last executing test programs: 29.964322746s ago: executing program 4 (id=682): syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x801, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000c"], 0x48) (rerun: 64) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) (async, rerun: 64) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, 0x0) (rerun: 64) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000020000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) (async) fstat(r2, &(0x7f0000000800)) (async, rerun: 32) r5 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c00000010004b0400f4ed00000000007a000900", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b00010062726964676500001c00028008000400000000000600060000000000060009"], 0x4c}}, 0x0) (async) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) syz_usb_connect$cdc_ncm(0x2, 0x9c, &(0x7f0000000380)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8a, 0x2, 0x1, 0x10, 0x60, 0x5, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x1, "0458732c1d"}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x2, 0xff, 0x1bc, 0x4}, {0x6, 0x24, 0x1a, 0x401, 0x30}, [@country_functional={0x8, 0x24, 0x7, 0x0, 0x1, [0x5]}, @network_terminal={0x7, 0x24, 0xa, 0x1, 0x1a, 0x2, 0x5}, @mdlm={0x15, 0x24, 0x12, 0x1}, @call_mgmt={0x5, 0x24, 0x1, 0x0, 0x6}]}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0xc, 0xf9, 0x2}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0x3, 0x1, 0xc4}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x20, 0x80, 0x6}}}}}}}]}}, &(0x7f0000000680)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x310, 0x1, 0xcd, 0x3, 0x20, 0x5e}, 0x13, &(0x7f0000000440)={0x5, 0xf, 0x13, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x14, 0x8, 0x2, 0x900}, @ext_cap={0x7, 0x10, 0x2, 0x6, 0x4, 0x6, 0x76fe}]}, 0x5, [{0x77, &(0x7f0000000480)=@string={0x77, 0x3, "e30ba564518cc8c310b44842d5c864c817732523e7224a037cc620aa5de6359322465080c2e9249bd1a17d5793d62648cecb8f0196859f2a512df6f4ba0d5d6598c4588030079bcecc4bb6fdd6b9e1884feed20bddac1d382c575db48503bd813c3adf04e14af67323ebb11a3dae2b411893511170"}}, {0xb7, &(0x7f0000000500)=ANY=[@ANYBLOB="b703cb283a21e66e093c1142bc3022689142666a33e5070091d85b10f8cfc0c04798ff166251d67fc01e725ba753adf8e7d084a6d338868a59b7ec761d1a10b90ef3c600ffbb040d7a712a1b9f09c4bc7d5f522fbfd40a51583ad99d38180fb87fb2153a13f036132dcff971d861b8ef0301ed63b51fed5b5e123e2a012d9f43f2981b6fa5c63026757d669c759b3a35a7ffbc89aff39745781a529987b3b17a966fd894aba4bf6c93ea819b9972bd38ac9884836c43f3"]}, {0x39, &(0x7f00000005c0)=@string={0x39, 0x3, "3c1791115c430cde68c046dff4a406f70f14d3337959edd61e4c99974dc04d450b61fbbe335b5c0e6efb6da93f6556389cc963ffd3633d"}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0xc04}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x820}}]}) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x18) (async, rerun: 64) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)={0x2, 0x4, 0x8, 0x1, 0x80, r3, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) (rerun: 64) dup3(r4, r4, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x0, 0x4, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800bd3f7000000000850000000a0000009500"/35], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r9, @ANYBLOB="0000000000000000b703000000000000850000007d000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f00000000c0)=r10, 0x4) (async) sendmsg$inet(r8, &(0x7f0000000100)={0x0, 0x3ec0, 0x0}, 0x0) (async) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000100)='rpm_return_int\x00', r11}, 0xe) (async) syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) (async) syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') (async) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) 29.848148188s ago: executing program 4 (id=684): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0xae44, 0x1) timer_create(0x7, &(0x7f0000000000)={0x0, 0x41, 0x4, @thr={&(0x7f0000000180)="3a7ef3050d87768e3dad3154ba9e5c515f768f7b95d5225c6122e82616f3e07a4baf88f3bc4539d0af754e5bddb05ce2a8f12d2dfb7690674d0602b702c77a0ea4450d71e79a3f419142122a936b5e71929ab488c08602fadfcc9211ae97c7d783305c5266dd2bf4e50b5ca153ed07127911d71c497541f3379165ede1bffeed2f877dfa4906110353252d82bbc77b3ef0d2ac6fdd6d93ec196b622d19dd94bf0464ab9648f0cd874d3d8e25228b35303b4ba62cf9e4c44aa9b38e3344af66ac7b773af536f5d3050d2a24a25441153debfc90d9777ec6812c3171280dd92e64d346f78422f011c10e80ffb6470280ea4d3bff01f40d728513", &(0x7f00000003c0)="24f871476828addd720a8d9c1fc752a5e8639ec0bd513059565e1ec0b396317dbf089b89164d3b967416eeb7a547f8965e19900e4aff2d387531a5b8233143331b44a17fc972097cf3d5178ca7ec992cecefe384a8f1425429f567b4965ba08d0220b2c9fdb8e35738899a58d608cf99d3c94e8a68227360a16dc6bd5633f0082efc4ce739645fa2"}}, &(0x7f0000000040)=0x0) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) timer_settime(r1, 0x0, &(0x7f0000000300)={{r2, r3+60000000}}, &(0x7f0000000500)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES8=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000078500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) bind$inet(r4, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r4, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) recvfrom(r4, &(0x7f0000000540)=""/116, 0x74, 0x40010754, 0x0, 0x0) 29.04060193s ago: executing program 4 (id=686): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0x66, &(0x7f0000000580)={@broadcast, @random="6487a2bed3d6", @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x300, 0x0, 0x0, 0x6c, 0x0, @private}}}}}, 0x0) 28.894791122s ago: executing program 4 (id=689): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x4508, &(0x7f00000002c0)={[{@errors_remount}, {@noquota}, {@data_err_abort}, {@auto_da_alloc_val}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x1}}, {@journal_dev={'journal_dev', 0x3d, 0x3}}, {@barrier}, {@nobh}, {@nogrpid}]}, 0x10, 0x4dc, &(0x7f0000000840)="$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") prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) read$FUSE(r1, &(0x7f0000007100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000002140)={0x50, 0x0, r3, {0x7, 0x2b, 0x0, 0x402, 0x0, 0x0, 0x2, 0xff7fffff}}, 0x50) read$FUSE(r1, &(0x7f0000002900)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r1, &(0x7f0000000000)={0x10, 0xffffffffffffffda, r4}, 0x10) syz_fuse_handle_req(r1, &(0x7f000000b140)="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", 0x2000, &(0x7f0000007040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000007000)={0x20}, 0x0}) ioctl$FS_IOC_RESVSP(r2, 0x40086602, &(0x7f0000002740)) listxattr(&(0x7f0000000740)='./file0\x00', 0x0, 0x0) 28.002110534s ago: executing program 4 (id=692): r0 = socket(0x1e, 0x2, 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x0) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, &(0x7f0000000080)=0x4) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x5, 0x4, 0x7fe2, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = socket(0x10, 0x3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r4}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x34, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_blackhole={0xe}]}, 0x34}}, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43451) fstat(r4, &(0x7f0000003bc0)={0x0, 0x0, 0x0, 0x0, 0x0}) r9 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0xffffffffffffffff, r10) ioctl$sock_FIOGETOWN(r5, 0x8903, &(0x7f0000003c40)=0x0) getresuid(&(0x7f0000003c80)=0x0, &(0x7f0000003cc0), &(0x7f0000003d00)) r13 = getgid() ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000003d40)={0x0, 0x0}) ioctl$NS_GET_OWNER_UID(r1, 0xb704, &(0x7f0000003dc0)=0x0) r16 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r16, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r16, &(0x7f00000081c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r16, &(0x7f00000001c0)={0x50, 0x0, r17, {0x7, 0x1f, 0x7, 0x400, 0x801, 0x401, 0x5, 0x8000004, 0x0, 0x0, 0x10, 0x2}}, 0x50) syz_fuse_handle_req(r16, &(0x7f00000061c0)="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", 0x2000, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={0x78, 0x0, 0x0, {0x7, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x400, 0x8000, 0x0, 0xffffffffffffffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r16, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x78, 0x0, 0x0, {0xffffffffffffff44, 0x10, 0x0, {0x3, 0x9, 0x4, 0x7f, 0x80000, 0x8, 0x680, 0xd96d, 0x3, 0x8000, 0x5e01, r18, r19, 0xf641, 0x10001}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(r4, &(0x7f0000003ec0)=[{{&(0x7f00000001c0)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000280)="20e3ef0647972d7b4038899d92f8d74e1cbc3412022759ea2893deb318d28b25419f2b9527efa1dc348fa2578be656e3ac872e09e78cc8bb92201b0f5b7b980e6edf40db175ebb", 0x47}, {&(0x7f00000004c0)="7c852bf142fc25465f83f2b20a114b7fd51f0ad20c75db16904d6c8e76304f03d0d681e4adbd2dca5d9faeab8cd08dd5129528819f42b03542c0965c31df78a11b56edc89da277c9f68885ea0ce423b6a7cfb605b8d10ff37f556b45b027cdba3ac2a23c86665b76f7ae9af0f186005f2af5e93598cda4a16bbbd9aedd1ec41f07518c0a3ff4bd34ddfdbc8ff866f40d8b7a9d4f1a37cab675dfce6853e4d99a695d4c89fef7685a7d9312870c1adeaccf3a6cdbc517d14965a9118d1a35ed8d57716d1cf68edbb6d5f7e69efb12f3c8c6c5a101c135d36d9d", 0xd9}, {&(0x7f00000005c0)="094e099dc440052fb5ca1556700a6c6fff976c2fb5bf7c19dc2f60262d1d9742a52c84683c412e945e1cd5e6ab98d5ef2e5a885d372af6fde3d6c5087d662d90a2135d1e46790939b3cca6ab1e364a9ba96a0160d5a66a4898286de6ae4fbc4556ccf3b90cea7cac16d19e22a54de10fcebf6f0b045e2d3d9663d03b342142c15f3abd32068c1b9d506ff1cff0de18dd49e2179e11e088b0b79cb2f2d16c4b0c8940e852e134c1d3692b526a29e7b6f6aeaaac43cdc13be013da04bd57a5fa784b20bdd85d9fda3ce6a6c1591c1c0130a6f79b", 0xd3}, {&(0x7f00000007c0)="913953c60d0976c0304fbc5d83db92d6d18495084f1aaa8fc994aee7408b8f70ce3ed5893bbd17afa51f05b04f4ff88cb3945405478fa8471ae974591663464da0fe52a8a669892f4c5fe17e2a0a6d714c0dd13cbb2be8ccbd8c75471aba76a2cb00db7effc5ecf22f026b6f9212fac923ce4cff92fa1a808d877acba73cd15e4c945ef46bd2404526ec78ddfaa4b8618cc12b45af9bf095dc8401e9ed0ec8686614bb84b1dffdbcab9d65f298ec912f4f6f39bba930be26d34cd2abba9352105e28122c86821c5c6c8e0d98e5e77592c4356ee46710927f17d7dc1715fbe70ab561161961942abf44e7", 0xea}, {&(0x7f0000000340)="c79aba89d9838aa4fb45dd8f065c6ed764a814a4920df59940ae8761b15774b1d60b2227179faf3c05b811b021d6bdbdaed17c0c6a513aa9bbd5833da6b2730648dd1b7a0e3293bd19bbd43e", 0x4c}], 0x5, 0x0, 0x0, 0x40805}}, {{&(0x7f00000008c0)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000000940)="bf2af944d94c1125a38621d5fa59d8c162d5712be3bec28eb734d5bcd2912a155f3759d89ccae5031f6d30a4c35497d583686b7cd68e015e734bdcdcadb52584e40daf63347a69f18b6bdcb987d782b085522950f7fcc430916b5c77d3acdaf8ee4fd016872d3245ffc32697ecb6766030c9000c5b4911f4b9", 0x79}, {&(0x7f00000009c0)="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", 0x1000}, {&(0x7f00000019c0)="85f86ed56ce2838f54a241868c7e68b2034b3f05a0263a8078cb3378cdb76649b2a22d235469febc1b89e8292139be40274cd85c5a6df249d22147fc7dcbe8cb6010cddccb85f52f2f38db60eef385adb58199a1a5b73b756d914b1576abfe4bba28f6f9fc3d8e8cd621d10cc707516d34e70449e9ca28c0cb", 0x79}, {&(0x7f0000000400)="888b5d63411727668cb5cde2a63f0501b9e1d94c23f6b45ed65449f3735bf6cd50964be63ef54e4ce661094ca57ed00d60d1a3a2eb", 0x35}], 0x4, &(0x7f0000003e00)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [r5, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r8, r10}}}, @cred={{0x1c, 0x1, 0x2, {r11, r12, r13}}}, @cred={{0x1c, 0x1, 0x2, {r14, r15, r19}}}], 0x98, 0x4000000}}], 0x2, 0x4000) 27.615528539s ago: executing program 4 (id=696): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$UI_SET_MSCBIT(r0, 0x40045568, 0x3a) 27.543384141s ago: executing program 32 (id=696): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$UI_SET_MSCBIT(r0, 0x40045568, 0x3a) 16.110761042s ago: executing program 1 (id=754): socket$inet6(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) signalfd4(r0, &(0x7f0000000100)={[0x118dfad8]}, 0x8, 0x800) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r1}, 0x10) r2 = syz_clone(0x2008000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace(0x8, r2) waitid(0x1, r2, 0x0, 0x4, 0x0) 16.093365772s ago: executing program 1 (id=755): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={r2, 0x58, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0xbe, 0x0, 0x0) recvmmsg(r5, &(0x7f0000000b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{0x0}, {&(0x7f0000000440)=""/44, 0x2c}], 0x2}, 0x7}], 0x1, 0x10000, 0x0) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='mm_lru_activate\x00', r4}, 0x10) write$cgroup_int(r2, &(0x7f0000000200), 0x43451) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000340)=0x0) ptrace(0x10, r7) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r8}, 0x10) r9 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_TREAD(r9, 0x40045402, &(0x7f0000000000)=0x1) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000640)={'ip6gre0\x00', &(0x7f00000005c0)={'ip6tnl0\x00', r3, 0x29, 0x66, 0x5, 0x5, 0x53, @private2={0xfc, 0x2, '\x00', 0x1}, @private2, 0x7, 0x40, 0x7fffffff, 0x6}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df"], 0x0, 0x100000, 0x0, 0x0, 0x20233cc238735d12, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r10, 0x4008941a, &(0x7f0000000740)=0x2) r11 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000079190000000000007a000000000000009500050000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x23) r12 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c0100001000130427bd7000fbdbdf25fe800000000000000000000000000000ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="02000000"], 0x15c}}, 0x4000080) connect$unix(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000780)=ANY=[@ANYRESDEC=r5, @ANYRESOCT=r6, @ANYRESOCT=r11], 0x48) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x200008, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x1, 0x5505, &(0x7f0000002480)="$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") openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x183f43, 0x8a) 15.246908585s ago: executing program 1 (id=757): r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) socket$inet_udp(0x2, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) sched_setscheduler(0x0, 0x2, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$sock_buf(r2, 0x1, 0x31, &(0x7f0000002f80)=""/217, &(0x7f0000003080)=0xd9) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1f, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x7b, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) close(r7) r8 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r9, @ANYRES32=r8], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r9}, &(0x7f0000000180), &(0x7f0000000080)=r7}, 0x20) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r10}, 0x10) 13.952794792s ago: executing program 1 (id=763): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) setsockopt$inet_buf(r1, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x12, 0x0, 0x0, 0x2}, 0x10}}, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f00000000c0)='./file0\x00', 0x40, &(0x7f0000000300)={[{@fat=@tz_utc}, {@shortname_winnt}, {@shortname_lower}, {@fat=@quiet}, {@utf8}, {@shortname_lower}, {@nonumtail}, {@fat=@nfs_stale_rw}, {@utf8no}, {@uni_xlateno}, {@utf8}, {@utf8}]}, 0x0, 0x285, &(0x7f00000007c0)="$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") r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333404, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r4) sendmsg$NL80211_CMD_DEL_PMKSA(r5, &(0x7f00000005c0)={&(0x7f0000000380), 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x34, r6, 0x100, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x6c1}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x34}}, 0x480) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x11080, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x120584c, 0x0) read$FUSE(r4, &(0x7f00000018c0)={0x2020}, 0x2108) 13.659749757s ago: executing program 1 (id=765): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x633a, 0x4) sendmmsg$inet6(r0, &(0x7f0000000e00)=[{{&(0x7f0000000080)={0xa, 0x4e1f, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x4041) recvmmsg(r0, &(0x7f0000000340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0)=""/171, 0xab}, 0x20000}], 0x1, 0x12141, 0x0) 13.628358217s ago: executing program 1 (id=766): r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000240)={{0x12, 0x1, 0x150, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6, 0x24, 0x1a, 0x1}}, {{0x9, 0x5, 0x81, 0x3, 0x40}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x0, 0x2, 0x20}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000700)={0x44, 0x0, &(0x7f00000001c0)={0x0, 0xa, 0x1, 0x2}, 0x0, &(0x7f0000000540)={0x20, 0x80, 0x1c, {0x5d, 0x1, 0x4, 0x23d, 0x1, 0x4, 0x492, 0x19, 0x1000, 0x200, 0x101, 0x10}}, 0x0, &(0x7f00000005c0)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000600)={0x20, 0x87, 0x2, 0x1}, 0x0}) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f00000000c0)={0x40, 0x23, 0x74, {0x74, 0xc, "c6871d467b42368c84dbe9210bfe56ab679bce3583fb6f9dddbd73634329fccd4b3bd15531255c0f48efcc6d90ccf176cff6953109e5fe2ddef7c144db2b44fcab30718f59540f138957d37e773d08fc5ac8e347057ccf7220533f64564bb490c8b3c44332ec6d871ec17ccef8dd20b82018"}}, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x816}}, &(0x7f0000000140)={0x0, 0xf, 0x38, {0x5, 0xf, 0x38, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x7, 0x9, 0x5}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "c69ce19d2f092801a535de4461c39bea"}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x2, 0x0, 0x1}, @wireless={0xb, 0x10, 0x1, 0x4, 0x2, 0xd, 0x28, 0x3}, @ptm_cap={0x3}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xf4, 0x60, 0x7, 0x3, "fdc7723c", "bedf928e"}}, &(0x7f0000000200)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x7, 0x0, 0x2, 0x2, 0x9, 0x1000, 0x1}}}, &(0x7f0000000900)={0x84, &(0x7f0000000300)={0x40, 0x17, 0x88, "24bd29e4e372234597bb16f3986588988935249378086e23d8fa55d8ad3ea8fc576ce247128d8391af40e78baea887b70e5ecda9baa72d964eb25e0ae30f2d11cec1360d4768359452b1e0d5380d9f1b089ca1c52606126ce787430ddbe14bb262beabdab2627537b6c7dc23b92302ac70a915a500a5750c0c9b6fb26074135a9ef505c9ced4776b"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x80}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000440)={0x20, 0x0, 0x4, {0x3, 0x1}}, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x1c0, 0x2}}, &(0x7f00000004c0)={0x40, 0x7, 0x2, 0x6fc0}, &(0x7f0000000580)={0x40, 0x9, 0x1, 0x80}, &(0x7f0000000640)={0x40, 0xb, 0x2, "e29a"}, &(0x7f0000000680)={0x40, 0xf, 0x2, 0x5}, &(0x7f00000006c0)={0x40, 0x13, 0x6, @remote}, &(0x7f0000000780)={0x40, 0x17, 0x6, @multicast}, &(0x7f00000007c0)={0x40, 0x19, 0x2, "f0e0"}, &(0x7f0000000800)={0x40, 0x1a, 0x2, 0x81}, &(0x7f0000000840)={0x40, 0x1c, 0x1, 0x4}, &(0x7f0000000880)={0x40, 0x1e, 0x1, 0x7}, &(0x7f00000008c0)={0x40, 0x21, 0x1, 0x7}}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_connect$uac1(0x3, 0x93, &(0x7f00000009c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x81, 0x3, 0x1, 0x7, 0x80, 0x10, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x40, 0xbd}, [@input_terminal={0xc, 0x24, 0x2, 0x3, 0x100, 0x1, 0x80, 0x1, 0x5, 0x6}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x6, 0x3, 0x40, 0x5, '\'i8'}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x0, 0x3, 0x9, 0x8, "3b8b35"}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x4b, 0x2, 0x8, {0x7, 0x25, 0x1, 0x182, 0x10, 0x6}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x9, 0x80, 0xf3, {0x7, 0x25, 0x1, 0x2, 0x9, 0x2}}}}}}}]}}, &(0x7f0000000c40)={0xa, &(0x7f0000000ac0)={0xa, 0x6, 0x200, 0x1b, 0xa6, 0x12, 0x20, 0x2}, 0xc, &(0x7f0000000b00)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0x3, 0x2, 0x7fff}]}, 0x1, [{0x1d, &(0x7f0000000b40)=@string={0x1d, 0x3, "86d33c10605f78e1967e88468e8c30305eb425b8ed90b95ab3a925"}}]}) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 13.602799607s ago: executing program 33 (id=766): r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000240)={{0x12, 0x1, 0x150, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6, 0x24, 0x1a, 0x1}}, {{0x9, 0x5, 0x81, 0x3, 0x40}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x0, 0x2, 0x20}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000700)={0x44, 0x0, &(0x7f00000001c0)={0x0, 0xa, 0x1, 0x2}, 0x0, &(0x7f0000000540)={0x20, 0x80, 0x1c, {0x5d, 0x1, 0x4, 0x23d, 0x1, 0x4, 0x492, 0x19, 0x1000, 0x200, 0x101, 0x10}}, 0x0, &(0x7f00000005c0)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000600)={0x20, 0x87, 0x2, 0x1}, 0x0}) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f00000000c0)={0x40, 0x23, 0x74, {0x74, 0xc, "c6871d467b42368c84dbe9210bfe56ab679bce3583fb6f9dddbd73634329fccd4b3bd15531255c0f48efcc6d90ccf176cff6953109e5fe2ddef7c144db2b44fcab30718f59540f138957d37e773d08fc5ac8e347057ccf7220533f64564bb490c8b3c44332ec6d871ec17ccef8dd20b82018"}}, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x816}}, &(0x7f0000000140)={0x0, 0xf, 0x38, {0x5, 0xf, 0x38, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x7, 0x9, 0x5}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "c69ce19d2f092801a535de4461c39bea"}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x2, 0x0, 0x1}, @wireless={0xb, 0x10, 0x1, 0x4, 0x2, 0xd, 0x28, 0x3}, @ptm_cap={0x3}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xf4, 0x60, 0x7, 0x3, "fdc7723c", "bedf928e"}}, &(0x7f0000000200)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x7, 0x0, 0x2, 0x2, 0x9, 0x1000, 0x1}}}, &(0x7f0000000900)={0x84, &(0x7f0000000300)={0x40, 0x17, 0x88, "24bd29e4e372234597bb16f3986588988935249378086e23d8fa55d8ad3ea8fc576ce247128d8391af40e78baea887b70e5ecda9baa72d964eb25e0ae30f2d11cec1360d4768359452b1e0d5380d9f1b089ca1c52606126ce787430ddbe14bb262beabdab2627537b6c7dc23b92302ac70a915a500a5750c0c9b6fb26074135a9ef505c9ced4776b"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x80}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000440)={0x20, 0x0, 0x4, {0x3, 0x1}}, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x1c0, 0x2}}, &(0x7f00000004c0)={0x40, 0x7, 0x2, 0x6fc0}, &(0x7f0000000580)={0x40, 0x9, 0x1, 0x80}, &(0x7f0000000640)={0x40, 0xb, 0x2, "e29a"}, &(0x7f0000000680)={0x40, 0xf, 0x2, 0x5}, &(0x7f00000006c0)={0x40, 0x13, 0x6, @remote}, &(0x7f0000000780)={0x40, 0x17, 0x6, @multicast}, &(0x7f00000007c0)={0x40, 0x19, 0x2, "f0e0"}, &(0x7f0000000800)={0x40, 0x1a, 0x2, 0x81}, &(0x7f0000000840)={0x40, 0x1c, 0x1, 0x4}, &(0x7f0000000880)={0x40, 0x1e, 0x1, 0x7}, &(0x7f00000008c0)={0x40, 0x21, 0x1, 0x7}}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_connect$uac1(0x3, 0x93, &(0x7f00000009c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x81, 0x3, 0x1, 0x7, 0x80, 0x10, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x40, 