last executing test programs: 11m52.814873922s ago: executing program 1 (id=572): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0xc) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f00000001c0)='./bus\x00', 0x10040, 0x40) ioctl$KVM_CAP_HYPERV_SYNIC2(r2, 0x4068aea3, &(0x7f0000000500)) r3 = syz_mount_image$fuse(&(0x7f00000023c0), &(0x7f0000002400)='./file0\x00', 0x2028001, &(0x7f0000002600)={{}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, 0xffffffffffffffff}, 0x2c, {'group_id', 0x3d, 0xee01}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1000}}, {@allow_other}, {@allow_other}, {@allow_other}, {@allow_other}, {@blksize={'blksize', 0x3d, 0x1a00}}, {@max_read={'max_read', 0x3d, 0xfffffffffffffff7}}, {@max_read={'max_read', 0x3d, 0x3}}], [{@smackfsroot={'smackfsroot', 0x3d, '#{\xdc'}}, {@fowner_gt}, {@uid_eq}, {@uid_eq}, {@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@fowner_lt={'fowner<', 0xffffffffffffffff}}, {@fsmagic={'fsmagic', 0x3d, 0xff}}, {@defcontext={'defcontext', 0x3d, 'system_u'}}, {@fowner_lt={'fowner<', 0xee00}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\\{!-)}*'}}]}}, 0x0, 0x0, &(0x7f0000002440)="1ddab5c75694a5a3e3c3eca6fade6d68b6c3bd438f37fb4543dba3590bc8536d06fa1aa17bc243074078ac25e407bc7f7730d1074b2d0b7b75830eb38c") fsconfig$FSCONFIG_SET_PATH(r2, 0x3, &(0x7f0000000000)='$+\x00', &(0x7f0000002380)='./file0\x00', r3) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff001000000800395032303030"], 0x15) r4 = dup(r1) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x458, r6, 0x1, 0x0, 0x25dfdbfc, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x14, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_VALUE={0x4}]}, @ETHTOOL_A_DEBUG_MSGMASK={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x40, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x35, 0x5, "ef78da3dbcff607d369bca10de0ff211fa05293756a0752e755b752bacca16ec52ac2c72c3ae7e17abd1d614e81e38e64c"}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x3cc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x38, 0x5, "b9efa34986fc6c711e532586b23fe1ad8d6b906bb0b33c0601ca2f1868e0c366f2f8a61ce9bba14f54ed20a7f35de9f1fd571bc0"}, @ETHTOOL_A_BITSET_VALUE={0xe6, 0x4, "377d5345dfa6a33695822f65c9a7435b795e025d1bcd9ecbb888dda86b6d501ce3ede14f67f88c2684d32f0594c7e0bc0147becd76e3c248c7c3acc94f456e20debb484873041330a1fb4ae6cc1eccea78d80a4108e4ee394b1af66411718c4b5fefcbb9e6b7f3bf4cdf2f18c5d0463efff10ebc9b879c36e30e485392ecf95cf67640d3434c05202238786745721d02a68f6f03e3f79f1bb75412207d321a14db2f0ec861a5f7b9e159f491b0071d09aeeb3282e36cda2065c73baf0d052d6089665b7da8412853592b644a11e2b3f7515ae85794dba4fa2b107a263c16f977c271"}, @ETHTOOL_A_BITSET_VALUE={0x43, 0x4, "4c3db9c7b31a93ab4a461e225e60a83dee9f9584311819c5d69a101d86a33cdb87455b81a1a1b49bffb8ca64208455e221982f1914043419ad7f4aefe9ee01"}, @ETHTOOL_A_BITSET_BITS={0x118, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '(/\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '*#{\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1000}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x17}, @ETHTOOL_A_BITSET_BIT_INDEX={0x0, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}]}, {0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10000}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '}\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xb}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '],[\x00'}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}]}]}, @ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}]}]}, @ETHTOOL_A_BITSET_BITS={0x13c, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xd5}]}, {0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '@-\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'syz_tun\x00'}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '%}@[\x00'}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7e}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffffb}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4001}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '%%$@$#\'[!\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}]}, 0x458}}, 0x2008040) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENT(r4, &(0x7f0000000140)=ANY=[@ANYRESOCT=r0, @ANYRES8=r4, @ANYRES8=r1, @ANYRESOCT=r4, @ANYRESHEX=r4, @ANYRES64=r1, @ANYRES8=r4, @ANYRESHEX=r0, @ANYRES8=0x0], 0x58) mount$9p_fd(0x0, &(0x7f00000025c0)='./file0\x00', &(0x7f0000002340), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) chdir(&(0x7f0000000100)='./file0\x00') read$FUSE(r0, &(0x7f0000000300)={0x2020}, 0x2020) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) 11m52.736868659s ago: executing program 1 (id=573): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x10, 0x1fffffa8, &(0x7f00000003c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) socket$inet(0x2, 0x3, 0x2) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e24, @multicast1}, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x60242, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001c00010000000000fcdbdf2507000000", @ANYRES32=r5, @ANYBLOB="800036000a0002009223d39a6e7e3a6081842a6d98deaaaaaaaaaa000000"], 0x28}}, 0x8884) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000240)='kfree\x00', r0}, 0x10) unshare(0x6020400) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, 0x0, 0x0) timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x25}, &(0x7f0000bbdffc)) getgid() openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) 11m51.625188909s ago: executing program 1 (id=577): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYRESHEX, @ANYRES8=r0, @ANYRES64=r0, @ANYRES64=r0, @ANYRESOCT=r1, @ANYBLOB="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"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r2}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r2, &(0x7f0000000000), &(0x7f0000000500)=""/121}, 0xfffffffffffffe93) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async, rerun: 32) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 32) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf) (async) ioctl$TCFLSH(r4, 0x400455c8, 0x0) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYRES64=r0], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r6}, 0x18) (async) syz_emit_ethernet(0x12, &(0x7f00000004c0)=ANY=[@ANYBLOB="bbbbbbbbbbbb01267100000e000442"], 0x0) ioctl$sock_bt_hci(r3, 0x400448ca, 0x0) (async) r7 = syz_open_dev$vcsn(0x0, 0x4, 0x448000) (async) umount2(&(0x7f0000000000)='./file0\x00', 0x3) r8 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc)) (async) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r9 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r9, &(0x7f0000000440), 0x10) (async) listen(r9, 0x0) (async, rerun: 64) accept4$unix(r9, 0x0, 0x0, 0x0) (rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d85000000070000008500000023"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) ioctl$TIOCSBRK(r7, 0x5427) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async, rerun: 32) readlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000300)=""/207, 0xcf) (rerun: 32) 11m41.246234922s ago: executing program 2 (id=644): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r0}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x3, 0xc, &(0x7f0000000440)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x87}}, @call={0x85, 0x0, 0x0, 0x9e}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000178500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r2}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000290000/0x4000)=nil) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000480)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_GETXATTR(r3, &(0x7f0000000180)={0x18, 0x0, r4, {0x75}}, 0x18) 11m41.231706553s ago: executing program 2 (id=647): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="a800000000010904000500001100000002000000240001801400018008000100e000000108000200ac1e01010c00028005000100000009002400028014000180080001000000010908000200ac1e00010c000280050001"], 0xa8}}, 0x0) 11m41.197407616s ago: executing program 2 (id=648): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000821000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000005c0)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r2, 0x11, 0x64, &(0x7f0000000340)=0x2, 0x4) bind$inet6(r2, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x9a, &(0x7f0000000600)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaaa86dd6001070000641100fc010000000000000000000000000000ff02000000030000000000000000000100000e22006490"], 0x0) 11m41.138536282s ago: executing program 1 (id=649): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r4 = getpid() r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) close(0xffffffffffffffff) clock_nanosleep(0x2, 0x0, &(0x7f0000000000)={0x77359400}, 0xfffffffffffffffe) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sched_setaffinity(r4, 0xffffffb3, &(0x7f0000000240)=0x2) fadvise64(r1, 0x8000000000000000, 0x9, 0x4) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f0000000440)="97713b46fbaa2b1044f2d408ffca802db4d770eb9874f493e0ef367e4bde497c403b450c72ff2417"}) 11m41.026159514s ago: executing program 2 (id=651): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x18) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000286dd6000050000103afffe8000000000000000000000000000bbff02000000000000000000000100000186"], 0x0) 11m40.914541344s ago: executing program 2 (id=652): setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000200)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount$incfs(&(0x7f0000000580)='./file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) execveat$binfmt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x400) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/timers\x00', 0x41, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="020500030c0000000000000000000000030005000000000002004e22e000000280ff000000000000020001000000000000001d0b0000000005000600000000000a00000000000002fe8800000000"], 0x60}}, 0x0) 11m40.337966741s ago: executing program 1 (id=658): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x4, 0x2ffffffff}, 0x2e) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000f3ff0000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x10404, &(0x7f0000000340)={[{@init_itable_val}, {@test_dummy_encryption}, {@noinit_itable}, {@user_xattr}, {@errors_remount}, {@quota}]}, 0x3, 0x43c, &(0x7f0000001080)="$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") socket$inet6_udp(0xa, 0x2, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x80) lseek(r3, 0x1, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x4}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r4}, 0x0, &(0x7f0000000040)}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='hrtimer_init\x00', r5}, 0x10) gettid() futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f000000b000)={0x77359400}, &(0x7f0000048000), 0x0) timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0xff0f}], 0x1}, 0x0) recvmsg(r7, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000400)=""/64, 0x40}], 0x1}, 0x0) 11m40.282897977s ago: executing program 1 (id=659): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000400)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[], 0xfe, 0x2dd, &(0x7f0000001300)="$eJzs3MFrHFUYAPBvspvutiCbQ6UoYkf04CmkFe9bJIFqQFGCKB4MdouSiYUuBJJDk578JxT/Az168CIoiBcP/geCRMGLvYkII7szu81sJ9lU3Wwpv99l37zvfe99M7vs28Py3n9me+vGrf7Ne/cOo/1sEs1udOOviKVYiEYUDgIAeJz8mefxR16Ydy0AwNl4yP0/TyqXyczqAgBm55T7/xvFy/5ZlQUAzND0/f/8WZcEAMzYW++8+9q19fXVN9O0HbH9yc7GzsbwdbTt34yPIotWRHTi74jyp8LXZTRfu76+upIO/LoUG9v7Zf7+zkbx78FrRX5vYXCxNM4f/trI8/zy2vVk9UpaqOYvxoXFcpUL0Yur0YmLD+QP179am38uXnz+/vqxHJ346YO4FVncGBR+JP/OlTR95fX1NJpxJL81HDc0ehbN8V8iB169+GT3DN4hAAAAAAAAAAAAAAAAAAAAAAAeR8vpWO35PcvLE/FWlPEif3y+zkp0mlE5n6c9Ol9npfZ8nmY83ZzvvQMAAAAAAAAAAAAAAAAAAMCjor+7t7WZLRYXB1nWu130VBof//DFt5OhSCZ6Dn88eLs+/WgjKdedDCWVeiqh706c8F83nnjul0+PH3M3GdcTC2WoHRM1T2R1ozpPo5zjIQv75vJEz3uNU8yTHNSF2oO0+z3t8ilPL6MxpdTvDz986qX+pZfrxzTiv7w7508c0zgutHjMR2vY+L0TrTJeDd09dq3yqce0mr884Xaa8f9+aB9sjO566uBLn3U3v7rz82+nmzmZ4XcOAAAAAAAAAAAAAAAAAABQr7+7t9WedxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMGf93b2tzSzrnYvdvc8jy3q3Rz11jcYoa60SeqEVcULWnG8RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADinwAAAP//B79vzg==") r0 = syz_open_dev$usbfs(0x0, 0x205, 0x8401) fcntl$dupfd(r0, 0x406, r0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b595000000000000000002000000", @ANYRES32=r4, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000020aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) 11m40.24861201s ago: executing program 32 (id=659): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000400)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[], 0xfe, 0x2dd, &(0x7f0000001300)="$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") r0 = syz_open_dev$usbfs(0x0, 0x205, 0x8401) fcntl$dupfd(r0, 0x406, r0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b595000000000000000002000000", @ANYRES32=r4, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000020aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) 11m40.009470784s ago: executing program 2 (id=661): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)) syz_fuse_handle_req(r0, &(0x7f00000021c0)="000000000000000000000000000000000000000000000000000000d455b4da0000000000001fb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000bd1d8811cd8a942e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400", 0x2000, &(0x7f00000041c0)={&(0x7f00000001c0)={0x50, 0x0, 0x0, {0x7, 0x29, 0x5, 0x2110129, 0x104, 0xfffe, 0x101, 0x4, 0x0, 0x0, 0x10, 0x4020}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 11m40.009165914s ago: executing program 33 (id=661): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)) syz_fuse_handle_req(r0, &(0x7f00000021c0)="000000000000000000000000000000000000000000000000000000d455b4da0000000000001fb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000bd1d8811cd8a942e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400", 0x2000, &(0x7f00000041c0)={&(0x7f00000001c0)={0x50, 0x0, 0x0, {0x7, 0x29, 0x5, 0x2110129, 0x104, 0xfffe, 0x101, 0x4, 0x0, 0x0, 0x10, 0x4020}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 9m34.993273176s ago: executing program 0 (id=1504): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000680)=""/185, 0x0, 0x3000}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="9402000021000100fcffffff00000000ac1414aae5fffff8b49ed9825133a900fc0100000000000000070000000000000000add500200000000000801aeaaec1", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000700004e6706362632874776f666973682900000000000000000000000480000000000000000000000000000000000000000000000000000000000000000000000000000040010000dc06216ef2c68e9f6da05d886dbc3273ef99796b36698e2bd5179c3eea5474fc78c9720bfc4f90a708001f0001000000cc0111"], 0x294}}, 0x0) mount$incfs(&(0x7f00000007c0)='./bus\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1004002, 0x0) 9m34.100715824s ago: executing program 0 (id=1512): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000680)=""/185, 0x0, 0x3000}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="9402000021000100fcffffff00000000ac1414aae5fffff8b49ed9825133a900fc0100000000000000070000000000000000add500200000000000801aeaaec1", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000700004e6706362632874776f666973682900000000000000000000000480000000000000000000000000000000000000000000000000000000000000000000000000000040010000dc06216ef2c68e9f6da05d886dbc3273ef99796b36698e2bd5179c3eea5474fc78c9720bfc4f90a708001f0001000000cc0111"], 0x294}}, 0x0) mount$incfs(&(0x7f00000007c0)='./bus\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1004002, 0x0) 9m33.176623435s ago: executing program 0 (id=1516): bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x4, 0xe, &(0x7f0000000a00)=ANY=[@ANYBLOB="b7020000c0000000bfa30000000000000703000000feffff7a0af0ff2300000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010001011404000011000000b7030000000000006a0a00fe00000000850000"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000a40)=@updpolicy={0xb8, 0x19, 0x1, 0xfffffffd, 0x0, {{@in=@multicast1=0xe0000002, @in6=@ipv4={'\x00', '\xff\xff', @loopback}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0xfffffffffffffffd}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x4}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4004) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x300, {{@in=@multicast1=0xe0000002, @in, 0x1fe, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}, 0x1, 0x0, 0x8500}, 0x0) 9m33.164603176s ago: executing program 0 (id=1517): unshare(0x0) syz_usb_connect$uac1(0x2, 0xb2, &(0x7f0000000000)=ANY=[@ANYBLOB="12010003000000106b1d01014000010203010902a000030156c0020904000000010100000a24010101bb02010211240601040507000a00080003000200050524050e0f0f2406000504020002000a000900010a24050201039fcc79120924060502010600000924030303030505"], &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0}) 9m30.397131359s ago: executing program 0 (id=1535): bpf$PROG_LOAD(0x5, 0x0, 0x5c) prlimit64(0x0, 0xe, &(0x7f0000000300)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080000000100000000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000bc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x380, 0x0, 0x4c, 0x1a, 0x160, 0x73, 0x2b0, 0x258, 0x258, 0x2b0, 0x258, 0x3, 0x0, {[{{@ipv6={@private0, @local, [], [0x8800], 'dvmrp1\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0x7}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@uncond, 0x0, 0x120, 0x150, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@inet=@multiport={{0x50}, {0x1, 0x4, [0x4e22, 0x4e20, 0x4e24, 0x8, 0x4e21, 0x4e22, 0x4e23, 0x4e21, 0x4e21, 0x4e23, 0x4e22, 0x4e20, 0x4e23, 0x4e21, 0x4e24], [0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1], 0x1}}]}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x5400}}, {0x28}}}}, 0x3e0) 9m29.251042742s ago: executing program 0 (id=1541): prctl$PR_MCE_KILL(0x35, 0x0, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x25c, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c2500000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00', r1}, 0x10) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180)={r0}, 0x4) prctl$PR_MCE_KILL(0x35, 0x0, 0x2) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x25c, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c2500000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00', r1}, 0x10) (async) pipe2$9p(&(0x7f00000001c0), 0x0) (async) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180)={r0}, 0x4) (async) 9m14.198866345s ago: executing program 34 (id=1541): prctl$PR_MCE_KILL(0x35, 0x0, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x25c, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c2500000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00', r1}, 0x10) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180)={r0}, 0x4) prctl$PR_MCE_KILL(0x35, 0x0, 0x2) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x25c, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c2500000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00', r1}, 0x10) (async) pipe2$9p(&(0x7f00000001c0), 0x0) (async) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180)={r0}, 0x4) (async) 1m32.606148633s ago: executing program 5 (id=4207): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xbb6, @loopback, 0x5}, 0x28) connect$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x9, @loopback, 0x106}, 0x1c) r1 = fcntl$dupfd(r0, 0x406, r0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0x2, 0x3b}, 0x1c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xd, 0x0, &(0x7f0000000000)="259a53f271a76d2673004c6588", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000", 0x15) write$binfmt_elf64(r1, &(0x7f00000004c0)=ANY=[], 0xfffffdcf) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0x1d}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r3}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) fcntl$lock(r4, 0x26, &(0x7f0000000000)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1030cc2, &(0x7f0000000180), 0x1, 0x599, &(0x7f0000001840)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) 1m31.00641348s ago: executing program 5 (id=4217): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x18, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="8b0808005eebcea9004500", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="8b0808005eebcea9004500", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000280)={'wg2\x00'}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000), 0x218400, 0x0) (async) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000), 0x218400, 0x0) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f00000000c0)={@mcast1, 0x800, 0x0, 0x103, 0x1, 0x0, 0x3}, 0x20) setsockopt$inet6_int(r4, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x4) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x180000, @empty}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000400000004"], 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000400000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000a00)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000a00)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) socket$pppl2tp(0x18, 0x1, 0x1) (async) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r6, &(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, r7, 0x8, 0x0, 0x5, 0x0, {0xa, 0x0, 0xf9d, @private2}}}, 0x32) writev(r6, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1) (async) writev(r6, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000140)={@local}, &(0x7f0000000040)=0xfffffffffffffff1) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000007c0)={'syztnl0\x00', &(0x7f0000000900)={'syztnl2\x00', 0x0, 0x8000, 0x8, 0x5db7, 0x80, {{0x5, 0x4, 0x2, 0x0, 0x14, 0x1068, 0x0, 0x3, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}}}}) sendmsg$nl_route(r3, &(0x7f00000008c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)=ANY=[@ANYBLOB="64e0ff00150000032cbd000000bc0a00000661ff", @ANYRES32=r8, @ANYBLOB="08000a00010000001400030070696d367265673000000000000000000800020064010100140006000900000017c30000e50000007f0000001400030076657468315f746f5f68737200000000"], 0x64}, 0x1, 0x0, 0x0, 0x800}, 0x40015) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r3) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f00000002c0)={'syztnl2\x00', &(0x7f00000004c0)={'syztnl2\x00', 