T7289] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 618.319606][ T7272] F2FS-fs (loop5): Found nat_bits in checkpoint [ 618.355199][ T28] audit: type=1326 audit(1757016796.916:6760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7279 comm="syz.1.1837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8f5218ebe9 code=0x7ffc0000 [ 618.386009][ T7290] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 618.406183][ T7294] loop4: detected capacity change from 0 to 128 [ 618.415472][ T7272] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 618.427173][ T7290] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1839'. [ 618.439243][ T7272] audit: audit_backlog=65 > audit_backlog_limit=64 [ 618.445788][ T7272] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 618.454262][ T7272] audit: backlog limit exceeded [ 618.483305][ T7294] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 618.495732][ T7294] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 618.505015][ T7272] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1834'. [ 619.775777][ T7304] loop1: detected capacity change from 0 to 131072 [ 619.802418][ T7304] F2FS-fs (loop1): invalid crc value [ 619.822535][ T43] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 619.896208][ T7304] F2FS-fs (loop1): Found nat_bits in checkpoint [ 619.970680][ T7304] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 620.041769][ T7312] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 620.081219][ T7304] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1841'. [ 620.144447][ T7313] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1843'. [ 620.155813][ T7313] xt_hashlimit: max too large, truncated to 1048576 [ 620.718315][ T403] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 620.798433][ T7325] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 621.108936][ T403] usb 4-1: Using ep0 maxpacket: 16 [ 621.127594][ T403] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 621.161595][ T403] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 621.254981][ T403] usb 4-1: config 0 has no interface number 0 [ 621.357248][ T403] usb 4-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 621.587913][ T403] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 621.598616][ T403] usb 4-1: Product: syz [ 621.603935][ T403] usb 4-1: Manufacturer: syz [ 621.618425][ T7334] loop2: detected capacity change from 0 to 16 [ 621.624725][ T403] usb 4-1: SerialNumber: syz [ 621.635560][ T403] usb 4-1: config 0 descriptor?? [ 621.650964][ T403] usb 4-1: Found UVC 0.00 device syz (046d:08f3) [ 621.663760][ T403] usb 4-1: No valid video chain found. [ 621.693994][ T7334] erofs: (device loop2): mounted with root inode @ nid 36. [ 621.786336][ T28] kauditd_printk_skb: 73 callbacks suppressed [ 621.786355][ T28] audit: type=1400 audit(1757016801.436:6834): avc: denied { read } for pid=7333 comm="syz.2.1849" name="file2" dev="loop2" ino=89 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 621.828668][ T28] audit: type=1400 audit(1757016801.466:6835): avc: denied { open } for pid=7333 comm="syz.2.1849" path="/376/file0/file2" dev="loop2" ino=89 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 621.854249][ T7318] 9pnet: Could not find request transport: fûGÈ#²CñÑ-g½µË®Œô©Gžçõ¢ER‹”w -Ù¸E"Êö{"©*æt [ 621.890566][ T28] audit: type=1400 audit(1757016801.546:6836): avc: denied { map } for pid=7333 comm="syz.2.1849" path="/376/file0/file2" dev="loop2" ino=89 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 622.458212][ T6] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 622.479082][ T1630] usb 4-1: USB disconnect, device number 30 [ 622.621611][ T7351] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1854'. [ 622.658176][ T6] usb 5-1: Using ep0 maxpacket: 16 [ 622.665120][ T6] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 622.675471][ T6] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 622.686597][ T6] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 622.695972][ T6] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 622.704234][ T6] usb 5-1: Product: syz [ 622.708670][ T6] usb 5-1: Manufacturer: syz [ 622.713349][ T6] usb 5-1: SerialNumber: syz [ 622.940451][ T7353] loop1: detected capacity change from 0 to 256 [ 622.950516][ T7353] exfat: Deprecated parameter 'utf8' [ 622.961031][ T7353] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 623.140681][ T6] usb 5-1: cannot find UAC_HEADER [ 623.147877][ T6] snd-usb-audio: probe of 5-1:1.0 failed with error -22 [ 623.427339][ T6] usb 5-1: USB disconnect, device number 24 [ 623.475869][ T28] audit: type=1326 audit(1757016803.126:6837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7358 comm="syz.5.1856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55f318ebe9 code=0x7ffc0000 [ 623.524148][ T28] audit: type=1326 audit(1757016803.156:6838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7358 comm="syz.5.1856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55f318ebe9 code=0x7ffc0000 [ 623.598773][ T28] audit: type=1326 audit(1757016803.156:6839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7358 comm="syz.5.1856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f55f318ebe9 code=0x7ffc0000 [ 623.656035][ T28] audit: type=1326 audit(1757016803.156:6840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7358 comm="syz.5.1856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55f318ebe9 code=0x7ffc0000 [ 623.696754][ T7364] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1857'. [ 623.715033][ T7364] xt_hashlimit: max too large, truncated to 1048576 [ 624.307169][ T28] audit: type=1326 audit(1757016803.156:6841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7358 comm="syz.5.1856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55f318ebe9 code=0x7ffc0000 [ 624.332568][ T285] audit: audit_backlog=65 > audit_backlog_limit=64 [ 624.332915][ T1913] udevd[1913]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 624.339471][ T285] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 [ 625.185344][ T7377] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 625.730418][ T736] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 625.873361][ T7393] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12336 sclass=netlink_route_socket pid=7393 comm=syz.5.1866 [ 625.916505][ T7393] xt_hashlimit: max too large, truncated to 1048576 [ 625.981831][ T736] usb 5-1: Using ep0 maxpacket: 32 [ 625.993611][ T736] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 626.122404][ T736] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 626.174001][ T736] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 626.192541][ T7388] bridge0: port 1(bridge_slave_0) entered blocking state [ 626.199946][ T7388] bridge0: port 1(bridge_slave_0) entered disabled state [ 626.208513][ T7388] device bridge_slave_0 entered promiscuous mode [ 626.208914][ T736] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 626.226587][ T7388] bridge0: port 2(bridge_slave_1) entered blocking state [ 626.238309][ T7388] bridge0: port 2(bridge_slave_1) entered disabled state [ 626.249546][ T7388] device bridge_slave_1 entered promiscuous mode [ 626.253376][ T736] usb 5-1: config 0 descriptor?? [ 626.389513][ T670] device bridge_slave_1 left promiscuous mode [ 626.396437][ T670] bridge0: port 2(bridge_slave_1) entered disabled state [ 626.407150][ T670] device bridge_slave_0 left promiscuous mode [ 626.420596][ T670] bridge0: port 1(bridge_slave_0) entered disabled state [ 626.433482][ T670] device veth1_macvtap left promiscuous mode [ 626.442773][ T670] device veth0_vlan left promiscuous mode [ 626.683006][ T736] savu 0003:1E7D:2D5A.0029: hiddev96,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.4-1/input0 [ 626.858281][ T28] kauditd_printk_skb: 131 callbacks suppressed [ 626.858342][ T28] audit: type=1400 audit(1757016806.436:6972): avc: denied { listen } for pid=7401 comm="syz.3.1867" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 627.000987][ T28] audit: type=1400 audit(1757016806.446:6973): avc: denied { accept } for pid=7401 comm="syz.3.1867" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 627.398346][ T7405] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12336 sclass=netlink_route_socket pid=7405 comm=syz.5.1868 [ 627.420929][ T7374] loop4: detected capacity change from 0 to 512 [ 627.445125][ T7405] xt_hashlimit: max too large, truncated to 1048576 [ 627.472886][ T7388] bridge0: port 2(bridge_slave_1) entered blocking state [ 627.479997][ T7388] bridge0: port 2(bridge_slave_1) entered forwarding state [ 627.487301][ T7388] bridge0: port 1(bridge_slave_0) entered blocking state [ 627.494376][ T7388] bridge0: port 1(bridge_slave_0) entered forwarding state [ 627.524757][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 627.528268][ T7374] EXT4-fs error (device loop4): ext4_orphan_get:1426: comm syz.4.1862: bad orphan inode 11 [ 627.536332][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 627.556512][ T7374] ext4_test_bit(bit=10, block=4) = 1 [ 627.557309][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 627.570258][ T7374] is_bad_inode(inode)=0 [ 627.574448][ T7374] NEXT_ORPHAN(inode)=2080374784 [ 627.583664][ T7374] max_ino=32 [ 627.590625][ T7374] i_nlink=0 [ 627.596550][ T7374] EXT4-fs (loop4): 1 truncate cleaned up [ 627.602890][ T7374] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 627.641018][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 627.662299][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 627.680287][ T19] usb 5-1: USB disconnect, device number 25 [ 627.689047][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 627.697154][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 627.742911][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 627.753949][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 627.771416][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 627.781083][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 627.795860][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 627.809183][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 627.818978][ T7388] device veth0_vlan entered promiscuous mode [ 627.834416][ T7388] device veth1_macvtap entered promiscuous mode [ 627.860459][ T28] audit: type=1400 audit(1757016807.516:6974): avc: denied { mounton } for pid=7388 comm="syz-executor" path="/root/syzkaller.P9xQ42/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 627.903414][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 627.923072][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 627.942781][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 628.069998][ T7423] xt_hashlimit: max too large, truncated to 1048576 [ 628.219600][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 628.242558][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 628.251233][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 628.259640][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 628.268637][ T7422] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1871'. [ 628.307258][ T28] audit: type=1400 audit(1757016807.956:6975): avc: denied { setopt } for pid=7424 comm="syz.6.1874" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 628.329129][ T7416] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 393: padding at end of block bitmap is not set [ 628.391691][ T286] EXT4-fs (loop4): unmounting filesystem. [ 628.400263][ T7428] loop6: detected capacity change from 0 to 128 [ 628.551442][ T7435] loop6: detected capacity change from 0 to 256 [ 628.560006][ T7433] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1875'. [ 628.569500][ T7433] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 628.638998][ T7436] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 628.829755][ T736] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 628.887332][ T7435] FAULT_INJECTION: forcing a failure. [ 628.887332][ T7435] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 628.908396][ T7435] CPU: 0 PID: 7435 Comm: syz.6.1876 Not tainted syzkaller #0 [ 628.915832][ T7435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 628.925916][ T7435] Call Trace: [ 628.929221][ T7435] [ 628.932176][ T7435] __dump_stack+0x21/0x24 [ 628.936534][ T7435] dump_stack_lvl+0xee/0x150 [ 628.941175][ T7435] ? __cfi_dump_stack_lvl+0x8/0x8 [ 628.946247][ T7435] ? getname_flags+0xb9/0x500 [ 628.950963][ T7435] ? proc_fail_nth_write+0x17a/0x1f0 [ 628.956270][ T7435] dump_stack+0x15/0x24 [ 628.960430][ T7435] should_fail_ex+0x3d4/0x520 [ 628.965141][ T7435] should_fail+0xb/0x10 [ 628.969377][ T7435] should_fail_usercopy+0x1a/0x20 [ 628.974421][ T7435] strncpy_from_user+0x24/0x2d0 [ 628.979284][ T7435] ? getname_flags+0xb9/0x500 [ 628.984000][ T7435] getname_flags+0xf4/0x500 [ 628.988515][ T7435] getname+0x19/0x20 [ 628.992430][ T7435] do_sys_openat2+0xcb/0x7e0 [ 628.997031][ T7435] ? __kasan_check_write+0x14/0x20 [ 629.002188][ T7435] ? do_sys_open+0xe0/0xe0 [ 629.006646][ T7435] ? ksys_write+0x1eb/0x240 [ 629.011189][ T7435] ? __cfi_ksys_write+0x10/0x10 [ 629.016081][ T7435] __x64_sys_open+0x11c/0x140 [ 629.020792][ T7435] x64_sys_call+0x97b/0x9a0 [ 629.025326][ T7435] do_syscall_64+0x4c/0xa0 [ 629.029770][ T7435] ? clear_bhb_loop+0x30/0x80 [ 629.034478][ T7435] ? clear_bhb_loop+0x30/0x80 [ 629.039185][ T7435] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 629.045168][ T7435] RIP: 0033:0x7f5a7218ebe9 [ 629.049610][ T7435] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 629.069244][ T7435] RSP: 002b:00007f5a72f9c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 629.077692][ T7435] RAX: ffffffffffffffda RBX: 00007f5a723c5fa0 RCX: 00007f5a7218ebe9 [ 629.085702][ T7435] RDX: 0000000000000000 RSI: 0000000000141840 RDI: 00002000000002c0 [ 629.093705][ T7435] RBP: 00007f5a72f9c090 R08: 0000000000000000 R09: 0000000000000000 [ 629.099364][ T736] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 629.101699][ T7435] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 629.116294][ T736] usb 3-1: config 0 has no interface number 0 [ 629.117646][ T7435] R13: 00007f5a723c6038 R14: 00007f5a723c5fa0 R15: 00007ffcb4cd5ec8 [ 629.131688][ T7435] [ 629.210132][ T736] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 629.221277][ T736] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 629.231240][ T736] usb 3-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 629.247034][ T736] usb 3-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 629.256294][ T736] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 629.268707][ T736] usb 3-1: config 0 descriptor?? [ 629.664765][ T28] audit: type=1400 audit(1757016809.316:6976): avc: denied { read write } for pid=7451 comm="syz.4.1880" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 629.692323][ T28] audit: type=1400 audit(1757016809.336:6977): avc: denied { open } for pid=7451 comm="syz.4.1880" path="/dev/raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 629.693421][ T736] usbhid 3-1:0.1: can't add hid device: -71 [ 629.715903][ T28] audit: type=1400 audit(1757016809.336:6978): avc: denied { ioctl } for pid=7451 comm="syz.4.1880" path="/dev/raw-gadget" dev="devtmpfs" ino=258 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 629.749740][ T736] usbhid: probe of 3-1:0.1 failed with error -71 [ 629.822147][ T28] audit: type=1400 audit(1757016809.476:6979): avc: denied { read write } for pid=6821 comm="syz-executor" name="loop5" dev="devtmpfs" ino=123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 