last executing test programs: 26m20.079441309s ago: executing program 1 (id=2445): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000600)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) memfd_create(&(0x7f00000006c0)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\xf2\xed\x04\x00\x00\x00\xd4N\x12\x9b\x1f\t\xd1Z+\x86T\x16\xf8\x01\x00\x00\x00\x9f+\x8d!\x0fG\xab\xc2\xdc\xa3\xb3\xae8\x9f9?\xefo\xa4k\x01\xb2>\xa1\x9c\x86xm\xe6\x9bZ4\x91\x1a\xdb\xdd\x89\xb9\xc0LF;\xd6\x84\x195\x06\x00\x00\x00~\xf3S\x12\"p^\xc1jP\x8a\xc6[\xbd\xe7q]\xdd\r\x1aZS\x01*\x1b\xfd\xbcMA\xdcq\xa1\x00\xb3\xf9\x91r\x7f\xdc\xf1\xc3G,\xdb\xccS\x15\x95b\x17\xab\xe4?\x96\x95\xa4kP\x99YO\xb8V\xd5p\x90X\xaaf', 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) splice(r2, 0x0, r1, 0x0, 0x1, 0x0) writev(r2, &(0x7f0000000700)=[{&(0x7f00000001c0)="b95f7b8a", 0x4}], 0x1) close_range(r1, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x3, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4c}, [@call={0x85, 0x0, 0x0, 0x56}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, 0x0, &(0x7f0000000180)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f00000004c0)={r7, 0x3, 0x6, @broadcast}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0x33}, 0x0, @in=@private=0xa010101, 0x0, 0x0, 0x0, 0xb7}}, 0xe8) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x10) 26m19.711052s ago: executing program 1 (id=2446): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) io_cancel(0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7, 0x9, 0xffffffffffffffff, &(0x7f0000000080)="c0f9b169cda2ae7fb81fa83c87f9b68c0f5c2b2c875acdc8fdc3957674ab12df5347fa6ca0c095e9cb445e86d5", 0x2d, 0x1, 0x0, 0x3}, &(0x7f0000000100)) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0x4, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001540)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5, 0x0) 26m18.834877035s ago: executing program 1 (id=2451): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004483db96f8ba37d5ca93760476ceb94bd00060000002b1c3063b93581f6096d9bea95117b", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/27], 0x48) io_setup(0x7b, &(0x7f0000000000)) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYRESDEC=0x0]) 26m17.593097701s ago: executing program 1 (id=2463): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40042, 0x1ff) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x80, 0x80, 0xc, [@restrict={0x4, 0x0, 0x0, 0xb, 0x4}, @var={0x4, 0x0, 0x0, 0xe, 0x5, 0x1}, @float={0xa, 0x0, 0x0, 0x10, 0xc}, @int={0x2, 0x0, 0x0, 0x1, 0x0, 0x27, 0x0, 0x1b, 0x3}, @volatile={0x1, 0x0, 0x0, 0x9, 0x3}, @ptr={0x8}, @union={0x8, 0x2, 0x0, 0x5, 0x1, 0xb, [{0xb, 0x5, 0x1}, {0x8, 0x3, 0x1}]}, @ptr={0xe, 0x0, 0x0, 0x2, 0x5}]}, {0x0, [0x5f, 0x1e, 0x30, 0x5f, 0x5f, 0x0, 0x61, 0x2e, 0x0, 0x30]}}, &(0x7f0000000000)=""/47, 0xa4, 0x2f, 0x0, 0x9a0, 0x0, @void, @value}, 0x28) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0600000004000000080000000800000000000000", @ANYRES32=r0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="00000000000000000200"/28], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x14, &(0x7f0000000180)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x15}}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0857f9f582f0300000000001000", 0x0, 0x2e00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) write$binfmt_elf32(r0, &(0x7f0000000040)=ANY=[], 0x158) close(r0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000002c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, &(0x7f00000003c0), 0x2, 0x47d, &(0x7f0000001300)="$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") r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r4, 0x40047438, 0x2c623465d0f4ead) setrlimit(0x1, &(0x7f0000000200)={0x2, 0xffff}) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r6 = openat$incfs(r5, &(0x7f0000000180)='.pending_reads\x00', 0x0, 0x0) ioctl$INCFS_IOC_CREATE_FILE(r6, 0xc058671e, &(0x7f0000000480)={{'\x00', 0x1}, {0x4}, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0, 0x0, 0x0}) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) 26m17.333726122s ago: executing program 1 (id=2464): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r3, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) io_cancel(0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7, 0x9, 0xffffffffffffffff, &(0x7f0000000080)="c0f9b169cda2ae7fb81fa83c87f9b68c0f5c2b2c875acdc8fdc3957674ab12df5347fa6ca0c095e9cb445e86d5", 0x2d, 0x1, 0x0, 0x3}, &(0x7f0000000100)) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r5, 0x29, 0x4, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001540)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5, 0x0) 26m17.218864502s ago: executing program 1 (id=2466): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000040)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") lchown(&(0x7f00000006c0)='./file0\x00', 0x0, 0xee01) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000900)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) io_setup(0x6, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000001857489c5d44a3dc33b51d8a1c54d764423b4507687e70233ab03e1b4ac9716da9486ce85ef1ee6fd8dd30eaa44b97d877b59cdd8a6af27f9c65f7e2b3c5630ea315dd77a427e89b72b29bbe7865c1bd60d9a371b48dc08884a8d6c4872b2ecbadf2bd0c90994e0832948536b863ba140e8a2f53502977e26528f388e37fd3c23e38d41ff7a133f7e74fee0c47d44688"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$inet(0x2, 0x2, 0x1) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e000100000000000000000000000000000000000000000a00808000"], 0xb8}}, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_buf(r9, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x2500, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="6501000014"], 0x188}}, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) 26m17.218608252s ago: executing program 32 (id=2466): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000040)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") lchown(&(0x7f00000006c0)='./file0\x00', 0x0, 0xee01) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000900)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) io_setup(0x6, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000001857489c5d44a3dc33b51d8a1c54d764423b4507687e70233ab03e1b4ac9716da9486ce85ef1ee6fd8dd30eaa44b97d877b59cdd8a6af27f9c65f7e2b3c5630ea315dd77a427e89b72b29bbe7865c1bd60d9a371b48dc08884a8d6c4872b2ecbadf2bd0c90994e0832948536b863ba140e8a2f53502977e26528f388e37fd3c23e38d41ff7a133f7e74fee0c47d44688"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$inet(0x2, 0x2, 0x1) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e000100000000000000000000000000000000000000000a00808000"], 0xb8}}, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_buf(r9, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x2500, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="6501000014"], 0x188}}, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) 26m11.413542841s ago: executing program 5 (id=2494): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f000000e400)={0x2020, 0x0, 0x0}, 0x2020) capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000040)={0x200000, 0x200000}) write$FUSE_INIT(r4, &(0x7f0000000040)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0xa68d7c519e801be0, 0x0, 0x0, 0x1d45}}, 0x50) 26m10.515638385s ago: executing program 5 (id=2498): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x6, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) creat(&(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00', r4}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00', r3}, 0x10) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 26m10.470542555s ago: executing program 5 (id=2499): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b909006f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f949170ef8cb9c13c12138116bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2c74664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677eff7c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc405a18ca0264400abf38e90000000000000000008faf2cddffbfa69bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5431bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de086553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c04f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c80f30505dd4cf2ae2a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265425d513a1294b8439276394945d94a589708e32a1cb30f1fa4b2f08e01dc5e8c6732e6dc59b5c8cb400000000000000592c9b68f09c8f5ddb20b4ae08b4d9df548e5ed6cd47b91a4bea8b6aa52edf64576aef1e43f2958437fdc20fbbd0d4e13d8cce1193b2f9b4f107e25af178d056e1b1e40bd75b013f7484fae0bc447b1ffaf34819fe3ad1a634c94345e26e1e68dec08723a37b05d1594a66a4718a51d4d67fc880c9d640f4eacc509873f1a103c87f69"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000080)={0x18, 0x0, 0x0, {0xffffffffffffffff}}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) lchown(&(0x7f0000000100)='./file0\x00', 0xffffffffffffffff, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) getdents64(r5, 0x0, 0x9) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4032, 0xffffffffffffffff, 0x0) r7 = userfaultfd(0x80801) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_COPY(r7, 0xc028aa05, &(0x7f0000000000)={&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x1000}) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f00000041c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x18, r8, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}}, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000030000000400000a0000000000000000", @ANYRES32, @ANYBLOB="ffffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r9}, &(0x7f0000000040), &(0x7f0000000140)=r6}, 0x20) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r10 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) sendto$packet(0xffffffffffffffff, &(0x7f0000000100)='m', 0x102, 0x0, &(0x7f0000000200)={0x3a, 0x0, r11, 0x1, 0x0, 0x6, @multicast}, 0x14) 26m10.148731297s ago: executing program 5 (id=2500): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40042, 0x1ff) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x80, 0x80, 0xc, [@restrict={0x4, 0x0, 0x0, 0xb, 0x4}, @var={0x4, 0x0, 0x0, 0xe, 0x5, 0x1}, @float={0xa, 0x0, 0x0, 0x10, 0xc}, @int={0x2, 0x0, 0x0, 0x1, 0x0, 0x27, 0x0, 0x1b, 0x3}, @volatile={0x1, 0x0, 0x0, 0x9, 0x3}, @ptr={0x8}, @union={0x8, 0x2, 0x0, 0x5, 0x1, 0xb, [{0xb, 0x5, 0x1}, {0x8, 0x3, 0x1}]}, @ptr={0xe, 0x0, 0x0, 0x2, 0x5}]}, {0x0, [0x5f, 0x1e, 0x30, 0x5f, 0x5f, 0x0, 0x61, 0x2e, 0x0, 0x30]}}, &(0x7f0000000000)=""/47, 0xa4, 0x2f, 0x0, 0x9a0, 0x0, @void, @value}, 0x28) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0600000004000000080000000800000000000000", @ANYRES32=r0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="00000000000000000200"/28], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x14, &(0x7f0000000180)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x15}}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0857f9f582f0300000000001000", 0x0, 0x2e00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) write$binfmt_elf32(r0, &(0x7f0000000040)=ANY=[], 0x158) close(r0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000002c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, &(0x7f00000003c0), 0x2, 0x47d, &(0x7f0000001300)="$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") r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r4, 0x40047438, 0x2c623465d0f4ead) setrlimit(0x1, &(0x7f0000000200)={0x2, 0xffff}) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r6 = openat$incfs(r5, &(0x7f0000000180)='.pending_reads\x00', 0x0, 0x0) ioctl$INCFS_IOC_CREATE_FILE(r6, 0xc058671e, &(0x7f0000000480)={{'\x00', 0x1}, {0x4}, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0, 0x0, 0x0}) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) 26m10.049974687s ago: executing program 5 (id=2501): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) 26m9.874959128s ago: executing program 5 (id=2503): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004483db96f8ba37d5ca93760476ceb94bd00060000002b1c3063b93581f6096d9bea95117b", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) io_setup(0x7b, &(0x7f0000000000)) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYRESDEC=0x0]) 26m9.857792148s ago: executing program 33 (id=2503): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004483db96f8ba37d5ca93760476ceb94bd00060000002b1c3063b93581f6096d9bea95117b", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) io_setup(0x7b, &(0x7f0000000000)) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYRESDEC=0x0]) 12m11.921422723s ago: executing program 4 (id=5757): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018400110800395032303030"], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000080)={0x18, 0x0, 0x0, {0xffffffffffffffff}}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) lchown(&(0x7f0000000100)='./file0\x00', 0xffffffffffffffff, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) getdents64(r5, 0x0, 0x9) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4032, 0xffffffffffffffff, 0x0) r7 = userfaultfd(0x80801) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_COPY(r7, 0xc028aa05, &(0x7f0000000000)={&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x1000}) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f00000041c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x18, r8, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}}, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000030000000400000a0000000000000000", @ANYRES32, @ANYBLOB="ffffffff00"/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r9}, &(0x7f0000000040), &(0x7f0000000140)=r6}, 0x20) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r10 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) sendto$packet(0xffffffffffffffff, &(0x7f0000000100)='m', 0x102, 0x0, &(0x7f0000000200)={0x3a, 0x0, r11, 0x1, 0x0, 0x6, @multicast}, 0x14) 12m11.868701293s ago: executing program 4 (id=5759): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB, @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f000000e400)={0x2020, 0x0, 0x0}, 0x2020) capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000040)={0x200000, 0x200000}) write$FUSE_INIT(r4, &(0x7f0000000040)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0xa68d7c519e801be0, 0x0, 0x0, 0x1d45}}, 0x50) syz_fuse_handle_req(r4, &(0x7f0000008380)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) writev(r6, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) close(r4) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = dup(r7) ioctl$TIOCL_SETSEL(r8, 0x541c, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x80000, 0x0) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x1810714, &(0x7f0000000400)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40000}}, {@init_itable_val}, {@nolazytime}, {@jqfmt_vfsv1}, {@prjquota}, {@init_itable_val={'init_itable', 0x3d, 0x7fff}}, {@grpquota}, {@errors_continue}, {@errors_continue}, {@test_dummy_encryption}]}, 0x1, 0x472, &(0x7f0000000c00)="$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") 12m10.783549819s ago: executing program 4 (id=5765): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020207025000000000020"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000480)={'erspan0\x00', &(0x7f0000000340)={'syztnl2\x00', r2, 0x700, 0x8000, 0x3c000, 0x7, {{0x1b, 0x4, 0x0, 0x18, 0x6c, 0x68, 0x0, 0x4, 0x2f, 0x0, @local, @multicast1, {[@timestamp={0x44, 0x20, 0x94, 0x0, 0x2, [0x3, 0x1, 0x8, 0x0, 0xa, 0xac, 0x7fff]}, @rr={0x7, 0x1b, 0x77, [@empty, @multicast1, @empty, @multicast1, @empty, @multicast2]}, @ssrr={0x89, 0xb, 0xa4, [@dev={0xac, 0x14, 0x14, 0x8}, @dev={0xac, 0x14, 0x14, 0x32}]}, @noop, @lsrr={0x83, 0xf, 0x33, [@multicast1, @dev={0xac, 0x14, 0x14, 0x2c}, @broadcast]}]}}}}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd600a841d0014060000000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50000000907800"], 0x0) r5 = socket$xdp(0x2c, 0x3, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) getsockopt$XDP_MMAP_OFFSETS(r6, 0x11b, 0x2, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x8, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x50) syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) r7 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000005c0), 0x88002, 0x0) read$rfkill(r7, &(0x7f0000000600), 0x8) syz_mount_image$f2fs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x1, 0x5505, &(0x7f0000002480)="$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") r8 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1817c1, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r8, 0xf501, 0x0) 12m7.917137954s ago: executing program 4 (id=5775): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x3000010, &(0x7f0000000000), 0x41, 0x51b, &(0x7f0000000100)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x122f8a0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = memfd_create(&(0x7f0000000180)='-B\xd5NI\xc5j\x9api\x87\xb9\x02\x95$\xf1\f\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xc0\xd7Uw\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x94?\x96\\\xf6\xc6\x95\x03\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xaf\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\b\x00\xce\x8b\x19\xea\xef\xe3\x00\x00', 0x0) r3 = dup(r2) fallocate(r2, 0x0, 0x0, 0x8) copy_file_range(r2, 0x0, r3, 0x0, 0x7fff000000, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a0000090600010015"], 0x1c}}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r1) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') clock_adjtime(0x6, &(0x7f0000000680)={0x6, 0x15186f88, 0xf, 0x968, 0x9, 0x80000001, 0xa, 0xfffffffffffffff8, 0xc000, 0x20000, 0xfff, 0x7d1, 0x7, 0x7ff, 0x4, 0x5, 0x10001, 0x6, 0x6, 0x86a0, 0x5, 0x36, 0xfffffffffffffff7, 0x0, 0x408, 0x400}) read$FUSE(r4, &(0x7f0000002140)={0x2020}, 0x2100) 12m7.150975928s ago: executing program 4 (id=5776): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x0) getpid() mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file2\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@volatile}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) copy_file_range(r0, &(0x7f0000000080), r0, 0x0, 0xfffffffffffffff8, 0x0) 12m7.108289488s ago: executing program 4 (id=5778): bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000200)=""/163}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r3 = accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80800) getpeername$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000003c0)=0x14) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) fchdir(r2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) write(0xffffffffffffffff, 0x0, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x3014850, &(0x7f00000001c0)={[{@quota}, {@barrier_val={'barrier', 0x3d, 0x1000}}, {@grpjquota}, {@norecovery}, {@dioread_lock}]}, 0x3, 0x4c1, &(0x7f0000000680)="$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") r5 = open$dir(&(0x7f0000000240)='.\x00', 0x0, 0x0) renameat(r5, &(0x7f0000000400)='./file0\x00', r5, &(0x7f0000000440)='./file1\x00') 12m6.999693949s ago: executing program 34 (id=5778): bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000200)=""/163}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r3 = accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80800) getpeername$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000003c0)=0x14) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) fchdir(r2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) write(0xffffffffffffffff, 0x0, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x3014850, &(0x7f00000001c0)={[{@quota}, {@barrier_val={'barrier', 0x3d, 0x1000}}, {@grpjquota}, {@norecovery}, {@dioread_lock}]}, 0x3, 0x4c1, &(0x7f0000000680)="$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") r5 = open$dir(&(0x7f0000000240)='.\x00', 0x0, 0x0) renameat(r5, &(0x7f0000000400)='./file0\x00', r5, &(0x7f0000000440)='./file1\x00') 8.07375354s ago: executing program 3 (id=9020): openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0xd0, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x36, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x28}}}}}]}}]}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000003e000000000000ff0000008500000007000000850000005000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000740)={@rand_addr=0x64010102, @loopback}, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) close(r3) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_usb_control_io$printer(r4, 0x0, 0x0) unshare(0x40000080) syz_usb_control_io$cdc_ecm(r4, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f0000000200)={0x20, 0x1, 0x6, "ef7f9dc99d85"}, 0x0, 0x0}) syz_usb_control_io$printer(r4, &(0x7f0000000400)={0x14, &(0x7f0000000200)={0x40, 0x3, 0x77, {0x77, 0x2, "676248a5e0b39e105938c9c669eaf30bb889b378a8b3925cd0ec3939345a154de58c0208eca60bda0fc0c41e763c667828811c314e1c7be4184026160baeb8dd453c17120e30b1d242d3608cdde8653da2c4360bfb5ef6b90da02dc850c1f37db5d39c86cf30e3571c92b43d9dc85d4da7b2649c4d"}}, &(0x7f0000000180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x4ff}}}, &(0x7f00000006c0)={0x34, &(0x7f0000001040)=ANY=[@ANYBLOB="400875000000110d7102c15daa5e32887c0935ac25695feb427afbd5ce92b253b5d89d168e1a628a79538f997076f5138a70163d5f83e294c38ff1908f141cc22e19b54344b253428b856041ddb0f3c2bd31afa47a2240d4f764ae98c8d0c69e772f3c21795ded025768f06ea3b45c0ec845a8da2ff2f6b2ce787e02ab8d1a95b11ac89fba"], &(0x7f0000000540)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000580)={0x0, 0x8, 0x1}, &(0x7f0000000600)={0x20, 0x0, 0x15, {0x13, "a0bf4f7fc6175e40fa0976d967e676cb95dfc2"}}, &(0x7f0000000640)={0x20, 0x1, 0x1, 0x8}, &(0x7f0000000680)={0x20, 0x0, 0x1, 0x6}}) prctl$PR_SET_MM(0x23, 0x6, &(0x7f000077c000/0x1000)=nil) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="002207000000b34c0000a8f7fdce005582"], 0x0}, 0x0) 5.538611573s ago: executing program 3 (id=9031): r0 = socket$packet(0x11, 0x2, 0x300) bind$packet(r0, &(0x7f0000000140)={0x11, 0x4}, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x99, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x1000801, &(0x7f0000000840)=ANY=[@ANYRES32, @ANYBLOB="297c00f9c21980234eab918ac814309e197710e2d610b50fc9fa30d71b80aa11665fc7ff638d11ea1f12", @ANYRES32, @ANYRES16, @ANYRESHEX, @ANYBLOB="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", @ANYRES8, @ANYRESDEC], 0x2, 0x1e8, &(0x7f00000001c0)="$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") r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x2, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r5, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400}) 4.982204435s ago: executing program 0 (id=9035): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x200c840, &(0x7f0000004240)={[{@discard}, {@inlinecrypt}]}, 0x64, 0x526, &(0x7f0000000a40)="$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") socket$netlink(0x10, 0x3, 0x7) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./bus\x00', 0x800, &(0x7f0000000040)={[{@jqfmt_vfsv0}, {@test_dummy_encryption}]}, 0x1, 0x453, &(0x7f0000000a40)="$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") r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r7 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) keyctl$clear(0x7, r7) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111b000000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f00000000c0)=""/196, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x4d) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{0x0, 