0xbd}, [@input_terminal={0xc, 0x24, 0x2, 0x3, 0x100, 0x1, 0x80, 0x1, 0x5, 0x6}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x6, 0x3, 0x40, 0x5, '\'i8'}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x0, 0x3, 0x9, 0x8, "3b8b35"}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x4b, 0x2, 0x8, {0x7, 0x25, 0x1, 0x182, 0x10, 0x6}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x9, 0x80, 0xf3, {0x7, 0x25, 0x1, 0x2, 0x9, 0x2}}}}}}}]}}, &(0x7f0000000c40)={0xa, &(0x7f0000000ac0)={0xa, 0x6, 0x200, 0x1b, 0xa6, 0x12, 0x20, 0x2}, 0xc, &(0x7f0000000b00)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0x3, 0x2, 0x7fff}]}, 0x1, [{0x1d, &(0x7f0000000b40)=@string={0x1d, 0x3, "86d33c10605f78e1967e88468e8c30305eb425b8ed90b95ab3a925"}}]}) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 8.208389814s ago: executing program 0 (id=806): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x5, 0x0, @void, @value, @void, @value}, 0x50) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000003c0)={'syztnl1\x00', &(0x7f00000002c0)={'ip6tnl0\x00', 0x0, 0x2f, 0x0, 0x9c, 0x39, 0x4, @loopback, @empty, 0xa8, 0x7, 0x0, 0x3}}) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400), 0x4) r3 = syz_open_dev$usbfs(&(0x7f00000001c0), 0x800000001fe, 0x2) r4 = dup(r3) ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f0000000040)={0x23, 0x3, 0x10, 0x2, 0x0, 0x0, 0x0}) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000600)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x5, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x11, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x64c47d46, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@btf_id={0x18, 0x7, 0x3, 0x0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000240)='syzkaller\x00', 0x9, 0xc8, &(0x7f0000000500)=""/200, 0x41000, 0xa, '\x00', r1, 0x0, r2, 0x8, &(0x7f0000000440)={0x6, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000680)=[r4, r5], &(0x7f00000006c0)=[{0x4, 0x3, 0xa, 0xa}, {0x3, 0x3, 0xe, 0xc}, {0x3, 0xfff, 0x10, 0x3}, {0x2, 0x2, 0x8}, {0x4, 0x5, 0x5, 0x8}], 0x10, 0x101, @void, @value}, 0x94) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000078500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x10) bind$inet(r6, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r6, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) recvfrom(r6, &(0x7f0000000480)=""/110, 0x168f6f3d, 0x734, 0x0, 0xfffffffffffffecb) clock_gettime(0x5, 0x0) syz_open_procfs(0x0, 0x0) close(0x3) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) 7.935511098s ago: executing program 2 (id=808): syz_mount_image$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x1208000, 0x0, 0x1, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) readlink(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)=""/182, 0xb6) (fail_nth: 1) 7.466646604s ago: executing program 2 (id=809): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x3, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x101e, 0x0, 0x0, 0x0, 0x5}}, 0x0, 0x273, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000007, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x8c, 0x30, 0xffff, 0x0, 0x25dfdbfb, {}, [{0x78, 0x1, [@m_police={0x74, 0x1, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [[@TCA_POLICE_RESULT={0x8, 0x5, 0x20000000}, @TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc, 0xb, {0x0, 0x1}}, {0xffffff6e, 0xa}}}]}]}, 0x8c}}, 0x0) 7.460374165s ago: executing program 2 (id=810): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002240), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002540)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000040)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0b00000007000000d7c900000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000005740)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r1, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000000000005000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) read$FUSE(r0, &(0x7f0000000200)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2092) syz_clone3(&(0x7f00000024c0)={0x100, &(0x7f00000000c0)=0xffffffffffffffff, &(0x7f0000002280), &(0x7f00000022c0), {0x30}, &(0x7f0000002580)=""/4096, 0x1000, &(0x7f0000002380)=""/213, &(0x7f0000002480)=[r8, r8], 0x2}, 0x58) pidfd_getfd(r9, r4, 0x0) write$FUSE_INIT(r0, &(0x7f00000046c0)={0x50, 0x0, r5, {0x7, 0x9, 0x0, 0x403a1810, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100}}, 0x50) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r11}, 0x10) uname(&(0x7f00000006c0)=""/169) syz_fuse_handle_req(r0, &(0x7f0000006ec0)="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", 0x2000, &(0x7f0000004b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004640)={0x78, 0x0, 0x20c8, {0xee9b, 0xffff9577, 0x0, {0x5, 0x7, 0x8, 0xd0d, 0x6, 0x70000000000, 0x6, 0x1, 0xe, 0x2000, 0xffff, r6, r7, 0x6, 0x9}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000002300), 0x1000) 7.381153946s ago: executing program 2 (id=811): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)={0xffffffffffffffff, 0xffffffffffffffff}) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x10408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0b00000005000000020000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000006000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r3}, &(0x7f0000000400), &(0x7f0000000580)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0x541b, &(0x7f0000000000)={0xffffffffffffffff}) close_range(r5, 0xffffffffffffffff, 0x0) 6.842610673s ago: executing program 0 (id=812): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)={0xffffffffffffffff, 0xffffffffffffffff}) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x10408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0b00000005000000020000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000006000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r3}, &(0x7f0000000400), &(0x7f0000000580)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0x541b, &(0x7f0000000000)={0xffffffffffffffff}) close_range(r5, 0xffffffffffffffff, 0x0) 5.776054038s ago: executing program 5 (id=814): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)={0xffffffffffffffff, 0xffffffffffffffff}) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x10408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0b00000005000000020000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000006000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r3}, &(0x7f0000000400), &(0x7f0000000580)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0x541b, &(0x7f0000000000)={0xffffffffffffffff}) close_range(r5, 0xffffffffffffffff, 0x0) (fail_nth: 1) 5.216129756s ago: executing program 6 (id=815): getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000040)={{{@in=@empty, @in6=@private0}}, {{@in6=@mcast2}, 0x0, @in6=@remote}}, &(0x7f0000000140)=0xe8) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e0f30fa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x14) prlimit64(0x0, 0x7, &(0x7f0000000180)={0x2, 0x3}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) 4.316756729s ago: executing program 6 (id=816): socket$inet6(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) signalfd4(r0, &(0x7f0000000100)={[0x118dfad8]}, 0x8, 0x800) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r1}, 0x10) r2 = syz_clone(0x2008000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) waitid(0x1, r2, 0x0, 0x4, 0x0) 4.2399988s ago: executing program 6 (id=817): getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000040)={{{@in=@empty, @in6=@private0}}, {{@in6=@mcast2}, 0x0, @in6=@remote}}, &(0x7f0000000140)=0xe8) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e0f30fa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x14) prlimit64(0x0, 0x7, &(0x7f0000000180)={0x2, 0x3}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) (fail_nth: 1) 4.20015703s ago: executing program 0 (id=818): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000000e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000020850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) r3 = dup2(r2, r2) write$tun(r3, 0x0, 0x46) 4.19930937s ago: executing program 2 (id=819): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) mkdir(&(0x7f0000001c00)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x201008, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000001180)='./bus\x00') r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x149800, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000500)=ANY=[@ANYRESDEC=0x0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x34, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x18, 0xe, &(0x7f00000003c0)=ANY=[@ANYRESOCT=r1], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe06, 0x1000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b708000000000e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000020850000000100000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) r6 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) r7 = dup2(r6, r6) r8 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB="2cd49c79fa8215dca6d150cfac40430479a4eee419a7411cfcbdf04320dd1d78a98fe17d94db246e14072f0b1dff3bf6eacefba06266b9cc24917b0244409954cabe761e9b80d106ccb3471f135391316f41bb300ecc2c0342bbf252669cb037943a92dfb055a0cc2e203631bf5d95a575bfa950c519106dfdf4664e82a2d33381a23a0f8bb45e8bd26e0841327fadfce17f22c69e41fc2c9ebc758c050e767714060a171d9ed12d8dd8ac61da5b6f5ff2ce1225", @ANYRES16=r0, @ANYRES8=r3, @ANYRES32=r7], 0x0) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r9 = userfaultfd(0x80801) ioctl$UFFDIO_API(r9, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x4}) ioctl$UFFDIO_UNREGISTER(r9, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000ffc000/0x3000)=nil, 0x3000}) syz_usb_control_io$hid(r8, 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r9, 0xc020aa04, &(0x7f0000000140)={{&(0x7f0000ffb000/0x1000)=nil, 0x1000}, 0x430332dff4da5c3f}) syz_usb_control_io(r8, &(0x7f0000000080)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0}, 0x0) signalfd(r9, &(0x7f0000000180)={[0x8dc9]}, 0x8) 3.831130696s ago: executing program 5 (id=820): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x5c, 0x1, 0x1, 0x201, 0x0, 0x0, {0xa}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x4ad}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @loopback}}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x4, 0x1, 0x1}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000850}, 0x24008840) (fail_nth: 1) 3.574838869s ago: executing program 0 (id=821): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) arch_prctl$ARCH_ENABLE_TAGGED_ADDR(0x4002, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000004000000627f00000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000002200000000000000009aa500"/28], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="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"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) rt_sigpending(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000280)=ANY=[@ANYRESOCT=r0, @ANYBLOB="0000000000000000b70800003ddbeb867b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095", @ANYRES8, @ANYRES8=r3, @ANYRES64=r0, @ANYRES32=r2], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="090000000500000008000000"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r6}, 0xc) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) getegid() fcntl$setpipe(r5, 0x407, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) r7 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r7, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r7, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r7, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) io_uring_setup(0xdac, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000140)='mm_page_alloc\x00', r8}, 0x10) ioperm(0xa8, 0x1, 0x6) 3.56610782s ago: executing program 5 (id=822): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) unshare(0x2c020400) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000c273000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='ext4_request_blocks\x00', r2}, 0x10) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r3}, 0x8) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000240)={r5, r4, 0x7, 0x0, @void}, 0x10) socket$key(0xf, 0x3, 0x2) socket$inet_icmp_raw(0x2, 0x3, 0x1) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r6 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r7 = open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r8, 0x2000009) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file0\x00', 0x2000414, &(0x7f0000000340)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2a1, &(0x7f0000000540)="$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") mkdir(&(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x45) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1/file3\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000001100)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) socket$inet6(0xa, 0x80002, 0x0) socket(0x10, 0x3, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x101, 0x200}, 0x0, 0x0) sendfile(r7, r8, 0x0, 0x7ffff000) readv(r6, &(0x7f0000000200)=[{&(0x7f0000000f40)=""/4096, 0x1000}], 0x1) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x8}]}}]}, 0x38}}, 0x0) 3.495669041s ago: executing program 6 (id=823): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0xcc40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x809, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xfffffdf6) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x100) write$UHID_INPUT(r4, &(0x7f0000000b00)={0x8, {"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", 0x1000}}, 0x1006) openat(r4, &(0x7f0000000040)='./file0\x00', 0x40040, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) r5 = socket$pppl2tp(0x18, 0x1, 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, 0x0, 0x0, 0x2, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) dup(r0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r9}, 0x10) r10 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x340, 0x0, 0x4c, 0x1a, 0x0, 0x73, 0x270, 0x258, 0x258, 0x270, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x11}, 0x0, 0x110, 0x140, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x2, 0x0, 0x6}}, @common=@unspec=@connbytes={{0x38}, {[], 0x3}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0xa}}, {{@uncond, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) syz_usb_connect$printer(0x1, 0x36, &(0x7f00000008c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x9, 0x30, 0xe, [{{0x9, 0x4, 0x0, 0x90, 0x2, 0x7, 0x1, 0x3, 0x3, "", {{{0x9, 0x5, 0x1, 0x2, 0x8, 0x8, 0xfd, 0xfa}}, [{{0x9, 0x5, 0x82, 0x2, 0x8, 0x0, 0x3, 0x8}}]}}}]}}]}}, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x0, 0x0}, {0x0, 0x0}]}) r11 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r11, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) connect$pppl2tp(r5, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r11, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) writev(r5, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1) 2.719592761s ago: executing program 5 (id=824): r0 = syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d370f0100000000000000000006241a0000000c241b4800f3ff00050080050905810300020000000904010000020d00000904010102020d0000090582020004000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000300000058000180440004002000030000000004000000000000000000000006000000000000000100000000200002000a0000000000000000000000000000000000ffff00000000000000000d0001007564703a73"], 0x6c}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000480)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x80, 0x1c, {0x6, 0x4, 0xd, 0xf800, 0x4007, 0x9, 0x9, 0x5e16, 0x3, 0x4, 0x5, 0xb}}, 0x0, 0x0, 0x0, 0x0}) 2.690269722s ago: executing program 0 (id=825): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_type(r0, &(0x7f00000001c0), 0x2, 0x0) r1 = fsmount(0xffffffffffffffff, 0x1, 0x1) r2 = openat$cgroup_type(r0, &(0x7f0000000280), 0x2, 0x0) r3 = openat$cgroup_type(r0, &(0x7f0000000340), 0x2, 0x0) write$cgroup_type(r3, &(0x7f00000004c0), 0xfffffffffffffd04) r4 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000c40), 0x12) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYRES16=r1, @ANYRESDEC, @ANYRES8=r4, @ANYRES32=r5, @ANYRES16=r1, @ANYRESHEX=r2, @ANYRESOCT=r3], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r6}, &(0x7f0000000480), &(0x7f0000000080)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_enter\x00', r7}, 0x10) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) utime(&(0x7f0000000200)='./file0\x00', 0x0) syz_clone(0x40020000, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = openat$cgroup_ro(r5, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r8, &(0x7f0000000200)=0x1, 0x12) syz_mount_image$ext4(&(0x7f0000000240)='ext3\x00', &(0x7f0000000f00)='./file0\x00', 0x800, &(0x7f0000000180), 0xff, 0x27e, &(0x7f0000000500)="$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") syz_emit_ethernet(0xbe, &(0x7f00000000c0)={@local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty}, {0x0, 0x4e22, 0x9c, 0x0, @wg=@initiation={0x1, 0x2, "4d19308fd4716602fc42c5775b3ff4b8e478957a9fd9906c6ba70a16c9e7ec5e", "c5790620ed1b0020002f7fa35fc287a470366ddc51d8159e9877f3d8ac2693fb8f0141d835bf05f1db39a966306a49f2", "b7f980c9c55898610dabc5ac55d75cb262ebde140eb5113eb922a759", {"76ae2f8d752bcefe6973ea968b32b310", "d379abea32e2772a33f5d6add3496fc6"}}}}}}}, 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8000, 0x1) symlink(&(0x7f0000000b00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') creat(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='\x00') 2.555966314s ago: executing program 0 (id=826): r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000240)={{0x12, 0x1, 0x150, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6, 0x24, 0x1a, 0x1}}, {{0x9, 0x5, 0x81, 0x3, 0x40}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x0, 0x2, 0x20}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x8, 0x10, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x7fffffff}, 0x10) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c480000", @ANYRES16=0x0, @ANYBLOB="010000000008000000001200000007"], 0x1c}}, 0x0) r4 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_load(r4, &(0x7f0000000340)={0xf97cff8c, 0x8}, 0x2000) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) mount$binderfs(0x0, &(0x7f0000000000)='./binderfs\x00', &(0x7f0000001500), 0x1000001, &(0x7f0000001540)={[{@stats}]}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000700)={0x44, 0x0, &(0x7f00000001c0)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0xa}, &(0x7f0000000540)={0x20, 0x80, 0x1c, {0x5d, 0x1, 0x4, 0x23d, 0x1, 0x4, 0x492, 0x19, 0x1000, 0x200, 0x101, 0x10}}, 0x0, &(0x7f00000005c0)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000600)={0x20, 0x87, 0x2, 0x1}, 0x0}) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f00000000c0)={0x40, 0x23, 0x74, {0x74, 0xc, "c6871d467b42368c84dbe9210bfe56ab679bce3583fb6f9dddbd73634329fccd4b3bd15531255c0f48efcc6d90ccf176cff6953109e5fe2ddef7c144db2b44fcab30718f59540f138957d37e773d08fc5ac8e347057ccf7220533f64564bb490c8b3c44332ec6d871ec17ccef8dd20b82018"}}, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x816}}, &(0x7f0000000140)={0x0, 0xf, 0x38, {0x5, 0xf, 0x38, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x7, 0x9, 0x5}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "c69ce19d2f092801a535de4461c39bea"}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x2, 0x0, 0x1}, @wireless={0xb, 0x10, 0x1, 0x4, 0x2, 0xd, 0x28, 0x3}, @ptm_cap={0x3}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xf4, 0x60, 0x7, 0x3, "fdc7723c", "bedf928e"}}, &(0x7f0000000200)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x7, 0x0, 0x2, 0x2, 0x9, 0x1000, 0x1}}}, &(0x7f0000000900)={0x84, &(0x7f0000000300)={0x40, 0x17, 0x84, "24bd29e4e372234597bb16f3986588988935249378086e23d8fa55d8ad3ea8fc576ce247128d8391af40e78baea887b70e5ecda9baa72d964eb25e0ae30f2d11cec1360d4768359452b1e0d5380d9f1b089ca1c52606126ce787430ddbe14bb262beabdab2627537b6c7dc23b92302ac70a915a500a5750c0c9b6fb26074135a9ef505c9"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x80}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000440)={0x20, 0x0, 0x4, {0x3, 0x1}}, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x1c0, 0x2}}, &(0x7f00000004c0)={0x40, 0x7, 0x2, 0x6fc0}, &(0x7f0000000580)={0x40, 0x9, 0x1, 0x80}, &(0x7f0000000640)={0x40, 0xb, 0x2, "e29a"}, &(0x7f0000000680)={0x40, 0xf, 0x2, 0x5}, &(0x7f00000006c0)={0x40, 0x13, 0x6, @remote}, &(0x7f0000000780)={0x40, 0x17, 0x6, @multicast}, &(0x7f00000007c0)={0x40, 0x19, 0x2, "f0e0"}, &(0x7f0000000800)={0x40, 0x1a, 0x2, 0x81}, &(0x7f0000000840)={0x40, 0x1c, 0x1, 0x4}, &(0x7f0000000880)={0x40, 0x1e, 0x1, 0x7}, &(0x7f00000008c0)={0x40, 0x21, 0x1, 0x7}}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_connect$uac1(0x3, 0xd7, &(0x7f00000009c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc5, 0x3, 0x1, 0x7, 0x80, 0x10, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x40, 0xbd}, [@input_terminal={0xc, 0x24, 0x2, 0x3, 0x100, 0x1, 0x80, 0x1, 0x5, 0x6}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x6, 0x3, 0x40, 0x5, '\'i8'}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x0, 0x3, 0x9, 0x8, "3b8b352e"}, @as_header={0x7, 0x24, 0x1, 0xb, 0x5d, 0x4}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x4b, 0x2, 0x8, {0x7, 0x25, 0x1, 0x182, 0x10, 0x6}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x5, 0xfffb, 0x0, "de01180c29dafe92"}, @as_header={0x7, 0x24, 0x1, 0x8, 0x1, 0x4}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x2, 0x7fff, 0x0, "d7f78c735c00a7af"}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x597, 0xc, 0x5}, @format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0xfff8, 0x10, 0x8, "1d"}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x9, 0x80, 0xf3, {0x7, 0x25, 0x1, 0x2, 0x9, 0x2}}}}}}}]}}, &(0x7f0000000c40)={0xa, &(0x7f0000000ac0)={0xa, 0x6, 0x200, 0x1b, 0xa6, 0x12, 0x20, 0x2}, 0xc, &(0x7f0000000b00)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0x3, 0x2, 0x7fff}]}, 0x1, [{0xc9, &(0x7f0000000b40)=@string={0xc9, 0x3, "86d33c10605f78e1967e88468e8c30305eb425b8ed90b95ab3a925b1474932df2275af9cb9d0e286f3eb93631ff801d3c11b1cbebd5aacbe7dae147eabdcf5b447274a56d57600f07fdf60b92a8bd9cd548e4496abe58fc0b2bf6bdec5f5423e70305c8209a19ee57c31ccc8ae20edd4f6f2cdc8ae1a5ae8e050318fd2f52364fd165d3237106040e7c4c88c40269c57d5205c8aa711f3fab411b305fc9d921ce6ef3d1a895d053f8c2bbc3bad4fabb248c5d07eca4b783f231a9dbd864b1611e0027c2172f053"}}]}) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 