last executing test programs: 5m48.442209765s ago: executing program 3 (id=2889): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f00000001c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000026c0)='./file0\x00', 0x0, 0x0) preadv2(r3, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x18) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4) connect$inet6(r6, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r6, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee05", 0xa7, 0x840, 0x0, 0x0) dup3(r6, 0xffffffffffffffff, 0x0) 5m47.415677066s ago: executing program 3 (id=2892): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() r1 = add_key$keyring(&(0x7f0000000300), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000240)='asymmetric\x00', 0x0) sched_setscheduler(r0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r2}, 0x18) syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x802) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000980)=ANY=[@ANYBLOB="1400000042000b06"], 0x14}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000080000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000100000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r4}, 0x10) epoll_create1(0x0) recvmmsg(r3, &(0x7f0000000ec0)=[{{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000f00)=""/4097, 0x1001}, {&(0x7f0000000880)=""/142, 0x8e}, {&(0x7f0000000280)=""/173, 0xad}, {&(0x7f0000000b40)=""/30, 0x1e}, {0x0}, {&(0x7f0000000780)=""/165, 0xa5}, {&(0x7f00000009c0)=""/264, 0x108}], 0x8}, 0x1008}], 0x1, 0x0, 0x0) timer_create(0x0, 0x0, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1f, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="85000000590008009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) r5 = fsopen(&(0x7f00000001c0)='devpts\x00', 0x1) setrlimit(0x7, &(0x7f0000000400)) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) fsmount(r5, 0x0, 0xf) 5m47.130168444s ago: executing program 3 (id=2894): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000"], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000180)='./bus\x00', 0x2000804, &(0x7f0000000480)={[{@numtail}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}, {@shortname_win95}, {@shortname_win95}, {@rodir}, {@utf8no}, {@shortname_winnt}, {@shortname_win95}, {@fat=@check_normal}, {@fat=@codepage={'codepage', 0x3d, '866'}}, {@utf8}, {@numtail}, {@rodir}, {@shortname_lower}, {@utf8no}, {@rodir}]}, 0x1, 0x289, &(0x7f00000001c0)="$eJzs3c1qA1UUAOAzzaRJdJEsXInQAV24Kq1P0CIVxIKgZKEutNgUpAmFFgJVMXblE7hx6/O4EV/AB1Dc2YU4ks7kTyctkbQp+n2bHs69J/fM3KHtZm4+eWVwfnpxdXbz5c/RbCaxdRAHcZtEJ7Zi4uuo9NOv1XkA4Jm7zfP4LS80itT14oz6ksp069GbAwAexfzf/033AgA8jfc/+PCdw+Pjo/eyrBkx+GbYTaL4WYwfnsVn0Y9e7EU7/ojIp4r4rbePjyLNxjrx2mA07I4rBx//UH7+4S8Rd/X70Y5Odf1+VpirHw279XihXP+gH713v492vFRd/8as/jYv66O7Ha+/Otf/brTjx0/jIvpxGsX/OpP6r/az7M3829+/+GicHdcno2G3EacLdyqvPfXeAAAAAAAAAAAAAAAAAAAAAADw37WbTXUWz9+ZHPx/z/g95wON5s7n2cuyLE+K+bP6NF5OI93ktQMAAAAAAAAAAAAAAAAAAMBzcXX9+flJv9+7XGswea2/Yij+XMw0ImLJ56QPr7WzaodRK1vrJxGrXVc9GneVD0+urXjHWuN+epdJGuvbgmSaac0P7USx1jjTKoK5zGpLfPfPjWvGXTB5us5PkmWbOwmaVQ/JGoK84vGrLa3a/numVV5BxeTWPatvv/ives7bS4aSiKhPb2Y51KqeXF/vPXy630EAAAAAAAAAAAAAAAAAAEBh9tJvxeDNBhoCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgA2Yff//CsGoLF42J6+NgzTKzIYvEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgP+BvwIAAP//XAxp4w==") open(0x0, 0x0, 0x100) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setscheduler(0x0, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="100000000000522f4700"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) ioctl$TIOCL_BLANKSCREEN(0xffffffffffffffff, 0x4b67, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0xfffffffffffffd80) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f00000002c0)={[{@sysvgroups}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000}}, {@usrjquota}, {@acl}, {@grpjquota}]}, 0xff, 0x23f, &(0x7f0000000540)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x57) r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) syz_mount_image$fuse(0x0, &(0x7f0000000240)='./bus\x00', 0x20000, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_generic(r2, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x24, 0x10, 0x701, 0x0, 0xffffffff, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x14\x00'}, @typed={0x8, 0xa, 0x0, 0x0, @fd=r2}]}, 0x24}}, 0x20008080) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000001ff0), 0x10) sendmsg$can_bcm(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="0500"], 0x20000078}}, 0x0) sendmsg$can_bcm(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x7, 0x0, 0x0, {}, {0x77359400}, {}, 0x7, @can={{}, 0x0, 0x2, 0x0, 0x0, "8bc7e9385559d457"}}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x0) 5m46.984961028s ago: executing program 3 (id=2895): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file1\x00', 0x18000, &(0x7f00000002c0)={[{@errors_remount}], [{@smackfshat={'smackfshat', 0x3d, '802.15.4 MAC\x00'}}]}, 0x80, 0x62d, &(0x7f0000000c40)="$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") r0 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./bus\x00', 0x1800004, &(0x7f0000000280)={[{@discard_unit_segment}, {}, {@acl}, {@disable_roll_forward}, {@grpjquota={'grpjquota', 0x3d, 'checkpoint=disable'}}, {@alloc_mode_def}, {@two_active_logs}, {@nouser_xattr}, {@checkpoint_diasble}, {@noacl}, {@atgc}, {@background_gc_on}, {@jqfmt_vfsold}, {@noinline_dentry}]}, 0xfd, 0x551d, &(0x7f00000079c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x8000000000002) sched_setscheduler(r1, 0x2, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f00000002c0)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) mkdirat(r0, &(0x7f00000003c0)='./file1\x00', 0x42) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x183341, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$IEEE802154_ADD_IFACE(r6, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYRES16=r7, @ANYBLOB="00012abd7000fcdbdf2521000000050020000000000009001f00706879310000000009001f00706879000000000c0005000203aaaaaaaaaaaa09001f007068793100000000050020000100000009001f00706879330000000009001f007068793300"/114], 0x78}}, 0x20000000) r8 = socket$inet6(0xa, 0x3, 0x84) setsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f0000000880)={{{@in=@local, @in6=@empty, 0x0, 0x56, 0x4e21, 0x5c5, 0x2}, {0x5, 0x0, 0x0, 0x2, 0xfffffffffffffff6, 0x2000000, 0x1}, {0x7, 0xfffffffffffffffd, 0x4}, 0x1, 0x0, 0x1}, {{@in=@empty, 0x0, 0x2b}, 0x2, @in=@loopback, 0x3507, 0x4, 0x0, 0x0, 0xffffffff, 0x8, 0x4}}, 0xe8) connect$inet6(r8, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xff}}}, 0x1c) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x75, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x9c}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) getdents(r0, 0x0, 0x0) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) 5m45.069403147s ago: executing program 3 (id=2900): bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[], 0x48) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r4], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) close_range(r1, r4, 0x2) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x6e23, 0xfffffdff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c) accept4(r3, &(0x7f0000000180)=@l2, &(0x7f0000000280)=0x80, 0x800) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="6c000000000201040000000000000000020000072400028014000180080001000000000008000200ac1e00010c85a489de4e0002800500010000000000300003802c04008014000300fe80000000000000000000009fb500bb14000400ff01000000000000000000000000000104000180"], 0x6c}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) 5m44.603098453s ago: executing program 3 (id=2901): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f00000001c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000026c0)='./file0\x00', 0x0, 0x0) preadv2(r3, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x18) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4) connect$inet6(r6, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r6, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee05", 0xa7, 0x840, 0x0, 0x0) dup3(r6, 0xffffffffffffffff, 0x0) 5m44.390409454s ago: executing program 32 (id=2901): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f00000001c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000026c0)='./file0\x00', 0x0, 0x0) preadv2(r3, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x18) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4) connect$inet6(r6, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r6, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee05", 0xa7, 0x840, 0x0, 0x0) dup3(r6, 0xffffffffffffffff, 0x0) 11.319857874s ago: executing program 1 (id=4242): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x14}}, 0x0) recvmmsg(r0, &(0x7f0000000ec0)=[{{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000f00)=""/4097, 0x1001}, {&(0x7f0000000280)=""/173, 0xad}, {&(0x7f0000000b40)=""/30, 0x1e}, {&(0x7f0000000780)=""/165, 0xa5}, {&(0x7f00000009c0)=""/264, 0x108}], 0x6}, 0x1008}], 0x1, 0x0, 0x0) 10.137468202s ago: executing program 1 (id=4250): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$INCFS_IOC_PERMIT_FILL(r1, 0x40046721, &(0x7f0000000180)={r2}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, 0x0, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x58}}, 0x10) syz_open_dev$usbfs(&(0x7f0000003f00), 0x201, 0xa401) r5 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0xe, @dev={0xfe, 0x80, '\x00', 0x43}, 0x4}, 0x1c) sendmsg(r5, &(0x7f00000000c0)={0x0, 0x9504, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xd8ef}], 0x1, 0x0, 0x0, 0x2c}, 0x4) 7.994329132s ago: executing program 1 (id=4257): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x2, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r1}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8922, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) 7.941934637s ago: executing program 1 (id=4259): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0xe, @local, 0x7}, 0x1c) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b70300000000002085000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) sendto$inet6(r1, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x604ab000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f00000002c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1, 0x0}, &(0x7f00000000c0)=0x40) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb01001800000000000000540000005400000009000000030000000600009301000000010000000300020001000000020000000700000001000000050033c1445cb3c5e8b411000500000002000000030000000400002178000000000000000c0000000a00000002d30000002e616ea0"], &(0x7f00000006c0)=""/237, 0x75, 0xed, 0x1}, 0x28) fallocate(0xffffffffffffffff, 0x0, 0xa00, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@mss={0x2, 0x1}, @sack_perm, @window={0x3, 0x5, 0xffff}, @window={0x3, 0x100, 0x4}, @timestamp, @window={0x3, 0x1, 0xff}, @mss={0x2, 0xfffffff8}, @window={0x3, 0x4, 0xfffa}], 0x8) ioctl$KDDISABIO(0xffffffffffffffff, 0x4b37) 7.823873949s ago: executing program 0 (id=4262): socket$inet6(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x10) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r4 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r5 = openat$binfmt(0xffffffffffffff9c, r4, 0x42, 0x1ff) write$binfmt_script(r5, &(0x7f0000000000)={'#! ', './file1', [{0x20, '=\b\xa3\x85\xf5\xf4t\xe5\x01M2qX\xd7eO\xc6\xe83i\x98\x03\x00Ak\x00\x00'}]}, 0x9) close(r5) r6 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) write$binfmt_register(r6, &(0x7f00000000c0)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x9, 0x3a, '#! ', 0x3a, '#! ', 0x3a, './file1', 0x3a, [0x50, 0x46, 0x50, 0x4f, 0x46, 0x50, 0x50]}, 0x34) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='ext4_allocate_inode\x00', 0xffffffffffffffff, 0x0, 0x1000}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007"], &(0x7f0000000380)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) mount(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080)='pstore\x00', 0x10005, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) 5.821755876s ago: executing program 4 (id=4264): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="780000001000010500000000fbdbdf2500000000", @ANYRES32=r2, @ANYBLOB="0160000000000000580012800900010069706970000000004800028005000a000100000005000500080000000500040009000000040013000800140020000000080003000a"], 0x78}}, 0x84000) 5.820557807s ago: executing program 5 (id=4265): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r0, 0x8983, &(0x7f0000000000)) r1 = syz_socket_connect_nvme_tcp() recvfrom$inet_nvme(r1, &(0x7f0000000040)=""/133, 0x85, 0x2000, &(0x7f0000000100)=@ieee802154={0x24, @long={0x3, 0xffff}}, 0x80) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCOUTQ(r3, 0x5411, &(0x7f00000001c0)) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r4, 0x800448f0, &(0x7f0000000200)={0x4, 0x2, "8ad781", 0x6, 0x5}) r5 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETSGCNT_IN6(r5, 0x89e1, &(0x7f0000000240)={@local, @ipv4={'\x00', '\xff\xff', @empty}}) pipe2$9p(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RREADLINK(r6, &(0x7f00000002c0)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10) r7 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) getsockopt$sock_buf(r7, 0x1, 0x1c, &(0x7f0000000300)=""/182, &(0x7f00000003c0)=0xb6) lstat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)) openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x8000, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000500)=0x4302, 0x4) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_PORTS(r8, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, 0x0, 0x100, 0x70bd29, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008090}, 0x4004080) setsockopt$MRT_ASSERT(r7, 0x0, 0xcf, &(0x7f0000000640)=0x1, 0x4) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), r8) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x2c, r9, 0x4, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5, 0x36}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x42}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x80) sched_setscheduler(0x0, 0x1, &(0x7f00000007c0)=0x2) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000bc0)={0xffffffffffffffff, 0xe0, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000900)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000000940)=[0x0], &(0x7f0000000980)=[0x0], 0x0, 0xc8, &(0x7f00000009c0)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000a00), &(0x7f0000000a40), 0x8, 0xf8, 0x8, 0x8, &(0x7f0000000a80)}}, 0x10) r11 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000ec0)=@bpf_tracing={0x1a, 0x1e, &(0x7f0000000c00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, 0x0, 0x0, 0x9}, {}, {}, [@alu={0x7, 0x0, 0xc, 0x2, 0x1, 0xc, 0x11}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x80000001}, @map_idx={0x18, 0x9, 0x5, 0x0, 0xe}, @tail_call, @ringbuf_query, @ldst={0x1, 0x2, 0x1, 0x1, 0xb, 0xfffffffffffffff0, 0x10}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000d00)='GPL\x00', 0x10, 0x48, &(0x7f0000000d40)=""/72, 0x41100, 0x39, '\x00', 0x0, 0x1c, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000dc0)={0x1, 0x6, 0x2, 0x781}, 0x10, 0x270ba, 0xffffffffffffffff, 0x7, &(0x7f0000000e00)=[0x1, 0x1, 0xffffffffffffffff], &(0x7f0000000e40)=[{0x2, 0x4, 0x8, 0x1}, {0x4, 0x2, 0xa, 0x7}, {0x4, 0x3, 0x9, 0xa}, {0x1, 0x2, 0x2, 0x5}, {0x0, 0x1, 0xa, 0x1}, {0x0, 0x3, 0x1}, {0x5, 0x3, 0x4, 0x2}]}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001000)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000f80), &(0x7f0000000fc0)}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001040)={0x1, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001080)={0x1, 0xffffffffffffffff}, 0x4) r15 = pidfd_getfd(0xffffffffffffffff, r6, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x4, 0x10, &(0x7f0000000800)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xae}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ldst={0x3, 0x2, 0x0, 0x3, 0x9, 0xffffffffffffffc0, 0x8}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000880)='GPL\x00', 0x8001, 0x0, 0x0, 0x41100, 0xde2f8910505d0e21, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x0, 0xe, 0x6, 0x9}, 0x10, r10, r11, 0x0, &(0x7f00000010c0)=[r7, r12, r13, r14, r15], 0x0, 0x10, 0x2}, 0x94) 5.761422902s ago: executing program 4 (id=4266): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x182, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0xfea7) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x1000003, 0x12, r2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f00000001c0)=0x7, 0x0, 0x4) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) fcntl$setsig(r1, 0xa, 0xd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x41) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000100)={{0x100, 0x9, 0x2, 0xfffe}, 'syz1\x00', 0x3b}) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) write$input_event(0xffffffffffffffff, &(0x7f0000000200)={{0x77359400}, 0x11, 0xae, 0x7fffffff}, 0xffffffe7) 5.58650735s ago: executing program 5 (id=4267): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0xc0, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0xb}}, [@filter_kind_options=@f_flower={{0xb}, {0x28, 0x2, [@TCA_FLOWER_KEY_CVLAN_ID={0x6, 0x4d, 0xfa7}, @TCA_FLOWER_KEY_ETH_DST={0xa}, @TCA_FLOWER_KEY_ICMPV4_CODE_MASK={0x5}, @TCA_FLOWER_KEY_ARP_SIP_MASK={0x8, 0x3a, 0xffffffff}]}}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0x58, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x38, 0x1, [@m_mirred={0x34, 0x5, 0x0, 0x0, {{0xb}, {0x4}, {0x6, 0x6, "d527"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x4}}}}]}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x3}]}}]}, 0xc0}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) getrlimit(0xd, &(0x7f0000000000)) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x211}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 5.37727014s ago: executing program 2 (id=4270): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r1}, 0x18) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newtaction={0x70, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_bpf={0x58, 0x1, 0x0, 0x0, {{0x8}, {0x30, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1}}, @TCA_ACT_BPF_FD={0x8, 0x5, r3}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 5.354630632s ago: executing program 2 (id=4271): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r2}, 0x10) getrlimit(0x6, &(0x7f00000001c0)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r5) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000380)='timerslack_ns\x00') read$msr(r6, &(0x7f0000002140)=""/207, 0xbd) epoll_create(0x3ff) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0xfffffffe}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x2d) r9 = socket$key(0xf, 0x3, 0x2) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r10, 0xae03, 0x3b) sendmsg$key(r9, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c16ad803f1f805000600200000000a00060000000000ff0000009061ca2b00001fffff0001000003f1dc7f7c6e7c02000100000000000040000200000000050005000080ff000a"], 0x80}}, 0x0) 5.187194019s ago: executing program 0 (id=4272): r0 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) r1 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x3804402, &(0x7f0000000240)={[{@minixdf}, {@abort}, {@resuid}, {@user_xattr}, {@discard}, {@data_err_ignore}, {@nolazytime}, {@noinit_itable}, {@nomblk_io_submit}, {@nodelalloc}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40000}}]}, 0x1, 0x56d, &(0x7f0000000540)="$eJzs3d9rW+UbAPDnpO1+77sOxvgqIsVdOJlLt9YfE7yYl6LDgd7P0mZlNF1Gk861Dtwu3I03MgQRB+K1eu/l8B/wrxjoYMgoinhTOelJm6VJk3Vpm5rPB872vjknfc+Tc56X982bkAD61kj6Ty7iuYj4Mok4UrdvMLKdIyvHLT2+OZluSSwvf/hHEkn2WO34JPv/YFb5f0T88nnEqdz6dssLizMTxWJhLquPVmavjZYXFk9fmZ2YLkwXro6Nj597fXzsrTff6Fqsr1z865sP7r977osTS1//9PDo3STOx6FsX30cz+BWfWUkRrLXZCjONxx4tguN9ZJkp0+ATRnI8nwo0j7gSAxkWQ/8930WEctAn0rkP/Sp2jigNrfv0jx413j0zsoEaH38gyvvjcS+6tzowFLyxMwone8Od6H9tI2ff793N92ie+9DALR163ZEnBkcXN//JVn/t3lnOjimsQ39H2yf++n459Vm45/c6vgnmox/DjbJ3c1on/+5hw2H7OlCs6vS8d/bTce/q4tWwwNZ7XB1zDeUXL5SLKR92/8i4mQM7U3rG63nnFt6sNxqX/34L93S9mtjwew8Hg7uffI5UxOViWeJud6j2xHPNx3/JqvXP2ly/dPX42KHbRwv3Hux1b728W+t5e8jXm56/ddWtJKN1ydHq/fDaO2uWO/PO8d/bdX+TsefXv8DK/H/nU0JG+MfTurXa8tP38Z3+/4ptNq32ft/T/JRtVzrDG5MVCpzZyP2JO+vf3xs7bm1eu34NP6TJzbu/5rd//sj4uMO479z7McXNh//1krjn9r4/m+4/k9fePDep9+2ar+z6/9atXQye6ST/q/TE3yW1w4AAAAAAAB6TS4iDkWSy6+Wc7l8fuXzHcfiQK5YKldOXS7NX52K6ndlh2MoV1vpPrL2eYjqcutw3ecjxhrq4xFxNCK+GthfrecnS8WpnQ4eAAAAAAAAAAAAAAAAAAAAesTBFt//T/02sNNnB2w5P/kN/att/nfjl56AntQm/1/6ZLtOBNh2xv/Qv+Q/9C/5D/1L/kP/kv/Qv+Q/9C/5DwAAAAAAAAAAAAAAAAAAAAAAAAAAAF118cKFdFteenxzMq1PXV+YnyldPz1VKM/kZ+cn85OluWv56VJpuljIT5Zm2/29Yql07exYzN8YrRTKldHywuKl2dL81cqlK7M/HI4oDG1LVAAAAAAAAAAAAAAAAAAAALC7lBcWZyaKxcKcQrWwN3riNHZRYbA3TqM/CxFb1sRO90wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsObfAAAA//9IKziJ") open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x30) fallocate(r1, 0x4, 0x10000002, 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYRES64=r0, @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) r5 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYRES16=r10, @ANYRES64=r4, @ANYRES16=r5], 0x28}}, 0x40000) r11 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'gretap0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r12, 0x1, 0x0, 0x6, @multicast}, 0x14) socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x4003) 3.863382879s ago: executing program 1 (id=4273): syz_usb_connect$uac1(0x5, 0x9c, 0x0, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440)={0x28, 0x0, 0x2710, @host}, 0x10) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000012c0), 0xfe, 0x244, &(0x7f0000000400)="$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") mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1004002, 0x0) chdir(&(0x7f00000001c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) connect$vsock_stream(r0, &(0x7f0000000180)={0x28, 0x0, 0x2710, @local}, 0x10) 3.86249722s ago: executing program 5 (id=4274): io_setup(0x2, &(0x7f0000000000)) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'gre0\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004004883ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8ff20c2c10f0093d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r2}, &(0x7f0000000040), &(0x7f0000000280)='%pS \x00'}, 0x20) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000c"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) r6 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000240)=@usbdevfs_connect) r7 = socket(0x28, 0x5, 0x0) listen(r7, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) r8 = accept4$unix(r7, 0x0, 0x0, 0x0) recvfrom$unix(r8, 0x0, 0x0, 0x42, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r9}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002080)={&(0x7f0000000300)='kfree\x00', r10}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0500000001000000080000000800000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000225e3d33a24d22b7e2d8101b984020dc2cab8f5fdad6bfddaaed1f8cf5a6e17449246be481107b3b98196c0c8ffbb3305d52c3a20a4a00eca9ff42095669b09526b1c2496bcebf9e61edec7e10396af53bb4a087215eee28d56797516be7947586ae828c925e92ac936576b52b", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) 3.861343899s ago: executing program 5 (id=4275): syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000240)='./bus\x00', 0x1800840, &(0x7f0000000180)=ANY=[@ANYBLOB='utf8=1,errors=continue,nonumtail=0,rodir,check=strict,nonumtail=0,iocharset=cp864,nonumtail=0,iocharset=cp950,utf8=1,rodir,utf8=0,tz=UTC,\x00'/150], 0x1, 0x360, &(0x7f0000000900)="$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") openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0xfeff) (fail_nth: 2) 3.645027751s ago: executing program 0 (id=4276): io_setup(0x490, &(0x7f0000000000)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000003"], 0x48) r1 = syz_open_dev$loop(&(0x7f0000000500), 0x5, 0x80) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000040)={0x2000003c, &(0x7f0000000280)}) bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r3, &(0x7f0000000040)=ANY=[], 0x6) ioctl$BLKPBSZGET(r1, 0x127b, &(0x7f0000000540)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r5}, 0x10) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000340), 0x802, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000007500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r8}, 0x18) r9 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r7, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r9, @ANYRES32=r9], 0x44}}, 0x0) 3.643792411s ago: executing program 2 (id=4277): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a500850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002ac0)={0x1a, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2004}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r1, 0x2500}, 0x10) 3.603116315s ago: executing program 2 (id=4278): mount_setattr(0xffffffffffffffff, 0x0, 0x9800, 0x0, 0x100000) 3.545124521s ago: executing program 2 (id=4279): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r2}, 0x10) getrlimit(0x6, &(0x7f00000001c0)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r5) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000380)='timerslack_ns\x00') read$msr(r6, &(0x7f0000002140)=""/207, 0xbd) epoll_create(0x3ff) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0xfffffffe}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r9, 0xae03, 0x3b) sendmsg$key(r8, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c16ad803f1f805000600200000000a00060000000000ff0000009061ca2b00001fffff0001000003f1dc7f7c6e7c02000100000000000040000200000000050005000080ff000a"], 0x80}}, 0x0) 3.544392261s ago: executing program 4 (id=4280): socket$netlink(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x52) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x51}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r3}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 3.459577569s ago: executing program 4 (id=4281): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000050000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000002a97850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r0}, 0xc) chdir(&(0x7f0000000480)='./cgroup\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r1, 0x4d7f6084, 0x0) getdents64(r1, 0x0, 0xfde8) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) r3 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) r5 = syz_btf_id_by_name$bpf_lsm(&(0x7f00000001c0)='bpf_lsm_inode_rmdir\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYRES32=r5, @ANYRESOCT, @ANYRESOCT, @ANYRESOCT=r4], 0x0, 0x0, 0x0, 0x0, 0x41100, 0xe, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket(0xa, 0x3, 0xfc) setsockopt$inet6_opts(r6, 0x29, 0x39, &(0x7f0000000240)=ANY=[@ANYBLOB="611404"], 0xa8) setsockopt$inet6_int(r6, 0x29, 0x24, &(0x7f0000000080)=0xcd6, 0x4) sendto$unix(r6, 0x0, 0xffffffffffffff84, 0x48850, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e20}, 0x6e) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x8, 0xd, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@ldst={0x1, 0x3, 0x6, 0xb, 0x5, 0x6, 0x8}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000000)='syzkaller\x00', 0x100, 0xf4, &(0x7f0000000100)=""/244, 0x41000, 0xc, '\x00', r2, @cgroup_skb=0x1, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x2, 0xd, 0x4, 0x8}, 0x10, r5, r0, 0x8, 0x0, &(0x7f0000000300)=[{0x4, 0x3, 0x5}, {0x1, 0x3, 0xd, 0xa}, {0x1, 0x3, 0xc, 0xc}, {0x4, 0x1, 0x9, 0x1}, {0x3, 0x1, 0x9, 0x9}, {0x3, 0x1, 0x4, 0x1}, {0x0, 0x3, 0x10, 0x7}, {0x3, 0x2, 0x2, 0xa}], 0x10, 0x7}, 0x94) 3.271287278s ago: executing program 5 (id=4282): socket$inet6(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x10) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r4 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r5 = openat$binfmt(0xffffffffffffff9c, r4, 0x42, 0x1ff) write$binfmt_script(r5, &(0x7f0000000000)={'#! ', './file1', [{0x20, '=\b\xa3\x85\xf5\xf4t\xe5\x01M2qX\xd7eO\xc6\xe83i\x98\x03\x00Ak\x00\x00'}]}, 0x9) close(r5) r6 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) write$binfmt_register(r6, &(0x7f00000000c0)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x9, 0x3a, '#! ', 0x3a, '#! ', 0x3a, './file1', 0x3a, [0x50, 0x46, 0x50, 0x4f, 0x46, 0x50, 0x50]}, 0x34) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='ext4_allocate_inode\x00', 0xffffffffffffffff, 0x0, 0x1000}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007"], &(0x7f0000000380)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) mount(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080)='pstore\x00', 0x10005, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) 3.24638839s ago: executing program 0 (id=4283): socket$netlink(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x52) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x51}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r1}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 3.24549151s ago: executing program 4 (id=4284): syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000240)='./bus\x00', 0x1800840, &(0x7f0000000180)=ANY=[@ANYBLOB='utf8=1,errors=continue,nonumtail=0,rodir,check=strict,nonumtail=0,iocharset=cp864,nonumtail=0,iocharset=cp950,utf8=1,rodir,utf8=0,tz=UTC,\x00'/150], 0x1, 0x360, &(0x7f0000000900)="$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") r0 = socket(0xa, 0x2400000001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000300)={0x0, {{0xa, 0x0, 0x0, @mcast1, 0x10000008}}}, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0000000000000000000100000f000f00"}}}]}, 0x48}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'syztnl0\x00', &(0x7f0000000280)={'ip6gre0\x00', 0x0, 0x4, 0xc0, 0x9, 0xffffffff, 0x40, @dev={0xfe, 0x80, '\x00', 0x18}, @dev={0xfe, 0x80, '\x00', 0xe}, 0x1, 0x40, 0x3, 0x3ff}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000380)={'syztnl2\x00', &(0x7f0000000300)={'syztnl0\x00', 0x0, 0x4, 0x7, 0x0, 0x7f, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x2c}, 0x80, 0x7, 0xffffffff, 0xfffffffd}}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f00000003c0)={@private, @loopback, 0x0}, &(0x7f0000000400)=0xc) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000004c0)={'ip6_vti0\x00', &(0x7f0000000440)={'ip6tnl0\x00', 0x0, 0x4, 0x0, 0x0, 0x14ac, 0x24, @ipv4={'\x00', '\xff\xff', @local}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8000, 0x806e, 0xa0}}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000740)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000580)={&(0x7f0000000600)={0x120, 0x0, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}]}, @HEADER={0x4}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @HEADER={0x90, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x120}, 0x1, 0x0, 0x0, 0x40000}, 0x4) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002ac0)={0x1a, 0x3, &(0x7f00000012c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2000}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000800)={{}, &(0x7f0000000780), &(0x7f00000007c0)=r9}, 0x20) openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0xfeff) 3.227802312s ago: executing program 0 (id=4285): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE(r1, 0x5000940c, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=ANY=[@ANYBLOB="380000004900010000000000000040000a008000", @ANYRES32=0x0, @ANYBLOB="0000000008000200000000001400010000000000000000000000000000000001"], 0x38}, 0x1, 0x0, 0x0, 0x4000004}, 0x4040) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) fchownat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xee01, 0xee01, 0x1000) setxattr$system_posix_acl(&(0x7f00000000c0)='./file0\x00', &(0x7f0000002b80)='system.posix_acl_access\x00', &(0x7f0000000400)=ANY=[@ANYBLOB="02000000010007000000000004000200000000001000060000000000200007"], 0x24, 0x3) setxattr$security_capability(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000180), 0x0, 0x0, 0x1) 3.153541929s ago: executing program 4 (id=4286): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0xe, @local, 0x7}, 0x1c) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000002c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1, 0x0}, &(0x7f00000000c0)=0x40) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb01001800000000000000540000005400000009000000030000000600009301000000010000000300020001000000020000000700000001000000050033c1445cb3c5e8b411000500000002000000030000000400002178000000000000000c0000000a00000002d30000002e616ea0"], &(0x7f00000006c0)=""/237, 0x75, 0xed, 0x1}, 0x28) fallocate(0xffffffffffffffff, 0x0, 0xa00, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000340)=[@mss={0x2, 0x1}, @sack_perm, @window={0x3, 0x5, 0xffff}, @window={0x3, 0x100, 0x4}, @timestamp, @window={0x3, 0x1, 0xff}, @mss={0x2, 0xfffffff8}, @window={0x3, 0x4, 0xfffa}], 0x8) ioctl$KDDISABIO(0xffffffffffffffff, 0x4b37) 2.064357547s ago: executing program 2 (id=4287): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0xe, @local, 0x7}, 0x1c) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b70300000000002085000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) sendto$inet6(r1, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x604ab000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f00000002c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1, 0x0}, &(0x7f00000000c0)=0x40) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb01001800000000000000540000005400000009000000030000000600009301000000010000000300020001000000020000000700000001000000050033c1445cb3c5e8b411000500000002000000030000000400002178000000000000000c0000000a00000002d30000002e616ea0"], &(0x7f00000006c0)=""/237, 0x75, 0xed, 0x1}, 0x28) fallocate(0xffffffffffffffff, 0x0, 0xa00, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@mss={0x2, 0x1}, @sack_perm, @window={0x3, 0x5, 0xffff}, @window={0x3, 0x100, 0x4}, @timestamp, @window={0x3, 0x1, 0xff}, @mss={0x2, 0xfffffff8}, @window={0x3, 0x4, 0xfffa}], 0x8) ioctl$KDDISABIO(0xffffffffffffffff, 0x4b37) 1.899479013s ago: executing program 5 (id=4288): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0xe, @local, 0x7}, 0x1c) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b7030000000000208500000072000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) sendto$inet6(r1, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x604ab000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f00000002c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1, 0x0}, &(0x7f00000000c0)=0x40) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb01001800000000000000540000005400000009000000030000000600009301000000010000000300020001000000020000000700000001000000050033c1445cb3c5e8b411000500000002000000030000000400002178000000000000000c0000000a00000002d30000002e616ea0"], &(0x7f00000006c0)=""/237, 0x75, 0xed, 0x1}, 0x28) fallocate(0xffffffffffffffff, 0x0, 0xa00, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@mss={0x2, 0x1}, @sack_perm, @window={0x3, 0x5, 0xffff}, @window={0x3, 0x100, 0x4}, @timestamp, @window={0x3, 0x1, 0xff}, @mss={0x2, 0xfffffff8}, @window={0x3, 0x4, 0xfffa}], 0x8) ioctl$KDDISABIO(0xffffffffffffffff, 0x4b37) 355.191345ms ago: executing program 1 (id=4289): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0xe, @local, 0x7}, 0x1c) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000002c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1, 0x0}, &(0x7f00000000c0)=0x40) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb01001800000000000000540000005400000009000000030000000600009301000000010000000300020001000000020000000700000001000000050033c1445cb3c5e8b411000500000002000000030000000400002178000000000000000c0000000a00000002d30000002e616ea0"], &(0x7f00000006c0)=""/237, 0x75, 0xed, 0x1}, 0x28) fallocate(0xffffffffffffffff, 0x0, 0xa00, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000340)=[@mss={0x2, 0x1}, @sack_perm, @window={0x3, 0x5, 0xffff}, @window={0x3, 0x100, 0x4}, @timestamp, @window={0x3, 0x1, 0xff}, @mss={0x2, 0xfffffff8}, @window={0x3, 0x4, 0xfffa}], 0x8) ioctl$KDDISABIO(0xffffffffffffffff, 0x4b37) 0s ago: executing program 0 (id=4290): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x182, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0xfea7) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x1000003, 0x12, r2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f00000001c0)=0x7, 0x0, 0x4) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) fcntl$setsig(r1, 0xa, 0xd) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x41) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000100)={{0x100, 0x9, 0x2, 0xfffe}, 'syz1\x00', 0x3b}) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) write$input_event(0xffffffffffffffff, &(0x7f0000000200)={{0x77359400}, 0x11, 0xae, 0x7fffffff}, 0xffffffe7) kernel console output (not intermixed with test programs): y [ 1012.234675][ T394] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1012.261804][ T394] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1012.272214][T13265] device veth1_macvtap entered promiscuous mode [ 1012.283150][ T394] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1012.293621][ T394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1012.479977][T13297] loop4: detected capacity change from 0 to 256 [ 1012.550809][T13297] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xbc8dc3cd, utbl_chksum : 0xe619d30d) [ 1012.632744][ T28] audit: type=1400 audit(1760870926.006:698): avc: denied { read append open } for pid=13296 comm="syz.4.3165" path="/0/file0/blkio.bfq.time_recursive" dev="loop4" ino=1048649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1012.659798][ T28] audit: type=1400 audit(1760870926.006:699): avc: denied { map } for pid=13296 comm="syz.4.3165" path="/0/file0/blkio.bfq.time_recursive" dev="loop4" ino=1048649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1012.684940][ T28] audit: type=1400 audit(1760870926.006:700): avc: denied { execute } for pid=13296 comm="syz.4.3165" path="/0/file0/blkio.bfq.time_recursive" dev="loop4" ino=1048649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1012.728120][T13113] cp2112 0003:10C4:EA90.004A: unknown main item tag 0x0 [ 1012.735152][T13113] cp2112 0003:10C4:EA90.004A: unknown main item tag 0x0 [ 1012.756874][T13113] cp2112 0003:10C4:EA90.004A: unknown main item tag 0x0 [ 1012.763891][T13113] cp2112 0003:10C4:EA90.004A: unknown main item tag 0x0 [ 1012.771885][T13113] cp2112 0003:10C4:EA90.004A: unknown main item tag 0x0 [ 1012.779275][T13113] cp2112 0003:10C4:EA90.004A: unknown main item tag 0x0 [ 1012.786296][T13113] cp2112 0003:10C4:EA90.004A: unknown main item tag 0x0 [ 1012.794064][T13113] cp2112 0003:10C4:EA90.004A: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 1013.261669][T13113] cp2112 0003:10C4:EA90.004A: Part Number: 0x00 Device Version: 0x00 [ 1014.455064][T13324] loop4: detected capacity change from 0 to 512 [ 1014.479935][T13324] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1014.494444][T13324] ext4 filesystem being mounted at /3/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1014.596703][T13265] EXT4-fs (loop4): unmounting filesystem. [ 1014.621125][T13113] cp2112 0003:10C4:EA90.004A: error requesting SMBus config [ 1014.630163][T13113] cp2112: probe of 0003:10C4:EA90.004A failed with error -71 [ 1014.653023][T13113] usb 1-1: USB disconnect, device number 24 [ 1015.491826][T13351] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1015.610112][T13355] loop1: detected capacity change from 0 to 256 [ 1015.830175][T13344] fido_id[13344]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 1015.908469][T11589] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1015.965934][ T394] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 1015.990267][ T394] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1016.002522][ T394] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 1016.027884][ T394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1016.036884][ T394] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1016.045348][ T394] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1016.068420][ T394] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1016.077464][ T394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1018.411407][T13386] loop1: detected capacity change from 0 to 256 [ 1018.492418][T13386] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dff195, utbl_chksum : 0xe619d30d) [ 1019.395815][T13386] sch_fq: defrate 4294967295 ignored. [ 1020.713427][T13408] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1020.727335][T13408] FAT-fs (loop3): unable to read boot sector [ 1020.745577][ T28] audit: type=1400 audit(1760870934.116:701): avc: denied { read write } for pid=13407 comm="syz.1.3200" name="file0" dev="tmpfs" ino=358 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1020.830880][ T28] audit: type=1400 audit(1760870934.206:702): avc: denied { open } for pid=13407 comm="syz.1.3200" path="/63/file0" dev="tmpfs" ino=358 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1020.922396][ T28] audit: type=1400 audit(1760870934.296:703): avc: denied { call } for pid=13413 comm="syz.0.3202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 1021.102348][T13414] binder_alloc: 13413: binder_alloc_buf, no vma [ 1021.584967][T13432] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 1021.593929][T13432] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1021.760643][T13445] loop4: detected capacity change from 0 to 256 [ 1021.774979][T13445] FAT-fs (loop4): Unrecognized mount option "ÿ0xffffffffffffffff00000000000000000000ÿÿ" or missing value [ 1021.963467][ T28] audit: type=1400 audit(1760870935.336:704): avc: denied { mount } for pid=13443 comm="syz.4.3212" name="/" dev="ramfs" ino=66645 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 1022.881828][T13457] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3213'. [ 1023.011160][T13462] loop4: detected capacity change from 0 to 128 [ 1023.176885][ T28] audit: type=1400 audit(1760870936.536:705): avc: denied { mounton } for pid=13461 comm="syz.4.3216" path="/13/file0/file0" dev="loop4" ino=1048651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 1023.489746][T13471] FAULT_INJECTION: forcing a failure. [ 1023.489746][T13471] name failslab, interval 1, probability 0, space 0, times 0 [ 1023.502833][T13471] CPU: 0 PID: 13471 Comm: syz.1.3218 Not tainted syzkaller #0 [ 1023.510328][T13471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1023.520445][T13471] Call Trace: [ 1023.523730][T13471] [ 1023.526662][T13471] __dump_stack+0x21/0x24 [ 1023.530994][T13471] dump_stack_lvl+0xee/0x150 [ 1023.535596][T13471] ? __cfi_dump_stack_lvl+0x8/0x8 [ 1023.540656][T13471] dump_stack+0x15/0x24 [ 1023.544818][T13471] should_fail_ex+0x3d4/0x520 [ 1023.549528][T13471] ? vm_area_alloc+0xe9/0x1a0 [ 1023.554505][T13471] __should_failslab+0xac/0xf0 [ 1023.559276][T13471] should_failslab+0x9/0x20 [ 1023.563784][T13471] kmem_cache_alloc+0x3b/0x330 [ 1023.568574][T13471] vm_area_alloc+0xe9/0x1a0 [ 1023.573090][T13471] mmap_region+0xf9f/0x2290 [ 1023.577613][T13471] ? __cfi_mmap_region+0x10/0x10 [ 1023.582567][T13471] ? cap_mmap_addr+0x165/0x2e0 [ 1023.587345][T13471] ? __kasan_slab_free+0x11/0x20 [ 1023.592289][T13471] ? slab_free_freelist_hook+0xc2/0x190 [ 1023.597846][T13471] ? __kmem_cache_free+0xb7/0x1b0 [ 1023.602893][T13471] ? get_unmapped_area+0x313/0x380 [ 1023.608020][T13471] do_mmap+0x843/0xdc0 [ 1023.612106][T13471] ? __cfi_do_mmap+0x10/0x10 [ 1023.616716][T13471] vm_mmap_pgoff+0x1f5/0x3f0 [ 1023.621310][T13471] ? ____kasan_slab_free+0x13d/0x180 [ 1023.626608][T13471] ? __cfi_vm_mmap_pgoff+0x10/0x10 [ 1023.631724][T13471] ? __se_sys_memfd_create+0x339/0x3b0 [ 1023.637199][T13471] ? __kmem_cache_free+0xb7/0x1b0 [ 1023.642258][T13471] ksys_mmap_pgoff+0xf6/0x1d0 [ 1023.646956][T13471] __x64_sys_mmap+0xfa/0x110 [ 1023.651569][T13471] x64_sys_call+0x8fd/0x9a0 [ 1023.656078][T13471] do_syscall_64+0x4c/0xa0 [ 1023.660504][T13471] ? clear_bhb_loop+0x30/0x80 [ 1023.665194][T13471] ? clear_bhb_loop+0x30/0x80 [ 1023.669901][T13471] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1023.675802][T13471] RIP: 0033:0x7fada158f003 [ 1023.680226][T13471] Code: f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 41 89 ca 41 f7 c1 ff 0f 00 00 75 14 b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 25 c3 0f 1f 40 00 48 c7 c0 a8 ff ff ff 64 c7 [ 1023.699838][T13471] RSP: 002b:00007fada2474e18 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1023.708265][T13471] RAX: ffffffffffffffda RBX: 000000000000551b RCX: 00007fada158f003 [ 1023.716246][T13471] RDX: 0000000000000003 RSI: 0000000008400000 RDI: 0000000000000000 [ 1023.724225][T13471] RBP: 00002000000079c2 R08: 00000000ffffffff R09: 0000000000000000 [ 1023.732212][T13471] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000005 [ 1023.740227][T13471] R13: 00007fada2474ef0 R14: 00007fada2474eb0 R15: 0000200000000280 [ 1023.748217][T13471] [ 1023.751495][ T28] audit: type=1400 audit(1760870936.936:706): avc: denied { write } for pid=13461 comm="syz.4.3216" name="ppp" dev="devtmpfs" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1023.788329][ T28] audit: type=1400 audit(1760870936.936:707): avc: denied { ioctl } for pid=13461 comm="syz.4.3216" path="/dev/ppp" dev="devtmpfs" ino=158 ioctlcmd=0x743d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1024.412452][T13492] loop4: detected capacity change from 0 to 256 [ 1026.666907][ T6337] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 1027.127974][ T6337] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1027.143124][ T6337] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1027.161314][ T6337] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1027.185910][ T6337] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1027.215209][ T6337] usb 5-1: config 0 descriptor?? [ 1027.450357][T13548] loop5: detected capacity change from 0 to 128 [ 1027.515955][T13548] syz.5.3240: attempt to access beyond end of device [ 1027.515955][T13548] loop5: rw=2049, sector=145, nr_sectors = 89 limit=128 [ 1027.585808][T13548] syz.5.3240: attempt to access beyond end of device [ 1027.585808][T13548] loop5: rw=2049, sector=241, nr_sectors = 800 limit=128 [ 1027.631524][T13548] syz.5.3240: attempt to access beyond end of device [ 1027.631524][T13548] loop5: rw=524288, sector=249, nr_sectors = 248 limit=128 [ 1027.633101][ T6337] cp2112 0003:10C4:EA90.004B: unknown main item tag 0x0 [ 1027.659587][T13548] syz.5.3240: attempt to access beyond end of device [ 1027.659587][T13548] loop5: rw=0, sector=249, nr_sectors = 8 limit=128 [ 1027.693147][ T6337] cp2112 0003:10C4:EA90.004B: unknown main item tag 0x0 [ 1027.694490][T13548] syz.5.3240: attempt to access beyond end of device [ 1027.694490][T13548] loop5: rw=0, sector=249, nr_sectors = 8 limit=128 [ 1027.703256][ T6337] cp2112 0003:10C4:EA90.004B: unknown main item tag 0x0 [ 1027.756946][ T6337] cp2112 0003:10C4:EA90.004B: unknown main item tag 0x0 [ 1027.757118][T11898] kworker/u4:1: attempt to access beyond end of device [ 1027.757118][T11898] loop5: rw=1, sector=241, nr_sectors = 1 limit=128 [ 1027.763970][ T6337] cp2112 0003:10C4:EA90.004B: unknown main item tag 0x0 [ 1027.797024][T11898] Buffer I/O error on dev loop5, logical block 241, lost async page write [ 1027.816858][ T6337] cp2112 0003:10C4:EA90.004B: unknown main item tag 0x0 [ 1027.823992][ T6337] cp2112 0003:10C4:EA90.004B: unknown main item tag 0x0 [ 1027.841658][ T6337] cp2112 0003:10C4:EA90.004B: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 1027.940220][ T6337] cp2112 0003:10C4:EA90.004B: Part Number: 0x00 Device Version: 0x00 [ 1028.064821][T13555] loop5: detected capacity change from 0 to 256 [ 1028.082418][T13555] exFAT-fs (loop5): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d) [ 1032.732994][T13568] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1033.725587][T13577] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1033.742784][ T6337] cp2112 0003:10C4:EA90.004B: error requesting SMBus config [ 1033.750888][ T6337] cp2112: probe of 0003:10C4:EA90.004B failed with error -110 [ 1033.818138][ T28] audit: type=1400 audit(1760870947.196:708): avc: denied { relabelfrom } for pid=13576 comm="syz.0.3249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 1033.853983][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 1033.854000][ T28] audit: type=1400 audit(1760870947.216:709): avc: denied { relabelto } for pid=13576 comm="syz.0.3249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 1033.867550][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1034.056917][ T40] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 1034.282975][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 1034.290647][ T6337] usb 5-1: USB disconnect, device number 28 [ 1034.304601][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1034.313018][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1034.321287][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1034.329714][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1034.338169][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1034.398181][ T40] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1034.410913][ T40] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1034.421006][ T40] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1034.430120][ T40] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1034.450274][ T40] usb 2-1: config 0 descriptor?? [ 1034.866988][ T40] cp2112 0003:10C4:EA90.004C: unknown main item tag 0x0 [ 1034.877284][ T40] cp2112 0003:10C4:EA90.004C: unknown main item tag 0x0 [ 1036.111627][ T40] cp2112 0003:10C4:EA90.004C: unknown main item tag 0x0 [ 1036.122429][ T40] cp2112 0003:10C4:EA90.004C: unknown main item tag 0x0 [ 1036.129758][ T40] cp2112 0003:10C4:EA90.004C: unknown main item tag 0x0 [ 1036.184449][ T40] cp2112 0003:10C4:EA90.004C: unknown main item tag 0x0 [ 1036.192753][ T40] cp2112 0003:10C4:EA90.004C: unknown main item tag 0x0 [ 1036.203690][ T40] cp2112 0003:10C4:EA90.004C: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 1036.336585][ T40] cp2112 0003:10C4:EA90.004C: error requesting version [ 1036.350474][ T40] cp2112: probe of 0003:10C4:EA90.004C failed with error -32 [ 1037.126851][ T40] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 1037.346859][ T40] usb 6-1: Using ep0 maxpacket: 16 [ 1037.409428][T13631] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1037.418039][T13631] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1037.431951][T13633] loop4: detected capacity change from 0 to 256 [ 1037.438648][T13633] exfat: Unknown parameter 'aocharset' [ 1037.499892][ T40] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1037.508318][ T40] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 1037.515980][ T40] usb 6-1: can't read configurations, error -71 [ 1037.530873][ T518] usb 2-1: USB disconnect, device number 30 [ 1037.655982][T13638] loop4: detected capacity change from 0 to 128 [ 1037.853111][T13638] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1037.863047][T13638] ext4 filesystem being mounted at /19/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1037.881397][ T19] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 1037.915648][T13634] EXT4-fs error (device loop4): __ext4_find_entry:1696: inode #2: comm syz.4.3263: checksumming directory block 0 [ 1038.090543][ T19] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1038.101850][ T19] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1038.113653][ T19] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1038.123135][ T19] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1038.136685][ T19] usb 1-1: config 0 descriptor?? [ 1038.174587][T13649] loop5: detected capacity change from 0 to 4096 [ 1038.189031][T13649] EXT4-fs (loop5): Test dummy encryption mode enabled [ 1038.205442][T13649] EXT4-fs (loop5): unsupported descriptor size 255 [ 1038.335072][T13265] EXT4-fs (loop4): unmounting filesystem. [ 1038.714237][ T19] cp2112 0003:10C4:EA90.004D: unknown main item tag 0x0 [ 1038.721302][ T19] cp2112 0003:10C4:EA90.004D: unknown main item tag 0x0 [ 1038.729702][ T19] cp2112 0003:10C4:EA90.004D: unknown main item tag 0x0 [ 1038.744357][ T19] cp2112 0003:10C4:EA90.004D: unknown main item tag 0x0 [ 1038.764844][ T19] cp2112 0003:10C4:EA90.004D: unknown main item tag 0x0 [ 1038.781756][ T19] cp2112 0003:10C4:EA90.004D: unknown main item tag 0x0 [ 1038.796472][ T19] cp2112 0003:10C4:EA90.004D: unknown main item tag 0x0 [ 1038.812563][ T19] cp2112 0003:10C4:EA90.004D: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 1038.889624][ T19] cp2112 0003:10C4:EA90.004D: Part Number: 0x00 Device Version: 0x00 [ 1039.033770][T13661] loop5: detected capacity change from 0 to 512 [ 1039.052286][T13661] EXT4-fs error (device loop5): ext4_orphan_get:1400: inode #15: comm syz.5.3270: casefold flag without casefold feature [ 1039.066045][T13661] EXT4-fs error (device loop5): ext4_orphan_get:1405: comm syz.5.3270: couldn't read orphan inode 15 (err -117) [ 1039.078135][T13661] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1039.331474][T13664] overlayfs: failed to resolve './file0': -2 [ 1039.341187][ T28] audit: type=1400 audit(1760870952.716:710): avc: denied { setattr } for pid=13660 comm="syz.5.3270" name="file0" dev="loop5" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 1040.138438][T12209] EXT4-fs (loop5): unmounting filesystem. [ 1040.436866][T13113] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 1040.627995][T13113] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1040.639636][T13113] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1040.649803][T13113] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1040.659222][T13113] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1040.668536][T13113] usb 6-1: config 0 descriptor?? [ 1041.079557][T13113] cp2112 0003:10C4:EA90.004E: unknown main item tag 0x0 [ 1041.086670][T13113] cp2112 0003:10C4:EA90.004E: unknown main item tag 0x0 [ 1041.093720][T13113] cp2112 0003:10C4:EA90.004E: unknown main item tag 0x0 [ 1041.100813][T13113] cp2112 0003:10C4:EA90.004E: unknown main item tag 0x0 [ 1041.107844][T13113] cp2112 0003:10C4:EA90.004E: unknown main item tag 0x0 [ 1041.114890][T13113] cp2112 0003:10C4:EA90.004E: unknown main item tag 0x0 [ 1041.121925][T13113] cp2112 0003:10C4:EA90.004E: unknown main item tag 0x0 [ 1041.129602][T13113] cp2112 0003:10C4:EA90.004E: hidraw1: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.5-1/input0 [ 1041.208083][ T19] cp2112 0003:10C4:EA90.004D: error requesting SMBus config [ 1041.216171][ T19] cp2112: probe of 0003:10C4:EA90.004D failed with error -71 [ 1041.233485][ T19] usb 1-1: USB disconnect, device number 25 [ 1041.271288][T13689] fido_id[13689]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 1041.286073][T13113] cp2112 0003:10C4:EA90.004E: Part Number: 0x00 Device Version: 0x00 [ 1041.360978][T13691] loop0: detected capacity change from 0 to 256 [ 1042.491420][T13707] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1042.503950][T13707] bridge0: port 2(bridge_slave_1) entered disabled state [ 1042.511228][T13707] bridge0: port 1(bridge_slave_0) entered disabled state [ 1042.689897][ T28] audit: type=1400 audit(1760870956.066:711): avc: denied { write } for pid=13717 comm="syz.4.3285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1042.771239][T13719] loop0: detected capacity change from 0 to 256 [ 1042.798661][T13719] FAT-fs (loop0): Directory bread(block 64) failed [ 1042.805319][T13719] FAT-fs (loop0): Directory bread(block 65) failed [ 1042.812480][T13719] FAT-fs (loop0): Directory bread(block 66) failed [ 1042.819255][T13719] FAT-fs (loop0): Directory bread(block 67) failed [ 1042.826135][T13719] FAT-fs (loop0): Directory bread(block 68) failed [ 1042.832998][T13719] FAT-fs (loop0): Directory bread(block 69) failed [ 1042.839805][T13719] FAT-fs (loop0): Directory bread(block 70) failed [ 1042.846555][T13719] FAT-fs (loop0): Directory bread(block 71) failed [ 1042.853388][T13719] FAT-fs (loop0): Directory bread(block 72) failed [ 1042.860016][T13719] FAT-fs (loop0): Directory bread(block 73) failed [ 1043.616197][T13727] FAULT_INJECTION: forcing a failure. [ 1043.616197][T13727] name failslab, interval 1, probability 0, space 0, times 0 [ 1043.628900][T13727] CPU: 1 PID: 13727 Comm: syz.2.3288 Not tainted syzkaller #0 [ 1043.636385][T13727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1043.646457][T13727] Call Trace: [ 1043.649748][T13727] [ 1043.652787][T13727] __dump_stack+0x21/0x24 [ 1043.657146][T13727] dump_stack_lvl+0xee/0x150 [ 1043.661755][T13727] ? __cfi_dump_stack_lvl+0x8/0x8 [ 1043.664880][T13113] cp2112 0003:10C4:EA90.004E: error requesting SMBus config [ 1043.666803][T13727] dump_stack+0x15/0x24 [ 1043.666828][T13727] should_fail_ex+0x3d4/0x520 [ 1043.674935][T13113] cp2112: probe of 0003:10C4:EA90.004E failed with error -71 [ 1043.678263][T13727] ? dst_alloc+0x16a/0x1e0 [ 1043.678289][T13727] __should_failslab+0xac/0xf0 [ 1043.699596][T13727] should_failslab+0x9/0x20 [ 1043.701069][T13113] usb 6-1: USB disconnect, device number 7 [ 1043.704213][T13727] kmem_cache_alloc+0x3b/0x330 [ 1043.714795][T13727] dst_alloc+0x16a/0x1e0 [ 1043.719065][T13727] ip_route_output_key_hash_rcu+0x1300/0x2030 [ 1043.725165][T13727] ip_route_output_key_hash+0x131/0x1e0 [ 1043.730738][T13727] ? __cfi_ip_route_output_key_hash+0x10/0x10 [ 1043.736852][T13727] ? 0xffffffffa0000948 [ 1043.741031][T13727] vti6_tnl_xmit+0xd9c/0x1980 [ 1043.745735][T13727] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 1043.751654][T13727] ? __cfi_vti6_tnl_xmit+0x10/0x10 [ 1043.756800][T13727] dev_hard_start_xmit+0x20b/0x750 [ 1043.761946][T13727] __dev_queue_xmit+0x18d9/0x3420 [ 1043.767022][T13727] ? __dev_queue_xmit+0x250/0x3420 [ 1043.772172][T13727] ? __cfi___dev_queue_xmit+0x10/0x10 [ 1043.777578][T13727] ? __kasan_check_write+0x14/0x20 [ 1043.782885][T13727] ? skb_release_data+0x1d2/0x890 [ 1043.787933][T13727] ? skb_ensure_writable+0x2f8/0x470 [ 1043.793254][T13727] ? __kasan_check_write+0x14/0x20 [ 1043.798381][T13727] ? pskb_expand_head+0xc4a/0x1210 [ 1043.803516][T13727] __bpf_redirect+0x8db/0x1130 [ 1043.808298][T13727] bpf_clone_redirect+0x26a/0x3c0 [ 1043.813344][T13727] bpf_prog_6893982b85ceadf7+0x56/0x5b [ 1043.818820][T13727] ? kasan_set_track+0x60/0x70 [ 1043.823604][T13727] ? kasan_set_track+0x4b/0x70 [ 1043.828382][T13727] ? kasan_save_alloc_info+0x25/0x30 [ 1043.833705][T13727] ? __kasan_slab_alloc+0x72/0x80 [ 1043.838749][T13727] ? slab_post_alloc_hook+0x4f/0x2d0 [ 1043.844063][T13727] ? kmem_cache_alloc+0x16e/0x330 [ 1043.849109][T13727] ? build_skb+0x2a/0x220 [ 1043.853450][T13727] ? bpf_prog_test_run_skb+0x39f/0x1290 [ 1043.859104][T13727] ? bpf_prog_test_run+0x3e3/0x630 [ 1043.864228][T13727] ? __sys_bpf+0x56d/0x780 [ 1043.868656][T13727] ? __x64_sys_bpf+0x7c/0x90 [ 1043.873268][T13727] ? x64_sys_call+0x488/0x9a0 [ 1043.878053][T13727] ? do_syscall_64+0x4c/0xa0 [ 1043.882664][T13727] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1043.888857][T13727] ? kvm_sched_clock_read+0x18/0x40 [ 1043.894091][T13727] ? sched_clock+0x9/0x10 [ 1043.898457][T13727] bpf_test_run+0x548/0x8d0 [ 1043.902997][T13727] ? convert___skb_to_skb+0x5b0/0x5b0 [ 1043.908403][T13727] ? __cfi_eth_type_trans+0x10/0x10 [ 1043.913635][T13727] ? convert___skb_to_skb+0x40/0x5b0 [ 1043.918711][T13731] fido_id[13731]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 1043.918971][T13727] bpf_prog_test_run_skb+0xaec/0x1290 [ 1043.938585][T13727] ? __cfi_bpf_prog_test_run_skb+0x10/0x10 [ 1043.944433][T13727] bpf_prog_test_run+0x3e3/0x630 [ 1043.949395][T13727] ? slab_free_freelist_hook+0xc2/0x190 [ 1043.954956][T13727] ? bpf_prog_query+0x270/0x270 [ 1043.959817][T13727] ? selinux_bpf+0xce/0xf0 [ 1043.964235][T13727] ? security_bpf+0x93/0xb0 [ 1043.968742][T13727] __sys_bpf+0x56d/0x780 [ 1043.972995][T13727] ? bpf_link_show_fdinfo+0x320/0x320 [ 1043.978381][T13727] ? __cfi_ksys_write+0x10/0x10 [ 1043.983286][T13727] ? debug_smp_processor_id+0x17/0x20 [ 1043.988666][T13727] __x64_sys_bpf+0x7c/0x90 [ 1043.993100][T13727] x64_sys_call+0x488/0x9a0 [ 1043.997605][T13727] do_syscall_64+0x4c/0xa0 [ 1044.002038][T13727] ? clear_bhb_loop+0x30/0x80 [ 1044.006721][T13727] ? clear_bhb_loop+0x30/0x80 [ 1044.011414][T13727] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1044.017310][T13727] RIP: 0033:0x7fa0f298efc9 [ 1044.021729][T13727] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1044.041339][T13727] RSP: 002b:00007fa0f3873038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1044.049757][T13727] RAX: ffffffffffffffda RBX: 00007fa0f2be5fa0 RCX: 00007fa0f298efc9 [ 1044.057743][T13727] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 1044.065714][T13727] RBP: 00007fa0f3873090 R08: 0000000000000000 R09: 0000000000000000 [ 1044.073695][T13727] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1044.081662][T13727] R13: 00007fa0f2be6038 R14: 00007fa0f2be5fa0 R15: 00007fff208d1eb8 [ 1044.089651][T13727] [ 1044.284959][ T28] audit: type=1400 audit(1760870957.656:712): avc: denied { map } for pid=13739 comm="syz.5.3292" path="pipe:[60259]" dev="pipefs" ino=60259 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 1044.310470][ T28] audit: type=1400 audit(1760870957.656:713): avc: denied { execute } for pid=13739 comm="syz.5.3292" path="pipe:[60259]" dev="pipefs" ino=60259 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 1044.417024][T13754] FAULT_INJECTION: forcing a failure. [ 1044.417024][T13754] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1044.430479][T13754] CPU: 1 PID: 13754 Comm: syz.5.3296 Not tainted syzkaller #0 [ 1044.437993][T13754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1044.448064][T13754] Call Trace: [ 1044.451343][T13754] [ 1044.454273][T13754] __dump_stack+0x21/0x24 [ 1044.458606][T13754] dump_stack_lvl+0xee/0x150 [ 1044.463193][T13754] ? __cfi_dump_stack_lvl+0x8/0x8 [ 1044.468215][T13754] ? avc_has_perm_noaudit+0x2f4/0x460 [ 1044.473594][T13754] dump_stack+0x15/0x24 [ 1044.477771][T13754] should_fail_ex+0x3d4/0x520 [ 1044.482453][T13754] should_fail+0xb/0x10 [ 1044.486611][T13754] should_fail_usercopy+0x1a/0x20 [ 1044.491641][T13754] _copy_from_user+0x1e/0xc0 [ 1044.496238][T13754] do_ipv6_setsockopt+0x2b5/0x39a0 [ 1044.501358][T13754] ? __cfi_do_ipv6_setsockopt+0x10/0x10 [ 1044.506911][T13754] ? 