0x0, 0x2f, 0x1, 0x67, 0xc051, 0xa, @private1={0xfc, 0x1, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8000, 0x7, 0xa5e6, 0x2}}) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f00000002c0)={'syztnl2\x00', &(0x7f00000004c0)={'syztnl2\x00', 0x0, 0x2f, 0x1, 0x67, 0xc051, 0xa, @private1={0xfc, 0x1, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8000, 0x7, 0xa5e6, 0x2}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r7, 0x89f2, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f0000000540)={'syztnl2\x00', 0x0, 0x4, 0x5, 0xfb, 0x5, 0x30, @dev={0xfe, 0x80, '\x00', 0x41}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10, 0x7, 0xffffffff, 0x20004}}) sendmsg$ETHTOOL_MSG_WOL_GET(r3, &(0x7f00000006c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)={0x7c, r9, 0x8, 0x70bd28, 0x25dfdbfc, {}, [@HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4844}, 0x24000044) (async) sendmsg$ETHTOOL_MSG_WOL_GET(r3, &(0x7f00000006c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)={0x7c, r9, 0x8, 0x70bd28, 0x25dfdbfc, {}, [@HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4844}, 0x24000044) dup(r2) 1m30.723682918s ago: executing program 5 (id=4218): syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r0 = epoll_create1(0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x8, 0x4, &(0x7f0000000280)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000100)={0x8002a000}) syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r2, 0x0, 0x0) getdents64(r2, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) close(r5) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r6, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r6, 0x29, 0x30, &(0x7f0000000300)=ANY=[@ANYBLOB="0b000000000000000a00000000000005ff02000000000000000000000000000102000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x110) bind$inet6(r6, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x7d) syz_emit_ethernet(0x3e, &(0x7f0000000900)=ANY=[@ANYBLOB="0180c200000000000000000086dd600000020008000000000000000000000000000000000000ff02000000000000000000000000000100000e2200089078"], 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) ioctl$KVM_GET_XSAVE2(r4, 0x9000aecf, &(0x7f0000ffc000/0x4000)=nil) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000008600850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000bc0)) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="050000000600000008000000ae0000000000005e", @ANYRES32=0x1, @ANYBLOB="ff27070200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000200)='cachefiles_vfs_error\x00', r3, 0x0, 0x5}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 1m29.840892115s ago: executing program 5 (id=4225): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') r1 = epoll_create(0x4) syz_mount_image$fuse(0x0, &(0x7f0000000100)='./file0\x00', 0x20, 0x0, 0x0, 0x0, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x5200, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000180), 0x80, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00') syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x88e, &(0x7f0000000080)={[{@errors_remount}, {@mblk_io_submit}, {@inlinecrypt}, {@test_dummy_encryption_v1}, {@barrier}, {@mblk_io_submit}, {@nogrpid}]}, 0x3, 0x445, &(0x7f0000000800)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000740)={'#! ', './bus'}, 0x9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) fdatasync(r2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) 1m29.58434396s ago: executing program 5 (id=4229): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x7}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0xa5, 0xa, 0x0, 0x0, 0x18, 0x61, 0x11, 0x6c}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x18}, 0x80) 1m29.022257315s ago: executing program 5 (id=4231): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98,\xc8\x18E/\x8c\x1a\xe3\xbd') r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), r2) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000880)=ANY=[@ANYBLOB="2c020000", @ANYRES16=r3, @ANYBLOB="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", @ANYRES32=r4], 0x22c}}, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r5, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x3fffffffffffe, {0x0, 0x200000000, 0x1, 0x4, 0x6, 0x0, {0x0, 0x10001, 0x200000000000, 0xd, 0x0, 0x100, 0x10000, 0x2, 0x80000000, 0x0, 0xd, r7, 0x0, 0x7, 0xa0}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r5, &(0x7f0000004300)={0x50, 0x0, r6, {0x7, 0x26, 0x8, 0xfffffffff323ca46, 0x0, 0xfffc, 0x6, 0x5d3186cc, 0x0, 0x0, 0x1, 0x10001}}, 0x50) creat(&(0x7f00000001c0)='./file0/file0\x00', 0x108) read$FUSE(r5, &(0x7f0000002100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r5, &(0x7f0000000040)={0x10, 0xffffffffffffffda, r8}, 0x10) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) umount2(&(0x7f0000000180)='./file0\x00', 0xb) 1m28.849733143s ago: executing program 35 (id=4231): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98,\xc8\x18E/\x8c\x1a\xe3\xbd') r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), r2) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000880)=ANY=[@ANYBLOB="2c020000", @ANYRES16=r3, @ANYBLOB="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", @ANYRES32=r4], 0x22c}}, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r5, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x3fffffffffffe, {0x0, 0x200000000, 0x1, 0x4, 0x6, 0x0, {0x0, 0x10001, 0x200000000000, 0xd, 0x0, 0x100, 0x10000, 0x2, 0x80000000, 0x0, 0xd, r7, 0x0, 0x7, 0xa0}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r5, &(0x7f0000004300)={0x50, 0x0, r6, {0x7, 0x26, 0x8, 0xfffffffff323ca46, 0x0, 0xfffc, 0x6, 0x5d3186cc, 0x0, 0x0, 0x1, 0x10001}}, 0x50) creat(&(0x7f00000001c0)='./file0/file0\x00', 0x108) read$FUSE(r5, &(0x7f0000002100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r5, &(0x7f0000000040)={0x10, 0xffffffffffffffda, r8}, 0x10) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) umount2(&(0x7f0000000180)='./file0\x00', 0xb) 43.716850001s ago: executing program 3 (id=4554): mkdir(&(0x7f0000000200)='./bus\x00', 0x2a) mount$incfs(&(0x7f0000000040)='./bus\x00', &(0x7f0000000000)='./bus\x00', &(0x7f0000000640), 0x800082, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x13, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f00000003c0)=@filter={'filter\x00', 0x42, 0x4, 0x350, 0xffffffff, 0x118, 0x118, 0x208, 0xffffffff, 0xffffffff, 0x2b8, 0x2b8, 0x2b8, 0xffffffff, 0x4, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'veth0_to_batadv\x00', 'wlan0\x00', {}, {}, 0x84, 0x2, 0x2}, 0x0, 0xf0, 0x118, 0x0, {0x100000000000000}, [@common=@inet=@multiport={{0x50}, {0x1, 0x0, [0x4e20, 0x4e21, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x4e24, 0x4e22, 0x4e22, 0x4e20, 0x4e21, 0x4e23, 0x4e23, 0x4e22, 0x4e21], [0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x81, 0x1, 0x0, 0x1, 0x0, 0x1], 0x1}}, @common=@unspec=@connmark={{0x30}}]}, @REJECT={0x28}}, {{@ip={@loopback, @rand_addr=0x64010101, 0xffffff00, 0xff000000, 'geneve0\x00', 'macvlan0\x00', {0xff}, {}, 0x2e, 0x0, 0x4}, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[0x4e23, 0x4e20], [0x4e23, 0x4e21], 0x5, 0x10, 0x1a7, 0x1}}, @common=@icmp={{0x28}, {0x0, "54e9", 0x1}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x10, 0x9, 0x2}}}, {{@ip={@private=0xa010101, @loopback, 0x0, 0xff000000, 'batadv_slave_0\x00', 'dvmrp0\x00', {}, {}, 0x2f, 0x0, 0x21}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3b0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r6}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x4e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000086"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r9}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r8}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r10}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) mount$overlay(0x0, &(0x7f0000000180)='./bus\x00', 0x0, 0x1164420, &(0x7f0000000f80)={[], [{@fscontext={'fscontext', 0x3d, 'system_u'}}]}) 43.489720594s ago: executing program 3 (id=4557): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='kmem_cache_free\x00', r0}, 0x18) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x8f0, &(0x7f0000002400)=0x0) io_submit(r2, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2002000000, 0x4, 0x0, 0x1, 0x0, r1, &(0x7f0000000040)="0200ffff0000", 0x6, 0x0, 0xa000000, 0x2}]) 43.296435083s ago: executing program 3 (id=4560): pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x11, 0x4a}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit={0x95, 0x0, 0x33}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000}, 0x70) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000"], 0x138) mount$9p_fd(0x0, &(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000003c0), 0x14, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7733, 0xa0, 0x0, 0x352, 0x0, r2}, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000600)=ANY=[@ANYBLOB="0201000000000010ac05418200000000000109022400010000000009040000110300000009210000000122050009058103"], 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000008000000020000000400000005000000", @ANYRES32, @ANYBLOB="000000000100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r4, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="180000000000000000000000000000001811000047782a9376b3ea600efe2219618936e995cde2ae049875d003d6dd859258626e77ec4862587c5f9db224ef96799777a38343bdef3e38460484c95977eb1c605153dbc60e", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) connect$unix(r2, &(0x7f0000000200)=@file={0x1, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='consume_skb\x00', r6}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='consume_skb\x00', r7}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@deltclass={0x50, 0x29, 0x128, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3c20576ab08c5e25}, {0x8, 0x10}, {0xd, 0xfff2}}, [@TCA_RATE={0x6, 0x5, {0x0, 0x53}}, @TCA_RATE={0x6, 0x5, {0x7, 0x3}}, @TCA_RATE={0x6, 0x5, {0x36, 0x5}}, @tclass_kind_options=@c_cake={0x9}, @tclass_kind_options=@c_mq={0x7}]}, 0x50}, 0x1, 0x0, 0x0, 0x60000080}, 0x20000000) r8 = fsmount(r2, 0x0, 0xe0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000700)=@raw=[@jmp={0x5, 0x1, 0xc, 0x6, 0x4, 0xfffffffffffffffe, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @jmp={0x5, 0x1, 0x1, 0xa, 0x1, 0x40, 0x10}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, @map_val={0x18, 0x3, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0x8490}, @map_val={0x18, 0x8, 0x2, 0x0, r4}], &(0x7f0000000040)='GPL\x00', 0x45f, 0x1000, &(0x7f0000001c80)=""/4096, 0x41100, 0x5, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000180)={0x8ee, 0x5}, 0x8, 0x10, &(0x7f00000002c0)={0x3, 0x0, 0x737, 0xa}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000340)=[r5, r4, r2, r5], 0x0, 0x10, 0x3}, 0x94) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r9, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, &(0x7f0000004340)=[{&(0x7f0000000f00)="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", 0xd4d}], 0x1}, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f00000003c0)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) r10 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$EVIOCSKEYCODE_V2(r10, 0x40284504, &(0x7f0000000080)={0x73, 0x18, 0x4, 0x0, "d80004000000000000957f00003d4a100a000000000020020661e6e66b8b37ff"}) 40.284652969s ago: executing program 3 (id=4574): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x58}}, 0x4000000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x2000000000000241, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2}, 0x0, &(0x7f0000000180)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x200000, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) mount$bind(0x0, &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x10000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000f00)='./file0/../file0\x00', 0x0, 0x20e5498, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x7, &(0x7f0000000740), 0xfc, 0x568, &(0x7f0000000880)="$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") r5 = open(&(0x7f0000000240)='./file1\x00', 0x0, 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900), 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@bloom_filter={0x1e, 0xf52b, 0x394c, 0xfffffff8, 0x38506, r5, 0x11, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x3, 0xd, @value=r6}, 0x50) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) 39.313327545s ago: executing program 3 (id=4577): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000380)='sched_switch\x00'}, 0x18) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) clock_getres(0xfffffffffffffffa, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000a00)=@newtaction={0x488, 0x30, 0x12f, 0x4000, 0x0, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x7c3, 0x2, 0x3, 0x80, 0x10, 0xc, 0x2, 0x3, 0x40, 0x200, 0x8, 0x9, 0x6, 0x10000005, 0x0, 0x5, 0xa, 0x6, 0x200, 0x1, 0x3, 0xcc37, 0x5, 0xb5, 0x4, 0x4, 0x0, 0x4, 0xfb1, 0x72a4, 0xd, 0x7fff, 0x5, 0x3, 0x0, 0x3, 0x7, 0xc3a0, 0x4, 0xc, 0x0, 0xaf, 0x1, 0x6, 0x5, 0xfffffffd, 0x5, 0x8, 0xe, 0x2, 0xfffffff8, 0x6, 0x7, 0x1991, 0x8, 0xfffffe29, 0x5, 0x3, 0x101, 0xfff, 0x4, 0x5, 0x8000, 0x4, 0x7, 0x3, 0x0, 0xfffffff3, 0x1, 0x9, 0x80020003, 0x2, 0x6, 0x5, 0x101, 0x1, 0xfffffffc, 0x6, 0xfffffffb, 0x200, 0x1, 0x7309, 0x6, 0x3, 0x100, 0x2, 0x7, 0x6d0, 0x224, 0x7ff, 0x0, 0x6, 0x7, 0xfffff001, 0x6, 0x7ed8, 0x3, 0xffff, 0xfffffffe, 0x4, 0x249, 0x5, 0x2fc2, 0x2, 0x8000, 0x7, 0x25fe9fd5, 0x1, 0x9, 0x1, 0xe, 0x9, 0x0, 0x3, 0x4f, 0xffffffff, 0x8, 0x1, 0x119203c5, 0xd0, 0x7, 0x4, 0x3226, 0x8, 0x3, 0x4, 0xc64f, 0xffffff6d, 0x5, 0x80000001, 0x6, 0xfffffff7, 0x6, 0x7, 0x5, 0xc, 0xe, 0x7, 0x200, 0x60459141, 0x1, 0x5, 0x6, 0x84, 0x0, 0x1, 0x5, 0x2, 0x29dc, 0x0, 0x2d5, 0x7, 0xfffffffa, 0x1000, 0x6, 0x94, 0x15a, 0x4, 0x6, 0xfffffff8, 0x4002, 0x2, 0x4, 0xfff, 0x5, 0x1, 0x3, 0x4003, 0x80, 0x7a5b054a, 0x8, 0xffffff7d, 0x4b1, 0xfff, 0x3, 0xb, 0x8, 0x3, 0x4, 0x2, 0x6, 0xf, 0x80001, 0x7, 0x1, 0x77, 0x20009, 0x274b, 0x2, 0x40, 0xfffffffe, 0xb, 0x7, 0x1, 0x9ab, 0x7, 0xffffffc0, 0x200, 0x7, 0x3e, 0x2c7, 0x7, 0x8, 0x4, 0x0, 0x99f, 0x5, 0x7ff, 0x6, 0x31e1, 0x4, 0x4, 0xb, 0x5, 0x1e, 0x3, 0xe49, 0x56, 0x9, 0x1, 0x6, 0x2, 0x6a1c, 0x9, 0x8, 0x4dbda2da, 0x7fff, 0x5, 0x5, 0x0, 0x1, 0x8, 0x7fff, 0xed, 0x7fff, 0xcd, 0xcbe, 0x1, 0x3, 0x8, 0xb, 0xff, 0x5, 0x1, 0x7, 0x9, 0x0, 0x8, 0x5, 0x4, 0xbffffffd, 0x2, 0xeffe, 0xe74, 0xfffffffa]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x400, 0x8, 0x3, 0x7b2, 0x400, {0x1, 0x0, 0x8, 0x624, 0x0, 0xfffffff8}, {0x9, 0x2, 0x7, 0x7ff, 0xff01, 0x4}, 0x9, 0x4, 0x923}}]]}, {0x4}, {0xc, 0xb, {0x0, 0x1}}, {0xc, 0xa, {0x2}}}}]}]}, 0x488}, 0x1, 0x0, 0xe4ffffffffffffff}, 0x0) 39.209942455s ago: executing program 3 (id=4579): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f00000002c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa0086dd6002000800fe2c00fe8000000000000000000000000000bbff0200000000ffffffffffffffea000132"], 0x0) 39.093571837s ago: executing program 36 (id=4579): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f00000002c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa0086dd6002000800fe2c00fe8000000000000000000000000000bbff0200000000ffffffffffffffea000132"], 0x0) 1.833953419s ago: executing program 9 (id=4990): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), r0) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000001780)={&(0x7f0000000240)={0x34, r1, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x4044084) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(0x0, r2) sendmsg$IEEE802154_SET_MACPARAMS(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000780)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x80d4}, 0x20008814) 1.800332993s ago: executing program 9 (id=4992): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0xfffffffffffff001}, 0x18) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000002060103000000000000000000000004050001000700000013000300686173683a6e65742c696661636500000900020073797a30000000000500040000000000050005000a00000014000780050015000000000008001240"], 0x60}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={0x1c, 0x3, 0x6, 0x101, 0x0, 0x0, {0x3}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x10000000) 1.738625199s ago: executing program 9 (id=4994): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x200801f, &(0x7f00000000c0), 0xfe, 0x4ec, &(0x7f0000000380)="$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") openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) 1.522542609s ago: executing program 9 (id=5000): r0 = socket$inet(0x2, 0x3, 0xd) getsockopt$inet_mreqsrc(r0, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f00000004c0)=0xc) 1.438467298s ago: executing program 9 (id=5005): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd5cd7000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000004000000020000000000000f0400000000005f"], 0x0, 0x28}, 0x20) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x4, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r4, 0x0, 0x1}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0xc, 0x4, 0x4, 0x7, 0x0, r5, 0x3, '\x00', 0x0, r4, 0x3, 0x80}, 0x50) syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x80, &(0x7f0000000880), 0x6, 0x603, &(0x7f0000001200)="$eJzs3c9rHGUfAPDvzCZ5kzZv0768vLwtigEPLUi3SS1WvdjWgz0ULNiDiIeGJqmh2x80KdhaMAUPCgoiXkV68R/wLr17E0G9eRaqSEVBpSuzO9tuNrvpNs3uppnPByZ5nmdm93m+O3kyz8zkyQRQWJPZlzRid8Td00nERNO68aivnMy3u/Pr9TPZkkS1+tovSSR5WWP7JP++Pc+MRsQ3xyL+U1pd7+LVa+dmKtW6dyMOLJ2/dGDx6rX9C+dnzs6dnbswffD5Q4enXpg+NL0hcW7Pvx8/8eoTH7331nPz31b2J3EkTg2/MxstcWyUyZiMu3mIzeVDEXE4S7T5XB43DxXCjt61g/Up5T+PwxHxv5iIUi1XNxELHw60cUBPVUsRVaCgEv0fCqoxDmic23d3Hnyqx6OS/rl9tH4CtDr+ofq1kRitnRttu5M0nRnVr23s3ID6szr+vr7ns2yJFdch/ri3d4Y2oJ5Olm9ExP/bxZ/U2razFmkWf7qiHUlETEXESN6+lx+hDUlTuhfXYday3vjTiDiSf8/Kj62z/smWfL/jB6CYbh3ND+TLWe7+8S8bezTGP9Fm/DPe5ti1HoM+/nUe/zWO96O1a+RpyzgsG7OcbP+Ww60FP35w/JNO9TeP/7Ilq78xFuyH2zci9rTE/34WbD7+yeJP2uz/bJPTR7qr45Xvfj7ead2g46/ejNjb9vzn/qg0S61xf/LA/EJlbqr+tW0dX3395hed6h90/Nn+39Yh/qb9n7a+LvtMLnVZx5cnb57vtG78gfGnPyX5+eZIXvL2zNLS5emIkeREvklT+cG129LYpvEeWfz7nm7f/1f8/N9Y+T5jjV+ZXbj0+rk7ndatZ/833Uy+W+2yDZ1k8c8+eP+v6v9Z2cdd1vH7G1ee7LRurfjHHiUwAAAAAAAAKKC0dg82Scv30mlaLtfny/43tqWVi4tLz8xfvHJhNmJf7e8hh9PGne6Jej7J8tP538M28gdb8s9GxK6I+LQ0VsuXz1yszA46eAAAAAAAAAAAAAAAAAAAANgktufz/xvPqf6tVJ//DxRELx8wB2xu+j8UV63/r3rEE1AEjv9QXPo/FJf+D8Wl/0Nx6f9QXPo/FJf+D8Wl/wMAAADAlrTrqVs/JBGx/OJYbcmM5OvMCIKtbXjQDQAGptTVVkYCsBXdu/Wvi0PhdDX+/zP/54C9bw4wAEm7wtrgoLp257/V9pUAAAAAAAAAAAAAQA/s3d15/r+5wbC1mfYHxdXd/P+NfimwGfjX/1BczvGBB83iH+20wvx/AAAAAAAAAAAAAOib8dqSpOV8LvB4pGm5HPHviNgZw8n8QmVuKiJ2RMT3peF/ZfnpQTcaAAAAAAAAAAAAAAAAAAAAtpjFq9fOzVQqc5ebE3+tKtnaicZTUPtQ10vxkK+KpP8fy1hEDHyn9Cwx1FSSRCxne35TNOzyYmyOZtQSA/7FBAAAAAAAAAAAAAAAAAAABdQ097i9PZ/3uUUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0H/3n//fu8SgYwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHk//BAAA//+fsUA2") 1.054684666s ago: executing program 4 (id=5018): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=ANY=[@ANYBLOB="0815000000051104000000000000000001000005540201"], 0x1508}}, 0x0) 1.054579836s ago: executing program 4 (id=5019): socket(0x25, 0x2400000001, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000040)={0x0, 0xea60}, 0x10) connect$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x4e23, 0xa4e4, @remote, 0x3}, 0x1c) 1.031264558s ago: executing program 4 (id=5020): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, r1, 0x1, 0x70bd28, 0x0, {{0x15}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x4, 0x3, 0x0, 0x0}]}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 854.416716ms ago: executing program 4 (id=5023): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') fchdir(r0) openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0, 0x108) 820.221369ms ago: executing program 7 (id=5024): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000008000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000006000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x3004081, &(0x7f0000000600)=ANY=[@ANYRES8=0x0, @ANYRES8, @ANYRES64, @ANYRES8], 0x0, 0x23e, &(0x7f0000000f80)="$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") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e8, 0x0, 0x0, 0x130, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d000000000000000500ffffffff00"}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 812.46221ms ago: executing program 4 (id=5025): creat(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[]) 690.477382ms ago: executing program 4 (id=5026): getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff40bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r1, 0x0, 0x200000000000006}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000780)=ANY=[@ANYBLOB="280000001800010000000000000000000200000008000000e00000020c00088008000c00", @ANYRES32, @ANYBLOB="dd5fe6dadc6863d2e9be2717a03e260d45c00317f5ace95577088b8f2af0e2f4c775ec6ff1ecfffa2bd6a86c426294ddb619318c50960162cdb5946dd044553f8765cecb00bac5a327504404d75c6374b5ca5630c96fc598dba34416813715e42c253837b4069c0f0c470ffca29685a9577743a5e4bea53dc0fc67d45ba00b8cf02e499645d492908869b169d0859daa77cf412cba3c4d2a79f48aa0632f0e3696bf39df95e3b6caee86173e0802bf66315bb063"], 0x28}}, 0x0) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000080)=@sr0, 0x0, &(0x7f00000001c0)='./file0\x00') mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x810004, &(0x7f0000000ac0)='\x06\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\v\xda\xbfS\x04\xc3\x00\x00\x00\x00\x00\x00\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x000x0) io_submit(r2, 0x2, &(0x7f0000000400)=[&(0x7f0000000000)={0x180a, 0x0, 0x3, 0x0, 0x0, r1, 0x0, 0x0, 0x16, 0x0, 0x2}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x3, r1, &(0x7f00000006c0)="5810235a8c132dec85cd178b3f08bf80ed397f24d54555089230115bf5f2fd1131af98e20bb57d5b", 0x28, 0x1}]) 268.043154ms ago: executing program 8 (id=5038): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0x4, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x200f000, 0x0, 0x1, 0x0, &(0x7f0000000000)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)=0x0) syz_open_procfs(r1, &(0x7f0000000040)='net/packet\x00') pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r2, 