0x34}], 0x1}, 0x4008090) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) 4.363009698s ago: executing program 2 (id=9043): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) prlimit64(r0, 0xd, &(0x7f0000004080)={0x4, 0x7}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x3, 0x1004, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000780)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x15, 0x8, 0x4, 0x0, 0x0, 0x1, 0x0, '\x00', 0x0, r4, 0x0, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r3, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000e8000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000041c0), 0x80, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000004200)={'virt_wifi0\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000004100)=ANY=[@ANYBLOB="0500000001000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000bbec0000000000000003c00cbbde70a00ba5042ed91e234b3801044f3838f533894b58aaf6bea80388bd9b8ee62d9dc53f2c71d0380c74ed70a7be2ecfcf8acb9d136"], 0x48) fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) r8 = openat$ashmem(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r8, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x10, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071113100000000008510000002000000850000000000000095000000000000009500a5050000003f"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffef5, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) 2.684896857s ago: executing program 2 (id=9044): syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x810, &(0x7f00000018c0)=ANY=[], 0xfd, 0x1501, &(0x7f00000002c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) r1 = openat(r0, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000180)='./bus\x00', 0x0) renameat2(r1, &(0x7f0000000080)='./bus\x00', r1, &(0x7f0000000200)='./file0\x00', 0x0) (fail_nth: 2) 2.672320377s ago: executing program 6 (id=9045): sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d0000008500000008"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f000000e400)={0x2020, 0x0, 0x0}, 0x2020) capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000040)={0x200000, 0x200000}) write$FUSE_INIT(r4, &(0x7f0000000040)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0xa68d7c519e801be0, 0x0, 0x0, 0x1d45}}, 0x50) syz_fuse_handle_req(r4, &(0x7f0000008380)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) writev(r6, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) close(r4) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = dup(r7) ioctl$TIOCL_SETSEL(r8, 0x541c, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x80000, 0x0) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x1810714, &(0x7f0000000400)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40000}}, {@init_itable_val}, {@nolazytime}, {@jqfmt_vfsv1}, {@prjquota}, {@init_itable_val={'init_itable', 0x3d, 0x7fff}}, {@grpquota}, {@errors_continue}, {@errors_continue}, {@test_dummy_encryption}]}, 0x1, 0x472, &(0x7f0000000c00)="$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") 2.442915598s ago: executing program 3 (id=9046): r0 = socket$packet(0x11, 0x2, 0x300) bind$packet(r0, &(0x7f0000000140)={0x11, 0x4}, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x99, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x1000801, &(0x7f0000000840)=ANY=[@ANYRES32, @ANYBLOB="297c00f9c21980234eab918ac814309e197710e2d610b50fc9fa30d71b80aa11665fc7ff638d11ea1f12", @ANYRES32, @ANYRES16, @ANYRESHEX, @ANYBLOB="5d89e7f5ae235b3811fba8decf2b4bb7fe0fac57f981e4b693da3fb8d287ed3907380c372c58a72b23c7d425333cc64cbcc94797dce0b3b8c01cc49a50b174ba4ddd5af70bc618f171e871cc0a64eb6c5dece5d1b4ac40507673dde64359ad207e61f888d5970927486f9dd02d0db9d1492fc496e9b9e04d50dd85f94ab68d8fcdb204903f01ff93204cc4823f34e4874345777951b0af0d024c721187a93cabea1ce932d550724d733d389982b8a231575ff2db878168424a7bf3d6d66ba9f01005eec07304826949af824bf6be05e0df735aabc9bf914cd1d58c0cc4bff14262324d9229cc587b80ad6f4461bf6caeaa59da1541b2297645a59b16caf14257723220f3a89b50113ad1007e1d89a18bd9c20bd19d4c6921e42bfca1105faa27978d9575a0a1fa6ec537c2c276526115f16e7b5d37cc67541b19b7f3c39e1eba80861872ad726c57ff7f8d0c1eea3253a9358d5a11473533d4ff6c6a2b409405a28c95bf34466bab3a3d8ef8726dcebf32427599644db825612de642444f7231bc7cd265a916babf0fe35d5282503f03401bee44cd14e31359ecddb71c57aac9d6245fa6098d4c5f53d0929b9fd40dee456e58dc4512afb9028d4c6047c2c12fb4eff20e5203583c1f5c84e037e68fd9573c98f9653768ff2f01b5e65066bd16bd90a10d82188d37927a6151f6fc4528a540937909837e07cec45691027708fdba69c06becbd7fdefb0f4a878f595e0ff14a7db81ea9e34e65c34c629f84c375d47be49e392c3dea92d9d06aaceb12d20a88b21d07f7751901d0abc34a540fde1e87f08dd461460e0e896a03f19ec7dc2898d03bd1eca8cfbebac1e317fbc990dc902b3c7d6c7f462e7cde3b9676f892154fe48e4018fdfe867af5608060a6d5f73e7aa2f10b78dbed36521a7e0b9c2ffb0313ae465dcf7adcd37eae04f70a8ce09a13fa0ae50655fccab9e71b08c308b5bcf513534addc2d231b7d5f54df58b503df72e744e39f728a05d796e00930b5f7986dbc73250a819a555ce96c4755d8b5bccd8fb64ca884bf483f41b35ee005b3509f3bd32268f83058be9fa32a82f448f7369c97bd0f144075dd949a5a8605cad4447ec55ffc959eee521f239496f15e00af0bca0122cfde70e4220a565a3e82f27ae5dca790ebf1fe595299e2e7504571adce95f73f5c670140d82b703b938f89d313ffed88bb4a99f35f533f63a0e498b78d722fee3a0be39de6cb986a353e862c888e78e63722b1eef9a419e8f20aac584303a86c236483d6bb3e1759744739cb16e596093f4a42915b89dc61cb51375c120b2b5cefa69e09d98374ab4c26df424414018da546835e427af0e66944a7b295abef518ff612a2942c30c27cec6d65b7b2c749a240fe2a2c9e0324f8731de2ff282f2608c77f7d81fd6c7b5787aa099edde78237528aba04cc5fec525bbdb13800991795f15a12bbd0821ed9e9d6cb97b7934d37f9167a59b0bd55d504fbc974b45911e26ddce1d088213a1acadd96f27259f422db2ce5fa9ddbb22338a3ca9c7eb010b892170dc916ec7d3b598d1235f676741b91c0217848bb4bd23f86489eebfdcd39aff312f8e5443e7848b01a922bb7063a6ed20d863302e5b1f37869bf4c6d1203c4295cbdaad13a817d3c8cc7ca5538892e20b88c0c3c0931f34007113b5676e1d5fa81ab38079efb5864f47adc9817488bb4cf89862c72744eda97290c086475633a3cb5b1f4223b578d8bc4157bc7c93f5c2aa8ae89804664868c867f40761d1772961ae65102e529ae0248dc1fdce340a25fccf2a63a8508c74aa7ff33374ee2f10c7a90fcdb4811acf2e5d5ecc64ab17ea9678b293712a95cbe007b4705d74dc0ad5a62e1634d6d62b83c99cedaac37bac65e17ddf9efd7886d4d4f1aeeb37b1a7e99497de17573d7dfadbed7a8410150a6b0e399d0c6329029a9f2f58ac4817f54cbc2deb106b684050dfee8936c180202468d8c458c88f7cbe4935e76e4bb430417dc8d3168a46e5e4656dd4903f22d7be690822180032afb12bef9b19f8a7ef8d3fc37cf88cbc663f6feb411c18bc959d4ea9ba883840ff2669abac2232c29ab9b11e061a0fa6b532591f24f97275223e0cf9af63ce7bfd09f6c81af3c4d061768cff80dc7703fad721c788fc06fa8ce2fe7582c642c85b00d7438ff73714a7be331ade251644b0b6ea98cd88dc23143876b77662fefd432aec5376cbc5d5412c5a85da613800f1460d7c4f956c567fd4b6d87d9d65b5061d06bbfc7921bb54cb3ba93358199d1273b34c142314e252f3af935c03d23350fe036d67da9ab140c77330263ba9cfe37d13d403d73db0bc9157918a3b6027ff8c96700daf14909d28a67b7a7006a1ffa3e3e87815201913d91f39ea07a1c6f0adcf67795eb2b0fe692c31dcd8b0d1560e1893305436fabe7318f481a0f1f04655ff4cbfdc1b49eb23f291913f143aea21e1da0f5210539afde9df7925529641a9f82a3f603b0740fdeb20a1c736964779ae4950add5d05821394c939f1177740e8c8936a55bae1540637864374c910f09ca59b718b3840c3f20fb412212c0b6417771df24bc80ef6f58b9db2cdbd7b98582a9cf0ac18880cb15f38940aaa0c9583a15dd200c95b82e39c706d03746d993de038a308446b824f59f5284e48e489267e7c0025324a9fb037c47dd1ea262ae5ccfd112f18448b87a06a251d174b0ea32843177b4488663bf6ec561118babc828831bd12bc0f57fa6861a77e98c76d39492d4afc7c802a870fd5042441ec0cc9a4aec8a73bc1b0da2ca3d3f02b26bf53e713f796c2c467aa10404ec08324125438882815c3b6d53fcb6ea59cf90f83357c9485a07409418c5bdf6046c387ba717cdbb7f8313c6aa060e38a1f9e54773694a634855c45e98e5b6451f5c77b7e4f9cda54e61f04c64e91e019d774bb879b5767ce9db4d3ebd5e271651c8c8f210609b6a5299debefc69071ca9a7d8e1b04d9c9d94da22fe0ccb96d00043a578ea1fc211e41b9978b7a3bb8d49989347b1d66efbc2452b05ec3ed3c468c89544332a346f9d26675d20b379df45db62cc4e02d39b96e832b1a23e5468da52c2bbbd67821a9dce341c3d3b3d0b2b1617a8b18424fd3c8d7f8b3129dadf3415fb002a20a9b5e8921abcb13bcc012276951cc4390124863cb3848e3dc906e70fe5307fc941497d2a29bd9e0c2b3f651407bed79651379611fa6414cf7626f0fbce33dc1ccfdf68731b19b451b0c497cb5de54b0e902b6e30817cf3dbe3e6e9724ff460069a9e9a431338778c6756370fa3ccb630b9a9c1974c143ef57b5d15d7616d9a53c4c98c3d764b279cd84c69e70971eb3ba0fca65adadcaa1d0acf5340ee5290f99e4a7264334437585e36e177b8b3047456686d9331d9db3008f2d9daa89c110a8e87ae46516b25e77ff5d7287fd7bba40a592c1d16d6b5da8ea5ba1d95e74ef8d1dd5c1e68fec796c794137b1b1af5d345a3273386625604420d4371efab87b50f55818345a381d17b5ec4c25d8e6711e0ab090c3c15bf2e82aa1fc5d84479940a14150b846cff95df1ad75bbfd06304fbb8fec5b08c7d0cd18d51f0bfd0e65ab122625707790b9aeaee0f7d71a1c86ef07fa73176c38ab1a2f309b58c298095fb1a9f2b4b8e1fbd1923e89cde4532d246130ac78a8ed97b91545e6950c8103eb33a06fc05a011f5dfd42ca5d095c4649b1fd0cdd28e11e592dcb9a163b189b8f72080b92084e2b956acc8398861bcda5de79f37c2cc2aed9e7e92582e9cadd21aa4c95ee095c3f931a56a2493225187867762fc840fc94cfed1be9f1b9037570f5cf30adc133fbdf6384c93fe4535eb9566b87f1c74c95d66c7d8b8f3063ab8e529bfc0ac3e0611918ba6d7b8a082f5b0d19bad8831e25596e427590690b89c817ed270695cc8390dc885819127464c30a1fc48bd27aa53feb96c9a167d37e51e988632e2edc7ba18fda3699971550b58eeb0e2e339a3e5791e030b7d9bc27124d812c1ed28fe56b3c46a9fd2516381b9815652afdacbe8c40032cdcd5e0f741bc33e3484299a05bbf6686527285f61754a4b00611970881bd0cffbd9adb294440493ebe786e0c2a92aa81687aebf1ae465500135135fc59f3f1f182ee8685678f82ab37039589143d58e3625e4cd667cdb3c16731e8b3e57467ccc912e75165113b5d848acaba29967b9c81106cbd754b5b6cde787304a8c4a783be68e3fd33508caebc354cd2893473e906cf87a902153bdf09a876e0e046a664f73c9ab107c5f17ec18ae19624b6d0ca730c235c2f6ad9ce8471f3657dec8e51a69e02018298dc0644684bd71e8113488b50c507c8946cc0d9538f20ac85b6e931420266461d972f685640a1e443de0609ae5ada31d2ee54ed7ac578000d38a42e34be56e96cf8ddbbfaf70ab039b5bf29d30620a2d1989eec002356c920ce728360e821084d8a1537a6db35a762b4d419da11ca314eb3509af713882b6b3e034400744ba3483909b9054d179e988dcfe5e61baae6a83bfb54149b5eae5a23edfff352281a182d841b684136b1284eb4d625692113521e0876759913e7e53091c799bbfc2f7d46ed651ca4086f75583009da2689cbad5408cb8ed416ba726a06d2d1aca9435eab19d865d819fb36f8ffa72c5513188df5b9cfbe2fb1833090d2837681a441fe9b879fb87dd2d8f2b5be4609ecbb67ee10cdcd910e22439c1ca278ef0c536a54806784b9b4a83966f3227349716d635fc86fb2868b9a0026c97e7f152822e21f09e4faba0e5654986541b6a2a97150f92174b036a036e647036726fd41681a3b34c6bdc88bc4e6a357681998b19dafe34ba848c1d532d797a37cbdd5f13407c26ad2232adc7eb472053b285a489fd3c8bd640765c3d95791b56a95c6dd5d672a8b743dedc4f70e14e0866075e9698cbec82395a270c2f3be27fc5fa14ebd716c80dc70e481c3b68266a90cb39b5a42747d6a4eab190e0c6176eb1e905f8e194e588b0c6107f8541355dc551fb81466f710024bb119bd9e5303b2128e7dba2443db7a349a7849480ecd21f2e02406ffad5b69f012cd26a78076741739f7101be48cdd031a638766b775137200981e6896239a100b9aa4eeefdbea6f1dfa793364de99fa941cb050e0f14c8a9261578dbbed9e66fe1f7c42d2fa1bdfb8a42c1a2cff75ed0c1dbec8098f8eb7fc0509fc76fc1e2a3ce9284a9d8c98aa1bfef7bb4702a40e9963c976b59dbd1b18a02316e627484cf892ec8bed26336fe6a121fcdca6795efe6074031d50df3d9bf7702f0fb9678461449e17dc8763e748a6e1b706d3ffda60e81835b89231d6716b8ffc24bd2bd3846cbd2ef495baa980ff3ea27b8e366f8bb2a7968a315cc13a3b46265549acafa7bfb652880145cfa747c22c947b2b7a9cf7cad5dd17d9e78bbf911c424c51ffddbe603e889094bbaeec5384369ac086941b3c9bffc0704e4db3c2cd6ffd585be7312df9d0ce57e52ea9db6d13affbffe82595dbd7ef7306b42112f7291eae482a55afe0e1b374b30c46b34619337d46d4c0f86f08813015cc740c0a2afacd06eb2e515ad4bc086db45f6f6e8cee80d7ded5229f3dc00fd21b89624773b6c52a8a3373e040240cc2433b824210db21f24b5ee784f13edcd60968021b1e4156afff2556bb067487dc8f0401bb63d6773000262b317f3490fc98e646d4f2af2cc1af93cfafd9254017c7a573525706e056b003213f342fbe04e210d3076fef859c33551a494be4c7139e87a260a1d9879a649ecdcb330e6", @ANYRES8, @ANYRESDEC], 0x2, 0x1e8, &(0x7f00000001c0)="$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") r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x2, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r5, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400}) 2.261715199s ago: executing program 2 (id=9047): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200)={[{@nogrpid}, {@jqfmt_vfsv0}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@debug}, {@nombcache}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000280)={0x0, 0x2, 0x6}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000001640)={&(0x7f00005f8000/0x1000)=nil, &(0x7f00002b7000/0x3000)=nil, &(0x7f00009c0000/0x3000)=nil, &(0x7f000086a000/0x1000)=nil, &(0x7f000091f000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000733000/0x2000)=nil, &(0x7f000022c000/0x3000)=nil, &(0x7f0000827000/0x3000)=nil, &(0x7f00008f4000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000001540)="88e6a144f66bd1158044169cad6f3d4b6129fc6c3c55869b69c858f62092d196554a0b0d7427284e8b0043423b5d98a0c6aef02ab6ce1a4d62e2668073864907f156789260b68a974df24ea4ec2ab9416ff7cbcd92272811a70b5f430b98d74f8f9cf2f3329d290d811889d830c962083a12e5cd5b5087e6c369a174ef7b72f73d8a5226e531e6bace7cbfd85e2227c8ae8992bcacf225f9888b2be5bc9920dea9d27fc9d0e31e15127eae2748fc2c3619d223ce31", 0xb5}, 0x68) bpf$MAP_CREATE(0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x228001, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) read$FUSE(r1, &(0x7f00000003c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x28, 0x0, 0x0, 0xffff}}, 0x50) 2.255879479s ago: executing program 7 (id=9049): prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='environ\x00') r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) setfsuid(0x0) preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0, 0x0) 1.965408321s ago: executing program 2 (id=9050): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00'}, 0x18) r0 = open(&(0x7f0000000080)='.\x00', 0x101000, 0x0) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 1.941179851s ago: executing program 2 (id=9051): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffd}]}) execve(0x0, 0x0, 0x0) 1.925187301s ago: executing program 7 (id=9052): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={0x0}, 0x18) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0x8401) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f0c0000000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/16], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE_wg(r3, 0x1, 0x19, &(0x7f00000000c0)='wg0\x00', 0x4) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000100060000000077f2ab26850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='kfree\x00', r5}, 0x10) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r6, 0x4b72, &(0x7f0000000400)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'ip6_vti0\x00', 0x0}) r8 = gettid() sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000005f00)=ANY=[@ANYBLOB, @ANYRES32=r7, @ANYBLOB="6d3082610000000008001300", @ANYRES32=r8], 0x28}}, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000200)=0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000280)={0x0, 0x0}) r11 = syz_clone(0x1000000, &(0x7f0000000a40)="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", 0x1000, &(0x7f00000002c0), &(0x7f0000000380), &(0x7f0000000780)="951b5e15a30926c78a2f5ca066fc4a789606fef53c648fc87011c22baed41dab3157db44fdc7c0294767e76900cabdbdb11a849c1fcb99193e9223e5f1768f9b2b95c4a1d4d59173fa1a159f168800e540f690240c9830ac7e737dcc22841f1802f59d9458d51d6fd3b9633e0737a3d2c18dec0cfa3743709cd875dc7f44f94bfd825928566cb72b7a30f80d3fa14eda40b2c696e01bda14fd1691d919649d3282fdd8ef381466fd13c5474311837e904f66e4f46772452120cd13c144f569b28d8102f7c102") ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000003c0)=0x0) syz_clone3(&(0x7f00000004c0)={0x100000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x11}, &(0x7f0000000680)=""/237, 0xed, &(0x7f0000000180)=""/79, &(0x7f0000000400)=[0xffffffffffffffff, r8, r9, r10, 0x0, r11, r12], 0x7}, 0x58) ioctl$USBDEVFS_BULK(r0, 0x5523, 0x0) ioctl$USBDEVFS_FORBID_SUSPEND(r0, 0x5521) 1.868310521s ago: executing program 2 (id=9053): openat$selinux_attr(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0xd0, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x36, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x28}}}}}]}}]}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000003e000000000000ff0000008500000007000000850000005000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000740)={@rand_addr=0x64010102, @loopback}, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) close(r3) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xa1, 0x12, 0x17, 0x10, 0xb95, 0x172a, 0xf7f4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xfb, 0x0, 0x2, 0x6c, 0x5d, 0x65, 0x0, [], [{{0x9, 0x5, 0x4, 0x2, 0x10, 0x0, 0xfa}}, {{0x9, 0x5, 0x82, 0x2, 0x40}}]}}]}}]}}, 0x0) syz_usb_control_io$printer(r4, 0x0, 0x0) unshare(0x40000080) syz_usb_control_io$cdc_ecm(r4, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f0000000200)={0x20, 0x1, 0x6, "ef7f9dc99d85"}, 0x0, 0x0}) syz_usb_control_io$printer(r4, &(0x7f0000000400)={0x14, &(0x7f0000000200)={0x40, 0x3, 0x77, {0x77, 0x2, "676248a5e0b39e105938c9c669eaf30bb889b378a8b3925cd0ec3939345a154de58c0208eca60bda0fc0c41e763c667828811c314e1c7be4184026160baeb8dd453c17120e30b1d242d3608cdde8653da2c4360bfb5ef6b90da02dc850c1f37db5d39c86cf30e3571c92b43d9dc85d4da7b2649c4d"}}, &(0x7f0000000180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x4ff}}}, &(0x7f00000006c0)={0x34, &(0x7f0000001040)=ANY=[@ANYBLOB="400875000000110d7102c15daa5e32887c0935ac25695feb427afbd5ce92b253b5d89d168e1a628a79538f997076f5138a70163d5f83e294c38ff1908f141cc22e19b54344b253428b856041ddb0f3c2bd31afa47a2240d4f764ae98c8d0c69e772f3c21795ded025768f06ea3b45c0ec845a8da2ff2f6b2ce787e02ab8d1a95b11ac89fba"], &(0x7f0000000540)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000580)={0x0, 0x8, 0x1}, &(0x7f0000000600)={0x20, 0x0, 0x15, {0x13, "a0bf4f7fc6175e40fa0976d967e676cb95dfc2"}}, &(0x7f0000000640)={0x20, 0x1, 0x1, 0x8}, &(0x7f0000000680)={0x20, 0x0, 0x1, 0x6}}) prctl$PR_SET_MM(0x23, 0x6, &(0x7f000077c000/0x1000)=nil) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="002207000000b34c0000a8f7fdce005582"], 0x0}, 0x0) 1.556533632s ago: executing program 7 (id=9054): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={0x0}, 0x18) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0x8401) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f0c0000000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/11], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE_wg(r3, 0x1, 0x19, &(0x7f00000000c0)='wg0\x00', 0x4) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000100060000000077f2ab26850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='kfree\x00', r5}, 0x10) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r6, 0x4b72, &(0x7f0000000400)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'ip6_vti0\x00', 0x0}) r8 = gettid() sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000005f00)=ANY=[@ANYBLOB, @ANYRES32=r7, @ANYBLOB="6d3082610000000008001300", @ANYRES32=r8], 0x28}}, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000200)=0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000280)={0x0, 0x0}) r11 = syz_clone(0x1000000, &(0x7f0000000a40)="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", 0x1000, &(0x7f00000002c0), &(0x7f0000000380), &(0x7f0000000780)="951b5e15a30926c78a2f5ca066fc4a789606fef53c648fc87011c22baed41dab3157db44fdc7c0294767e76900cabdbdb11a849c1fcb99193e9223e5f1768f9b2b95c4a1d4d59173fa1a159f168800e540f690240c9830ac7e737dcc22841f1802f59d9458d51d6fd3b9633e0737a3d2c18dec0cfa3743709cd875dc7f44f94bfd825928566cb72b7a30f80d3fa14eda40b2c696e01bda14fd1691d919649d3282fdd8ef381466fd13c5474311837e904f66e4f46772452120cd13c144f569b28d8102f7c102") ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000003c0)=0x0) syz_clone3(&(0x7f00000004c0)={0x100000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x11}, &(0x7f0000000680)=""/237, 0xed, &(0x7f0000000180)=""/79, &(0x7f0000000400)=[0xffffffffffffffff, r8, r9, r10, 0x0, r11, r12], 0x7}, 0x58) ioctl$USBDEVFS_BULK(r0, 0x5523, 0x0) ioctl$USBDEVFS_FORBID_SUSPEND(r0, 0x5521) 1.497264463s ago: executing program 6 (id=9055): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) prlimit64(r0, 0xd, &(0x7f0000004080)={0x4, 0x7}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x3, 0x1004, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000780)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x15, 0x8, 0x4, 0x0, 0x0, 0x1, 0x0, '\x00', 0x0, r4, 0x0, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r3, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000e8000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000041c0), 0x80, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000004200)={'virt_wifi0\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000004100)=ANY=[@ANYBLOB="0500000001000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000bbec0000000000000003c00cbbde70a00ba5042ed91e234b3801044f3838f533894b58aaf6bea80388bd9b8ee62d9dc53f2c71d0380c74ed70a7be2ecfcf8acb9d136"], 0x48) fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) r8 = openat$ashmem(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r8, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x10, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071113100000000008510000002000000850000000000000095000000000000009500a5050000003f"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffef5, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) 1.394278843s ago: executing program 3 (id=9056): syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000140)='./file1\x00', 0x80c406, &(0x7f00000003c0)=ANY=[], 0xff, 0x2de, &(0x7f0000000580)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) 1.364474223s ago: executing program 3 (id=9057): socket$netlink(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000009500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='sys_enter\x00', r1}, 0x10) timer_create(0x0, 0x0, &(0x7f0000bbdffc)=0x0) timer_delete(r2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000007319bfa75588bcecc8dc333d6f0000002800000028000000020000000009720000000001050000afae75120000000000010000850000000000"], &(0x7f0000000000)=""/140, 0x42, 0x8c, 0x1, 0x0, 0x0, @void, @value}, 0x20) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES16=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) process_mrelease(0xffffffffffffffff, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0b00000006000000010001000d00000001000000", @ANYRES32=0x1, @ANYBLOB="00000000000000000000000000000000005eaedf633e66bae9340f2224f6", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000340)={r6, &(0x7f0000000080), &(0x7f0000000380)=""/173}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r7}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r8}, 0x10) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r9, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) close(r9) 1.047129725s ago: executing program 7 (id=9058): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x21, 0x3, 0x588, 0x250, 0xffffffff, 0xffffffff, 0x250, 0xffffffff, 0x4b8, 0xffffffff, 0xffffffff, 0x4b8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private2, @private2, [], [], 'veth0\x00', 'syzkaller1\x00'}, 0x0, 0x228, 0x250, 0x0, {}, [@common=@inet=@policy={{0x158}, {[{@ipv4=@broadcast, [0xff000000, 0x0, 0xff], @ipv4=@private=0xa010100, [0xff000000, 0xffffffff, 0xffffff00, 0xff], 0x4d4, 0x3500, 0x2b, 0x1, 0xa, 0x8}, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, [0xffffffff, 