629.840163][ T736] usb 3-1: USB disconnect, device number 21 [ 629.873329][ T28] audit: type=1400 audit(1757016809.476:6980): avc: denied { open } for pid=6821 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 629.927615][ T28] audit: type=1400 audit(1757016809.476:6981): avc: denied { ioctl } for pid=6821 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=123 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 630.028277][ T1630] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 630.210406][ T1630] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 630.279612][ T1630] usb 5-1: New USB device found, idVendor=056a, idProduct=032f, bcdDevice= 0.00 [ 630.316759][ T1630] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 630.330138][ T7462] loop2: detected capacity change from 0 to 512 [ 630.336884][ T7462] ext4: Unknown parameter 'smackfstransmute' [ 630.347831][ T1630] usb 5-1: config 0 descriptor?? [ 630.904659][ T7477] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1888'. [ 630.925120][ T7477] xt_hashlimit: max too large, truncated to 1048576 [ 631.559230][ T7487] loop6: detected capacity change from 0 to 512 [ 631.891159][ T7490] FAULT_INJECTION: forcing a failure. [ 631.891159][ T7490] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 631.904281][ T7490] CPU: 0 PID: 7490 Comm: syz.6.1891 Not tainted syzkaller #0 [ 631.911674][ T7490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 631.921749][ T7490] Call Trace: [ 631.925043][ T7490] [ 631.927987][ T7490] __dump_stack+0x21/0x24 [ 631.932334][ T7490] dump_stack_lvl+0xee/0x150 [ 631.936957][ T7490] ? __cfi_dump_stack_lvl+0x8/0x8 [ 631.942014][ T7490] ? memcpy+0x56/0x70 [ 631.946010][ T7490] dump_stack+0x15/0x24 [ 631.950230][ T7490] should_fail_ex+0x3d4/0x520 [ 631.954942][ T7490] should_fail+0xb/0x10 [ 631.959127][ T7490] should_fail_usercopy+0x1a/0x20 [ 631.964178][ T7490] strncpy_from_user+0x24/0x2d0 [ 631.969056][ T7490] bpf_prog_load+0x1bb/0x15a0 [ 631.973843][ T7490] ? map_freeze+0x390/0x390 [ 631.978378][ T7490] ? selinux_bpf+0xc7/0xf0 [ 631.982825][ T7490] ? security_bpf+0x93/0xb0 [ 631.987377][ T7490] __sys_bpf+0x504/0x780 [ 631.991650][ T7490] ? bpf_link_show_fdinfo+0x320/0x320 [ 631.997067][ T7490] ? __cfi_ksys_write+0x10/0x10 [ 632.001963][ T7490] ? debug_smp_processor_id+0x17/0x20 [ 632.007365][ T7490] __x64_sys_bpf+0x7c/0x90 [ 632.011820][ T7490] x64_sys_call+0x488/0x9a0 [ 632.016351][ T7490] do_syscall_64+0x4c/0xa0 [ 632.020782][ T7490] ? clear_bhb_loop+0x30/0x80 [ 632.025494][ T7490] ? clear_bhb_loop+0x30/0x80 [ 632.030197][ T7490] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 632.036117][ T7490] RIP: 0033:0x7f5a7218ebe9 [ 632.040546][ T7490] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 632.060169][ T7490] RSP: 002b:00007f5a72f5a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 632.068607][ T7490] RAX: ffffffffffffffda RBX: 00007f5a723c6180 RCX: 00007f5a7218ebe9 [ 632.076601][ T7490] RDX: 0000000000000080 RSI: 0000200000000300 RDI: 0000000000000005 [ 632.084585][ T7490] RBP: 00007f5a72f5a090 R08: 0000000000000000 R09: 0000000000000000 [ 632.092570][ T7490] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 632.100560][ T7490] R13: 00007f5a723c6218 R14: 00007f5a723c6180 R15: 00007ffcb4cd5ec8 [ 632.108726][ T7490] [ 632.550998][ T28] kauditd_printk_skb: 73 callbacks suppressed [ 632.551017][ T28] audit: type=1400 audit(1757016811.346:7055): avc: denied { ioctl } for pid=7478 comm="syz.3.1889" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=36560 ioctlcmd=0xaa00 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 632.589400][ T28] audit: type=1400 audit(1757016811.376:7056): avc: denied { read } for pid=7451 comm="syz.4.1880" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 632.612790][ T28] audit: type=1400 audit(1757016811.376:7057): avc: denied { open } for pid=7451 comm="syz.4.1880" path="/dev/kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 632.648197][ T1630] usbhid 5-1:0.0: can't add hid device: -71 [ 632.655625][ T7496] FAULT_INJECTION: forcing a failure. [ 632.655625][ T7496] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 632.669773][ T28] audit: type=1400 audit(1757016812.306:7058): avc: denied { create } for pid=7495 comm="syz.6.1893" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 632.682478][ T7496] CPU: 0 PID: 7496 Comm: syz.6.1893 Not tainted syzkaller #0 [ 632.690859][ T1630] usbhid: probe of 5-1:0.0 failed with error -71 [ 632.697760][ T7496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 632.697776][ T7496] Call Trace: [ 632.697783][ T7496] [ 632.697791][ T7496] __dump_stack+0x21/0x24 [ 632.710470][ T1630] usb 5-1: USB disconnect, device number 26 [ 632.714175][ T7496] dump_stack_lvl+0xee/0x150 [ 632.735204][ T7496] ? __cfi_dump_stack_lvl+0x8/0x8 [ 632.740270][ T7496] dump_stack+0x15/0x24 [ 632.744456][ T7496] should_fail_ex+0x3d4/0x520 [ 632.749170][ T7496] should_fail+0xb/0x10 [ 632.753358][ T7496] should_fail_usercopy+0x1a/0x20 [ 632.758418][ T7496] _copy_from_user+0x1e/0xc0 [ 632.763027][ T28] audit: type=1400 audit(1757016812.416:7059): avc: denied { mount } for pid=7493 comm="syz.3.1894" name="/" dev="configfs" ino=14801 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 632.763045][ T7496] iovec_from_user+0x1aa/0x2e0 [ 632.790588][ T7496] ? _parse_integer+0x2a/0x40 [ 632.791214][ T7497] loop3: detected capacity change from 0 to 512 [ 632.795301][ T7496] __import_iovec+0x71/0x470 [ 632.795336][ T7496] import_iovec+0x7c/0xb0 [ 632.810494][ T7496] ___sys_sendmsg+0x1e4/0x290 [ 632.815209][ T7496] ? __sys_sendmsg+0x270/0x270 [ 632.820005][ T7496] ? __kasan_check_write+0x14/0x20 [ 632.821453][ T7497] ext4: Unknown parameter 'fsuuid' [ 632.825150][ T7496] ? proc_fail_nth_write+0x17a/0x1f0 [ 632.825181][ T7496] ? vfs_write+0x9d6/0xca0 [ 632.840018][ T7496] ? __fdget+0x19c/0x220 [ 632.844274][ T7496] __x64_sys_sendmsg+0x1f0/0x2c0 [ 632.849223][ T7496] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 632.854690][ T7496] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 632.860763][ T7496] x64_sys_call+0x171/0x9a0 [ 632.865278][ T7496] do_syscall_64+0x4c/0xa0 [ 632.869700][ T7496] ? clear_bhb_loop+0x30/0x80 [ 632.874383][ T7496] ? clear_bhb_loop+0x30/0x80 [ 632.879063][ T7496] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 632.884960][ T7496] RIP: 0033:0x7f5a7218ebe9 [ 632.889379][ T7496] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 632.908986][ T7496] RSP: 002b:00007f5a72f9c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 632.917404][ T7496] RAX: ffffffffffffffda RBX: 00007f5a723c5fa0 RCX: 00007f5a7218ebe9 [ 632.925380][ T7496] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 632.933351][ T7496] RBP: 00007f5a72f9c090 R08: 0000000000000000 R09: 0000000000000000 [ 632.941329][ T7496] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 632.949317][ T7496] R13: 00007f5a723c6038 R14: 00007f5a723c5fa0 R15: 00007ffcb4cd5ec8 [ 632.957299][ T7496] [ 632.970769][ T28] audit: type=1400 audit(1757016812.446:7060): avc: denied { search } for pid=7493 comm="syz.3.1894" name="/" dev="configfs" ino=14801 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 632.993431][ T28] audit: type=1400 audit(1757016812.446:7061): avc: denied { setattr } for pid=7493 comm="syz.3.1894" name="/" dev="configfs" ino=14801 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 633.012869][ T7502] loop6: detected capacity change from 0 to 512 [ 633.153949][ T28] audit: type=1400 audit(1757016812.806:7062): avc: denied { create } for pid=7493 comm="syz.3.1894" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 633.173772][ T28] audit: type=1400 audit(1757016812.816:7063): avc: denied { unmount } for pid=6821 