1.278292902s ago: executing program 3 (id=827): socket$inet6(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) signalfd4(r0, &(0x7f0000000100)={[0x118dfad8]}, 0x8, 0x800) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r1}, 0x10) r2 = syz_clone(0x2008000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x8, r2) waitid(0x1, r2, 0x0, 0x4, 0x0) 1.262593582s ago: executing program 3 (id=828): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000d40)=@nat={'nat\x00', 0x670, 0x5, 0x398, 0xf8, 0xf8, 0xfeffffff, 0x220, 0x2f0, 0x3f8, 0x3f8, 0xffffffff, 0x3f8, 0xf8, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'veth1_to_team\x00', {}, {}, 0x6}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @common=@inet=@tcp={{0x30}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @icmp_id}}}}, {{@ip={@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lo\x00', 'vlan0\x00'}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, 0x0, 0x0, 'pim6reg0\x00', 'wlan0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@private2, @ipv4=@local}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f8) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x8, 0x0, 0x1003, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000200000005000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000020000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x180204}], 0x1) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r3, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000001c0)={r5}, 0x4) 1.200027533s ago: executing program 3 (id=829): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000d40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="ac00000001d6658a9c99935a7563f2cc3da95a1a8a4cc30000000010", @ANYRES32=r3, @ANYBLOB="10001d80040000800400008004000080"], 0x2c}, 0x1, 0x0, 0x0, 0x20048040}, 0x4000010) (async) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="05001e0004000000040000000a00000040000000f44f45", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) close(0x3) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b00000008000000080000000600000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000e7ff0000"], 0x50) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x40, 0x7fff0001}]}) open(&(0x7f0000000040)='./bus\x00', 0x1612c2, 0x0) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x44, r7, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x18, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x14, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}]}, {0x4}]}]}, @ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x24044815}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r8}, 0x10) (async) sched_setaffinity(r4, 0x8, &(0x7f0000000140)=0x5) r9 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x208400, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) recvmsg$unix(r9, 0x0, 0x40012002) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000600)=@ipv4_newroute={0x38, 0x18, 0x1, 0x70bd26, 0x25dfdbff, {0x2, 0x0, 0x0, 0x0, 0xfe, 0x0, 0xff, 0x9}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, @LWTUNNEL_IP_OPT_GENEVE_TYPE={0x5}}}}]}, 0x38}}, 0x0) creat(0x0, 0xca328d02d453da0) (async) getpeername(r0, &(0x7f0000000080)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev}}, &(0x7f0000000000)=0x80) execve(&(0x7f0000000180)='./file0\x00', &(0x7f0000000600)={[0xfffffffffffffffd]}, 0x0) 1.188837053s ago: executing program 3 (id=830): r0 = socket$inet(0xa, 0x1, 0x7) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ffffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000007c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000640), &(0x7f0000000780)='%+9llu \x00'}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000840)=@bpf_lsm={0x1d, 0x9, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000180000000000000020000001800000007000000000000000000000085100000f9ffffff18210000", @ANYRES32=r2, @ANYBLOB="0000007a0a2a62220b855000100000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x1, 0x10, &(0x7f0000000540)=""/16, 0x41100, 0x16, '\x00', r3, 0x1b, r1, 0x8, &(0x7f00000005c0)={0x80000006, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x1, 0x5, 0x3}, 0x10, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000800)=[r1, r1, r2, r4], 0x0, 0x10, 0x9, @void, @value}, 0x94) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001d40)={'syztnl0\x00', &(0x7f0000001cc0)={'syztnl2\x00', 0x0, 0x29, 0x5, 0xc, 0x3, 0x51, @dev={0xfe, 0x80, '\x00', 0x2e}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10, 0x20, 0x9, 0x7f}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r6 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r7 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYRES32=r6, @ANYBLOB="af06cbdbbce942b5e5dd49c8", @ANYBLOB="c968d4db4a996dfa2ddad5c28d49a1e9c4f0fc9a490d07845ff9d16a22247b91e6535f2fb0a7e14efb9772e64f4de40bbe30865bafa654666ad9fa012f8d2ac57f02ae81256cbe8b62da2187fd7de92a41543234e840bfa325b175ecd569597f7e53586db3fe6c0751cc6fff96f38dde633903f042a8500d51f7b74563c03941cd0a9251bf49925d4838b266757406b2a14629a09bdf108be493254d189592eeb3a0e65d44bd38d58385557efc4c5b4b6634275b239f83c32fa9f370d6b73d4eb1764bc9f3ed6e419141397b6c6381495c88f8880258c3a001288d2449bacce2443fe244b947bbacdc5a7b1033b02ae30bb4", @ANYRESOCT=r3, @ANYRES8=r7, @ANYRESOCT=r4, @ANYRES64=r5, @ANYRES16=r7], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r9}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1c}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x20}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x4, 0x0, 0xa, 0x9}, {0x18, 0x2, 0x2, 0x0, r8}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000001ec0)={'syztnl0\x00', &(0x7f0000001e40)={'sit0\x00', 0x0, 0x8038, 0x0, 0x3963, 0x1, {{0xf, 0x4, 0x1, 0x0, 0x3c, 0x66, 0x0, 0x4, 0x4, 0x0, @remote, @empty, {[@cipso={0x86, 0x12, 0x3, [{0x1, 0x7, "9f3e744759"}, {0x2, 0x5, "7f47a4"}]}, @lsrr={0x83, 0x13, 0x29, [@dev={0xac, 0x14, 0x14, 0xc}, @dev={0xac, 0x14, 0x14, 0x18}, @broadcast, @empty]}]}}}}}) getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000003700)={@broadcast, @remote}, &(0x7f0000003740)=0xc) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000003780)={@remote}, &(0x7f00000037c0)=0x14) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r12, {0x0, 0xb}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_RATE_ENABLE={0x8, 0x5, 0x1ff}]}}]}, 0x38}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x9, 0x28, &(0x7f0000000600)=ANY=[], 0x0, 0x9, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @cgroup_sock=0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) utimes(0x0, &(0x7f0000000340)={{}, {0x77359400}}) 829.859248ms ago: executing program 3 (id=831): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000000, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000e00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x1d, &(0x7f00000001c0), 0x4) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x8000, &(0x7f0000000100), 0x1, 0x7a2, &(0x7f0000000f80)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x143042, 0x8d) pwritev2(r3, &(0x7f0000000100)=[{&(0x7f00000000c0)="ff", 0x1}], 0x1, 0x5405, 0xd402, 0x0) sendfile(r3, r3, 0x0, 0x7a680000) 768.076339ms ago: executing program 2 (id=832): sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYRES16=0x0], 0x138}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) unlink(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0xa) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400004006000000050000000010098cec1021431333cc00", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES64=r0, @ANYRES32=r7, @ANYRES64=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{}, &(0x7f0000000000), &(0x7f00000005c0)}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x82000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r8}, 0x10) openat(0xffffffffffffff9c, 0x0, 0x163c41, 0x98) 292.356536ms ago: executing program 5 (id=833): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x12, 0x5, &(0x7f0000000040)=@framed={{0x56, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x20}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) (fail_nth: 1) 233.034686ms ago: executing program 3 (id=834): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x7, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYRES32=r0], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002e00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r5, r6, 0x5, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r5}, &(0x7f00000006c0), &(0x7f0000000700)=r4}, 0x20) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) pipe(0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10) sendmsg$inet(r3, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) r9 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r9, 0x400448c8, &(0x7f0000000440)={r2, r2, 0x0, 0x0, 0x0, 0x80, 0x7, 0x9, 0x1, 0x0, 0x3, 0x2, 'syz1\x00'}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r10 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r10, 0x1, 0x25, &(0x7f0000000200)=0x633a, 0x4) recvmmsg(r10, &(0x7f0000000340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0)=""/171, 0xab}, 0x20000}], 0x1, 0x12141, 0x0) 184.191047ms ago: executing program 6 (id=835): socket$packet(0x11, 0xa, 0x300) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) syz_emit_ethernet(0x33, &(0x7f0000000340)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x3c, 0x25, 0x0, 0x0, 0xfc, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x11, 0x0, @gue={{0x1, 0x0, 0x0, 0x3, 0x100, @void}, "d889e52303"}}}}}}, 0x0) 9.653929ms ago: executing program 5 (id=836): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000001540)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000e12020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000006fd6850000002d000000850000002300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sys_enter\x00', r0}, 0x10) getrandom(0x0, 0x0, 0x0) 0s ago: executing program 6 (id=837): socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) ioprio_set$pid(0x1, r0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) poll(0x0, 0x0, 0x5) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "69dcaf20127e9a854528f45826cb35be51ca73845d177dd8dba7221daeccfda56b75cfe286fdd14cb5b11b1cab614fec2236da7d88ea0f0700"}, 0x48, 0xfffffffffffffffe) keyctl$search(0xa, r3, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0)=0x2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x5c, 0x1, 0x1, 0x201, 0x0, 0x0, {0xa}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x4ad}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @loopback}}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x4, 0x1, 0x1}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000850}, 0x24008840) kernel console output (not intermixed with test programs): loop3: rw=2049, want=45104, limit=40427 [ 272.053983][ T346] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 272.233955][ T346] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 272.243153][ T346] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.251390][ T346] usb 3-1: Product: syz [ 272.255810][ T346] usb 3-1: Manufacturer: syz [ 272.260428][ T346] usb 3-1: SerialNumber: syz [ 272.268614][ T3968] loop3: detected capacity change from 0 to 256 [ 272.311978][ T3968] exFAT-fs (loop3): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d) [ 272.804233][ T3954] UDC core: couldn't find an available UDC or it's busy: -16 [ 272.811856][ T3954] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 272.863933][ T301] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 272.870386][ T301] cdc_ncm 1-1:1.0: dwNtbInMaxSize=4 is too small. Using 2048 [ 272.877983][ T301] cdc_ncm 1-1:1.0: setting rx_max = 2048 [ 273.073949][ T301] cdc_ncm 1-1:1.0: setting tx_max = 88 [ 273.081461][ T301] cdc_ncm 1-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM, 42:42:42:42:42:42 [ 273.096660][ T301] usb 1-1: USB disconnect, device number 24 [ 273.103758][ T301] cdc_ncm 1-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM [ 273.403912][ T346] cdc_ncm 3-1:1.0: failed to get mac address [ 273.423919][ T346] cdc_ncm 3-1:1.0: bind() failure [ 273.443897][ T346] cdc_ncm: probe of 3-1:1.1 failed with error -71 [ 273.463896][ T346] cdc_mbim: probe of 3-1:1.1 failed with error -71 [ 273.471932][ T346] usb 3-1: USB disconnect, device number 24 [ 273.733886][ T346] Bluetooth: hci0: command 0x1003 tx timeout [ 273.739986][ T47] Bluetooth: hci0: sending frame failed (-49) [ 273.843888][ T579] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 273.929803][ T4004] netlink: 12 bytes leftover after parsing attributes in process `syz.2.648'. [ 274.065031][ T4004] loop2: detected capacity change from 0 to 40427 [ 274.083912][ T579] usb 1-1: Using ep0 maxpacket: 8 [ 274.143662][ T4004] F2FS-fs (loop2): invalid crc value [ 274.150119][ T4004] F2FS-fs (loop2): Found nat_bits in checkpoint [ 274.180817][ T4004] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 274.204014][ T579] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 274.313898][ T301] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 274.383944][ T579] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 274.393215][ T579] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.401290][ T579] usb 1-1: Product: syz [ 274.405465][ T579] usb 1-1: Manufacturer: syz [ 274.410041][ T579] usb 1-1: SerialNumber: syz [ 274.553915][ T301] usb 4-1: Using ep0 maxpacket: 8 [ 274.904377][ T301] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 274.918270][ T283] attempt to access beyond end of device [ 274.918270][ T283] loop2: rw=2049, want=45104, limit=40427 [ 275.038886][ T4014] fuse: Unknown parameter 'fd0x0000000000000003' [ 275.074021][ T301] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 275.084411][ T301] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.092428][ T301] usb 4-1: Product: syz [ 275.097171][ T301] usb 4-1: Manufacturer: syz [ 275.101778][ T301] usb 4-1: SerialNumber: syz [ 275.535177][ T4001] UDC core: couldn't find an available UDC or it's busy: -16 [ 275.542678][ T4001] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 275.583938][ T579] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 275.590385][ T579] cdc_ncm 1-1:1.0: dwNtbInMaxSize=4 is too small. Using 2048 [ 275.597869][ T579] cdc_ncm 1-1:1.0: setting rx_max = 2048 [ 275.773917][ T2130] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 275.794077][ T579] cdc_ncm 1-1:1.0: setting tx_max = 88 [ 275.801027][ T579] cdc_ncm 1-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM, 42:42:42:42:42:42 [ 275.813229][ T579] usb 1-1: USB disconnect, device number 25 [ 275.819838][ T579] cdc_ncm 1-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM [ 275.829676][ T39] Bluetooth: hci0: command 0x1001 tx timeout [ 275.835730][ T536] Bluetooth: hci0: sending frame failed (-49) [ 276.013895][ T2130] usb 2-1: Using ep0 maxpacket: 8 [ 276.135113][ T2130] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 276.253907][ T426] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 276.303958][ T2130] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 276.313090][ T2130] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.314381][ T4006] UDC core: couldn't find an available UDC or it's busy: -16 [ 276.321430][ T2130] usb 2-1: Product: syz [ 276.332822][ T2130] usb 2-1: Manufacturer: syz [ 276.337789][ T2130] usb 2-1: SerialNumber: syz [ 276.338700][ T4006] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 276.373988][ T301] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 276.381359][ T301] cdc_ncm 4-1:1.0: dwNtbInMaxSize=4 is too small. Using 2048 [ 276.389019][ T301] cdc_ncm 4-1:1.0: setting rx_max = 2048 [ 276.594017][ T301] cdc_ncm 4-1:1.0: setting tx_max = 88 [ 276.600837][ T301] cdc_ncm 4-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM, 42:42:42:42:42:42 [ 276.616581][ T426] usb 3-1: config 0 has no interfaces? [ 276.622087][ T426] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 276.638356][ T301] usb 4-1: USB disconnect, device number 34 [ 276.648940][ T301] cdc_ncm 4-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM [ 276.657905][ T426] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.671760][ T426] usb 3-1: config 0 descriptor?? [ 277.237550][ T4062] netlink: 12 bytes leftover after parsing attributes in process `syz.0.658'. [ 277.337200][ T4062] loop0: detected capacity change from 0 to 40427 [ 277.383900][ T579] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 277.418226][ T4062] F2FS-fs (loop0): invalid crc value [ 277.424888][ T4062] F2FS-fs (loop0): Found nat_bits in checkpoint [ 277.456375][ T4062] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 277.463985][ T2130] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 277.470421][ T2130] cdc_ncm 2-1:1.0: setting rx_max = 16384 [ 277.643877][ T579] usb 4-1: Using ep0 maxpacket: 8 [ 277.673945][ T2130] cdc_ncm 2-1:1.0: setting tx_max = 16384 [ 277.681191][ T2130] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM, 42:42:42:42:42:42 [ 277.694549][ T2130] usb 2-1: USB disconnect, device number 30 [ 277.700877][ T2130] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM [ 277.773953][ T579] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 277.893923][ T391] Bluetooth: hci0: command 0x1009 tx timeout [ 277.943944][ T579] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 277.953062][ T579] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.961088][ T579] usb 4-1: Product: syz [ 277.965310][ T579] usb 4-1: Manufacturer: syz [ 277.969917][ T579] usb 4-1: SerialNumber: syz [ 278.021034][ T281] attempt to access beyond end of device [ 278.021034][ T281] loop0: rw=2049, want=45104, limit=40427 [ 278.245208][ T4072] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 278.253373][ T4073] netlink: 12 bytes leftover after parsing attributes in process `syz.0.669'. [ 278.352895][ T4073] loop0: detected capacity change from 0 to 40427 [ 278.398077][ T4073] F2FS-fs (loop0): invalid crc value [ 278.404616][ T4073] F2FS-fs (loop0): Found nat_bits in checkpoint [ 278.436172][ T4073] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 278.996718][ T301] usb 3-1: USB disconnect, device number 25 [ 279.032199][ T281] attempt to access beyond end of device [ 279.032199][ T281] loop0: rw=2049, want=45104, limit=40427 [ 279.066401][ T4078] netlink: 12 bytes leftover after parsing attributes in process `syz.2.661'. [ 279.084386][ T4059] UDC core: couldn't find an available UDC or it's busy: -16 [ 279.091896][ T4059] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 279.153947][ T579] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 279.160438][ T579] cdc_ncm 4-1:1.0: dwNtbInMaxSize=4 is too small. Using 2048 [ 279.183895][ T579] cdc_ncm 4-1:1.0: setting rx_max = 2048 [ 279.211672][ T4078] loop2: detected capacity change from 0 to 40427 [ 279.259825][ T4078] F2FS-fs (loop2): invalid crc value [ 279.266262][ T4078] F2FS-fs (loop2): Found nat_bits in checkpoint [ 279.296912][ T4078] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 279.373928][ T579] cdc_ncm 4-1:1.0: setting tx_max = 88 [ 279.380939][ T579] cdc_ncm 4-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM, 42:42:42:42:42:42 [ 279.392961][ T579] usb 4-1: USB disconnect, device number 35 [ 279.400537][ T579] cdc_ncm 4-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM [ 279.433953][ T2130] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 279.793957][ T2130] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 279.804896][ T2130] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 279.814665][ T2130] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 279.823784][ T2130] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.832645][ T2130] usb 1-1: config 0 descriptor?? [ 279.847284][ T283] attempt to access beyond end of device [ 279.847284][ T283] loop2: rw=2049, want=45104, limit=40427 [ 279.968624][ T4087] fuse: Unknown parameter 'fd0x0000000000000003' [ 280.075312][ T30] audit: type=1400 audit(1747484317.719:154): avc: denied { create } for pid=4079 comm="syz.0.662" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 280.310256][ T579] Bluetooth: hci1: command 0x1003 tx timeout [ 280.317136][ T47] Bluetooth: hci1: sending frame failed (-49) [ 280.557868][ T4094] loop0: detected capacity change from 0 to 512 [ 280.614707][ T4094] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 280.680318][ T4094] EXT4-fs (loop0): 1 orphan inode deleted [ 280.694316][ T4094] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 280.718381][ T4094] ext4 filesystem being mounted at /149/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 280.758806][ T30] audit: type=1400 audit(1747484318.399:155): avc: denied { append } for pid=4079 comm="syz.0.662" path="/149/file1/memory.events" dev="loop0" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 280.809502][ T30] audit: type=1400 audit(1747484318.399:156): avc: denied { accept } for pid=4079 comm="syz.0.662" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 281.062258][ T4104] loop3: detected capacity change from 0 to 256 [ 281.164901][ T4104] exfat: Unknown parameter 'iochar' [ 281.221807][ T4104] FAULT_INJECTION: forcing a failure. [ 281.221807][ T4104] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 281.235107][ T4104] CPU: 1 PID: 4104 Comm: syz.3.666 Not tainted 5.15.182-syzkaller-00462-g57725b368731 #0 [ 281.244930][ T4104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 281.255016][ T4104] Call Trace: [ 281.258299][ T4104] [ 281.261236][ T4104] __dump_stack+0x21/0x30 [ 281.265602][ T4104] dump_stack_lvl+0xee/0x150 [ 281.270213][ T4104] ? show_regs_print_info+0x20/0x20 [ 281.275426][ T4104] ? dump_stack+0x9/0x20 [ 281.279675][ T4104] dump_stack+0x15/0x20 [ 281.283833][ T4104] should_fail+0x3c1/0x510 [ 281.288256][ T4104] should_fail_usercopy+0x1a/0x20 [ 281.293283][ T4104] _copy_from_user+0x20/0xd0 [ 281.297885][ T4104] iovec_from_user+0x1bc/0x2f0 [ 281.302667][ T4104] ? irqentry_exit_cond_resched+0x29/0x30 [ 281.308394][ T4104] __import_iovec+0x71/0x400 [ 281.313000][ T4104] import_iovec+0x7c/0xb0 [ 281.317335][ T4104] do_readv+0x1fe/0x3e0 [ 281.321500][ T4104] ? do_iter_readv_writev+0x600/0x600 [ 281.326880][ T4104] ? __kasan_check_write+0x14/0x20 [ 281.332000][ T4104] ? fput_many+0x15a/0x1a0 [ 281.336422][ T4104] ? __kasan_check_write+0x14/0x20 [ 281.341538][ T4104] ? switch_fpu_return+0x15d/0x2c0 [ 281.346657][ T4104] __x64_sys_readv+0x7d/0x90 [ 281.351251][ T4104] x64_sys_call+0x58b/0x9a0 [ 281.355769][ T4104] do_syscall_64+0x4c/0xa0 [ 281.360193][ T4104] ? clear_bhb_loop+0x35/0x90 [ 281.364872][ T4104] ? clear_bhb_loop+0x35/0x90 [ 281.369554][ T4104] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 