0x4008941a, &(0x7f0000000080)=0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x7, 0x4, 0x8, 0xd9}, 0x50) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) process_vm_writev(0x0, 0x0, 0x0, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_DEAUTHENTICATE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x24, r4, 0xfc5, 0x0, 0x0, {{0x11}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x8, 0x2a, [@perr={0x84, 0xffffffffffffff21}]}]}, 0x24}}, 0x0) 182.532602ms ago: executing program 8 (id=5039): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x7ffb}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a00)=ANY=[@ANYBLOB="1400000010007c0000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000010900020073797a310000000008000a40fffffffc400000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c000180050001"], 0xa4}}, 0x40) 182.285642ms ago: executing program 6 (id=5040): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000040c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000100001001e000000000000010500000a3c0000001d0a090000000000000000000a0000070900020073797a31000000000900010073797a3100000000100003800c"], 0x64}, 0x1, 0x0, 0x0, 0x24000850}, 0x40) 182.106932ms ago: executing program 7 (id=5041): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000000180)=""/53}, 0x43) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000bc0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) bind$packet(r2, &(0x7f0000000040)={0x11, 0x1, 0x0, 0x1, 0x9}, 0x14) 182.021592ms ago: executing program 8 (id=5042): socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010025bd7000fadbdf2500000000", @ANYRES32=r1, @ANYBLOB="138000002b9201002400128009000100626f6e6400000000140002800800", @ANYRES64=r0], 0x44}, 0x1, 0x0, 0x0, 0x40448e0}, 0x4000) 173.845013ms ago: executing program 6 (id=5043): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0xb30, 0x0, 0x0, 0x40f00, 0x49, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x109}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000240)='kfree\x00', r2, 0x0, 0x3}, 0x18) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="dfbf00000000000000006700000008000300", @ANYRES32=r0, @ANYBLOB="0800c300741300000800c4"], 0x30}, 0x1, 0x0, 0x0, 0x240408c3}, 0x0) 169.143523ms ago: executing program 7 (id=5044): syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x80c406, &(0x7f0000000540)=ANY=[@ANYBLOB='dots,dots,dmask=000000000200000,nodots,discard,nfs=nostale_ro,gid=', @ANYRESHEX=0x0, @ANYRES64=0x0], 0x1, 0x29d, &(0x7f0000000640)="$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") syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x6046c, &(0x7f00000009c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) open(&(0x7f0000000180)='./bus\x00', 0x14957e, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f00000002c0)=""/53, 0x35) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000000f80)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) 106.482439ms ago: executing program 8 (id=5045): bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0}, 0x94) wait4(0x0, 0x0, 0x40000000, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x70bd2d, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x93}, [{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x0, 0x0, 0x0, 0x3000000}, {0x1, 0xffffffff, 0x0, 0x4000000, 0x7, 0x80000}, {0x8000, 0x9, 0x0, 0xfffffffc, 0x5}, {}, {0x0, 0x0, 0x800000, 0x0, 0x6}, {0x0, 0xc3}, {0x0, 0x5}, {0x5}, {}, {0x0, 0x10}, {0x0, 0x4, 0x0, 0x8000000, 0x0, 0x200000}, {}, {0x2, 0x0, 0x0, 0x0, 0x6, 0x6}, {}, {}, {0x0, 0x0, 0x0, 0x1, 0xfffffffe, 0xfff}, {0x0, 0x0, 0x0, 0x8000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x20}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {0x20000}, {}, {0x0, 0x7, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x5}, {0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x60569add}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xffffffff, 0x9}, {0x0, 0x0, 0x0, 0x0, 0xfffff800}, {0x0, 0x0, 0x0, 0x0, 0x9}, {}, {0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {0x0, 0x9, 0x0, 0xffffffff, 0x0, 0x2}, {}, {0x80}, {0x80, 0x0, 0x0, 0x0, 0x400}, {0x0, 0x0, 0x0, 0x5, 0x5}, {}, {0x0, 0x0, 0x8}, {0x0, 0x2, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {0x0, 0x0, 0x0, 0x8510}, {0xffff}, {}, {0x0, 0x0, 0x80000}, {0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0xfffefffd}, {0x0, 0x80000, 0x0, 0x1, 0x3, 0x2}, {}, {0x5}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, {0x0, 0x7}, {}, {0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x9}, {0x0, 0xfffffffc, 0x200}, {0xffffffff}, {}, {0x4}, {0x0, 0x0, 0x0, 0x66dea0ac}, {0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1}, {0x0, 0x101, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x3}, {0x0, 0x0, 0x0, 0x4, 0x9}, {}, {0x0, 0x0, 0x0, 0x0, 0x1, 0x7}, {0x0, 0xb}, {0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x100}, {}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x56}, {0x0, 0x0, 0x0, 0xec33, 0x0, 0x4}, {}, {0xb, 0x0, 0x0, 0x0, 0x0, 0xfe1}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {0x0, 0xfffffffd}, {0x6}, {0x7f}, {}, {0x0, 0x8, 0x0, 0x0, 0xfffffffe}, {0x0, 0x2, 0x0, 0x2, 0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0xe9b, 0x58a}, {0x2}, {0x2, 0x9, 0x20000000}, {0xfffffffc}, {0x0, 0x0, 0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x292}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0xe600, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, {0x0, 0x5, 0x0, 0x7, 0x1}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x80}, {0x10000000, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0xfffffff9}, {}, {0xfffffffb, 0x0, 0x0, 0x0, 0x8000}, {0x6, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {0x2d}, {0x0, 0x0, 0x8000}, {0x0, 0x8000}, {0x0, 0x0, 0x10000}, {0x0, 0x80000000, 0x0, 0x7fff800, 0x4}, {0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0xd}], [{}, {}, {0x4, 0x1}, {0x1, 0x1}, {}, {0x3}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x5, 0x1}, {}, {0x4}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x0, 0x1}, {}, {0x5}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {0x4}, {}, {}, {}, {0x5}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x1}, {}, {0x5}, {}, {}, {}, {}, {}, {0x1}, {}, {0x2, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {0x4}, {0x3}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x100000e, 0x4082172, 0xffffffffffffffff, 0x52ef4000) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) waitid(0x0, 0x0, &(0x7f0000002ff9), 0x2, 0x0) 106.27473ms ago: executing program 6 (id=5046): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x18) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2a8, 0x0, 0x940c, 0x3002, 0x0, 0x2c0, 0x1d8, 0x3d8, 0x3d8, 0x1d8, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0, 0x4001}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x1, 0xbe, {0x565159d7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x329) 103.92322ms ago: executing program 8 (id=5047): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000080008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000400000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x2, 0x80805, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={0x0, r3}, 0x18) r4 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x1a10c1, 0x9c37611dc13d0d83) fchown(r4, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r5, {0x10, 0x4}, {0xfff3}, {0x4}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 93.94802ms ago: executing program 7 (id=5048): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = syz_io_uring_setup(0x66e, &(0x7f0000000240)={0x0, 0x0, 0x10100}, &(0x7f0000000380), &(0x7f0000000200)) io_uring_enter(r5, 0x567, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00'}, 0x10) r6 = socket(0x1e, 0x4, 0x0) r7 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0xfffffffc}, 0x10) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2, 0x4}, 0x10) sendmmsg(r6, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)}}], 0x1, 0x9200000000000000) r8 = dup3(r7, r6, 0x0) recvmmsg(r8, &(0x7f0000008840)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000040)=""/8, 0x8}], 0x1}, 0xffffffff}], 0x1, 0x40000001, 0x0) 88.266761ms ago: executing program 9 (id=5049): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0xffffffff}, 0x18) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000700)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd2a, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0x0, 0x4}, {}, {0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x2, 0x2, 0x6, 0x100000a, 0x8}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x40010}, 0x0) 87.754431ms ago: executing program 6 (id=5050): socket$inet6(0xa, 0x3, 0x8000000003c) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000002000000e27f000001"], 0x48) r1 = socket(0x11, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r1, &(0x7f0000000180)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r1, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)=ANY=[@ANYRES8, @ANYRES16=r0], 0xdd12}], 0x1, 0x0, 0x0, 0x4008084}, 0x10) 26.374277ms ago: executing program 8 (id=5051): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x41, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x18) linkat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000) 26.213347ms ago: executing program 6 (id=5052): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00', r3}, 0x10) fcntl$setlease(r1, 0x400, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 0s ago: executing program 6 (id=5053): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='kmem_cache_free\x00', r1, 0x0, 0x100000000}, 0x18) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000040)={[{@nobh}, {@abort}]}, 0xff, 0x258, &(0x7f0000000780)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x80042, 0x94) pwrite64(r2, &(0x7f00000005c0)='\"', 0x1, 0x4eed0) write$nbd(r2, &(0x7f0000000700)={0x67446698, 0x0, 0x3, 0x0, 0x2}, 0x10) kernel console output (not intermixed with test programs): 4140] __dump_stack+0x21/0x30 [ 765.644026][T14140] dump_stack_lvl+0xee/0x150 [ 765.648631][T14140] ? show_regs_print_info+0x20/0x20 [ 765.653853][T14140] dump_stack+0x15/0x20 [ 765.658027][T14140] should_fail+0x3c1/0x510 [ 765.662465][T14140] ? netlink_sendmsg+0x602/0xb70 [ 765.667427][T14140] __should_failslab+0xa4/0xe0 [ 765.672217][T14140] should_failslab+0x9/0x20 [ 765.676839][T14140] slab_pre_alloc_hook+0x3b/0xe0 [ 765.681899][T14140] ? netlink_sendmsg+0x602/0xb70 [ 765.686863][T14140] ? netlink_sendmsg+0x602/0xb70 [ 765.692000][T14140] __kmalloc_track_caller+0x6c/0x2c0 [ 765.697314][T14140] ? netlink_sendmsg+0x602/0xb70 [ 765.702275][T14140] ? netlink_sendmsg+0x602/0xb70 [ 765.707235][T14140] __alloc_skb+0x21a/0x740 [ 765.711678][T14140] netlink_sendmsg+0x602/0xb70 [ 765.716478][T14140] ? netlink_getsockopt+0x530/0x530 [ 765.721888][T14140] ? security_socket_sendmsg+0x82/0xa0 [ 765.727440][T14140] sock_write_iter+0x29c/0x380 [ 765.732311][T14140] ? sock_read_iter+0x340/0x340 [ 765.737410][T14140] ? memset+0x35/0x40 [ 765.741412][T14140] ? iov_iter_init+0xbc/0x180 [ 765.746311][T14140] vfs_write+0x802/0xf70 [ 765.750574][T14140] ? file_end_write+0x1b0/0x1b0 [ 765.755795][T14140] ? __fget_files+0x2c4/0x320 [ 765.760598][T14140] ? __fdget_pos+0x1f7/0x380 [ 765.765366][T14140] ? ksys_write+0x71/0x240 [ 765.769823][T14140] ksys_write+0x140/0x240 [ 765.774183][T14140] ? __ia32_sys_read+0x90/0x90 [ 765.779019][T14140] ? debug_smp_processor_id+0x17/0x20 [ 765.784597][T14140] __x64_sys_write+0x7b/0x90 [ 765.789217][T14140] x64_sys_call+0x8ef/0x9a0 [ 765.793849][T14140] do_syscall_64+0x4c/0xa0 [ 765.803596][T14140] ? clear_bhb_loop+0x50/0xa0 [ 765.808300][T14140] ? clear_bhb_loop+0x50/0xa0 [ 765.813170][T14140] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 765.819093][T14140] RIP: 0033:0x7f368aa51fc9 [ 765.823530][T14140] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 765.843983][T14140] RSP: 002b:00007f36894ba038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 765.852428][T14140] RAX: ffffffffffffffda RBX: 00007f368aca8fa0 RCX: 00007f368aa51fc9 [ 765.860693][T14140] RDX: 0000000000000024 RSI: 00002000000000c0 RDI: 0000000000000003 [ 765.868701][T14140] RBP: 00007f36894ba090 R08: 0000000000000000 R09: 0000000000000000 [ 765.876722][T14140] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 765.884803][T14140] R13: 00007f368aca9038 R14: 00007f368aca8fa0 R15: 00007fff261029c8 [ 765.892802][T14140] [ 765.979063][ T2887] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 765.985256][T14143] binder: 14141:14143 ioctl c0306201 0 returned -14 [ 765.994668][ T2887] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 766.006886][ T2887] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 766.015532][ T2887] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 766.017876][T14146] syz.6.4262[14146] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 766.024103][ T2887] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 766.030253][T14146] syz.6.4262[14146] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 766.036563][ T2887] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 766.066147][ T2887] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 766.074838][ T2887] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 766.084635][ T2887] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 766.093334][ T2887] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 766.102030][ T2887] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 766.120206][ T2887] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 766.129029][ T2887] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 766.138083][ T2887] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 766.147130][ T2887] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 766.156265][ T2887] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 766.164768][ T2887] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 766.173659][T14138] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4259'. [ 766.197056][T14146] netlink: 48 bytes leftover after parsing attributes in process `syz.6.4262'. [ 766.255585][ T30] kauditd_printk_skb: 57 callbacks suppressed [ 766.255602][ T30] audit: type=1326 audit(2000016534.732:6374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14160 comm="syz.7.4265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f3df28fc9 code=0x7ffc0000 [ 766.293008][ T30] audit: type=1326 audit(2000016534.732:6375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14160 comm="syz.7.4265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f9f3df28fc9 code=0x7ffc0000 [ 766.346392][T14167] netlink: 'syz.4.4264': attribute type 4 has an invalid length. [ 766.348915][ T30] audit: type=1326 audit(2000016534.732:6376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14160 comm="syz.7.4265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f3df28fc9 code=0x7ffc0000 [ 766.381521][T14166] syz.7.4267[14166] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 766.381654][T14166] syz.7.4267[14166] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 766.470761][ T30] audit: type=1326 audit(2000016534.732:6377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14160 comm="syz.7.4265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f9f3df28fc9 code=0x7ffc0000 [ 766.531872][T14171] IPv6: NLM_F_CREATE should be specified when creating new route [ 766.546454][T14171] IPv6: Can't replace route, no match found [ 766.555480][ T30] audit: type=1326 audit(2000016534.732:6378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14160 comm="syz.7.4265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f3df28fc9 code=0x7ffc0000 [ 766.613656][ T30] audit: type=1326 audit(2000016534.732:6379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14160 comm="syz.7.4265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=208 compat=0 ip=0x7f9f3df28fc9 code=0x7ffc0000 [ 766.637956][ T30] audit: type=1326 audit(2000016534.732:6380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14160 comm="syz.7.4265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f3df28fc9 code=0x7ffc0000 [ 766.662846][ T720] usb 5-1: new low-speed USB device number 54 using dummy_hcd [ 766.671167][ T30] audit: type=1326 audit(2000016534.732:6381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14160 comm="syz.7.4265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=207 compat=0 ip=0x7f9f3df28fc9 code=0x7ffc0000 [ 766.697931][ T30] audit: type=1326 audit(2000016534.732:6382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14160 comm="syz.7.4265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f3df28fc9 code=0x7ffc0000 [ 766.741520][ T30] audit: type=1326 audit(2000016534.732:6383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14160 comm="syz.7.4265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9f3df28fc9 code=0x7ffc0000 [ 767.769692][T14181] xt_hashlimit: max too large, truncated to 1048576 [ 767.796184][ T724] usb 7-1: new high-speed USB device number 54 using dummy_hcd [ 767.902751][T14198] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4277'. [ 767.922082][T14199] FAULT_INJECTION: forcing a failure. [ 767.922082][T14199] name failslab, interval 1, probability 0, space 0, times 0 [ 767.935215][T14199] CPU: 1 PID: 14199 Comm: syz.8.4275 Tainted: G W syzkaller #0 [ 767.944488][T14199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 767.954852][T14199] Call Trace: [ 767.958167][T14199] [ 767.961457][T14199] __dump_stack+0x21/0x30 [ 767.965918][T14199] dump_stack_lvl+0xee/0x150 [ 767.970935][T14199] ? show_regs_print_info+0x20/0x20 [ 767.976187][T14199] ? bpf_trace_run3+0xd1/0x1e0 [ 767.981013][T14199] ? bpf_trace_run2+0x1b0/0x1b0 [ 767.985893][T14199] dump_stack+0x15/0x20 [ 767.990423][T14199] should_fail+0x3c1/0x510 [ 767.994973][T14199] __should_failslab+0xa4/0xe0 [ 768.000169][T14199] should_failslab+0x9/0x20 [ 768.004901][T14199] slab_pre_alloc_hook+0x3b/0xe0 [ 768.010472][T14199] ? audit_log_start+0x3a4/0x8b0 [ 768.015639][T14199] kmem_cache_alloc+0x44/0x260 [ 768.020797][T14199] audit_log_start+0x3a4/0x8b0 [ 768.028870][T14199] ? audit_serial+0x30/0x30 [ 768.033382][T14199] ? signal_setup_done+0x339/0x440 [ 768.038590][T14199] ? ptrace_signal+0x460/0x460 [ 768.043641][T14199] ? fpregs_set+0x540/0x540 [ 768.048427][T14199] ? migrate_enable+0x192/0x260 [ 768.053338][T14199] ? migrate_disable+0x180/0x180 [ 768.058378][T14199] audit_seccomp+0x62/0x160 [ 768.062888][T14199] ? migrate_disable+0xd6/0x180 [ 768.068536][T14199] __seccomp_filter+0xb06/0x1900 [ 768.073595][T14199] ? __secure_computing+0x290/0x290 [ 768.079582][T14199] ? get_sigframe_size+0x10/0x10 [ 768.084555][T14199] __secure_computing+0xea/0x290 [ 768.089518][T14199] syscall_trace_enter+0xcf/0x180 [ 768.094552][T14199] syscall_enter_from_user_mode+0x1f/0x30 [ 768.100401][T14199] do_int80_syscall_32+0x34/0xb0 [ 768.105368][T14199] ? clear_bhb_loop+0x50/0xa0 [ 768.110069][T14199] ? clear_bhb_loop+0x50/0xa0 [ 768.114757][T14199] entry_INT80_compat+0x93/0x98 [ 768.119628][T14199] RIP: 0033:0x200000000006 [ 768.124142][T14199] Code: Unable to access opcode bytes at RIP 0x1fffffffffdc. [ 768.131594][T14199] RSP: 002b:00007fa06bda9a78 EFLAGS: 00000206 ORIG_RAX: 0000000000000066 [ 768.140136][T14199] RAX: ffffffffffffffda RBX: 00007fa06d5ba090 RCX: 00007fa06d362fc9 [ 768.148136][T14199] RDX: 00007fa06bda9a80 RSI: 00007fa06bda9bb0 RDI: 000000000000000d [ 768.156299][T14199] RBP: 00007fa06bdaa090 R08: 0000000000000000 R09: 0000000000000000 [ 768.164887][T14199] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 768.173439][T14199] R13: 00007fa06d5ba128 R14: 00007fa06d5ba090 R15: 00007ffe536e1708 [ 768.181799][T14199] [ 768.187081][ T720] usb 5-1: config index 0 descriptor too short (expected 1307, got 27) [ 768.195491][ T720] usb 5-1: config 0 has an invalid interface number: 0 but max is -1 [ 768.203791][ T720] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 768.213450][ T720] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 768.224943][ T724] usb 7-1: Using ep0 maxpacket: 8 [ 768.230173][ T720] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 768.246430][ T720] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 768.262654][ T720] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 768.338990][ T724] usb 7-1: config index 0 descriptor too short (expected 5924, got 36) [ 768.351162][ T724] usb 7-1: config 250 has an invalid interface number: 228 but max is -1 [ 768.354874][T14209] SELinux: failed to load policy [ 768.360437][ T724] usb 7-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 768.374325][ T724] usb 7-1: config 250 has no interface number 0 [ 768.380931][ T724] usb 7-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 768.392578][ T724] usb 7-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 768.403214][ T724] usb 7-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 768.413662][ T724] usb 7-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 768.424108][ T724] usb 7-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 768.435903][T14213] netlink: 'syz.7.4282': attribute type 32 has an invalid length. [ 768.438122][ T724] usb 7-1: config 250 interface 228 has no altsetting 0 [ 768.447214][T14213] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4282'. [ 768.567534][ T724] usb 7-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 768.578665][ T724] usb 7-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 768.587408][ T724] usb 7-1: Product: syz [ 768.591659][ T724] usb 7-1: SerialNumber: syz [ 768.634566][ T724] hub 7-1:250.228: bad descriptor, ignoring hub [ 768.641290][ T724] hub: probe of 7-1:250.228 failed with error -5 [ 769.408262][T14230] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4286'. [ 769.494407][ T724] usblp 7-1:250.228: usblp0: USB Bidirectional printer dev 54 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 769.744199][T14250] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4294'. [ 769.754013][T14250] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4294'. [ 769.763455][T14250] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4294'. [ 770.048153][ T720] usb 5-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 770.057335][ T720] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 