0xff000000, 0xff], @ipv4=@private=0xa010100, [0x0, 0x0, 0x0, 0xff000000], 0x4d4, 0x0, 0x4, 0x84c8c1ffaf088238, 0x6}, {@ipv6=@private1, [0x0, 0x0, 0x6471b27323fbf78f], @ipv6=@private1, [0xff, 0x0, 0x0, 0xffffff00], 0x4d4, 0x3501, 0x87, 0x1, 0x2, 0x2}, {@ipv6=@private2={0xfc, 0x2, '\x00', 0x1}, [0xffffff00, 0xffffff00, 0xff000000], @ipv4=@broadcast, [0xff000000, 0xff, 0xff000000, 0xffffffff], 0x4d2, 0x3506, 0x2f, 0x0, 0x0, 0x1e}], 0xf, 0x6}}, @inet=@rpfilter={{0x28}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@ipv6={@empty, @mcast1, [], [0xffffffff], 'batadv0\x00', 'veth1\x00', {0xff}}, 0x0, 0x200, 0x268, 0x0, {}, [@common=@inet=@policy={{0x158}, {[{@ipv6=@private1, [], @ipv4=@remote}, {@ipv6=@dev, [0xffffffff], @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {@ipv4=@multicast2, [], @ipv6=@loopback}, {@ipv6=@rand_addr=' \x01\x00', [0x0, 0xffffff00], @ipv4=@local}]}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5e8) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000240)=0x6) syz_clone3(&(0x7f0000000600)={0x8bb719f3ac384950, &(0x7f0000000000), &(0x7f00000001c0), &(0x7f0000000500), {0xf}, &(0x7f0000000540)=""/64, 0x40, &(0x7f0000000580)=""/63, &(0x7f00000005c0)=[r1], 0x1}, 0x58) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0x46, &(0x7f0000000100)=0x1, 0x4) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x80000003}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) getsockopt$inet_opts(r4, 0x0, 0x0, &(0x7f0000000780)=""/13, &(0x7f00000007c0)=0xd) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) mlockall(0x7) 960.429676ms ago: executing program 0 (id=9059): syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000140)='./file1\x00', 0x80c406, &(0x7f00000003c0)=ANY=[], 0xff, 0x2de, &(0x7f0000000580)="$eJzs3E1rE1scx/F/HppJe+nD6sK9m3u4bnQz1LhUwSgtiAEl7Yi6EKZ0qkNiUmaCJiIYcOeqC/FFFHHlThDfQPe+AHdFkK66ciTJzGSaJpbYaWOa7wdKzpxfTnJmTgP/CZnZvbf1pLTh6htmTZJZJUmRpuyLLIgtgURSum3JdDeu5qQpFxaf7r1euf/gVr5QWCoqtZxfvZRTSs399+nZi3f/f679dffDnKbJzsLD3e+5rzt/7/yz+2P1se0q21WVak2Zaq1arZlrZUut225JV+pO2TJdS9kV13IO5Bvl6uZmQ5mV9dmZTcdyXWVWGiopDVWrqqw/q4rSdV3Nzrx9L5KVCZIZeoSxXSya+b7RRB25s81x8mZaRKYPramxPZoZAQCAURpc/3eL/oT/mOyt/0WOqP9f+s+a+xh7/Z+SsP4vWe36v+Y0lPnItIP6/xSP4rgyrg2s/38heTKTwXEkmpGN6wcix8lP9x9E/Q8AAAAAAAAAAAAAAAAAAAAAwDjY97x5z/Pm972U39PZ1kSk1eP5+YDhXAoy5jrr/yr8Pwj+NP8WAEesP8Zc5MK9rMi3Zt2oG4n2YydfvllYWlRtkQv/9up1IxXmFzu56uZa2GrluUN5a3xGzp/r5K3sxu1CNN+qG9Oy3jPX1IGtZjwHAAAAAACACaCr0ELYmZXw/F7XlSa9efv8vd1Ii0jw/YDqfh3YytPyb/p09wUAAAAAAPTnNp6XzHLZcg410oOj32+kenumRCTet4g2/J1sDjvKCe55PNSbXva0WCafEpFIT/Bjiuhziisi8R2ozLB7OqihiRX8SOPE1rRv40s+htfZeyMS58QyfRbu2I0rgyN7uBf0EsFHb8qfaL/PDgAAAIAzo3s+MOqZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwuU7jJm2j3kcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgT/EzAAD//yUjooo=") mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (fail_nth: 2) 752.976906ms ago: executing program 0 (id=9060): syz_mount_image$ext4(0x0, &(0x7f00000004c0)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, 0x0) pipe2$9p(0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000100000000000000040000850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) r1 = dup(0xffffffffffffffff) write$FUSE_BMAP(r1, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="9802"], 0x298) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000400)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r1}}) 752.529376ms ago: executing program 0 (id=9061): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200)={[{@nogrpid}, {@jqfmt_vfsv0}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@debug}, {@nombcache}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000280)={0x0, 0x2, 0x6}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000001640)={&(0x7f00005f8000/0x1000)=nil, &(0x7f00002b7000/0x3000)=nil, &(0x7f00009c0000/0x3000)=nil, &(0x7f000086a000/0x1000)=nil, &(0x7f000091f000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000733000/0x2000)=nil, &(0x7f000022c000/0x3000)=nil, &(0x7f0000827000/0x3000)=nil, &(0x7f00008f4000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000001540)="88e6a144f66bd1158044169cad6f3d4b6129fc6c3c55869b69c858f62092d196554a0b0d7427284e8b0043423b5d98a0c6aef02ab6ce1a4d62e2668073864907f156789260b68a974df24ea4ec2ab9416ff7cbcd92272811a70b5f430b98d74f8f9cf2f3329d290d811889d830c962083a12e5cd5b5087e6c369a174ef7b72f73d8a5226e531e6bace7cbfd85e2227c8ae8992bcacf225f9888b2be5bc9920dea9d27fc9d0e31e15127eae2748fc2c3619d223ce31", 0xb5}, 0x68) bpf$MAP_CREATE(0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x228001, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) read$FUSE(r1, &(0x7f00000003c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x28, 0x0, 0x0, 0xffff}}, 0x50) 381.555428ms ago: executing program 6 (id=9062): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00'}, 0x18) r0 = open(&(0x7f0000000080)='.\x00', 0x101000, 0x0) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 366.793588ms ago: executing program 6 (id=9063): syz_mount_image$ext4(0x0, &(0x7f00000004c0)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, 0x0) pipe2$9p(0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000100000000000000040000850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) r1 = dup(0xffffffffffffffff) write$FUSE_BMAP(r1, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="9802"], 0x298) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000400)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r1}}) 347.505719ms ago: executing program 6 (id=9064): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={0x0}, 0x18) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0x8401) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f0c0000000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/14], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE_wg(r3, 0x1, 0x19, &(0x7f00000000c0)='wg0\x00', 0x4) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000100060000000077f2ab26850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='kfree\x00', r5}, 0x10) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r6, 0x4b72, &(0x7f0000000400)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'ip6_vti0\x00', 0x0}) r8 = gettid() sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000005f00)=ANY=[@ANYBLOB, @ANYRES32=r7, @ANYBLOB="6d3082610000000008001300", @ANYRES32=r8], 0x28}}, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000200)=0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000280)={0x0, 0x0}) r11 = syz_clone(0x1000000, &(0x7f0000000a40)="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", 0x1000, &(0x7f00000002c0), &(0x7f0000000380), &(0x7f0000000780)="951b5e15a30926c78a2f5ca066fc4a789606fef53c648fc87011c22baed41dab3157db44fdc7c0294767e76900cabdbdb11a849c1fcb99193e9223e5f1768f9b2b95c4a1d4d59173fa1a159f168800e540f690240c9830ac7e737dcc22841f1802f59d9458d51d6fd3b9633e0737a3d2c18dec0cfa3743709cd875dc7f44f94bfd825928566cb72b7a30f80d3fa14eda40b2c696e01bda14fd1691d919649d3282fdd8ef381466fd13c5474311837e904f66e4f46772452120cd13c144f569b28d8102f7c102") ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000003c0)=0x0) syz_clone3(&(0x7f00000004c0)={0x100000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x11}, &(0x7f0000000680)=""/237, 0xed, &(0x7f0000000180)=""/79, &(0x7f0000000400)=[0xffffffffffffffff, r8, r9, r10, 0x0, r11, r12], 0x7}, 0x58) ioctl$USBDEVFS_BULK(r0, 0x5523, 0x0) ioctl$USBDEVFS_FORBID_SUSPEND(r0, 0x5521) 298.879459ms ago: executing program 3 (id=9065): sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d0000008500000008"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f000000e400)={0x2020, 0x0, 0x0}, 0x2020) capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000040)={0x200000, 0x200000}) write$FUSE_INIT(r4, &(0x7f0000000040)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0xa68d7c519e801be0, 0x0, 0x0, 0x1d45}}, 0x50) syz_fuse_handle_req(r4, &(0x7f0000008380)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) writev(r6, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) close(r4) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = dup(r7) ioctl$TIOCL_SETSEL(r8, 0x541c, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x80000, 0x0) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x1810714, &(0x7f0000000400)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40000}}, {@init_itable_val}, {@nolazytime}, {@jqfmt_vfsv1}, {@prjquota}, {@init_itable_val={'init_itable', 0x3d, 0x7fff}}, {@grpquota}, {@errors_continue}, {@errors_continue}, {@test_dummy_encryption}]}, 0x1, 0x472, &(0x7f0000000c00)="$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") 251.840629ms ago: executing program 0 (id=9066): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$incfs(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000340), 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f00000006c0)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) rename(&(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f00000000c0)='./file0\x00') 204.203339ms ago: executing program 0 (id=9067): r0 = socket$packet(0x11, 0x2, 0x300) bind$packet(r0, &(0x7f0000000140)={0x11, 0x4}, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x99, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x1000801, &(0x7f0000000840)=ANY=[@ANYRES32, @ANYBLOB="297c00f9c21980234eab918ac814309e197710e2d610b50fc9fa30d71b80aa11665fc7ff638d11ea1f12", @ANYRES32, @ANYRES16, @ANYRESHEX, @ANYBLOB="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", @ANYRES8, @ANYRESDEC], 0x2, 0x1e8, &(0x7f00000001c0)="$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") r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x2, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r5, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400}) 58.49129ms ago: executing program 7 (id=9068): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000009c0)=@nat={'nat\x00', 0x1b, 0x5, 0x498, 0x1e0, 0xd8, 0xffffffff, 0x0, 0xd8, 0x400, 0x400, 0xffffffff, 0x400, 0x400, 0x5, &(0x7f0000000000), {[{{@uncond, 0x0, 0xa0, 0xd8, 0x0, {}, [@common=@ah={{0x30}, {[0x3, 0x7], 0x1}}]}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x1, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @gre_key=0xfff8, @gre_key=0x3}}}}, {{@uncond, 0x0, 0xd0, 0x108, 0x0, {}, [@common=@ah={{0x30}, {[0x401, 0x9], 0x1}}, @common=@addrtype={{0x30}, {0x40, 0xb60, 0x1, 0x1}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0xe, @remote, @local, @port=0x4e22, @port=0x4e24}}}}, {{@uncond, 0x0, 0xb0, 0xe8, 0x0, {}, [@common=@set={{0x40}, {{0xffffffffffffffff, [0x7, 0x0, 0x0, 0x5, 0x2, 0x6], 0x1, 0x2}}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x5, @local, @empty, @icmp_id=0x68, @port=0x4e22}}}}, {{@ip={@loopback, @local, 0x0, 0x1fffffe00, 'vxcan1\x00', 'caif0\x00', {}, {}, 0xc, 0x3, 0x5a}, 0x0, 0x110, 0x138, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0x4, 0x1}}, @common=@inet=@multiport={{0x50}, {0x2, 0xd, [0x4e21, 0x4e21, 0x4e23, 0x4e21, 0x4e22, 0x4e20, 0x4e20, 0x4e23, 0x4e23, 0x4e22, 0x4e23, 0x4e23, 0x4e22, 0x4e21, 0x4e24], [0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1], 0x1}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4f8) close_range(r0, 0xffffffffffffffff, 0x0) 16.87187ms ago: executing program 7 (id=9069): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000c4f5de7962ac02b9bff3376d10000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000005c0)=ANY=[@ANYBLOB="1201000000000040b404b107000000000001090224000100000000090400000103ea0000092100000001220500090581030000000000"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="010000000400004f0000000000000000000000002286d8cafe3ce020682a1f1af6f4f9cb3ce19619712d206261eeeea6482a5810d0f40e1feaf3a6eeb803166f6c2546532505e231ed40f7984fb0f913c4a354010e17654003c0644bdba66c3589481a0f4579c27b57e14e55e686140e082a601fece45c317ce49c7d1198e3e177cba1fe125fed099300000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000540)={[{@test_dummy_encryption}]}, 0x1, 0x236, &(0x7f0000000300)="$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") sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004000000", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x2d) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) unshare(0x20000400) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r8, &(0x7f0000000100)={'syz0\x00', {0x0, 0x0, 0xffff}, 0x7, [0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x3, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x44a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180d, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffffd], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x35e9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) unshare(0x20000400) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x280}], 0x1, &(0x7f0000000100)={0x0, 0x3938700}, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000580)=ANY=[@ANYBLOB="05000000000000007111f7ff00000000851000000200000084b74670e00000000000a505e7ffffff0dc76c42634c214c16ac162ba95d728b466460e7a24c72e7f903910f37f9ad5be384defad5d1b8783f795e28b99b26"], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 0s ago: executing program 6 (id=9070): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x2, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x10) rt_sigpending(0x0, 0x0) (fail_nth: 2) kernel console output (not intermixed with test programs): 2052.002295][ T3098] copy_msghdr_from_user+0x527/0x670 [ 2052.007412][ T3098] ? sendmsg_copy_msghdr+0x70/0x70 [ 2052.012367][ T3098] __sys_sendmsg+0x236/0x390 [ 2052.016794][ T3098] ? ____sys_sendmsg+0x9a0/0x9a0 [ 2052.021563][ T3098] ? __kasan_check_write+0x14/0x20 [ 2052.026509][ T3098] ? mutex_unlock+0xb2/0x260 [ 2052.030935][ T3098] ? __kasan_check_write+0x14/0x20 [ 2052.035883][ T3098] ? __ia32_sys_read+0x90/0x90 [ 2052.040480][ T3098] ? debug_smp_processor_id+0x17/0x20 [ 2052.045693][ T3098] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 2052.051591][ T3098] __x64_sys_sendmsg+0x7f/0x90 [ 2052.056191][ T3098] x64_sys_call+0x16a/0x9a0 [ 2052.060528][ T3098] do_syscall_64+0x3b/0xb0 [ 2052.064780][ T3098] ? clear_bhb_loop+0x55/0xb0 [ 2052.069289][ T3098] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2052.075018][ T3098] RIP: 0033:0x7f80fd57e759 [ 2052.079273][ T3098] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2052.098719][ T3098] RSP: 002b:00007f80fe417038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2052.106962][ T3098] RAX: ffffffffffffffda RBX: 00007f80fd736130 RCX: 00007f80fd57e759 [ 2052.114781][ T3098] RDX: 0000000000000000 RSI: 0000000020000440 RDI: 0000000000000008 [ 2052.122587][ T3098] RBP: 00007f80fe417090 R08: 0000000000000000 R09: 0000000000000000 [ 2052.130395][ T3098] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2052.138205][ T3098] R13: 0000000000000000 R14: 00007f80fd736130 R15: 00007ffc62e5f948 [ 2052.146024][ T3098] [ 2052.152152][ T39] wacom 0003:056A:00D0.0189: item fetching failed at offset 5/7 [ 2052.169038][ T39] wacom 0003:056A:00D0.0189: parse failed [ 2052.180782][ T39] wacom: probe of 0003:056A:00D0.0189 failed with error -22 [ 2052.544277][ T794] usb 3-1: USB disconnect, device number 112 [ 2052.817712][ T39] usb 8-1: new high-speed USB device number 91 using dummy_hcd [ 2053.147399][ T39] usb 8-1: device descriptor read/64, error -71 [ 2053.878022][ T1112] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 2053.936982][ T39] usb 8-1: device descriptor read/64, error -71 [ 2054.186767][ T1112] usb 7-1: Using ep0 maxpacket: 16 [ 2054.226769][ T39] usb 8-1: new high-speed USB device number 92 using dummy_hcd [ 2054.306741][ T1112] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2054.317515][ T1112] usb 7-1: New USB device found, idVendor=056a, idProduct=00d0, bcdDevice= 0.00 [ 2054.326287][ T1112] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2054.352198][ T1112] usb 7-1: config 0 descriptor?? [ 2054.526580][ T39] usb 8-1: device descriptor read/64, error -71 [ 2054.600090][ T3110] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2054.609197][ T3110] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2054.916383][ T39] usb 8-1: device descriptor read/64, error -71 [ 2056.474433][ T39] usb usb8-port1: attempt power cycle [ 2056.545673][ T1112] usbhid 7-1:0.0: can't add hid device: -71 [ 2056.552512][ T1112] usbhid: probe of 7-1:0.0 failed with error -71 [ 2056.569798][ T1112] usb 7-1: USB disconnect, device number 39 [ 2056.830033][ T3156] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8624'. [ 2056.916935][ T3162] syz.6.8627[3162] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2056.917018][ T3162] syz.6.8627[3162] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2056.946593][ T39] usb 8-1: new high-speed USB device number 93 using dummy_hcd [ 2057.078306][ T3167] raw_sendmsg: syz.0.8626 forgot to set AF_INET. Fix it! [ 2057.205598][ T39] usb 8-1: device descriptor read/8, error -71 [ 2057.323326][ T28] audit: type=1400 audit(1732018398.202:4249): avc: denied { read } for pid=3159 comm="syz.0.8626" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 2057.363799][ T3169] syz.7.8629[3169] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2057.363850][ T3169] syz.7.8629[3169] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2057.445186][ T39] usb 8-1: device descriptor read/8, error -71 [ 2057.475156][ T1112] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 2057.715014][ T1112] usb 7-1: Using ep0 maxpacket: 16 [ 2057.774250][ T3180] FAULT_INJECTION: forcing a failure. [ 2057.774250][ T3180] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2057.787228][ T3180] CPU: 0 PID: 3180 Comm: syz.3.8632 Not tainted 6.1.112-syzkaller-00019-g6cf2e7d96862 #0 [ 2057.796848][ T3180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 2057.806739][ T3180] Call Trace: [ 2057.809977][ T3180] [ 2057.812748][ T3180] dump_stack_lvl+0x151/0x1b7 [ 2057.817260][ T3180] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 2057.822551][ T3180] ? __kasan_check_write+0x14/0x20 [ 2057.827502][ T3180] dump_stack+0x15/0x1e [ 2057.831491][ T3180] should_fail_ex+0x3d0/0x520 [ 2057.836006][ T3180] should_fail+0xb/0x10 [ 2057.839999][ T3180] should_fail_usercopy+0x1a/0x20 [ 2057.844857][ T3180] _copy_to_user+0x1e/0x90 [ 2057.849112][ T3180] simple_read_from_buffer+0xc7/0x150 [ 2057.854317][ T3180] proc_fail_nth_read+0x1a3/0x210 [ 2057.859179][ T3180] ? proc_fault_inject_write+0x390/0x390 [ 2057.864660][ T3180] ? fsnotify_perm+0x269/0x5b0 [ 2057.869247][ T3180] ? security_file_permission+0x86/0xb0 [ 2057.874628][ T3180] ? proc_fault_inject_write+0x390/0x390 [ 2057.880094][ T3180] vfs_read+0x26c/0xae0 [ 2057.884089][ T3180] ? kernel_read+0x1f0/0x1f0 [ 2057.888545][ T3180] ? mutex_lock+0xb1/0x1e0 [ 2057.892766][ T3180] ? bit_wait_io_timeout+0x120/0x120 [ 2057.897888][ T3180] ? __fdget_pos+0x2e2/0x390 [ 2057.902340][ T3180] ? ksys_read+0x77/0x2c0 [ 2057.906478][ T3180] ksys_read+0x199/0x2c0 [ 2057.910560][ T3180] ? vfs_write+0xed0/0xed0 [ 2057.914810][ T3180] ? debug_smp_processor_id+0x17/0x20 [ 2057.920018][ T3180] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 2057.925919][ T3180] __x64_sys_read+0x7b/0x90 [ 2057.930260][ T3180] x64_sys_call+0x28/0x9a0 [ 2057.934517][ T3180] do_syscall_64+0x3b/0xb0 [ 2057.938763][ T3180] ? clear_bhb_loop+0x55/0xb0 [ 2057.943278][ T3180] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2057.949008][ T3180] RIP: 0033:0x7fd0f9b7d19c [ 2057.953260][ T3180] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 2057.972700][ T3180] RSP: 002b:00007fd0fa99a030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2057.980945][ T3180] RAX: ffffffffffffffda RBX: 00007fd0f9d36058 RCX: 00007fd0f9b7d19c [ 2057.988756][ T3180] RDX: 000000000000000f RSI: 00007fd0fa99a0a0 RDI: 0000000000000005 [ 2057.996568][ T3180] RBP: 00007fd0fa99a090 R08: 0000000000000000 R09: 0000000000000000 [ 2058.004379][ T3180] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2058.012191][ T3180] R13: 0000000000000001 R14: 00007fd0f9d36058 R15: 00007ffd4065a8b8 [ 2058.020006][ T3180] [ 2058.064864][ T1112] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2058.079851][ T1112] usb 7-1: New USB device found, idVendor=056a, idProduct=00d0, bcdDevice= 0.00 [ 2058.088786][ T1112] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2058.097892][ T1112] usb 7-1: config 0 descriptor?? [ 2058.337509][ T3165] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2058.345869][ T3165] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2058.595871][ T1112] wacom 0003:056A:00D0.018A: item fetching failed at offset 5/7 [ 2058.603514][ T1112] wacom 0003:056A:00D0.018A: parse failed [ 2058.609810][ T1112] wacom: probe of 0003:056A:00D0.018A failed with error -22 [ 2058.754509][ T39] usb 8-1: new high-speed USB device number 94 using dummy_hcd [ 2058.797995][T20313] usb 7-1: USB disconnect, device number 40 [ 2058.864473][ T39] usb 8-1: Using ep0 maxpacket: 16 [ 2059.034403][ T39] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2059.045150][ T39] usb 8-1: New USB device found, idVendor=056a, idProduct=00d0, bcdDevice= 0.00 [ 2059.053924][ T39] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2059.062357][ T39] usb 8-1: config 0 descriptor?? [ 2059.315752][ T3188] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2059.324101][ T3188] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2059.713094][ T39] wacom 0003:056A:00D0.018B: item fetching failed at offset 5/7 [ 2059.722209][ T39] wacom 0003:056A:00D0.018B: parse failed [ 2059.729157][ T39] wacom: probe of 0003:056A:00D0.018B failed with error -22 [ 2059.928509][ T39] usb 8-1: USB disconnect, device number 94 [ 2060.183792][T20313] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 2060.423630][T20313] usb 1-1: Using ep0 maxpacket: 32 [ 2060.595047][T20313] usb 1-1: unable to get BOS descriptor or descriptor too short [ 2060.613612][ T39] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 2060.678465][T20313] usb 1-1: config 128 has an invalid interface number: 127 but max is 3 [ 2060.686827][T20313] usb 1-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 2060.697507][T20313] usb 1-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 2060.706952][T20313] usb 1-1: config 128 has no interface number 0 [ 2060.713130][T20313] usb 1-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 2060.733650][T20313] usb 1-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2060.746755][T20313] usb 1-1: config 128 interface 127 has no altsetting 0 [ 2060.850345][ T3220] fuse: Invalid rootmode [ 2060.855363][ T3221] fuse: Invalid rootmode [ 2060.893464][ T39] usb 7-1: Using ep0 maxpacket: 16 [ 2061.003392][T20313] usb 1-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 2061.012307][T20313] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2061.013395][ T39] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 87, changing to 10 [ 2061.020401][T20313] usb 1-1: Product: syz [ 2061.031089][ T39] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 42986, setting to 1024 [ 2061.035170][T20313] usb 1-1: Manufacturer: syz [ 2061.045992][ T39] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2061.050505][T20313] usb 1-1: SerialNumber: syz [ 2061.063017][ T39] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 2061.076221][ T39] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2061.084543][ T39] usb 7-1: config 0 descriptor?? [ 2061.103350][ T3208] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 2061.564088][ T39] microsoft 0003:045E:07DA.018C: report is too