281.375477][ T4104] RIP: 0033:0x7ff0c4229969 [ 281.379901][ T4104] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 281.399518][ T4104] RSP: 002b:00007ff0c2850038 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 281.407945][ T4104] RAX: ffffffffffffffda RBX: 00007ff0c4451160 RCX: 00007ff0c4229969 [ 281.415922][ T4104] RDX: 0000000000000006 RSI: 0000200000000a00 RDI: 000000000000000a [ 281.423896][ T4104] RBP: 00007ff0c2850090 R08: 0000000000000000 R09: 0000000000000000 [ 281.431873][ T4104] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 281.439849][ T4104] R13: 0000000000000000 R14: 00007ff0c4451160 R15: 00007ffe9e2a8e68 [ 281.447836][ T4104] [ 281.716349][ T4104] syz.3.666 (4104) used greatest stack depth: 21944 bytes left [ 281.935874][ T4111] FAULT_INJECTION: forcing a failure. [ 281.935874][ T4111] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 281.973969][ T4111] CPU: 0 PID: 4111 Comm: syz.3.670 Not tainted 5.15.182-syzkaller-00462-g57725b368731 #0 [ 281.983818][ T4111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 281.993896][ T4111] Call Trace: [ 281.997186][ T4111] [ 282.000126][ T4111] __dump_stack+0x21/0x30 [ 282.004475][ T4111] dump_stack_lvl+0xee/0x150 [ 282.009213][ T4111] ? show_regs_print_info+0x20/0x20 [ 282.014434][ T4111] dump_stack+0x15/0x20 [ 282.018600][ T4111] should_fail+0x3c1/0x510 [ 282.023018][ T4111] should_fail_usercopy+0x1a/0x20 [ 282.028037][ T4111] _copy_from_user+0x20/0xd0 [ 282.032623][ T4111] __copy_msghdr_from_user+0xaf/0x5e0 [ 282.037990][ T4111] ? __schedule+0xb76/0x14c0 [ 282.042576][ T4111] ? __ia32_sys_shutdown+0x1e0/0x1e0 [ 282.047880][ T4111] ? _raw_spin_lock+0x8e/0xe0 [ 282.052559][ T4111] ___sys_sendmsg+0x156/0x260 [ 282.057232][ T4111] ? __sys_sendmsg+0x250/0x250 [ 282.061995][ T4111] ? __fdget+0x1a1/0x230 [ 282.066240][ T4111] __x64_sys_sendmsg+0x1e2/0x2a0 [ 282.071188][ T4111] ? release_firmware_map_entry+0x190/0x190 [ 282.077086][ T4111] ? ___sys_sendmsg+0x260/0x260 [ 282.081939][ T4111] ? ksys_write+0x1eb/0x240 [ 282.086452][ T4111] ? __kasan_check_write+0x14/0x20 [ 282.091562][ T4111] ? switch_fpu_return+0x15d/0x2c0 [ 282.096671][ T4111] x64_sys_call+0x4b/0x9a0 [ 282.101082][ T4111] do_syscall_64+0x4c/0xa0 [ 282.105493][ T4111] ? clear_bhb_loop+0x35/0x90 [ 282.110169][ T4111] ? clear_bhb_loop+0x35/0x90 [ 282.114837][ T4111] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 282.120726][ T4111] RIP: 0033:0x7ff0c4229969 [ 282.125134][ T4111] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 282.144736][ T4111] RSP: 002b:00007ff0c2892038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 282.153150][ T4111] RAX: ffffffffffffffda RBX: 00007ff0c4450fa0 RCX: 00007ff0c4229969 [ 282.161114][ T4111] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000008 [ 282.169168][ T4111] RBP: 00007ff0c2892090 R08: 0000000000000000 R09: 0000000000000000 [ 282.177133][ T4111] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 282.185108][ T4111] R13: 0000000000000000 R14: 00007ff0c4450fa0 R15: 00007ffe9e2a8e68 [ 282.193084][ T4111] [ 282.356691][ T4117] netlink: 12 bytes leftover after parsing attributes in process `syz.2.673'. [ 282.382853][ T346] Bluetooth: hci1: command 0x1001 tx timeout [ 282.389093][ T1731] Bluetooth: hci1: sending frame failed (-49) [ 282.477282][ T4120] netlink: 44 bytes leftover after parsing attributes in process `syz.3.671'. [ 282.496383][ T4120] netlink: 4 bytes leftover after parsing attributes in process `syz.3.671'. [ 282.536688][ T4117] loop2: detected capacity change from 0 to 40427 [ 282.558576][ T4117] F2FS-fs (loop2): invalid crc value [ 282.574167][ T4117] F2FS-fs (loop2): Found nat_bits in checkpoint [ 282.636406][ T4117] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 282.655715][ T4125] loop4: detected capacity change from 0 to 256 [ 282.725501][ T4125] exFAT-fs (loop4): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d) [ 282.813994][ T301] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 282.864378][ T30] audit: type=1400 audit(1747484320.509:157): avc: denied { setopt } for pid=4126 comm="syz.0.675" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 282.884303][ T30] audit: type=1400 audit(1747484320.509:158): avc: denied { create } for pid=4126 comm="syz.0.675" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 282.903561][ T2130] usbhid 1-1:0.0: can't add hid device: -71 [ 282.903678][ T30] audit: type=1400 audit(1747484320.509:159): avc: denied { ioctl } for pid=4126 comm="syz.0.675" path="socket:[24203]" dev="sockfs" ino=24203 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 282.909849][ T2130] usbhid: probe of 1-1:0.0 failed with error -71 [ 282.934496][ T30] audit: type=1400 audit(1747484320.509:160): avc: denied { write } for pid=4126 comm="syz.0.675" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 282.985519][ T2130] usb 1-1: USB disconnect, device number 26 [ 282.989370][ T4129] fuse: Unknown parameter 'fd0x0000000000000003' [ 283.063931][ T301] usb 4-1: Using ep0 maxpacket: 8 [ 283.141221][ T283] attempt to access beyond end of device [ 283.141221][ T283] loop2: rw=2049, want=45104, limit=40427 [ 283.183947][ T301] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 283.363973][ T301] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 283.384702][ T301] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.401363][ T301] usb 4-1: Product: syz [ 283.409956][ T301] usb 4-1: Manufacturer: syz [ 283.420038][ T301] usb 4-1: SerialNumber: syz [ 284.003281][ T4139] netlink: 36 bytes leftover after parsing attributes in process `syz.0.680'. [ 284.197379][ T30] audit: type=1400 audit(1747484321.839:161): avc: denied { name_bind } for pid=4143 comm="syz.2.681" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 284.219115][ T30] audit: type=1400 audit(1747484321.839:162): avc: denied { node_bind } for pid=4143 comm="syz.2.681" saddr=255.255.255.255 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 284.296227][ T30] audit: type=1400 audit(1747484321.939:163): avc: denied { read write } for pid=4140 comm="syz.4.679" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 284.321680][ T4148] FAULT_INJECTION: forcing a failure. [ 284.321680][ T4148] name failslab, interval 1, probability 0, space 0, times 1 [ 284.364284][ T4148] CPU: 1 PID: 4148 Comm: syz.2.681 Not tainted 5.15.182-syzkaller-00462-g57725b368731 #0 [ 284.374220][ T4148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 284.384285][ T4148] Call Trace: [ 284.387571][ T4148] [ 284.390510][ T4148] __dump_stack+0x21/0x30 [ 284.394862][ T4148] dump_stack_lvl+0xee/0x150 [ 284.399460][ T4148] ? show_regs_print_info+0x20/0x20 [ 284.404671][ T4148] dump_stack+0x15/0x20 [ 284.408835][ T4148] should_fail+0x3c1/0x510 [ 284.413262][ T4148] __should_failslab+0xa4/0xe0 [ 284.418034][ T4148] should_failslab+0x9/0x20 [ 284.422541][ T4148] slab_pre_alloc_hook+0x3b/0xe0 [ 284.427484][ T4148] ? __alloc_skb+0xe0/0x740 [ 284.431996][ T4148] kmem_cache_alloc+0x44/0x260 [ 284.436771][ T4148] __alloc_skb+0xe0/0x740 [ 284.441109][ T4148] __tcp_send_ack+0x9b/0x6d0 [ 284.445713][ T4148] ? __tcp_select_window+0x4ca/0x970 [ 284.451007][ T4148] tcp_send_ack+0x3b/0x60 [ 284.455345][ T4148] tcp_cleanup_rbuf+0x319/0x5f0 [ 284.460213][ T4148] ? tcp_recvmsg_locked+0xd59/0x2640 [ 284.463908][ T2130] Bluetooth: hci1: command 0x1009 tx timeout [ 284.465500][ T4148] tcp_recvmsg_locked+0xe87/0x2640 [ 284.476567][ T4148] ? release_firmware_map_entry+0x190/0x190 [ 284.482489][ T4148] ? tcp_recvmsg+0x720/0x720 [ 284.487090][ T4148] ? tcp_recv_timestamp+0x671/0x6b0 [ 284.492298][ T4148] ? __memmove+0x1a0/0x1a0 [ 284.496726][ T4148] tcp_recvmsg+0x21b/0x720 [ 284.501162][ T4148] ? tcp_recv_timestamp+0x6b0/0x6b0 [ 284.506378][ T4148] ? selinux_socket_sendmsg+0x2e0/0x2e0 [ 284.511946][ T4148] inet_recvmsg+0x134/0x470 [ 284.516468][ T4148] ? __fget_files+0x2c4/0x320 [ 284.521159][ T4148] ? inet_sendpage+0x100/0x100 [ 284.525933][ T4148] ? security_socket_recvmsg+0x87/0xb0 [ 284.531407][ T4148] __sys_recvfrom+0x363/0x4a0 [ 284.536091][ T4148] ? __ia32_sys_send+0xb0/0xb0 [ 284.540864][ T4148] ? __kasan_check_write+0x14/0x20 [ 284.545972][ T4148] __x64_sys_recvfrom+0xe5/0x100 [ 284.550895][ T4148] x64_sys_call+0x6e/0x9a0 [ 284.555332][ T4148] do_syscall_64+0x4c/0xa0 [ 284.559753][ T4148] ? clear_bhb_loop+0x35/0x90 [ 284.564427][ T4148] ? clear_bhb_loop+0x35/0x90 [ 284.569115][ T4148] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 284.575065][ T4148] RIP: 0033:0x7f960ede8969 [ 284.579491][ T4148] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 284.599083][ T4148] RSP: 002b:00007f960d430038 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 284.607482][ T4148] RAX: ffffffffffffffda RBX: 00007f960f010080 RCX: 00007f960ede8969 [ 284.615458][ T4148] RDX: 00000000168f6f3d RSI: 0000200000000480 RDI: 0000000000000003 [ 284.623591][ T4148] RBP: 00007f960d430090 R08: 0000000000000000 R09: fffffffffffffecb [ 284.631549][ T4148] R10: 0000000000000734 R11: 0000000000000246 R12: 0000000000000001 [ 284.639504][ T4148] R13: 0000000000000001 R14: 00007f960f010080 R15: 00007ffe40615928 [ 284.647466][ T4148] [ 284.912996][ T4153] incfs: mount failed -22 [ 284.918667][ T4153] incfs: mount failed -22 [ 284.923223][ T4153] incfs: mount failed -22 [ 284.927974][ T4153] incfs: mount failed -22 [ 284.932506][ T4153] incfs: mount failed -22 [ 284.937644][ T4153] incfs: mount failed -22 [ 284.942230][ T4153] incfs: mount failed -22 [ 284.946791][ T4153] incfs: mount failed -22 [ 284.951334][ T4153] incfs: mount failed -22 [ 284.955940][ T4153] incfs: mount failed -22 [ 285.041359][ T4220] loop2: detected capacity change from 0 to 512 [ 285.092722][ T4220] EXT4-fs error (device loop2): ext4_orphan_get:1401: inode #15: comm syz.2.685: casefold flag without casefold feature [ 285.095603][ T4122] UDC core: couldn't find an available UDC or it's busy: -16 [ 285.115395][ T4122] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 285.124318][ T4220] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.685: couldn't read orphan inode 15 (err -117) [ 285.142846][ T4220] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 285.164014][ T301] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 285.170450][ T301] cdc_ncm 4-1:1.0: dwNtbInMaxSize=4 is too small. Using 2048 [ 285.178163][ T301] cdc_ncm 4-1:1.0: setting rx_max = 2048 [ 285.184232][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 285.184246][ T30] audit: type=1400 audit(1747484322.829:171): avc: denied { create } for pid=4219 comm="syz.2.685" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 285.377714][ T4224] FAULT_INJECTION: forcing a failure. [ 285.377714][ T4224] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 285.390849][ T4224] CPU: 1 PID: 4224 Comm: syz.2.685 Not tainted 5.15.182-syzkaller-00462-g57725b368731 #0 [ 285.400672][ T4224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 285.411365][ T4224] Call Trace: [ 285.414749][ T4224] [ 285.417689][ T4224] __dump_stack+0x21/0x30 [ 285.422041][ T4224] dump_stack_lvl+0xee/0x150 [ 285.426640][ T4224] ? show_regs_print_info+0x20/0x20 [ 285.431964][ T4224] ? sysvec_reschedule_ipi+0x78/0x80 [ 285.437264][ T4224] ? asm_sysvec_reschedule_ipi+0x1b/0x20 [ 285.443255][ T4224] dump_stack+0x15/0x20 [ 285.447454][ T4224] should_fail+0x3c1/0x510 [ 285.451984][ T4224] should_fail_usercopy+0x1a/0x20 [ 285.457033][ T4224] _copy_from_user+0x20/0xd0 [ 285.461647][ T4224] __sys_bpf+0x233/0x730 [ 285.465913][ T4224] ? bpf_link_show_fdinfo+0x310/0x310 [ 285.471346][ T4224] ? __kasan_check_write+0x14/0x20 [ 285.476470][ T4224] ? switch_fpu_return+0x15d/0x2c0 [ 285.481699][ T4224] __x64_sys_bpf+0x7c/0x90 [ 285.486132][ T4224] x64_sys_call+0x4b9/0x9a0 [ 285.490639][ T4224] do_syscall_64+0x4c/0xa0 [ 285.495074][ T4224] ? clear_bhb_loop+0x35/0x90 [ 285.499754][ T4224] ? clear_bhb_loop+0x35/0x90 [ 285.504428][ T4224] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 285.510334][ T4224] RIP: 0033:0x7f960ede8969 [ 285.514770][ T4224] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 285.534403][ T4224] RSP: 002b:00007f960d40f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 285.542820][ T4224] RAX: ffffffffffffffda RBX: 00007f960f010160 RCX: 00007f960ede8969 [ 285.550958][ T4224] RDX: 0000000000000080 RSI: 00002000000000c0 RDI: 0000000000000005 [ 285.558923][ T4224] RBP: 00007f960d40f090 R08: 0000000000000000 R09: 0000000000000000 [ 285.566887][ T4224] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 285.574853][ T4224] R13: 0000000000000001 R14: 00007f960f010160 R15: 00007ffe40615928 [ 285.582822][ T4224] [ 285.604026][ T301] cdc_ncm 4-1:1.0: setting tx_max = 88 [ 285.611224][ T301] cdc_ncm 4-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM, 42:42:42:42:42:42 [ 285.633114][ T30] audit: type=1400 audit(1747484323.269:172): avc: denied { search } for pid=140 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 285.655148][ T301] usb 4-1: USB disconnect, device number 36 [ 285.661238][ T301] cdc_ncm 4-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM [ 285.687829][ T30] audit: type=1400 audit(1747484323.329:173): avc: denied { read } for pid=4227 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 285.711054][ T30] audit: type=1400 audit(1747484323.339:174): avc: denied { open } for pid=4227 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 285.736200][ T30] audit: type=1400 audit(1747484323.339:175): avc: denied { getattr } for pid=4227 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 285.775741][ T30] audit: type=1400 audit(1747484323.419:176): avc: denied { write } for pid=4226 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 285.846998][ T30] audit: type=1400 audit(1747484323.419:177): avc: denied { add_name } for pid=4226 comm="dhcpcd-run-hook" name="resolv.conf.usb0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 285.886923][ T30] audit: type=1400 audit(1747484323.439:178): avc: denied { remove_name } for pid=4237 comm="rm" name="resolv.conf.usb0.link" dev="tmpfs" ino=9871 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 285.943571][ T4255] FAULT_INJECTION: forcing a failure. [ 285.943571][ T4255] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 285.973513][ T4260] loop4: detected capacity change from 0 to 512 [ 285.973894][ T4255] CPU: 1 PID: 4255 Comm: syz.2.687 Not tainted 5.15.182-syzkaller-00462-g57725b368731 #0 [ 285.989575][ T4255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 285.999632][ T4255] Call Trace: [ 286.002905][ T4255] [ 286.005826][ T4255] __dump_stack+0x21/0x30 [ 286.010155][ T4255] dump_stack_lvl+0xee/0x150 [ 286.014756][ T4255] ? show_regs_print_info+0x20/0x20 [ 286.019976][ T4255] ? avc_has_perm+0x158/0x240 [ 286.024645][ T4255] dump_stack+0x15/0x20 [ 286.028789][ T4255] should_fail+0x3c1/0x510 [ 286.033201][ T4255] should_fail_alloc_page+0x55/0x80 [ 286.038412][ T4255] prepare_alloc_pages+0x156/0x600 [ 286.043538][ T4255] ? __alloc_pages_bulk+0xab0/0xab0 [ 286.048745][ T4255] ? 0xffffffffa0028e18 [ 286.052895][ T4255] ? is_bpf_text_address+0x177/0x190 [ 286.058185][ T4255] __alloc_pages+0x10a/0x440 [ 286.062791][ T4255] ? prep_new_page+0x110/0x110 [ 286.067553][ T4255] skb_page_frag_refill+0x202/0x3a0 [ 286.072787][ T4255] tun_get_user+0x785/0x33c0 [ 286.077475][ T4255] ? __kasan_poison_slab+0x30/0x70 [ 286.082664][ T4255] ? kmem_cache_free+0x100/0x320 [ 286.087594][ T4255] ? __x64_sys_openat+0x136/0x160 [ 286.092610][ T4255] ? x64_sys_call+0x219/0x9a0 [ 286.097313][ T4255] ? tun_do_read+0x1c40/0x1c40 [ 286.102093][ T4255] ? kstrtouint_from_user+0x1a0/0x200 [ 286.107458][ T4255] ? kstrtol_from_user+0x260/0x260 [ 286.112558][ T4255] ? bpf_ringbuf_output+0x198/0x1e0 [ 286.117959][ T4255] ? putname+0x111/0x160 [ 286.122203][ T4255] ? avc_policy_seqno+0x1b/0x70 [ 286.127048][ T4255] ? selinux_file_permission+0x2aa/0x510 [ 286.132675][ T4255] tun_chr_write_iter+0x1eb/0x2e0 [ 286.137697][ T4255] vfs_write+0x802/0xf70 [ 286.141932][ T4255] ? file_end_write+0x1b0/0x1b0 [ 286.146773][ T4255] ? __fget_files+0x2c4/0x320 [ 286.151449][ T4255] ? __fdget_pos+0x1f7/0x380 [ 286.156036][ T4255] ? ksys_write+0x71/0x240 [ 286.160461][ T4255] ksys_write+0x140/0x240 [ 286.164782][ T4255] ? __ia32_sys_read+0x90/0x90 [ 286.169539][ T4255] ? debug_smp_processor_id+0x17/0x20 [ 286.174946][ T4255] __x64_sys_write+0x7b/0x90 [ 286.179530][ T4255] x64_sys_call+0x8ef/0x9a0 [ 286.184025][ T4255] do_syscall_64+0x4c/0xa0 [ 286.188432][ T4255] ? clear_bhb_loop+0x35/0x90 [ 286.193099][ T4255] ? clear_bhb_loop+0x35/0x90 [ 286.197768][ T4255] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 286.203655][ T4255] RIP: 0033:0x7f960ede741f [ 286.208061][ T4255] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 286.227663][ T4255] RSP: 002b:00007f960d451000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 286.236084][ T4255] RAX: ffffffffffffffda RBX: 00007f960f00ffa0 RCX: 00007f960ede741f [ 286.244087][ T4255] RDX: 0000000000000066 RSI: 0000200000000580 RDI: 00000000000000c8 [ 286.252063][ T4255] RBP: 00007f960d451090 R08: 0000000000000000 R09: 0000000000000000 [ 286.260042][ T4255] R10: 0000000000000066 R11: 0000000000000293 R12: 0000000000000001 [ 286.268010][ T4255] R13: 0000000000000000 R14: 00007f960f00ffa0 R15: 00007ffe40615928 [ 286.275982][ T4255] [ 286.314766][ T4260] EXT4-fs (loop4): Ignoring removed nobh option [ 286.338615][ T4260] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2941: inode #16: comm syz.4.689: corrupted xattr block 8 [ 286.350883][ T4260] EXT4-fs (loop4): Remounting filesystem read-only [ 286.357703][ T4260] EXT4-fs warning (device loop4): ext4_evict_inode:303: xattr delete (err -117) [ 286.367752][ T4260] EXT4-fs (loop4): 1 orphan inode deleted [ 286.373543][ T4260] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,noquota,data_err=abort,auto_da_alloc=0x0000000000000000,inode_readahead_blks=0x0000000000000001,journal_dev=0x0000000000000003,barrier,nobh,nogrpid,. Quota mode: writeback. [ 286.397976][ T4260] ext4 filesystem being mounted at /133/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 286.428633][ T30] audit: type=1326 audit(1747484324.059:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4259 comm="syz.4.689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe420a33969 code=0x7ffc0000 [ 286.452257][ T30] audit: type=1326 audit(1747484324.059:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4259 comm="syz.4.689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe420a33969 code=0x7ffc0000 [ 286.881563][ T282] EXT4-fs error (device loop4): ext4_lookup:1862: inode #2: comm syz-executor: deleted inode referenced: 16 [ 286.896310][ T282] EXT4-fs (loop4): Remounting filesystem read-only [ 286.906981][ T282] EXT4-fs error (device loop4): ext4_lookup:1862: inode #2: comm syz-executor: deleted inode referenced: 16 [ 286.923788][ T282] EXT4-fs (loop4): Remounting filesystem read-only [ 286.997219][ T4286] FAULT_INJECTION: forcing a failure. [ 286.997219][ T4286] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 287.010398][ T4286] CPU: 0 PID: 4286 Comm: syz.2.695 Not tainted 5.15.182-syzkaller-00462-g57725b368731 #0 [ 287.020215][ T4286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 287.030266][ T4286] Call Trace: [ 287.033536][ T4286] [ 287.036459][ T4286] __dump_stack+0x21/0x30 [ 287.040798][ T4286] dump_stack_lvl+0xee/0x150 [ 287.045384][ T4286] ? show_regs_print_info+0x20/0x20 [ 287.050575][ T4286] ? stack_trace_save+0x98/0xe0 [ 287.055418][ T4286] ? __stack_depot_save+0x34/0x480 [ 287.060636][ T4286] dump_stack+0x15/0x20 [ 287.064794][ T4286] should_fail+0x3c1/0x510 [ 287.069209][ T4286] should_fail_usercopy+0x1a/0x20 [ 287.074230][ T4286] _copy_from_user+0x20/0xd0 [ 287.078821][ T4286] __copy_msghdr_from_user+0xaf/0x5e0 [ 287.084192][ T4286] ? _kstrtoull+0x3c0/0x4d0 [ 287.088692][ T4286] ? __ia32_sys_shutdown+0x1e0/0x1e0 [ 287.093979][ T4286] ? kstrtouint_from_user+0x1a0/0x200 [ 287.099347][ T4286] ___sys_sendmsg+0x156/0x260 [ 287.104017][ T4286] ? __sys_sendmsg+0x250/0x250 [ 287.108776][ T4286] ? __fdget+0x1a1/0x230 [ 287.113010][ T4286] __x64_sys_sendmsg+0x1e2/0x2a0 [ 287.117936][ T4286] ? ___sys_sendmsg+0x260/0x260 [ 287.122776][ T4286] ? ksys_write+0x1eb/0x240 [ 287.127274][ T4286] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 287.133367][ T4286] x64_sys_call+0x4b/0x9a0 [ 287.137778][ T4286] do_syscall_64+0x4c/0xa0 [ 287.142187][ T4286] ? clear_bhb_loop+0x35/0x90 [ 287.146859][ T4286] ? clear_bhb_loop+0x35/0x90 [ 287.151526][ T4286] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 287.157416][ T4286] RIP: 0033:0x7f960ede8969 [ 287.161826][ T4286] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 287.181424][ T4286] RSP: 002b:00007f960d451038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 287.189838][ T4286] RAX: ffffffffffffffda RBX: 00007f960f00ffa0 RCX: 00007f960ede8969 [ 287.197809][ T4286] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000004 [ 287.205776][ T4286] RBP: 00007f960d451090 R08: 0000000000000000 R09: 0000000000000000 [ 287.213746][ T4286] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 287.221710][ T4286] R13: 0000000000000000 R14: 00007f960f00ffa0 R15: 00007ffe40615928 [ 287.229686][ T4286] [ 287.235135][ T282] syz-executor (282) used greatest stack depth: 21472 bytes left [ 287.519965][ T4295] bridge0: port 1(bridge_slave_0) entered blocking state [ 287.527113][ T4295] bridge0: port 1(bridge_slave_0) entered disabled state [ 287.535987][ T4295] device bridge_slave_0 entered promiscuous mode [ 287.543135][ T4295] bridge0: port 2(bridge_slave_1) entered blocking state [ 287.550362][ T4295] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.558087][ T4295] device bridge_slave_1 entered promiscuous mode [ 287.681964][ T4295] bridge0: port 2(bridge_slave_1) entered blocking state [ 287.689060][ T4295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 287.696556][ T4295] bridge0: port 1(bridge_slave_0) entered blocking state [ 287.703595][ T4295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 287.740347][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 287.748942][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 287.757774][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.773922][ T346] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 287.784298][ T302] device bridge_slave_1 left promiscuous mode [ 287.790709][ T302] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.803498][ T302] device bridge_slave_0 left promiscuous mode [ 287.813059][ T302] bridge0: port 1(bridge_slave_0) entered disabled state [ 287.821852][ T302] device veth1_macvtap left promiscuous mode [ 287.828316][ T302] device veth0_vlan left promiscuous mode [ 287.916812][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 