770.066988][ T720] usb 5-1: config 0 descriptor?? [ 770.081412][T14245] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4290'. [ 770.090680][ T720] usb 5-1: can't set config #0, error -71 [ 770.097705][ T724] usb 7-1: USB disconnect, device number 54 [ 770.107885][ T720] usb 5-1: USB disconnect, device number 54 [ 770.115040][ T724] usblp0: removed [ 770.190566][T14246] SELinux: security_context_str_to_sid(system_u) failed for (dev ?, type ?) errno=-22 [ 770.200480][T14246] SELinux: security_context_str_to_sid(system_u) failed for (dev incremental-fs, type incremental-fs) errno=-22 [ 770.237974][T14254] loop8: detected capacity change from 0 to 512 [ 770.265130][T14254] EXT4-fs (loop8): Unrecognized mount option "uid>00000000000000000000" or missing value [ 770.427870][T14287] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4305'. [ 770.483154][T14292] xt_hashlimit: size too large, truncated to 1048576 [ 770.618859][T14299] bridge: RTM_NEWNEIGH with invalid ether address [ 770.666829][T14301] loop8: detected capacity change from 0 to 512 [ 770.741614][T14301] EXT4-fs (loop8): dax option not supported [ 772.031556][T14322] __nla_validate_parse: 1 callbacks suppressed [ 772.031579][T14322] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4316'. [ 773.246427][T14327] loop8: detected capacity change from 0 to 1024 [ 773.345142][T14327] EXT4-fs error (device loop8): ext4_read_block_bitmap_nowait:476: comm syz.8.4317: Invalid block bitmap block 0 in block_group 0 [ 773.359157][T14327] __quota_error: 119 callbacks suppressed [ 773.359178][T14327] Quota error (device loop8): write_blk: dquota write failed [ 773.372503][T14327] Quota error (device loop8): qtree_write_dquot: Error -117 occurred while creating quota [ 773.382792][T14327] EXT4-fs error (device loop8): ext4_acquire_dquot:6200: comm syz.8.4317: Failed to acquire dquot type 0 [ 773.395549][T14327] EXT4-fs error (device loop8): ext4_free_blocks:6218: comm syz.8.4317: Freeing blocks not in datazone - block = 0, count = 4096 [ 773.410077][T14327] EXT4-fs error (device loop8): ext4_read_inode_bitmap:140: comm syz.8.4317: Invalid inode bitmap blk 0 in block_group 0 [ 773.423156][T14327] EXT4-fs error (device loop8) in ext4_free_inode:362: Corrupt filesystem [ 773.432005][T14327] EXT4-fs (loop8): 1 orphan inode deleted [ 773.437983][T14327] EXT4-fs (loop8): mounted filesystem without journal. Opts: ; ,errors=continue. Quota mode: writeback. [ 773.452209][T14327] netlink: 92 bytes leftover after parsing attributes in process `syz.8.4317'. [ 773.462545][ T2887] Quota error (device loop8): remove_tree: Getting block too big (0 >= 9) [ 773.475540][ T30] audit: type=1400 audit(2000016547.322:6501): avc: denied { bind } for pid=14319 comm="syz.4.4316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 773.510526][ T2887] EXT4-fs error (device loop8): ext4_release_dquot:6236: comm kworker/u4:228: Failed to release dquot type 0 [ 773.661935][ T30] audit: type=1400 audit(2000016547.343:6502): avc: denied { listen } for pid=14319 comm="syz.4.4316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 773.682360][ T30] audit: type=1400 audit(2000016547.343:6503): avc: denied { connect } for pid=14319 comm="syz.4.4316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 774.525376][T14362] xt_hashlimit: max too large, truncated to 1048576 [ 775.114436][T14369] netlink: 'syz.8.4326': attribute type 1 has an invalid length. [ 775.122404][T14369] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4326'. [ 775.283358][ T727] usb 8-1: new high-speed USB device number 28 using dummy_hcd [ 775.587730][ T727] usb 8-1: Using ep0 maxpacket: 16 [ 775.702508][ T727] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 192, changing to 11 [ 775.769070][ T727] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 775.816377][ T30] audit: type=1400 audit(2000016549.747:6504): avc: denied { mount } for pid=14378 comm="syz.8.4332" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 776.037298][ T727] usb 8-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 776.226273][T14386] UDC core: couldn't find an available UDC or it's busy: -16 [ 776.236030][ T727] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 776.264478][ T727] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 776.272813][T14386] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 776.302666][ T727] usb 8-1: SerialNumber: syz [ 776.397874][T14365] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 776.417766][T14397] xt_bpf: check failed: parse error [ 776.473968][ T39] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 776.502932][ T30] audit: type=1400 audit(2000016550.503:6505): avc: denied { ioctl } for pid=14394 comm="syz.3.4336" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=69302 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 776.634088][ T30] audit: type=1400 audit(2000016550.618:6506): avc: denied { accept } for pid=14352 comm="syz.7.4325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 776.702619][ T30] audit: type=1326 audit(2000016550.618:6507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14352 comm="syz.7.4325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f3df28fc9 code=0x7ffc0000 [ 776.874156][ T727] cdc_ether: probe of 8-1:1.0 failed with error -22 [ 776.882612][ T727] usb 8-1: USB disconnect, device number 28 [ 777.730842][T14424] netlink: 20 bytes leftover after parsing attributes in process `syz.8.4345'. [ 778.629630][T14443] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4351'. [ 778.640443][T14443] netlink: 104 bytes leftover after parsing attributes in process `syz.6.4351'. [ 778.984244][T14454] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4356'. [ 779.452131][T14478] FAULT_INJECTION: forcing a failure. [ 779.452131][T14478] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 779.474544][T14478] CPU: 1 PID: 14478 Comm: syz.8.4365 Tainted: G W syzkaller #0 [ 779.483673][T14478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 779.494350][T14478] Call Trace: [ 779.497917][T14478] [ 779.500863][T14478] __dump_stack+0x21/0x30 [ 779.505353][T14478] dump_stack_lvl+0xee/0x150 [ 779.510400][T14478] ? show_regs_print_info+0x20/0x20 [ 779.515753][T14478] dump_stack+0x15/0x20 [ 779.520035][T14478] should_fail+0x3c1/0x510 [ 779.524467][T14478] should_fail_usercopy+0x1a/0x20 [ 779.529861][T14478] _copy_from_user+0x20/0xd0 [ 779.534562][T14478] strndup_user+0xb1/0x150 [ 779.539007][T14478] __se_sys_fsconfig+0x460/0x750 [ 779.544419][T14478] ? __x64_sys_fsconfig+0xd0/0xd0 [ 779.549667][T14478] ? __bpf_trace_sys_enter+0x62/0x70 [ 779.554993][T14478] __x64_sys_fsconfig+0xbf/0xd0 [ 779.559889][T14478] x64_sys_call+0x51b/0x9a0 [ 779.564497][T14478] do_syscall_64+0x4c/0xa0 [ 779.569145][T14478] ? clear_bhb_loop+0x50/0xa0 [ 779.573838][T14478] ? clear_bhb_loop+0x50/0xa0 [ 779.578540][T14478] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 779.584548][T14478] RIP: 0033:0x7fa06d362fc9 [ 779.588979][T14478] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 779.608695][T14478] RSP: 002b:00007fa06bdcb038 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 779.617315][T14478] RAX: ffffffffffffffda RBX: 00007fa06d5b9fa0 RCX: 00007fa06d362fc9 [ 779.625455][T14478] RDX: 0000200000000340 RSI: 0000000000000001 RDI: 0000000000000003 [ 779.633896][T14478] RBP: 00007fa06bdcb090 R08: 0000000000000000 R09: 0000000000000000 [ 779.641985][T14478] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000001 [ 779.649985][T14478] R13: 00007fa06d5ba038 R14: 00007fa06d5b9fa0 R15: 00007ffe536e1708 [ 779.658017][T14478] [ 780.246152][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 780.246176][ T30] audit: type=1400 audit(2000016810.408:6521): avc: denied { remove_name } for pid=5732 comm="syz-executor" name=".index" dev="loop7" ino=1048615 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 780.309880][T14491] netlink: 44 bytes leftover after parsing attributes in process `syz.8.4369'. [ 780.373442][T14497] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4372'. [ 780.391386][ T30] audit: type=1400 audit(2000016810.419:6522): avc: denied { rmdir } for pid=5732 comm="syz-executor" name=".index" dev="loop7" ino=1048615 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 780.639725][ T30] audit: type=1400 audit(2000016810.839:6523): avc: denied { ioctl } for pid=14505 comm="syz.3.4376" path="/dev/uhid" dev="devtmpfs" ino=263 ioctlcmd=0xf509 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 781.428287][T14503] bridge0: port 1(bridge_slave_0) entered blocking state [ 781.435391][T14503] bridge0: port 1(bridge_slave_0) entered disabled state [ 781.456915][T14503] device bridge_slave_0 entered promiscuous mode [ 781.484772][T14503] bridge0: port 2(bridge_slave_1) entered blocking state [ 781.514217][T14503] bridge0: port 2(bridge_slave_1) entered disabled state [ 781.525296][T14503] device bridge_slave_1 entered promiscuous mode [ 781.551636][T14526] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4378'. [ 781.636469][ T30] audit: type=1326 audit(2000016811.878:6524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14529 comm="syz.3.4381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f199e841fc9 code=0x7ffc0000 [ 781.748567][ T30] audit: type=1326 audit(2000016811.878:6525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14529 comm="syz.3.4381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f199e841fc9 code=0x7ffc0000 [ 781.821843][ T2887] tipc: Disabling bearer [ 781.828677][ T2887] tipc: Disabling bearer [ 781.840363][ T2887] tipc: Left network mode [ 781.845156][T14530] audit: audit_backlog=65 > audit_backlog_limit=64 [ 781.854787][T14530] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 [ 781.864571][ T30] audit: type=1326 audit(2000016811.878:6526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14529 comm="syz.3.4381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f199e841fc9 code=0x7ffc0000 [ 781.892038][T14530] audit: backlog limit exceeded [ 781.892223][ T30] audit: type=1326 audit(2000016811.909:6527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14529 comm="syz.3.4381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f199e841fc9 code=0x7ffc0000 [ 781.940459][T11669] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 781.955029][T11669] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 781.967182][T14545] syz.3.4383[14545] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 781.967304][T14545] syz.3.4383[14545] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 781.981296][T11669] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 782.018090][T11669] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 782.026731][T11669] bridge0: port 1(bridge_slave_0) entered blocking state [ 782.033951][T11669] bridge0: port 1(bridge_slave_0) entered forwarding state [ 782.043430][T11669] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 782.052169][T11669] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 782.067188][T11669] bridge0: port 2(bridge_slave_1) entered blocking state [ 782.074423][T11669] bridge0: port 2(bridge_slave_1) entered forwarding state [ 782.083025][T11669] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 782.094133][T14548] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4384'. [ 782.115668][T11669] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 782.137381][T11669] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 782.228485][T14503] device veth0_vlan entered promiscuous mode [ 782.252876][T11669] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 782.262415][T11669] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 782.270913][T11669] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 782.279299][T11669] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 782.328949][ T2763] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 782.407854][T14556] netlink: 460 bytes leftover after parsing attributes in process `syz.3.4386'. [ 782.614368][T14503] device veth1_macvtap entered promiscuous mode [ 782.644095][ T2763] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 782.662879][ T2763] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 782.718204][T14564] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4368'. [ 782.764831][T14566] tipc: Started in network mode [ 782.769915][T14566] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 782.780020][T14566] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 782.788435][T14566] tipc: Enabled bearer , priority 10 [ 782.803127][ T2887] device vlan2 left promiscuous mode [ 782.812658][ T2887] device bridge0 left promiscuous mode [ 782.822568][ T2887] bridge1: port 1(vlan2) entered disabled state [ 782.830783][ T2887] device bridge_slave_1 left promiscuous mode [ 782.852597][ T2887] bridge0: port 2(bridge_slave_1) entered disabled state [ 782.870747][ T2887] device bridge_slave_0 left promiscuous mode [ 782.884739][ T2887] bridge0: port 1(bridge_slave_0) entered disabled state [ 782.909305][ T2887] device veth1_macvtap left promiscuous mode [ 782.922724][ T2887] device veth0_vlan left promiscuous mode [ 784.179371][ T8147] tipc: Node number set to 1 [ 784.190798][T14591] syz.3.4398[14591] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 784.190881][T14591] syz.3.4398[14591] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 784.232861][T14589] SELinux: failed to load policy [ 784.287044][T14598] netlink: 'syz.3.4399': attribute type 32 has an invalid length. [ 784.295286][T14598] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4399'. [ 784.556926][T14615] FAULT_INJECTION: forcing a failure. [ 784.556926][T14615] name failslab, interval 1, probability 0, space 0, times 0 [ 784.569722][T14615] CPU: 0 PID: 14615 Comm: syz.6.4405 Tainted: G W syzkaller #0 [ 784.578593][T14615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 784.589114][T14615] Call Trace: [ 784.592419][T14615] [ 784.595356][T14615] __dump_stack+0x21/0x30 [ 784.599713][T14615] dump_stack_lvl+0xee/0x150 [ 784.604320][T14615] ? show_regs_print_info+0x20/0x20 [ 784.609551][T14615] ? bpf_trace_run3+0xd1/0x1e0 [ 784.614452][T14615] ? bpf_trace_run2+0x1b0/0x1b0 [ 784.619311][T14615] dump_stack+0x15/0x20 [ 784.623575][T14615] should_fail+0x3c1/0x510 [ 784.628095][T14615] __should_failslab+0xa4/0xe0 [ 784.633047][T14615] should_failslab+0x9/0x20 [ 784.637595][T14615] slab_pre_alloc_hook+0x3b/0xe0 [ 784.642568][T14615] ? audit_log_start+0x3a4/0x8b0 [ 784.647711][T14615] kmem_cache_alloc+0x44/0x260 [ 784.652493][T14615] audit_log_start+0x3a4/0x8b0 [ 784.657271][T14615] ? audit_serial+0x30/0x30 [ 784.661937][T14615] ? signal_setup_done+0x339/0x440 [ 784.667098][T14615] ? ptrace_signal+0x460/0x460 [ 784.671888][T14615] ? fpregs_set+0x540/0x540 [ 784.676410][T14615] ? migrate_enable+0x192/0x260 [ 784.681315][T14615] ? migrate_disable+0x180/0x180 [ 784.686261][T14615] audit_seccomp+0x62/0x160 [ 784.690792][T14615] ? migrate_disable+0xd6/0x180 [ 784.695688][T14615] __seccomp_filter+0xb06/0x1900 [ 784.700681][T14615] ? __secure_computing+0x290/0x290 [ 784.706016][T14615] ? get_sigframe_size+0x10/0x10 [ 784.711014][T14615] ? __ia32_sys_read+0x90/0x90 [ 784.715816][T14615] __secure_computing+0xea/0x290 [ 784.720792][T14615] syscall_trace_enter+0xcf/0x180 [ 784.725830][T14615] syscall_enter_from_user_mode+0x1f/0x30 [ 784.731561][T14615] do_int80_syscall_32+0x34/0xb0 [ 784.736603][T14615] ? clear_bhb_loop+0x50/0xa0 [ 784.741381][T14615] ? clear_bhb_loop+0x50/0xa0 [ 784.746078][T14615] entry_INT80_compat+0x93/0x98 [ 784.751023][T14615] RIP: 0033:0x200000000006 [ 784.755456][T14615] Code: Unable to access opcode bytes at RIP 0x1fffffffffdc. [ 784.762819][T14615] RSP: 002b:00007f3689498a78 EFLAGS: 00000206 ORIG_RAX: 0000000000000066 [ 784.771251][T14615] RAX: ffffffffffffffda RBX: 00007f368aca9090 RCX: 00007f368aa51fc9 [ 784.779231][T14615] RDX: 00007f3689498a80 RSI: 00007f3689498bb0 RDI: 000000000000000d [ 784.787428][T14615] RBP: 00007f3689499090 R08: 0000000000000000 R09: 0000000000000000 [ 784.795540][T14615] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 784.803617][T14615] R13: 00007f368aca9128 R14: 00007f368aca9090 R15: 00007fff261029c8 [ 784.811727][T14615] [ 784.936918][T14583] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -4 [ 784.946439][T14583] platform regulatory.0: Direct firmware load for regulatory.db failed with error -4 [ 784.996826][T14600] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4400'. [ 785.034423][ T30] kauditd_printk_skb: 114 callbacks suppressed [ 785.034439][ T30] audit: type=1326 audit(2000016815.447:6640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14627 comm="syz.7.4411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe61c2f9fc9 code=0x7ffc0000 [ 785.067286][ T30] audit: type=1326 audit(2000016815.489:6642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14620 comm="syz.4.4407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9e3ae6fc9 code=0x7ffc0000 [ 785.093715][ T30] audit: type=1326 audit(2000016815.489:6643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14620 comm="syz.4.4407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9e3ae6fc9 code=0x7ffc0000 [ 785.117449][ T30] audit: type=1326 audit(2000016815.489:6641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14627 comm="syz.7.4411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe61c2f9fc9 code=0x7ffc0000 [ 785.145362][ T30] audit: type=1326 audit(2000016815.489:6644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14627 comm="syz.7.4411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe61c2f9fc9 code=0x7ffc0000 [ 785.169246][ T30] audit: type=1326 audit(2000016815.489:6645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14627 comm="syz.7.4411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe61c2f9fc9 code=0x7ffc0000 [ 785.193374][ T30] audit: type=1326 audit(2000016815.489:6646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14627 comm="syz.7.4411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe61c2f9fc9 code=0x7ffc0000 [ 785.218387][ T30] audit: type=1326 audit(2000016815.489:6647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14627 comm="syz.7.4411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe61c2f9fc9 code=0x7ffc0000 [ 785.242771][ T30] audit: type=1326 audit(2000016815.489:6648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14627 comm="syz.7.4411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe61c2f9fc9 code=0x7ffc0000 [ 785.266792][ T30] audit: type=1326 audit(2000016815.489:6649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14627 comm="syz.7.4411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe61c2f9fc9 code=0x7ffc0000 [ 785.565605][T14665] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4421'. [ 785.884804][T14673] loop7: detected capacity change from 0 to 512 [ 787.750427][T14674] loop8: detected capacity change from 0 to 1024 [ 787.785356][T14674] EXT4-fs (loop8): Mount option "nouser_xattr" will be removed by 3.5 [ 787.785356][T14674] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 787.785356][T14674] [ 787.829076][ T56] usb 7-1: new high-speed USB device number 55 using dummy_hcd [ 787.866004][T14673] EXT4-fs (loop7): orphan cleanup on readonly fs [ 787.874117][T14673] EXT4-fs error (device loop7): ext4_acquire_dquot:6200: comm syz.7.4422: Failed to acquire dquot type 1 [ 787.926167][T14674] EXT4-fs (loop8): mounted filesystem without journal. Opts: nouser_xattr,auto_da_alloc=0x0000000000000008,,errors=continue. Quota mode: none. [ 787.967902][T14674] netlink: 'syz.8.4423': attribute type 4 has an invalid length. [ 788.236090][T14674] syz.8.4423 (14674) used greatest stack depth: 20312 bytes left [ 788.285412][ T56] usb 7-1: Using ep0 maxpacket: 32 [ 788.380841][ T56] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 788.466961][T14673] EXT4-fs (loop7): 1 truncate cleaned up [ 788.472844][T14673] EXT4-fs (loop7): mounted filesystem without journal. Opts: noinit_itable,,errors=continue. Quota mode: writeback. [ 788.494121][T14670] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12 sclass=netlink_route_socket pid=14670 comm=syz.7.4422 [ 788.635791][T14693] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4425'. [ 789.007406][T14670] EXT4-fs error (device loop7): ext4_lookup:1862: inode #2: comm syz.7.4422: deleted inode referenced: 12 [ 789.027495][ T56] usb 7-1: can't read configurations, error -71 [ 789.110890][T14698] tipc: Started in network mode [ 789.121480][T14698] tipc: Node identity ac14140f, cluster identity 4711 [ 789.128944][T14698] tipc: New replicast peer: 255.255.255.255 [ 789.135305][T14698] tipc: Enabled bearer , priority 10 [ 789.154635][T14696] SELinux: failed to load policy [ 789.195733][T14702] xt_hashlimit: size too large, truncated to 1048576 [ 789.261498][T14707] loop7: detected capacity change from 0 to 512 [ 789.375340][T14707] EXT4-fs error (device loop7): ext4_orphan_get:1427: comm syz.7.4429: bad orphan inode 16 [ 789.394456][T14712] xt_bpf: check failed: parse error [ 789.400897][T14707] ext4_test_bit(bit=15, block=18) = 0 [ 789.418916][T14707] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 789.483387][T14707] ext4 filesystem being mounted at /10/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 789.558906][T14720] netlink: 'syz.4.4434': attribute type 27 has an invalid length. [ 789.569444][T14720] device wg2 left promiscuous mode [ 789.660550][T14720] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 789.705843][T14720] device veth0_vlan left promiscuous mode [ 789.720230][T14720] device veth0_vlan entered promiscuous mode [ 789.758589][T14720] device veth1_macvtap left promiscuous mode [ 789.812782][T14732] loop7: detected capacity change from 0 to 1024 [ 789.842698][T14720] device veth1_macvtap entered promiscuous mode [ 789.873909][T14720] bridge1: port 1(vlan2) entered blocking state [ 789.880651][T14720] bridge1: port 1(vlan2) entered forwarding state [ 789.898199][T14732] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:476: comm syz.7.4436: Invalid block bitmap block 0 in block_group 0 [ 789.913105][T14732] __quota_error: 79 callbacks suppressed [ 789.913136][T14732] Quota error (device loop7): write_blk: dquota write failed [ 789.926706][T14732] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 789.936953][T14732] EXT4-fs error (device