long [ 2061.571650][ T39] microsoft 0003:045E:07DA.018C: item 0 0 0 11 parsing failed [ 2061.807762][ T39] microsoft 0003:045E:07DA.018C: parse failed [ 2061.823452][ T39] microsoft: probe of 0003:045E:07DA.018C failed with error -22 [ 2061.851549][T20313] usb 1-1: USB disconnect, device number 105 [ 2061.852752][ T2077] udevd[2077]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:128.127/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 2061.882963][ T39] usb 7-1: USB disconnect, device number 41 [ 2062.520455][ T3250] FAULT_INJECTION: forcing a failure. [ 2062.520455][ T3250] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2062.533416][ T3250] CPU: 1 PID: 3250 Comm: syz.2.8651 Not tainted 6.1.112-syzkaller-00019-g6cf2e7d96862 #0 [ 2062.542961][ T3250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 2062.552851][ T3250] Call Trace: [ 2062.555975][ T3250] [ 2062.558757][ T3250] dump_stack_lvl+0x151/0x1b7 [ 2062.563268][ T3250] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 2062.568566][ T3250] dump_stack+0x15/0x1e [ 2062.572553][ T3250] should_fail_ex+0x3d0/0x520 [ 2062.577068][ T3250] should_fail+0xb/0x10 [ 2062.581058][ T3250] should_fail_usercopy+0x1a/0x20 [ 2062.585924][ T3250] _copy_to_user+0x1e/0x90 [ 2062.590172][ T3250] simple_read_from_buffer+0xc7/0x150 [ 2062.595384][ T3250] proc_fail_nth_read+0x1a3/0x210 [ 2062.600240][ T3250] ? proc_fault_inject_write+0x390/0x390 [ 2062.605707][ T3250] ? fsnotify_perm+0x269/0x5b0 [ 2062.610313][ T3250] ? security_file_permission+0x86/0xb0 [ 2062.615688][ T3250] ? proc_fault_inject_write+0x390/0x390 [ 2062.621159][ T3250] vfs_read+0x26c/0xae0 [ 2062.625148][ T3250] ? __this_cpu_preempt_check+0x13/0x20 [ 2062.630539][ T3250] ? kernel_read+0x1f0/0x1f0 [ 2062.634960][ T3250] ? mutex_lock+0xb1/0x1e0 [ 2062.639213][ T3250] ? bit_wait_io_timeout+0x120/0x120 [ 2062.644334][ T3250] ? __fdget_pos+0x2e2/0x390 [ 2062.648766][ T3250] ? ksys_read+0x77/0x2c0 [ 2062.652926][ T3250] ksys_read+0x199/0x2c0 [ 2062.657006][ T3250] ? vfs_write+0xed0/0xed0 [ 2062.661257][ T3250] ? fpregs_restore_userregs+0x130/0x290 [ 2062.666728][ T3250] __x64_sys_read+0x7b/0x90 [ 2062.671154][ T3250] x64_sys_call+0x28/0x9a0 [ 2062.675401][ T3250] do_syscall_64+0x3b/0xb0 [ 2062.679661][ T3250] ? clear_bhb_loop+0x55/0xb0 [ 2062.684172][ T3250] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2062.689896][ T3250] RIP: 0033:0x7fb1de77d19c [ 2062.694151][ T3250] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 2062.713593][ T3250] RSP: 002b:00007fb1de5ff030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2062.721846][ T3250] RAX: ffffffffffffffda RBX: 00007fb1de936130 RCX: 00007fb1de77d19c [ 2062.729647][ T3250] RDX: 000000000000000f RSI: 00007fb1de5ff0a0 RDI: 000000000000000a [ 2062.737456][ T3250] RBP: 00007fb1de5ff090 R08: 0000000000000000 R09: 0000000000000000 [ 2062.745264][ T3250] R10: 0000000000000801 R11: 0000000000000246 R12: 0000000000000001 [ 2062.753076][ T3250] R13: 0000000000000000 R14: 00007fb1de936130 R15: 00007ffebb70b318 [ 2062.760892][ T3250] [ 2062.991257][T20313] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 2063.095701][ T3269] fuse: Invalid rootmode [ 2063.482098][T20313] usb 4-1: Using ep0 maxpacket: 16 [ 2063.839325][T20313] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2063.864248][T20313] usb 4-1: New USB device found, idVendor=056a, idProduct=00d0, bcdDevice= 0.00 [ 2063.883497][T20313] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2063.902323][T20313] usb 4-1: config 0 descriptor?? [ 2064.070533][ T3292] FAULT_INJECTION: forcing a failure. [ 2064.070533][ T3292] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2064.083451][ T3292] CPU: 0 PID: 3292 Comm: syz.7.8663 Not tainted 6.1.112-syzkaller-00019-g6cf2e7d96862 #0 [ 2064.093019][ T3292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 2064.102912][ T3292] Call Trace: [ 2064.106035][ T3292] [ 2064.108812][ T3292] dump_stack_lvl+0x151/0x1b7 [ 2064.113324][ T3292] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 2064.118620][ T3292] ? _kstrtol+0x150/0x150 [ 2064.122784][ T3292] ? avc_has_perm_noaudit+0x348/0x430 [ 2064.127992][ T3292] dump_stack+0x15/0x1e [ 2064.131987][ T3292] should_fail_ex+0x3d0/0x520 [ 2064.136503][ T3292] should_fail+0xb/0x10 [ 2064.140492][ T3292] should_fail_usercopy+0x1a/0x20 [ 2064.145352][ T3292] strncpy_from_user+0x24/0x2b0 [ 2064.150040][ T3292] bpf_prog_load+0x1fb/0x1bf0 [ 2064.154555][ T3292] ? map_freeze+0x3a0/0x3a0 [ 2064.158897][ T3292] ? selinux_bpf+0xcb/0x100 [ 2064.163230][ T3292] ? security_bpf+0x82/0xb0 [ 2064.167571][ T3292] __sys_bpf+0x52c/0x7f0 [ 2064.171648][ T3292] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 2064.176857][ T3292] ? __ia32_sys_read+0x90/0x90 [ 2064.181452][ T3292] ? debug_smp_processor_id+0x17/0x20 [ 2064.186663][ T3292] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 2064.192563][ T3292] __x64_sys_bpf+0x7c/0x90 [ 2064.196814][ T3292] x64_sys_call+0x87f/0x9a0 [ 2064.201155][ T3292] do_syscall_64+0x3b/0xb0 [ 2064.205408][ T3292] ? clear_bhb_loop+0x55/0xb0 [ 2064.209923][ T3292] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2064.215649][ T3292] RIP: 0033:0x7f550657e759 [ 2064.219917][ T3292] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2064.239344][ T3292] RSP: 002b:00007f55063bd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2064.247588][ T3292] RAX: ffffffffffffffda RBX: 00007f5506736130 RCX: 00007f550657e759 [ 2064.255398][ T3292] RDX: 0000000000000090 RSI: 0000000020000a40 RDI: 0000000000000005 [ 2064.263211][ T3292] RBP: 00007f55063bd090 R08: 0000000000000000 R09: 0000000000000000 [ 2064.271021][ T3292] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2064.278834][ T3292] R13: 0000000000000000 R14: 00007f5506736130 R15: 00007ffdcc8a5928 [ 2064.286650][ T3292] [ 2064.292323][ T3254] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2064.307610][ T3254] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2064.635408][T20313] wacom 0003:056A:00D0.018D: item fetching failed at offset 5/7 [ 2064.647336][T20313] wacom 0003:056A:00D0.018D: parse failed [ 2064.657117][T20313] wacom: probe of 0003:056A:00D0.018D failed with error -22 [ 2064.691490][ T6] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 2064.774944][ T3306] syz.7.8668[3306] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2064.775020][ T3306] syz.7.8668[3306] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2064.834711][ T1112] usb 4-1: USB disconnect, device number 104 [ 2065.171281][ T6] usb 3-1: Using ep0 maxpacket: 16 [ 2065.286860][ T3314] syz.6.8670[3314] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2065.286930][ T3314] syz.6.8670[3314] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2065.301295][ T6] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2065.323210][ T6] usb 3-1: New USB device found, idVendor=056a, idProduct=00d0, bcdDevice= 0.00 [ 2065.332693][ T6] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2065.344108][ T6] usb 3-1: config 0 descriptor?? [ 2065.482129][ T3319] fuse: Invalid rootmode [ 2065.592638][ T3297] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2065.601420][ T3297] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2066.011810][ T6] wacom 0003:056A:00D0.018E: item fetching failed at offset 5/7 [ 2066.019568][ T6] wacom 0003:056A:00D0.018E: parse failed [ 2066.025363][ T6] wacom: probe of 0003:056A:00D0.018E failed with error -22 [ 2066.064454][ T794] usb 3-1: USB disconnect, device number 113 [ 2066.180795][ T1112] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 2067.086104][ T28] audit: type=1400 audit(1732018408.197:4250): avc: denied { create } for pid=3344 comm="syz.6.8679" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=unix_stream_socket permissive=1 [ 2067.138738][ T28] audit: type=1400 audit(1732018408.227:4251): avc: denied { bind } for pid=3344 comm="syz.6.8679" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=unix_stream_socket permissive=1 [ 2067.401481][ T28] audit: type=1400 audit(1732018408.227:4252): avc: denied { listen } for pid=3344 comm="syz.6.8679" path=2F35382FE91F7189591E9233614B scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=unix_stream_socket permissive=1 [ 2067.442663][ T3355] syz.0.8683[3355] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2067.443622][ T3355] syz.0.8683[3355] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2067.461370][ T28] audit: type=1400 audit(1732018408.227:4253): avc: denied { connect } for pid=3344 comm="syz.6.8679" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=unix_stream_socket permissive=1 [ 2067.493133][ T28] audit: type=1400 audit(1732018408.227:4254): avc: denied { connectto } for pid=3344 comm="syz.6.8679" path=2F35382FE91F7189591E9233614B scontext=system_u:object_r:hugetlbfs_t tcontext=system_u:object_r:hugetlbfs_t tclass=unix_stream_socket permissive=1 [ 2067.636211][ T28] audit: type=1400 audit(1732018408.747:4255): avc: denied { setopt } for pid=3357 comm="syz.0.8684" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 2067.670047][ T1112] usb 4-1: Using ep0 maxpacket: 16 [ 2067.790012][ T1112] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2067.819930][ T1112] usb 4-1: New USB device found, idVendor=056a, idProduct=00d0, bcdDevice= 0.00 [ 2067.828797][ T1112] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2067.840146][ T1112] usb 4-1: config 0 descriptor?? [ 2068.083359][ T3321] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2068.100626][ T3321] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2068.279717][ T762] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 2068.609579][ T1112] wacom 0003:056A:00D0.018F: item fetching failed at offset 5/7 [ 2068.617617][ T1112] wacom 0003:056A:00D0.018F: parse failed [ 2068.623231][ T1112] wacom: probe of 0003:056A:00D0.018F failed with error -22 [ 2069.473065][ T1112] usb 4-1: USB disconnect, device number 105 [ 2069.519109][ T762] usb 3-1: Using ep0 maxpacket: 16 [ 2069.538342][ T28] audit: type=1400 audit(1732018410.648:4256): avc: denied { ioctl } for pid=3391 comm="syz.0.8692" path="/dev/binderfs/binder0" dev="binder" ino=13 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 2069.538350][ T3392] binder: 3391:3392 ioctl c0306201 0 returned -14 [ 2070.265890][ T3395] FAULT_INJECTION: forcing a failure. [ 2070.265890][ T3395] name failslab, interval 1, probability 0, space 0, times 0 [ 2070.278345][ T3395] CPU: 0 PID: 3395 Comm: syz.0.8692 Not tainted 6.1.112-syzkaller-00019-g6cf2e7d96862 #0 [ 2070.287943][ T3395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 2070.297837][ T3395] Call Trace: [ 2070.300958][ T3395] [ 2070.303736][ T3395] dump_stack_lvl+0x151/0x1b7 [ 2070.308250][ T3395] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 2070.313545][ T3395] dump_stack+0x15/0x1e [ 2070.317537][ T3395] should_fail_ex+0x3d0/0x520 [ 2070.322052][ T3395] ? vm_area_dup+0x65/0x290 [ 2070.326388][ T3395] __should_failslab+0xaf/0xf0 [ 2070.330997][ T3395] should_failslab+0x9/0x20 [ 2070.335326][ T3395] kmem_cache_alloc+0x3b/0x320 [ 2070.339930][ T3395] vm_area_dup+0x65/0x290 [ 2070.344093][ T3395] __split_vma+0x1c0/0x8e0 [ 2070.348349][ T3395] do_mas_align_munmap+0x3bf/0x1400 [ 2070.353380][ T3395] ? kernel_text_address+0xa9/0xe0 [ 2070.358328][ T3395] ? __kernel_text_address+0xd/0x40 [ 2070.363364][ T3395] ? avc_has_perm_noaudit+0x348/0x430 [ 2070.368570][ T3395] ? do_mas_munmap+0x2b0/0x2b0 [ 2070.373175][ T3395] ? mas_find+0x4e4/0x520 [ 2070.377335][ T3395] do_mas_munmap+0x23e/0x2b0 [ 2070.381763][ T3395] mmap_region+0x75c/0x23a0 [ 2070.386103][ T3395] ? file_mmap_ok+0x150/0x150 [ 2070.390619][ T3395] ? cap_mmap_addr+0x169/0x2e0 [ 2070.395217][ T3395] ? file_mmap_ok+0x104/0x150 [ 2070.399727][ T3395] do_mmap+0x853/0xe30 [ 2070.403635][ T3395] ? mlock_future_check+0x110/0x110 [ 2070.408668][ T3395] vm_mmap_pgoff+0x208/0x430 [ 2070.413094][ T3395] ? account_locked_vm+0x250/0x250 [ 2070.418038][ T3395] ? __fget_files+0x2cb/0x330 [ 2070.422555][ T3395] ksys_mmap_pgoff+0x15d/0x1e0 [ 2070.427153][ T3395] __x64_sys_mmap+0x103/0x120 [ 2070.431668][ T3395] x64_sys_call+0x67/0x9a0 [ 2070.435925][ T3395] do_syscall_64+0x3b/0xb0 [ 2070.440173][ T3395] ? clear_bhb_loop+0x55/0xb0 [ 2070.444684][ T3395] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2070.450412][ T3395] RIP: 0033:0x7f80fd57e759 [ 2070.454667][ T3395] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2070.474111][ T3395] RSP: 002b:00007f80fe417038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 2070.482358][ T3395] RAX: ffffffffffffffda RBX: 00007f80fd736130 RCX: 00007f80fd57e759 [ 2070.490165][ T3395] RDX: 0000000000000001 RSI: 0000000000001000 RDI: 0000000020ffc000 [ 2070.497979][ T3395] RBP: 00007f80fe417090 R08: 0000000000000004 R09: 0000000000000000 [ 2070.505785][ T3395] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000001 [ 2070.513597][ T3395] R13: 0000000000000000 R14: 00007f80fd736130 R15: 00007ffc62e5f948 [ 2070.521415][ T3395] [ 2070.524663][ T3394] binder: 3391:3394 ioctl 4018620d 0 returned -22 [ 2070.531519][ T762] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2070.542394][ T762] usb 3-1: New USB device found, idVendor=056a, idProduct=00d0, bcdDevice= 0.00 [ 2070.552441][ T762] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2070.563742][ T762] usb 3-1: config 0 descriptor?? [ 2070.651574][ T3402] syz.0.8694[3402] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2070.651629][ T3402] syz.0.8694[3402] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2070.922054][ T3365] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2070.957626][ T3365] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2071.065141][ T3414] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8696'. [ 2071.255559][ T3419] FAULT_INJECTION: forcing a failure. [ 2071.255559][ T3419] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2071.268600][ T3419] CPU: 1 PID: 3419 Comm: syz.0.8697 Not tainted 6.1.112-syzkaller-00019-g6cf2e7d96862 #0 [ 2071.278218][ T3419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 2071.288118][ T3419] Call Trace: [ 2071.291237][ T3419] [ 2071.294013][ T3419] dump_stack_lvl+0x151/0x1b7 [ 2071.298525][ T3419] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 2071.303820][ T3419] ? _parse_integer+0x2a/0x40 [ 2071.308334][ T3419] dump_stack+0x15/0x1e [ 2071.312329][ T3419] should_fail_ex+0x3d0/0x520 [ 2071.316844][ T3419] should_fail+0xb/0x10 [ 2071.320834][ T3419] should_fail_usercopy+0x1a/0x20 [ 2071.325693][ T3419] _copy_from_user+0x1e/0xc0 [ 2071.330133][ T3419] iovec_from_user+0xc7/0x320 [ 2071.331413][ T762] wacom 0003:056A:00D0.0190: item fetching failed at offset 5/7 [ 2071.334631][ T3419] ? kasan_set_track+0x4b/0x70 [ 2071.343388][ T762] wacom 0003:056A:00D0.0190: parse failed [ 2071.346695][ T3419] ? kasan_save_free_info+0x2b/0x40 [ 2071.346720][ T3419] __import_iovec+0x70/0x430 [ 2071.352349][ T762] wacom: probe of 0003:056A:00D0.0190 failed with error -22 [ 2071.357287][ T3419] import_iovec+0xe5/0x120 [ 2071.373083][ T3419] copy_msghdr_from_user+0x527/0x670 [ 2071.378203][ T3419] ? sendmsg_copy_msghdr+0x70/0x70 [ 2071.383148][ T3419] __sys_sendmsg+0x236/0x390 [ 2071.387580][ T3419] ? ____sys_sendmsg+0x9a0/0x9a0 [ 2071.392358][ T3419] ? __kasan_check_write+0x14/0x20 [ 2071.392379][ T3419] ? mutex_unlock+0xb2/0x260 [ 2071.401723][ T3419] ? __kasan_check_write+0x14/0x20 [ 2071.406670][ T3419] ? __ia32_sys_read+0x90/0x90 [ 2071.411267][ T3419] ? debug_smp_processor_id+0x17/0x20 [ 2071.416471][ T3419] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 2071.422376][ T3419] __x64_sys_sendmsg+0x7f/0x90 [ 2071.426976][ T3419] x64_sys_call+0x16a/0x9a0 [ 2071.431315][ T3419] do_syscall_64+0x3b/0xb0 [ 2071.435567][ T3419] ? clear_bhb_loop+0x55/0xb0 [ 2071.440091][ T3419] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2071.445809][ T3419] RIP: 0033:0x7f80fd57e759 [ 2071.450065][ T3419] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2071.469503][ T3419] RSP: 002b:00007f80fe438038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2071.477749][ T3419] RAX: ffffffffffffffda RBX: 00007f80fd736058 RCX: 00007f80fd57e759 [ 2071.485564][ T3419] RDX: 0000000000044004 RSI: 00000000200000c0 RDI: 0000000000000003 [ 2071.493372][ T3419] RBP: 00007f80fe438090 R08: 0000000000000000 R09: 0000000000000000 [ 2071.501183][ T3419] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2071.508997][ T3419] R13: 0000000000000000 R14: 00007f80fd736058 R15: 00007ffc62e5f948 [ 2071.516816][ T3419] [ 2071.537098][ T762] usb 3-1: USB disconnect, device number 114 [ 2072.101549][ T3439] syz.2.8705[3439] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2072.101638][ T3439] syz.2.8705[3439] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2072.157789][ T762] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 2072.446323][ T39] usb 7-1: new high-speed USB device number 42 using dummy_hcd [ 2072.697499][ T762] usb 1-1: Using ep0 maxpacket: 32 [ 2072.767451][ T39] usb 7-1: device descriptor read/64, error -71 [ 2072.857459][ T762] usb 1-1: unable to get BOS descriptor or descriptor too short [ 2072.947419][ T762] usb 1-1: config 128 has an invalid interface number: 127 but max is 3 [ 2072.955594][ T762] usb 1-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 2072.984514][ T762] usb 1-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 2073.003080][ T762] usb 1-1: config 128 has no interface number 0 [ 2073.020206][ T3450] syz.2.8708[3450] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2073.020279][ T3450] syz.2.8708[3450] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2073.044588][ T762] usb 1-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 2073.081917][ T3452] device pim6reg1 entered promiscuous mode [ 2073.089570][ T3452] FAULT_INJECTION: forcing a failure. [ 2073.089570][ T3452] name failslab, interval 1, probability 0, space 0, times 0 [ 2073.102521][ T3452] CPU: 1 PID: 3452 Comm: syz.2.8709 Not tainted 6.1.112-syzkaller-00019-g6cf2e7d96862 #0 [ 2073.104728][ T762] usb 1-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2073.112146][ T3452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 2073.112160][ T3452] Call Trace: [ 2073.112166][ T3452] [ 2073.112173][ T3452] dump_stack_lvl+0x151/0x1b7 [ 2073.112196][ T3452] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 2073.112214][ T3452] dump_stack+0x15/0x1e [ 2073.112227][ T3452] should_fail_ex+0x3d0/0x520 [ 2073.137250][ T762] usb 1-1: config 128 interface 127 has no altsetting 0 [ 2073.137839][ T3452] __should_failslab+0xaf/0xf0 [ 2073.167521][ T3452] should_failslab+0x9/0x20 [ 2073.171860][ T3452] kmem_cache_alloc_node+0x42/0x330 [ 2073.176892][ T3452] ? __alloc_skb+0xcc/0x2d0 [ 2073.181237][ T3452] __alloc_skb+0xcc/0x2d0 [ 2073.185400][ T3452] rtmsg_ifinfo_build_skb+0x7f/0x180 [ 2073.190531][ T3452] rtmsg_ifinfo+0x78/0x120 [ 2073.194774][ T3452] dev_close_many+0x2a6/0x530 [ 2073.199285][ T3452] ? __dev_open+0x4e0/0x4e0 [ 2073.203625][ T3452] ? __kasan_check_read+0x11/0x20 [ 2073.208486][ T3452] unregister_netdevice_many+0x4d1/0x1730 [ 2073.214038][ T3452] ? sysvec_reschedule_ipi+0x80/0x160 [ 2073.219247][ T3452] ? alloc_netdev_mqs+0xf90/0xf90 [ 2073.224106][ T3452] ? queue_delayed_work_on+0x142/0x180 [ 2073.229403][ T3452] ? __kasan_check_read+0x11/0x20 [ 2073.234260][ T3452] unregister_netdevice_queue+0x2e6/0x350 [ 2073.239817][ T3452] ? list_netdevice+0x710/0x710 [ 2073.244503][ T3452] ? linkwatch_fire_event+0x211/0x240 [ 2073.249711][ T3452] __tun_detach+0xd14/0x1510 [ 2073.254136][ T3452] ? bit_wait_io_timeout+0x120/0x120 [ 2073.259259][ T3452] tun_chr_close+0x92/0x140 [ 2073.263598][ T3452] ? tun_chr_open+0x530/0x530 [ 2073.268110][ T3452] __fput+0x1e5/0x870 [ 2073.271941][ T3452] ____fput+0x15/0x20 [ 2073.275747][ T3452] task_work_run+0x24d/0x2e0 [ 2073.280174][ T3452] ? task_work_cancel+0x2e0/0x2e0 [ 2073.285035][ T3452] ? filp_close+0x105/0x150 [ 2073.289376][ T3452] exit_to_user_mode_loop+0x94/0xa0 [ 2073.294408][ T3452] exit_to_user_mode_prepare+0x5a/0xa0 [ 2073.299705][ T3452] syscall_exit_to_user_mode+0x26/0x130 [ 2073.305082][ T3452] do_syscall_64+0x47/0xb0 [ 2073.309336][ T3452] ? clear_bhb_loop+0x55/0xb0 [ 2073.313851][ T3452] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2073.319578][ T3452] RIP: 0033:0x7fb1de77e759 [ 2073.323832][ T3452] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2073.343283][ T3452] RSP: 002b:00007fb1df4cb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 2073.351520][ T3452] RAX: 0000000000000000 RBX: 00007fb1de935f80 RCX: 00007fb1de77e759 [ 2073.359329][ T3452] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 2073.367138][ T3452] RBP: 00007fb1df4cb090 R08: 0000000000000000 R09: 0000000000000000 [ 2073.374949][ T3452] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2073.382768][ T3452] R13: 0000000000000000 R14: 00007fb1de935f80 R15: 00007ffebb70b318 [ 2073.390576][ T3452] [ 2073.398571][ T39] usb 7-1: device descriptor read/64, error -71 [ 2073.517417][ T762] usb 1-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 2073.526295][ T762] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2073.536972][ T762] usb 1-1: Product: syz [ 2073.542844][ T762] usb 1-1: Manufacturer: syz [ 2073.547501][ T762] usb 1-1: SerialNumber: syz [ 2074.540832][ T39] usb 7-1: new high-speed USB device number 43 using dummy_hcd [ 2074.836430][ T39] usb 7-1: device descriptor read/64, error -71 [ 2075.030871][ T762] usb 1-1: USB disconnect, device number 106 [ 2075.040644][ T2077] udevd[2077]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:128.127/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 2075.056604][ T1112] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 2075.306214][ T1112] usb 4-1: Using ep0 maxpacket: 16 [ 2075.489091][ T3482] binder: 3481:3482 ioctl c0306201 0 returned -14 [ 2075.496293][ T1112] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2076.227836][ T1112] usb 4-1: New USB device found, idVendor=056a, idProduct=00d0, bcdDevice= 0.00 [ 2076.236741][ T1112] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2076.245170][ T1112] usb 4-1: config 0 descriptor?? [ 2076.551394][ T3470] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2076.610776][ T3470] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2076.809203][ T762] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 2076.937819][ T1112] wacom 0003:056A:00D0.0191: item fetching failed at offset 5/7 [ 2076.949025][ T1112] wacom 0003:056A:00D0.0191: parse failed [ 2076.954612][ T1112] wacom: probe of 0003:056A:00D0.0191 failed with error -22 [ 2076.975388][ T794] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 2077.095337][ T762] usb 1-1: Using ep0 maxpacket: 16 [ 2077.136218][ T39] usb 4-1: USB disconnect, device number 106 [ 2077.215336][ T762] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2077.230463][ T762] usb 1-1: New USB device found, idVendor=056a, idProduct=00d0, bcdDevice= 0.00 [ 2077.247604][ T762] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2077.266206][ T762] usb 1-1: config 0 descriptor?? [ 2077.335353][ T794] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 2077.351244][ T794] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 2077.360660][ T794] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2077.425800][ T794] aiptek 3-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 2077.516517][ T3504] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2077.529783][ T3504] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2077.627286][ T3513] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2077.635897][ T3513] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2077.644714][ T794] usb 3-1: USB disconnect, device number 115 [ 2077.806396][ T762] wacom 0003:056A:00D0.0192: item fetching failed at offset 5/7 [ 2077.814023][ T762] wacom 0003:056A:00D0.0192: parse failed [ 2077.819624][ T762] wacom: probe of 0003:056A:00D0.0192 failed with error -22 [ 2077.944896][ T1112] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 2078.006842][ T794] usb 1-1: USB disconnect, device number 107 [ 2078.224728][ T1112] usb 4-1: Using ep0 maxpacket: 32 [ 2078.414703][ T1112] usb 4-1: unable to get BOS descriptor or descriptor too short [ 2078.514638][ T1112] usb 4-1: config 128 has an invalid interface number: 127 but max is 3 [ 2078.526971][ T1112] usb 4-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 2078.547211][ T1112] usb 4-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 2078.556713][ T1112] usb 4-1: config 128 has no interface number 0 [ 2078.562950][ T1112] usb 4-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 2078.574217][ T1112] usb 4-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2078.584420][ T1112] usb 4-1: config 128 interface 127 has no altsetting 0 [ 2078.944847][ T1112] usb 4-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 2078.953756][ T1112] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2078.961871][ T1112] usb 4-1: Product: syz [ 2078.966047][ T1112] usb 4-1: Manufacturer: syz [ 2078.970488][ T1112] usb 4-1: SerialNumber: syz [ 2079.174279][ T794] usb 8-1: new high-speed USB device number 95 using dummy_hcd [ 2079.214307][ T28] audit: type=1326 audit(1732018420.333:4257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3557 comm="syz.2.8738" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb1de77e759 code=0x0 [ 2079.420957][ T3564] fuse: Invalid rootmode [ 2079.484125][ T794] usb 8-1: Using ep0 maxpacket: 16 [ 2079.514727][ T1112] usb 4-1: USB disconnect, device number 107 [ 2079.526368][ T2077] udevd[2077]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:128.127/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 2079.604193][ T794] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2079.627056][ T794] usb 8-1: New USB device found, idVendor=056a, idProduct=00d0, bcdDevice= 0.00 [ 2079.643253][ T794] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2079.662031][ T794] usb 8-1: config 0 descriptor?? [ 2079.826257][ T3559] device syzkaller0 entered promiscuous mode [ 2079.917964][ T3553] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2079.926360][ T3553] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2080.093805][ T1112] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 2080.174894][ T794] wacom 0003:056A:00D0.0193: item fetching failed at offset 5/7 [ 2080.182535][ T794] wacom 0003:056A:00D0.0193: parse failed [ 2080.188210][ T794] wacom: probe of 0003:056A:00D0.0193 failed with error -22 [ 2080.433259][ T794] usb 8-1: USB disconnect, device number 95 [ 2080.787676][ T1112] usb 4-1: Using ep0 maxpacket: 16 [ 2080.903446][ T1112] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2080.914228][ T1112] usb 4-1: New USB device found, idVendor=056a, idProduct=00d0, bcdDevice= 0.00 [ 2080.923010][ T1112] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2080.941988][ T1112] usb 4-1: config 0 descriptor?? [ 2081.193704][ T3596] xt_policy: too many policy elements [ 2081.194847][ T3576] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2081.207871][ T3576] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2081.253432][ T6] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 2081.954755][ T1112] wacom 0003:056A:00D0.0194: item fetching failed at offset 5/7 [ 2081.962449][ T1112] wacom 0003:056A:00D0.0194: parse failed [ 2081.968450][ T1112] wacom: probe of 0003:056A:00D0.0194 failed with error -22 [ 2082.017607][ T3602] fuse: Bad value for 'user_id' [ 2082.132871][ T3607] fuse: Invalid rootmode [ 2082.183584][ T1112] usb 4-1: USB disconnect, device number 108 [ 2082.282771][ T6] usb 3-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 2082.299725][ T6] usb 3-1: config 7 has 1 interface, different from the descriptor's value: 2 [ 2082.432701][ T6] usb 3-1: New USB device found, idVendor=19d2, idProduct=1275, bcdDevice= 0.84 [ 2082.441558][ T6] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 2082.449606][ T6] usb 3-1: Product: syz [ 2082.453749][ T6] usb 3-1: SerialNumber: syz [ 2082.493011][ T6] usb 3-1: bad CDC descriptors [ 2082.542573][T20313] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 2082.745329][ T28] audit: type=1400 audit(1732018423.865:4258): avc: denied { mount } for pid=3589 comm="syz.2.8746" name="/" dev="configfs" ino=12767 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 2082.779892][ T28] audit: type=1400 audit(1732018423.885:4259): avc: denied { search } for pid=3589 comm="syz.2.8746" name="/" dev="configfs" ino=12767 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 2082.802064][T20313] usb 1-1: Using ep0 maxpacket: 32 [ 2082.831905][ T6] usb 3-1: USB disconnect, device number 116 [ 2082.858966][ T28] audit: type=1400 audit(1732018423.885:4260): avc: denied { read } for pid=3589 comm="syz.2.8746" name="/" dev="configfs" ino=12767 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 2082.885809][ T28] audit: type=1400 audit(1732018423.885:4261): avc: denied { open } for pid=3589 comm="syz.2.8746" path="/455/file0" dev="configfs" ino=12767 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 2083.002386][T20313] usb 1-1: unable to get BOS descriptor or descriptor too short [ 2083.082351][T20313] usb 1-1: config 128 has an invalid interface number: 127 but max is 3 [ 2083.090534][T20313] usb 1-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 2083.092330][ T794] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 2083.122280][T20313] usb 1-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 2083.131149][T20313] usb 1-1: config 128 has no interface number 0 [ 2083.142317][T20313] usb 1-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 2083.172268][T20313] usb 1-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2083.182180][T20313] usb 1-1: config 128 interface 127 has no altsetting 0 [ 2083.421627][ T794] usb 4-1: Using ep0 maxpacket: 16 [ 2083.521047][T20313] usb 1-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 2083.529976][T20313] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2083.533698][ T28] audit: type=1400 audit(1732018424.655:4262): avc: denied { unmount } for pid=27836 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 2083.538026][T20313] usb 1-1: Product: syz [ 2083.558156][ T794] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 87, changing to 10 [ 2083.565937][T20313] usb 1-1: Manufacturer: syz [ 2083.575133][ T794] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 42986, setting to 1024 [ 2083.577375][T20313] usb 1-1: SerialNumber: syz [ 2083.588566][ T794] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2083.605274][ T794] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 2083.614181][ T794] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2083.622519][ T794] usb 4-1: config 0 descriptor?? [ 2083.642072][ T3622] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 2084.103198][ T794] microsoft 0003:045E:07DA.0195: report is too long [ 2084.109695][ T794] microsoft 0003:045E:07DA.0195: item 0 0 0 11 parsing failed [ 2084.117521][ T794] microsoft 0003:045E:07DA.0195: parse failed [ 2084.121067][T20313] usb 1-1: USB disconnect, device number 108 [ 2084.123688][ T794] microsoft: probe of 0003:045E:07DA.0195 failed with error -22 [ 2084.132009][ T2077] udevd[2077]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:128.127/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 2084.458319][ T6] usb 4-1: USB disconnect, device number 109 [ 2084.704007][ T3653] bridge0: port 1(bridge_slave_0) entered blocking state [ 2084.710886][ T3653] bridge0: port 1(bridge_slave_0) entered disabled state [ 2084.718170][ T3653] device bridge_slave_0 entered promiscuous mode [ 2084.725180][ T3653] bridge0: port 2(bridge_slave_1) entered blocking state [ 2084.732092][ T3653] bridge0: port 2(bridge_slave_1) entered disabled state [ 2084.739145][ T3653] device bridge_slave_1 entered promiscuous mode [ 2084.779672][ T3653] bridge0: port 2(bridge_slave_1) entered blocking state [ 2084.786528][ T3653] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2084.793630][ T3653] bridge0: port 1(bridge_slave_0) entered blocking state [ 2084.800415][ T3653] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2084.822812][ T432] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2084.830201][ T432] bridge0: port 1(bridge_slave_0) entered disabled state [ 2084.837515][ T432] bridge0: port 2(bridge_slave_1) entered disabled state [ 2084.846605][ T432] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2084.854690][ T432] bridge0: port 1(bridge_slave_0) entered blocking state [ 2084.861541][ T432] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2084.873136][ T432] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2084.881105][ T432] bridge0: port 2(bridge_slave_1) entered blocking state [ 2084.887967][ T432] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2084.902111][ T794] usb 7-1: new high-speed USB device number 44 using dummy_hcd [ 2084.920697][ T3653] device veth0_vlan entered promiscuous mode [ 2084.933701][ T3653] device veth1_macvtap entered promiscuous mode [ 2084.940451][ T432] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2084.948475][ T432] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2084.956962][ T432] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2084.965386][ T432] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2084.973485][ T432] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2084.981830][ T432] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2084.990066][ T432] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2084.998005][ T432] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2085.006015][ T432] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2085.014209][ T432] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2085.022658][ T432] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2085.030313][ T432] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2085.037666][ T432] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2085.053198][ T432] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2085.061506][ T432] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2085.071129][ T432] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2085.079330][ T432] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2085.101729][ T3664] FAULT_INJECTION: forcing a failure. [ 2085.101729][ T3664] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2085.114753][ T3664] CPU: 1 PID: 3664 Comm: syz.3.8767 Not tainted 6.1.112-syzkaller-00019-g6cf2e7d96862 #0 [ 2085.124388][ T3664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 2085.134281][ T3664] Call Trace: [ 2085.137401][ T3664] [ 2085.140176][ T3664] dump_stack_lvl+0x151/0x1b7 [ 2085.144690][ T3664] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 2085.149985][ T3664] ? dump_stack+0x9/0x1e [ 2085.154065][ T3664] dump_stack+0x15/0x1e [ 2085.158060][ T3664] should_fail_ex+0x3d0/0x520 [ 2085.162574][ T3664] should_fail+0xb/0x10 [ 2085.166567][ T3664] should_fail_usercopy+0x1a/0x20 [ 2085.171422][ T3664] _copy_from_user+0x1e/0xc0 [ 2085.175851][ T3664] ____sys_sendmsg+0x2f9/0x9a0 [ 2085.180450][ T3664] ? __sys_sendmsg_sock+0x40/0x40 [ 2085.185314][ T3664] __sys_sendmmsg+0x3b9/0x6f0 [ 2085.189824][ T3664] ? kasan_set_track+0x4b/0x70 [ 2085.194423][ T3664] ? __ia32_sys_sendmsg+0x90/0x90 [ 2085.199282][ T3664] ? __kasan_check_write+0x14/0x20 [ 2085.204237][ T3664] ? __kasan_check_write+0x14/0x20 [ 2085.209177][ T3664] ? proc_fail_nth_write+0x20b/0x290 [ 2085.214297][ T3664] ? selinux_file_permission+0x2bb/0x560 [ 2085.219769][ T3664] ? proc_fail_nth_read+0x210/0x210 [ 2085.224797][ T3664] ? fsnotify_perm+0x6a/0x5b0 [ 2085.229314][ T3664] ? vfs_write+0x952/0xed0 [ 2085.233565][ T3664] ? __kasan_slab_free+0x11/0x20 [ 2085.238340][ T3664] ? __kasan_check_write+0x14/0x20 [ 2085.243286][ T3664] ? mutex_unlock+0xb2/0x260 [ 2085.247714][ T3664] ? __ia32_sys_read+0x90/0x90 [ 2085.252308][ T3664] ? debug_smp_processor_id+0x17/0x20 [ 2085.257520][ T3664] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 2085.263423][ T3664] __x64_sys_sendmmsg+0xa0/0xb0 [ 2085.268111][ T3664] x64_sys_call+0x81d/0x9a0 [ 2085.272447][ T3664] do_syscall_64+0x3b/0xb0 [ 2085.276700][ T3664] ? clear_bhb_loop+0x55/0xb0 [ 2085.281213][ T3664] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2085.286941][ T3664] RIP: 0033:0x7fd0f9b7e759 [ 2085.291197][ T3664] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2085.310639][ T3664] RSP: 002b:00007fd0fa99a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2085.318882][ T3664] RAX: ffffffffffffffda RBX: 00007fd0f9d36058 RCX: 00007fd0f9b7e759 [ 2085.326693][ T3664] RDX: 0000000000000001 RSI: 0000000020004080 RDI: 0000000000000007 [ 2085.334504][ T3664] RBP: 00007fd0fa99a090 R08: 0000000000000000 R09: 0000000000000000 [ 2085.342315][ T3664] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2085.350129][ T3664] R13: 0000000000000000 R14: 00007fd0f9d36058 R15: 00007ffd4065a8b8 [ 2085.357943][ T3664] [ 2085.391145][ T794] usb 7-1: Using ep0 maxpacket: 16 [ 2085.515310][ T794] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2085.540864][ T794] usb 7-1: New USB device found, idVendor=056a, idProduct=00d0, bcdDevice= 0.00 [ 2085.638224][ T794] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2085.717332][ T2844] device bridge_slave_1 left promiscuous mode [ 2085.724323][ T2844] bridge0: port 2(bridge_slave_1) entered disabled state [ 2085.737792][ T2844] device bridge_slave_0 left promiscuous mode [ 2085.745082][ T2844] bridge0: port 1(bridge_slave_0) entered disabled state [ 2085.761046][ T2844] device veth1_macvtap left promiscuous mode [ 2085.767704][ T2844] device veth0_vlan left promiscuous mode [ 2085.831328][ T794] usb 7-1: config 0 descriptor?? [ 2086.106708][ T3652] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2087.048061][ T3652] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2087.122684][ T3679] binder: 3678:3679 ioctl c0306201 0 returned -14 [ 2087.511711][ T794] wacom 0003:056A:00D0.0196: item fetching failed at offset 5/7 [ 2087.513477][ T3694] syz.7.8774[3694] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2087.519338][ T794] wacom 0003:056A:00D0.0196: parse failed [ 2087.519370][ T3694] syz.7.8774[3694] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2087.551343][ T794] wacom: probe of 0003:056A:00D0.0196 failed with error -22 [ 2087.583196][ T762] usb 7-1: USB disconnect, device number 44 [ 2088.279722][ T330] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 2088.289749][ T6] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 2088.369693][ T1112] usb 8-1: new high-speed USB device number 96 using dummy_hcd [ 2088.465956][ T3708] xt_policy: too many policy elements [ 2088.529601][ T6] usb 4-1: Using ep0 maxpacket: 32 [ 2088.569720][ T330] usb 3-1: device descriptor read/64, error -71 [ 2088.859406][ T1112] usb 8-1: Using ep0 maxpacket: 32 [ 2088.929471][ T6] usb 4-1: unable to get BOS descriptor or descriptor too short [ 2088.959387][ T330] usb 3-1: device descriptor read/64, error -71 [ 2088.989412][ T1112] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2089.000157][ T1112] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2089.009710][ T6] usb 4-1: config 128 has an invalid interface number: 127 but max is 3 [ 2089.017822][ T6] usb 4-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 2089.027913][ T1112] usb 8-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 2089.036734][ T1112] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2089.044727][ T6] usb 4-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 2089.053806][ T6] usb 4-1: config 128 has no interface number 0 [ 2089.060109][ T1112] usb 8-1: config 0 descriptor?? [ 2089.064910][ T6] usb 4-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 2089.075917][ T6] usb 4-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2089.085833][ T6] usb 4-1: config 128 interface 127 has no altsetting 0 [ 2089.099754][ T1112] hub 8-1:0.0: USB hub found [ 2089.229238][ T330] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 2089.269247][ T6] usb 4-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 2089.278190][ T6] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2089.286107][ T6] usb 4-1: Product: syz [ 2089.290279][ T6] usb 4-1: Manufacturer: syz [ 2089.294724][ T6] usb 4-1: SerialNumber: syz [ 2089.578618][ T330] usb 3-1: device descriptor read/64, error -71 [ 2089.595960][ T3697] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8775'. [ 2089.639073][ T1112] hub 8-1:0.0: 4 ports detected [ 2089.845855][ T3697] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2089.854276][ T3697] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2089.890719][ T6] usb 4-1: USB disconnect, device number 110 [ 2089.897554][ T2077] udevd[2077]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:128.127/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 2089.939046][ T762] usb 7-1: new high-speed USB device number 45 using dummy_hcd [ 2089.968876][ T330] usb 3-1: device descriptor read/64, error -71 [ 2090.088897][ T330] usb usb3-port1: attempt power cycle [ 2090.194222][ T762] usb 7-1: Using ep0 maxpacket: 16 [ 2090.328762][ T762] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2090.348706][ T762] usb 7-1: New USB device found, idVendor=056a, idProduct=00d0, bcdDevice= 0.00 [ 2090.358415][ T3735] fuse: Invalid rootmode [ 2090.362767][ T762] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2090.391357][ T762] usb 7-1: config 0 descriptor?? [ 2090.578617][ T1112] hub 8-1:0.0: hub_hub_status failed (err = -71) [ 2090.587033][ T1112] hub 8-1:0.0: config failed, can't get hub status (err -71) [ 2090.651349][ T3724] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2090.675797][ T3724] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2090.728606][ T1112] usbhid 8-1:0.0: can't add hid device: -71 [ 2090.734796][ T1112] usbhid: probe of 8-1:0.0 failed with error -71 [ 2090.804308][ T1112] usb 8-1: USB disconnect, device number 96 [ 2090.889238][ T3740] bridge0: port 1(bridge_slave_0) entered blocking state [ 2090.896507][ T3740] bridge0: port 1(bridge_slave_0) entered disabled state [ 2090.904604][ T3740] device bridge_slave_0 entered promiscuous mode [ 2090.924962][ T3740] bridge0: port 2(bridge_slave_1) entered blocking state [ 2090.944815][ T3740] bridge0: port 2(bridge_slave_1) entered disabled state [ 2090.979128][ T3740] device bridge_slave_1 entered promiscuous mode [ 2090.999722][ T762] wacom 0003:056A:00D0.0197: item fetching failed at offset 5/7 [ 2091.007358][ T762] wacom 0003:056A:00D0.0197: parse failed [ 2091.032009][ T762] wacom: probe of 0003:056A:00D0.0197 failed with error -22 [ 2091.142118][ T3740] bridge0: port 2(bridge_slave_1) entered blocking state [ 2091.149021][ T3740] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2091.156111][ T3740] bridge0: port 1(bridge_slave_0) entered blocking state [ 2091.162909][ T3740] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2091.199319][ T2844] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2091.224106][ T1112] usb 7-1: USB disconnect, device number 45 [ 2091.227744][ T2844] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2091.243774][ T2844] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2091.271431][ T2844] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2091.298971][ T1762] device bridge_slave_1 left promiscuous mode [ 2091.308266][ T1762] bridge0: port 2(bridge_slave_1) entered disabled state [ 2091.324509][ T1762] device bridge_slave_0 left promiscuous mode [ 2091.333492][ T1762] bridge0: port 1(bridge_slave_0) entered disabled state [ 2091.367002][ T1762] device veth1_macvtap left promiscuous mode [ 2091.378327][ T1762] device veth0_vlan left promiscuous mode [ 2091.643063][ T2844] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2091.684596][ T2844] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2091.695117][ T2844] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2091.728020][ T2844] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2091.735919][ T2844] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2091.744339][ T2844] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2091.751887][ T2844] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2091.760249][ T3740] device veth0_vlan entered promiscuous mode [ 2091.788272][ T2844] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2091.796450][ T2844] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2091.806507][ T3740] device veth1_macvtap entered promiscuous mode [ 2091.830845][ T2844] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2091.840569][ T2844] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2091.855086][ T2844] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2091.884943][ T2844] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2091.911902][ T2844] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2093.996936][ T414] usb 1-1: new high-speed USB device number 109 using dummy_hcd [ 2094.316722][ T414] usb 1-1: device descriptor read/64, error -71 [ 2094.342932][ T3805] xt_policy: too many policy elements [ 2094.764773][ T3815] syz.6.8805[3815] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2094.764848][ T3815] syz.6.8805[3815] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2094.866795][ T414] usb 1-1: device descriptor read/64, error -71 [ 2095.146303][ T414] usb 1-1: new high-speed USB device number 110 using dummy_hcd [ 2095.243060][ T28] audit: type=1400 audit(1732018436.371:4263): avc: denied { setopt } for pid=3832 comm="syz.3.8812" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 2095.416172][ T414] usb 1-1: device descriptor read/64, error -71 [ 2096.126515][ T3845] FAULT_INJECTION: forcing a failure. [ 2096.126515][ T3845] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2096.145823][ T3845] CPU: 0 PID: 3845 Comm: syz.6.8814 Not tainted 6.1.112-syzkaller-00019-g6cf2e7d96862 #0 [ 2096.155458][ T3845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 2096.165358][ T3845] Call Trace: [ 2096.168480][ T3845] [ 2096.171258][ T3845] dump_stack_lvl+0x151/0x1b7 [ 2096.175770][ T3845] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 2096.181062][ T3845] ? random_recv_done+0x1d0/0x1d0 [ 2096.185926][ T3845] dump_stack+0x15/0x1e [ 2096.189915][ T3845] should_fail_ex+0x3d0/0x520 [ 2096.194431][ T3845] should_fail+0xb/0x10 [ 2096.198425][ T3845] should_fail_usercopy+0x1a/0x20 [ 2096.203287][ T3845] _copy_to_user+0x1e/0x90 [ 2096.207537][ T3845] rng_dev_read+0x445/0x830 [ 2096.211878][ T3845] ? hwrng_yield+0x30/0x30 [ 2096.216133][ T3845] ? security_file_permission+0x86/0xb0 [ 2096.221508][ T3845] do_iter_read+0x500/0xc80 [ 2096.225849][ T3845] ? vfs_iter_read+0xa0/0xa0 [ 2096.230270][ T3845] ? import_iovec+0xe5/0x120 [ 2096.234697][ T3845] do_preadv+0x20e/0x350 [ 2096.238776][ T3845] ? vfs_writev+0x590/0x590 [ 2096.243117][ T3845] ? fput+0x15b/0x1b0 [ 2096.246934][ T3845] ? ksys_write+0x260/0x2c0 [ 2096.251279][ T3845] ? debug_smp_processor_id+0x17/0x20 [ 2096.256481][ T3845] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 2096.262384][ T3845] __x64_sys_preadv+0x9e/0xb0 [ 2096.266896][ T3845] x64_sys_call+0x7c9/0x9a0 [ 2096.271236][ T3845] do_syscall_64+0x3b/0xb0 [ 2096.275489][ T3845] ? clear_bhb_loop+0x55/0xb0 [ 2096.280000][ T3845] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2096.285732][ T3845] RIP: 0033:0x7f7d9377e759 [ 2096.289984][ T3845] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2096.309424][ T3845] RSP: 002b:00007f7d9454d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 2096.317672][ T3845] RAX: ffffffffffffffda RBX: 00007f7d93935f80 RCX: 00007f7d9377e759 [ 2096.325480][ T3845] RDX: 0000000000000001 RSI: 0000000020000240 RDI: 0000000000000003 [ 2096.333293][ T3845] RBP: 00007f7d9454d090 R08: 0000000000000000 R09: 0000000000000000 [ 2096.341103][ T3845] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2096.348914][ T3845] R13: 0000000000000000 R14: 00007f7d93935f80 R15: 00007ffe6cc2db48 [ 2096.356729][ T3845] [ 2096.895545][T26548] usb 7-1: new high-speed USB device number 46 using dummy_hcd [ 2097.175255][T26548] usb 7-1: Using ep0 maxpacket: 32 [ 2097.295258][T26548] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2097.305503][T26548] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 2097.314361][T26548] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2097.485287][T26548] usb 7-1: New USB device found, idVendor=0582, idProduct=0016, bcdDevice=8e.57 [ 2097.494162][T26548] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2097.502015][T26548] usb 7-1: Product: syz [ 2097.505996][T26548] usb 7-1: Manufacturer: syz [ 2097.510383][T26548] usb 7-1: SerialNumber: syz [ 2097.515469][T26548] usb 7-1: config 0 descriptor?? [ 2097.656936][T26548] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 2098.364650][ T6064] usb 8-1: new high-speed USB device number 97 using dummy_hcd [ 2098.508673][ T3894] FAULT_INJECTION: forcing a failure. [ 2098.508673][ T3894] name failslab, interval 1, probability 0, space 0, times 0 [ 2098.521393][ T3894] CPU: 0 PID: 3894 Comm: syz.3.8827 Not tainted 6.1.112-syzkaller-00019-g6cf2e7d96862 #0 [ 2098.531010][ T3894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 2098.540909][ T3894] Call Trace: [ 2098.544029][ T3894] [ 2098.546806][ T3894] dump_stack_lvl+0x151/0x1b7 [ 2098.551318][ T3894] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 2098.556611][ T3894] dump_stack+0x15/0x1e [ 2098.560601][ T3894] should_fail_ex+0x3d0/0x520 [ 2098.565117][ T3894] ? vm_area_dup+0x27/0x290 [ 2098.569456][ T3894] __should_failslab+0xaf/0xf0 [ 2098.574056][ T3894] should_failslab+0x9/0x20 [ 2098.578393][ T3894] kmem_cache_alloc+0x3b/0x320 [ 2098.582994][ T3894] vm_area_dup+0x27/0x290 [ 2098.587161][ T3894] ? __split_vma+0x1aa/0x8e0 [ 2098.591586][ T3894] __split_vma+0x1c0/0x8e0 [ 2098.595842][ T3894] do_mas_align_munmap+0x3bf/0x1400 [ 2098.600874][ T3894] ? kernel_text_address+0xa9/0xe0 [ 2098.605819][ T3894] ? __kernel_text_address+0xd/0x40 [ 2098.610854][ T3894] ? avc_has_perm_noaudit+0x348/0x430 [ 2098.616064][ T3894] ? do_mas_munmap+0x2b0/0x2b0 [ 2098.620666][ T3894] ? mas_find+0x4e4/0x520 [ 2098.624828][ T3894] do_mas_munmap+0x23e/0x2b0 [ 2098.629257][ T3894] mmap_region+0x75c/0x23a0 [ 2098.633597][ T3894] ? file_mmap_ok+0x150/0x150 [ 2098.638277][ T3894] ? cap_mmap_addr+0x169/0x2e0 [ 2098.642874][ T3894] ? __kasan_check_read+0x11/0x20 [ 2098.647729][ T3894] ? shmem_get_unmapped_area+0x2e3/0x710 [ 2098.653195][ T3894] ? arch_get_unmapped_area+0x780/0x780 [ 2098.658578][ T3894] ? file_mmap_ok+0x104/0x150 [ 2098.663092][ T3894] do_mmap+0x853/0xe30 [ 2098.666996][ T3894] ? mlock_future_check+0x110/0x110 [ 2098.672034][ T3894] vm_mmap_pgoff+0x208/0x430 [ 2098.676456][ T3894] ? account_locked_vm+0x250/0x250 [ 2098.681401][ T3894] ? __fget_files+0x2cb/0x330 [ 2098.685917][ T3894] ksys_mmap_pgoff+0x15d/0x1e0 [ 2098.690517][ T3894] __x64_sys_mmap+0x103/0x120 [ 2098.695030][ T3894] x64_sys_call+0x67/0x9a0 [ 2098.699286][ T3894] do_syscall_64+0x3b/0xb0 [ 2098.703543][ T3894] ? clear_bhb_loop+0x55/0xb0 [ 2098.708054][ T3894] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2098.713778][ T3894] RIP: 0033:0x7fd0f9b7e759 [ 2098.718030][ T3894] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2098.737555][ T3894] RSP: 002b:00007fd0fa9bb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 2098.745801][ T3894] RAX: ffffffffffffffda RBX: 00007fd0f9d35f80 RCX: 00007fd0f9b7e759 [ 2098.753613][ T3894] RDX: 0000000002000002 RSI: 000000000000a000 RDI: 0000000020001000 [ 2098.761425][ T3894] RBP: 00007fd0fa9bb090 R08: 0000000000000003 R09: 0000000000000000 [ 2098.769234][ T3894] R10: 0000000000004052 R11: 0000000000000246 R12: 0000000000000001 [ 2098.777046][ T3894] R13: 0000000000000000 R14: 00007fd0f9d35f80 R15: 00007ffd4065a8b8 [ 2098.784862][ T3894] [ 2098.854517][ T6064] usb 8-1: device descriptor read/64, error -71 [ 2099.461982][ T6] usb 7-1: USB disconnect, device number 46 [ 2099.524422][ T6064] usb 8-1: device descriptor read/64, error -71 [ 2099.560019][ T28] audit: type=1400 audit(1732018440.693:4264): avc: denied { set_context_mgr } for pid=3915 comm="syz.6.8833" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 2099.580432][ T3916] bridge0: port 2(bridge_slave_1) entered disabled state [ 2099.590779][ T3916] device wireguard0 entered promiscuous mode [ 2099.804235][ T6064] usb 8-1: new high-speed USB device number 98 using dummy_hcd [ 2100.133793][ T6] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 2100.243748][ T6064] usb 8-1: device descriptor read/64, error -71 [ 2100.563625][ T6] usb 4-1: Using ep0 maxpacket: 16 [ 2100.586227][ T3938] 9pnet_fd: Insufficient options for proto=fd [ 2100.956912][ T6] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2100.967767][ T6] usb 4-1: New USB device found, idVendor=056a, idProduct=00d0, bcdDevice= 0.00 [ 2100.976988][ T6] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2100.988372][ T6] usb 4-1: config 0 descriptor?? [ 2101.235508][ T3923] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2101.243914][ T3923] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2101.479126][ T3957] FAULT_INJECTION: forcing a failure. [ 2101.479126][ T3957] name failslab, interval 1, probability 0, space 0, times 0 [ 2101.491680][ T3957] CPU: 0 PID: 3957 Comm: syz.6.8846 Not tainted 6.1.112-syzkaller-00019-g6cf2e7d96862 #0 [ 2101.501287][ T3957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 2101.511180][ T3957] Call Trace: [ 2101.514303][ T3957] [ 2101.517081][ T3957] dump_stack_lvl+0x151/0x1b7 [ 2101.521601][ T3957] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 2101.526977][ T3957] ? __kasan_check_write+0x14/0x20 [ 2101.531921][ T3957] ? copy_pid_ns+0xe8/0x8d0 [ 2101.536262][ T3957] dump_stack+0x15/0x1e [ 2101.540253][ T3957] should_fail_ex+0x3d0/0x520 [ 2101.544767][ T3957] ? prepare_creds+0x2f/0x6a0 [ 2101.549277][ T3957] __should_failslab+0xaf/0xf0 [ 2101.553881][ T3957] should_failslab+0x9/0x20 [ 2101.558219][ T3957] kmem_cache_alloc+0x3b/0x320 [ 2101.562821][ T3957] ? create_new_namespaces+0x608/0x670 [ 2101.568113][ T3957] prepare_creds+0x2f/0x6a0 [ 2101.572453][ T3957] __se_sys_setns+0x397/0x1540 [ 2101.577052][ T3957] ? __x64_sys_setns+0x70/0x70 [ 2101.581653][ T3957] ? debug_smp_processor_id+0x17/0x20 [ 2101.586860][ T3957] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 2101.592761][ T3957] __x64_sys_setns+0x5b/0x70 [ 2101.597188][ T3957] x64_sys_call+0x824/0x9a0 [ 2101.601526][ T3957] do_syscall_64+0x3b/0xb0 [ 2101.605779][ T3957] ? clear_bhb_loop+0x55/0xb0 [ 2101.610293][ T3957] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2101.616026][ T3957] RIP: 0033:0x7f7d9377e759 [ 2101.620273][ T3957] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2101.639718][ T3957] RSP: 002b:00007f7d9454d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000134 [ 2101.647963][ T3957] RAX: ffffffffffffffda RBX: 00007f7d93935f80 RCX: 00007f7d9377e759 [ 2101.655775][ T3957] RDX: 0000000000000000 RSI: 0000000010000000 RDI: 0000000000000003 [ 2101.663586][ T3957] RBP: 00007f7d9454d090 R08: 0000000000000000 R09: 0000000000000000 [ 2101.671394][ T3957] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2101.679206][ T3957] R13: 0000000000000000 R14: 00007f7d93935f80 R15: 00007ffe6cc2db48 [ 2101.687020][ T3957] [ 2101.695434][ T6] wacom 0003:056A:00D0.0198: item fetching failed at offset 5/7 [ 2101.704392][ T6] wacom 0003:056A:00D0.0198: parse failed [ 2101.706887][ T3960] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8847'. [ 2101.709946][ T6] wacom: probe of 0003:056A:00D0.0198 failed with error -22 [ 2101.730914][ T3960] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8847'. [ 2101.796110][ T3961] netlink: 24 bytes leftover after parsing attributes in process `syz.7.8844'. [ 2101.895948][ T6064] usb 4-1: USB disconnect, device number 111 [ 2102.720483][ T3988] xt_policy: too many policy elements [ 2102.842472][ T1112] usb 7-1: new high-speed USB device number 47 using dummy_hcd [ 2103.136655][ T3997] xt_policy: too many policy elements [ 2103.165923][ T4001] xt_policy: too many policy elements [ 2103.760992][ T4007] xt_policy: too many policy elements [ 2103.901903][ T1112] usb 7-1: Using ep0 maxpacket: 16 [ 2105.131355][ T1112] usb 7-1: unable to read config index 0 descriptor/all [ 2105.138150][ T1112] usb 7-1: can't read configurations, error -71 [ 2105.231510][ T4035] fuse: Invalid rootmode [ 2106.606143][ T4051] 9pnet_fd: Insufficient options for proto=fd [ 2106.624718][ T28] audit: type=1400 audit(1732018447.757:4265): avc: denied { setopt } for pid=4027 comm="syz.0.8870" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 2106.765392][ T4056] xt_policy: too many policy elements [ 2107.511034][ T4071] FAULT_INJECTION: forcing a failure. [ 2107.511034][ T4071] name failslab, interval 1, probability 0, space 0, times 0 [ 2107.555060][ T4074] FAULT_INJECTION: forcing a failure. [ 2107.555060][ T4074] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2107.564785][ T28] audit: type=1400 audit(1732018448.687:4266): avc: denied { mount } for pid=4073 comm="syz.2.8881" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 2107.568229][ T4074] CPU: 0 PID: 4074 Comm: syz.2.8881 Not tainted 6.1.112-syzkaller-00019-g6cf2e7d96862 #0 [ 2107.599464][ T4074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 2107.609348][ T4074] Call Trace: [ 2107.612468][ T4074] [ 2107.615253][ T4074] dump_stack_lvl+0x151/0x1b7 [ 2107.619760][ T4074] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 2107.625058][ T4074] dump_stack+0x15/0x1e [ 2107.629050][ T4074] should_fail_ex+0x3d0/0x520 [ 2107.633562][ T4074] should_fail+0xb/0x10 [ 2107.637551][ T4074] should_fail_usercopy+0x1a/0x20 [ 2107.642414][ T4074] strncpy_from_user+0x24/0x2b0 [ 2107.647098][ T4074] ? getname_flags+0xba/0x520 [ 2107.651616][ T4074] getname_flags+0xf2/0x520 [ 2107.655953][ T4074] __x64_sys_mkdir+0x5f/0x80 [ 2107.660385][ T4074] x64_sys_call+0x26d/0x9a0 [ 2107.664719][ T4074] do_syscall_64+0x3b/0xb0 [ 2107.668971][ T4074] ? clear_bhb_loop+0x55/0xb0 [ 2107.673486][ T4074] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2107.679223][ T4074] RIP: 0033:0x7fb1de77e759 [ 2107.683472][ T4074] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2107.702908][ T4074] RSP: 002b:00007fb1df4cb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 2107.711150][ T4074] RAX: ffffffffffffffda RBX: 00007fb1de935f80 RCX: 00007fb1de77e759 [ 2107.718963][ T4074] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 [ 2107.726781][ T4074] RBP: 00007fb1df4cb090 R08: 0000000000000000 R09: 0000000000000000 [ 2107.734586][ T4074] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2107.742394][ T4074] R13: 0000000000000000 R14: 00007fb1de935f80 R15: 00007ffebb70b318 [ 2107.750212][ T4074] [ 2107.757169][ T4071] CPU: 0 PID: 4071 Comm: syz.3.8880 Not tainted 6.1.112-syzkaller-00019-g6cf2e7d96862 #0 [ 2107.766810][ T4071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 2107.776706][ T4071] Call Trace: [ 2107.779825][ T4071] [ 2107.782604][ T4071] dump_stack_lvl+0x151/0x1b7 [ 2107.787119][ T4071] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 2107.792419][ T4071] dump_stack+0x15/0x1e [ 2107.796409][ T4071] should_fail_ex+0x3d0/0x520 [ 2107.800922][ T4071] __should_failslab+0xaf/0xf0 [ 2107.805513][ T4071] ? xdp_umem_create+0x56/0xec0 [ 2107.810202][ T4071] should_failslab+0x9/0x20 [ 2107.814540][ T4071] __kmem_cache_alloc_node+0x3d/0x2a0 [ 2107.819750][ T4071] ? xdp_umem_create+0x56/0xec0 [ 2107.824435][ T4071] kmalloc_trace+0x2a/0xa0 [ 2107.828690][ T4071] xdp_umem_create+0x56/0xec0 [ 2107.833200][ T4071] ? bit_wait_io_timeout+0x120/0x120 [ 2107.838323][ T4071] ? __kasan_check_write+0x14/0x20 [ 2107.843269][ T4071] xsk_setsockopt+0x708/0x920 [ 2107.847782][ T4071] ? xsk_poll+0x570/0x570 [ 2107.851946][ T4071] ? __fget_files+0x2cb/0x330 [ 2107.856462][ T4071] ? security_socket_setsockopt+0x82/0xb0 [ 2107.862015][ T4071] ? xsk_poll+0x570/0x570 [ 2107.866180][ T4071] __sys_setsockopt+0x4dc/0x8b0 [ 2107.870867][ T4071] ? fput+0x15b/0x1b0 [ 2107.874687][ T4071] ? __ia32_sys_recv+0xb0/0xb0 [ 2107.879289][ T4071] __x64_sys_setsockopt+0xbf/0xd0 [ 2107.884148][ T4071] x64_sys_call+0x1a2/0x9a0 [ 2107.888487][ T4071] do_syscall_64+0x3b/0xb0 [ 2107.892741][ T4071] ? clear_bhb_loop+0x55/0xb0 [ 2107.897252][ T4071] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2107.902980][ T4071] RIP: 0033:0x7fd0f9b7e759 [ 2107.907234][ T4071] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2107.926683][ T4071] RSP: 002b:00007fd0fa99a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 2107.934930][ T4071] RAX: ffffffffffffffda RBX: 00007fd0f9d36058 RCX: 00007fd0f9b7e759 [ 2107.942734][ T4071] RDX: 0000000000000004 RSI: 000000000000011b RDI: 0000000000000008 [ 2107.950542][ T4071] RBP: 00007fd0fa99a090 R08: 000000000000001c R09: 0000000000000000 [ 2107.958352][ T4071] R10: 00000000200000c0 R11: 0000000000000246 R12: 0000000000000001 [ 2107.966165][ T4071] R13: 0000000000000000 R14: 00007fd0f9d36058 R15: 00007ffd4065a8b8 [ 2107.973986][ T4071] [ 2107.993686][ T28] audit: type=1400 audit(1732018449.127:4267): avc: denied { unmount } for pid=27836 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 2108.029989][ T4085] 9pnet_fd: Insufficient options for proto=fd [ 2108.368706][ T4078] netlink: 68 bytes leftover after parsing attributes in process `syz.7.8883'. [ 2108.423181][ T4095] FAULT_INJECTION: forcing a failure. [ 2108.423181][ T4095] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2108.439691][ T4095] CPU: 0 PID: 4095 Comm: syz.3.8889 Not tainted 6.1.112-syzkaller-00019-g6cf2e7d96862 #0 [ 2108.449332][ T4095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 2108.459225][ T4095] Call Trace: [ 2108.462347][ T4095] [ 2108.465122][ T4095] dump_stack_lvl+0x151/0x1b7 [ 2108.469641][ T4095] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 2108.474934][ T4095] ? signal_setup_done+0x448/0x5f0 [ 2108.479883][ T4095] dump_stack+0x15/0x1e [ 2108.483870][ T4095] should_fail_ex+0x3d0/0x520 [ 2108.488389][ T4095] should_fail+0xb/0x10 [ 2108.492377][ T4095] should_fail_usercopy+0x1a/0x20 [ 2108.497237][ T4095] _copy_from_user+0x1e/0xc0 [ 2108.501663][ T4095] restore_sigcontext+0xce/0x700 [ 2108.506438][ T4095] ? fpu__clear_user_states+0x171/0x200 [ 2108.511822][ T4095] ? __do_compat_sys_x32_rt_sigreturn+0x1e0/0x1e0 [ 2108.518070][ T4095] ? _raw_spin_lock_irq+0xa5/0x1b0 [ 2108.523018][ T4095] ? fput+0x15b/0x1b0 [ 2108.526839][ T4095] __do_sys_rt_sigreturn+0x153/0x1e0 [ 2108.531956][ T4095] ? x32_copy_siginfo_to_user+0x270/0x270 [ 2108.537507][ T4095] ? debug_smp_processor_id+0x17/0x20 [ 2108.542717][ T4095] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 2108.548618][ T4095] ? exit_to_user_mode_prepare+0x39/0xa0 [ 2108.554086][ T4095] x64_sys_call+0x91/0x9a0 [ 2108.558343][ T4095] do_syscall_64+0x3b/0xb0 [ 2108.562595][ T4095] ? clear_bhb_loop+0x55/0xb0 [ 2108.567105][ T4095] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2108.572833][ T4095] RIP: 0033:0x7fd0f9b1a0f9 [ 2108.577085][ T4095] Code: 64 c7 00 16 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 04 25 [ 2108.596529][ T4095] RSP: 002b:00007fd0fa9baa80 EFLAGS: 00000246 ORIG_RAX: 000000000000000f [ 2108.604771][ T4095] RAX: ffffffffffffffda RBX: 00007fd0f9d35f80 RCX: 00007fd0f9b1a0f9 [ 2108.612581][ T4095] RDX: 00007fd0fa9baa80 RSI: 00007fd0fa9babb0 RDI: 0000000000000011 [ 2108.620392][ T4095] RBP: 00007fd0fa9bb090 R08: 0000000000000000 R09: 0000000000000000 [ 2108.628205][ T4095] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2108.636015][ T4095] R13: 0000000000000000 R14: 00007fd0f9d35f80 R15: 00007ffd4065a8b8 [ 2108.643834][ T4095] [ 2108.780396][ T28] audit: type=1400 audit(1732018449.918:4268): avc: denied { bind } for pid=4102 comm="syz.3.8890" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 2108.902172][ T4108] syz.6.8892[4108] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2109.364982][ T4124] 9pnet_fd: Insufficient options for proto=fd [ 2109.391095][ T4126] netlink: 120 bytes leftover after parsing attributes in process `syz.2.8899'. [ 2109.433904][ T4129] FAULT_INJECTION: forcing a failure. [ 2109.433904][ T4129] name failslab, interval 1, probability 0, space 0, times 0 [ 2109.446990][ T4129] CPU: 0 PID: 4129 Comm: syz.0.8896 Not tainted 6.1.112-syzkaller-00019-g6cf2e7d96862 #0 [ 2109.456618][ T4129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 2109.466511][ T4129] Call Trace: [ 2109.469632][ T4129] [ 2109.472408][ T4129] dump_stack_lvl+0x151/0x1b7 [ 2109.476924][ T4129] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 2109.482221][ T4129] dump_stack+0x15/0x1e [ 2109.486210][ T4129] should_fail_ex+0x3d0/0x520 [ 2109.490722][ T4129] ? security_inode_alloc+0x29/0x120 [ 2109.495846][ T4129] __should_failslab+0xaf/0xf0 [ 2109.500443][ T4129] should_failslab+0x9/0x20 [ 2109.504783][ T4129] kmem_cache_alloc+0x3b/0x320 [ 2109.509383][ T4129] security_inode_alloc+0x29/0x120 [ 2109.514363][ T4129] inode_init_always+0x720/0x970 [ 2109.519109][ T4129] ? sockfs_init_fs_context+0xb0/0xb0 [ 2109.524314][ T4129] new_inode_pseudo+0x98/0x1d0 [ 2109.528910][ T4129] __sock_create+0x135/0x760 [ 2109.533337][ T4129] ? __kasan_check_write+0x14/0x20 [ 2109.538284][ T4129] ? fput+0x15b/0x1b0 [ 2109.542106][ T4129] __sys_socket+0x136/0x3a0 [ 2109.546444][ T4129] ? __sys_socket_file+0x1d0/0x1d0 [ 2109.551389][ T4129] ? debug_smp_processor_id+0x17/0x20 [ 2109.556595][ T4129] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 2109.562499][ T4129] __x64_sys_socket+0x7a/0x90 [ 2109.567015][ T4129] x64_sys_call+0x147/0x9a0 [ 2109.571351][ T4129] do_syscall_64+0x3b/0xb0 [ 2109.575606][ T4129] ? clear_bhb_loop+0x55/0xb0 [ 2109.580122][ T4129] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2109.585846][ T4129] RIP: 0033:0x7fcf8e57e759 [ 2109.590102][ T4129] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2109.609543][ T4129] RSP: 002b:00007fcf8f39b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 2109.617786][ T4129] RAX: ffffffffffffffda RBX: 00007fcf8e736058 RCX: 00007fcf8e57e759 [ 2109.625597][ T4129] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 000000000000001e [ 2109.633409][ T4129] RBP: 00007fcf8f39b090 R08: 0000000000000000 R09: 0000000000000000 [ 2109.641219][ T4129] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2109.649036][ T4129] R13: 0000000000000000 R14: 00007fcf8e736058 R15: 00007ffe081f3cc8 [ 2109.656848][ T4129] [ 2109.659904][ T4129] socket: no more sockets [ 2110.349253][ T28] audit: type=1400 audit(1732018451.489:4269): avc: denied { mounton } for pid=4142 comm="syz.2.8905" path="/syzcgroup/cpu/syz2/cpuset.cpus" dev="cgroup" ino=269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 2110.349278][ T4144] FAULT_INJECTION: forcing a failure. [ 2110.349278][ T4144] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2110.386588][ T4143] cgroup: Name too long [ 2110.428676][ T4144] CPU: 1 PID: 4144 Comm: syz.0.8904 Not tainted 6.1.112-syzkaller-00019-g6cf2e7d96862 #0 [ 2110.438322][ T4144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 2110.448215][ T4144] Call Trace: [ 2110.451336][ T4144] [ 2110.454119][ T4144] dump_stack_lvl+0x151/0x1b7 [ 2110.458629][ T4144] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 2110.463925][ T4144] dump_stack+0x15/0x1e [ 2110.467918][ T4144] should_fail_ex+0x3d0/0x520 [ 2110.472428][ T4144] should_fail+0xb/0x10 [ 2110.476422][ T4144] should_fail_usercopy+0x1a/0x20 [ 2110.481279][ T4144] _copy_from_iter+0x18d/0xe00 [ 2110.485882][ T4144] ? copyout_mc+0x80/0x80 [ 2110.490052][ T4144] ? _parse_integer+0x2a/0x40 [ 2110.494561][ T4144] ? kstrtoull+0x1cd/0x2e0 [ 2110.498815][ T4144] copy_page_from_iter+0x1d7/0x2b0 [ 2110.503761][ T4144] ? skb_page_frag_refill+0x229/0x3b0 [ 2110.508972][ T4144] tun_get_user+0x75d/0x3a90 [ 2110.513402][ T4144] ? tun_do_read+0x2000/0x2000 [ 2110.517994][ T4144] ? ref_tracker_alloc+0x31d/0x450 [ 2110.522950][ T4144] ? ref_tracker_dir_print+0x160/0x160 [ 2110.528239][ T4144] ? avc_policy_seqno+0x1b/0x70 [ 2110.532928][ T4144] ? tun_get+0xe9/0x120 [ 2110.536916][ T4144] tun_chr_write_iter+0x129/0x210 [ 2110.541781][ T4144] vfs_write+0xaf6/0xed0 [ 2110.545858][ T4144] ? file_end_write+0x1c0/0x1c0 [ 2110.550667][ T4144] ? __fget_files+0x2cb/0x330 [ 2110.555180][ T4144] ? __fdget_pos+0x204/0x390 [ 2110.559604][ T4144] ? ksys_write+0x77/0x2c0 [ 2110.563858][ T4144] ksys_write+0x199/0x2c0 [ 2110.568023][ T4144] ? bpf_trace_run1+0x240/0x240 [ 2110.572707][ T4144] ? __ia32_sys_read+0x90/0x90 [ 2110.577309][ T4144] ? __bpf_trace_sys_enter+0x62/0x70 [ 2110.582428][ T4144] __x64_sys_write+0x7b/0x90 [ 2110.586854][ T4144] x64_sys_call+0x2f/0x9a0 [ 2110.591107][ T4144] do_syscall_64+0x3b/0xb0 [ 2110.595358][ T4144] ? clear_bhb_loop+0x55/0xb0 [ 2110.599882][ T4144] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2110.605691][ T4144] RIP: 0033:0x7fcf8e57d23f [ 2110.609942][ T4144] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 1c 8e 02 00 48 [ 2110.629383][ T4144] RSP: 002b:00007fcf8f3bc000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 2110.637626][ T4144] RAX: ffffffffffffffda RBX: 00007fcf8e735f80 RCX: 00007fcf8e57d23f [ 2110.645434][ T4144] RDX: 0000000000000036 RSI: 0000000020000e00 RDI: 00000000000000c8 [ 2110.653245][ T4144] RBP: 00007fcf8f3bc090 R08: 0000000000000000 R09: 0000000000000000 [ 2110.661056][ T4144] R10: 0000000000000036 R11: 0000000000000293 R12: 0000000000000001 [ 2110.668996][ T4144] R13: 0000000000000000 R14: 00007fcf8e735f80 R15: 00007ffe081f3cc8 [ 2110.676807][ T4144] [ 2110.862512][ T28] audit: type=1400 audit(1732018451.999:4270): avc: denied { unmount } for pid=26574 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 2111.172213][ T4154] FAULT_INJECTION: forcing a failure. [ 2111.172213][ T4154] name failslab, interval 1, probability 0, space 0, times 0 [ 2111.188300][ T4154] CPU: 0 PID: 4154 Comm: syz.6.8910 Not tainted 6.1.112-syzkaller-00019-g6cf2e7d96862 #0 [ 2111.197938][ T4154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 2111.207833][ T4154] Call Trace: [ 2111.210955][ T4154] [ 2111.213737][ T4154] dump_stack_lvl+0x151/0x1b7 [ 2111.218247][ T4154] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 2111.223542][ T4154] ? proc_fail_nth_write+0x20b/0x290 [ 2111.228664][ T4154] dump_stack+0x15/0x1e [ 2111.232653][ T4154] should_fail_ex+0x3d0/0x520 [ 2111.237171][ T4154] ? getname_flags+0xba/0x520 [ 2111.241680][ T4154] __should_failslab+0xaf/0xf0 [ 2111.246279][ T4154] should_failslab+0x9/0x20 [ 2111.250620][ T4154] kmem_cache_alloc+0x3b/0x320 [ 2111.255217][ T4154] ? cap_capable+0x1d2/0x270 [ 2111.259646][ T4154] getname_flags+0xba/0x520 [ 2111.263987][ T4154] user_path_at_empty+0x2d/0x1a0 [ 2111.268758][ T4154] __se_sys_move_mount+0x1df/0xcc0 [ 2111.273708][ T4154] ? bpf_trace_run2+0x138/0x290 [ 2111.278394][ T4154] ? __this_cpu_preempt_check+0x13/0x20 [ 2111.283775][ T4154] ? __x64_sys_move_mount+0xd0/0xd0 [ 2111.288807][ T4154] ? __ia32_sys_read+0x90/0x90 [ 2111.293409][ T4154] __x64_sys_move_mount+0xbf/0xd0 [ 2111.298268][ T4154] x64_sys_call+0x90b/0x9a0 [ 2111.302605][ T4154] do_syscall_64+0x3b/0xb0 [ 2111.306863][ T4154] ? clear_bhb_loop+0x55/0xb0 [ 2111.311375][ T4154] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2111.317107][ T4154] RIP: 0033:0x7f7d9377e759 [ 2111.321354][ T4154] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2111.340797][ T4154] RSP: 002b:00007f7d9454d038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ad [ 2111.349040][ T4154] RAX: ffffffffffffffda RBX: 00007f7d93935f80 RCX: 00007f7d9377e759 [ 2111.356851][ T4154] RDX: ffffffffffffff9c RSI: 0000000020000140 RDI: 0000000000000006 [ 2111.364662][ T4154] RBP: 00007f7d9454d090 R08: 0000000000000000 R09: 0000000000000000 [ 2111.372478][ T4154] R10: 0000000020000180 R11: 0000000000000246 R12: 0000000000000001 [ 2111.380291][ T4154] R13: 0000000000000000 R14: 00007f7d93935f80 R15: 00007ffe6cc2db48 [ 2111.388103][ T4154] [ 2111.978160][ T4194] FAULT_INJECTION: forcing a failure. [ 2111.978160][ T4194] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2111.991262][ T4194] CPU: 1 PID: 4194 Comm: syz.2.8920 Not tainted 6.1.112-syzkaller-00019-g6cf2e7d96862 #0 [ 2112.000824][ T4194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 2112.005733][ T1112] usb 7-1: new high-speed USB device number 49 using dummy_hcd [ 2112.010713][ T4194] Call Trace: [ 2112.010729][ T4194] [ 2112.010737][ T4194] dump_stack_lvl+0x151/0x1b7 [ 2112.010761][ T4194] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 2112.010778][ T4194] ? kstrtouint+0xf6/0x180 [ 2112.010800][ T4194] dump_stack+0x15/0x1e [ 2112.042048][ T4194] should_fail_ex+0x3d0/0x520 [ 2112.046561][ T4194] should_fail+0xb/0x10 [ 2112.050550][ T4194] should_fail_usercopy+0x1a/0x20 [ 2112.055410][ T4194] _copy_from_user+0x1e/0xc0 [ 2112.059838][ T4194] move_addr_to_kernel+0x87/0x150 [ 2112.064696][ T4194] copy_msghdr_from_user+0x436/0x670 [ 2112.069818][ T4194] ? sendmsg_copy_msghdr+0x70/0x70 [ 2112.074769][ T4194] __sys_sendmsg+0x236/0x390 [ 2112.079194][ T4194] ? ____sys_sendmsg+0x9a0/0x9a0 [ 2112.083978][ T4194] ? fpregs_restore_userregs+0x130/0x290 [ 2112.089433][ T4194] __x64_sys_sendmsg+0x7f/0x90 [ 2112.094033][ T4194] x64_sys_call+0x16a/0x9a0 [ 2112.098371][ T4194] do_syscall_64+0x3b/0xb0 [ 2112.102625][ T4194] ? clear_bhb_loop+0x55/0xb0 [ 2112.107138][ T4194] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2112.112867][ T4194] RIP: 0033:0x7fb1de77e759 [ 2112.117120][ T4194] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2112.136562][ T4194] RSP: 002b:00007fb1de5ff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2112.144806][ T4194] RAX: ffffffffffffffda RBX: 00007fb1de936130 RCX: 00007fb1de77e759 [ 2112.152616][ T4194] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000008 [ 2112.160434][ T4194] RBP: 00007fb1de5ff090 R08: 0000000000000000 R09: 0000000000000000 [ 2112.168238][ T4194] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2112.176049][ T4194] R13: 0000000000000000 R14: 00007fb1de936130 R15: 00007ffebb70b318 [ 2112.183866][ T4194] [ 2112.569055][ T4206] bridge0: port 2(bridge_slave_1) entered disabled state [ 2112.828166][ T4216] FAULT_INJECTION: forcing a failure. [ 2112.828166][ T4216] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2112.919172][ T1112] usb 7-1: Using ep0 maxpacket: 16 [ 2112.924275][ T4216] CPU: 0 PID: 4216 Comm: syz.3.8928 Not tainted 6.1.112-syzkaller-00019-g6cf2e7d96862 #0 [ 2112.933899][ T4216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 2112.943796][ T4216] Call Trace: [ 2112.946920][ T4216] [ 2112.949695][ T4216] dump_stack_lvl+0x151/0x1b7 [ 2112.954211][ T4216] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 2112.959506][ T4216] dump_stack+0x15/0x1e [ 2112.963496][ T4216] should_fail_ex+0x3d0/0x520 [ 2112.968007][ T4216] should_fail+0xb/0x10 [ 2112.971994][ T4216] should_fail_usercopy+0x1a/0x20 [ 2112.976854][ T4216] strncpy_from_user+0x24/0x2b0 [ 2112.981543][ T4216] ? getname_flags+0xba/0x520 [ 2112.986054][ T4216] getname_flags+0xf2/0x520 [ 2112.990393][ T4216] ? __kasan_check_write+0x14/0x20 [ 2112.995341][ T4216] getname+0x19/0x20 [ 2112.999078][ T4216] __x64_sys_execve+0x78/0xb0 [ 2113.003585][ T4216] x64_sys_call+0x1c5/0x9a0 [ 2113.007927][ T4216] do_syscall_64+0x3b/0xb0 [ 2113.012178][ T4216] ? clear_bhb_loop+0x55/0xb0 [ 2113.016718][ T4216] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2113.022419][ T4216] RIP: 0033:0x7fd0f9b7e759 [ 2113.026673][ T4216] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2113.046113][ T4216] RSP: 002b:00007fd0fa9bb038 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 2113.054360][ T4216] RAX: ffffffffffffffda RBX: 00007fd0f9d35f80 RCX: 00007fd0f9b7e759 [ 2113.062170][ T4216] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000080 [ 2113.069979][ T4216] RBP: 00007fd0fa9bb090 R08: 0000000000000000 R09: 0000000000000000 [ 2113.077792][ T4216] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2113.085603][ T4216] R13: 0000000000000000 R14: 00007fd0f9d35f80 R15: 00007ffd4065a8b8 [ 2113.093418][ T4216] [ 2113.207332][ T1112] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2113.221330][ T1112] usb 7-1: New USB device found, idVendor=056a, idProduct=00d0, bcdDevice= 0.00 [ 2113.233494][ T1112] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2113.249608][ T1112] usb 7-1: config 0 descriptor?? [ 2113.766541][ T4180] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2113.777270][ T4180] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2114.054442][ T28] audit: type=1400 audit(1732018455.190:4271): avc: denied { remount } for pid=4246 comm="syz.2.8938" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 2114.074585][ T4247] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 2114.088200][ T1112] wacom 0003:056A:00D0.0199: item fetching failed at offset 5/7 [ 2114.099454][ T1112] wacom 0003:056A:00D0.0199: parse failed [ 2114.105050][ T1112] wacom: probe of 0003:056A:00D0.0199 failed with error -22 [ 2114.264912][ T4261] bridge0: port 2(bridge_slave_1) entered disabled state [ 2114.289661][T26548] usb 7-1: USB disconnect, device number 49 [ 2114.461833][ T28] audit: type=1400 audit(1732018455.601:4272): avc: denied { bind } for pid=4269 comm="syz.2.8946" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 2114.548394][ T28] audit: type=1400 audit(1732018455.691:4273): avc: denied { write } for pid=4269 comm="syz.2.8946" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 2114.927825][ T28] audit: type=1400 audit(1732018456.071:4274): avc: denied { getopt } for pid=4283 comm="syz.6.8950" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 2114.956474][ T28] audit: type=1400 audit(1732018456.091:4275): avc: denied { ioctl } for pid=4283 comm="syz.6.8950" path="socket:[134924]" dev="sockfs" ino=134924 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 2115.301489][ T4302] syz.3.8957[4302] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2115.301565][ T4302] syz.3.8957[4302] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2115.326375][ T4304] xt_policy: too many policy elements [ 2115.400177][ T28] audit: type=1400 audit(1732018456.541:4276): avc: denied { lock } for pid=4285 comm="syz.0.8951" path="socket:[134951]" dev="sockfs" ino=134951 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 2115.836958][T20313] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 2116.105804][T20313] usb 3-1: Using ep0 maxpacket: 16 [ 2116.452402][T20313] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2116.463161][T20313] usb 3-1: New USB device found, idVendor=056a, idProduct=00d0, bcdDevice= 0.00 [ 2116.472194][T20313] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2116.480831][T20313] usb 3-1: config 0 descriptor?? [ 2116.554597][ T4328] bridge0: port 1(bridge_slave_0) entered blocking state [ 2116.561665][ T4328] bridge0: port 1(bridge_slave_0) entered disabled state [ 2116.568929][ T4328] device bridge_slave_0 entered promiscuous mode [ 2116.576360][ T4328] bridge0: port 2(bridge_slave_1) entered blocking state [ 2116.583254][ T4328] bridge0: port 2(bridge_slave_1) entered disabled state [ 2116.590640][ T4328] device bridge_slave_1 entered promiscuous mode [ 2116.657146][ T4328] bridge0: port 2(bridge_slave_1) entered blocking state [ 2116.664030][ T4328] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2116.671143][ T4328] bridge0: port 1(bridge_slave_0) entered blocking state [ 2116.677912][ T4328] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2116.702757][ T4511] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2116.710182][ T4511] bridge0: port 1(bridge_slave_0) entered disabled state [ 2116.717805][ T4511] bridge0: port 2(bridge_slave_1) entered disabled state [ 2116.727379][ T4306] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2116.735850][ T4306] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2116.744102][ T4511] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2116.752459][ T4511] bridge0: port 1(bridge_slave_0) entered blocking state [ 2116.759354][ T4511] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2116.766690][ T4511] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2116.774748][ T4511] bridge0: port 2(bridge_slave_1) entered blocking state [ 2116.781647][ T4511] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2116.783039][ T4336] xt_policy: too many policy elements [ 2116.802552][ T4511] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2116.810661][ T4511] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2116.828843][ T4328] device veth0_vlan entered promiscuous mode [ 2116.842004][ T4328] device veth1_macvtap entered promiscuous mode [ 2116.871975][ T4511] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2116.881596][ T4511] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2116.891788][ T4511] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2116.902910][ T4511] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2116.911296][ T4511] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2116.919803][ T4511] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2116.931016][ T4511] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2117.206615][T20313] wacom 0003:056A:00D0.019A: item fetching failed at offset 5/7 [ 2117.218448][T20313] wacom 0003:056A:00D0.019A: parse failed [ 2117.229254][T20313] wacom: probe of 0003:056A:00D0.019A failed with error -22 [ 2117.460909][ T1762] device bridge_slave_1 left promiscuous mode [ 2117.531226][ T1762] bridge0: port 2(bridge_slave_1) entered disabled state [ 2117.562464][ T1762] device bridge_slave_0 left promiscuous mode [ 2117.564846][T12793] usb 3-1: USB disconnect, device number 120 [ 2117.568590][ T1762] bridge0: port 1(bridge_slave_0) entered disabled state [ 2117.584453][ T1762] device veth1_macvtap left promiscuous mode [ 2117.590644][ T4354] FAULT_INJECTION: forcing a failure. [ 2117.590644][ T4354] name failslab, interval 1, probability 0, space 0, times 0 [ 2117.600054][ T1762] device veth0_vlan left promiscuous mode [ 2117.606280][ T4354] CPU: 0 PID: 4354 Comm: syz.3.8970 Not tainted 6.1.112-syzkaller-00019-g6cf2e7d96862 #0 [ 2117.618236][ T4354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 2117.628133][ T4354] Call Trace: [ 2117.631251][ T4354] [ 2117.634036][ T4354] dump_stack_lvl+0x151/0x1b7 [ 2117.638547][ T4354] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 2117.643842][ T4354] ? kstrtouint+0xf6/0x180 [ 2117.648089][ T4354] ? kasan_set_track+0x4b/0x70 [ 2117.652694][ T4354] dump_stack+0x15/0x1e [ 2117.656684][ T4354] should_fail_ex+0x3d0/0x520 [ 2117.661197][ T4354] __should_failslab+0xaf/0xf0 [ 2117.665802][ T4354] ? uhid_dev_create2+0xe4/0x780 [ 2117.670567][ T4354] should_failslab+0x9/0x20 [ 2117.674905][ T4354] __kmem_cache_alloc_node+0x3d/0x2a0 [ 2117.680114][ T4354] ? kstrtol_from_user+0x180/0x180 [ 2117.685062][ T4354] ? uhid_dev_create2+0xe4/0x780 [ 2117.689836][ T4354] __kmalloc_node_track_caller+0xa2/0x1e0 [ 2117.695388][ T4354] ? __kasan_check_write+0x14/0x20 [ 2117.700335][ T4354] ? mutex_lock_interruptible+0xb1/0x1e0 [ 2117.705808][ T4354] kmemdup+0x29/0x60 [ 2117.709535][ T4354] uhid_dev_create2+0xe4/0x780 [ 2117.714137][ T4354] uhid_char_write+0x746/0xb60 [ 2117.718739][ T4354] ? uhid_char_read+0x760/0x760 [ 2117.723428][ T4354] vfs_write+0x41d/0xed0 [ 2117.727502][ T4354] ? __kasan_slab_free+0x11/0x20 [ 2117.732279][ T4354] ? file_end_write+0x1c0/0x1c0 [ 2117.736963][ T4354] ? __fget_files+0x2cb/0x330 [ 2117.741477][ T4354] ? __fdget_pos+0x204/0x390 [ 2117.745900][ T4354] ? ksys_write+0x77/0x2c0 [ 2117.750154][ T4354] ksys_write+0x199/0x2c0 [ 2117.754321][ T4354] ? __this_cpu_preempt_check+0x13/0x20 [ 2117.759715][ T4354] ? __ia32_sys_read+0x90/0x90 [ 2117.764307][ T4354] ? debug_smp_processor_id+0x17/0x20 [ 2117.769519][ T4354] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 2117.775415][ T4354] __x64_sys_write+0x7b/0x90 [ 2117.779843][ T4354] x64_sys_call+0x2f/0x9a0 [ 2117.784092][ T4354] do_syscall_64+0x3b/0xb0 [ 2117.788344][ T4354] ? clear_bhb_loop+0x55/0xb0 [ 2117.792868][ T4354] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2117.798588][ T4354] RIP: 0033:0x7fe7a797e759 [ 2117.802839][ T4354] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2117.822279][ T4354] RSP: 002b:00007fe7a8843038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2117.830522][ T4354] RAX: ffffffffffffffda RBX: 00007fe7a7b35f80 RCX: 00007fe7a797e759 [ 2117.838336][ T4354] RDX: 0000000000000138 RSI: 0000000020000100 RDI: 0000000000000005 [ 2117.846144][ T4354] RBP: 00007fe7a8843090 R08: 0000000000000000 R09: 0000000000000000 [ 2117.853956][ T4354] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2117.861767][ T4354] R13: 0000000000000000 R14: 00007fe7a7b35f80 R15: 00007fff6e2bd848 [ 2117.869583][ T4354] [ 2118.217057][ T762] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 2118.644522][ T762] usb 4-1: Using ep0 maxpacket: 16 [ 2118.764538][ T762] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2118.781722][ T4381] syz.2.8977[4381] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2118.781799][ T4381] syz.2.8977[4381] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2118.794070][ T762] usb 4-1: New USB device found, idVendor=056a, idProduct=00d0, bcdDevice= 0.00 [ 2118.825287][ T762] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2118.843000][ T762] usb 4-1: config 0 descriptor?? [ 2119.098001][ T4360] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2119.115028][ T4360] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2119.744099][ T414] usb 7-1: new high-speed USB device number 50 using dummy_hcd [ 2120.013901][ T414] usb 7-1: Using ep0 maxpacket: 32 [ 2120.137812][ T28] audit: type=1326 audit(1732018461.284:4277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4364 comm="syz.0.8974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf8e57e759 code=0x7ffc0000 [ 2120.161175][ T28] audit: type=1326 audit(1732018461.284:4278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4364 comm="syz.0.8974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7fcf8e57e759 code=0x7ffc0000 [ 2120.161206][ T28] audit: type=1326 audit(1732018461.284:4279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4364 comm="syz.0.8974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf8e57e759 code=0x7ffc0000 [ 2120.161225][ T28] audit: type=1326 audit(1732018461.284:4280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4364 comm="syz.0.8974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fcf8e57e759 code=0x7ffc0000 [ 2120.161243][ T28] audit: type=1326 audit(1732018461.284:4281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4364 comm="syz.0.8974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fcf8e57e793 code=0x7ffc0000 [ 2120.161262][ T28] audit: type=1326 audit(1732018461.284:4282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4364 comm="syz.0.8974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fcf8e57d23f code=0x7ffc0000 [ 2120.161280][ T28] audit: type=1326 audit(1732018461.284:4283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4364 comm="syz.0.8974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fcf8e57e7e7 code=0x7ffc0000 [ 2120.161298][ T28] audit: type=1326 audit(1732018461.284:4284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4364 comm="syz.0.8974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcf8e57d0f0 code=0x7ffc0000 [ 2120.161314][ T28] audit: type=1326 audit(1732018461.284:4285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4364 comm="syz.0.8974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fcf8e57d3ea code=0x7ffc0000 [ 2120.161332][ T28] audit: type=1326 audit(1732018461.284:4286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4364 comm="syz.0.8974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf8e57e759 code=0x7ffc0000 [ 2120.173844][ T414] usb 7-1: unable to get BOS descriptor or descriptor too short [ 2120.188294][ T762] wacom 0003:056A:00D0.019B: item fetching failed at offset 5/7 [ 2120.363752][ T414] usb 7-1: config 128 has an invalid interface number: 127 but max is 3 [ 2120.376466][ T762] wacom 0003:056A:00D0.019B: parse failed [ 2120.397815][ T414] usb 7-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 2120.398688][ T762] wacom: probe of 0003:056A:00D0.019B failed with error -22 [ 2120.424959][ T762] usb 4-1: USB disconnect, device number 112 [ 2120.472005][ T414] usb 7-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 2120.493116][ T414] usb 7-1: config 128 has no interface number 0 [ 2120.499218][ T414] usb 7-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 2120.542057][ T414] usb 7-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2120.569029][ T414] usb 7-1: config 128 interface 127 has no altsetting 0 [ 2120.583590][ T6064] usb 1-1: new high-speed USB device number 111 using dummy_hcd [ 2120.743775][ T414] usb 7-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 2120.752761][ T414] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2120.764058][ T414] usb 7-1: Product: syz [ 2120.776824][ T414] usb 7-1: Manufacturer: syz [ 2120.793044][ T414] usb 7-1: SerialNumber: syz [ 2120.873393][ T6064] usb 1-1: Using ep0 maxpacket: 16 [ 2121.013492][ T6064] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 2121.108601][ T4417] bridge0: port 2(bridge_slave_1) entered disabled state [ 2121.129289][ T4421] syz.3.8988[4421] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2121.129337][ T4421] syz.3.8988[4421] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2121.281038][ T4428] xt_policy: too many policy elements [ 2121.356166][ T414] usb 7-1: USB disconnect, device number 50 [ 2121.394087][ T2077] udevd[2077]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:128.127/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 2121.443153][ T6064] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 2121.454142][ T6064] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2121.463120][ T762] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 2121.478551][ T6064] usb 1-1: Product: syz [ 2121.496113][ T6064] usb 1-1: config 0 descriptor?? [ 2121.513178][ T6064] usb 1-1: can't set config #0, error -71 [ 2121.521810][ T6064] usb 1-1: USB disconnect, device number 111 [ 2121.783934][ T4432] xt_policy: too many policy elements [ 2122.520212][ T762] usb 3-1: Using ep0 maxpacket: 32 [ 2123.100750][ T4464] overlayfs: missing 'lowerdir' [ 2123.194114][ T4466] overlayfs: missing 'lowerdir' [ 2123.423730][ T762] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2123.512181][ T762] usb 3-1: config 128 has an invalid interface number: 127 but max is 3 [ 2123.520489][ T762] usb 3-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 2123.537985][ T762] usb 3-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 2123.547226][ T762] usb 3-1: config 128 has no interface number 0 [ 2123.553644][ T762] usb 3-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 2123.565028][ T762] usb 3-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2123.575250][ T762] usb 3-1: config 128 interface 127 has no altsetting 0 [ 2123.977584][ T762] usb 3-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 2123.986490][ T762] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2123.994602][ T762] usb 3-1: Product: syz [ 2123.998588][ T762] usb 3-1: Manufacturer: syz [ 2124.009885][ T762] usb 3-1: SerialNumber: syz [ 2124.089404][ T762] usb 3-1: can't set config #128, error -71 [ 2124.097130][ T4494] x_tables: duplicate underflow at hook 1 [ 2124.105528][ T762] usb 3-1: USB disconnect, device number 121 [ 2125.221296][T12793] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 2125.461133][ T762] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 2125.461133][T12793] usb 3-1: Using ep0 maxpacket: 16 [ 2125.481125][ T6] usb 1-1: new high-speed USB device number 112 using dummy_hcd [ 2125.513731][ T4523] fuse: blksize only supported for fuseblk [ 2125.601181][T12793] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2125.631066][T12793] usb 3-1: New USB device found, idVendor=056a, idProduct=00d0, bcdDevice= 0.00 [ 2125.641062][T12793] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2125.655547][T12793] usb 3-1: config 0 descriptor?? [ 2125.711108][ T762] usb 4-1: Using ep0 maxpacket: 16 [ 2125.741060][ T6] usb 1-1: Using ep0 maxpacket: 16 [ 2125.820389][ T4529] FAULT_INJECTION: forcing a failure. [ 2125.820389][ T4529] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2125.833355][ T4529] CPU: 1 PID: 4529 Comm: syz.6.9022 Not tainted 6.1.112-syzkaller-00019-g6cf2e7d96862 #0 [ 2125.842885][ T4529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 2125.852778][ T4529] Call Trace: [ 2125.855903][ T4529] [ 2125.858679][ T4529] dump_stack_lvl+0x151/0x1b7 [ 2125.863192][ T4529] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 2125.868489][ T4529] dump_stack+0x15/0x1e [ 2125.872479][ T4529] should_fail_ex+0x3d0/0x520 [ 2125.876992][ T4529] should_fail+0xb/0x10 [ 2125.880985][ T4529] should_fail_usercopy+0x1a/0x20 [ 2125.885845][ T4529] strncpy_from_user+0x24/0x2b0 [ 2125.890530][ T4529] ? getname_flags+0xba/0x520 [ 2125.895047][ T4529] getname_flags+0xf2/0x520 [ 2125.899384][ T4529] __x64_sys_rmdir+0x3c/0x50 [ 2125.903809][ T4529] x64_sys_call+0x274/0x9a0 [ 2125.908151][ T4529] do_syscall_64+0x3b/0xb0 [ 2125.912401][ T4529] ? clear_bhb_loop+0x55/0xb0 [ 2125.916918][ T4529] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2125.922646][ T4529] RIP: 0033:0x7f7d9377e759 [ 2125.926896][ T4529] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2125.946340][ T4529] RSP: 002b:00007f7d9450b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 2125.954585][ T4529] RAX: ffffffffffffffda RBX: 00007f7d93936130 RCX: 00007f7d9377e759 [ 2125.962396][ T4529] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2125.970207][ T4529] RBP: 00007f7d9450b090 R08: 0000000000000000 R09: 0000000000000000 [ 2125.978019][ T4529] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2125.985829][ T4529] R13: 0000000000000001 R14: 00007f7d93936130 R15: 00007ffe6cc2db48 [ 2125.993653][ T4529] [ 2126.001027][ T4510] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2126.011068][ T4510] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2126.021060][ T762] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2126.037004][ T762] usb 4-1: New USB device found, idVendor=056a, idProduct=00d0, bcdDevice= 0.00 [ 2126.046482][ T762] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2126.055269][ T762] usb 4-1: config 0 descriptor?? [ 2126.070905][ T6] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2126.082898][ T6] usb 1-1: New USB device found, idVendor=056a, idProduct=00d0, bcdDevice= 0.00 [ 2126.092100][ T6] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2126.101525][ T6] usb 1-1: config 0 descriptor?? [ 2126.271728][T12793] wacom 0003:056A:00D0.019C: item fetching failed at offset 5/7 [ 2126.279332][T12793] wacom 0003:056A:00D0.019C: parse failed [ 2126.285705][T12793] wacom: probe of 0003:056A:00D0.019C failed with error -22 [ 2126.353003][ T4520] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2126.361463][ T4520] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2126.471791][T12793] usb 3-1: USB disconnect, device number 122 [ 2126.571976][ T762] wacom 0003:056A:00D0.019D: item fetching failed at offset 5/7 [ 2126.585117][ T762] wacom 0003:056A:00D0.019D: parse failed [ 2126.605439][ T762] wacom: probe of 0003:056A:00D0.019D failed with error -22 [ 2126.614035][ T6] wacom 0003:056A:00D0.019E: item fetching failed at offset 5/7 [ 2126.631051][ T6] wacom 0003:056A:00D0.019E: parse failed [ 2126.636711][ T6] wacom: probe of 0003:056A:00D0.019E failed with error -22 [ 2126.782976][T12793] usb 4-1: USB disconnect, device number 113 [ 2126.816716][ T794] usb 1-1: USB disconnect, device number 112 [ 2126.870133][ T4542] device wg2 entered promiscuous mode [ 2127.913550][ T4565] xt_policy: too many policy elements [ 2127.993324][ T4568] bridge0: port 2(bridge_slave_1) entered disabled state [ 2128.859541][ T6064] usb 1-1: new high-speed USB device number 113 using dummy_hcd [ 2130.599220][ T4603] FAULT_INJECTION: forcing a failure. [ 2130.599220][ T4603] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2130.619028][ T4603] CPU: 1 PID: 4603 Comm: syz.2.9044 Not tainted 6.1.112-syzkaller-00019-g6cf2e7d96862 #0 [ 2130.628675][ T4603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 2130.638577][ T4603] Call Trace: [ 2130.641701][ T4603] [ 2130.644475][ T4603] dump_stack_lvl+0x151/0x1b7 [ 2130.648985][ T4603] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 2130.654282][ T4603] ? __mutex_lock_slowpath+0x10/0x10 [ 2130.659401][ T4603] dump_stack+0x15/0x1e [ 2130.663390][ T4603] should_fail_ex+0x3d0/0x520 [ 2130.667904][ T4603] should_fail+0xb/0x10 [ 2130.671900][ T4603] should_fail_usercopy+0x1a/0x20 [ 2130.676758][ T4603] strncpy_from_user+0x24/0x2b0 [ 2130.681445][ T4603] ? getname_flags+0xba/0x520 [ 2130.685957][ T4603] getname_flags+0xf2/0x520 [ 2130.690294][ T4603] __x64_sys_renameat2+0xb9/0xf0 [ 2130.695068][ T4603] x64_sys_call+0x85c/0x9a0 [ 2130.699406][ T4603] do_syscall_64+0x3b/0xb0 [ 2130.703658][ T4603] ? clear_bhb_loop+0x55/0xb0 [ 2130.708172][ T4603] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2130.713900][ T4603] RIP: 0033:0x7fb1de77e759 [ 2130.718154][ T4603] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2130.737595][ T4603] RSP: 002b:00007fb1df4cb038 EFLAGS: 00000246 ORIG_RAX: 000000000000013c [ 2130.745839][ T4603] RAX: ffffffffffffffda RBX: 00007fb1de935f80 RCX: 00007fb1de77e759 [ 2130.753648][ T4603] RDX: ffffffffffffffff RSI: 0000000020000080 RDI: ffffffffffffffff [ 2130.761461][ T4603] RBP: 00007fb1df4cb090 R08: 0000000000000000 R09: 0000000000000000 [ 2130.769272][ T4603] R10: 0000000020000200 R11: 0000000000000246 R12: 0000000000000001 [ 2130.777084][ T4603] R13: 0000000000000000 R14: 00007fb1de935f80 R15: 00007ffebb70b318 [ 2130.784901][ T4603] [ 2130.858489][ T6064] usb 1-1: device descriptor read/64, error -71 [ 2131.144727][ T4617] fuse: Invalid rootmode [ 2131.298205][ T6064] usb 1-1: device descriptor read/64, error -71 [ 2131.343783][ T28] kauditd_printk_skb: 20 callbacks suppressed [ 2131.343799][ T28] audit: type=1326 audit(1732018472.489:4307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4621 comm="syz.2.9051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1de77e759 code=0x7ffc0000 [ 2131.460184][ T28] audit: type=1326 audit(1732018472.529:4308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4621 comm="syz.2.9051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=59 compat=0 ip=0x7fb1de77e759 code=0x7ffc0000 [ 2131.548969][ T28] audit: type=1326 audit(1732018472.529:4309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4621 comm="syz.2.9051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1de77e759 code=0x7ffc0000 [ 2131.578075][ T6064] usb 1-1: new high-speed USB device number 114 using dummy_hcd [ 2131.678019][ T1112] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 2132.128832][ T1112] usb 3-1: Using ep0 maxpacket: 16 [ 2132.227346][ T4646] xt_policy: too many policy elements [ 2132.267819][ T1112] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2132.286812][ T1112] usb 3-1: New USB device found, idVendor=056a, idProduct=00d0, bcdDevice= 0.00 [ 2132.311303][ T1112] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2132.316817][ T4649] FAULT_INJECTION: forcing a failure. [ 2132.316817][ T4649] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2132.323276][ T1112] usb 3-1: config 0 descriptor?? [ 2132.332320][ T4649] CPU: 1 PID: 4649 Comm: syz.0.9059 Not tainted 6.1.112-syzkaller-00019-g6cf2e7d96862 #0 [ 2132.346473][ T4649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 2132.356364][ T4649] Call Trace: [ 2132.359486][ T4649] [ 2132.362267][ T4649] dump_stack_lvl+0x151/0x1b7 [ 2132.366784][ T4649] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 2132.372075][ T4649] dump_stack+0x15/0x1e [ 2132.376068][ T4649] should_fail_ex+0x3d0/0x520 [ 2132.380580][ T4649] should_fail+0xb/0x10 [ 2132.384602][ T4649] should_fail_usercopy+0x1a/0x20 [ 2132.389435][ T4649] strncpy_from_user+0x24/0x2b0 [ 2132.394118][ T4649] ? getname_flags+0xba/0x520 [ 2132.398639][ T4649] getname_flags+0xf2/0x520 [ 2132.402982][ T4649] __x64_sys_mkdirat+0x7c/0xa0 [ 2132.407573][ T4649] x64_sys_call+0x6c6/0x9a0 [ 2132.411910][ T4649] do_syscall_64+0x3b/0xb0 [ 2132.416164][ T4649] ? clear_bhb_loop+0x55/0xb0 [ 2132.420676][ T4649] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2132.426408][ T4649] RIP: 0033:0x7fcf8e57e759 [ 2132.430657][ T4649] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2132.450100][ T4649] RSP: 002b:00007fcf8f3bc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 2132.458344][ T4649] RAX: ffffffffffffffda RBX: 00007fcf8e735f80 RCX: 00007fcf8e57e759 [ 2132.466155][ T4649] RDX: 0000000000000000 RSI: 0000000020000100 RDI: ffffffffffffff9c [ 2132.473965][ T4649] RBP: 00007fcf8f3bc090 R08: 0000000000000000 R09: 0000000000000000 [ 2132.481779][ T4649] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2132.489677][ T4649] R13: 0000000000000000 R14: 00007fcf8e735f80 R15: 00007ffe081f3cc8 [ 2132.497494][ T4649] [ 2132.508560][ T4651] 9pnet_fd: Insufficient options for proto=fd [ 2132.878867][ T4627] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2132.891860][ T4627] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2132.912225][ T4659] 9pnet_fd: Insufficient options for proto=fd [ 2133.033632][ T28] audit: type=1400 audit(1732018474.180:4310): avc: denied { mount } for pid=4667 comm="syz.0.9066" name="/" dev="overlay" ino=327 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 2133.076924][ T3653] ------------[ cut here ]------------ [ 2133.082256][ T3653] WARNING: CPU: 1 PID: 3653 at fs/inode.c:332 drop_nlink+0xc1/0x110 [ 2133.090059][ T3653] Modules linked in: [ 2133.093755][ T3653] CPU: 1 PID: 3653 Comm: syz-executor Not tainted 6.1.112-syzkaller-00019-g6cf2e7d96862 #0 [ 2133.103626][ T3653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 2133.113489][ T3653] RIP: 0010:drop_nlink+0xc1/0x110 [ 2133.118345][ T3653] Code: 1e 48 8d bb b8 04 00 00 be 08 00 00 00 e8 b7 e2 ef ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 ef 74 a8 ff <0f> 0b eb 88 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 62 ff ff ff 4c [ 2133.137802][ T3653] RSP: 0018:ffffc90007b7fa50 EFLAGS: 00010293 [ 2133.143664][ T3653] RAX: ffffffff81cd2f21 RBX: 0000000000000000 RCX: ffff88811be9d100 [ 2133.148603][ T1112] wacom 0003:056A:00D0.019F: item fetching failed at offset 5/7 [ 2133.151506][ T3653] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2133.164473][ T1112] wacom 0003:056A:00D0.019F: parse failed [ 2133.166745][ T3653] RBP: ffffc90007b7fa78 R08: ffffffff81cd2ea4 R09: 0000000000000003 [ 2133.166763][ T3653] R10: ffffffffffffffff R11: dffffc0000000001 R12: dffffc0000000000 [ 2133.175487][ T1112] wacom: probe of 0003:056A:00D0.019F failed with error -22 [ 2133.180136][ T3653] R13: 1ffff11025c93184 R14: ffff88812e498bd8 R15: ffff88812e498c20 [ 2133.180153][ T3653] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 2133.203359][ T4672] x_tables: duplicate underflow at hook 1 [ 2133.211776][ T3653] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2133.223843][ T3653] CR2: 00007fe7a8822d58 CR3: 0000000129b3f000 CR4: 00000000003506a0 [ 2133.231664][ T3653] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2133.239444][ T3653] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2133.247253][ T3653] Call Trace: [ 2133.250362][ T3653] [ 2133.253266][ T3653] ? show_regs+0x58/0x60 [ 2133.257386][ T3653] ? __warn+0x160/0x3d0 [ 2133.261333][ T3653] ? drop_nlink+0xc1/0x110 [ 2133.265584][ T3653] ? report_bug+0x4d5/0x7d0 [ 2133.270133][ T3653] ? drop_nlink+0xc1/0x110 [ 2133.274478][ T3653] ? handle_bug+0x41/0x70 [ 2133.278576][ T3653] ? exc_invalid_op+0x1b/0x50 [ 2133.283060][ T3653] ? asm_exc_invalid_op+0x1b/0x20 [ 2133.287948][ T3653] ? drop_nlink+0x44/0x110 [ 2133.292172][ T3653] ? drop_nlink+0xc1/0x110 [ 2133.296512][ T3653] ? drop_nlink+0xc1/0x110 [ 2133.300707][ T3653] shmem_rmdir+0x59/0x90 [ 2133.304766][ T3653] vfs_rmdir+0x398/0x500 [ 2133.308886][ T3653] incfs_kill_sb+0x113/0x230 [ 2133.313272][ T3653] deactivate_locked_super+0xad/0x110 [ 2133.318525][ T3653] deactivate_super+0xbe/0xf0 [ 2133.322987][ T3653] cleanup_mnt+0x485/0x510 [ 2133.327266][ T3653] __cleanup_mnt+0x19/0x20 [ 2133.331493][ T3653] task_work_run+0x24d/0x2e0 [ 2133.335916][ T3653] ? kmem_cache_free+0x291/0x560 [ 2133.340729][ T3653] ? task_work_cancel+0x2e0/0x2e0 [ 2133.345557][ T3653] ? free_nsproxy+0x20d/0x260 [ 2133.350183][ T3653] ? exit_task_namespaces+0xb4/0xd0 [ 2133.355199][ T3653] do_exit+0xbd5/0x2b80 [ 2133.358302][ T1112] usb 3-1: USB disconnect, device number 123 [ 2133.359224][ T3653] ? put_task_struct+0x80/0x80 [ 2133.369636][ T3653] ? __kasan_check_write+0x14/0x20 [ 2133.372500][ T4678] fuse: Invalid rootmode [ 2133.374549][ T3653] ? _raw_spin_lock_irq+0xa5/0x1b0 [ 2133.383581][ T3653] ? _raw_spin_lock_irqsave+0x210/0x210 [ 2133.388988][ T3653] ? zap_other_threads+0x29c/0x2d0 [ 2133.393909][ T3653] do_group_exit+0x21a/0x2d0 [ 2133.398437][ T3653] __x64_sys_exit_group+0x3f/0x40 [ 2133.403298][ T3653] x64_sys_call+0x610/0x9a0 [ 2133.407684][ T3653] do_syscall_64+0x3b/0xb0 [ 2133.411890][ T3653] ? clear_bhb_loop+0x55/0xb0 [ 2133.416404][ T3653] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2133.422169][ T3653] RIP: 0033:0x7fcf8e57e759 [ 2133.426384][ T3653] Code: Unable to access opcode bytes at 0x7fcf8e57e72f. [ 2133.433280][ T3653] RSP: 002b:00007ffe081f0c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 2133.441517][ T3653] RAX: ffffffffffffffda RBX: 00007fcf8e5f166e RCX: 00007fcf8e57e759 [ 2133.449330][ T3653] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 2133.457132][ T3653] RBP: 0000000000000016 R08: 00007ffe081eea16 R09: 00007ffe081f1f30 [ 2133.464921][ T3653] R10: 000000000000000a R11: 0000000000000246 R12: 00007ffe081f1f30 [ 2133.472763][ T3653] R13: 00007fcf8e5f15fc R14: 00005555851894a8 R15: 00007ffe081f40e0 [ 2133.480577][ T3653] [ 2133.483400][ T3653] ---[ end trace 0000000000000000 ]--- [ 2133.489926][ T4676] FAULT_INJECTION: forcing a failure. [ 2133.489926][ T4676] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2133.490998][ T3653] ================================================================== [ 2133.504608][ T4676] CPU: 0 PID: 4676 Comm: syz.6.9070 Tainted: G W 6.1.112-syzkaller-00019-g6cf2e7d96862 #0 [ 2133.510656][ T3653] BUG: KASAN: null-ptr-deref in ihold+0x20/0x60 [ 2133.521768][ T4676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 2133.527839][ T3653] Write of size 4 at addr 0000000000000170 by task syz-executor/3653 [ 2133.537734][ T4676] Call Trace: [ 2133.545632][ T3653] [ 2133.550956][ T4676] [ 2133.550966][ T4676] dump_stack_lvl+0x151/0x1b7 [ 2133.550989][ T4676] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 2133.551005][ T4676] ? __kasan_check_write+0x14/0x20 [ 2133.551022][ T4676] dump_stack+0x15/0x1e [ 2133.551035][ T4676] should_fail_ex+0x3d0/0x520 [ 2133.551057][ T4676] should_fail+0xb/0x10 [ 2133.551074][ T4676] should_fail_usercopy+0x1a/0x20 [ 2133.551093][ T4676] _copy_to_user+0x1e/0x90 [ 2133.551110][ T4676] simple_read_from_buffer+0xc7/0x150 [ 2133.551140][ T4676] proc_fail_nth_read+0x1a3/0x210 [ 2133.551161][ T4676] ? proc_fault_inject_write+0x390/0x390 [ 2133.551177][ T4676] ? fsnotify_perm+0x269/0x5b0 [ 2133.551192][ T4676] ? security_file_permission+0x86/0xb0 [ 2133.551205][ T4676] ? proc_fault_inject_write+0x390/0x390 [ 2133.551223][ T4676] vfs_read+0x26c/0xae0 [ 2133.551244][ T4676] ? kernel_read+0x1f0/0x1f0 [ 2133.551260][ T4676] ? mutex_lock+0xb1/0x1e0 [ 2133.551278][ T4676] ? bit_wait_io_timeout+0x120/0x120 [ 2133.551299][ T4676] ? __fdget_pos+0x2e2/0x390 [ 2133.551317][ T4676] ? ksys_read+0x77/0x2c0 [ 2133.551335][ T4676] ksys_read+0x199/0x2c0 [ 2133.551353][ T4676] ? vfs_write+0xed0/0xed0 [ 2133.551374][ T4676] __x64_sys_read+0x7b/0x90 [ 2133.551391][ T4676] x64_sys_call+0x28/0x9a0 [ 2133.551407][ T4676] do_syscall_64+0x3b/0xb0 [ 2133.551420][ T4676] ? clear_bhb_loop+0x55/0xb0 [ 2133.551437][ T4676] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2133.551454][ T4676] RIP: 0033:0x7f7d9377d19c [ 2133.551468][ T4676] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 2133.551480][ T4676] RSP: 002b:00007f7d9454d030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2133.551497][ T4676] RAX: ffffffffffffffda RBX: 00007f7d93935f80 RCX: 00007f7d9377d19c [ 2133.551508][ T4676] RDX: 000000000000000f RSI: 00007f7d9454d0a0 RDI: 0000000000000006 [ 2133.551517][ T4676] RBP: 00007f7d9454d090 R08: 0000000000000000 R09: 0000000000000000 [ 2133.551527][ T4676] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2133.551536][ T4676] R13: 0000000000000000 R14: 00007f7d93935f80 R15: 00007ffe6cc2db48 [ 2133.551551][ T4676] [ 2133.551558][ T3653] CPU: 1 PID: 3653 Comm: syz-executor Tainted: G W 6.1.112-syzkaller-00019-g6cf2e7d96862 #0 [ 2133.551575][ T3653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 2133.551583][ T3653] Call Trace: [ 2133.551588][ T3653] [ 2133.551594][ T3653] dump_stack_lvl+0x151/0x1b7 [ 2133.551611][ T3653] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 2133.551628][ T3653] ? _printk+0xd1/0x111 [ 2133.551647][ T3653] print_report+0xe1/0x4e0 [ 2133.551664][ T3653] ? __virt_addr_valid+0x59/0x2f0 [ 2133.551684][ T3653] ? kasan_addr_to_slab+0xd/0x80 [ 2133.808321][ T3653] ? ihold+0x20/0x60 [ 2133.812048][ T3653] kasan_report+0x13c/0x170 [ 2133.816387][ T3653] ? ihold+0x20/0x60 [ 2133.820119][ T3653] kasan_check_range+0x294/0x2a0 [ 2133.824891][ T3653] __kasan_check_write+0x14/0x20 [ 2133.829665][ T3653] ihold+0x20/0x60 [ 2133.833224][ T3653] vfs_rmdir+0x268/0x500 [ 2133.837306][ T3653] incfs_kill_sb+0x113/0x230 [ 2133.841729][ T3653] deactivate_locked_super+0xad/0x110 [ 2133.846939][ T3653] deactivate_super+0xbe/0xf0 [ 2133.851452][ T3653] cleanup_mnt+0x485/0x510 [ 2133.855732][ T3653] __cleanup_mnt+0x19/0x20 [ 2133.859956][ T3653] task_work_run+0x24d/0x2e0 [ 2133.864407][ T3653] ? kmem_cache_free+0x291/0x560 [ 2133.869158][ T3653] ? task_work_cancel+0x2e0/0x2e0 [ 2133.874017][ T3653] ? free_nsproxy+0x20d/0x260 [ 2133.878529][ T3653] ? exit_task_namespaces+0xb4/0xd0 [ 2133.883562][ T3653] do_exit+0xbd5/0x2b80 [ 2133.887559][ T3653] ? put_task_struct+0x80/0x80 [ 2133.892157][ T3653] ? __kasan_check_write+0x14/0x20 [ 2133.897104][ T3653] ? _raw_spin_lock_irq+0xa5/0x1b0 [ 2133.902055][ T3653] ? _raw_spin_lock_irqsave+0x210/0x210 [ 2133.907430][ T3653] ? zap_other_threads+0x29c/0x2d0 [ 2133.912380][ T3653] do_group_exit+0x21a/0x2d0 [ 2133.916807][ T3653] __x64_sys_exit_group+0x3f/0x40 [ 2133.921667][ T3653] x64_sys_call+0x610/0x9a0 [ 2133.926004][ T3653] do_syscall_64+0x3b/0xb0 [ 2133.930257][ T3653] ? clear_bhb_loop+0x55/0xb0 [ 2133.934772][ T3653] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2133.940500][ T3653] RIP: 0033:0x7fcf8e57e759 [ 2133.944755][ T3653] Code: Unable to access opcode bytes at 0x7fcf8e57e72f. [ 2133.951607][ T3653] RSP: 002b:00007ffe081f0c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 2133.959855][ T3653] RAX: ffffffffffffffda RBX: 00007fcf8e5f166e RCX: 00007fcf8e57e759 [ 2133.967669][ T3653] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 2133.975475][ T3653] RBP: 0000000000000016 R08: 00007ffe081eea16 R09: 00007ffe081f1f30 [ 2133.983287][ T3653] R10: 000000000000000a R11: 0000000000000246 R12: 00007ffe081f1f30 [ 2133.991097][ T3653] R13: 00007fcf8e5f15fc R14: 00005555851894a8 R15: 00007ffe081f40e0 [ 2133.998914][ T3653] [ 2134.001774][ T3653] ================================================================== [ 2134.012004][ T3653] Disabling lock debugging due to kernel taint [ 2134.018401][ T3653] BUG: kernel NULL pointer dereference, address: 0000000000000170 [ 2134.026017][ T3653] #PF: supervisor write access in kernel mode [ 2134.031913][ T3653] #PF: error_code(0x0002) - not-present page [ 2134.037734][ T3653] PGD 0 P4D 0 [ 2134.040942][ T3653] Oops: 0002 [#1] PREEMPT SMP KASAN [ 2134.045977][ T3653] CPU: 0 PID: 3653 Comm: syz-executor Tainted: G B W 6.1.112-syzkaller-00019-g6cf2e7d96862 #0 [ 2134.057256][ T3653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 2134.067154][ T3653] RIP: 0010:ihold+0x25/0x60 [ 2134.071491][ T3653] Code: 00 00 00 00 00 55 48 89 e5 41 56 53 49 89 fe e8 c1 6c a8 ff 49 8d be 70 01 00 00 be 04 00 00 00 e8 60 da ef ff bb 01 00 00 00 41 0f c1 9e 70 01 00 00 ff c3 bf 02 00 00 00 89 de e8 44 70 a8 [ 2134.090932][ T3653] RSP: 0018:ffffc90007b7fa90 EFLAGS: 00010246 [ 2134.096834][ T3653] RAX: ffff88811be9d100 RBX: 0000000000000001 RCX: ffff88811be9d100 [ 2134.104645][ T3653] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2134.112457][ T3653] RBP: ffffc90007b7faa0 R08: ffffffff8144a2c3 R09: fffffbfff0f6e0fd [ 2134.120268][ T3653] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff11025c93014 [ 2134.128079][ T3653] R13: ffff88813899f990 R14: 0000000000000000 R15: 1ffff11027133f38 [ 2134.135892][ T3653] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 2134.144658][ T3653] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2134.151088][ T3653] CR2: 0000000000000170 CR3: 000000011fc20000 CR4: 00000000003506b0 [ 2134.158897][ T3653] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2134.166702][ T3653] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2134.174514][ T3653] Call Trace: [ 2134.177641][ T3653] [ 2134.180416][ T3653] ? __die_body+0x62/0xb0 [ 2134.184591][ T3653] ? __die+0x7e/0x90 [ 2134.188317][ T3653] ? page_fault_oops+0x7f9/0xa90 [ 2134.193089][ T3653] ? vprintk_default+0x26/0x30 [ 2134.197690][ T3653] ? kernelmode_fixup_or_oops+0xd0/0xd0 [ 2134.203069][ T3653] ? add_taint+0x44/0xe0 [ 2134.207147][ T3653] ? panic+0x667/0x667 [ 2134.211053][ T3653] ? preempt_schedule_thunk+0x16/0x18 [ 2134.216263][ T3653] ? exc_page_fault+0x529/0x6d0 [ 2134.220949][ T3653] ? asm_exc_page_fault+0x27/0x30 [ 2134.225811][ T3653] ? add_taint+0x93/0xe0 [ 2134.229892][ T3653] ? ihold+0x25/0x60 [ 2134.233618][ T3653] vfs_rmdir+0x268/0x500 [ 2134.237701][ T3653] incfs_kill_sb+0x113/0x230 [ 2134.242123][ T3653] deactivate_locked_super+0xad/0x110 [ 2134.247332][ T3653] deactivate_super+0xbe/0xf0 [ 2134.251844][ T3653] cleanup_mnt+0x485/0x510 [ 2134.256100][ T3653] __cleanup_mnt+0x19/0x20 [ 2134.260351][ T3653] task_work_run+0x24d/0x2e0 [ 2134.264775][ T3653] ? kmem_cache_free+0x291/0x560 [ 2134.269552][ T3653] ? task_work_cancel+0x2e0/0x2e0 [ 2134.274413][ T3653] ? free_nsproxy+0x20d/0x260 [ 2134.278925][ T3653] ? exit_task_namespaces+0xb4/0xd0 [ 2134.283957][ T3653] do_exit+0xbd5/0x2b80 [ 2134.287954][ T3653] ? put_task_struct+0x80/0x80 [ 2134.292551][ T3653] ? __kasan_check_write+0x14/0x20 [ 2134.297496][ T3653] ? _raw_spin_lock_irq+0xa5/0x1b0 [ 2134.302445][ T3653] ? _raw_spin_lock_irqsave+0x210/0x210 [ 2134.307825][ T3653] ? zap_other_threads+0x29c/0x2d0 [ 2134.312775][ T3653] do_group_exit+0x21a/0x2d0 [ 2134.317201][ T3653] __x64_sys_exit_group+0x3f/0x40 [ 2134.322061][ T3653] x64_sys_call+0x610/0x9a0 [ 2134.326399][ T3653] do_syscall_64+0x3b/0xb0 [ 2134.330653][ T3653] ? clear_bhb_loop+0x55/0xb0 [ 2134.335165][ T3653] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2134.340893][ T3653] RIP: 0033:0x7fcf8e57e759 [ 2134.345145][ T3653] Code: Unable to access opcode bytes at 0x7fcf8e57e72f. [ 2134.352003][ T3653] RSP: 002b:00007ffe081f0c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 2134.360249][ T3653] RAX: ffffffffffffffda RBX: 00007fcf8e5f166e RCX: 00007fcf8e57e759 [ 2134.368059][ T3653] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 2134.375874][ T3653] RBP: 0000000000000016 R08: 00007ffe081eea16 R09: 00007ffe081f1f30 [ 2134.383682][ T3653] R10: 000000000000000a R11: 0000000000000246 R12: 00007ffe081f1f30 [ 2134.391494][ T3653] R13: 00007fcf8e5f15fc R14: 00005555851894a8 R15: 00007ffe081f40e0 [ 2134.399310][ T3653] [ 2134.402175][ T3653] Modules linked in: [ 2134.405917][ T3653] CR2: 0000000000000170 [ 2134.409898][ T3653] ---[ end trace 0000000000000000 ]--- [ 2134.415188][ T3653] RIP: 0010:ihold+0x25/0x60 [ 2134.419527][ T3653] Code: 00 00 00 00 00 55 48 89 e5 41 56 53 49 89 fe e8 c1 6c a8 ff 49 8d be 70 01 00 00 be 04 00 00 00 e8 60 da ef ff bb 01 00 00 00 41 0f c1 9e 70 01 00 00 ff c3 bf 02 00 00 00 89 de e8 44 70 a8 [ 2134.438974][ T3653] RSP: 0018:ffffc90007b7fa90 EFLAGS: 00010246 [ 2134.444873][ T3653] RAX: ffff88811be9d100 RBX: 0000000000000001 RCX: ffff88811be9d100 [ 2134.452691][ T3653] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2134.460494][ T3653] RBP: ffffc90007b7faa0 R08: ffffffff8144a2c3 R09: fffffbfff0f6e0fd [ 2134.468425][ T3653] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff11025c93014 [ 2134.476242][ T3653] R13: ffff88813899f990 R14: 0000000000000000 R15: 1ffff11027133f38 [ 2134.484043][ T3653] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 2134.492818][ T3653] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2134.499231][ T3653] CR2: 0000000000000170 CR3: 000000011fc20000 CR4: 00000000003506b0 [ 2134.507054][ T3653] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2134.514854][ T3653] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2134.522666][ T3653] Kernel panic - not syncing: Fatal exception [ 2134.528864][ T3653] Kernel Offset: disabled [ 2134.532986][ T3653] Rebooting in 86400 seconds..