287.925053][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 287.932105][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 287.939607][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 287.948147][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 287.955199][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 287.962587][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 287.972919][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 287.981162][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 287.994729][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 288.003131][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 288.015766][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 288.023686][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 288.031392][ T346] usb 4-1: Using ep0 maxpacket: 8 [ 288.032137][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 288.044145][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 288.052612][ T4295] device veth0_vlan entered promiscuous mode [ 288.063144][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 288.071442][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 288.080946][ T4295] device veth1_macvtap entered promiscuous mode [ 288.090188][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 288.097840][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 288.106220][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 288.117670][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 288.125944][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 288.164038][ T346] usb 4-1: config 233 has an invalid descriptor of length 158, skipping remainder of the config [ 288.194005][ T346] usb 4-1: config 233 has 0 interfaces, different from the descriptor's value: 1 [ 288.258116][ T4313] loop5: detected capacity change from 0 to 512 [ 288.267796][ T4313] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 288.277573][ T4313] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002] [ 288.290519][ T4313] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2228: inode #15: comm syz.5.699: corrupted in-inode xattr [ 288.302919][ T4313] EXT4-fs error (device loop5): ext4_orphan_get:1406: comm syz.5.699: couldn't read orphan inode 15 (err -117) [ 288.315114][ T4313] EXT4-fs (loop5): mounted filesystem without journal. Opts: jqfmt=vfsold,max_batch_time=0x0000000000000001,debug,noload,nombcache,noblock_validity,init_itable=0x0000000000000601,inode_readahead_blks=0x0000000000008000,,errors=continue. Quota mode: none. [ 288.363966][ T346] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 288.373019][ T346] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.381514][ T346] usb 4-1: Product: syz [ 288.386195][ T346] usb 4-1: Manufacturer: syz [ 288.398175][ T4320] FAULT_INJECTION: forcing a failure. [ 288.398175][ T4320] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 288.404768][ T346] usb 4-1: SerialNumber: syz [ 288.414529][ T4320] CPU: 0 PID: 4320 Comm: syz.5.705 Not tainted 5.15.182-syzkaller-00462-g57725b368731 #0 [ 288.425757][ T4320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 288.435817][ T4320] Call Trace: [ 288.439099][ T4320] [ 288.442043][ T4320] __dump_stack+0x21/0x30 [ 288.446392][ T4320] dump_stack_lvl+0xee/0x150 [ 288.450996][ T4320] ? show_regs_print_info+0x20/0x20 [ 288.456209][ T4320] dump_stack+0x15/0x20 [ 288.460383][ T4320] should_fail+0x3c1/0x510 [ 288.464818][ T4320] should_fail_alloc_page+0x55/0x80 [ 288.470077][ T4320] prepare_alloc_pages+0x156/0x600 [ 288.475207][ T4320] ? __alloc_pages_bulk+0xab0/0xab0 [ 288.480416][ T4320] ? 0xffffffffa0028e18 [ 288.484573][ T4320] ? is_bpf_text_address+0x177/0x190 [ 288.489868][ T4320] __alloc_pages+0x10a/0x440 [ 288.494465][ T4320] ? stack_trace_save+0xe0/0xe0 [ 288.499325][ T4320] ? prep_new_page+0x110/0x110 [ 288.504098][ T4320] ? stack_trace_save+0x98/0xe0 [ 288.508962][ T4320] handle_pte_fault+0xe89/0x2680 [ 288.513905][ T4320] ? __stack_depot_save+0x34/0x480 [ 288.519027][ T4320] ? fault_around_bytes_set+0xc0/0xc0 [ 288.524405][ T4320] ? __kasan_record_aux_stack+0xd2/0x100 [ 288.530051][ T4320] ? kasan_record_aux_stack_noalloc+0xb/0x10 [ 288.536040][ T4320] ? call_rcu+0xf6/0xf60 [ 288.540294][ T4320] ? memcpy+0x56/0x70 [ 288.544281][ T4320] do_handle_mm_fault+0x1a6d/0x1d50 [ 288.549490][ T4320] ? numa_migrate_prep+0xd0/0xd0 [ 288.554436][ T4320] ? find_vma_from_tree+0xfd/0x110 [ 288.559562][ T4320] ? access_error+0x152/0x260 [ 288.564253][ T4320] do_user_addr_fault+0x554/0x1180 [ 288.569385][ T4320] ? do_kern_addr_fault+0x80/0x80 [ 288.574434][ T4320] ? debug_smp_processor_id+0x17/0x20 [ 288.579811][ T4320] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 288.585888][ T4320] ? exit_to_user_mode_prepare+0x39/0xa0 [ 288.591527][ T4320] exc_page_fault+0x51/0xb0 [ 288.596040][ T4320] asm_exc_page_fault+0x27/0x30 [ 288.600897][ T4320] RIP: 0033:0x7fc441dd6f6b [ 288.605324][ T4320] Code: c0 8b 87 c0 00 00 00 66 0f 6c c0 85 c0 0f 85 44 01 00 00 c7 87 c0 00 00 00 ff ff ff ff 48 8d 84 24 20 21 00 00 48 8d 7c 24 20 <0f> 29 44 24 40 49 89 e4 48 89 44 24 50 8b 43 74 48 89 9c 24 00 01 [ 288.624946][ T4320] RSP: 002b:00007fc44048fe10 EFLAGS: 00010246 [ 288.631024][ T4320] RAX: 00007fc440491f30 RBX: 00007fc44201e620 RCX: 0000000000000000 [ 288.639000][ T4320] RDX: 00007fc440491f78 RSI: 00007fc441e88bf8 RDI: 00007fc44048fe30 [ 288.646981][ T4320] RBP: 0000000000000009 R08: 0000000000000000 R09: 0000000000000000 [ 288.655083][ T4320] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 288.663068][ T4320] R13: 0000000000000000 R14: 00007fc442050fa0 R15: 00007ffd7ef75aa8 [ 288.671057][ T4320] [ 288.690904][ T4327] FAULT_INJECTION: forcing a failure. [ 288.690904][ T4327] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 288.712149][ T4327] CPU: 0 PID: 4327 Comm: syz.0.707 Not tainted 5.15.182-syzkaller-00462-g57725b368731 #0 [ 288.721997][ T4327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 288.732067][ T4327] Call Trace: [ 288.735358][ T4327] [ 288.738301][ T4327] __dump_stack+0x21/0x30 [ 288.742645][ T4327] dump_stack_lvl+0xee/0x150 [ 288.747246][ T4327] ? show_regs_print_info+0x20/0x20 [ 288.752455][ T4327] ? avc_has_perm+0x158/0x240 [ 288.757147][ T4327] dump_stack+0x15/0x20 [ 288.761309][ T4327] should_fail+0x3c1/0x510 [ 288.765745][ T4327] should_fail_alloc_page+0x55/0x80 [ 288.770952][ T4327] prepare_alloc_pages+0x156/0x600 [ 288.776074][ T4327] ? __alloc_pages_bulk+0xab0/0xab0 [ 288.781281][ T4327] ? 0xffffffffa002ace4 [ 288.785441][ T4327] ? is_bpf_text_address+0x177/0x190 [ 288.790742][ T4327] __alloc_pages+0x10a/0x440 [ 288.795339][ T4327] ? prep_new_page+0x110/0x110 [ 288.800113][ T4327] skb_page_frag_refill+0x202/0x3a0 [ 288.805319][ T4327] tun_get_user+0x785/0x33c0 [ 288.809922][ T4327] ? __kasan_poison_slab+0x30/0x70 [ 288.815043][ T4327] ? kmem_cache_free+0x100/0x320 [ 288.820004][ T4327] ? __x64_sys_openat+0x136/0x160 [ 288.825045][ T4327] ? x64_sys_call+0x219/0x9a0 [ 288.829737][ T4327] ? tun_do_read+0x1c40/0x1c40 [ 288.834514][ T4327] ? kstrtouint_from_user+0x1a0/0x200 [ 288.839895][ T4327] ? kstrtol_from_user+0x260/0x260 [ 288.845015][ T4327] ? kasan_remove_zero_shadow+0x630/0x780 [ 288.850744][ T4327] ? bpf_probe_read_kernel+0x68/0x70 [ 288.856039][ T4327] ? avc_policy_seqno+0x1b/0x70 [ 288.860898][ T4327] ? selinux_file_permission+0x2aa/0x510 [ 288.866544][ T4327] tun_chr_write_iter+0x1eb/0x2e0 [ 288.871673][ T4327] vfs_write+0x802/0xf70 [ 288.875932][ T4327] ? file_end_write+0x1b0/0x1b0 [ 288.880794][ T4327] ? __fget_files+0x2c4/0x320 [ 288.885480][ T4327] ? __fdget_pos+0x1f7/0x380 [ 288.890076][ T4327] ? ksys_write+0x71/0x240 [ 288.894496][ T4327] ksys_write+0x140/0x240 [ 288.898829][ T4327] ? __ia32_sys_read+0x90/0x90 [ 288.903596][ T4327] ? debug_smp_processor_id+0x17/0x20 [ 288.908979][ T4327] __x64_sys_write+0x7b/0x90 [ 288.913577][ T4327] x64_sys_call+0x8ef/0x9a0 [ 288.918086][ T4327] do_syscall_64+0x4c/0xa0 [ 288.922512][ T4327] ? clear_bhb_loop+0x35/0x90 [ 288.927201][ T4327] ? clear_bhb_loop+0x35/0x90 [ 288.931881][ T4327] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 288.937782][ T4327] RIP: 0033:0x7fd1c4be641f [ 288.942201][ T4327] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 288.961815][ T4327] RSP: 002b:00007fd1c3250000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 288.970237][ T4327] RAX: ffffffffffffffda RBX: 00007fd1c4e0efa0 RCX: 00007fd1c4be641f [ 288.978224][ T4327] RDX: 0000000000000032 RSI: 0000200000000040 RDI: 00000000000000c8 [ 288.986199][ T4327] RBP: 00007fd1c3250090 R08: 0000000000000000 R09: 0000000000000000 [ 288.994174][ T4327] R10: 0000000000000032 R11: 0000000000000293 R12: 0000000000000001 [ 289.002149][ T4327] R13: 0000000000000000 R14: 00007fd1c4e0efa0 R15: 00007ffd537fed98 [ 289.010133][ T4327] [ 289.015463][ T4320] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 289.853965][ T4338] loop5: detected capacity change from 0 to 2048 [ 289.885283][ T376] loop5: p1 < > p4 [ 289.893011][ T376] loop5: p4 size 8388608 extends beyond EOD, truncated [ 290.040117][ T4338] loop5: p1 < > p4 [ 290.045771][ T4338] loop5: p4 size 8388608 extends beyond EOD, truncated [ 290.065363][ T4342] loop3: detected capacity change from 0 to 512 [ 290.193879][ T30] kauditd_printk_skb: 457 callbacks suppressed [ 290.193896][ T30] audit: type=1326 audit(1747484327.829:638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4298 comm="syz.3.701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7ff0c422837c code=0x7ffc0000 [ 290.263900][ T30] audit: type=1326 audit(1747484327.889:639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4298 comm="syz.3.701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7ff0c422837c code=0x7ffc0000 [ 290.294883][ T4354] loop0: detected capacity change from 0 to 256 [ 290.307549][ T30] audit: type=1326 audit(1747484327.889:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4298 comm="syz.3.701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7ff0c422837c code=0x7ffc0000 [ 290.325412][ T4342] EXT4-fs (loop3): 1 orphan inode deleted [ 290.337618][ T30] audit: type=1326 audit(1747484327.889:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4298 comm="syz.3.701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7ff0c422837c code=0x7ffc0000 [ 290.356007][ T4354] FAT-fs (loop0): Directory bread(block 64) failed [ 290.367452][ T376] udevd[376]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 290.378513][ T347] udevd[347]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 290.408668][ T376] udevd[376]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 290.408684][ T347] udevd[347]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 290.423873][ T30] audit: type=1326 audit(1747484327.889:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4298 comm="syz.3.701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7ff0c422837c code=0x7ffc0000 [ 290.428059][ T4342] EXT4-fs (loop3): mounted filesystem without journal. Opts: nombcache,nouid32,,errors=continue. Quota mode: writeback. [ 290.461676][ T30] audit: type=1326 audit(1747484327.889:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4298 comm="syz.3.701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7ff0c422837c code=0x7ffc0000 [ 290.492796][ T4354] FAT-fs (loop0): Directory bread(block 65) failed [ 290.502921][ T347] udevd[347]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 290.503583][ T376] udevd[376]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 290.524721][ T4354] FAT-fs (loop0): Directory bread(block 66) failed [ 290.531273][ T4354] FAT-fs (loop0): Directory bread(block 67) failed [ 290.540063][ T4354] FAT-fs (loop0): Directory bread(block 68) failed [ 290.547297][ T4354] FAT-fs (loop0): Directory bread(block 69) failed [ 290.556368][ T30] audit: type=1326 audit(1747484327.889:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4298 comm="syz.3.701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7ff0c422837c code=0x7ffc0000 [ 290.582004][ T4354] FAT-fs (loop0): Directory bread(block 70) failed [ 290.591832][ T4342] ext4 filesystem being mounted at /125/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 290.591868][ T4354] FAT-fs (loop0): Directory bread(block 71) failed [ 290.618349][ T30] audit: type=1326 audit(1747484327.889:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4298 comm="syz.3.701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7ff0c422837c code=0x7ffc0000 [ 290.641706][ T4354] FAT-fs (loop0): Directory bread(block 72) failed [ 290.648426][ T4354] FAT-fs (loop0): Directory bread(block 73) failed [ 290.653513][ T30] audit: type=1326 audit(1747484327.889:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4298 comm="syz.3.701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7ff0c422837c code=0x7ffc0000 [ 290.690342][ T30] audit: type=1326 audit(1747484327.889:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4298 comm="syz.3.701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7ff0c422837c code=0x7ffc0000 [ 290.774106][ T4216] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 290.845365][ T4364] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 291.023912][ T4216] usb 3-1: Using ep0 maxpacket: 8 [ 291.134884][ T579] usb 4-1: USB disconnect, device number 37 [ 291.144028][ T4216] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 291.323950][ T4216] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 291.333098][ T4216] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.341123][ T4216] usb 3-1: Product: syz [ 291.345312][ T4216] usb 3-1: Manufacturer: syz [ 291.349919][ T4216] usb 3-1: SerialNumber: syz [ 291.393895][ T346] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 291.633890][ T346] usb 2-1: Using ep0 maxpacket: 8 [ 291.763928][ T346] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 291.984644][ T346] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 292.010120][ T346] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.035063][ T346] usb 2-1: Product: syz [ 292.039610][ T346] usb 2-1: Manufacturer: syz [ 292.045542][ T346] usb 2-1: SerialNumber: syz [ 292.514314][ T4358] UDC core: couldn't find an available UDC or it's busy: -16 [ 292.522036][ T4358] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 292.573945][ T4216] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 292.580386][ T4216] cdc_ncm 3-1:1.0: dwNtbInMaxSize=4 is too small. Using 2048 [ 292.588037][ T4216] cdc_ncm 3-1:1.0: setting rx_max = 2048 [ 292.615939][ T4373] SELinux: security policydb version 18 (MLS) not backwards compatible [ 292.624310][ T4373] SELinux: failed to load policy [ 292.783932][ T4216] cdc_ncm 3-1:1.0: setting tx_max = 88 [ 292.790902][ T4216] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM, 42:42:42:42:42:42 [ 292.805827][ T4216] usb 3-1: USB disconnect, device number 26 [ 292.812860][ T4216] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM [ 292.853905][ T4213] Bluetooth: hci0: command 0x1003 tx timeout [ 292.860036][ T1731] Bluetooth: hci0: sending frame failed (-49) [ 292.963884][ T301] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 293.284383][ T4373] UDC core: couldn't find an available UDC or it's busy: -16 [ 293.294025][ T4373] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 293.307081][ T4429] FAULT_INJECTION: forcing a failure. [ 293.307081][ T4429] name failslab, interval 1, probability 0, space 0, times 0 [ 293.319952][ T4429] CPU: 1 PID: 4429 Comm: syz.2.728 Not tainted 5.15.182-syzkaller-00462-g57725b368731 #0 [ 293.329766][ T4429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 293.339913][ T4429] Call Trace: [ 293.343192][ T4429] [ 293.346125][ T4429] __dump_stack+0x21/0x30 [ 293.350470][ T4429] dump_stack_lvl+0xee/0x150 [ 293.355069][ T4429] ? show_regs_print_info+0x20/0x20 [ 293.360277][ T4429] ? security_file_permission+0x79/0xa0 [ 293.365835][ T4429] dump_stack+0x15/0x20 [ 293.369992][ T4429] should_fail+0x3c1/0x510 [ 293.374124][ T301] usb 6-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 293.374414][ T4429] __should_failslab+0xa4/0xe0 [ 293.386821][ T301] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.388169][ T4429] should_failslab+0x9/0x20 [ 293.400623][ T4429] slab_pre_alloc_hook+0x3b/0xe0 [ 293.405579][ T4429] ? __se_sys_mount+0x9c/0x380 [ 293.410358][ T4429] __kmalloc_track_caller+0x6c/0x2c0 [ 293.415655][ T4429] ? mutex_unlock+0x89/0x220 [ 293.420388][ T4429] ? __se_sys_mount+0x9c/0x380 [ 293.424357][ T301] usb 6-1: config 0 descriptor?? [ 293.425160][ T4429] ? strnlen_user+0xe8/0x1c0 [ 293.434695][ T4429] strndup_user+0x74/0x150 [ 293.439122][ T4429] __se_sys_mount+0x9c/0x380 [ 293.443717][ T4429] ? fput+0x1a/0x20 [ 293.447530][ T4429] ? __x64_sys_mount+0xd0/0xd0 [ 293.452310][ T4429] ? __ia32_sys_read+0x90/0x90 [ 293.457084][ T4429] __x64_sys_mount+0xbf/0xd0 [ 293.461665][ T4429] x64_sys_call+0x6bf/0x9a0 [ 293.466160][ T4429] do_syscall_64+0x4c/0xa0 [ 293.470569][ T4429] ? clear_bhb_loop+0x35/0x90 [ 293.475237][ T4429] ? clear_bhb_loop+0x35/0x90 [ 293.479912][ T4429] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 293.485852][ T4429] RIP: 0033:0x7f960ede8969 [ 293.490257][ T4429] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 293.509854][ T4429] RSP: 002b:00007f960d451038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 293.518259][ T4429] RAX: ffffffffffffffda RBX: 00007f960f00ffa0 RCX: 00007f960ede8969 [ 293.526222][ T4429] RDX: 0000200000000040 RSI: 0000200000000180 RDI: 0000000000000000 [ 293.534184][ T4429] RBP: 00007f960d451090 R08: 0000200000000580 R09: 0000000000000000 [ 293.542147][ T4429] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 293.550111][ T4429] R13: 0000000000000000 R14: 00007f960f00ffa0 R15: 00007ffe40615928 [ 293.558108][ T4429] [ 293.574325][ T346] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 293.580848][ T346] cdc_ncm 2-1:1.0: dwNtbInMaxSize=4 is too small. Using 2048 [ 293.581004][ T4431] loop2: detected capacity change from 0 to 256 [ 293.588380][ T346] cdc_ncm 2-1:1.0: setting rx_max = 2048 [ 293.674505][ T4431] FAT-fs (loop2): bogus number of FAT sectors [ 293.680627][ T4431] FAT-fs (loop2): Can't find a valid FAT filesystem [ 293.793929][ T346] cdc_ncm 2-1:1.0: setting tx_max = 88 [ 293.803582][ T346] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM, 42:42:42:42:42:42 [ 293.822656][ T346] usb 2-1: USB disconnect, device number 31 [ 293.830956][ T346] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM [ 294.009598][ T4456] loop3: detected capacity change from 0 to 512 [ 294.047088][ T4456] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,delalloc,bsdgroups,. Quota mode: writeback. [ 294.060482][ T4456] ext4 filesystem being mounted at /132/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 294.092741][ T4467] tipc: Started in network mode [ 294.098059][ T4467] tipc: Node identity 6, cluster identity 4711 [ 294.100287][ T4469] EXT4-fs error (device loop3): ext4_readdir:263: inode #2: block 3: comm syz.3.731: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=2, rec_len=2060, size=2048 fake=1 [ 294.104488][ T4467] tipc: Node number set to 6 [ 294.129500][ T4468] EXT4-fs error (device loop3): ext4_map_blocks:630: inode #2: block 18: comm syz.3.731: lblock 23 mapped to illegal pblock 18 (length 1) [ 294.137885][ T4469] EXT4-fs (loop3): Remounting filesystem read-only [ 294.150684][ T4468] EXT4-fs (loop3): Remounting filesystem read-only [ 294.157535][ T4456] EXT4-fs error (device loop3): ext4_map_blocks:630: inode #2: block 18: comm syz.3.731: lblock 23 mapped to illegal pblock 18 (length 1) [ 294.172000][ T4456] EXT4-fs (loop3): Remounting filesystem read-only [ 294.179184][ T4469] EXT4-fs error (device loop3): ext4_readdir:263: inode #2: block 12: comm syz.3.731: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 294.200174][ T4469] EXT4-fs (loop3): Remounting filesystem read-only [ 294.206742][ T4469] EXT4-fs error (device loop3): ext4_readdir:263: inode #2: block 13: comm syz.3.731: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 294.228243][ T4469] EXT4-fs (loop3): Remounting filesystem read-only [ 294.234915][ T4469] EXT4-fs error (device loop3): ext4_readdir:263: inode #2: block 14: comm syz.3.731: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 294.255440][ T4469] EXT4-fs (loop3): Remounting filesystem read-only [ 294.261970][ T4469] EXT4-fs error (device loop3): ext4_readdir:263: inode #2: block 15: comm syz.3.731: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 294.282334][ T4469] EXT4-fs (loop3): Remounting filesystem read-only [ 294.288965][ T4469] EXT4-fs error (device loop3): ext4_readdir:263: inode #2: block 16: comm syz.3.731: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0 [ 294.310333][ T4469] EXT4-fs (loop3): Remounting filesystem read-only [ 294.317044][ T4469] EXT4-fs error (device loop3): ext4_readdir:263: inode #2: block 17: comm syz.3.731: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 294.337550][ T4469] EXT4-fs (loop3): Remounting filesystem read-only [ 294.345079][ T4469] EXT4-fs error (device loop3): ext4_map_blocks:630: inode #2: block 18: comm syz.3.731: lblock 23 mapped to illegal pblock 18 (length 1) [ 294.360734][ T4469] EXT4-fs (loop3): Remounting filesystem read-only [ 294.368140][ T4471] FAULT_INJECTION: forcing a failure. [ 294.368140][ T4471] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 294.381284][ T4471] CPU: 1 PID: 4471 Comm: syz.1.732 Not tainted 5.15.182-syzkaller-00462-g57725b368731 #0 [ 294.391099][ T4471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 294.401157][ T4471] Call Trace: [ 294.404437][ T4471] [ 294.407368][ T4471] __dump_stack+0x21/0x30 [ 294.411709][ T4471] dump_stack_lvl+0xee/0x150 [ 294.416319][ T4471] ? show_regs_print_info+0x20/0x20 [ 294.421530][ T4471] ? stack_trace_save+0x98/0xe0 [ 294.426387][ T4471] ? __stack_depot_save+0x34/0x480 [ 294.431771][ T4471] dump_stack+0x15/0x20 [ 294.435926][ T4471] should_fail+0x3c1/0x510 [ 294.440354][ T4471] should_fail_usercopy+0x1a/0x20 [ 294.445387][ T4471] _copy_from_user+0x20/0xd0 [ 294.449989][ T4471] __copy_msghdr_from_user+0xaf/0x5e0 [ 294.455366][ T4471] ? _kstrtoull+0x3c0/0x4d0 [ 294.459872][ T4471] ? __ia32_sys_shutdown+0x1e0/0x1e0 [ 294.465159][ T4471] ? kstrtouint_from_user+0x1a0/0x200 [ 294.470539][ T4471] ___sys_sendmsg+0x156/0x260 [ 294.475228][ T4471] ? __sys_sendmsg+0x250/0x250 [ 294.480003][ T4471] ? __fdget+0x1a1/0x230 [ 294.484252][ T4471] __x64_sys_sendmsg+0x1e2/0x2a0 [ 294.489204][ T4471] ? ___sys_sendmsg+0x260/0x260 [ 294.494061][ T4471] ? ksys_write+0x1eb/0x240 [ 294.498660][ T4471] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 294.504738][ T4471] x64_sys_call+0x4b/0x9a0 [ 294.509157][ T4471] do_syscall_64+0x4c/0xa0 [ 294.513607][ T4471] ? clear_bhb_loop+0x35/0x90 [ 294.518292][ T4471] ? clear_bhb_loop+0x35/0x90 [ 294.522982][ T4471] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 294.528886][ T4471] RIP: 0033:0x7fa808910969 [ 294.533305][ T4471] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 294.552913][ T4471] RSP: 002b:00007fa806f79038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 294.561333][ T4471] RAX: ffffffffffffffda RBX: 00007fa808b37fa0 RCX: 00007fa808910969 [ 294.569397][ T4471] RDX: 0000000000000000 RSI: 0000200000000500 RDI: 0000000000000006 [ 294.577370][ T4471] RBP: 00007fa806f79090 R08: 0000000000000000 R09: 0000000000000000 [ 294.585342][ T4471] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 294.593318][ T4471] R13: 0000000000000000 R14: 00007fa808b37fa0 R15: 00007ffdd3c0e508 [ 294.601301][ T4471] [ 294.633953][ T301] usb 6-1: Cannot set autoneg [ 294.638717][ T301] MOSCHIP usb-ethernet driver: probe of 6-1:0.0 failed with error -61 [ 294.678492][ T4474] loop1: detected capacity change from 0 to 256 [ 294.719723][ T4474] netlink: 8 bytes leftover after parsing attributes in process `syz.1.733'. [ 294.728801][ T4474] netlink: 40 bytes leftover after parsing attributes in process `syz.1.733'. [ 294.739605][ T4474] netlink: 8 bytes leftover after parsing attributes in process `syz.1.733'. [ 294.748438][ T4474] netlink: 40 bytes leftover after parsing attributes in process `syz.1.733'. [ 294.842595][ T301] usb 6-1: USB disconnect, device number 2 [ 294.933989][ T4216] Bluetooth: hci0: command 0x1001 tx timeout [ 294.940382][ T1731] Bluetooth: hci0: sending frame failed (-49) [ 294.979614][ T4479] loop3: detected capacity change from 0 to 40427 [ 295.042429][ T4479] F2FS-fs (loop3): Found nat_bits in checkpoint [ 295.079731][ T4479] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 295.806526][ T30] kauditd_printk_skb: 1262 callbacks suppressed [ 295.806543][ T30] audit: type=1326 audit(1747484333.449:1907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4490 comm="syz.2.739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f960ede8969 code=0x7ffc0000 [ 295.853245][ T30] audit: type=1326 audit(1747484333.449:1908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4490 comm="syz.2.739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f960ede8969 code=0x7ffc0000 [ 295.876906][ T30] audit: type=1326 audit(1747484333.449:1909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4490 comm="syz.2.739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f960ede8969 code=0x7ffc0000 [ 295.901699][ T30] audit: type=1326 audit(1747484333.449:1910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4490 comm="syz.2.739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f960ede8969 code=0x7ffc0000 [ 295.931678][ T30] audit: type=1326 audit(1747484333.449:1911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4490 comm="syz.2.739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f960ede8969 code=0x7ffc0000 [ 295.962465][ T30] audit: type=1326 audit(1747484333.479:1912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4490 comm="syz.2.739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f960ede8969 code=0x7ffc0000 [ 296.010530][ T30] audit: type=1326 audit(1747484333.479:1913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4490 comm="syz.2.739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f960ede8969 code=0x7ffc0000 [ 296.051551][ T30] audit: type=1326 audit(1747484333.479:1914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4490 comm="syz.2.739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f960ede8969 code=0x7ffc0000 [ 296.104886][ T4501] loop2: detected capacity change from 0 to 256 [ 296.116418][ T4502] FAULT_INJECTION: forcing a failure. [ 296.116418][ T4502] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 296.143505][ T4502] CPU: 1 PID: 4502 Comm: syz.3.738 Not tainted 5.15.182-syzkaller-00462-g57725b368731 #0 [ 296.153357][ T4502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 296.163421][ T4502] Call Trace: [ 296.166709][ T4502] [ 296.169648][ T4502] __dump_stack+0x21/0x30 [ 296.173990][ T4502] dump_stack_lvl+0xee/0x150 [ 296.178587][ T4502] ? show_regs_print_info+0x20/0x20 [ 296.183881][ T4502] dump_stack+0x15/0x20 [ 296.188211][ T4502] should_fail+0x3c1/0x510 [ 296.192642][ T4502] should_fail_usercopy+0x1a/0x20 [ 296.197673][ T4502] _copy_from_user+0x20/0xd0 [ 296.202276][ T4502] __x64_sys_clock_adjtime+0xdd/0x2a0 [ 296.207664][ T4502] ? __kasan_check_write+0x14/0x20 [ 296.212787][ T4502] ? do_clock_adjtime+0x130/0x130 [ 296.217834][ T4502] ? __kasan_check_write+0x14/0x20 [ 296.222952][ T4502] ? switch_fpu_return+0x15d/0x2c0 [ 296.228068][ T4502] x64_sys_call+0x3d9/0x9a0 [ 296.232579][ T4502] do_syscall_64+0x4c/0xa0 [ 296.237000][ T4502] ? clear_bhb_loop+0x35/0x90 [ 296.241680][ T4502] ? clear_bhb_loop+0x35/0x90 [ 296.246359][ T4502] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 296.252276][ T4502] RIP: 0033:0x7ff0c4229969 [ 296.256697][ T4502] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 296.276308][ T4502] RSP: 002b:00007ff0c2871038 EFLAGS: 00000246 ORIG_RAX: 0000000000000131 [ 296.284733][ T4502] RAX: ffffffffffffffda RBX: 00007ff0c4451080 RCX: 00007ff0c4229969 [ 296.292708][ T4502] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000000 [ 296.300680][ T4502] RBP: 00007ff0c2871090 R08: 0000000000000000 R09: 0000000000000000 [ 296.308829][ T4502] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 296.316808][ T4502] R13: 0000000000000000 R14: 00007ff0c4451080 R15: 00007ffe9e2a8e68 [ 296.324801][ T4502] [ 296.329476][ T4501] exfat: Unknown parameter 'iochar' [ 297.030836][ T4212] Bluetooth: hci0: command 0x1009 tx timeout [ 297.112136][ T30] audit: type=1326 audit(1747484334.749:1915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4510 comm="syz.2.743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f960ede8969 code=0x7ffc0000 [ 297.153871][ T30] audit: type=1326 audit(1747484334.749:1916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4510 comm="syz.2.743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f960ede8969 code=0x7ffc0000 [ 297.178103][ T4508] netlink: 96 bytes leftover after parsing attributes in process `syz.5.742'. [ 297.194416][ T4513] FAULT_INJECTION: forcing a failure. [ 297.194416][ T4513] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 297.212760][ T4513] CPU: 0 PID: 4513 Comm: syz.2.743 Not tainted 5.15.182-syzkaller-00462-g57725b368731 #0 [ 297.222584][ T4513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 297.232684][ T4513] Call Trace: [ 297.235975][ T4513] [ 297.238911][ T4513] __dump_stack+0x21/0x30 [ 297.243257][ T4513] dump_stack_lvl+0xee/0x150 [ 297.247861][ T4513] ? show_regs_print_info+0x20/0x20 [ 297.253077][ T4513] dump_stack+0x15/0x20 [ 297.257241][ T4513] should_fail+0x3c1/0x510 [ 297.261666][ T4513] should_fail_usercopy+0x1a/0x20 [ 297.266702][ T4513] _copy_to_user+0x20/0x90 [ 297.271136][ T4513] simple_read_from_buffer+0xe9/0x160 [ 297.276517][ T4513] proc_fail_nth_read+0x19a/0x210 [ 297.281547][ T4513] ? proc_fault_inject_write+0x2f0/0x2f0 [ 297.287177][ T4513] ? security_file_permission+0x83/0xa0 [ 297.292720][ T4513] ? proc_fault_inject_write+0x2f0/0x2f0 [ 297.298354][ T4513] vfs_read+0x282/0xbe0 [ 297.302510][ T4513] ? kernel_read+0x1f0/0x1f0 [ 297.307093][ T4513] ? __kasan_check_write+0x14/0x20 [ 297.312200][ T4513] ? mutex_lock+0x95/0x1a0 [ 297.316615][ T4513] ? wait_for_completion_killable_timeout+0x10/0x10 [ 297.323198][ T4513] ? __fget_files+0x2c4/0x320 [ 297.327873][ T4513] ? __fdget_pos+0x2d2/0x380 [ 297.332458][ T4513] ? ksys_read+0x71/0x240 [ 297.336784][ T4513] ksys_read+0x140/0x240 [ 297.341017][ T4513] ? vfs_write+0xf70/0xf70 [ 297.345452][ T4513] ? debug_smp_processor_id+0x17/0x20 [ 297.350821][ T4513] __x64_sys_read+0x7b/0x90 [ 297.355315][ T4513] x64_sys_call+0x96d/0x9a0 [ 297.359830][ T4513] do_syscall_64+0x4c/0xa0 [ 297.364243][ T4513] ? clear_bhb_loop+0x35/0x90 [ 297.368913][ T4513] ? clear_bhb_loop+0x35/0x90 [ 297.373580][ T4513] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 297.379467][ T4513] RIP: 0033:0x7f960ede737c [ 297.383877][ T4513] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 297.403473][ T4513] RSP: 002b:00007f960d430030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 297.411879][ T4513] RAX: ffffffffffffffda RBX: 00007f960f010080 RCX: 00007f960ede737c [ 297.419844][ T4513] RDX: 000000000000000f RSI: 00007f960d4300a0 RDI: 0000000000000004 [ 297.427826][ T4513] RBP: 00007f960d430090 R08: 0000000000000000 R09: 0000000000000000 [ 297.435790][ T4513] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 297.443753][ T4513] R13: 0000000000000000 R14: 00007f960f010080 R15: 00007ffe40615928 [ 297.451724][ T4513] [ 297.488671][ T4515] loop5: detected capacity change from 0 to 512 [ 297.567081][ T4515] EXT4-fs (loop5): orphan cleanup on readonly fs [ 297.586980][ T4515] EXT4-fs error (device loop5): ext4_orphan_get:1427: comm syz.5.744: bad orphan inode 13 [ 297.608926][ T4515] ext4_test_bit(bit=12, block=18) = 1 [ 297.614520][ T4515] is_bad_inode(inode)=0 [ 297.618790][ T4515] NEXT_ORPHAN(inode)=2130706432 [ 297.623650][ T4515] max_ino=32 [ 297.633907][ T4515] i_nlink=1 [ 297.637112][ T4515] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 297.661456][ T4515] EXT4-fs error (device loop5): ext4_lookup:1862: inode #2: comm syz.5.744: deleted inode referenced: 12 [ 297.683131][ T4515] EXT4-fs error (device loop5): ext4_lookup:1862: inode #2: comm syz.5.744: deleted inode referenced: 12 [ 297.688661][ T4523] loop1: detected capacity change from 0 to 1024 [ 297.709667][ T4523] EXT4-fs (loop1): Test dummy encryption mode enabled [ 297.722633][ T4523] EXT4-fs (loop1): mounted filesystem without journal. Opts: resuid=0x0000000000000000,barrier=0x00000000000083fc,noblock_validity,discard,data=ordered,debug_want_extra_isize=0x0000000000000084,max_batch_time=0x0000000000000000,test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 297.766405][ T4523] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 297.788746][ T346] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 298.094012][ T346] usb 3-1: Using ep0 maxpacket: 8 [ 298.214217][ T346] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 298.271934][ T4540] netlink: 52 bytes leftover after parsing attributes in process `syz.5.750'. [ 298.281172][ T4540] bridge0: port 2(bridge_slave_1) entered disabled state [ 298.288421][ T4540] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.443940][ T346] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 298.453068][ T346] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.461140][ T346] usb 3-1: Product: syz [ 298.465505][ T346] usb 3-1: Manufacturer: syz [ 298.470280][ T346] usb 3-1: SerialNumber: syz [ 298.574380][ T26] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 298.827439][ T4557] netlink: 12 bytes leftover after parsing attributes in process `syz.1.755'. [ 298.843986][ T26] usb 4-1: Using ep0 maxpacket: 8 [ 298.940191][ T4557] loop1: detected capacity change from 0 to 40427 [ 298.963942][ T26] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 299.008012][ T4557] F2FS-fs (loop1): invalid crc value [ 299.015567][ T4520] SELinux: security policydb version 18 (MLS) not backwards compatible [ 299.024102][ T4520] SELinux: failed to load policy [ 299.027936][ T4557] F2FS-fs (loop1): Found nat_bits in checkpoint [ 299.058708][ T4557] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 299.133922][ T26] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 299.143210][ T26] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.151258][ T26] usb 4-1: Product: syz [ 299.155470][ T26] usb 4-1: Manufacturer: syz [ 299.160069][ T26] usb 4-1: SerialNumber: syz [ 299.610084][ T284] attempt to access beyond end of device [ 299.610084][ T284] loop1: rw=2049, want=45104, limit=40427 [ 299.674284][ T4520] UDC core: couldn't find an available UDC or it's busy: -16 [ 299.681687][ T4520] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 299.734188][ T346] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 299.740642][ T346] cdc_ncm 3-1:1.0: dwNtbInMaxSize=4 is too small. Using 2048 [ 299.754199][ T346] cdc_ncm 3-1:1.0: setting rx_max = 2048 [ 299.953926][ T346] cdc_ncm 3-1:1.0: setting tx_max = 88 [ 299.961719][ T346] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM, 42:42:42:42:42:42 [ 299.979981][ T346] usb 3-1: USB disconnect, device number 27 [ 299.986342][ T346] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM [ 300.156861][ T4585] loop5: detected capacity change from 0 to 256 [ 300.217954][ T4585] SELinux: ebitmap: map size 808464432 does not match my size 64 (high bit was 808464432) [ 300.235858][ T4585] SELinux: failed to load policy [ 300.274330][ T4545] UDC core: couldn't find an available UDC or it's busy: -16 [ 300.281767][ T4545] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 300.318548][ T4598] Zero length message leads to an empty skb [ 300.343937][ T26] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 300.350447][ T26] cdc_ncm 4-1:1.0: dwNtbInMaxSize=4 is too small. Using 2048 [ 300.358064][ T26] cdc_ncm 4-1:1.0: setting rx_max = 2048 [ 300.564095][ T26] cdc_ncm 4-1:1.0: setting tx_max = 88 [ 300.799031][ T26] cdc_ncm 4-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM, 42:42:42:42:42:42 [ 300.827119][ T26] usb 4-1: USB disconnect, device number 38 [ 300.841476][ T26] cdc_ncm 4-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM [ 300.873921][ T30] kauditd_printk_skb: 63 callbacks suppressed [ 300.873938][ T30] audit: type=1400 audit(1747484338.509:1980): avc: denied { ioctl } for pid=4607 comm="syz.2.762" path="socket:[26167]" dev="sockfs" ino=26167 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 300.917446][ T30] audit: type=1400 audit(1747484338.559:1981): avc: denied { write } for pid=4609 comm="syz.1.763" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 300.934353][ T4610] loop1: detected capacity change from 0 to 128 [ 300.959147][ T4610] FAT-fs (loop1): Unrecognized mount option "nnonumtail=1" or missing value [ 300.972330][ T4612] FAULT_INJECTION: forcing a failure. [ 300.972330][ T4612] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 300.977435][ T30] audit: type=1400 audit(1747484338.609:1982): avc: denied { unmount } for pid=284 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 301.010904][ T4612] CPU: 1 PID: 4612 Comm: syz.2.764 Not tainted 5.15.182-syzkaller-00462-g57725b368731 #0 [ 301.020827][ T4612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 301.030873][ T4612] Call Trace: [ 301.034144][ T4612] [ 301.037063][ T4612] __dump_stack+0x21/0x30 [ 301.041393][ T4612] dump_stack_lvl+0xee/0x150 [ 301.045974][ T4612] ? show_regs_print_info+0x20/0x20 [ 301.051164][ T4612] ? __kasan_check_write+0x14/0x20 [ 301.056270][ T4612] ? proc_fail_nth_write+0x17a/0x1f0 [ 301.061565][ T4612] dump_stack+0x15/0x20 [ 301.065732][ T4612] should_fail+0x3c1/0x510 [ 301.070139][ T4612] should_fail_usercopy+0x1a/0x20 [ 301.075154][ T4612] _copy_from_user+0x20/0xd0 [ 301.079737][ T4612] __sys_sendto+0x29e/0x580 [ 301.084236][ T4612] ? __ia32_sys_getpeername+0x90/0x90 [ 301.089687][ T4612] ? __ia32_sys_read+0x90/0x90 [ 301.094438][ T4612] __x64_sys_sendto+0xe5/0x100 [ 301.099209][ T4612] x64_sys_call+0x178/0x9a0 [ 301.103700][ T4612] do_syscall_64+0x4c/0xa0 [ 301.108115][ T4612] ? clear_bhb_loop+0x35/0x90 [ 301.112790][ T4612] ? clear_bhb_loop+0x35/0x90 [ 301.117466][ T4612] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 301.123357][ T4612] RIP: 0033:0x7f960ede8969 [ 301.127762][ T4612] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 301.147478][ T4612] RSP: 002b:00007f960d451038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 301.155901][ T4612] RAX: ffffffffffffffda RBX: 00007f960f00ffa0 RCX: 00007f960ede8969 [ 301.163866][ T4612] RDX: ffffffffffffff58 RSI: 0000200000000140 RDI: 0000000000000003 [ 301.171848][ T4612] RBP: 00007f960d451090 R08: 0000200000000100 R09: 0000000000000010 [ 301.179811][ T4612] R10: 0000000020008005 R11: 0000000000000246 R12: 0000000000000001 [ 301.187779][ T4612] R13: 0000000000000000 R14: 00007f960f00ffa0 R15: 00007ffe40615928 [ 301.195745][ T4612] [ 301.328949][ T4615] bridge0: port 1(bridge_slave_0) entered blocking state [ 301.336054][ T4615] bridge0: port 1(bridge_slave_0) entered disabled state [ 301.343473][ T4615] device bridge_slave_0 entered promiscuous mode [ 301.355548][ T4615] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.362659][ T4615] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.370331][ T4615] device bridge_slave_1 entered promiscuous mode [ 301.478906][ T4626] loop0: detected capacity change from 0 to 256 [ 301.505735][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 301.514016][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 301.523123][ T4626] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 301.536129][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 301.550078][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 301.561830][ T302] bridge0: port 1(bridge_slave_0) entered blocking state [ 301.568907][ T302] bridge0: port 1(bridge_slave_0) entered forwarding state [ 301.576566][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 301.585429][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 301.593590][ T302] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.600626][ T302] bridge0: port 2(bridge_slave_1) entered forwarding state [ 301.608155][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 301.616386][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 301.644086][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 301.659223][ T4615] device veth0_vlan entered promiscuous mode [ 301.669501][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 301.679125][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 301.699529][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 301.707602][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 301.770418][ T4634] device syzkaller0 entered promiscuous mode [ 301.784720][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 301.792852][ T4634] FAULT_INJECTION: forcing a failure. [ 301.792852][ T4634] name failslab, interval 1, probability 0, space 0, times 0 [ 301.805480][ T4634] CPU: 0 PID: 4634 Comm: syz.5.772 Not tainted 5.15.182-syzkaller-00462-g57725b368731 #0 [ 301.815293][ T4634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 301.825360][ T4634] Call Trace: [ 301.828647][ T4634] [ 301.831585][ T4634] __dump_stack+0x21/0x30 [ 301.835928][ T4634] dump_stack_lvl+0xee/0x150 [ 301.840536][ T4634] ? show_regs_print_info+0x20/0x20 [ 301.845749][ T4634] dump_stack+0x15/0x20 [ 301.849917][ T4634] should_fail+0x3c1/0x510 [ 301.854344][ T4634] ? __napi_alloc_skb+0x162/0x2e0 [ 301.859380][ T4634] __should_failslab+0xa4/0xe0 [ 301.864162][ T4634] should_failslab+0x9/0x20 [ 301.868678][ T4634] slab_pre_alloc_hook+0x3b/0xe0 [ 301.873648][ T4634] ? __napi_alloc_skb+0x162/0x2e0 [ 301.878687][ T4634] ? __napi_alloc_skb+0x162/0x2e0 [ 301.883722][ T4634] __kmalloc_track_caller+0x6c/0x2c0 [ 301.889205][ T4634] ? __napi_alloc_skb+0x162/0x2e0 [ 301.894257][ T4634] ? __napi_alloc_skb+0x162/0x2e0 [ 301.899290][ T4634] __alloc_skb+0x21a/0x740 [ 301.903721][ T4634] __napi_alloc_skb+0x162/0x2e0 [ 301.903893][ T26] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 301.908583][ T4634] napi_get_frags+0x6b/0x170 [ 301.908609][ T4634] tun_get_user+0xa9e/0x33c0 [ 301.925314][ T4634] ? irqentry_exit+0x37/0x40 [ 301.928483][ T4615] device veth1_macvtap entered promiscuous mode [ 301.929910][ T4634] ? exc_page_fault+0x5e/0xb0 [ 301.940988][ T4634] ? tun_do_read+0x1c40/0x1c40 [ 301.945771][ T4634] ? kstrtouint_from_user+0x1a0/0x200 [ 301.951155][ T4634] ? kstrtol_from_user+0x260/0x260 [ 301.956276][ T4634] ? memset+0x35/0x40 [ 301.960292][ T4634] ? putname+0x111/0x160 [ 301.964547][ T4634] ? avc_policy_seqno+0x1b/0x70 [ 301.969411][ T4634] ? selinux_file_permission+0x2aa/0x510 [ 301.975059][ T4634] tun_chr_write_iter+0x1eb/0x2e0 [ 301.980110][ T4634] vfs_write+0x802/0xf70 [ 301.984360][ T4634] ? file_end_write+0x1b0/0x1b0 [ 301.989216][ T4634] ? __fget_files+0x2c4/0x320 [ 301.993928][ T4634] ? __fdget_pos+0x1f7/0x380 [ 301.998542][ T4634] ? ksys_write+0x71/0x240 [ 302.002996][ T4634] ksys_write+0x140/0x240 [ 302.007332][ T4634] ? __ia32_sys_read+0x90/0x90 [ 302.012105][ T4634] ? debug_smp_processor_id+0x17/0x20 [ 302.017485][ T4634] __x64_sys_write+0x7b/0x90 [ 302.022092][ T4634] x64_sys_call+0x8ef/0x9a0 [ 302.026615][ T4634] do_syscall_64+0x4c/0xa0 [ 302.031043][ T4634] ? clear_bhb_loop+0x35/0x90 [ 302.035724][ T4634] ? clear_bhb_loop+0x35/0x90 [ 302.040411][ T4634] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 302.046312][ T4634] RIP: 0033:0x7fc441e29969 [ 302.050729][ T4634] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 302.070344][ T4634] RSP: 002b:00007fc440492038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 302.078775][ T4634] RAX: ffffffffffffffda RBX: 00007fc442050fa0 RCX: 00007fc441e29969 [ 302.086759][ T4634] RDX: 0000000000000036 RSI: 0000200000000180 RDI: 0000000000000003 [ 302.094830][ T4634] RBP: 00007fc440492090 R08: 0000000000000000 R09: 0000000000000000 [ 302.103005][ T4634] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 302.111001][ T4634] R13: 0000000000000000 R14: 00007fc442050fa0 R15: 00007ffd7ef75aa8 [ 302.118993][ T4634] [ 302.125877][ T3151] device bridge_slave_1 left promiscuous mode [ 302.132129][ T3151] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.141885][ T3151] device bridge_slave_0 left promiscuous mode [ 302.148437][ T3151] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.164696][ T3151] device veth1_macvtap left promiscuous mode [ 302.170714][ T3151] device veth0_vlan left promiscuous mode [ 302.173901][ T26] usb 1-1: Using ep0 maxpacket: 16 [ 302.275193][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 302.283930][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 302.333476][ T30] audit: type=1326 audit(1747484339.969:1983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4642 comm="syz.6.767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ed7694969 code=0x7ffc0000 [ 302.362469][ T4643] ipt_REJECT: TCP_RESET invalid for non-tcp [ 302.377971][ T30] audit: type=1326 audit(1747484339.999:1984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4642 comm="syz.6.767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2ed7694969 code=0x7ffc0000 [ 302.426784][ T4649] loop6: detected capacity change from 0 to 512 [ 302.437473][ T4650] netlink: 12 bytes leftover after parsing attributes in process `syz.2.775'. [ 302.446492][ T30] audit: type=1326 audit(1747484339.999:1985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4642 