0xffffffffa0000948 [ 1044.511063][T13754] ? is_bpf_text_address+0x177/0x190 [ 1044.516349][T13754] ? kernel_text_address+0xa0/0xd0 [ 1044.521473][T13754] ? __kernel_text_address+0xd/0x30 [ 1044.526672][T13754] ? unwind_get_return_address+0x4d/0x90 [ 1044.532307][T13754] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 1044.538466][T13754] ? arch_stack_walk+0xfc/0x150 [ 1044.543325][T13754] ? stack_trace_save+0x98/0xe0 [ 1044.548176][T13754] ? __stack_depot_save+0x36/0x480 [ 1044.553289][T13754] ? avc_has_perm_noaudit+0x2f4/0x460 [ 1044.558672][T13754] ? _parse_integer+0x2a/0x40 [ 1044.563353][T13754] ? __cfi_avc_has_perm_noaudit+0x10/0x10 [ 1044.569077][T13754] ? kstrtouint_from_user+0xf7/0x150 [ 1044.574378][T13754] ? avc_has_perm+0x158/0x240 [ 1044.579086][T13754] ? __cfi_avc_has_perm+0x10/0x10 [ 1044.584116][T13754] ? __kasan_check_write+0x14/0x20 [ 1044.589251][T13754] ? proc_fail_nth_write+0x17a/0x1f0 [ 1044.594538][T13754] ipv6_setsockopt+0x59/0x1a0 [ 1044.599234][T13754] rawv6_setsockopt+0x263/0x620 [ 1044.604085][T13754] ? __cfi_rawv6_setsockopt+0x10/0x10 [ 1044.609466][T13754] ? __fget_files+0x2d5/0x330 [ 1044.614167][T13754] sock_common_setsockopt+0xb1/0xc0 [ 1044.619484][T13754] ? __cfi_sock_common_setsockopt+0x10/0x10 [ 1044.625410][T13754] __sys_setsockopt+0x306/0x4e0 [ 1044.630284][T13754] ? __cfi___sys_setsockopt+0x10/0x10 [ 1044.635685][T13754] ? ksys_write+0x1eb/0x240 [ 1044.640223][T13754] ? __cfi_ksys_write+0x10/0x10 [ 1044.645116][T13754] __x64_sys_setsockopt+0xbf/0xd0 [ 1044.650161][T13754] x64_sys_call+0x124/0x9a0 [ 1044.654672][T13754] do_syscall_64+0x4c/0xa0 [ 1044.659088][T13754] ? clear_bhb_loop+0x30/0x80 [ 1044.663770][T13754] ? clear_bhb_loop+0x30/0x80 [ 1044.668452][T13754] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1044.674345][T13754] RIP: 0033:0x7f9cf8d8efc9 [ 1044.678760][T13754] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1044.698364][T13754] RSP: 002b:00007f9cf9ca8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1044.706792][T13754] RAX: ffffffffffffffda RBX: 00007f9cf8fe5fa0 RCX: 00007f9cf8d8efc9 [ 1044.714804][T13754] RDX: 00000000000000cc RSI: 0000000000000029 RDI: 0000000000000003 [ 1044.722774][T13754] RBP: 00007f9cf9ca8090 R08: 000000000000005c R09: 0000000000000000 [ 1044.730748][T13754] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1044.738722][T13754] R13: 00007f9cf8fe6038 R14: 00007f9cf8fe5fa0 R15: 00007ffdbfc74328 [ 1044.746699][T13754] [ 1044.783610][ T28] audit: type=1400 audit(1760870958.156:714): avc: denied { create } for pid=13759 comm="syz.5.3298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1044.922000][ T19] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 1046.661160][ T19] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1046.675072][ T19] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1046.725197][ T19] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1046.735742][ T19] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1046.748994][ T19] usb 5-1: config 0 descriptor?? [ 1047.195383][T13786] loop5: detected capacity change from 0 to 40427 [ 1047.237029][T13786] F2FS-fs (loop5): Invalid segment/section count (31 != 24 * 1) [ 1047.245145][T13786] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 1047.284747][T13786] F2FS-fs (loop5): Unrecognized mount option "errors=continue" or missing value [ 1047.496573][ T19] cp2112 0003:10C4:EA90.004F: unknown main item tag 0x0 [ 1047.503943][ T19] cp2112 0003:10C4:EA90.004F: unknown main item tag 0x0 [ 1047.510996][ T19] cp2112 0003:10C4:EA90.004F: unknown main item tag 0x0 [ 1047.518010][ T19] cp2112 0003:10C4:EA90.004F: unknown main item tag 0x0 [ 1047.524989][ T19] cp2112 0003:10C4:EA90.004F: unknown main item tag 0x0 [ 1047.532086][ T19] cp2112 0003:10C4:EA90.004F: unknown main item tag 0x0 [ 1047.559696][ T19] cp2112 0003:10C4:EA90.004F: unknown main item tag 0x0 [ 1047.567539][ T19] cp2112 0003:10C4:EA90.004F: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 1047.658829][ T19] cp2112 0003:10C4:EA90.004F: Part Number: 0x00 Device Version: 0x00 [ 1047.868938][T13815] loop5: detected capacity change from 0 to 1024 [ 1047.947900][T13815] EXT4-fs: Ignoring removed i_version option [ 1047.957272][T13819] x_tables: ip_tables: socket match: used from hooks FORWARD, but only valid from PREROUTING/INPUT [ 1047.962254][T13815] EXT4-fs (loop5): Test dummy encryption mode enabled [ 1047.976640][ T28] audit: type=1400 audit(1760870961.346:715): avc: denied { associate } for pid=13818 comm="syz.0.3315" name="current" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 1047.981239][T13815] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1048.007194][T13811] syz.2.3310[13811] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1048.007280][T13811] syz.2.3310[13811] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1048.021234][T13811] loop2: detected capacity change from 0 to 256 [ 1048.053403][T13811] FAT-fs (loop2): Directory bread(block 64) failed [ 1048.060042][T13811] FAT-fs (loop2): Directory bread(block 65) failed [ 1048.066629][T13811] FAT-fs (loop2): Directory bread(block 66) failed [ 1048.073200][T13811] FAT-fs (loop2): Directory bread(block 67) failed [ 1048.079788][T13811] FAT-fs (loop2): Directory bread(block 68) failed [ 1048.086323][T13811] FAT-fs (loop2): Directory bread(block 69) failed [ 1048.092938][T13811] FAT-fs (loop2): Directory bread(block 70) failed [ 1048.099491][T13811] FAT-fs (loop2): Directory bread(block 71) failed [ 1048.106055][T13811] FAT-fs (loop2): Directory bread(block 72) failed [ 1048.112682][T13811] FAT-fs (loop2): Directory bread(block 73) failed [ 1048.195018][ T28] audit: type=1400 audit(1760870961.566:716): avc: denied { create } for pid=13818 comm="syz.0.3315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 1049.671252][ T19] cp2112 0003:10C4:EA90.004F: error requesting SMBus config [ 1049.679297][ T19] cp2112: probe of 0003:10C4:EA90.004F failed with error -71 [ 1049.710462][ T19] usb 5-1: USB disconnect, device number 29 [ 1049.832998][T13836] fido_id[13836]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 1052.299031][T12209] EXT4-fs (loop5): unmounting filesystem. [ 1052.695607][T13875] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=13875 comm=syz.5.3330 [ 1053.085326][T13880] FAULT_INJECTION: forcing a failure. [ 1053.085326][T13880] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1053.128888][T13880] CPU: 1 PID: 13880 Comm: syz.5.3331 Not tainted syzkaller #0 [ 1053.136407][T13880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1053.146482][T13880] Call Trace: [ 1053.149771][T13880] [ 1053.152716][T13880] __dump_stack+0x21/0x24 [ 1053.157068][T13880] dump_stack_lvl+0xee/0x150 [ 1053.161682][T13880] ? __cfi_dump_stack_lvl+0x8/0x8 [ 1053.166721][T13880] ? _parse_integer+0x2a/0x40 [ 1053.171423][T13880] dump_stack+0x15/0x24 [ 1053.175601][T13880] should_fail_ex+0x3d4/0x520 [ 1053.180302][T13880] should_fail+0xb/0x10 [ 1053.184481][T13880] should_fail_usercopy+0x1a/0x20 [ 1053.189531][T13880] _copy_from_user+0x1e/0xc0 [ 1053.194164][T13880] ___sys_sendmsg+0x155/0x290 [ 1053.198873][T13880] ? __sys_sendmsg+0x270/0x270 [ 1053.203749][T13880] ? __kasan_check_write+0x14/0x20 [ 1053.208876][T13880] ? proc_fail_nth_write+0x17a/0x1f0 [ 1053.214188][T13880] ? vfs_write+0x9d6/0xca0 [ 1053.218636][T13880] ? __fdget+0x19c/0x220 [ 1053.222893][T13880] __x64_sys_sendmsg+0x1f0/0x2c0 [ 1053.227853][T13880] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 1053.233346][T13880] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 1053.239442][T13880] x64_sys_call+0x171/0x9a0 [ 1053.243974][T13880] do_syscall_64+0x4c/0xa0 [ 1053.248422][T13880] ? clear_bhb_loop+0x30/0x80 [ 1053.253127][T13880] ? clear_bhb_loop+0x30/0x80 [ 1053.257828][T13880] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1053.263747][T13880] RIP: 0033:0x7f9cf8d8efc9 [ 1053.268182][T13880] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1053.287805][T13880] RSP: 002b:00007f9cf9ca8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1053.296247][T13880] RAX: ffffffffffffffda RBX: 00007f9cf8fe5fa0 RCX: 00007f9cf8d8efc9 [ 1053.304246][T13880] RDX: 0000000004040040 RSI: 0000200000002340 RDI: 0000000000000006 [ 1053.312239][T13880] RBP: 00007f9cf9ca8090 R08: 0000000000000000 R09: 0000000000000000 [ 1053.320227][T13880] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1053.328298][T13880] R13: 00007f9cf8fe6038 R14: 00007f9cf8fe5fa0 R15: 00007ffdbfc74328 [ 1053.336303][T13880] [ 1053.759899][T13903] loop4: detected capacity change from 0 to 256 [ 1055.715535][T13936] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1055.731470][T13938] FAULT_INJECTION: forcing a failure. [ 1055.731470][T13938] name failslab, interval 1, probability 0, space 0, times 0 [ 1055.744160][T13938] CPU: 1 PID: 13938 Comm: syz.2.3346 Not tainted syzkaller #0 [ 1055.751640][T13938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1055.761710][T13938] Call Trace: [ 1055.765001][T13938] [ 1055.767964][T13938] __dump_stack+0x21/0x24 [ 1055.772322][T13938] dump_stack_lvl+0xee/0x150 [ 1055.776927][T13938] ? __cfi_dump_stack_lvl+0x8/0x8 [ 1055.782020][T13938] ? avc_has_perm_noaudit+0x2f4/0x460 [ 1055.787424][T13938] dump_stack+0x15/0x24 [ 1055.791608][T13938] should_fail_ex+0x3d4/0x520 [ 1055.796321][T13938] __should_failslab+0xac/0xf0 [ 1055.801119][T13938] should_failslab+0x9/0x20 [ 1055.805639][T13938] slab_pre_alloc_hook+0x30/0x1e0 [ 1055.810690][T13938] kmem_cache_alloc_lru+0x49/0x280 [ 1055.815821][T13938] ? __d_alloc+0x34/0x6c0 [ 1055.820173][T13938] ? step_into+0x427/0xf30 [ 1055.824622][T13938] __d_alloc+0x34/0x6c0 [ 1055.828799][T13938] ? __cfi__raw_spin_lock+0x10/0x10 [ 1055.834026][T13938] ? down_read+0xa0/0xf0 [ 1055.838306][T13938] d_alloc_parallel+0xd6/0x1240 [ 1055.843183][T13938] ? __kasan_check_write+0x14/0x20 [ 1055.848308][T13938] ? rwsem_read_trylock+0x29a/0x620 [ 1055.853542][T13938] ? downgrade_write+0x350/0x350 [ 1055.858507][T13938] ? __d_lookup+0x51c/0x5b0 [ 1055.863044][T13938] ? __cfi_d_alloc_parallel+0x10/0x10 [ 1055.868450][T13938] ? down_read+0xa0/0xf0 [ 1055.872718][T13938] ? __cfi_down_read+0x10/0x10 [ 1055.877509][T13938] path_openat+0x954/0x2f50 [ 1055.882053][T13938] ? getname_flags+0xb9/0x500 [ 1055.886854][T13938] ? do_filp_open+0x3c0/0x3c0 [ 1055.891565][T13938] do_filp_open+0x1c1/0x3c0 [ 1055.896098][T13938] ? __cfi_do_filp_open+0x10/0x10 [ 1055.901181][T13938] ? __cfi_kfree_link+0x10/0x10 [ 1055.906042][T13938] ? alloc_fd+0x4e6/0x590 [ 1055.910394][T13938] do_sys_openat2+0x185/0x7e0 [ 1055.915087][T13938] ? __kasan_check_write+0x14/0x20 [ 1055.920199][T13938] ? do_sys_open+0xe0/0xe0 [ 1055.924622][T13938] ? ksys_write+0x1eb/0x240 [ 1055.929126][T13938] ? __cfi_ksys_write+0x10/0x10 [ 1055.933987][T13938] __x64_sys_openat+0x136/0x160 [ 1055.938860][T13938] x64_sys_call+0x783/0x9a0 [ 1055.943369][T13938] do_syscall_64+0x4c/0xa0 [ 1055.947787][T13938] ? clear_bhb_loop+0x30/0x80 [ 1055.952469][T13938] ? clear_bhb_loop+0x30/0x80 [ 1055.957152][T13938] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1055.963044][T13938] RIP: 0033:0x7fa0f298d810 [ 1055.967490][T13938] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 69 95 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 bc 95 02 00 8b 44 [ 1055.987100][T13938] RSP: 002b:00007fa0f3851f10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1055.995524][T13938] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007fa0f298d810 [ 1056.003498][T13938] RDX: 0000000000000002 RSI: 00007fa0f3851fa0 RDI: 00000000ffffff9c [ 1056.011474][T13938] RBP: 00007fa0f3851fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1056.019447][T13938] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 1056.027421][T13938] R13: 00007fa0f2be6128 R14: 00007fa0f2be6090 R15: 00007fff208d1eb8 [ 1056.035402][T13938] [ 1056.549478][T13948] loop0: detected capacity change from 0 to 256 [ 1056.622380][T13948] FAT-fs (loop0): Directory bread(block 64) failed [ 1056.657766][T13948] FAT-fs (loop0): Directory bread(block 65) failed [ 1056.666871][T13948] FAT-fs (loop0): Directory bread(block 66) failed [ 1056.677563][T13948] FAT-fs (loop0): Directory bread(block 67) failed [ 1056.706881][T13948] FAT-fs (loop0): Directory bread(block 68) failed [ 1056.729262][T13948] FAT-fs (loop0): Directory bread(block 69) failed [ 1056.736489][T13948] FAT-fs (loop0): Directory bread(block 70) failed [ 1056.766907][T13948] FAT-fs (loop0): Directory bread(block 71) failed [ 1056.773582][T13948] FAT-fs (loop0): Directory bread(block 72) failed [ 