loop7): ext4_acquire_dquot:6200: comm syz.7.4436: Failed to acquire dquot type 0 [ 789.952344][T14732] EXT4-fs error (device loop7): ext4_free_blocks:6218: comm syz.7.4436: Freeing blocks not in datazone - block = 0, count = 4096 [ 789.967804][T14732] EXT4-fs error (device loop7): ext4_read_inode_bitmap:140: comm syz.7.4436: Invalid inode bitmap blk 0 in block_group 0 [ 789.981639][T14732] EXT4-fs error (device loop7) in ext4_free_inode:362: Corrupt filesystem [ 789.991990][T14732] EXT4-fs (loop7): 1 orphan inode deleted [ 789.997871][T14732] EXT4-fs (loop7): mounted filesystem without journal. Opts: ; ,errors=continue. Quota mode: writeback. [ 790.024639][T11669] Quota error (device loop7): remove_tree: Getting block too big (0 >= 9) [ 790.093280][T11669] EXT4-fs error (device loop7): ext4_release_dquot:6236: comm kworker/u4:0: Failed to release dquot type 0 [ 790.285165][ T432] tipc: Node number set to 2886997007 [ 790.285488][T14720] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 790.367664][ T2763] bridge1: port 1(vlan2) entered disabled state [ 790.405181][ T2763] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 790.581942][ T2763] bridge0: port 1(bridge_slave_0) entered blocking state [ 790.589113][ T2763] bridge0: port 1(bridge_slave_0) entered forwarding state [ 790.599737][ T2763] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 790.634547][ T2763] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 790.660248][ T2763] bridge0: port 2(bridge_slave_1) entered blocking state [ 790.667875][ T2763] bridge0: port 2(bridge_slave_1) entered forwarding state [ 790.738589][ T2763] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 790.749204][T14737] netlink: 124 bytes leftover after parsing attributes in process `syz.3.4437'. [ 790.786481][ T2763] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 790.799834][T14737] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4437'. [ 790.831151][ T2763] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 790.867227][ T2763] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 790.901864][ T2763] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 790.911221][ T2763] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 790.920427][ T2763] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 790.929143][ T2763] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 790.938177][ T2763] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 790.946714][ T2763] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 790.956830][ T2763] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 790.965573][ T2763] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 790.975104][ T2763] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 790.983836][ T2763] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 790.992726][ T2763] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 791.001669][ T2763] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 791.009861][ T2763] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 791.018201][ T2763] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 791.027118][ T2763] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 791.048768][ T2763] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 791.067719][ T2763] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 791.078558][ T2763] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 791.087322][ T2763] IPv6: ADDRCONF(NETDEV_CHANGE): vlan3: link becomes ready [ 791.096142][ T2763] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 791.104087][ T2763] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 791.114261][ T2763] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 791.123168][ T2763] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 791.131941][ T2763] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 791.139926][ T2763] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 791.148055][ T2763] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 791.156551][T14735] netlink: 36 bytes leftover after parsing attributes in process `syz.8.4438'. [ 791.165740][T14735] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4438'. [ 791.176812][T14743] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4441'. [ 791.196127][ T2763] IPv6: ADDRCONF(NETDEV_CHANGE): macsec1: link becomes ready [ 791.206388][ T2763] bridge1: port 1(vlan2) entered blocking state [ 791.212726][ T2763] bridge1: port 1(vlan2) entered forwarding state [ 791.221106][ T2763] IPv6: ADDRCONF(NETDEV_CHANGE): bridge1: link becomes ready [ 791.231354][T14745] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4442'. [ 791.267020][T14747] SELinux: failed to load policy [ 791.311567][ T56] usb 8-1: new high-speed USB device number 29 using dummy_hcd [ 791.387358][T14760] loop8: detected capacity change from 0 to 4096 [ 791.452707][T14763] netlink: 460 bytes leftover after parsing attributes in process `syz.6.4444'. [ 791.519084][T14760] EXT4-fs (loop8): Test dummy encryption mode enabled [ 791.673964][T14760] EXT4-fs (loop8): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000008000000,barrier,dioread_nolock,test_dummy_encryption,nobarrier,grpjquota=,dioread_nolock,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 791.734113][ T56] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 791.752698][ T56] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 791.771734][ T56] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 791.946265][T14775] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4451'. [ 791.956168][ T56] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice=fc.40 [ 791.965944][ T56] usb 8-1: New USB device strings: Mfr=234, Product=2, SerialNumber=3 [ 791.974476][ T56] usb 8-1: Product: syz [ 791.978927][ T56] usb 8-1: Manufacturer: syz [ 791.983876][ T56] usb 8-1: SerialNumber: syz [ 792.149045][T14784] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4455'. [ 792.179423][T14787] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 792.189410][T14787] SELinux: failed to load policy [ 792.342175][ T56] usblp 8-1:1.0: usblp0: USB Unidirectional printer dev 29 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 793.196875][ T30] audit: type=1326 audit(2000016824.014:6727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14788 comm="syz.4.4457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9e3ae6fc9 code=0x7fc00000 [ 793.248211][ T30] audit: type=1326 audit(2000016824.014:6728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14788 comm="syz.4.4457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe9e3ae6fc9 code=0x7fc00000 [ 793.273260][ T30] audit: type=1326 audit(2000016824.014:6729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14788 comm="syz.4.4457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9e3ae6fc9 code=0x7fc00000 [ 793.400826][ T724] usb 9-1: new full-speed USB device number 3 using dummy_hcd [ 793.651336][ T432] usb 8-1: USB disconnect, device number 29 [ 793.750411][ T432] usblp0: removed [ 793.850951][T14817] SELinux: security_context_str_to_sid(s) failed for (dev ?, type ?) errno=-22 [ 793.860955][T14817] incfs_lookup_dentry err:-5 [ 793.865613][T14817] incfs: Can't find or create .index dir in ./file0 [ 793.872496][T14817] incfs: mount failed -5 [ 793.930608][T14819] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 793.940381][T14819] SELinux: failed to load policy [ 793.958967][T14821] input: syz1 as /devices/virtual/input/input48 [ 793.967037][ T30] audit: type=1400 audit(2000016824.832:6730): avc: denied { read } for pid=86 comm="acpid" name="event3" dev="devtmpfs" ino=1619 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 793.970746][T14821] syz.3.4469[14821] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 793.992069][ T30] audit: type=1400 audit(2000016824.832:6731): avc: denied { open } for pid=86 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=1619 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 793.992088][T14821] syz.3.4469[14821] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 794.029847][ T30] audit: type=1400 audit(2000016824.832:6732): avc: denied { ioctl } for pid=86 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=1619 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 794.096024][ T724] usb 9-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 794.109504][ T724] usb 9-1: config 1 has no interface number 1 [ 794.131583][ T724] usb 9-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 794.368316][ T724] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 794.420142][ T724] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 794.428909][ T724] usb 9-1: Product: syz [ 794.436531][ T724] usb 9-1: Manufacturer: syz [ 794.443197][ T724] usb 9-1: SerialNumber: syz [ 795.388925][T14849] __nla_validate_parse: 1 callbacks suppressed [ 795.388961][T14849] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4475'. [ 796.059456][ T724] usb 9-1: 2:1 : unsupported format bits 0x8000000000000000 [ 796.081042][ T724] usb 9-1: USB disconnect, device number 3 [ 796.253768][T14861] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 796.264192][T14861] SELinux: failed to load policy [ 796.295407][ T30] audit: type=1400 audit(2000016827.268:6733): avc: denied { setattr } for pid=14865 comm="syz.4.4481" name="AF_VSOCK" dev="sockfs" ino=71391 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 796.339129][ T30] audit: type=1400 audit(2000016827.320:6734): avc: denied { ioctl } for pid=14865 comm="syz.4.4481" path="socket:[71400]" dev="sockfs" ino=71400 ioctlcmd=0x9432 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 796.387843][T14871] FAULT_INJECTION: forcing a failure. [ 796.387843][T14871] name failslab, interval 1, probability 0, space 0, times 0 [ 796.403712][T14871] CPU: 1 PID: 14871 Comm: syz.4.4483 Tainted: G W syzkaller #0 [ 796.412628][T14871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 796.422713][T14871] Call Trace: [ 796.426039][T14871] [ 796.428988][T14871] __dump_stack+0x21/0x30 [ 796.433440][T14871] dump_stack_lvl+0xee/0x150 [ 796.438056][T14871] ? show_regs_print_info+0x20/0x20 [ 796.443278][T14871] ? stack_trace_save+0x98/0xe0 [ 796.448142][T14871] dump_stack+0x15/0x20 [ 796.452314][T14871] should_fail+0x3c1/0x510 [ 796.456745][T14871] __should_failslab+0xa4/0xe0 [ 796.461879][T14871] should_failslab+0x9/0x20 [ 796.466400][T14871] slab_pre_alloc_hook+0x3b/0xe0 [ 796.471348][T14871] ? __alloc_skb+0xe0/0x740 [ 796.475859][T14871] kmem_cache_alloc+0x44/0x260 [ 796.480634][T14871] __alloc_skb+0xe0/0x740 [ 796.484973][T14871] netlink_dump+0x1d3/0xd40 [ 796.489488][T14871] ? unwind_get_return_address+0x4d/0x90 [ 796.495407][T14871] ? stack_trace_save+0xe0/0xe0 [ 796.500290][T14871] ? arch_stack_walk+0xee/0x140 [ 796.505329][T14871] ? refcount_inc+0x80/0x80 [ 796.510020][T14871] ? wait_for_completion_killable_timeout+0x10/0x10 [ 796.516628][T14871] ? __netlink_lookup+0x387/0x3b0 [ 796.521670][T14871] __netlink_dump_start+0x5ea/0x810 [ 796.526886][T14871] rtnetlink_rcv_msg+0x7a6/0xb90 [ 796.531835][T14871] ? rtnl_fdb_get+0xc80/0xc80 [ 796.536830][T14871] ? rtnetlink_bind+0x80/0x80 [ 796.541621][T14871] ? memcpy+0x56/0x70 [ 796.545785][T14871] ? avc_has_perm_noaudit+0x2f4/0x460 [ 796.551194][T14871] ? arch_stack_walk+0xee/0x140 [ 796.556098][T14871] ? avc_denied+0x1b0/0x1b0 [ 796.560900][T14871] ? stack_trace_save+0x98/0xe0 [ 796.565783][T14871] ? avc_has_perm+0x158/0x240 [ 796.570478][T14871] ? avc_has_perm_noaudit+0x460/0x460 [ 796.575866][T14871] ? __x64_sys_write+0x7b/0x90 [ 796.580645][T14871] ? rtnl_fdb_get+0xc80/0xc80 [ 796.585371][T14871] netlink_rcv_skb+0x1e0/0x430 [ 796.590149][T14871] ? rtnetlink_bind+0x80/0x80 [ 796.595099][T14871] ? netlink_ack+0xb60/0xb60 [ 796.599701][T14871] ? __netlink_lookup+0x387/0x3b0 [ 796.604736][T14871] rtnetlink_rcv+0x1c/0x20 [ 796.609173][T14871] netlink_unicast+0x876/0xa40 [ 796.613948][T14871] netlink_sendmsg+0x86a/0xb70 [ 796.618830][T14871] ? netlink_getsockopt+0x530/0x530 [ 796.624060][T14871] ? security_socket_sendmsg+0x82/0xa0 [ 796.629567][T14871] sock_write_iter+0x29c/0x380 [ 796.634374][T14871] ? sock_read_iter+0x340/0x340 [ 796.639242][T14871] ? memset+0x35/0x40 [ 796.643234][T14871] ? iov_iter_init+0xbc/0x180 [ 796.647927][T14871] vfs_write+0x802/0xf70 [ 796.652187][T14871] ? file_end_write+0x1b0/0x1b0 [ 796.657084][T14871] ? __fget_files+0x2c4/0x320 [ 796.661794][T14871] ? __fdget_pos+0x1f7/0x380 [ 796.666398][T14871] ? ksys_write+0x71/0x240 [ 796.670914][T14871] ksys_write+0x140/0x240 [ 796.675257][T14871] ? __ia32_sys_read+0x90/0x90 [ 796.680041][T14871] ? debug_smp_processor_id+0x17/0x20 [ 796.685420][T14871] __x64_sys_write+0x7b/0x90 [ 796.690030][T14871] x64_sys_call+0x8ef/0x9a0 [ 796.694632][T14871] do_syscall_64+0x4c/0xa0 [ 796.699084][T14871] ? clear_bhb_loop+0x50/0xa0 [ 796.703987][T14871] ? clear_bhb_loop+0x50/0xa0 [ 796.708681][T14871] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 796.714614][T14871] RIP: 0033:0x7fe9e3ae6fc9 [ 796.719163][T14871] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 796.738893][T14871] RSP: 002b:00007fe9e254f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 796.747499][T14871] RAX: ffffffffffffffda RBX: 00007fe9e3d3dfa0 RCX: 00007fe9e3ae6fc9 [ 796.755598][T14871] RDX: 0000000000000024 RSI: 00002000000000c0 RDI: 0000000000000003 [ 796.763585][T14871] RBP: 00007fe9e254f090 R08: 0000000000000000 R09: 0000000000000000 [ 796.771570][T14871] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 796.779573][T14871] R13: 00007fe9e3d3e038 R14: 00007fe9e3d3dfa0 R15: 00007ffc77959dc8 [ 796.787586][T14871] [ 796.791759][T14874] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4485'. [ 796.817297][ T30] audit: type=1400 audit(2000016827.814:6735): avc: denied { setattr } for pid=14873 comm="syz.8.4484" name="/" dev="configfs" ino=13790 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 796.848288][ T30] audit: type=1400 audit(2000016827.824:6736): avc: denied { unmount } for pid=14051 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 796.885671][T14881] loop7: detected capacity change from 0 to 4096 [ 796.925961][T14881] EXT4-fs (loop7): Test dummy encryption mode enabled [ 797.031541][T14893] SELinux: failed to load policy [ 797.039043][T14881] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 797.048204][T14881] System zones: 0-5 [ 797.053491][T14881] EXT4-fs (loop7): mounted filesystem without journal. Opts: debug,delalloc,resuid=0x0000000000000000,test_dummy_encryption,nodiscard,data_err=ignore,acl,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 797.086459][ T30] audit: type=1400 audit(2000016828.097:6737): avc: denied { mounton } for pid=14880 comm="syz.7.4489" path="/17/file0/file0" dev="loop7" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 799.060013][T14907] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4496'. [ 799.082295][ T30] audit: type=1400 audit(2000016830.197:6738): avc: denied { map } for pid=14880 comm="syz.7.4489" path="pipe:[69490]" dev="pipefs" ino=69490 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 799.114805][ T30] audit: type=1400 audit(2000016830.228:6739): avc: denied { mounton } for pid=14906 comm="syz.8.4495" path="/50/file0" dev="tmpfs" ino=281 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 799.138030][T14910] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4496'. [ 799.161445][ T30] audit: type=1400 audit(2000016830.281:6740): avc: denied { watch } for pid=14906 comm="syz.8.4495" path="/50/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 799.616960][T14922] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4500'. [ 799.713958][T14929] syz.7.4498[14929] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 799.714418][T14929] syz.7.4498[14929] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 799.734731][T14929] xt_hashlimit: max too large, truncated to 1048576 [ 799.753869][T14929] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 799.783525][T14929] loop7: detected capacity change from 0 to 256 [ 799.849374][T14927] SELinux: policydb magic number 0x6b7a7973 does not match expected magic number 0xf97cff8c [ 799.867724][T14929] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66f6fd, utbl_chksum : 0xe619d30d) [ 799.947000][T14927] SELinux: failed to load policy [ 800.651773][T14944] netlink: 580 bytes leftover after parsing attributes in process `syz.3.4504'. [ 801.748967][T14966] syz.3.4512[14966] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 801.750546][T14966] syz.3.4512[14966] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 802.208319][ T30] audit: type=1326 audit(2000016833.472:6741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14957 comm="syz.3.4512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f199e841fc9 code=0x7ffc0000 [ 803.267787][T14976] loop7: detected capacity change from 0 to 4096 [ 803.283443][T14979] IPv6: sit1: Disabled Multicast RS [ 803.303027][ T30] audit: type=1326 audit(2000016833.472:6742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14957 comm="syz.3.4512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f199e841fc9 code=0x7ffc0000 [ 803.362319][T14976] EXT4-fs (loop7): Test dummy encryption mode enabled [ 803.387206][T14976] EXT4-fs (loop7): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000008000000,barrier,dioread_nolock,test_dummy_encryption,nobarrier,grpjquota=,dioread_nolock,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 803.435951][ T30] audit: type=1326 audit(2000016833.472:6743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14957 comm="syz.3.4512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f199e841fc9 code=0x7ffc0000 [ 803.471469][T14985] loop8: detected capacity change from 0 to 512 [ 803.517603][T14985] EXT4-fs (loop8): dax option not supported [ 803.526879][ T30] audit: type=1326 audit(2000016833.472:6744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14957 comm="syz.3.4512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f199e841fc9 code=0x7ffc0000 [ 803.618816][ T30] audit: type=1326 audit(2000016833.472:6745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14957 comm="syz.3.4512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f199e841fc9 code=0x7ffc0000 [ 803.697813][ T30] audit: type=1326 audit(2000016833.472:6746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14957 comm="syz.3.4512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f199e841fc9 code=0x7ffc0000 [ 803.722538][ T30] audit: type=1326 audit(2000016833.472:6747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14957 comm="syz.3.4512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f199e841fc9 code=0x7ffc0000 [ 803.747320][ T30] audit: type=1326 audit(2000016833.472:6748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14957 comm="syz.3.4512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f199e841fc9 code=0x7ffc0000 [ 803.770985][ T30] audit: type=1326 audit(2000016833.472:6749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14957 comm="syz.3.4512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f199e841fc9 code=0x7ffc0000 [ 803.794820][ T30] audit: type=1326 audit(2000016833.472:6750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14957 comm="syz.3.4512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f199e841fc9 code=0x7ffc0000 [ 803.909799][T14992] bridge: RTM_NEWNEIGH with invalid ether address [ 803.919680][T14992] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4521'. [ 803.933324][T14994] xt_hashlimit: max too large, truncated to 1048576 [ 804.781368][T15000] loop7: detected capacity change from 0 to 512 [ 804.790380][T15001] netlink: 'syz.6.4525': attribute type 1 has an invalid length. [ 804.798609][T15001] netlink: 76 bytes leftover after parsing attributes in process `syz.6.4525'. [ 804.819169][T15000] EXT4-fs error (device loop7): ext4_xattr_ibody_find:2228: inode #15: comm syz.7.4522: corrupted in-inode xattr [ 804.835830][T15001] incfs: Can't find or create .index dir in ./file0 [ 804.843035][T15001] incfs: mount failed -14 [ 804.958868][T15000] EXT4-fs error (device loop7): ext4_orphan_get:1406: comm syz.7.4522: couldn't read orphan inode 15 (err -117) [ 805.125672][T15000] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 805.163764][T15011] tipc: Enabling of bearer rejected, already enabled [ 805.289469][T15020] netlink: 76 bytes leftover after parsing attributes in process `syz.3.4531'. [ 805.341140][T15026] netlink: 112 bytes leftover after parsing attributes in process `syz.6.4528'. [ 805.420373][T15030] xt_hashlimit: size too large, truncated to 1048576 [ 805.479004][ T333] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 805.497478][T15033] loop7: detected capacity change from 0 to 512 [ 805.607350][T15042] xt_bpf: check failed: parse error [ 805.624861][T15033] EXT4-fs error (device loop7): ext4_orphan_get:1427: comm syz.7.4534: bad orphan inode 16 [ 805.648889][T15033] ext4_test_bit(bit=15, block=18) = 0 [ 805.655067][T15033] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 805.668923][T15033] ext4 filesystem being mounted at /24/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 805.821809][ T333] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 805.837422][ T333] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 805.857442][ T333] usb 9-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 805.877970][ T333] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 805.909478][ T333] usb 9-1: config 0 descriptor?? [ 806.460323][T15069] xt_bpf: check failed: parse error [ 806.755175][ T333] usbhid 9-1:0.0: can't add hid device: -71 [ 806.761668][ T333] usbhid: probe of 9-1:0.0 failed with error -71 [ 806.837425][ T333] usb 9-1: USB disconnect, device number 4 [ 808.039067][T15092] x_tables: ip_tables: tcp match: only valid for protocol 6 [ 808.050288][T15092] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4554'. [ 808.062945][T15092] SELinux: security_context_str_to_sid(system_u) failed for (dev ?, type ?) errno=-22 [ 808.072802][T15092] SELinux: security_context_str_to_sid(system_u) failed for (dev incremental-fs, type incremental-fs) errno=-22 [ 808.074870][T15093] futex_wake_op: syz.8.4553 tries to shift op by 36; fix this program [ 808.118004][T15095] netlink: 'syz.7.4555': attribute type 12 has an invalid length. [ 808.128435][T15098] loop8: detected capacity change from 0 to 16 [ 