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 633.570321][ T28] audit: type=1400 audit(1757016812.856:7064): avc: denied { setopt } for pid=7493 comm="syz.3.1894" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 633.611323][ T7509] loop4: detected capacity change from 0 to 512 [ 635.165935][ T7535] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1902'. [ 635.175482][ T7535] xt_hashlimit: max too large, truncated to 1048576 [ 635.993900][ T7542] loop6: detected capacity change from 0 to 256 [ 637.563691][ T28] kauditd_printk_skb: 12 callbacks suppressed [ 637.563709][ T28] audit: type=1400 audit(1757016817.216:7077): avc: denied { ioctl } for pid=7543 comm="syz.3.1906" path="/dev/kvm" dev="devtmpfs" ino=83 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 638.217087][ T7552] loop4: detected capacity change from 0 to 256 [ 638.319387][ T7552] FAULT_INJECTION: forcing a failure. [ 638.319387][ T7552] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 638.426941][ T28] audit: type=1400 audit(1757016817.266:7078): avc: denied { validate_trans } for pid=7543 comm="syz.3.1906" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 638.461306][ T7552] CPU: 0 PID: 7552 Comm: syz.4.1908 Not tainted syzkaller #0 [ 638.468733][ T7552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 638.478810][ T7552] Call Trace: [ 638.482100][ T7552] [ 638.485039][ T7552] __dump_stack+0x21/0x24 [ 638.489381][ T7552] dump_stack_lvl+0xee/0x150 [ 638.493999][ T7552] ? __cfi_dump_stack_lvl+0x8/0x8 [ 638.499059][ T7552] dump_stack+0x15/0x24 [ 638.503224][ T7552] should_fail_ex+0x3d4/0x520 [ 638.507927][ T7552] should_fail+0xb/0x10 [ 638.512101][ T7552] should_fail_usercopy+0x1a/0x20 [ 638.517153][ T7552] strncpy_from_user+0x24/0x2d0 [ 638.522023][ T7552] ? getname_flags+0xb9/0x500 [ 638.526725][ T7552] getname_flags+0xf4/0x500 [ 638.531250][ T7552] getname+0x19/0x20 [ 638.535183][ T7552] do_sys_openat2+0xcb/0x7e0 [ 638.539790][ T7552] ? do_sys_open+0xe0/0xe0 [ 638.544231][ T7552] ? release_firmware_map_entry+0x194/0x194 [ 638.550136][ T7552] ? ksys_write+0x1eb/0x240 [ 638.554671][ T7552] __x64_sys_openat+0x136/0x160 [ 638.559538][ T7552] x64_sys_call+0x783/0x9a0 [ 638.564060][ T7552] do_syscall_64+0x4c/0xa0 [ 638.568485][ T7552] ? clear_bhb_loop+0x30/0x80 [ 638.573181][ T7552] ? clear_bhb_loop+0x30/0x80 [ 638.577875][ T7552] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 638.583802][ T7552] RIP: 0033:0x7f23db58ebe9 [ 638.588239][ T7552] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 638.607862][ T7552] RSP: 002b:00007f23dc383038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 638.616301][ T7552] RAX: ffffffffffffffda RBX: 00007f23db7c5fa0 RCX: 00007f23db58ebe9 [ 638.624289][ T7552] RDX: 000000000000275a RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 638.632276][ T7552] RBP: 00007f23dc383090 R08: 0000000000000000 R09: 0000000000000000 [ 638.640258][ T7552] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 638.648245][ T7552] R13: 00007f23db7c6038 R14: 00007f23db7c5fa0 R15: 00007ffd2553f438 [ 638.656241][ T7552] [ 638.705761][ T28] audit: type=1400 audit(1757016817.316:7079): avc: denied { unmount } for pid=7388 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 638.736436][ T7559] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1910'. [ 638.776133][ T7559] loop5: detected capacity change from 0 to 256 [ 638.796850][ T28] audit: type=1400 audit(1757016818.446:7080): avc: denied { create } for pid=7561 comm="syz.2.1911" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 638.880626][ T28] audit: type=1400 audit(1757016818.486:7081): avc: denied { write } for pid=7558 comm="syz.5.1910" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 638.985294][ T28] audit: type=1400 audit(1757016818.586:7082): avc: denied { read write } for pid=7564 comm="syz.5.1914" name="vhost-vsock" dev="devtmpfs" ino=268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 639.394259][ T7576] loop3: detected capacity change from 0 to 1024 [ 639.401073][ T7576] ext4: Unknown parameter 'nouser_xattr' [ 639.437290][ T7576] FAULT_INJECTION: forcing a failure. [ 639.437290][ T7576] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 639.450610][ T7576] CPU: 1 PID: 7576 Comm: syz.3.1915 Not tainted syzkaller #0 [ 639.458021][ T7576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 639.468090][ T7576] Call Trace: [ 639.471386][ T7576] [ 639.474328][ T7576] __dump_stack+0x21/0x24 [ 639.478679][ T7576] dump_stack_lvl+0xee/0x150 [ 639.483297][ T7576] ? __cfi_dump_stack_lvl+0x8/0x8 [ 639.488352][ T7576] dump_stack+0x15/0x24 [ 639.492529][ T7576] should_fail_ex+0x3d4/0x520 [ 639.497228][ T7576] should_fail+0xb/0x10 [ 639.501399][ T7576] should_fail_usercopy+0x1a/0x20 [ 639.506443][ T7576] _copy_from_user+0x1e/0xc0 [ 639.511051][ T7576] iovec_from_user+0x1aa/0x2e0 [ 639.515846][ T7576] ? __this_cpu_preempt_check+0x13/0x20 [ 639.521423][ T7576] __import_iovec+0x71/0x470 [ 639.526041][ T7576] import_iovec+0x7c/0xb0 [ 639.530403][ T7576] ___sys_sendmsg+0x1e4/0x290 [ 639.535098][ T7576] ? __sys_sendmsg+0x270/0x270 [ 639.539879][ T7576] ? asm_sysvec_reschedule_ipi+0x1b/0x20 [ 639.545534][ T7576] ? vfs_write+0x9d6/0xca0 [ 639.549978][ T7576] ? __fdget+0x19c/0x220 [ 639.554232][ T7576] __x64_sys_sendmsg+0x1f0/0x2c0 [ 639.559183][ T7576] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 639.564656][ T7576] ? __kasan_check_write+0x14/0x20 [ 639.569815][ T7576] ? fpregs_restore_userregs+0x128/0x260 [ 639.575467][ T7576] ? switch_fpu_return+0xe/0x10 [ 639.580339][ T7576] x64_sys_call+0x171/0x9a0 [ 639.584863][ T7576] do_syscall_64+0x4c/0xa0 [ 639.589292][ T7576] ? clear_bhb_loop+0x30/0x80 [ 639.593991][ T7576] ? clear_bhb_loop+0x30/0x80 [ 639.598690][ T7576] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 639.604603][ T7576] RIP: 0033:0x7fdd7eb8ebe9 [ 639.609059][ T7576] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 639.628775][ T7576] RSP: 002b:00007fdd7f97e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 639.637214][ T7576] RAX: ffffffffffffffda RBX: 00007fdd7edc6180 RCX: 00007fdd7eb8ebe9 [ 639.645254][ T7576] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000008 [ 639.653243][ T7576] RBP: 00007fdd7f97e090 R08: 0000000000000000 R09: 0000000000000000 [ 639.661318][ T7576] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 639.669303][ T7576] R13: 00007fdd7edc6218 R14: 00007fdd7edc6180 R15: 00007ffd37d57108 [ 639.677306][ T7576] [ 640.010626][ T7583] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1916'. [ 640.022419][ T7583] xt_hashlimit: max too large, truncated to 1048576 [ 640.297446][ T28] audit: type=1400 audit(1757016818.586:7083): avc: denied { open } for pid=7564 comm="syz.5.1914" path="/dev/vhost-vsock" dev="devtmpfs" ino=268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 640.355258][ T28] audit: type=1400 audit(1757016818.586:7084): avc: denied { ioctl } for pid=7564 comm="syz.5.1914" path="/dev/vhost-vsock" dev="devtmpfs" ino=268 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 640.375811][ T7586] FAULT_INJECTION: forcing a failure. [ 640.375811][ T7586] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 640.381227][ T28] audit: type=1326 audit(1757016819.576:7085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7579 comm="syz.4.1917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23db58ebe9 code=0x7ffc0000 [ 640.417836][ T28] audit: type=1326 audit(1757016819.576:7086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7579 comm="syz.4.1917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23db58ebe9 code=0x7ffc0000 [ 640.441419][ T7586] CPU: 1 PID: 7586 Comm: syz.6.1918 Not tainted syzkaller #0 [ 640.448833][ T7586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 640.458913][ T7586] Call Trace: [ 640.462216][ T7586] [ 640.465185][ T7586] __dump_stack+0x21/0x24 [ 640.469536][ T7586] dump_stack_lvl+0xee/0x150 [ 640.474156][ T7586] ? __cfi_dump_stack_lvl+0x8/0x8 [ 640.479212][ T7586] dump_stack+0x15/0x24 [ 640.483394][ T7586] should_fail_ex+0x3d4/0x520 [ 640.488186][ T7586] should_fail+0xb/0x10 [ 640.492411][ T7586] should_fail_usercopy+0x1a/0x20 [ 640.497442][ T7586] _copy_from_iter+0x190/0xfd0 [ 640.502273][ T7586] ? __cfi__copy_from_iter+0x10/0x10 [ 640.507561][ T7586] ? __cfi_avc_has_perm_noaudit+0x10/0x10 [ 640.513287][ T7586] copy_page_from_iter+0x1d2/0x2b0 [ 640.518400][ T7586] ? skb_page_frag_refill+0x221/0x3a0 [ 640.523775][ T7586] tun_get_user+0x807/0x3320 [ 640.528452][ T7586] ? tun_do_read+0x1c20/0x1c20 [ 640.533215][ T7586] ? __kasan_check_write+0x14/0x20 [ 640.538335][ T7586] ? ref_tracker_alloc+0x30f/0x430 [ 640.543448][ T7586] ? file_has_perm+0x4a1/0x640 [ 640.548225][ T7586] ? __cfi_ref_tracker_alloc+0x10/0x10 [ 640.553694][ T7586] ? selinux_file_permission+0x3ef/0x510 [ 640.559327][ T7586] tun_chr_write_iter+0x1fb/0x300 [ 640.564441][ T7586] vfs_write+0x5db/0xca0 [ 640.568691][ T7586] ? slab_free_freelist_hook+0xc2/0x190 [ 640.574250][ T7586] ? __cfi_vfs_write+0x10/0x10 [ 640.579023][ T7586] ? __fget_files+0x2d5/0x330 [ 640.583699][ T7586] ? __fdget_pos+0x1f2/0x380 [ 640.588285][ T7586] ? ksys_write+0x71/0x240 [ 640.592724][ T7586] ksys_write+0x140/0x240 [ 640.597060][ T7586] ? __cfi_ksys_write+0x10/0x10 [ 640.601920][ T7586] ? debug_smp_processor_id+0x17/0x20 [ 640.607315][ T7586] __x64_sys_write+0x7b/0x90 [ 640.611943][ T7586] x64_sys_call+0x27b/0x9a0 [ 640.616456][ T7586] do_syscall_64+0x4c/0xa0 [ 640.620871][ T7586] ? clear_bhb_loop+0x30/0x80 [ 640.625573][ T7586] ? clear_bhb_loop+0x30/0x80 [ 640.630257][ T7586] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 640.636152][ T7586] RIP: 0033:0x7f5a7218d69f [ 640.640588][ T7586] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 640.660191][ T7586] RSP: 002b:00007f5a72f9c000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 640.668609][ T7586] RAX: ffffffffffffffda RBX: 00007f5a723c5fa0 RCX: 00007f5a7218d69f [ 640.676581][ T7586] RDX: 000000000000005e RSI: 00002000000004c0 RDI: 00000000000000c8 [ 640.684552][ T7586] RBP: 00007f5a72f9c090 R08: 0000000000000000 R09: 0000000000000000 [ 640.692521][ T7586] R10: 000000000000005e R11: 0000000000000293 R12: 0000000000000001 [ 640.700492][ T7586] R13: 00007f5a723c6038 R14: 00007f5a723c5fa0 R15: 00007ffcb4cd5ec8 [ 640.708469][ T7586] [ 640.822403][ T7591] loop2: detected capacity change from 0 to 256 [ 640.841933][ T7593] loop6: detected capacity change from 0 to 256 [ 640.878005][ T7591] FAULT_INJECTION: forcing a failure. [ 640.878005][ T7591] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 640.919251][ T7593] incfs: Can't find or create .incomplete dir in ./file0 [ 640.954859][ T7593] incfs: mount failed -28 [ 640.959725][ T7591] CPU: 0 PID: 7591 Comm: syz.2.1921 Not tainted syzkaller #0 [ 640.967117][ T7591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 640.977181][ T7591] Call Trace: [ 640.980471][ T7591] [ 640.983410][ T7591] __dump_stack+0x21/0x24 [ 640.987760][ T7591] dump_stack_lvl+0xee/0x150 [ 640.992372][ T7591] ? __cfi_dump_stack_lvl+0x8/0x8 [ 640.997423][ T7591] dump_stack+0x15/0x24 [ 641.001602][ T7591] should_fail_ex+0x3d4/0x520 [ 641.006327][ T7591] should_fail+0xb/0x10 [ 641.010502][ T7591] should_fail_usercopy+0x1a/0x20 [ 641.015557][ T7591] _copy_from_user+0x1e/0xc0 [ 641.020169][ T7591] strndup_user+0xb6/0x150 [ 641.024614][ T7591] __se_sys_mount+0x9c/0x380 [ 641.029227][ T7591] ? fput+0x154/0x1a0 [ 641.033230][ T7591] ? __x64_sys_mount+0xd0/0xd0 [ 641.038013][ T7591] ? __cfi_ksys_write+0x10/0x10 [ 641.042888][ T7591] __x64_sys_mount+0xbf/0xd0 [ 641.047502][ T7591] x64_sys_call+0x65d/0x9a0 [ 641.052019][ T7591] do_syscall_64+0x4c/0xa0 [ 641.056448][ T7591] ? clear_bhb_loop+0x30/0x80 [ 641.061135][ T7591] ? clear_bhb_loop+0x30/0x80 [ 641.065821][ T7591] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 641.071734][ T7591] RIP: 0033:0x7f3b9f78ebe9 [ 641.076164][ T7591] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 641.095785][ T7591] RSP: 002b:00007f3ba0560038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 641.104240][ T7591] RAX: ffffffffffffffda RBX: 00007f3b9f9c5fa0 RCX: 00007f3b9f78ebe9 [ 641.112234][ T7591] RDX: 0000200000000000 RSI: 0000200000000100 RDI: 0000200000000080 [ 641.120219][ T7591] RBP: 00007f3ba0560090 R08: 0000000000000000 R09: 0000000000000000 [ 641.128207][ T7591] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 641.136186][ T7591] R13: 00007f3b9f9c6038 R14: 00007f3b9f9c5fa0 R15: 00007ffcf000f518 [ 641.144177][ T7591] [ 641.260795][ T7597] raw_sendmsg: syz.6.1922 forgot to set AF_INET. Fix it! [ 641.281957][ T7599] loop2: detected capacity change from 0 to 256 [ 641.405572][ T7601] IPv6: addrconf: prefix option has invalid lifetime [ 641.468666][ T1705] Bluetooth: hci0: Frame reassembly failed (-84) [ 642.986948][ T7619] loop3: detected capacity change from 0 to 128 [ 643.008866][ T7619] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 643.133132][ T7622] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1929'. [ 643.234392][ T7626] FAULT_INJECTION: forcing a failure. [ 643.234392][ T7626] name failslab, interval 1, probability 0, space 0, times 0 [ 643.247154][ T7626] CPU: 1 PID: 7626 Comm: syz.6.1930 Not tainted syzkaller #0 [ 643.254550][ T7626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 643.264615][ T7626] Call Trace: [ 643.267903][ T7626] [ 643.270863][ T7626] __dump_stack+0x21/0x24 [ 643.275204][ T7626] dump_stack_lvl+0xee/0x150 [ 643.279812][ T7626] ? __cfi_dump_stack_lvl+0x8/0x8 [ 643.284855][ T7626] dump_stack+0x15/0x24 [ 643.289023][ T7626] should_fail_ex+0x3d4/0x520 [ 643.293727][ T7626] ? security_inode_alloc+0x33/0x120 [ 643.299026][ T7626] __should_failslab+0xac/0xf0 [ 643.303822][ T7626] should_failslab+0x9/0x20 [ 643.308330][ T7626] kmem_cache_alloc+0x3b/0x330 [ 643.313110][ T7626] ? slab_pre_alloc_hook+0x30/0x1e0 [ 643.318327][ T7626] security_inode_alloc+0x33/0x120 [ 643.323451][ T7626] inode_init_always+0x6fc/0x960 [ 643.328398][ T7626] new_inode_pseudo+0xa2/0x1f0 [ 643.333179][ T7626] __sock_create+0x12c/0x7c0 [ 643.337871][ T7626] __sys_socketpair+0x1a1/0x5b0 [ 643.342760][ T7626] __x64_sys_socketpair+0x9b/0xb0 [ 643.342882][ T6] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 643.347805][ T7626] x64_sys_call+0x6e/0x9a0 [ 643.359687][ T7626] do_syscall_64+0x4c/0xa0 [ 643.364128][ T7626] ? clear_bhb_loop+0x30/0x80 [ 643.368831][ T7626] ? clear_bhb_loop+0x30/0x80 [ 643.373537][ T7626] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 643.379453][ T7626] RIP: 0033:0x7f5a7218ebe9 [ 643.383886][ T7626] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 643.403547][ T7626] RSP: 002b:00007f5a72f5a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 643.411968][ T7626] RAX: ffffffffffffffda RBX: 00007f5a723c6180 RCX: 00007f5a7218ebe9 [ 643.419941][ T7626] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 000000000000001e [ 643.427908][ T7626] RBP: 00007f5a72f5a090 R08: 0000000000000000 R09: 0000000000000000 [ 643.435894][ T7626] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 643.443869][ T7626] R13: 00007f5a723c6218 R14: 00007f5a723c6180 R15: 00007ffcb4cd5ec8 [ 643.444140][ T7627] loop3: detected capacity change from 0 to 256 [ 643.451867][ T7626] [ 643.452300][ T7626] socket: no more sockets [ 643.466659][ T7627] exfat: Deprecated parameter 'namecase' [ 643.466702][ T7627] exfat: Deprecated parameter 'namecase' [ 643.480688][ T7627] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xec4b13f1, utbl_chksum : 0xe619d30d) [ 643.493615][ T28] kauditd_printk_skb: 