1056.791150][T13948] FAT-fs (loop0): Directory bread(block 73) failed [ 1059.488281][T13970] tty tty20: ldisc open failed (-12), clearing slot 19 [ 1061.357355][T14012] netlink: 52 bytes leftover after parsing attributes in process `syz.5.3363'. [ 1061.386849][ T6] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 1061.577907][ T6] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1061.598138][ T6] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1061.632643][ T6] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1061.659281][ T6] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1061.686384][ T6] usb 5-1: config 0 descriptor?? [ 1062.102177][ T6] cp2112 0003:10C4:EA90.0050: unknown main item tag 0x0 [ 1062.109252][ T6] cp2112 0003:10C4:EA90.0050: unknown main item tag 0x0 [ 1062.116278][ T6] cp2112 0003:10C4:EA90.0050: unknown main item tag 0x0 [ 1062.123554][ T6] cp2112 0003:10C4:EA90.0050: unknown main item tag 0x0 [ 1062.130739][ T6] cp2112 0003:10C4:EA90.0050: unknown main item tag 0x0 [ 1062.137956][ T6] cp2112 0003:10C4:EA90.0050: unknown main item tag 0x0 [ 1062.144983][ T6] cp2112 0003:10C4:EA90.0050: unknown main item tag 0x0 [ 1062.157844][ T6] cp2112 0003:10C4:EA90.0050: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 1062.301965][ T6] cp2112 0003:10C4:EA90.0050: Part Number: 0x00 Device Version: 0x00 [ 1066.303137][ T6] cp2112 0003:10C4:EA90.0050: error requesting SMBus config [ 1066.602132][ T6] cp2112: probe of 0003:10C4:EA90.0050 failed with error -71 [ 1066.612087][ T6] usb 5-1: USB disconnect, device number 30 [ 1066.631091][T14062] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 1066.669159][T14062] overlayfs: filesystem on './bus' not supported as upperdir [ 1066.691698][ T28] audit: type=1400 audit(1760870980.066:717): avc: denied { link } for pid=14060 comm="syz.5.3376" name="#f5" dev="tmpfs" ino=523 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1066.744524][T14061] loop5: detected capacity change from 0 to 512 [ 1066.779811][T14063] fido_id[14063]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 1066.789674][ T28] audit: type=1400 audit(1760870980.096:718): avc: denied { rename } for pid=14060 comm="syz.5.3376" name="#f6" dev="tmpfs" ino=523 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1066.858670][ T28] audit: type=1400 audit(1760870980.156:719): avc: denied { bind } for pid=14060 comm="syz.5.3376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1066.910842][T14070] loop0: detected capacity change from 0 to 512 [ 1066.928232][T14070] EXT4-fs: Ignoring removed nobh option [ 1066.951538][T14075] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3377'. [ 1066.966659][T14070] EXT4-fs warning (device loop0): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 1066.979611][T14070] EXT4-fs warning (device loop0): dx_probe:881: Enable large directory feature to access it [ 1066.990080][T14070] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.3379: Corrupt directory, running e2fsck is recommended [ 1067.009610][T14070] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 1067.025092][T14070] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2195: inode #15: comm syz.0.3379: corrupted in-inode xattr [ 1067.053103][T14070] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.3379: couldn't read orphan inode 15 (err -117) [ 1067.073745][T14070] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1067.201664][T12770] EXT4-fs (loop0): unmounting filesystem. [ 1067.325473][T14088] netlink: 'syz.2.3381': attribute type 13 has an invalid length. [ 1067.705595][T14090] loop2: detected capacity change from 0 to 512 [ 1067.834814][T14088] gretap0: refused to change device tx_queue_len [ 1067.841406][T14088] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1067.857179][T14089] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3381'. [ 1067.867977][T14089] device macsec1 entered promiscuous mode [ 1067.873744][T14089] device gretap0 entered promiscuous mode [ 1067.880615][T14089] device gretap0 left promiscuous mode [ 1068.547944][T14090] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1068.556981][T14090] ext4 filesystem being mounted at /63/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1068.840147][T12969] EXT4-fs (loop2): unmounting filesystem. [ 1069.146850][ T6337] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 1069.226918][ T6] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 1069.387916][ T6337] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1069.407058][ T6337] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1069.714087][ T6337] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1069.723285][ T6337] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1069.749949][ T6] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1069.764245][ T6337] usb 1-1: config 0 descriptor?? [ 1069.772652][ T6] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1069.782612][ T6] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1069.791838][ T6] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1069.802134][ T6] usb 2-1: config 0 descriptor?? [ 1070.198907][ T6337] cp2112 0003:10C4:EA90.0051: unknown main item tag 0x0 [ 1070.207416][ T6337] cp2112 0003:10C4:EA90.0051: unknown main item tag 0x0 [ 1070.214474][ T6337] cp2112 0003:10C4:EA90.0051: unknown main item tag 0x0 [ 1070.221590][ T6337] cp2112 0003:10C4:EA90.0051: unknown main item tag 0x0 [ 1070.222591][ T6] cp2112 0003:10C4:EA90.0052: unknown main item tag 0x0 [ 1070.237043][ T6337] cp2112 0003:10C4:EA90.0051: unknown main item tag 0x0 [ 1070.244060][ T6337] cp2112 0003:10C4:EA90.0051: unknown main item tag 0x0 [ 1070.251116][ T6] cp2112 0003:10C4:EA90.0052: unknown main item tag 0x0 [ 1070.258194][ T6337] cp2112 0003:10C4:EA90.0051: unknown main item tag 0x0 [ 1070.265447][ T6] cp2112 0003:10C4:EA90.0052: unknown main item tag 0x0 [ 1070.273021][ T6] cp2112 0003:10C4:EA90.0052: unknown main item tag 0x0 [ 1070.280379][ T6337] cp2112 0003:10C4:EA90.0051: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 1070.295351][ T6] cp2112 0003:10C4:EA90.0052: unknown main item tag 0x0 [ 1070.302447][ T6] cp2112 0003:10C4:EA90.0052: unknown main item tag 0x0 [ 1070.309505][ T6] cp2112 0003:10C4:EA90.0052: unknown main item tag 0x0 [ 1070.326683][ T6] cp2112 0003:10C4:EA90.0052: hidraw1: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 1070.398164][ T6337] cp2112 0003:10C4:EA90.0051: Part Number: 0x00 Device Version: 0x00 [ 1070.422350][ T6] cp2112 0003:10C4:EA90.0052: Part Number: 0x00 Device Version: 0x00 [ 1071.373510][ T6337] cp2112 0003:10C4:EA90.0051: error requesting SMBus config [ 1071.389755][ T6337] cp2112: probe of 0003:10C4:EA90.0051 failed with error -71 [ 1071.399455][ T6337] usb 1-1: USB disconnect, device number 26 [ 1071.431991][T14148] fido_id[14148]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 1071.677428][T14156] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3399'. [ 1072.015513][T14160] loop0: detected capacity change from 0 to 256 [ 1072.048786][ T5766] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1072.426983][ T6] cp2112 0003:10C4:EA90.0052: error requesting SMBus config [ 1072.437313][ T6] cp2112: probe of 0003:10C4:EA90.0052 failed with error -71 [ 1072.448167][ T6] usb 2-1: USB disconnect, device number 31 [ 1072.529988][T14168] fido_id[14168]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 1072.864008][T14177] loop0: detected capacity change from 0 to 512 [ 1072.872404][T14177] EXT4-fs: Ignoring removed nobh option [ 1072.895353][T14177] EXT4-fs warning (device loop0): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 1072.907107][T14177] EXT4-fs warning (device loop0): dx_probe:881: Enable large directory feature to access it [ 1072.917587][T14177] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.3405: Corrupt directory, running e2fsck is recommended [ 1072.932414][T14177] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 1072.940835][T14177] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2195: inode #15: comm syz.0.3405: corrupted in-inode xattr [ 1072.953372][T14177] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.3405: couldn't read orphan inode 15 (err -117) [ 1072.987069][T14177] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1073.567988][T14186] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3407'. [ 1073.781946][T14185] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3407'. [ 1074.157396][T12770] EXT4-fs (loop0): unmounting filesystem. [ 1074.177693][ T28] audit: type=1400 audit(1760870987.556:720): avc: denied { read } for pid=14190 comm="syz.2.3408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1074.209638][T14199] loop5: detected capacity change from 0 to 1024 [ 1074.231279][T14199] EXT4-fs: Ignoring removed i_version option [ 1074.368462][T14199] EXT4-fs: quotafile must be on filesystem root [ 1075.306908][T11965] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 1075.858056][T11965] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1075.874592][T11965] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1075.894689][T11965] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1075.914199][T11965] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1075.933211][T11965] usb 1-1: config 0 descriptor?? [ 1076.069318][T14229] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3417'. [ 1076.348581][T11965] cp2112 0003:10C4:EA90.0053: unknown main item tag 0x0 [ 1076.358867][T11965] cp2112 0003:10C4:EA90.0053: unknown main item tag 0x0 [ 1076.370693][T11965] cp2112 0003:10C4:EA90.0053: unknown main item tag 0x0 [ 1076.381404][T11965] cp2112 0003:10C4:EA90.0053: unknown main item tag 0x0 [ 1076.391898][T11965] cp2112 0003:10C4:EA90.0053: unknown main item tag 0x0 [ 1076.405173][T11965] cp2112 0003:10C4:EA90.0053: unknown main item tag 0x0 [ 1076.417391][T11965] cp2112 0003:10C4:EA90.0053: unknown main item tag 0x0 [ 1076.430785][T11965] cp2112 0003:10C4:EA90.0053: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 1076.548971][T11965] cp2112 0003:10C4:EA90.0053: Part Number: 0x00 Device Version: 0x00 [ 1078.570374][T14273] loop5: detected capacity change from 0 to 256 [ 1078.842748][T11965] cp2112 0003:10C4:EA90.0053: error requesting SMBus config [ 1078.862629][T11965] cp2112: probe of 0003:10C4:EA90.0053 failed with error -71 [ 1078.880546][T11965] usb 1-1: USB disconnect, device number 27 [ 1078.910094][T14276] fido_id[14276]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 1080.060477][T14296] loop2: detected capacity change from 0 to 512 [ 1080.268491][T14306] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3437'. [ 1080.572419][T14308] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3433'. [ 1081.126855][ T3170] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 1081.337742][ T3170] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1081.357433][ T3170] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1081.377005][ T3170] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1081.386943][ T3170] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1081.409437][ T3170] usb 1-1: config 0 descriptor?? [ 1081.846357][ T3170] cp2112 0003:10C4:EA90.0054: unknown main item tag 0x0 [ 1082.726423][ T3170] cp2112 0003:10C4:EA90.0054: unknown main item tag 0x0 [ 1082.763756][ T3170] cp2112 0003:10C4:EA90.0054: unknown main item tag 0x0 [ 1082.810922][ T3170] cp2112 0003:10C4:EA90.0054: unknown main item tag 0x0 [ 1085.367771][ T28] audit: type=1400 audit(1760870998.146:721): avc: denied { read } for pid=14353 comm="syz.4.3455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1085.488120][ T3170] cp2112 0003:10C4:EA90.0054: unknown main item tag 0x0 [ 1085.566081][ T3170] cp2112 0003:10C4:EA90.0054: unknown main item tag 0x0 [ 1085.666748][ T3170] cp2112 0003:10C4:EA90.0054: unknown main item tag 0x0 [ 1085.749022][ T3170] cp2112 0003:10C4:EA90.0054: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 1086.485321][ T3170] cp2112 0003:10C4:EA90.0054: error requesting version [ 1086.646495][ T3170] cp2112: probe of 0003:10C4:EA90.0054 failed with error -71 [ 1086.684426][ T28] audit: type=1400 audit(1760871000.056:722): avc: denied { read } for pid=14365 comm="syz.4.3457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1086.708996][ T3170] usb 1-1: USB disconnect, device number 28 [ 1087.411617][ T28] audit: type=1400 audit(1760871000.786:723): avc: denied { mounton } for pid=14365 comm="syz.4.3457" path="/syzcgroup/cpu/syz4/cpuset.cpus" dev="cgroup" ino=269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 