808.216614][T15098] erofs: (device loop8): mounted with root inode @ nid 36. [ 808.433354][T15112] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4562'. [ 809.155179][ T333] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 809.165269][T15124] tipc: Enabling of bearer rejected, already enabled [ 809.541637][T15132] netlink: 148 bytes leftover after parsing attributes in process `syz.8.4566'. [ 809.551484][T15132] netlink: 152 bytes leftover after parsing attributes in process `syz.8.4566'. [ 809.721044][T15134] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4567'. [ 809.731611][T15134] netlink: 104 bytes leftover after parsing attributes in process `syz.4.4567'. [ 809.841379][ T333] usb 4-1: Using ep0 maxpacket: 16 [ 810.041013][ T333] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 810.061629][ T333] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 810.071924][ T333] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 810.087435][ T333] usb 4-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 810.184063][ T333] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 810.526964][ T333] usb 4-1: config 0 descriptor?? [ 811.356908][ T333] usb 4-1: can't set config #0, error -71 [ 811.364613][ T333] usb 4-1: USB disconnect, device number 61 [ 811.402635][T15161] loop8: detected capacity change from 0 to 4096 [ 811.458789][T15161] EXT4-fs (loop8): Test dummy encryption mode enabled [ 811.467423][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 811.467440][ T30] audit: type=1400 audit(2000020189.202:6770): avc: denied { relabelfrom } for pid=15154 comm="syz.7.4573" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 811.494469][ T30] audit: type=1400 audit(2000020189.223:6771): avc: denied { relabelto } for pid=15154 comm="syz.7.4573" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 811.916479][T15161] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 811.961183][T15161] System zones: 0-5 [ 812.046001][T15161] EXT4-fs (loop8): mounted filesystem without journal. Opts: debug,delalloc,journal_ioprio=0x0000000000000000,test_dummy_encryption,nodiscard,min_batch_time=0x0000000000000004,acl,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 812.358871][ T2887] tipc: Disabling bearer [ 812.364229][ T2887] tipc: Left network mode [ 812.389911][T15161] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 812.426012][T15161] EXT4-fs error (device loop8): ext4_find_dest_de:2115: inode #2: block 16: comm syz.8.4576: bad entry in directory: inode out of bounds - offset=12, inode=63, rec_len=12, size=4096 fake=1 [ 812.594943][ T30] audit: type=1326 audit(2000020190.389:6772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15176 comm="syz.6.4582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f368aa51fc9 code=0x7ffc0000 [ 812.733137][T15184] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15184 comm=syz.6.4582 [ 812.741989][ T30] audit: type=1326 audit(2000020190.420:6773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15176 comm="syz.6.4582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f368aa51fc9 code=0x7ffc0000 [ 812.804075][ T30] audit: type=1326 audit(2000020190.420:6774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15176 comm="syz.6.4582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f368aa51fc9 code=0x7ffc0000 [ 812.879287][ T30] audit: type=1326 audit(2000020190.420:6775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15176 comm="syz.6.4582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f368aa51fc9 code=0x7ffc0000 [ 812.922409][ T30] audit: type=1326 audit(2000020190.420:6776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15176 comm="syz.6.4582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f368aa51fc9 code=0x7ffc0000 [ 812.947972][ T30] audit: type=1326 audit(2000020190.420:6777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15176 comm="syz.6.4582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f368aa51fc9 code=0x7ffc0000 [ 812.978961][ T30] audit: type=1326 audit(2000020190.483:6778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15176 comm="syz.6.4582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f368aa51fc9 code=0x7ffc0000 [ 813.013860][T15198] device veth0 entered promiscuous mode [ 813.053995][ T30] audit: type=1326 audit(2000020190.483:6779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15176 comm="syz.6.4582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=141 compat=0 ip=0x7f368aa51fc9 code=0x7ffc0000 [ 813.081907][T15180] bridge0: port 1(bridge_slave_0) entered blocking state [ 813.096749][T15180] bridge0: port 1(bridge_slave_0) entered disabled state [ 813.108441][T15180] device bridge_slave_0 entered promiscuous mode [ 813.143531][T15180] bridge0: port 2(bridge_slave_1) entered blocking state [ 813.152127][T15180] bridge0: port 2(bridge_slave_1) entered disabled state [ 813.163982][T15180] device bridge_slave_1 entered promiscuous mode [ 813.479642][T15198] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4588'. [ 813.544729][T15196] SELinux: ebitmap: truncated map [ 813.552807][T15208] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4590'. [ 813.567575][T15196] SELinux: failed to load policy [ 813.641470][ T363] usb 7-1: new high-speed USB device number 57 using dummy_hcd [ 813.655646][ T2887] device bridge_slave_1 left promiscuous mode [ 813.662312][ T2887] bridge0: port 2(bridge_slave_1) entered disabled state [ 813.670828][ T2887] device bridge_slave_0 left promiscuous mode [ 813.678411][ T2887] bridge0: port 1(bridge_slave_0) entered disabled state [ 813.694263][T15219] loop8: detected capacity change from 0 to 512 [ 813.739916][T15219] EXT4-fs error (device loop8): ext4_get_branch:178: inode #13: block 2: comm syz.8.4592: invalid block [ 813.752661][T15219] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #13: comm syz.8.4592: invalid indirect mapped block 10 (level 1) [ 813.767253][T15219] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #13: comm syz.8.4592: invalid indirect mapped block 8 (level 1) [ 813.783633][T15219] EXT4-fs (loop8): 1 truncate cleaned up [ 813.789656][T15219] EXT4-fs (loop8): mounted filesystem without journal. Opts: quota,,errors=continue. Quota mode: writeback. [ 813.824033][T15224] incfs: iterate_incfs_dir / -22 [ 813.902656][ T363] usb 7-1: Using ep0 maxpacket: 8 [ 814.068965][T15226] xt_CT: No such helper "pptp" [ 814.346050][ T363] usb 7-1: config 0 has an invalid descriptor of length 95, skipping remainder of the config [ 814.356597][ T363] usb 7-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 814.365938][ T363] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 814.374826][ T363] usb 7-1: config 0 descriptor?? [ 814.604626][ T56] usb 7-1: USB disconnect, device number 57 [ 814.697869][T15236] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4597'. [ 814.707098][T15236] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4597'. [ 814.716899][T15236] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4597'. [ 814.760433][T15247] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4601'. [ 814.801320][ T2763] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 814.809285][ T2763] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 814.819359][ T2763] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 814.827991][ T2763] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 814.836579][ T2763] bridge0: port 1(bridge_slave_0) entered blocking state [ 814.843921][ T2763] bridge0: port 1(bridge_slave_0) entered forwarding state [ 814.852964][ T2763] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 814.868895][ T2763] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 814.877776][ T2763] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 814.886821][ T2763] bridge0: port 2(bridge_slave_1) entered blocking state [ 814.894203][ T2763] bridge0: port 2(bridge_slave_1) entered forwarding state [ 814.912372][T15255] FAULT_INJECTION: forcing a failure. [ 814.912372][T15255] name failslab, interval 1, probability 0, space 0, times 0 [ 814.931003][ T2763] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 814.930991][T15255] CPU: 1 PID: 15255 Comm: syz.7.4603 Tainted: G W syzkaller #0 [ 814.931024][T15255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 814.939729][ T2763] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 814.948088][T15255] Call Trace: [ 814.948103][T15255] [ 814.948114][T15255] __dump_stack+0x21/0x30 [ 814.948142][T15255] dump_stack_lvl+0xee/0x150 [ 814.959286][ T2763] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 814.966403][T15255] ? show_regs_print_info+0x20/0x20 [ 814.966438][T15255] ? number+0xd1d/0xf70 [ 814.970699][ T2763] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 814.972706][T15255] dump_stack+0x15/0x20 [ 814.972737][T15255] should_fail+0x3c1/0x510 [ 814.972760][T15255] __should_failslab+0xa4/0xe0 [ 814.972783][T15255] should_failslab+0x9/0x20 [ 814.972801][T15255] slab_pre_alloc_hook+0x3b/0xe0 [ 814.972823][T15255] ? sidtab_sid2str_get+0x120/0x2c0 [ 814.972846][T15255] __kmalloc_track_caller+0x6c/0x2c0 [ 814.972867][T15255] ? sidtab_sid2str_get+0x120/0x2c0 [ 814.972887][T15255] kmemdup+0x26/0x60 [ 814.972905][T15255] sidtab_sid2str_get+0x120/0x2c0 [ 814.972926][T15255] security_sid_to_context_core+0x2ac/0x480 [ 814.972948][T15255] security_sid_to_context+0x33/0x40 [ 814.972966][T15255] selinux_secid_to_secctx+0x2c/0x40 [ 814.980878][ T2763] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 814.982167][T15255] security_secid_to_secctx+0x74/0xb0 [ 814.991331][ T2763] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 814.995616][T15255] audit_log_task_context+0xc6/0x1e0 [ 814.995646][T15255] ? audit_log_key+0x130/0x130 [ 815.004577][T15180] device veth0_vlan entered promiscuous mode [ 815.007649][T15255] ? audit_log_start+0x7aa/0x8b0 [ 815.013252][ T2763] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 815.016659][T15255] audit_log_task+0x185/0x2e0 [ 815.023745][ T2763] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 815.026034][T15255] ? ptrace_signal+0x460/0x460 [ 815.042021][T15180] device veth1_macvtap entered promiscuous mode [ 815.046970][T15255] ? audit_core_dumps+0x110/0x110 [ 815.051837][ T2763] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 815.056118][T15255] ? migrate_enable+0x192/0x260 [ 815.063369][ T2763] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 815.067909][T15255] ? migrate_disable+0x180/0x180 [ 815.074942][ T2763] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 815.081851][T15255] audit_seccomp+0x7f/0x160 [ 815.081886][T15255] __seccomp_filter+0xb06/0x1900 [ 815.088188][ T2763] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 815.095562][T15255] ? __secure_computing+0x290/0x290 [ 815.095598][T15255] ? get_sigframe_size+0x10/0x10 [ 815.102074][ T2763] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 815.105875][T15255] ? __ia32_sys_read+0x90/0x90 [ 815.122234][ T2763] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 815.124521][T15255] __secure_computing+0xea/0x290 [ 815.129773][ T2763] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 815.137034][T15255] syscall_trace_enter+0xcf/0x180 [ 815.137062][T15255] syscall_enter_from_user_mode+0x1f/0x30 [ 815.137082][T15255] do_int80_syscall_32+0x34/0xb0 [ 815.142880][ T2763] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 815.148101][T15255] ? clear_bhb_loop+0x50/0xa0 [ 815.148127][T15255] ? clear_bhb_loop+0x50/0xa0 [ 815.148146][T15255] entry_INT80_compat+0x93/0x98 [ 815.154118][ T2763] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 815.160546][T15255] RIP: 0033:0x200000000006 [ 815.160579][T15255] Code: Unable to access opcode bytes at RIP 0x1fffffffffdc. [ 815.160589][T15255] RSP: 002b:00007fe61ad40a78 EFLAGS: 00000206 ORIG_RAX: 0000000000000066 [ 815.315357][T15255] RAX: ffffffffffffffda RBX: 00007fe61c551090 RCX: 00007fe61c2f9fc9 [ 815.323460][T15255] RDX: 00007fe61ad40a80 RSI: 00007fe61ad40bb0 RDI: 000000000000000d [ 815.331669][T15255] RBP: 00007fe61ad41090 R08: 0000000000000000 R09: 0000000000000000 [ 815.339910][T15255] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 815.348118][T15255] R13: 00007fe61c551128 R14: 00007fe61c551090 R15: 00007ffec5f22268 [ 815.356217][T15255] [ 815.493866][T15261] loop8: detected capacity change from 0 to 4096 [ 815.529950][T15261] EXT4-fs (loop8): Test dummy encryption mode enabled [ 815.540193][T15261] EXT4-fs (loop8): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000008000000,barrier,dioread_nolock,test_dummy_encryption,nobarrier,grpjquota=,dioread_nolock,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 815.755612][T15269] loop9: detected capacity change from 0 to 4096 [ 815.826969][T15269] EXT4-fs (loop9): Test dummy encryption mode enabled [ 815.867070][T15269] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 815.875490][T15269] System zones: 0-5 [ 815.881033][T15269] EXT4-fs (loop9): mounted filesystem without journal. Opts: debug,delalloc,journal_ioprio=0x0000000000000000,test_dummy_encryption,nodiscard,min_batch_time=0x0000000000000004,acl,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 815.961394][T15276] loop7: detected capacity change from 0 to 4096 [ 816.005558][T15276] EXT4-fs (loop7): Ignoring removed mblk_io_submit option [ 816.023316][T15276] EXT4-fs (loop7): Quota format mount options ignored when QUOTA feature is enabled [ 816.060745][T15276] EXT4-fs (loop7): Test dummy encryption mode enabled [ 816.083100][T15276] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a840c098, mo2=0002] [ 816.091409][T15276] System zones: 0-5 [ 816.104961][T15276] EXT4-fs (loop7): mounted filesystem without journal. Opts: nolazytime,mblk_io_submit,jqfmt=vfsold,test_dummy_encryption,nobarrier,debug,lazytime,minixdf,,errors=continue. Quota mode: writeback. [ 816.359960][T15290] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4612'. [ 816.494579][T15289] xt_hashlimit: max too large, truncated to 1048576 [ 816.496221][T15292] loop9: detected capacity change from 0 to 512 [ 816.542233][T15292] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c01c, mo2=0002] [ 816.550460][T15292] System zones: 0-2, 18-18, 34-34 [ 816.556172][T15292] EXT4-fs (loop9): orphan cleanup on readonly fs [ 816.563375][T15292] EXT4-fs error (device loop9): ext4_validate_block_bitmap:438: comm syz.9.4613: bg 0: block 248: padding at end of block bitmap is not set [ 816.578470][T15292] __quota_error: 87 callbacks suppressed [ 816.578487][T15292] Quota error (device loop9): write_blk: dquota write failed [ 816.591799][T15292] Quota error (device loop9): qtree_write_dquot: Error -117 occurred while creating quota [ 816.601917][T15292] EXT4-fs error (device loop9): ext4_acquire_dquot:6200: comm syz.9.4613: Failed to acquire dquot type 1 [ 816.614134][T15292] EXT4-fs (loop9): 1 truncate cleaned up [ 816.620151][T15292] EXT4-fs (loop9): mounted filesystem without journal. Opts: discard,i_version,,errors=continue. Quota mode: writeback. [ 816.678030][T15312] device veth0 entered promiscuous mode [ 816.694048][ T30] audit: type=1400 audit(2000020194.694:6866): avc: denied { map } for pid=15306 comm="syz.7.4617" path="socket:[73756]" dev="sockfs" ino=73756 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 816.740832][ T30] audit: type=1400 audit(2000020194.736:6867): avc: denied { read } for pid=15306 comm="syz.7.4617" path="socket:[73756]" dev="sockfs" ino=73756 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 816.784840][ T30] audit: type=1400 audit(2000020194.778:6868): avc: denied { read } for pid=15306 comm="syz.7.4617" path="socket:[73755]" dev="sockfs" ino=73755 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 816.919183][T15324] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4620'. [ 817.093983][T15323] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4624'. [ 817.185568][T15319] SELinux: failed to load policy [ 818.032294][T15357] overlayfs: missing 'lowerdir' [ 818.059572][T15363] FAULT_INJECTION: forcing a failure. [ 818.059572][T15363] name failslab, interval 1, probability 0, space 0, times 0 [ 818.072319][T15363] CPU: 1 PID: 15363 Comm: syz.4.4630 Tainted: G W syzkaller #0 [ 818.081387][T15363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 818.091770][T15363] Call Trace: [ 818.095074][T15363] [ 818.098021][T15363] __dump_stack+0x21/0x30 [ 818.102374][T15363] dump_stack_lvl+0xee/0x150 [ 818.106989][T15363] ? show_regs_print_info+0x20/0x20 [ 818.112220][T15363] ? debug_smp_processor_id+0x17/0x20 [ 818.117616][T15363] ? try_charge_memcg+0x17e/0x1450 [ 818.122760][T15363] ? _raw_spin_unlock+0x4d/0x70 [ 818.127635][T15363] dump_stack+0x15/0x20 [ 818.131812][T15363] should_fail+0x3c1/0x510 [ 818.136335][T15363] __should_failslab+0xa4/0xe0 [ 818.141120][T15363] should_failslab+0x9/0x20 [ 818.145645][T15363] slab_pre_alloc_hook+0x3b/0xe0 [ 818.150606][T15363] ? xas_create+0x569/0x1580 [ 818.155402][T15363] kmem_cache_alloc+0x44/0x260 [ 818.160271][T15363] xas_create+0x569/0x1580 [ 818.164794][T15363] xas_create_range+0x211/0x720 [ 818.169680][T15363] shmem_add_to_page_cache+0x739/0xc30 [ 818.175188][T15363] ? put_page+0xb0/0xb0 [ 818.179667][T15363] ? schedule_preempt_disabled+0x20/0x20 [ 818.185334][T15363] ? __kasan_check_read+0x11/0x20 [ 818.190523][T15363] shmem_getpage_gfp+0x1164/0x2310 [ 818.195679][T15363] shmem_write_begin+0xce/0x1b0 [ 818.200567][T15363] generic_perform_write+0x2ad/0x670 [ 818.205879][T15363] ? grab_cache_page_write_begin+0xb0/0xb0 [ 818.211715][T15363] __generic_file_write_iter+0x268/0x480 [ 818.217375][T15363] generic_file_write_iter+0xa9/0x1d0 [ 818.222770][T15363] vfs_write+0x802/0xf70 [ 818.227034][T15363] ? file_end_write+0x1b0/0x1b0 [ 818.231900][T15363] ? __fget_files+0x2c4/0x320 [ 818.236605][T15363] ? __fdget_pos+0x1f7/0x380 [ 818.241301][T15363] ? ksys_write+0x71/0x240 [ 818.245730][T15363] ksys_write+0x140/0x240 [ 818.250077][T15363] ? irqentry_exit+0x37/0x40 [ 818.254726][T15363] ? __ia32_sys_read+0x90/0x90 [ 818.259517][T15363] __x64_sys_write+0x7b/0x90 [ 818.264470][T15363] x64_sys_call+0x8ef/0x9a0 [ 818.268991][T15363] do_syscall_64+0x4c/0xa0 [ 818.273509][T15363] ? clear_bhb_loop+0x50/0xa0 [ 818.278231][T15363] ? clear_bhb_loop+0x50/0xa0 [ 818.282920][T15363] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 818.288845][T15363] RIP: 0033:0x7fe9e3ae5a7f [ 818.293305][T15363] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 818.313467][T15363] RSP: 002b:00007fe9e250cdf0 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 818.321914][T15363] RAX: ffffffffffffffda RBX: 0000000000020000 RCX: 00007fe9e3ae5a7f [ 818.329941][T15363] RDX: 0000000000020000 RSI: 00007fe9da0ed000 RDI: 000000000000000b [ 818.337945][T15363] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000152e [ 818.345937][T15363] R10: 0000200000002d02 R11: 0000000000000293 R12: 000000000000000b [ 818.353931][T15363] R13: 00007fe9e250cef0 R14: 00007fe9e250ceb0 R15: 00007fe9da0ed000 [ 818.361943][T15363] [ 819.124608][ T30] audit: type=1326 audit(2000020197.235:6869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15394 comm="syz.6.4647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f368aa51fc9 code=0x7ffc0000 [ 819.155173][ T30] audit: type=1326 audit(2000020197.235:6870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15394 comm="syz.6.4647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=305 compat=0 ip=0x7f368aa51fc9 code=0x7ffc0000 [ 819.205706][ T30] audit: type=1326 audit(2000020965.251:6871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15394 comm="syz.6.4647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f368aa51fc9 code=0x7ffc0000 [ 819.231515][ T30] audit: type=1326 audit(2000020965.272:6872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15394 comm="syz.6.4647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f368aa51fc9 code=0x7ffc0000 [ 819.302660][T15408] loop7: detected capacity change from 0 to 256 [ 819.337321][T15408] exfat: Deprecated parameter 'namecase' [ 819.346592][T15408] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x8d1bf2bd, utbl_chksum : 0xe619d30d) [ 819.501624][T15417] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4654'. [ 820.178796][T15421] xt_hashlimit: max too large, truncated to 1048576 [ 820.464818][T15437] netlink: 32 bytes leftover after parsing attributes in process `syz.9.4658'. [ 820.690916][T15435] x_tables: duplicate underflow at hook 3 [ 820.698418][ T30] audit: type=1400 audit(2000020971.894:6873): avc: denied { read } for pid=15432 comm="syz.6.4660" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 821.370184][T15458] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4666'. [ 821.465143][T15462] netlink: 580 bytes leftover after parsing attributes in process `syz.6.4664'. [ 821.870500][T15469] loop8: detected capacity change from 0 to 512 [ 821.914569][T15455] loop9: detected capacity change from 0 to 512 [ 821.946946][T15469] EXT4-fs (loop8): dax option not supported [ 822.033228][T15471] xt_TCPMSS: Only works on TCP SYN packets [ 822.080112][T15455] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 822.711953][T15478] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4672'. [ 822.816445][T15455] EXT4-fs (loop9): 1 truncate cleaned up [ 822.852933][T15455] EXT4-fs (loop9): mounted filesystem without journal. Opts: noblock_validity,jqfmt=vfsv0,,errors=continue. Quota mode: none. [ 822.985121][ T432] usb 7-1: new high-speed USB device number 58 using dummy_hcd [ 823.104097][T15486] loop8: detected capacity change from 0 to 4096 [ 823.134286][T15486] EXT4-fs (loop8): Test dummy encryption mode enabled [ 823.158362][T15486] EXT4-fs (loop8): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000008000000,barrier,dioread_nolock,test_dummy_encryption,nobarrier,grpjquota=,dioread_nolock,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 823.394501][ T333] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 823.413421][ T432] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 823.424974][ T432] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 823.436212][T15498] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4678'. [ 823.566230][ T432] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 823.575394][ T432] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 823.583891][ T432] usb 7-1: SerialNumber: syz [ 823.648223][T15502] loop8: detected capacity