60 callbacks suppressed [ 643.493629][ T28] audit: type=1400 audit(1757016823.156:7147): avc: denied { mount } for pid=7618 comm="syz.3.1928" name="/" dev="loop3" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 643.528182][ T7612] Bluetooth: hci0: command 0x1003 tx timeout [ 643.528366][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 643.540410][ T6] usb 6-1: device descriptor read/64, error -71 [ 643.574747][ T28] audit: type=1400 audit(1757016823.226:7148): avc: denied { write } for pid=7618 comm="syz.3.1928" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 643.615171][ T28] audit: type=1400 audit(1757016823.266:7149): avc: denied { unmount } for pid=287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 643.653105][ T28] audit: type=1400 audit(1757016823.306:7150): avc: denied { write } for pid=7630 comm="syz.3.1932" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 643.721858][ T7634] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1933'. [ 643.733375][ T7635] device veth1_macvtap left promiscuous mode [ 643.767409][ T7635] loop2: detected capacity change from 0 to 8192 [ 643.775361][ T7635] FAT-fs (loop2): Unrecognized mount option "0000000000000000000000500000000000000000000006" or missing value [ 643.787208][ T4301] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 643.796470][ T28] audit: type=1400 audit(1757016823.446:7151): avc: denied { write } for pid=7633 comm="syz.3.1933" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 643.816302][ T28] audit: type=1400 audit(1757016823.466:7152): avc: denied { ioctl } for pid=7633 comm="syz.3.1933" path="socket:[36839]" dev="sockfs" ino=36839 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 643.843465][ T6] usb 6-1: device descriptor read/64, error -71 [ 643.843496][ T28] audit: type=1400 audit(1757016823.486:7153): avc: denied { watch } for pid=7628 comm="syz.2.1931" path="/391" dev="tmpfs" ino=2080 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 643.875076][ T28] audit: type=1400 audit(1757016823.486:7154): avc: denied { lock } for pid=7628 comm="syz.2.1931" path="socket:[36849]" dev="sockfs" ino=36849 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 643.922926][ T7643] xt_hashlimit: size too large, truncated to 1048576 [ 643.923290][ T28] audit: type=1400 audit(1757016823.576:7155): avc: denied { connect } for pid=7642 comm="syz.3.1935" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 643.978202][ T4301] usb 7-1: device descriptor read/64, error -71 [ 644.069352][ T7650] FAULT_INJECTION: forcing a failure. [ 644.069352][ T7650] name failslab, interval 1, probability 0, space 0, times 0 [ 644.082246][ T7650] CPU: 0 PID: 7650 Comm: syz.3.1936 Not tainted syzkaller #0 [ 644.089656][ T7650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 644.099714][ T7650] Call Trace: [ 644.102996][ T7650] [ 644.105927][ T7650] __dump_stack+0x21/0x24 [ 644.110256][ T7650] dump_stack_lvl+0xee/0x150 [ 644.114854][ T7650] ? __cfi_dump_stack_lvl+0x8/0x8 [ 644.119909][ T7650] ? __cfi_handle_mm_fault+0x10/0x10 [ 644.125296][ T7650] ? down_read_trylock+0x273/0x640 [ 644.130433][ T7650] dump_stack+0x15/0x24 [ 644.134588][ T7650] should_fail_ex+0x3d4/0x520 [ 644.139271][ T7650] ? io_submit_one+0x11c/0x1670 [ 644.144203][ T7650] __should_failslab+0xac/0xf0 [ 644.148970][ T7650] should_failslab+0x9/0x20 [ 644.153473][ T7650] kmem_cache_alloc+0x3b/0x330 [ 644.158261][ T7650] ? __kasan_check_write+0x14/0x20 [ 644.163418][ T7650] io_submit_one+0x11c/0x1670 [ 644.168104][ T7650] ? irqentry_exit+0x37/0x40 [ 644.172745][ T7650] ? exc_page_fault+0x5e/0xb0 [ 644.177421][ T7650] ? lookup_ioctx+0x2b0/0x2b0 [ 644.182100][ T7650] ? asm_exc_page_fault+0x27/0x30 [ 644.187127][ T7650] ? memset+0x35/0x40 [ 644.191121][ T7650] ? blk_start_plug+0x9b/0x130 [ 644.195969][ T7650] __se_sys_io_submit+0x16e/0x3d0 [ 644.200997][ T7650] ? __x64_sys_io_submit+0x90/0x90 [ 644.206109][ T7650] ? ksys_write+0x1eb/0x240 [ 644.210626][ T7650] ? __cfi_ksys_write+0x10/0x10 [ 644.215500][ T7650] ? debug_smp_processor_id+0x17/0x20 [ 644.220894][ T7650] __x64_sys_io_submit+0x7b/0x90 [ 644.225845][ T7650] x64_sys_call+0x81d/0x9a0 [ 644.230362][ T7650] do_syscall_64+0x4c/0xa0 [ 644.234796][ T7650] ? clear_bhb_loop+0x30/0x80 [ 644.239492][ T7650] ? clear_bhb_loop+0x30/0x80 [ 644.244185][ T7650] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 644.250098][ T7650] RIP: 0033:0x7fdd7eb8ebe9 [ 644.254508][ T7650] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 644.274203][ T7650] RSP: 002b:00007fdd7f99f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 644.282641][ T7650] RAX: ffffffffffffffda RBX: 00007fdd7edc6090 RCX: 00007fdd7eb8ebe9 [ 644.290617][ T7650] RDX: 0000200000000700 RSI: 000000000000140b RDI: 00007fdd7f97e000 [ 644.298597][ T7650] RBP: 00007fdd7f99f090 R08: 0000000000000000 R09: 0000000000000000 [ 644.306597][ T7650] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 644.314569][ T7650] R13: 00007fdd7edc6128 R14: 00007fdd7edc6090 R15: 00007ffd37d57108 [ 644.322559][ T7650] [ 644.352713][ T6] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 644.437037][ T28] audit: type=1326 audit(1757016824.086:7156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7628 comm="syz.2.1931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b9f78ebe9 code=0x7fc00000 [ 644.508248][ T4301] usb 7-1: device descriptor read/64, error -71 [ 644.627075][ T7656] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1938'. [ 644.639242][ T7656] xt_hashlimit: max too large, truncated to 1048576 [ 644.918193][ T4301] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 645.068157][ T4301] usb 7-1: device descriptor read/64, error -71 [ 645.356587][ T7667] loop5: detected capacity change from 0 to 2048 [ 645.363588][ T4301] usb 7-1: device descriptor read/64, error -71 [ 645.388682][ T7667] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 645.397518][ T7667] ext4 filesystem being mounted at /45/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 645.415860][ T7667] fs-verity: sha512 using implementation "sha512-avx2" [ 645.532237][ T7672] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 645.544294][ T7672] device wg2 left promiscuous mode [ 645.574428][ T7672] device veth1_macvtap entered promiscuous mode [ 645.649295][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 645.691662][ T4301] usb usb7-port1: attempt power cycle [ 645.871463][ T7674] loop3: detected capacity change from 0 to 40427 [ 645.928560][ T1913] I/O error, dev loop3, sector 40192 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 646.091404][ T6821] EXT4-fs (loop5): unmounting filesystem. [ 646.108283][ T4301] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 646.131088][ T7678] 9pnet: Could not find request transport: fèâØò™d [ 646.268185][ T5570] usb 4-1: new full-speed USB device number 31 using dummy_hcd [ 646.859987][ T7683] loop6: detected capacity change from 0 to 256 [ 646.962472][ T7683] exFAT-fs (loop6): Invalid boot checksum (boot checksum : 0x0119abd0, checksum : 0x1119abd0) [ 646.972849][ T7683] exFAT-fs (loop6): invalid boot region [ 646.978546][ T7683] exFAT-fs (loop6): failed to recognize exfat type [ 647.101997][ T7682] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1945'. [ 647.232032][ T7685] loop2: detected capacity change from 0 to 128 [ 647.249375][ T5570] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 647.264400][ T7685] FAT-fs (loop2): Directory bread(block 162) failed [ 647.271227][ T5570] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 647.281737][ T7685] FAT-fs (loop2): Directory bread(block 163) failed [ 647.288580][ T7685] FAT-fs (loop2): Directory bread(block 164) failed [ 647.295708][ T7685] FAT-fs (loop2): Directory bread(block 165) failed [ 647.305683][ T5570] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 647.320126][ T7685] FAT-fs (loop2): Directory bread(block 166) failed [ 647.336652][ T5570] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 647.360713][ T7687] loop4: detected capacity change from 0 to 128 [ 647.367130][ T7685] FAT-fs (loop2): Directory bread(block 167) failed [ 647.379013][ T5570] usb 4-1: SerialNumber: syz [ 647.387319][ T7685] FAT-fs (loop2): Directory bread(block 168) failed [ 647.418754][ T5570] cdc_ether: probe of 4-1:1.0 failed with error -22 [ 647.425565][ T5570] usb-storage 4-1:1.0: USB Mass Storage device detected [ 647.433335][ T7687] FAT-fs (loop4): Directory bread(block 162) failed [ 647.440433][ T7685] FAT-fs (loop2): Directory bread(block 169) failed [ 647.447155][ T7687] FAT-fs (loop4): Directory bread(block 163) failed [ 647.473861][ T7687] FAT-fs (loop4): Directory bread(block 164) failed [ 647.504701][ T7687] FAT-fs (loop4): Directory bread(block 165) failed [ 647.513951][ T5570] usb-storage 4-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 647.516977][ T7687] FAT-fs (loop4): Directory bread(block 166) failed [ 647.528483][ T7687] FAT-fs (loop4): Directory bread(block 167) failed [ 647.536569][ T7687] FAT-fs (loop4): Directory bread(block 168) failed [ 647.543375][ T7687] FAT-fs (loop4): Directory bread(block 169) failed [ 647.543632][ T5570] scsi host1: usb-storage 4-1:1.0 [ 647.551353][ T7692] loop5: detected capacity change from 0 to 512 [ 647.569918][ T7692] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 647.619889][ T7692] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2818: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 647.635301][ T5570] usb 4-1: USB disconnect, device number 31 [ 647.648080][ T7692] EXT4-fs (loop5): 1 truncate cleaned up [ 647.653852][ T7692] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 647.687293][ T7692] EXT4-fs (loop5): shut down requested (0) [ 647.729877][ T6821] EXT4-fs (loop5): unmounting filesystem. [ 647.738185][ T4301] usb 7-1: device not accepting address 4, error -71 [ 648.363027][ T7712] input input37: cannot allocate more than FF_MAX_EFFECTS effects [ 648.542396][ T7716] loop3: detected capacity change from 0 to 1024 [ 648.552069][ T7716] ext4: Unknown parameter 'dont_hash' [ 648.593631][ T7719] audit_log_lost: 136 callbacks suppressed [ 648.593647][ T7719] audit: audit_lost=3 audit_rate_limit=0 audit_backlog_limit=64 [ 648.608385][ T7719] audit: out of memory in audit_log_start [ 648.627601][ T28] audit: type=1326 audit(1757016828.276:7293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7721 comm="syz.5.1957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55f318ebe9 code=0x7ffc0000 [ 648.642487][ T7723] loop6: detected capacity change from 0 to 128 [ 648.652649][ T28] audit: type=1326 audit(1757016828.276:7294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7721 comm="syz.5.1957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55f318ebe9 code=0x7ffc0000 [ 648.685436][ T28] audit: type=1326 audit(1757016828.316:7295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7721 comm="syz.5.1957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f55f318ebe9 code=0x7ffc0000 [ 648.709232][ T28] audit: type=1326 audit(1757016828.316:7296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7721 comm="syz.5.1957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55f318ebe9 code=0x7ffc0000 [ 648.733459][ T28] audit: type=1326 audit(1757016828.316:7297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7721 comm="syz.5.1957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55f318ebe9 code=0x7ffc0000 [ 648.757899][ T7723] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 648.766639][ T28] audit: type=1326 audit(1757016828.346:7298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7721 comm="syz.5.1957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f55f318ebe9 code=0x7ffc0000 [ 648.783628][ T7723] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 648.805472][ T7723] ext2 filesystem being mounted at /20/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 648.837789][ T28] audit: type=1326 audit(1757016828.346:7299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7721 comm="syz.5.1957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55f318ebe9 code=0x7ffc0000 [ 649.324012][ T7732] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 649.590769][ T7720] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 649.601115][ T7720] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1956'. [ 649.616269][ T28] audit: type=1326 audit(1757016828.346:7300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7721 comm="syz.5.1957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55f318ebe9 code=0x7ffc0000 [ 649.626942][ T7738] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 649.655284][ T7388] EXT4-fs (loop6): unmounting filesystem. [ 649.684380][ T283] ------------[ cut here ]------------ [ 649.690049][ T283] WARNING: CPU: 0 PID: 283 at fs/inode.c:332 drop_nlink+0xc5/0x110 [ 649.698224][ T283] Modules linked in: [ 649.702145][ T283] CPU: 0 PID: 283 Comm: syz-executor Not tainted syzkaller #0 [ 649.709710][ T283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 649.720122][ T283] RIP: 0010:drop_nlink+0xc5/0x110 [ 649.725362][ T283] Code: 1b 48 8d bb b8 04 00 00 be 08 00 00 00 e8 03 ea f0 ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 9b 82 ac ff <0f> 0b eb 86 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 5e ff ff ff 4c [ 649.745075][ T283] RSP: 0018:ffffc90000da7c38 EFLAGS: 00010293 [ 649.751328][ T283] RAX: ffffffff81c386c5 RBX: ffff8881324a8448 RCX: ffff88810fa4bcc0 [ 649.759414][ T283] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 649.767411][ T283] RBP: ffffc90000da7c60 R08: 0000000000000004 R09: 0000000000000003 [ 649.775450][ T283] R10: fffff520001b4f78 R11: 1ffff920001b4f78 R12: dffffc0000000000 [ 649.783475][ T283] R13: 1ffff11026495092 R14: ffff8881324a8490 R15: 0000000000000000 [ 649.791512][ T283] FS: 000055557129d500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 649.800506][ T283] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 649.807114][ T283] CR2: 0000000000000000 CR3: 000000012f9e7000 CR4: 00000000003506b0 [ 649.815146][ T283] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 649.823164][ T283] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 649.831213][ T283] Call Trace: [ 649.834513][ T283] [ 649.837464][ T283] shmem_rmdir+0x5b/0x90 [ 649.841791][ T283] vfs_rmdir+0x393/0x500 [ 649.846059][ T283] incfs_kill_sb+0x105/0x220 [ 649.850794][ T283] deactivate_locked_super+0xb5/0x120 [ 649.856185][ T283] deactivate_super+0xaf/0xe0 [ 649.860922][ T283] cleanup_mnt+0x45f/0x4e0 [ 649.865366][ T283] __cleanup_mnt+0x19/0x20 [ 649.869824][ T283] task_work_run+0x1db/0x240 [ 649.874536][ T283] ? __cfi_task_work_run+0x10/0x10 [ 649.879682][ T283] ? __x64_sys_umount+0x125/0x160 [ 649.884725][ T283] ? __cfi___x64_sys_umount+0x10/0x10 [ 649.890130][ T283] exit_to_user_mode_loop+0x9b/0xb0 [ 649.895422][ T283] exit_to_user_mode_prepare+0x5a/0xa0 [ 649.900933][ T283] syscall_exit_to_user_mode+0x1a/0x30 [ 649.906413][ T283] do_syscall_64+0x58/0xa0 [ 649.910855][ T283] ? clear_bhb_loop+0x30/0x80 [ 649.915556][ T283] ? clear_bhb_loop+0x30/0x80 [ 649.920283][ T283] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 649.926217][ T283] RIP: 0033:0x7f3b9f78ff17 [ 649.930663][ T283] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 649.950316][ T283] RSP: 002b:00007ffcf000e7a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 649.958818][ T283] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f3b9f78ff17 [ 649.966887][ T283] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffcf000e860 [ 649.974934][ T283] RBP: 00007ffcf000e860 R08: 0000000000000000 R09: 0000000000000000 [ 649.982979][ T283] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffcf000f8f0 [ 649.991012][ T283] R13: 00007f3b9f811c05 R14: 000000000009e9ad R15: 00007ffcf000f930 [ 649.999032][ T283] [ 650.002068][ T283] ---[ end trace 0000000000000000 ]--- [ 650.007861][ T283] ================================================================== [ 650.015955][ T283] BUG: KASAN: null-ptr-deref in ihold+0x20/0x60 [ 650.022214][ T283] Write of size 4 at addr 0000000000000170 by task syz-executor/283 [ 650.030202][ T283] [ 650.032536][ T283] CPU: 1 PID: 283 Comm: syz-executor Tainted: G W syzkaller #0 [ 650.041482][ T283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 650.051562][ T283] Call Trace: [ 650.054854][ T283] [ 650.057793][ T283] __dump_stack+0x21/0x24 [ 650.062139][ T283] dump_stack_lvl+0xee/0x150 [ 650.066748][ T283] ? __cfi_dump_stack_lvl+0x8/0x8 [ 650.071792][ T283] ? ihold+0x20/0x60 [ 650.075694][ T283] ? ihold+0x20/0x60 [ 650.079596][ T283] print_report+0x3d/0x60 [ 650.084020][ T283] kasan_report+0x122/0x150 [ 650.088539][ T283] ? ihold+0x20/0x60 [ 650.092460][ T283] kasan_check_range+0x280/0x290 [ 650.097412][ T283] __kasan_check_write+0x14/0x20 [ 650.102370][ T283] ihold+0x20/0x60 [ 650.106105][ T283] vfs_rmdir+0x25f/0x500 [ 650.110360][ T283] incfs_kill_sb+0x105/0x220 [ 650.114968][ T283] deactivate_locked_super+0xb5/0x120 [ 650.120370][ T283] deactivate_super+0xaf/0xe0 [ 650.125064][ T283] cleanup_mnt+0x45f/0x4e0 [ 650.129502][ T283] __cleanup_mnt+0x19/0x20 [ 650.133940][ T283] task_work_run+0x1db/0x240 [ 650.138550][ T283] ? __cfi_task_work_run+0x10/0x10 [ 650.143677][ T283] ? __x64_sys_umount+0x125/0x160 [ 650.148716][ T283] ? __cfi___x64_sys_umount+0x10/0x10 [ 650.154106][ T283] exit_to_user_mode_loop+0x9b/0xb0 [ 650.159319][ T283] exit_to_user_mode_prepare+0x5a/0xa0 [ 650.164793][ T283] syscall_exit_to_user_mode+0x1a/0x30 [ 650.170273][ T283] do_syscall_64+0x58/0xa0 [ 650.174696][ T283] ? clear_bhb_loop+0x30/0x80 [ 650.179386][ T283] ? clear_bhb_loop+0x30/0x80 [ 650.184099][ T283] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 650.190010][ T283] RIP: 0033:0x7f3b9f78ff17 [ 650.194436][ T283] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 650.214058][ T283] RSP: 002b:00007ffcf000e7a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 650.222506][ T283] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f3b9f78ff17 [ 650.230510][ T283] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffcf000e860 [ 650.238520][ T283] RBP: 00007ffcf000e860 R08: 0000000000000000 R09: 0000000000000000 [ 650.246528][ T283] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffcf000f8f0 [ 650.254525][ T283] R13: 00007f3b9f811c05 R14: 000000000009e9ad R15: 00007ffcf000f930 [ 650.262511][ T283] [ 650.265538][ T283] ================================================================== [ 650.275881][ T283] Disabling lock debugging due to kernel taint [ 650.282607][ T283] BUG: kernel NULL pointer dereference, address: 0000000000000170 [ 650.290437][ T283] #PF: supervisor write access in kernel mode [ 650.296518][ T283] #PF: error_code(0x0002) - not-present page [ 650.302515][ T283] PGD 13256a067 P4D 13256a067 PUD 0 [ 650.307814][ T283] Oops: 0002 [#1] PREEMPT SMP KASAN [ 650.313012][ T283] CPU: 0 PID: 283 Comm: syz-executor Tainted: G B W syzkaller #0 [ 650.321963][ T283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 650.332021][ T283] RIP: 0010:ihold+0x26/0x60 [ 650.336527][ T283] Code: 33 36 7c df 55 48 89 e5 41 56 53 48 89 fb e8 01 7a ac ff 48 8d bb 70 01 00 00 be 04 00 00 00 e8 40 e1 f0 ff 41 be 01 00 00 00 44 0f c1 b3 70 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 f1 [ 650.338694][ T5570] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 650.356140][ T283] RSP: 0018:ffffc90000da7c78 EFLAGS: 00010246 [ 650.356168][ T283] RAX: ffff88810fa4bc00 RBX: 0000000000000000 RCX: ffff88810fa4bcc0 [ 650.356183][ T283] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 650.356195][ T283] RBP: ffffc90000da7c88 R08: dffffc0000000000 R09: fffffbfff0f2d6fd [ 650.356211][ T283] R10: fffffbfff0f2d6fd R11: 1ffffffff0f2d6fc R12: ffff8881324a8454 [ 650.401634][ T283] R13: dffffc0000000000 R14: 0000000000000001 R15: 0000000000000000 [ 650.409633][ T283] FS: 000055557129d500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 650.418594][ T283] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 650.425213][ T283] CR2: 0000000000000170 CR3: 000000012f9e7000 CR4: 00000000003506b0 [ 650.433217][ T283] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 650.441219][ T283] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 650.449214][ T283] Call Trace: [ 650.452513][ T283] [ 650.455458][ T283] vfs_rmdir+0x25f/0x500 [ 650.459728][ T283] incfs_kill_sb+0x105/0x220 [ 650.464347][ T283] deactivate_locked_super+0xb5/0x120 [ 650.469749][ T283] deactivate_super+0xaf/0xe0 [ 650.474463][ T283] cleanup_mnt+0x45f/0x4e0 [ 650.478911][ T283] __cleanup_mnt+0x19/0x20 [ 650.483359][ T283] task_work_run+0x1db/0x240 [ 650.487993][ T283] ? __cfi_task_work_run+0x10/0x10 [ 650.493135][ T283] ? __x64_sys_umount+0x125/0x160 [ 650.498191][ T283] ? __cfi___x64_sys_umount+0x10/0x10 [ 650.503597][ T283] exit_to_user_mode_loop+0x9b/0xb0 [ 650.508819][ T283] exit_to_user_mode_prepare+0x5a/0xa0 [ 650.514303][ T283] syscall_exit_to_user_mode+0x1a/0x30 [ 650.519802][ T283] do_syscall_64+0x58/0xa0 [ 650.524235][ T283] ? clear_bhb_loop+0x30/0x80 [ 650.528944][ T283] ? clear_bhb_loop+0x30/0x80 [ 650.533662][ T283] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 650.539576][ T283] RIP: 0033:0x7f3b9f78ff17 [ 650.544009][ T283] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 650.563634][ T283] RSP: 002b:00007ffcf000e7a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 650.572058][ T283] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f3b9f78ff17 [ 650.580036][ T283] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffcf000e860 [ 650.588006][ T283] RBP: 00007ffcf000e860 R08: 0000000000000000 R09: 0000000000000000 [ 650.595974][ T283] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffcf000f8f0 [ 650.603942][ T283] R13: 00007f3b9f811c05 R14: 000000000009e9ad R15: 00007ffcf000f930 [ 650.611917][ T283] [ 650.614934][ T283] Modules linked in: [ 650.618841][ T283] CR2: 0000000000000170 [ 650.622987][ T283] ---[ end trace 0000000000000000 ]--- [ 650.628432][ T283] RIP: 0010:ihold+0x26/0x60 [ 650.632943][ T283] Code: 33 36 7c df 55 48 89 e5 41 56 53 48 89 fb e8 01 7a ac ff 48 8d bb 70 01 00 00 be 04 00 00 00 e8 40 e1 f0 ff 41 be 01 00 00 00 44 0f c1 b3 70 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 f1 [ 650.652545][ T283] RSP: 0018:ffffc90000da7c78 EFLAGS: 00010246 [ 650.658617][ T283] RAX: ffff88810fa4bc00 RBX: 0000000000000000 RCX: ffff88810fa4bcc0 [ 650.666589][ T283] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 650.674565][ T283] RBP: ffffc90000da7c88 R08: dffffc0000000000 R09: fffffbfff0f2d6fd [ 650.682646][ T283] R10: fffffbfff0f2d6fd R11: 1ffffffff0f2d6fc R12: ffff8881324a8454 [ 650.690617][ T283] R13: dffffc0000000000 R14: 0000000000000001 R15: 0000000000000000 [ 650.698587][ T283] FS: 000055557129d500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 650.707534][ T283] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 650.714132][ T283] CR2: 0000000000000170 CR3: 000000012f9e7000 CR4: 00000000003506b0 [ 650.722114][ T283] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 650.730088][ T283] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 650.738059][ T283] Kernel panic - not syncing: Fatal exception [ 650.744434][ T283] Kernel Offset: disabled [ 650.748789][ T283] Rebooting in 86400 seconds..