comm="syz.6.767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ed7694969 code=0x7ffc0000 [ 302.480991][ T30] audit: type=1326 audit(1747484339.999:1986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4642 comm="syz.6.767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f2ed7694969 code=0x7ffc0000 [ 302.504348][ T4649] EXT4-fs (loop6): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 302.515409][ T30] audit: type=1326 audit(1747484339.999:1987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4642 comm="syz.6.767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ed7694969 code=0x7ffc0000 [ 302.518796][ T26] usb 1-1: New USB device found, idVendor=054c, idProduct=002e, bcdDevice= 5.00 [ 302.540515][ T30] audit: type=1326 audit(1747484339.999:1988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4642 comm="syz.6.767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=90 compat=0 ip=0x7f2ed7694969 code=0x7ffc0000 [ 302.574180][ T4649] EXT4-fs error (device loop6): ext4_get_journal_inode:5151: comm syz.6.778: inode #16777216: comm syz.6.778: iget: illegal inode # [ 302.588141][ T30] audit: type=1326 audit(1747484339.999:1989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4642 comm="syz.6.767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ed7694969 code=0x7ffc0000 [ 302.613886][ T26] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.622861][ T4649] EXT4-fs (loop6): Remounting filesystem read-only [ 302.630805][ T26] usb 1-1: Product: syz [ 302.635087][ T4649] EXT4-fs (loop6): no journal found [ 302.640422][ T26] usb 1-1: Manufacturer: syz [ 302.645482][ T26] usb 1-1: SerialNumber: syz [ 302.651397][ T26] usb 1-1: config 0 descriptor?? [ 302.657761][ T4649] EXT4-fs (loop6): can't get journal size [ 302.674066][ T4649] EXT4-fs (loop6): warning: mounting fs with errors, running e2fsck is recommended [ 302.688224][ T4649] EXT4-fs (loop6): failed to initialize system zone (-22) [ 302.696883][ T26] usb-storage 1-1:0.0: USB Mass Storage device detected [ 302.711422][ T4649] EXT4-fs (loop6): mount failed [ 302.719518][ T26] usb-storage 1-1:0.0: Quirks match for vid 054c pid 002e: 1 [ 302.728127][ T26] usb-storage 1-1:0.0: This device (054c,002e,0500 S 04 P c9) has an unneeded SubClass entry in unusual_devs.h (kernel 5.15.182-syzkaller-00462-g57725b368731) [ 302.728127][ T26] Please send a copy of this message to and [ 302.763299][ T4650] loop2: detected capacity change from 0 to 40427 [ 302.783034][ T4650] F2FS-fs (loop2): invalid crc value [ 302.793646][ T4650] F2FS-fs (loop2): Found nat_bits in checkpoint [ 302.823910][ T346] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 302.844880][ T4650] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 302.939358][ T4214] usb 1-1: USB disconnect, device number 27 [ 303.193956][ T346] usb 6-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 303.211291][ T4662] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 303.217695][ T346] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.226628][ T283] attempt to access beyond end of device [ 303.226628][ T283] loop2: rw=2049, want=45104, limit=40427 [ 303.230847][ T346] usb 6-1: config 0 descriptor?? [ 303.565534][ T4675] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4675 comm=syz.2.780 [ 303.586522][ T4675] netlink: 12 bytes leftover after parsing attributes in process `syz.2.780'. [ 303.933912][ T4214] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 304.173899][ T4214] usb 1-1: Using ep0 maxpacket: 32 [ 304.236743][ T4652] loop5: detected capacity change from 0 to 512 [ 304.250675][ T4652] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 304.260772][ T4652] EXT4-fs (loop5): warning: maximal mount count reached, running e2fsck is recommended [ 304.276983][ T4652] EXT4-fs error (device loop5): ext4_orphan_get:1401: comm syz.5.777: inode #15: comm syz.5.777: iget: illegal inode # [ 304.290263][ T4652] EXT4-fs (loop5): Remounting filesystem read-only [ 304.297337][ T4214] usb 1-1: New USB device found, idVendor=0458, idProduct=706e, bcdDevice=35.64 [ 304.306979][ T4652] EXT4-fs error (device loop5): ext4_orphan_get:1406: comm syz.5.777: couldn't read orphan inode 15 (err -117) [ 304.306990][ T4214] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.307797][ T4652] EXT4-fs (loop5): Remounting filesystem read-only [ 304.333968][ T4652] EXT4-fs (loop5): mounted filesystem without journal. Opts: errors=remount-ro,grpquota,. Quota mode: writeback. [ 304.347610][ T4214] usb 1-1: config 0 descriptor?? [ 304.393960][ T346] usb 6-1: Cannot set autoneg [ 304.398725][ T346] MOSCHIP usb-ethernet driver: probe of 6-1:0.0 failed with error -71 [ 304.412081][ T346] usb 6-1: USB disconnect, device number 3 [ 304.427495][ T4687] FAULT_INJECTION: forcing a failure. [ 304.427495][ T4687] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 304.440775][ T4687] CPU: 1 PID: 4687 Comm: syz.6.787 Not tainted 5.15.182-syzkaller-00462-g57725b368731 #0 [ 304.450580][ T4687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 304.460643][ T4687] Call Trace: [ 304.463917][ T4687] [ 304.466845][ T4687] __dump_stack+0x21/0x30 [ 304.471180][ T4687] dump_stack_lvl+0xee/0x150 [ 304.475760][ T4687] ? show_regs_print_info+0x20/0x20 [ 304.480950][ T4687] ? avc_has_perm+0x158/0x240 [ 304.485617][ T4687] dump_stack+0x15/0x20 [ 304.489758][ T4687] should_fail+0x3c1/0x510 [ 304.494178][ T4687] should_fail_alloc_page+0x55/0x80 [ 304.499376][ T4687] prepare_alloc_pages+0x156/0x600 [ 304.504485][ T4687] ? __alloc_pages_bulk+0xab0/0xab0 [ 304.509694][ T4687] ? 0xffffffffa00289d0 [ 304.513860][ T4687] ? is_bpf_text_address+0x177/0x190 [ 304.519397][ T4687] __alloc_pages+0x10a/0x440 [ 304.524077][ T4687] ? prep_new_page+0x110/0x110 [ 304.528940][ T4687] skb_page_frag_refill+0x202/0x3a0 [ 304.534190][ T4687] tun_get_user+0x785/0x33c0 [ 304.538781][ T4687] ? __kasan_poison_slab+0x30/0x70 [ 304.543901][ T4687] ? kmem_cache_free+0x100/0x320 [ 304.548853][ T4687] ? __x64_sys_openat+0x136/0x160 [ 304.553877][ T4687] ? x64_sys_call+0x219/0x9a0 [ 304.558635][ T4687] ? tun_do_read+0x1c40/0x1c40 [ 304.563404][ T4687] ? kstrtouint_from_user+0x1a0/0x200 [ 304.568778][ T4687] ? kstrtol_from_user+0x260/0x260 [ 304.573893][ T4687] ? putname+0x111/0x160 [ 304.578129][ T4687] ? avc_policy_seqno+0x1b/0x70 [ 304.582975][ T4687] ? selinux_file_permission+0x2aa/0x510 [ 304.588607][ T4687] tun_chr_write_iter+0x1eb/0x2e0 [ 304.593631][ T4687] vfs_write+0x802/0xf70 [ 304.597974][ T4687] ? file_end_write+0x1b0/0x1b0 [ 304.600112][ T4214] usb 1-1: USB disconnect, device number 28 [ 304.602839][ T4687] ? __fget_files+0x2c4/0x320 [ 304.602871][ T4687] ? __fdget_pos+0x1f7/0x380 [ 304.617988][ T4687] ? ksys_write+0x71/0x240 [ 304.622411][ T4687] ksys_write+0x140/0x240 [ 304.626822][ T4687] ? __ia32_sys_read+0x90/0x90 [ 304.631577][ T4687] ? debug_smp_processor_id+0x17/0x20 [ 304.636950][ T4687] __x64_sys_write+0x7b/0x90 [ 304.641547][ T4687] x64_sys_call+0x8ef/0x9a0 [ 304.646046][ T4687] do_syscall_64+0x4c/0xa0 [ 304.650478][ T4687] ? clear_bhb_loop+0x35/0x90 [ 304.655149][ T4687] ? clear_bhb_loop+0x35/0x90 [ 304.659827][ T4687] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 304.665720][ T4687] RIP: 0033:0x7f2ed769341f [ 304.670138][ T4687] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 304.689738][ T4687] RSP: 002b:00007f2ed5cfd000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 304.698153][ T4687] RAX: ffffffffffffffda RBX: 00007f2ed78bbfa0 RCX: 00007f2ed769341f [ 304.706126][ T4687] RDX: 000000000000009a RSI: 0000200000000480 RDI: 00000000000000c8 [ 304.714095][ T4687] RBP: 00007f2ed5cfd090 R08: 0000000000000000 R09: 0000000000000000 [ 304.722149][ T4687] R10: 000000000000009a R11: 0000000000000293 R12: 0000000000000001 [ 304.730114][ T4687] R13: 0000000000000000 R14: 00007f2ed78bbfa0 R15: 00007ffcff458c58 [ 304.738082][ T4687] [ 305.180799][ T4695] netlink: 12 bytes leftover after parsing attributes in process `syz.0.790'. [ 305.253922][ T301] Bluetooth: hci0: command 0x1003 tx timeout [ 305.270267][ T1731] Bluetooth: hci0: sending frame failed (-49) [ 305.402816][ T4695] loop0: detected capacity change from 0 to 40427 [ 305.489998][ T4707] netlink: 12 bytes leftover after parsing attributes in process `syz.2.795'. [ 305.624187][ T4695] F2FS-fs (loop0): invalid crc value [ 305.643598][ T4695] F2FS-fs (loop0): Found nat_bits in checkpoint [ 305.741942][ T4695] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 305.761013][ T4707] loop2: detected capacity change from 0 to 40427 [ 305.830515][ T4707] F2FS-fs (loop2): invalid crc value [ 305.841778][ T4707] F2FS-fs (loop2): Found nat_bits in checkpoint [ 305.866631][ T4715] loop6: detected capacity change from 0 to 512 [ 305.908058][ T4707] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 305.936048][ T4715] EXT4-fs (loop6): 1 orphan inode deleted [ 305.941821][ T4715] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 305.953954][ T4715] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 306.006140][ T281] attempt to access beyond end of device [ 306.006140][ T281] loop0: rw=2049, want=45104, limit=40427 [ 306.215345][ T4725] FAULT_INJECTION: forcing a failure. [ 306.215345][ T4725] name fail_futex, interval 1, probability 0, space 0, times 1 [ 306.228598][ T4725] CPU: 1 PID: 4725 Comm: syz.0.798 Not tainted 5.15.182-syzkaller-00462-g57725b368731 #0 [ 306.238416][ T4725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 306.248479][ T4725] Call Trace: [ 306.251768][ T4725] [ 306.254701][ T4725] __dump_stack+0x21/0x30 [ 306.259160][ T4725] dump_stack_lvl+0xee/0x150 [ 306.263783][ T4725] ? show_regs_print_info+0x20/0x20 [ 306.269001][ T4725] ? 0xffffffffa0028414 [ 306.273181][ T4725] ? is_bpf_text_address+0x177/0x190 [ 306.278477][ T4725] dump_stack+0x15/0x20 [ 306.282642][ T4725] should_fail+0x3c1/0x510 [ 306.287065][ T4725] get_futex_key+0x13d/0xb50 [ 306.291669][ T4725] ? futex_wait_restart+0x210/0x210 [ 306.296875][ T4725] ? stack_trace_save+0x98/0xe0 [ 306.301731][ T4725] do_futex+0x457/0x2620 [ 306.305983][ T4725] ? kasan_set_free_info+0x23/0x40 [ 306.311094][ T4725] ? kmem_cache_free+0x100/0x320 [ 306.316019][ T4725] ? putname+0x111/0x160 [ 306.320245][ T4725] ? do_sys_openat2+0x6a7/0x7b0 [ 306.325082][ T4725] ? __x64_sys_openat+0x136/0x160 [ 306.330089][ T4725] ? x64_sys_call+0x219/0x9a0 [ 306.334748][ T4725] ? _kstrtoull+0x3c0/0x4d0 [ 306.339246][ T4725] ? futex_exit_release+0x1d0/0x1d0 [ 306.344428][ T4725] ? kstrtouint_from_user+0x1a0/0x200 [ 306.349785][ T4725] ? kstrtol_from_user+0x260/0x260 [ 306.354981][ T4725] ? __kasan_check_write+0x14/0x20 [ 306.360082][ T4725] ? proc_fail_nth_write+0x17a/0x1f0 [ 306.365352][ T4725] ? proc_fail_nth_read+0x210/0x210 [ 306.370532][ T4725] ? security_file_permission+0x79/0xa0 [ 306.376067][ T4725] ? security_file_permission+0x83/0xa0 [ 306.381601][ T4725] ? vfs_write+0xc17/0xf70 [ 306.386094][ T4725] ? file_end_write+0x1b0/0x1b0 [ 306.390930][ T4725] ? __kasan_check_write+0x14/0x20 [ 306.396025][ T4725] ? mutex_unlock+0x89/0x220 [ 306.400599][ T4725] __se_sys_futex+0x139/0x310 [ 306.405263][ T4725] ? __kasan_check_write+0x14/0x20 [ 306.410363][ T4725] ? __x64_sys_futex+0x100/0x100 [ 306.415284][ T4725] ? ksys_write+0x1eb/0x240 [ 306.419772][ T4725] ? __ia32_sys_read+0x90/0x90 [ 306.424521][ T4725] __x64_sys_futex+0xe5/0x100 [ 306.429269][ T4725] x64_sys_call+0x251/0x9a0 [ 306.433755][ T4725] do_syscall_64+0x4c/0xa0 [ 306.438171][ T4725] ? clear_bhb_loop+0x35/0x90 [ 306.442834][ T4725] ? clear_bhb_loop+0x35/0x90 [ 306.443941][ T301] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 306.447498][ T4725] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 306.460834][ T4725] RIP: 0033:0x7fd1c4be7969 [ 306.465249][ T4725] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 306.484861][ T4725] RSP: 002b:00007fd1c3250038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 306.493350][ T4725] RAX: ffffffffffffffda RBX: 00007fd1c4e0efa0 RCX: 00007fd1c4be7969 [ 306.501312][ T4725] RDX: 0000000000000000 RSI: 0000000000000085 RDI: 0000000000000000 [ 306.509289][ T4725] RBP: 00007fd1c3250090 R08: 0000000000000000 R09: 00000000c5fffffd [ 306.517247][ T4725] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 306.525201][ T4725] R13: 0000000000000000 R14: 00007fd1c4e0efa0 R15: 00007ffd537fed98 [ 306.533167][ T4725] [ 306.550527][ T283] attempt to access beyond end of device [ 306.550527][ T283] loop2: rw=2049, want=45104, limit=40427 [ 306.680121][ T4744] futex_wake_op: syz.2.801 tries to shift op by -1; fix this program [ 306.703667][ T4746] loop2: detected capacity change from 0 to 256 [ 306.715405][ T4746] exfat: Deprecated parameter 'namecase' [ 306.737509][ T4746] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36bd6320, utbl_chksum : 0xe619d30d) [ 306.752418][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 306.752434][ T30] audit: type=1400 audit(1747484344.389:2011): avc: denied { create } for pid=4745 comm="syz.2.807" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 306.778358][ T30] audit: type=1400 audit(1747484344.399:2012): avc: denied { setopt } for pid=4745 comm="syz.2.807" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 306.798802][ T30] audit: type=1400 audit(1747484344.439:2013): avc: denied { read } for pid=4745 comm="syz.2.807" path="/182/file0/cpu.stat" dev="loop2" ino=1048973 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 306.813940][ T301] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 306.834029][ T301] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 306.851663][ T30] audit: type=1400 audit(1747484344.489:2014): avc: denied { map } for pid=4745 comm="syz.2.807" path="/182/file0/cpu.stat" dev="loop2" ino=1048973 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 306.875575][ T4214] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 306.875895][ T30] audit: type=1400 audit(1747484344.489:2015): avc: denied { write } for pid=4745 comm="syz.2.807" path="/182/file0/cpu.stat" dev="loop2" ino=1048973 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 306.951662][ T30] audit: type=1326 audit(1747484344.589:2016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4749 comm="syz.2.808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f960ede8969 code=0x7ffc0000 [ 306.952081][ T4750] FAULT_INJECTION: forcing a failure. [ 306.952081][ T4750] name failslab, interval 1, probability 0, space 0, times 0 [ 306.975579][ T30] audit: type=1326 audit(1747484344.589:2017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4749 comm="syz.2.808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f960ede8969 code=0x7ffc0000 [ 306.988373][ T4750] CPU: 0 PID: 4750 Comm: syz.2.808 Not tainted 5.15.182-syzkaller-00462-g57725b368731 #0 [ 307.011381][ T30] audit: type=1326 audit(1747484344.589:2018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4749 comm="syz.2.808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f960ede72d0 code=0x7ffc0000 [ 307.020992][ T4750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 307.021007][ T4750] Call Trace: [ 307.021012][ T4750] [ 307.021022][ T4750] __dump_stack+0x21/0x30 [ 307.044608][ T30] audit: type=1326 audit(1747484344.589:2019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4749 comm="syz.2.808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f960ede741f code=0x7ffc0000 [ 307.054426][ T4750] dump_stack_lvl+0xee/0x150 [ 307.092679][ T4750] ? show_regs_print_info+0x20/0x20 [ 307.097884][ T4750] ? make_kuid+0x640/0x640 [ 307.102297][ T4750] dump_stack+0x15/0x20 [ 307.106471][ T4750] should_fail+0x3c1/0x510 [ 307.110885][ T4750] __should_failslab+0xa4/0xe0 [ 307.115646][ T4750] should_failslab+0x9/0x20 [ 307.120136][ T4750] slab_pre_alloc_hook+0x3b/0xe0 [ 307.125091][ T4750] ? audit_log_start+0x3a4/0x8b0 [ 307.130033][ T4750] kmem_cache_alloc+0x44/0x260 [ 307.134792][ T4750] audit_log_start+0x3a4/0x8b0 [ 307.139545][ T4750] ? audit_serial+0x30/0x30 [ 307.144045][ T4750] ? __traceiter_kmem_cache_free+0x34/0x50 [ 307.149843][ T4750] ? migrate_enable+0x192/0x260 [ 307.154686][ T4750] ? migrate_disable+0x180/0x180 [ 307.159611][ T4750] audit_seccomp+0x62/0x160 [ 307.164114][ T4750] ? migrate_disable+0xd6/0x180 [ 307.168957][ T4750] __seccomp_filter+0xb06/0x1900 [ 307.173903][ T4750] ? file_end_write+0x1b0/0x1b0 [ 307.178750][ T4750] ? __secure_computing+0x290/0x290 [ 307.183946][ T4750] ? __kasan_check_write+0x14/0x20 [ 307.189077][ T4750] ? mutex_unlock+0x89/0x220 [ 307.193660][ T4750] ? __mutex_lock_slowpath+0x10/0x10 [ 307.198939][ T4750] ? fput+0x1a/0x20 [ 307.202747][ T4750] ? ksys_write+0x1eb/0x240 [ 307.207240][ T4750] ? __ia32_sys_read+0x90/0x90 [ 307.211996][ T4750] __secure_computing+0xea/0x290 [ 307.216940][ T4750] syscall_trace_enter+0xcf/0x180 [ 307.221971][ T4750] syscall_enter_from_user_mode+0x1f/0x30 [ 307.227691][ T4750] do_syscall_64+0x24/0xa0 [ 307.232111][ T4750] ? clear_bhb_loop+0x35/0x90 [ 307.236788][ T4750] ? clear_bhb_loop+0x35/0x90 [ 307.241458][ T4750] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 307.247352][ T4750] RIP: 0033:0x7f960ede8969 [ 307.251772][ T4750] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 307.271380][ T4750] RSP: 002b:00007f960d451038 EFLAGS: 00000246 ORIG_RAX: 0000000000000059 [ 307.279799][ T4750] RAX: ffffffffffffffda RBX: 00007f960f00ffa0 RCX: 00007f960ede8969 [ 307.287761][ T4750] RDX: 00000000000000b6 RSI: 0000200000000680 RDI: 0000200000000640 [ 307.295723][ T4750] RBP: 00007f960d451090 R08: 0000000000000000 R09: 0000000000000000 [ 307.303681][ T4750] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 307.311647][ T4750] R13: 0000000000000000 R14: 00007f960f00ffa0 R15: 00007ffe40615928 [ 307.319614][ T4750] [ 307.323455][ T4750] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 [ 307.334054][ T301] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 307.346741][ T301] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.354942][ T301] usb 6-1: Product: syz [ 307.359164][ T301] usb 6-1: Manufacturer: syz [ 307.364063][ T301] usb 6-1: SerialNumber: syz [ 307.370007][ T4212] Bluetooth: hci0: command 0x1001 tx timeout [ 307.376259][ T1731] Bluetooth: hci0: sending frame failed (-49) [ 307.376882][ T4752] netlink: 12 bytes leftover after parsing attributes in process `syz.2.809'. [ 307.404323][ T301] cdc_mbim 6-1:1.0: skipping garbage [ 307.433878][ T4214] usb 7-1: Using ep0 maxpacket: 8 [ 307.553946][ T4214] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 307.605096][ T4722] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 307.723981][ T4214] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 307.733065][ T4214] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.741115][ T4214] usb 7-1: Product: syz [ 307.745306][ T4214] usb 7-1: Manufacturer: syz [ 307.749889][ T4214] usb 7-1: SerialNumber: syz [ 307.825405][ T4722] tipc: Invalid UDP bearer configuration [ 307.825426][ T4722] tipc: Enabling of bearer rejected, failed to enable media [ 308.216489][ T4733] SELinux: security policydb version 18 (MLS) not backwards compatible [ 308.224877][ T4733] SELinux: failed to load policy [ 308.264249][ T4722] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 308.273987][ T301] cdc_mbim 6-1:1.0: dwNtbInMaxSize=13 is too small. Using 2048 [ 308.281630][ T301] cdc_mbim 6-1:1.0: setting rx_max = 2048 [ 308.483960][ T301] cdc_mbim 6-1:1.0: setting tx_max = 16384 [ 308.491070][ T301] cdc_mbim 6-1:1.0: cdc-wdm0: USB WDM device [ 308.498851][ T301] cdc_mbim 6-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.5-1, CDC MBIM, be:63:67:dc:21:27 [ 308.511560][ T301] usb 6-1: USB disconnect, device number 4 [ 308.521641][ T301] cdc_mbim 6-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.5-1, CDC MBIM [ 308.864621][ T4733] UDC core: couldn't find an available UDC or it's busy: -16 [ 308.872012][ T4733] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 308.923982][ T4214] cdc_ncm 7-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 308.930454][ T4214] cdc_ncm 7-1:1.0: dwNtbInMaxSize=4 is too small. Using 2048 [ 308.937924][ T4214] cdc_ncm 7-1:1.0: setting rx_max = 2048 [ 309.133936][ T4214] cdc_ncm 7-1:1.0: setting tx_max = 88 [ 309.140811][ T4214] cdc_ncm 7-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.6-1, CDC NCM, 42:42:42:42:42:42 [ 309.152957][ T4214] usb 7-1: USB disconnect, device number 2 [ 309.159993][ T4214] cdc_ncm 7-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.6-1, CDC NCM [ 309.413883][ T4213] Bluetooth: hci0: command 0x1009 tx timeout [ 310.619216][ T4766] FAULT_INJECTION: forcing a failure. [ 310.619216][ T4766] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 310.632505][ T4766] CPU: 1 PID: 4766 Comm: syz.5.814 Not tainted 5.15.182-syzkaller-00462-g57725b368731 #0 [ 310.642506][ T4766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 310.652577][ T4766] Call Trace: [ 310.655879][ T4766] [ 310.658827][ T4766] __dump_stack+0x21/0x30 [ 310.663182][ T4766] dump_stack_lvl+0xee/0x150 [ 310.667835][ T4766] ? show_regs_print_info+0x20/0x20 [ 310.673061][ T4766] ? 