change from 0 to 256 [ 823.655860][ T333] usb 5-1: Using ep0 maxpacket: 32 [ 823.684695][T15502] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0xf6bff195, utbl_chksum : 0xe619d30d) [ 823.776279][ T333] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 823.788009][ T333] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 823.826811][ T333] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 823.893729][ T432] usb 7-1: 0:2 : does not exist [ 823.899522][ T432] usb 7-1: unit 255 not found! [ 823.918988][ T333] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 823.945382][ T432] usb 7-1: unit 6 not found! [ 823.999176][ T333] usb 5-1: config 0 descriptor?? [ 824.008068][ T432] usb 7-1: USB disconnect, device number 58 [ 824.082333][ T333] hub 5-1:0.0: USB hub found [ 824.480280][ T333] hub 5-1:0.0: 1 port detected [ 824.488013][T15512] xt_hashlimit: size too large, truncated to 1048576 [ 824.562093][T15513] netlink: 580 bytes leftover after parsing attributes in process `syz.7.4681'. [ 824.851722][T15516] netlink: 'syz.8.4683': attribute type 1 has an invalid length. [ 824.867795][T15516] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4683'. [ 825.069756][T15527] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4687'. [ 825.350608][T15549] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4690'. [ 825.471234][T15548] loop7: detected capacity change from 0 to 512 [ 825.529244][ T432] hub 5-1:0.0: activate --> -90 [ 825.593291][T15548] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 825.604542][T15548] ext4 filesystem being mounted at /60/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 825.624723][T15555] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4694'. [ 825.663034][T15557] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4695'. [ 825.789433][T15557] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 825.799234][T15557] SELinux: failed to load policy [ 825.826049][T15562] SELinux: policydb magic number 0x6b7a7973 does not match expected magic number 0xf97cff8c [ 825.836594][T15562] SELinux: failed to load policy [ 825.996577][T15567] futex_wake_op: syz.6.4698 tries to shift op by 36; fix this program [ 826.031014][T15574] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4700'. [ 826.094588][T15575] xt_hashlimit: max too large, truncated to 1048576 [ 826.609080][T15583] netlink: 580 bytes leftover after parsing attributes in process `syz.6.4702'. [ 827.328438][T15584] loop7: detected capacity change from 0 to 1024 [ 827.404607][ T432] usb 5-1-port1: config error [ 827.428788][T15590] loop9: detected capacity change from 0 to 512 [ 827.457514][T15584] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:476: comm syz.7.4701: Invalid block bitmap block 0 in block_group 0 [ 827.472018][T15584] Quota error (device loop7): write_blk: dquota write failed [ 827.479482][T15584] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 827.489729][T15584] EXT4-fs error (device loop7): ext4_acquire_dquot:6200: comm syz.7.4701: Failed to acquire dquot type 0 [ 827.502069][T15584] EXT4-fs error (device loop7): ext4_free_blocks:6218: comm syz.7.4701: Freeing blocks not in datazone - block = 0, count = 4096 [ 827.515848][T15584] EXT4-fs error (device loop7): ext4_read_inode_bitmap:140: comm syz.7.4701: Invalid inode bitmap blk 0 in block_group 0 [ 827.528893][T11669] Quota error (device loop7): remove_tree: Getting block too big (0 >= 9) [ 827.537926][T15584] EXT4-fs error (device loop7) in ext4_free_inode:362: Corrupt filesystem [ 827.546794][T15584] EXT4-fs (loop7): 1 orphan inode deleted [ 827.552753][T15584] EXT4-fs (loop7): mounted filesystem without journal. Opts: ; ,errors=continue. Quota mode: writeback. [ 827.566951][T15584] netlink: 92 bytes leftover after parsing attributes in process `syz.7.4701'. [ 827.579760][T11669] EXT4-fs error (device loop7): ext4_release_dquot:6236: comm kworker/u4:0: Failed to release dquot type 0 [ 827.623722][ T432] hub 5-1:0.0: hub_ext_port_status failed (err = -32) [ 827.631730][ T30] audit: type=1400 audit(2000020979.169:6874): avc: denied { map } for pid=15585 comm="syz.6.4704" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=175 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 827.668649][ T432] usb 5-1-port1: connect-debounce failed [ 827.710963][T15590] EXT4-fs (loop9): orphan cleanup on readonly fs [ 827.743605][T15590] EXT4-fs (loop9): Cannot turn on journaled quota: type 0: error -13 [ 827.818742][T15590] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1147: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 827.866609][ T432] usb 5-1: USB disconnect, device number 55 [ 827.948556][T15590] EXT4-fs error (device loop9): ext4_clear_blocks:883: inode #13: comm syz.9.4703: attempt to clear invalid blocks 2 len 1 [ 827.993871][T15590] EXT4-fs error (device loop9): ext4_free_branches:1030: inode #13: comm syz.9.4703: invalid indirect mapped block 1819239214 (level 0) [ 828.017393][T15590] EXT4-fs error (device loop9): ext4_free_branches:1030: inode #13: comm syz.9.4703: invalid indirect mapped block 1819239214 (level 1) [ 828.042342][T15590] EXT4-fs (loop9): 1 truncate cleaned up [ 828.049033][T15590] EXT4-fs (loop9): mounted filesystem without journal. Opts: barrier,jqfmt=vfsv0,abort,bsddf,noquota,usrjquota=..,errors=continue. Quota mode: writeback. [ 828.069209][T15590] EXT4-fs (loop9): warning: mounting fs with errors, running e2fsck is recommended [ 828.099579][T15600] SELinux: failed to load policy [ 828.128563][T15590] EXT4-fs error (device loop9): ext4_remount:6026: comm syz.9.4703: Abort forced by user [ 828.186950][T15590] EXT4-fs (loop9): Remounting filesystem read-only [ 828.202838][T15590] EXT4-fs (loop9): re-mounted. Opts: . Quota mode: writeback. [ 828.488761][T15613] EXT4-fs error (device loop9): ext4_find_dest_de:2115: inode #2: block 13: comm syz.9.4703: bad entry in directory: inode out of bounds - offset=24, inode=85, rec_len=20, size=1024 fake=0 [ 828.612264][ T30] audit: type=1326 audit(2000020980.187:6875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15620 comm="syz.9.4714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47e38b7fc9 code=0x7ffc0000 [ 828.636432][ T30] audit: type=1326 audit(2000020980.187:6876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15620 comm="syz.9.4714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f47e38b6810 code=0x7ffc0000 [ 828.665194][ T30] audit: type=1326 audit(2000020980.187:6877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15620 comm="syz.9.4714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47e38b7fc9 code=0x7ffc0000 [ 828.691577][ T30] audit: type=1326 audit(2000020980.187:6878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15620 comm="syz.9.4714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=221 compat=0 ip=0x7f47e38b7fc9 code=0x7ffc0000 [ 828.721359][ T30] audit: type=1326 audit(2000020980.187:6879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15620 comm="syz.9.4714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47e38b7fc9 code=0x7ffc0000 [ 828.829250][T15627] netlink: 536 bytes leftover after parsing attributes in process `syz.9.4715'. [ 829.173757][T15629] loop7: detected capacity change from 0 to 4096 [ 829.235688][T15629] EXT4-fs (loop7): Test dummy encryption mode enabled [ 829.245669][T15629] EXT4-fs (loop7): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000008000000,barrier,dioread_nolock,test_dummy_encryption,nobarrier,grpjquota=,dioread_nolock,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 829.735368][T15648] syz.4.4721[15648] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 829.736535][T15648] syz.4.4721[15648] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 830.088272][T15676] netlink: 536 bytes leftover after parsing attributes in process `syz.7.4730'. [ 830.590763][T15678] FAULT_INJECTION: forcing a failure. [ 830.590763][T15678] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 830.603929][T15678] CPU: 0 PID: 15678 Comm: syz.8.4731 Tainted: G W syzkaller #0 [ 830.613234][T15678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 830.623308][T15678] Call Trace: [ 830.626596][T15678] [ 830.629549][T15678] __dump_stack+0x21/0x30 [ 830.633883][T15678] dump_stack_lvl+0xee/0x150 [ 830.638493][T15678] ? show_regs_print_info+0x20/0x20 [ 830.643692][T15678] ? bad_area_nosemaphore+0x2d/0x40 [ 830.648929][T15678] dump_stack+0x15/0x20 [ 830.653289][T15678] should_fail+0x3c1/0x510 [ 830.657721][T15678] should_fail_usercopy+0x1a/0x20 [ 830.662848][T15678] strncpy_from_user+0x24/0x2e0 [ 830.667703][T15678] strncpy_from_user_nofault+0x73/0x150 [ 830.673252][T15678] bpf_probe_read_compat_str+0xe6/0x180 [ 830.678811][T15678] bpf_prog_b22db1f73a90d414+0x35/0x16c [ 830.684381][T15678] bpf_trace_run3+0x14e/0x1e0 [ 830.689273][T15678] ? bpf_trace_run2+0x1b0/0x1b0 [ 830.694169][T15678] ? __this_cpu_preempt_check+0x13/0x20 [ 830.699722][T15678] ? tracing_record_taskinfo_sched_switch+0x80/0x3a0 [ 830.706510][T15678] ? __bpf_trace_sched_wakeup_template+0x10/0x10 [ 830.712888][T15678] __bpf_trace_sched_switch+0xb/0x10 [ 830.718329][T15678] __traceiter_sched_switch+0x85/0xc0 [ 830.723726][T15678] __schedule+0x1255/0x14c0 [ 830.728233][T15678] ? release_firmware_map_entry+0x190/0x190 [ 830.734319][T15678] preempt_schedule_irq+0x9b/0x110 [ 830.739540][T15678] ? __cond_resched+0xb0/0xb0 [ 830.744222][T15678] ? __switch_to+0x51d/0xe20 [ 830.748838][T15678] irqentry_exit_cond_resched+0x29/0x30 [ 830.754389][T15678] irqentry_exit+0x37/0x40 [ 830.758828][T15678] sysvec_reschedule_ipi+0x78/0x80 [ 830.763944][T15678] asm_sysvec_reschedule_ipi+0x1b/0x20 [ 830.769513][T15678] RIP: 0010:selinux_socket_sendmsg+0xf3/0x2e0 [ 830.775627][T15678] Code: ff ba 38 00 00 00 48 8d 7c 24 60 31 f6 e8 15 fd 83 ff 4d 89 ee 49 c1 ee 03 43 0f b6 04 26 84 c0 0f 85 63 01 00 00 45 8b 65 00 01 00 00 00 44 89 e6 e8 b0 7f 45 ff 41 83 fc 01 75 16 e8 f5 7b [ 830.795619][T15678] RSP: 0018:ffffc90000a37a00 EFLAGS: 00000246 [ 830.801708][T15678] RAX: 0000000000000000 RBX: 1ffff92000146f40 RCX: 0000000000000000 [ 830.809810][T15678] RDX: 0000000000000038 RSI: 0000000000000000 RDI: ffffc90000a37a98 [ 830.818029][T15678] RBP: ffffc90000a37b10 R08: dffffc0000000000 R09: ffffc90000a37a60 [ 830.826012][T15678] R10: fffff52000146f53 R11: 1ffff92000146f4c R12: 0000000000000087 [ 830.834004][T15678] R13: ffff888131e80540 R14: 1ffff110263d00a8 R15: ffff888119664000 [ 830.842095][T15678] ? selinux_socket_accept+0x500/0x500 [ 830.847716][T15678] security_socket_sendmsg+0x72/0xa0 [ 830.853184][T15678] sock_write_iter+0x237/0x380 [ 830.858220][T15678] ? sock_read_iter+0x340/0x340 [ 830.863090][T15678] ? memset+0x35/0x40 [ 830.867203][T15678] ? iov_iter_init+0xbc/0x180 [ 830.871998][T15678] vfs_write+0x802/0xf70 [ 830.876360][T15678] ? file_end_write+0x1b0/0x1b0 [ 830.881224][T15678] ? __fget_files+0x2c4/0x320 [ 830.885911][T15678] ? __fdget_pos+0x1f7/0x380 [ 830.890529][T15678] ? ksys_write+0x71/0x240 [ 830.894963][T15678] ksys_write+0x140/0x240 [ 830.899311][T15678] ? __ia32_sys_read+0x90/0x90 [ 830.904074][T15678] ? __kasan_check_write+0x14/0x20 [ 830.909253][T15678] ? switch_fpu_return+0x15d/0x2c0 [ 830.914392][T15678] __x64_sys_write+0x7b/0x90 [ 830.918999][T15678] x64_sys_call+0x8ef/0x9a0 [ 830.923628][T15678] do_syscall_64+0x4c/0xa0 [ 830.928069][T15678] ? clear_bhb_loop+0x50/0xa0 [ 830.932871][T15678] ? clear_bhb_loop+0x50/0xa0 [ 830.937651][T15678] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 830.943696][T15678] RIP: 0033:0x7fa06d362fc9 [ 830.948130][T15678] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 830.967745][T15678] RSP: 002b:00007fa06bdcb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 830.976184][T15678] RAX: ffffffffffffffda RBX: 00007fa06d5b9fa0 RCX: 00007fa06d362fc9 [ 830.984187][T15678] RDX: 0000000000000024 RSI: 00002000000000c0 RDI: 0000000000000003 [ 830.992608][T15678] RBP: 00007fa06bdcb090 R08: 0000000000000000 R09: 0000000000000000 [ 831.001011][T15678] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 831.008986][T15678] R13: 00007fa06d5ba038 R14: 00007fa06d5b9fa0 R15: 00007ffe536e1708 [ 831.016970][T15678] [ 831.131508][T15683] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4732'. [ 831.227674][T15690] loop7: detected capacity change from 0 to 512 [ 831.368391][T15694] overlayfs: workdir and upperdir must be separate subtrees [ 831.436791][T15690] EXT4-fs (loop7): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 831.449459][T15690] ext4 filesystem being mounted at /68/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 831.594254][T15702] incfs: iterate_incfs_dir / -22 [ 831.720220][T15710] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15710 comm=syz.6.4738 [ 831.790966][T15709] xt_CT: No such helper "pptp" [ 831.825239][T15707] loop9: detected capacity change from 0 to 40427 [ 831.950613][T15707] F2FS-fs (loop9): Wrong SSA boundary, start(3584) end(4096) blocks(3072) [ 831.973254][T15707] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 831.989283][T15707] F2FS-fs (loop9): invalid crc value [ 832.000841][T15717] netlink: 'syz.4.4742': attribute type 4 has an invalid length. [ 832.046638][T15707] F2FS-fs (loop9): Found nat_bits in checkpoint [ 832.131179][T15707] F2FS-fs (loop9): Start checkpoint disabled! [ 832.143190][T15707] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0 [ 832.151690][T15707] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e6 [ 832.300830][ T363] usb 5-1: new low-speed USB device number 56 using dummy_hcd [ 832.482330][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 832.482350][ T30] audit: type=1326 audit(2000020984.250:6889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15727 comm="syz.6.4746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f368aa51fc9 code=0x7ffc0000 [ 832.551045][T15731] netlink: 536 bytes leftover after parsing attributes in process `syz.9.4743'. [ 832.788661][ T30] audit: type=1326 audit(2000020984.250:6890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15727 comm="syz.6.4746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=201 compat=0 ip=0x7f368aa51fc9 code=0x7ffc0000 [ 832.812597][ T30] audit: type=1326 audit(2000020984.250:6891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15727 comm="syz.6.4746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f368aa51fc9 code=0x7ffc0000 [ 832.837357][ T30] audit: type=1326 audit(2000020984.250:6892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15727 comm="syz.6.4746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f368aa50810 code=0x7ffc0000 [ 832.894117][ T30] audit: type=1326 audit(2000020984.250:6893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15727 comm="syz.6.4746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f368aa537f7 code=0x7ffc0000 [ 832.924049][ T30] audit: type=1326 audit(2000020984.250:6894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15727 comm="syz.6.4746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f368aa51fc9 code=0x7ffc0000 [ 832.958512][ T30] audit: type=1326 audit(2000020984.250:6895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15727 comm="syz.6.4746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f368aa537f7 code=0x7ffc0000 [ 833.016494][ T30] audit: type=1326 audit(2000020984.250:6896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15727 comm="syz.6.4746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f368aa50c2a code=0x7ffc0000 [ 833.040397][ T30] audit: type=1326 audit(2000020984.250:6897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15727 comm="syz.6.4746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f368aa51fc9 code=0x7ffc0000 [ 833.064486][ T30] audit: type=1326 audit(2000020984.250:6898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15727 comm="syz.6.4746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f368aa50810 code=0x7ffc0000 [ 833.126130][T15737] loop7: detected capacity change from 0 to 256 [ 833.158528][T15737] exfat: Deprecated parameter 'namecase' [ 833.177322][ T363] usb 5-1: config index 0 descriptor too short (expected 1307, got 27) [ 833.186415][ T363] usb 5-1: config 0 has an invalid interface number: 0 but max is -1 [ 833.195216][ T363] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 833.205057][ T363] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 833.216192][ T363] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 833.263381][ T363] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 833.268716][T15737] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x8d1bf2bd, utbl_chksum : 0xe619d30d) [ 833.285965][ T363] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 833.892003][T15749] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4752'. [ 835.129973][ T363] usb 5-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 835.139174][ T363] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 835.155342][ T363] usb 5-1: config 0 descriptor?? [ 835.478235][ T363] usb 5-1: can't set config #0, error -71 [ 835.490297][ T363] usb 5-1: USB disconnect, device number 56 [ 836.281919][ T724] usb 8-1: new high-speed USB device number 30 using dummy_hcd [ 836.520564][ T724] usb 8-1: Using ep0 maxpacket: 16 [ 836.787398][ T724] usb 8-1: New USB device found, idVendor=0586, idProduct=1500, bcdDevice=2e.97 [ 836.796630][ T724] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 836.806716][ T724] usb 8-1: Product: syz [ 836.811052][ T724] usb 8-1: Manufacturer: syz [ 836.823046][ T724] usb 8-1: SerialNumber: syz [ 837.191069][ T724] usb 8-1: config 0 descriptor?? [ 837.218119][ T432] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 837.368339][T10894] usb 7-1: new high-speed USB device number 59 using dummy_hcd [ 837.417454][ T727] usb 8-1: USB disconnect, device number 30 [ 837.473648][ T432] usb 10-1: Using ep0 maxpacket: 8 [ 837.609947][T10894] usb 7-1: Using ep0 maxpacket: 8 [ 837.615248][ T432] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 837.627008][ T432] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 837.637530][ T432] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 837.647656][ T432] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 837.660770][ T432] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 837.670119][ T432] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 837.740225][T10894] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 837.750176][T10894] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 837.760010][T10894] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 837.770271][T10894] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 837.783434][T10894] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 837.793624][T10894] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 837.919922][T15880] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4804'. [ 837.956590][T15884] 9pnet_virtio: no channels available for device syz [ 838.168751][ T432] usb 8-1: new high-speed USB device number 31 using dummy_hcd [ 838.216590][T10894] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 838.362501][T15893] UDC core: couldn't find an available UDC or it's busy: -16 [ 838.370094][T15893] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 838.397129][ T432] usb 8-1: Using ep0 maxpacket: 8 [ 838.559111][T10894] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 838.570303][T10894] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 838.580561][T10894] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 838.593878][T10894] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 838.603213][T10894] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 838.611926][T15895] netlink: 'syz.7.4803': attribute type 4 has an invalid length. [ 838.621416][T15895] netlink: 17 bytes leftover after parsing attributes in process `syz.7.4803'. [ 838.631730][T10894] usb 5-1: config 0 descriptor?? [ 839.094888][T10894] plantronics 0003:047F:FFFF.0016: No inputs registered, leaving [ 839.108763][T10894] plantronics 0003:047F:FFFF.0016: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 839.371147][ T727] usb 5-1: USB disconnect, device number 57 [ 839.900691][T15909] plantronics 0003:047F:FFFF.0016: usb_submit_urb(ctrl) failed: -19 [ 839.927422][ T363] usb 7-1: USB disconnect, device number 59 [ 839.938849][ T724] usb 10-1: USB disconnect, device number 2 [ 839.981354][T15919] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4818'. [ 840.004637][T15919] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4818'. [ 840.019566][T15919] bridge0: port 2(bridge_slave_1) entered disabled state [ 840.026886][T15919] bridge0: port 1(bridge_slave_0) entered disabled state [ 840.037733][T15919] device bridge0 entered promiscuous mode [ 840.122006][T15926] usb usb1: usbfs: process 15926 (syz.6.4821) did not claim interface 0 before use [ 840.198820][T15934] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 840.207616][T15934] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 840.454674][T10894] usb 7-1: new high-speed USB device number 60 using dummy_hcd [ 840.740431][T10894] usb 7-1: Using ep0 maxpacket: 16 [ 840.960935][T10894] usb 7-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 840.986316][T10894] usb 7-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 841.053325][T10894] usb 7-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 841.077007][T10894] usb 7-1: config 1 interface 0 has no altsetting 0 [ 841.102892][ T432] usb 8-1: unable to get BOS descriptor or descriptor too short [ 841.109155][T15946] tmpfs: Unknown parameter 'grpquota' [ 841.132754][T15951] 9pnet_virtio: no channels available for device syz [ 841.158120][T15954] tipc: Enabling of bearer rejected, failed to enable media [ 841.167183][ T432] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 841.171955][T15956] 9pnet_virtio: no channels available for device syz [ 841.175393][ T432] usb 8-1: can't read configurations, error -71 [ 841.221430][ T30] kauditd_printk_skb: 35 callbacks suppressed [ 841.221447][ T30] audit: type=1400 audit(2000020993.436:6934): avc: denied { create } for pid=15963 comm="syz.7.4838" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 841.321284][T10894] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 841.341732][T10894] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 841.349789][T10894] usb 7-1: Product: syz [ 841.360913][T15966] input: syz1 as /devices/virtual/input/input52 [ 841.456631][T10894] usb 7-1: Manufacturer: syz [ 841.461299][T10894] usb 7-1: SerialNumber: syz [ 841.731977][T10894] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 60 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 841.743759][ T9601] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 841.978735][ T9601] usb 10-1: Using ep0 maxpacket: 32 [ 842.112487][ T9601] usb 10-1: config 0 has an invalid interface number: 247 but max is 0 [ 842.120987][ T9601] usb 10-1: config 0 has no interface number 0 [ 842.236510][ T9601] usb 10-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=62.9b [ 842.245714][ T9601] usb 10-1: New USB device strings: Mfr=1, Product=3, SerialNumber=0 [ 842.254071][ T9601] usb 10-1: Product: syz [ 842.258842][ T9601] usb 10-1: Manufacturer: syz [ 842.264461][ T9601] usb 10-1: config 0 descriptor?? [ 842.273717][T15999] binder: 15994:15999 ioctl c0306201 200000000480 returned -14 [ 842.340217][ T30] audit: type=1400 audit(2000020994.612:6935): avc: denied { read write } for pid=16000 comm="syz.4.4852" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 842.363702][ T30] audit: type=1400 audit(2000020994.612:6936): avc: denied { open } for pid=16000 comm="syz.4.4852" path="/417/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 842.373676][T16004] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4853'. [ 842.502649][T10894] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 842.512613][ T724] usb 10-1: USB disconnect, device number 3 [ 842.674124][ T363] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 842.750321][T10894] usb 9-1: Using ep0 maxpacket: 8 [ 842.864696][T10894] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 842.873457][T10894] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 842.883286][T10894] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 842.893730][T10894] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 842.903757][T10894] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 842.912266][ T363] usb 5-1: Using ep0 maxpacket: 8 [ 842.917178][T10894] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 842.931634][T10894] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 843.010402][ T30] audit: type=1400 audit(2000020995.315:6937): avc: denied { create } for pid=16009 comm="syz.9.4856" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 843.046023][ T363] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 843.054554][ T363] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 843.065108][ T363] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 843.082718][ T363] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 843.092778][ T30] audit: type=1400 audit(2000020995.389:6938): avc: denied { append } for pid=16018 comm="syz.9.4860" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 843.116848][ T363] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 843.130303][ T363] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 843.139731][ T363] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 843.235507][ T8147] usb 7-1: USB disconnect, device number 60 [ 843.280070][T16035] tipc: Started in network mode [ 843.285377][T16035] tipc: Node identity a6494e575c9a, cluster identity 4711 [ 843.285829][ T8147] usblp0: removed [ 843.292594][T16035] tipc: Enabled bearer , priority 0 [ 843.304161][T16035] tipc: Disabling bearer [ 843.805187][T16058] overlayfs: missing 'workdir' [ 844.588791][ T724] usb 8-1: new full-speed USB device number 33 using dummy_hcd [ 844.751671][ T30] audit: type=1326 audit(2000020997.152:6939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16096 comm="syz.6.4886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f368aa51fc9 code=0x7ffc0000 [ 844.775519][ T30] audit: type=1326 audit(2000020997.152:6940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16096 comm="syz.6.4886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f368aa51fc9 code=0x7ffc0000 [ 844.800559][ T30] audit: type=1326 audit(2000020997.152:6941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16096 comm="syz.6.4886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f368aa51fc9 code=0x7ffc0000 [ 844.824981][ T30] audit: type=1326 audit(2000020997.152:6942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16096 comm="syz.6.4886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f368aa51fc9 code=0x7ffc0000 [ 844.849036][ T30] audit: type=1326 audit(2000020997.152:6943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16096 comm="syz.6.4886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f368aa51fc9 code=0x7ffc0000 [ 844.969876][ T724] usb 8-1: config 1 interface 0 has no altsetting 0 [ 845.318661][T10894] usb 9-1: USB disconnect, device number 5 [ 845.501511][T16118] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4895'. [ 845.667631][T10894] usb 5-1: USB disconnect, device number 58 [ 846.941059][T16147] netlink: 260 bytes leftover after parsing attributes in process `syz.8.4908'. [ 846.952652][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 846.952670][ T30] audit: type=1326 audit(2000020999.462:6954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16146 comm="syz.8.4908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa06d362fc9 code=0x7ffc0000 [ 846.961177][ T724] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 846.993144][ T30] audit: type=1400 audit(2000020999.493:6955): avc: denied { write } for pid=16148 comm="syz.6.4909" name="ppp" dev="devtmpfs" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 846.996471][ T724] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 847.018898][ T30] audit: type=1326 audit(2000020999.504:6956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16146 comm="syz.8.4908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa06d362fc9 code=0x7ffc0000 [ 847.052640][ T724] usb 8-1: Product: syz [ 847.055342][ T30] audit: type=1326 audit(2000020999.535:6957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16146 comm="syz.8.4908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa06d362fc9 code=0x7ffc0000 [ 847.057342][ T724] usb 8-1: Manufacturer: syz [ 847.086278][ T724] usb 8-1: SerialNumber: syz [ 847.107941][ T30] audit: type=1326 audit(2000020999.598:6958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16146 comm="syz.8.4908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa06d362fc9 code=0x7ffc0000 [ 847.132906][ T30] audit: type=1326 audit(2000020999.598:6959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16146 comm="syz.8.4908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa06d362fc9 code=0x7ffc0000 [ 847.167786][T16149] bridge0: port 3(gretap0) entered blocking state [ 847.174530][T16149] bridge0: port 3(gretap0) entered disabled state [ 847.179067][ T30] audit: type=1326 audit(2000020999.682:6960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16153 comm="syz.8.4911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa06d362fc9 code=0x7ffc0000 [ 847.181834][T16149] device gretap0 entered promiscuous mode [ 847.228923][ T30] audit: type=1326 audit(2000020999.682:6961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16153 comm="syz.8.4911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa06d362fc9 code=0x7ffc0000 [ 847.255328][ T30] audit: type=1326 audit(2000020999.724:6962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16153 comm="syz.8.4911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa06d362fc9 code=0x7ffc0000 [ 847.281066][ T30] audit: type=1326 audit(2000020999.724:6963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16153 comm="syz.8.4911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa06d362fc9 code=0x7ffc0000 [ 847.311729][ T724] usblp 8-1:1.0: usblp0: USB Unidirectional printer dev 33 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 847.351762][ T724] usb 8-1: USB disconnect, device number 33 [ 847.369417][ T724] usblp0: removed [ 847.475839][T16162] Restarting kernel threads ... done. [ 847.945497][T16183] 9pnet_virtio: no channels available for device syz [ 848.432499][T16204] SELinux: Context is not valid (left unmapped). [ 848.439596][T16204] SELinux: Context GPL is not valid (left unmapped). [ 848.519841][T16209] SELinux: failed to load policy [ 848.892489][T16218] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4939'. [ 848.901807][T16218] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4939'. [ 848.910836][T16218] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4939'. [ 849.035339][T16237] netlink: 664 bytes leftover after parsing attributes in process `syz.4.4949'. [ 849.055331][T16242] loop9: detected capacity change from 0 to 128 [ 849.144451][T16252] loop9: detected capacity change from 0 to 2048 [ 849.220956][T16252] Alternate GPT is invalid, using primary GPT. [ 849.244334][T16252] loop9: p2 p3 p7 [ 849.272913][T16269] loop7: detected capacity change from 0 to 512 [ 849.292286][ T2869] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 849.311100][T16269] EXT4-fs (loop7): too many log groups per flexible block group [ 849.319059][T16269] EXT4-fs (loop7): failed to initialize mballoc (-12) [ 849.326175][T16269] EXT4-fs (loop7): mount failed [ 849.556583][T16303] loop9: detected capacity change from 0 to 512 [ 849.571525][T16306] netlink: 'syz.7.4980': attribute type 13 has an invalid length. [ 849.593889][T16303] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 849.607437][T16303] EXT4-fs (loop9): 1 truncate cleaned up [ 849.613374][T16303] EXT4-fs (loop9): mounted filesystem without journal. Opts: errors=remount-ro,resuid=0x0000000000000000,debug_want_extra_isize=0x0000000000000068,barrier,lazytime,quota,. Quota mode: writeback. [ 849.650902][T16306] bridge0: port 2(bridge_slave_1) entered disabled state [ 849.658285][T16306] bridge0: port 1(bridge_slave_0) entered disabled state [ 849.723381][T16310] syz.7.4980 (16310) used obsolete PPPIOCDETACH ioctl [ 849.869835][T16339] loop9: detected capacity change from 0 to 512 [ 849.923152][T16339] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 849.932996][T16339] EXT4-fs (loop9): orphan cleanup on readonly fs [ 849.939942][T16339] EXT4-fs warning (device loop9): ext4_enable_quotas:6452: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 849.960687][T16339] EXT4-fs (loop9): Cannot turn on quotas: error -117 [ 849.968347][T16339] EXT4-fs error (device loop9): ext4_validate_block_bitmap:438: comm syz.9.4994: bg 0: block 40: padding at end of block bitmap is not set [ 849.983730][T16339] EXT4-fs error (device loop9) in ext4_mb_clear_bb:6178: Corrupt filesystem [ 849.988095][T16349] loop7: detected capacity change from 0 to 2048 [ 849.994177][T16339] EXT4-fs (loop9): 1 truncate cleaned up [ 850.004998][T16339] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 850.087909][T16349] EXT4-fs (loop7): mounted filesystem without journal. Opts: bsdgroups,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 850.367158][T16377] loop7: detected capacity change from 0 to 512 [ 850.435567][T16377] EXT4-fs error (device loop7): ext4_orphan_get:1401: inode #15: comm syz.7.5009: casefold flag without casefold feature [ 850.458755][T16377] EXT4-fs error (device loop7): ext4_orphan_get:1406: comm syz.7.5009: couldn't read orphan inode 15 (err -117) [ 850.470918][T16377] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 850.621910][T16401] loop9: detected capacity change from 0 to 1024 [ 850.678094][T16401] EXT4-fs error (device loop9): ext4_quota_enable:6408: comm syz.9.5005: inode #3584: comm syz.9.5005: iget: illegal inode # [ 850.691466][T16401] EXT4-fs error (device loop9): ext4_quota_enable:6411: comm syz.9.5005: Bad quota inode: 3584, type: 2 [ 850.704484][T16401] EXT4-fs warning (device loop9): ext4_enable_quotas:6452: Failed to enable quota tracking (type=2, err=-117, ino=3584). Please run e2fsck to fix. [ 850.720119][T16401] EXT4-fs (loop9): mount failed [ 850.775239][T16407] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16407 comm=syz.6.5022 [ 850.853599][T16411] loop7: detected capacity change from 0 to 256 [ 850.943197][T16411] FAT-fs (loop7): bogus number of FAT sectors [ 850.952302][T16411] FAT-fs (loop7): Can't find a valid FAT filesystem [ 851.473429][T16450] loop7: detected capacity change from 0 to 128 [ 851.484723][T16452] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5043'. [ 851.583166][T16461] ================================================================== [ 851.591437][T16461] BUG: KASAN: slab-out-of-bounds in tc_setup_flow_action+0x870/0x3240 [ 851.599635][T16461] Read of size 8 at addr ffff88813293ecc0 by task syz.9.5049/16461 [ 851.607728][T16461] [ 851.610249][T16461] CPU: 1 PID: 16461 Comm: syz.9.5049 Tainted: G W syzkaller #0 [ 851.619120][T16461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 851.629444][T16461] Call Trace: [ 851.632760][T16461] [ 851.635815][T16461] __dump_stack+0x21/0x30 [ 851.640191][T16461] dump_stack_lvl+0xee/0x150 [ 851.644828][T16461] ? show_regs_print_info+0x20/0x20 [ 851.650208][T16461] ? load_image+0x3a0/0x3a0 [ 851.654861][T16461] print_address_description+0x7f/0x2c0 [ 851.660438][T16461] ? tc_setup_flow_action+0x870/0x3240 [ 851.665922][T16461] kasan_report+0xf1/0x140 [ 851.670362][T16461] ? tc_setup_flow_action+0x870/0x3240 [ 851.675837][T16461] __asan_report_load8_noabort+0x14/0x20 [ 851.681480][T16461] tc_setup_flow_action+0x870/0x3240 [ 851.686779][T16461] mall_replace_hw_filter+0x293/0x820 [ 851.692177][T16461] ? pcpu_block_update_hint_alloc+0x8c1/0xc50 [ 851.698295][T16461] ? mall_set_parms+0x520/0x520 [ 851.703167][T16461] ? tcf_exts_destroy+0xb0/0xb0 [ 851.708043][T16461] ? mall_set_parms+0x1e8/0x520 [ 851.712913][T16461] mall_change+0x526/0x740 [ 851.717341][T16461] ? __kasan_check_write+0x14/0x20 [ 851.722458][T16461] ? mall_get+0xa0/0xa0 [ 851.726626][T16461] ? tcf_chain_tp_insert_unique+0xac1/0xc10 [ 851.732534][T16461] tc_new_tfilter+0x12a2/0x1870 [ 851.737397][T16461] ? tcf_gate_entry_destructor+0x20/0x20 [ 851.743048][T16461] ? security_capable+0x87/0xb0 [ 851.747933][T16461] ? ns_capable+0x8c/0xf0 [ 851.752282][T16461] ? netlink_net_capable+0x125/0x160 [ 851.757578][T16461] ? tcf_gate_entry_destructor+0x20/0x20 [ 851.763396][T16461] rtnetlink_rcv_msg+0x81b/0xb90 [ 851.768372][T16461] ? rtnetlink_bind+0x80/0x80 [ 851.773067][T16461] ? memcpy+0x56/0x70 [ 851.777438][T16461] ? avc_has_perm_noaudit+0x2f4/0x460 [ 851.782832][T16461] ? arch_stack_walk+0xee/0x140 [ 851.787701][T16461] ? avc_denied+0x1b0/0x1b0 [ 851.792234][T16461] ? stack_trace_save+0x98/0xe0 [ 851.797385][T16461] ? avc_has_perm+0x158/0x240 [ 851.802079][T16461] ? avc_has_perm_noaudit+0x460/0x460 [ 851.807460][T16461] ? x64_sys_call+0x4b/0x9a0 [ 851.812073][T16461] ? selinux_nlmsg_lookup+0x416/0x4c0 [ 851.817485][T16461] netlink_rcv_skb+0x1e0/0x430 [ 851.822369][T16461] ? rtnetlink_bind+0x80/0x80 [ 851.827091][T16461] ? netlink_ack+0xb60/0xb60 [ 851.831711][T16461] ? __netlink_lookup+0x387/0x3b0 [ 851.836742][T16461] rtnetlink_rcv+0x1c/0x20 [ 851.841377][T16461] netlink_unicast+0x876/0xa40 [ 851.846698][T16461] netlink_sendmsg+0x86a/0xb70 [ 851.851502][T16461] ? netlink_getsockopt+0x530/0x530 [ 851.856821][T16461] ? security_socket_sendmsg+0x82/0xa0 [ 851.862307][T16461] ? netlink_getsockopt+0x530/0x530 [ 851.867535][T16461] ____sys_sendmsg+0x5a2/0x8c0 [ 851.872312][T16461] ? __sys_sendmsg_sock+0x40/0x40 [ 851.877372][T16461] ? import_iovec+0x7c/0xb0 [ 851.881999][T16461] ___sys_sendmsg+0x1f0/0x260 [ 851.886705][T16461] ? __sys_sendmsg+0x250/0x250 [ 851.891602][T16461] ? sock_show_fdinfo+0xa0/0xa0 [ 851.896464][T16461] ? __fdget+0x1a1/0x230 [ 851.900807][T16461] __x64_sys_sendmsg+0x1e2/0x2a0 [ 851.905939][T16461] ? ___sys_sendmsg+0x260/0x260 [ 851.910811][T16461] ? __kasan_check_write+0x14/0x20 [ 851.916077][T16461] ? switch_fpu_return+0x15d/0x2c0 [ 851.921296][T16461] x64_sys_call+0x4b/0x9a0 [ 851.925726][T16461] do_syscall_64+0x4c/0xa0 [ 851.930240][T16461] ? clear_bhb_loop+0x50/0xa0 [ 851.935277][T16461] ? clear_bhb_loop+0x50/0xa0 [ 851.940100][T16461] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 851.946002][T16461] RIP: 0033:0x7f47e38b7fc9 [ 851.950427][T16461] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 851.970130][T16461] RSP: 002b:00007f47e2320038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 851.978643][T16461] RAX: ffffffffffffffda RBX: 00007f47e3b0efa0 RCX: 00007f47e38b7fc9 [ 851.986623][T16461] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000006 [ 851.995569][T16461] RBP: 00007f47e393af91 R08: 0000000000000000 R09: 0000000000000000 [ 852.003819][T16461] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 852.011978][T16461] R13: 00007f47e3b0f038 R14: 00007f47e3b0efa0 R15: 00007ffdbbfc2b08 [ 852.020063][T16461] [ 852.023175][T16461] [ 852.025604][T16461] Allocated by task 16461: [ 852.030039][T16461] __kasan_kmalloc+0xda/0x110 [ 852.035212][T16461] __kmalloc+0x13d/0x2c0 [ 852.039500][T16461] tcf_idr_create+0x5f/0x790 [ 852.044111][T16461] tcf_idr_create_from_flags+0x61/0x70 [ 852.049585][T16461] tcf_gact_init+0x346/0x580 [ 852.054288][T16461] tcf_action_init_1+0x3f7/0x6a0 [ 852.059240][T16461] tcf_action_init+0x1e9/0x710 [ 852.064008][T16461] tcf_exts_validate+0x217/0x520 [ 852.069015][T16461] mall_set_parms+0x48/0x520 [ 852.073654][T16461] mall_change+0x45a/0x740 [ 852.078091][T16461] tc_new_tfilter+0x12a2/0x1870 [ 852.082989][T16461] rtnetlink_rcv_msg+0x81b/0xb90 [ 852.088004][T16461] netlink_rcv_skb+0x1e0/0x430 [ 852.092882][T16461] rtnetlink_rcv+0x1c/0x20 [ 852.097441][T16461] netlink_unicast+0x876/0xa40 [ 852.102248][T16461] netlink_sendmsg+0x86a/0xb70 [ 852.107051][T16461] ____sys_sendmsg+0x5a2/0x8c0 [ 852.111824][T16461] ___sys_sendmsg+0x1f0/0x260 [ 852.116511][T16461] __x64_sys_sendmsg+0x1e2/0x2a0 [ 852.121499][T16461] x64_sys_call+0x4b/0x9a0 [ 852.125925][T16461] do_syscall_64+0x4c/0xa0 [ 852.130593][T16461] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 852.136500][T16461] [ 852.138833][T16461] The buggy address belongs to the object at ffff88813293ec00 [ 852.138833][T16461] which belongs to the cache kmalloc-192 of size 192 [ 852.153331][T16461] The buggy address is located 0 bytes to the right of [ 852.153331][T16461] 192-byte region [ffff88813293ec00, ffff88813293ecc0) [ 852.166986][T16461] The buggy address belongs to the page: [ 852.172625][T16461] page:ffffea0004ca4f80 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x13293e [ 852.183327][T16461] flags: 0x4000000000000200(slab|zone=1) [ 852.188987][T16461] raw: 4000000000000200 ffffea0004776680 0000000600000006 ffff888100042c00 [ 852.197574][T16461] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 852.206157][T16461] page dumped because: kasan: bad access detected [ 852.212588][T16461] page_owner tracks the page as allocated [ 852.218316][T16461] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112c40(GFP_NOFS|__GFP_NOWARN|__GFP_NORETRY|__GFP_HARDWALL), pid 13839, ts 752798593369, free_ts 748790589605 [ 852.235854][T16461] post_alloc_hook+0x192/0x1b0 [ 852.240745][T16461] prep_new_page+0x1c/0x110 [ 852.245254][T16461] get_page_from_freelist+0x2cc5/0x2d50 [ 852.250804][T16461] __alloc_pages+0x18f/0x440 [ 852.255398][T16461] new_slab+0xa1/0x4d0 [ 852.259467][T16461] ___slab_alloc+0x381/0x810 [ 852.264065][T16461] __slab_alloc+0x49/0x90 [ 852.268409][T16461] __kmalloc+0x16a/0x2c0 [ 852.272651][T16461] ext4_find_extent+0x36b/0xe20 [ 852.277590][T16461] ext4_ext_map_blocks+0x1de/0x6280 [ 852.282790][T16461] ext4_map_blocks+0x97b/0x1b20 [ 852.287791][T16461] _ext4_get_block+0x1da/0x4e0 [ 852.292567][T16461] ext4_get_block_unwritten+0x2a/0x40 [ 852.298066][T16461] ext4_block_write_begin+0x556/0x1150 [ 852.303541][T16461] ext4_write_begin+0x638/0x1220 [ 852.308585][T16461] ext4_da_write_begin+0x2fa/0xb60 [ 852.313713][T16461] page last free stack trace: [ 852.318473][T16461] free_unref_page_prepare+0x542/0x550 [ 852.323941][T16461] free_unref_page+0xa2/0x550 [ 852.328629][T16461] __free_pages+0x6c/0x100 [ 852.333047][T16461] __vunmap+0x84d/0x9e0 [ 852.337207][T16461] vfree+0x8b/0xc0 [ 852.340929][T16461] kcov_mmap+0x8f/0x130 [ 852.345083][T16461] mmap_file+0x60/0xb0 [ 852.349148][T16461] mmap_region+0x101c/0x1800 [ 852.353746][T16461] do_mmap+0x812/0xf10 [ 852.357812][T16461] vm_mmap_pgoff+0x1ce/0x410 [ 852.362402][T16461] ksys_mmap_pgoff+0x161/0x1d0 [ 852.367186][T16461] __x64_sys_mmap+0xfa/0x110 [ 852.371779][T16461] x64_sys_call+0x83/0x9a0 [ 852.376210][T16461] do_syscall_64+0x4c/0xa0 [ 852.380632][T16461] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 852.386531][T16461] [ 852.388969][T16461] Memory state around the buggy address: [ 852.394818][T16461] ffff88813293eb80: 00 00 00 fc fc fc fc fc fc fc fc fc fc fc fc fc [ 852.403304][T16461] ffff88813293ec00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 852.411375][T16461] >ffff88813293ec80: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 852.419562][T16461] ^ [ 852.425931][T16461] ffff88813293ed00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 852.434553][T16461] ffff88813293ed80: 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc fc [ 852.442633][T16461] ================================================================== [ 852.450898][T16461] Disabling lock debugging due to kernel taint [ 852.468543][ T30] kauditd_printk_skb: 219 callbacks suppressed [ 852.468559][ T30] audit: type=1400 audit(2000021005.246:7182): avc: denied { read } for pid=83 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 852.499725][ T30] audit: type=1400 audit(2000021005.278:7183): avc: denied { search } for pid=83 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 852.521867][ T30] audit: type=1400 audit(2000021005.278:7184): avc: denied { write } for pid=83 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 852.549548][ T30] audit: type=1400 audit(2000021005.278:7185): avc: denied { add_name } for pid=83 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 852.571285][ T30] audit: type=1400 audit(2000021005.278:7186): avc: denied { create } for pid=83 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 852.594421][ T30] audit: type=1400 audit(2000021005.278:7187): avc: denied { append open } for pid=83 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 852.617929][ T30] audit: type=1400 audit(2000021005.278:7188): avc: denied { getattr } for pid=83 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1