0xffffffffa00287ec [ 310.677230][ T4766] dump_stack+0x15/0x20 [ 310.681396][ T4766] should_fail+0x3c1/0x510 [ 310.685831][ T4766] should_fail_alloc_page+0x55/0x80 [ 310.691049][ T4766] prepare_alloc_pages+0x156/0x600 [ 310.696177][ T4766] ? __alloc_pages_bulk+0xab0/0xab0 [ 310.701382][ T4766] __alloc_pages+0x10a/0x440 [ 310.706133][ T4766] ? unlock_page_memcg+0x115/0x130 [ 310.711262][ T4766] ? prep_new_page+0x110/0x110 [ 310.716034][ T4766] ? page_remove_rmap+0xe3b/0xef0 [ 310.721060][ T4766] ? page_add_file_rmap+0x6f0/0x6f0 [ 310.726263][ T4766] ? __kasan_check_write+0x14/0x20 [ 310.731379][ T4766] ? _raw_spin_lock+0x8e/0xe0 [ 310.736070][ T4766] __get_free_pages+0x10/0x30 [ 310.740741][ T4766] __tlb_remove_page_size+0x17b/0x300 [ 310.746111][ T4766] unmap_page_range+0x10cc/0x1ce0 [ 310.751136][ T4766] ? mmu_notifier_invalidate_range_end+0xe0/0xe0 [ 310.757544][ T4766] ? kasan_save_stack+0x49/0x60 [ 310.762392][ T4766] ? kasan_save_stack+0x3a/0x60 [ 310.767234][ T4766] ? __kasan_record_aux_stack+0xd2/0x100 [ 310.772863][ T4766] ? kasan_record_aux_stack_noalloc+0xb/0x10 [ 310.778840][ T4766] unmap_vmas+0x258/0x360 [ 310.783164][ T4766] ? unmap_page_range+0x1ce0/0x1ce0 [ 310.788354][ T4766] ? __kasan_check_write+0x14/0x20 [ 310.793461][ T4766] ? tlb_gather_mmu_fullmm+0x144/0x1c0 [ 310.798915][ T4766] exit_mmap+0x3e6/0x860 [ 310.803156][ T4766] ? vm_brk+0x30/0x30 [ 310.807133][ T4766] ? mutex_unlock+0x89/0x220 [ 310.811721][ T4766] ? uprobe_clear_state+0x2c1/0x320 [ 310.816917][ T4766] __mmput+0x93/0x320 [ 310.820892][ T4766] ? mmput+0x48/0x150 [ 310.824868][ T4766] mmput+0x50/0x150 [ 310.828670][ T4766] do_exit+0x9ca/0x27a0 [ 310.832822][ T4766] ? put_task_struct+0x90/0x90 [ 310.837580][ T4766] ? __fput+0x63f/0x8b0 [ 310.841820][ T4766] ? __kasan_check_write+0x14/0x20 [ 310.846924][ T4766] ? _raw_spin_lock_irq+0x8f/0xe0 [ 310.851952][ T4766] do_group_exit+0x141/0x310 [ 310.856545][ T4766] ? __kasan_check_write+0x14/0x20 [ 310.861672][ T4766] get_signal+0x66a/0x1480 [ 310.866123][ T4766] arch_do_signal_or_restart+0xc1/0x10f0 [ 310.871774][ T4766] ? __kasan_check_write+0x14/0x20 [ 310.876899][ T4766] ? _raw_spin_lock+0x8e/0xe0 [ 310.881580][ T4766] ? _raw_spin_trylock_bh+0x130/0x130 [ 310.886956][ T4766] ? task_work_add+0x11e/0x1e0 [ 310.891720][ T4766] ? get_sigframe_size+0x10/0x10 [ 310.896652][ T4766] ? pick_file+0x252/0x2c0 [ 310.901079][ T4766] ? pick_file+0x2c0/0x2c0 [ 310.905496][ T4766] exit_to_user_mode_loop+0xa7/0xe0 [ 310.910690][ T4766] exit_to_user_mode_prepare+0x5a/0xa0 [ 310.916149][ T4766] syscall_exit_to_user_mode+0x1a/0x30 [ 310.921599][ T4766] do_syscall_64+0x58/0xa0 [ 310.926016][ T4766] ? clear_bhb_loop+0x35/0x90 [ 310.930684][ T4766] ? clear_bhb_loop+0x35/0x90 [ 310.935353][ T4766] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 310.941243][ T4766] RIP: 0033:0x7fc441e29969 [ 310.945652][ T4766] Code: Unable to access opcode bytes at RIP 0x7fc441e2993f. [ 310.953002][ T4766] RSP: 002b:00007fc440492038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 310.961406][ T4766] RAX: 0000000000000000 RBX: 00007fc442050fa0 RCX: 00007fc441e29969 [ 310.969382][ T4766] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000000 [ 310.977345][ T4766] RBP: 00007fc440492090 R08: 0000000000000000 R09: 0000000000000000 [ 310.985320][ T4766] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 310.993281][ T4766] R13: 0000000000000000 R14: 00007fc442050fa0 R15: 00007ffd7ef75aa8 [ 311.001247][ T4766] [ 311.036736][ T4782] FAULT_INJECTION: forcing a failure. [ 311.036736][ T4782] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 311.050278][ T4782] CPU: 0 PID: 4782 Comm: syz.5.820 Not tainted 5.15.182-syzkaller-00462-g57725b368731 #0 [ 311.060284][ T4782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 311.070348][ T4782] Call Trace: [ 311.073630][ T4782] [ 311.076566][ T4782] __dump_stack+0x21/0x30 [ 311.080912][ T4782] dump_stack_lvl+0xee/0x150 [ 311.085511][ T4782] ? show_regs_print_info+0x20/0x20 [ 311.090709][ T4782] ? stack_trace_save+0x98/0xe0 [ 311.095556][ T4782] ? __stack_depot_save+0x34/0x480 [ 311.100671][ T4782] dump_stack+0x15/0x20 [ 311.104820][ T4782] should_fail+0x3c1/0x510 [ 311.109239][ T4782] should_fail_usercopy+0x1a/0x20 [ 311.114258][ T4782] _copy_from_user+0x20/0xd0 [ 311.118958][ T4782] __copy_msghdr_from_user+0xaf/0x5e0 [ 311.124325][ T4782] ? _kstrtoull+0x3c0/0x4d0 [ 311.128826][ T4782] ? __ia32_sys_shutdown+0x1e0/0x1e0 [ 311.134102][ T4782] ? kstrtouint_from_user+0x1a0/0x200 [ 311.139473][ T4782] ___sys_sendmsg+0x156/0x260 [ 311.144144][ T4782] ? __sys_sendmsg+0x250/0x250 [ 311.148909][ T4782] ? __fdget+0x1a1/0x230 [ 311.153149][ T4782] __x64_sys_sendmsg+0x1e2/0x2a0 [ 311.158080][ T4782] ? ___sys_sendmsg+0x260/0x260 [ 311.162925][ T4782] ? ksys_write+0x1eb/0x240 [ 311.167426][ T4782] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 311.173487][ T4782] x64_sys_call+0x4b/0x9a0 [ 311.177896][ T4782] do_syscall_64+0x4c/0xa0 [ 311.182541][ T4782] ? clear_bhb_loop+0x35/0x90 [ 311.187241][ T4782] ? clear_bhb_loop+0x35/0x90 [ 311.191931][ T4782] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 311.197832][ T4782] RIP: 0033:0x7fc441e29969 [ 311.202260][ T4782] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 311.221874][ T4782] RSP: 002b:00007fc440492038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 311.230288][ T4782] RAX: ffffffffffffffda RBX: 00007fc442050fa0 RCX: 00007fc441e29969 [ 311.238258][ T4782] RDX: 0000000024008840 RSI: 0000200000000200 RDI: 0000000000000003 [ 311.246338][ T4782] RBP: 00007fc440492090 R08: 0000000000000000 R09: 0000000000000000 [ 311.254312][ T4782] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 311.262324][ T4782] R13: 0000000000000000 R14: 00007fc442050fa0 R15: 00007ffd7ef75aa8 [ 311.270302][ T4782] [ 311.355700][ T4788] loop5: detected capacity change from 0 to 128 [ 311.454033][ T4788] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 311.467842][ T4788] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 311.553938][ T301] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 311.619779][ T4789] sch_fq: defrate 0 ignored. [ 311.743882][ T39] usb 7-1: new low-speed USB device number 3 using dummy_hcd [ 311.833862][ T301] usb 3-1: device descriptor read/64, error -71 [ 312.103940][ T39] usb 7-1: config 1 interface 0 altsetting 144 endpoint 0x1 is Bulk; changing to Interrupt [ 312.114116][ T39] usb 7-1: config 1 interface 0 altsetting 144 endpoint 0x82 is Bulk; changing to Interrupt [ 312.124270][ T39] usb 7-1: config 1 interface 0 has no altsetting 0 [ 312.193637][ T4798] loop0: detected capacity change from 0 to 128 [ 312.233908][ T301] usb 3-1: device descriptor read/64, error -71 [ 312.236122][ T4798] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 312.363964][ T39] usb 7-1: string descriptor 0 read error: -22 [ 312.370195][ T39] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 312.379295][ T39] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.404010][ T4793] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 312.411066][ T4793] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 312.433895][ T4213] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 312.503865][ T301] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 312.563921][ T579] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 312.773934][ T301] usb 3-1: device descriptor read/64, error -71 [ 312.793970][ T4213] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 312.804928][ T4213] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 312.813888][ T579] usb 1-1: Using ep0 maxpacket: 8 [ 312.944459][ T579] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 312.983930][ T4213] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 312.993073][ T4213] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.001122][ T4213] usb 6-1: Product: syz [ 313.005315][ T4213] usb 6-1: Manufacturer: syz [ 313.009916][ T4213] usb 6-1: SerialNumber: syz [ 313.054319][ T4213] cdc_mbim 6-1:1.0: skipping garbage [ 313.133942][ T579] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 313.143079][ T579] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.151098][ T579] usb 1-1: Product: syz [ 313.155321][ T579] usb 1-1: Manufacturer: syz [ 313.159909][ T579] usb 1-1: SerialNumber: syz [ 313.173890][ T301] usb 3-1: device descriptor read/64, error -71 [ 313.254919][ T4796] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 313.293940][ T301] usb usb3-port1: attempt power cycle [ 313.484747][ T4796] tipc: Invalid UDP bearer configuration [ 313.484764][ T4796] tipc: Enabling of bearer rejected, failed to enable media [ 313.617127][ T30] kauditd_printk_skb: 74 callbacks suppressed [ 313.617144][ T30] audit: type=1400 audit(1747484351.259:2093): avc: denied { ioctl } for pid=4807 comm="syz.3.829" path="socket:[27378]" dev="sockfs" ino=27378 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 313.652063][ T4801] SELinux: security policydb version 18 (MLS) not backwards compatible [ 313.663710][ T4801] SELinux: failed to load policy [ 313.713954][ T301] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 313.853960][ T30] audit: type=1400 audit(1747484351.369:2094): avc: denied { read } for pid=4812 comm="syz.3.830" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 313.877761][ T30] audit: type=1400 audit(1747484351.369:2095): avc: denied { open } for pid=4812 comm="syz.3.830" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 314.091337][ T4817] loop3: detected capacity change from 0 to 2048 [ 314.155434][ T4817] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 314.194344][ T4817] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 314.224867][ T4817] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 1 with error 28 [ 314.237505][ T4817] EXT4-fs (loop3): This should not happen!! Data will be lost [ 314.237505][ T4817] [ 314.247995][ T4817] EXT4-fs (loop3): Total free blocks count 0 [ 314.254527][ T4817] EXT4-fs (loop3): Free/Dirty block details [ 314.260631][ T4817] EXT4-fs (loop3): free_blocks=2415919504 [ 314.266684][ T4817] EXT4-fs (loop3): dirty_blocks=16 [ 314.271989][ T4817] EXT4-fs (loop3): Block reservation details [ 314.296792][ T4817] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 314.315858][ T4824] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 11 with error 28 [ 314.444213][ T4801] UDC core: couldn't find an available UDC or it's busy: -16 [ 314.451637][ T4801] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 314.489921][ T4824] EXT4-fs (loop3): This should not happen!! Data will be lost [ 314.489921][ T4824] [ 314.517532][ T39] usb 7-1: USB disconnect, device number 3 [ 314.534009][ T579] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 314.546589][ T579] cdc_ncm 1-1:1.0: dwNtbInMaxSize=4 is too small. Using 2048 [ 314.583984][ T4213] cdc_mbim 6-1:1.0: bind() failure [ 314.588885][ T4828] FAULT_INJECTION: forcing a failure. [ 314.588885][ T4828] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 314.590108][ T4213] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 314.602784][ T579] cdc_ncm 1-1:1.0: setting rx_max = 2048 [ 314.624127][ T4213] cdc_ncm 6-1:1.1: bind() failure [ 314.637077][ T4213] usb 6-1: USB disconnect, device number 5 [ 314.644030][ T4828] CPU: 0 PID: 4828 Comm: syz.5.833 Not tainted 5.15.182-syzkaller-00462-g57725b368731 #0 [ 314.653861][ T4828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 314.663963][ T4828] Call Trace: [ 314.667239][ T4828] [ 314.670171][ T4828] __dump_stack+0x21/0x30 [ 314.674506][ T4828] dump_stack_lvl+0xee/0x150 [ 314.679100][ T4828] ? show_regs_print_info+0x20/0x20 [ 314.684294][ T4828] ? vfs_write+0xc17/0xf70 [ 314.688706][ T4828] dump_stack+0x15/0x20 [ 314.692855][ T4828] should_fail+0x3c1/0x510 [ 314.697264][ T4828] should_fail_usercopy+0x1a/0x20 [ 314.702285][ T4828] _copy_from_user+0x20/0xd0 [ 314.706874][ T4828] __sys_bpf+0x233/0x730 [ 314.711112][ T4828] ? bpf_link_show_fdinfo+0x310/0x310 [ 314.716493][ T4828] ? debug_smp_processor_id+0x17/0x20 [ 314.721857][ T4828] __x64_sys_bpf+0x7c/0x90 [ 314.726267][ T4828] x64_sys_call+0x4b9/0x9a0 [ 314.730768][ T4828] do_syscall_64+0x4c/0xa0 [ 314.735179][ T4828] ? clear_bhb_loop+0x35/0x90 [ 314.739846][ T4828] ? clear_bhb_loop+0x35/0x90 [ 314.744513][ T4828] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 314.750400][ T4828] RIP: 0033:0x7fc441e29969 [ 314.754811][ T4828] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 314.774409][ T4828] RSP: 002b:00007fc440492038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 314.782818][ T4828] RAX: ffffffffffffffda RBX: 00007fc442050fa0 RCX: 00007fc441e29969 [ 314.790787][ T4828] RDX: 0000000000000080 RSI: 0000200000000300 RDI: 0000000000000005 [ 314.798750][ T4828] RBP: 00007fc440492090 R08: 0000000000000000 R09: 0000000000000000 [ 314.806720][ T4828] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 314.814684][ T4828] R13: 0000000000000001 R14: 00007fc442050fa0 R15: 00007ffd7ef75aa8 [ 314.822654][ T4828] [ 314.825905][ T301] usb 3-1: device descriptor read/8, error -71 [ 314.833983][ T579] cdc_ncm 1-1:1.0: setting tx_max = 88 [ 314.862704][ T579] cdc_ncm 1-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM, 42:42:42:42:42:42 [ 314.934937][ T579] usb 1-1: USB disconnect, device number 29 [ 314.941176][ T579] cdc_ncm 1-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM [ 315.127899][ T4842] netlink: 'syz.6.837': attribute type 1 has an invalid length. [ 315.141520][ T30] audit: type=1400 audit(1747484352.719:2096): avc: denied { read write } for pid=4833 comm="syz.6.837" name="ppp" dev="devtmpfs" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 315.321065][ T30] audit: type=1400 audit(1747484352.719:2097): avc: denied { open } for pid=4833 comm="syz.6.837" path="/dev/ppp" dev="devtmpfs" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 315.344321][ T301] usb 3-1: device descriptor read/8, error -71 [ 315.364404][ T30] audit: type=1400 audit(1747484352.729:2098): avc: denied { ioctl } for pid=4833 comm="syz.6.837" path="/dev/ppp" dev="devtmpfs" ino=154 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 315.391707][ T579] ================================================================== [ 315.399814][ T579] BUG: KASAN: use-after-free in __list_del_entry_valid+0xa6/0x120 [ 315.407637][ T579] Read of size 8 at addr ffff8881143d2c70 by task kworker/1:8/579 [ 315.415443][ T579] [ 315.417769][ T579] CPU: 1 PID: 579 Comm: kworker/1:8 Not tainted 5.15.182-syzkaller-00462-g57725b368731 #0 [ 315.427655][ T579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 315.437722][ T579] Workqueue: pm pm_runtime_work [ 315.442588][ T579] Call Trace: [ 315.445866][ T579] [ 315.448805][ T579] __dump_stack+0x21/0x30 [ 315.453134][ T579] dump_stack_lvl+0xee/0x150 [ 315.457721][ T579] ? show_regs_print_info+0x20/0x20 [ 315.462914][ T579] ? load_image+0x3a0/0x3a0 [ 315.467415][ T579] print_address_description+0x7f/0x2c0 [ 315.472954][ T579] ? __list_del_entry_valid+0xa6/0x120 [ 315.478407][ T579] kasan_report+0xf1/0x140 [ 315.482821][ T579] ? __list_del_entry_valid+0xa6/0x120 [ 315.488277][ T579] __asan_report_load8_noabort+0x14/0x20 [ 315.493907][ T579] __list_del_entry_valid+0xa6/0x120 [ 315.499192][ T579] process_one_work+0x453/0xba0 [ 315.504044][ T579] worker_thread+0xa59/0x1200 [ 315.508721][ T579] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 315.514183][ T579] kthread+0x411/0x500 [ 315.518245][ T579] ? worker_clr_flags+0x190/0x190 [ 315.523264][ T579] ? kthread_blkcg+0xd0/0xd0 [ 315.527852][ T579] ret_from_fork+0x1f/0x30 [ 315.532264][ T579] [ 315.535274][ T579] [ 315.537591][ T579] Allocated by task 579: [ 315.541818][ T579] __kasan_kmalloc+0xda/0x110 [ 315.546488][ T579] __kmalloc+0x13d/0x2c0 [ 315.550726][ T579] kvmalloc_node+0x242/0x330 [ 315.555307][ T579] alloc_netdev_mqs+0x8d/0xc90 [ 315.560072][ T579] alloc_etherdev_mqs+0x34/0x40 [ 315.564916][ T579] usbnet_probe+0x219/0x2860 [ 315.569509][ T579] usb_probe_interface+0x5ff/0xae0 [ 315.574617][ T579] really_probe+0x285/0x970 [ 315.579112][ T579] __driver_probe_device+0x198/0x280 [ 315.584387][ T579] driver_probe_device+0x54/0x3e0 [ 315.589401][ T579] __device_attach_driver+0x2a6/0x460 [ 315.594763][ T579] bus_for_each_drv+0x175/0x200 [ 315.599614][ T579] __device_attach+0x2a2/0x400 [ 315.604368][ T579] device_initial_probe+0x1a/0x20 [ 315.609383][ T579] bus_probe_device+0xc0/0x1e0 [ 315.614142][ T579] device_add+0xb31/0xed0 [ 315.618467][ T579] usb_set_configuration+0x19c2/0x1f10 [ 315.624007][ T579] usb_generic_driver_probe+0x91/0x150 [ 315.629459][ T579] usb_probe_device+0x148/0x260 [ 315.634302][ T579] really_probe+0x285/0x970 [ 315.638796][ T579] __driver_probe_device+0x198/0x280 [ 315.644075][ T579] driver_probe_device+0x54/0x3e0 [ 315.649089][ T579] __device_attach_driver+0x2a6/0x460 [ 315.654452][ T579] bus_for_each_drv+0x175/0x200 [ 315.659298][ T579] __device_attach+0x2a2/0x400 [ 315.664060][ T579] device_initial_probe+0x1a/0x20 [ 315.669076][ T579] bus_probe_device+0xc0/0x1e0 [ 315.673841][ T579] device_add+0xb31/0xed0 [ 315.678168][ T579] usb_new_device+0xd06/0x1620 [ 315.682923][ T579] hub_event+0x27d8/0x42c0 [ 315.687358][ T579] process_one_work+0x6be/0xba0 [ 315.692205][ T579] worker_thread+0xa59/0x1200 [ 315.696876][ T579] kthread+0x411/0x500 [ 315.700938][ T579] ret_from_fork+0x1f/0x30 [ 315.705345][ T579] [ 315.707662][ T579] Freed by task 579: [ 315.711540][ T579] kasan_set_track+0x4a/0x70 [ 315.716155][ T579] kasan_set_free_info+0x23/0x40 [ 315.721084][ T579] ____kasan_slab_free+0x125/0x160 [ 315.726192][ T579] __kasan_slab_free+0x11/0x20 [ 315.730961][ T579] slab_free_freelist_hook+0xc2/0x190 [ 315.736420][ T579] kfree+0xc4/0x270 [ 315.740224][ T579] kvfree+0x35/0x40 [ 315.744024][ T579] netdev_freemem+0x3f/0x60 [ 315.748522][ T579] netdev_release+0x7f/0xb0 [ 315.753017][ T579] device_release+0x96/0x1c0 [ 315.757603][ T579] kobject_put+0x18a/0x270 [ 315.762100][ T579] put_device+0x1f/0x30 [ 315.766247][ T579] free_netdev+0x34b/0x450 [ 315.770656][ T579] usbnet_disconnect+0x24b/0x3a0 [ 315.775612][ T579] usb_unbind_interface+0x212/0x8c0 [ 315.780803][ T579] device_release_driver_internal+0x4c1/0x760 [ 315.786860][ T579] device_release_driver+0x19/0x20 [ 315.791965][ T579] bus_remove_device+0x2dd/0x340 [ 315.796987][ T579] device_del+0x696/0xe90 [ 315.801393][ T579] usb_disable_device+0x3a8/0x750 [ 315.806406][ T579] usb_disconnect+0x31e/0x850 [ 315.811077][ T579] hub_event+0x190c/0x42c0 [ 315.815480][ T579] process_one_work+0x6be/0xba0 [ 315.820325][ T579] worker_thread+0xd7b/0x1200 [ 315.825000][ T579] kthread+0x411/0x500 [ 315.829065][ T579] ret_from_fork+0x1f/0x30 [ 315.833478][ T579] [ 315.835793][ T579] Last potentially related work creation: [ 315.841492][ T579] kasan_save_stack+0x3a/0x60 [ 315.846244][ T579] __kasan_record_aux_stack+0xd2/0x100 [ 315.851693][ T579] kasan_record_aux_stack_noalloc+0xb/0x10 [ 315.857487][ T579] insert_work+0x51/0x310 [ 315.861810][ T579] __queue_work+0x8e5/0xc60 [ 315.866304][ T579] queue_work_on+0xd2/0x140 [ 315.870801][ T579] usbnet_link_change+0x176/0x1a0 [ 315.875812][ T579] usbnet_probe+0x1dfd/0x2860 [ 315.880482][ T579] usb_probe_interface+0x5ff/0xae0 [ 315.885588][ T579] really_probe+0x285/0x970 [ 315.890082][ T579] __driver_probe_device+0x198/0x280 [ 315.895359][ T579] driver_probe_device+0x54/0x3e0 [ 315.900373][ T579] __device_attach_driver+0x2a6/0x460 [ 315.905733][ T579] bus_for_each_drv+0x175/0x200 [ 315.910575][ T579] __device_attach+0x2a2/0x400 [ 315.915415][ T579] device_initial_probe+0x1a/0x20 [ 315.920429][ T579] bus_probe_device+0xc0/0x1e0 [ 315.925185][ T579] device_add+0xb31/0xed0 [ 315.929505][ T579] usb_set_configuration+0x19c2/0x1f10 [ 315.934955][ T579] usb_generic_driver_probe+0x91/0x150 [ 315.940405][ T579] usb_probe_device+0x148/0x260 [ 315.945246][ T579] really_probe+0x285/0x970 [ 315.949741][ T579] __driver_probe_device+0x198/0x280 [ 315.955102][ T579] driver_probe_device+0x54/0x3e0 [ 315.960120][ T579] __device_attach_driver+0x2a6/0x460 [ 315.965483][ T579] bus_for_each_drv+0x175/0x200 [ 315.970324][ T579] __device_attach+0x2a2/0x400 [ 315.975077][ T579] device_initial_probe+0x1a/0x20 [ 315.980092][ T579] bus_probe_device+0xc0/0x1e0 [ 315.984877][ T579] device_add+0xb31/0xed0 [ 315.989227][ T579] usb_new_device+0xd06/0x1620 [ 315.994100][ T579] hub_event+0x27d8/0x42c0 [ 315.998518][ T579] process_one_work+0x6be/0xba0 [ 316.003369][ T579] worker_thread+0xa59/0x1200 [ 316.008042][ T579] kthread+0x411/0x500 [ 316.012116][ T579] ret_from_fork+0x1f/0x30 [ 316.016610][ T579] [ 316.018927][ T579] The buggy address belongs to the object at ffff8881143d2000 [ 316.018927][ T579] which belongs to the cache kmalloc-4k of size 4096 [ 316.032970][ T579] The buggy address is located 3184 bytes inside of [ 316.032970][ T579] 4096-byte region [ffff8881143d2000, ffff8881143d3000) [ 316.046411][ T579] The buggy address belongs to the page: [ 316.052057][ T579] page:ffffea000450f400 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1143d0 [ 316.062301][ T579] head:ffffea000450f400 order:3 compound_mapcount:0 compound_pincount:0 [ 316.070708][ T579] flags: 0x4000000000010200(slab|head|zone=1) [ 316.076884][ T579] raw: 4000000000010200 dead000000000100 dead000000000122 ffff888100043380 [ 316.085458][ T579] raw: 0000000000000000 0000000000040004 00000001ffffffff 0000000000000000 [ 316.094033][ T579] page dumped because: kasan: bad access detected [ 316.100437][ T579] page_owner tracks the page as allocated [ 316.106139][ T579] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 303, ts 66531958646, free_ts 66523840431 [ 316.126529][ T579] post_alloc_hook+0x192/0x1b0 [ 316.131291][ T579] prep_new_page+0x1c/0x110 [ 316.135784][ T579] get_page_from_freelist+0x2cc5/0x2d50 [ 316.141320][ T579] __alloc_pages+0x18f/0x440 [ 316.145894][ T579] new_slab+0xa1/0x4d0 [ 316.149950][ T579] ___slab_alloc+0x381/0x810 [ 316.154611][ T579] __slab_alloc+0x49/0x90 [ 316.158923][ T579] kmem_cache_alloc_trace+0x146/0x270 [ 316.164278][ T579] uevent_show+0x160/0x330 [ 316.168676][ T579] dev_attr_show+0x56/0xd0 [ 316.173086][ T579] sysfs_kf_seq_show+0x266/0x3d0 [ 316.178171][ T579] kernfs_seq_show+0x119/0x160 [ 316.182934][ T579] seq_read_iter+0x490/0xd30 [ 316.187515][ T579] kernfs_fop_read_iter+0x147/0x470 [ 316.192715][ T579] vfs_read+0x68b/0xbe0 [ 316.196863][ T579] ksys_read+0x140/0x240 [ 316.201091][ T579] page last free stack trace: [ 316.205741][ T579] free_unref_page_prepare+0x542/0x550 [ 316.211200][ T579] free_unref_page+0xa2/0x550 [ 316.215862][ T579] __free_pages+0x6c/0x100 [ 316.220274][ T579] __free_slab+0xe8/0x1e0 [ 316.224589][ T579] __unfreeze_partials+0x160/0x190 [ 316.229685][ T579] put_cpu_partial+0xc6/0x120 [ 316.234347][ T579] __slab_free+0x1d4/0x290 [ 316.238748][ T579] ___cache_free+0x104/0x120 [ 316.243322][ T579] qlink_free+0x4d/0x90 [ 316.247460][ T579] qlist_free_all+0x5f/0xb0 [ 316.251945][ T579] kasan_quarantine_reduce+0x14a/0x170 [ 316.257388][ T579] __kasan_slab_alloc+0x2f/0xf0 [ 316.262234][ T579] slab_post_alloc_hook+0x4f/0x2b0 [ 316.267328][ T579] kmem_cache_alloc+0xf7/0x260 [ 316.272074][ T579] __kernfs_new_node+0xdb/0x680 [ 316.276930][ T579] kernfs_new_node+0x150/0x260 [ 316.281679][ T579] [ 316.283984][ T579] Memory state around the buggy address: [ 316.289590][ T579] ffff8881143d2b00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 316.297634][ T579] ffff8881143d2b80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 316.305675][ T579] >ffff8881143d2c00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 316.313731][ T579] ^ [ 316.321524][ T579] ffff8881143d2c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 316.329565][ T579] ffff8881143d2d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 316.337692][ T579] ================================================================== [ 316.345815][ T579] Disabling lock debugging due to kernel taint [ 316.374585][ T30] audit: type=1400 audit(1747484354.009:2099): avc: denied { read } for pid=83 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 316.397545][ T30] audit: type=1400 audit(1747484354.009:2100): avc: denied { search } for pid=83 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 316.433957][ T30] audit: type=1400 audit(1747484354.009:2101): avc: denied { write } for pid=83 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 316.455514][ T30] audit: type=1400 audit(1747484354.009:2102): avc: denied { add_name } for pid=83 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1