1087.441458][T14371] cgroup: Unknown subsys name 'subj_user' [ 1089.117978][T14418] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3469'. [ 1089.626824][ T3170] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 1089.888572][ T3170] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1089.943813][ T3170] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1090.043028][ T3170] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1090.116985][ T3170] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1090.129693][ T3170] usb 5-1: config 0 descriptor?? [ 1090.575773][ T3170] cp2112 0003:10C4:EA90.0055: unknown main item tag 0x0 [ 1090.583025][ T3170] cp2112 0003:10C4:EA90.0055: unknown main item tag 0x0 [ 1090.612237][T14447] loop2: detected capacity change from 0 to 256 [ 1090.705446][ T3170] cp2112 0003:10C4:EA90.0055: unknown main item tag 0x0 [ 1090.731354][T14447] FAT-fs (loop2): Directory bread(block 64) failed [ 1090.738051][T14447] FAT-fs (loop2): Directory bread(block 65) failed [ 1090.744810][T14447] FAT-fs (loop2): Directory bread(block 66) failed [ 1090.751430][T14447] FAT-fs (loop2): Directory bread(block 67) failed [ 1090.758162][T14447] FAT-fs (loop2): Directory bread(block 68) failed [ 1090.764736][T14447] FAT-fs (loop2): Directory bread(block 69) failed [ 1090.771495][T14447] FAT-fs (loop2): Directory bread(block 70) failed [ 1090.778108][T14447] FAT-fs (loop2): Directory bread(block 71) failed [ 1090.784886][T14447] FAT-fs (loop2): Directory bread(block 72) failed [ 1090.791524][T14447] FAT-fs (loop2): Directory bread(block 73) failed [ 1091.067818][ T3170] cp2112 0003:10C4:EA90.0055: unknown main item tag 0x0 [ 1091.131312][ T3170] cp2112 0003:10C4:EA90.0055: unknown main item tag 0x0 [ 1091.510602][ T3170] cp2112 0003:10C4:EA90.0055: unknown main item tag 0x0 [ 1091.517809][ T3170] cp2112 0003:10C4:EA90.0055: unknown main item tag 0x0 [ 1091.525527][ T3170] cp2112 0003:10C4:EA90.0055: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 1091.754743][ T3170] cp2112 0003:10C4:EA90.0055: error requesting version [ 1091.765015][ T3170] cp2112: probe of 0003:10C4:EA90.0055 failed with error -32 [ 1093.294206][T11965] usb 5-1: USB disconnect, device number 31 [ 1093.641169][ T28] audit: type=1400 audit(1760871007.016:724): avc: denied { transfer } for pid=14489 comm="syz.1.3490" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 1093.662673][T14490] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3490'. [ 1093.819717][T14479] loop4: detected capacity change from 0 to 40427 [ 1093.844867][T14479] F2FS-fs (loop4): fault_injection options not supported [ 1093.863780][T14479] F2FS-fs (loop4): invalid crc value [ 1093.914240][T14479] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 1093.985687][T14479] F2FS-fs (loop4): Start checkpoint disabled! [ 1093.992753][T14479] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 1095.083564][ T28] audit: type=1400 audit(1760871008.456:725): avc: denied { write } for pid=14514 comm="syz.4.3497" path="socket:[71756]" dev="sockfs" ino=71756 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1095.172065][T14518] random: crng reseeded on system resumption [ 1095.178310][ T28] audit: type=1400 audit(1760871008.546:726): avc: denied { write } for pid=14514 comm="syz.4.3497" name="snapshot" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1095.542938][T14523] incfs: Backing dir is not set, filesystem can't be mounted. [ 1095.550568][T14523] incfs: mount failed -2 [ 1095.666852][ T6] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 1096.893271][ T6] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1096.914537][ T6] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1096.924724][ T6] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1096.926857][T12442] usb 1-1: new low-speed USB device number 29 using dummy_hcd [ 1096.941337][ T6] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1096.967680][ T6] usb 5-1: config 0 descriptor?? [ 1097.137887][T12442] usb 1-1: config index 0 descriptor too short (expected 1307, got 27) [ 1097.150602][T12442] usb 1-1: config 0 has an invalid interface number: 0 but max is -1 [ 1097.174789][T12442] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1097.201688][T12442] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 33, using maximum allowed: 30 [ 1097.234882][T12442] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x4 is Bulk; changing to Interrupt [ 1097.256809][T12442] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 1097.266949][T12442] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 33 [ 1097.289605][T12442] usb 1-1: string descriptor 0 read error: -22 [ 1097.302505][T12442] usb 1-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=c3.de [ 1097.320448][T12442] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1097.335540][T12442] usb 1-1: config 0 descriptor?? [ 1097.356017][T12442] hub 1-1:0.0: bad descriptor, ignoring hub [ 1097.373033][T12442] hub: probe of 1-1:0.0 failed with error -5 [ 1097.381290][ T6] cp2112 0003:10C4:EA90.0056: unknown main item tag 0x0 [ 1097.393378][ T6] cp2112 0003:10C4:EA90.0056: unknown main item tag 0x0 [ 1097.415510][ T6] cp2112 0003:10C4:EA90.0056: unknown main item tag 0x0 [ 1097.436842][ T6] cp2112 0003:10C4:EA90.0056: unknown main item tag 0x0 [ 1097.466862][ T6] cp2112 0003:10C4:EA90.0056: unknown main item tag 0x0 [ 1097.473871][ T6] cp2112 0003:10C4:EA90.0056: unknown main item tag 0x0 [ 1097.506825][ T6] cp2112 0003:10C4:EA90.0056: unknown main item tag 0x0 [ 1097.515100][ T6] cp2112 0003:10C4:EA90.0056: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 1097.607239][ T6] cp2112 0003:10C4:EA90.0056: Part Number: 0x00 Device Version: 0x00 [ 1098.317086][ T1370] usb 1-1: USB disconnect, device number 29 [ 1098.601456][T14562] loop2: detected capacity change from 0 to 512 [ 1098.646841][ T40] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 1098.661377][T14562] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1098.670544][T14562] ext4 filesystem being mounted at /87/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1098.847894][ T40] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1098.862506][ T40] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1098.876618][ T40] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1098.957251][ T40] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1098.968332][ T40] usb 2-1: config 0 descriptor?? [ 1099.285332][T12969] EXT4-fs (loop2): unmounting filesystem. [ 1099.331014][T14573] incfs: Backing dir is not set, filesystem can't be mounted. [ 1099.356999][T14573] incfs: mount failed -2 [ 1099.383068][ T40] cp2112 0003:10C4:EA90.0057: unknown main item tag 0x0 [ 1099.392973][ T40] cp2112 0003:10C4:EA90.0057: unknown main item tag 0x0 [ 1099.413225][ T40] cp2112 0003:10C4:EA90.0057: unknown main item tag 0x0 [ 1099.428342][ T40] cp2112 0003:10C4:EA90.0057: unknown main item tag 0x0 [ 1099.441541][ T40] cp2112 0003:10C4:EA90.0057: unknown main item tag 0x0 [ 1099.458799][ T40] cp2112 0003:10C4:EA90.0057: unknown main item tag 0x0 [ 1099.474533][ T40] cp2112 0003:10C4:EA90.0057: unknown main item tag 0x0 [ 1099.488564][ T40] cp2112 0003:10C4:EA90.0057: hidraw1: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 1099.511391][T14578] incfs: Backing dir is not set, filesystem can't be mounted. [ 1099.523326][T14578] incfs: mount failed -2 [ 1099.627876][ T40] cp2112 0003:10C4:EA90.0057: Part Number: 0x00 Device Version: 0x00 [ 1099.707129][T14584] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3515'. [ 1101.140312][T14594] loop2: detected capacity change from 0 to 256 [ 1101.800109][ T6] cp2112 0003:10C4:EA90.0056: error requesting SMBus config [ 1101.812990][ T6] cp2112: probe of 0003:10C4:EA90.0056 failed with error -71 [ 1101.832218][ T6] usb 5-1: USB disconnect, device number 32 [ 1101.886282][T14605] fido_id[14605]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 1101.913909][T14607] loop4: detected capacity change from 0 to 1024 [ 1101.942302][T14607] ext4: Unknown parameter 'smackfshat' [ 1102.327179][T14607] loop4: detected capacity change from 0 to 40427 [ 1102.352789][T14607] F2FS-fs (loop4): Invalid log_blocksize (64), supports only 12 [ 1102.361071][ T40] cp2112 0003:10C4:EA90.0057: error requesting SMBus config [ 1102.371164][ T40] cp2112: probe of 0003:10C4:EA90.0057 failed with error -71 [ 1102.398147][T14607] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 1102.406726][T14607] F2FS-fs (loop4): Unrecognized mount option "al”c_mode=default" or missing value [ 1102.431740][T14607] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3519'. [ 1102.435122][ T40] usb 2-1: USB disconnect, device number 32 [ 1103.087886][T14638] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3520'. [ 1103.440154][T14640] loop4: detected capacity change from 0 to 1024 [ 1103.469150][T14640] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1103.764786][T14649] loop2: detected capacity change from 0 to 512 [ 1104.056497][T14649] EXT4-fs (loop2): 1 orphan inode deleted [ 1104.062415][T14649] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1104.073525][T14649] ext4 filesystem being mounted at /96/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1104.788151][ T394] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 1104.876849][ T394] EXT4-fs error (device loop2): ext4_release_dquot:6839: comm kworker/u4:5: Failed to release dquot type 1 [ 1104.938435][T12969] EXT4-fs (loop2): unmounting filesystem. [ 1105.683616][T13265] EXT4-fs (loop4): unmounting filesystem. [ 1105.986363][T14690] loop2: detected capacity change from 0 to 512 [ 1106.007279][T14690] EXT4-fs: dax option not supported [ 1106.144076][ T28] audit: type=1400 audit(1760871019.516:727): avc: denied { setopt } for pid=14688 comm="syz.2.3540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1106.203011][T14698] netlink: 'syz.2.3540': attribute type 27 has an invalid length. [ 1107.252173][T14719] netlink: 'syz.5.3549': attribute type 5 has an invalid length. [ 1107.449333][T14727] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3548'. [ 1108.824530][T14758] loop2: detected capacity change from 0 to 512 [ 1108.847415][ T5766] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1109.595337][T14770] overlayfs: conflicting lowerdir path [ 1109.654069][T14772] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3564'. [ 1110.404462][T14787] netlink: 68 bytes leftover after parsing attributes in process `syz.5.3569'. [ 1110.811153][ T28] audit: type=1400 audit(1760871024.186:728): avc: denied { setopt } for pid=14800 comm="syz.4.3574" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1112.535916][T14826] netlink: 52 bytes leftover after parsing attributes in process `syz.5.3579'. [ 1113.317192][T14840] loop5: detected capacity change from 0 to 512 [ 1113.337263][T14840] EXT4-fs: dax option not supported [ 1113.506994][T14842] netlink: 'syz.5.3585': attribute type 27 has an invalid length. [ 1113.562032][T14842] bridge0: port 2(bridge_slave_1) entered disabled state [ 1113.569326][T14842] bridge0: port 1(bridge_slave_0) entered disabled state [ 1115.474846][T14873] loop4: detected capacity change from 0 to 256 [ 1115.514366][T14873] FAT-fs (loop4): Directory bread(block 64) failed [ 1115.521278][T14873] FAT-fs (loop4): Directory bread(block 65) failed [ 1115.528437][T14873] FAT-fs (loop4): Directory bread(block 66) failed [ 1115.535234][T14873] FAT-fs (loop4): Directory bread(block 67) failed [ 1115.542053][T14873] FAT-fs (loop4): Directory bread(block 68) failed [ 1115.548854][T14873] FAT-fs (loop4): Directory bread(block 69) failed [ 1115.556117][T14873] FAT-fs (loop4): Directory bread(block 70) failed [ 1115.562999][T14873] FAT-fs (loop4): Directory bread(block 71) failed [ 1115.569841][T14873] FAT-fs (loop4): Directory bread(block 72) failed [ 1115.576574][T14873] FAT-fs (loop4): Directory bread(block 73) failed [ 1116.469289][T14885] loop2: detected capacity change from 0 to 512 [ 1116.645638][T14885] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1117.151303][T12969] EXT4-fs (loop2): unmounting filesystem. [ 1117.288205][T14903] netlink: 52 bytes leftover after parsing attributes in process `syz.5.3595'. [ 1117.932416][T14909] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 1119.423037][T14943] fuse: Bad value for 'fd' [ 1120.206097][T14943] loop2: detected capacity change from 0 to 131072 [ 1120.228711][T14943] F2FS-fs (loop2): Unrecognized mount option "actiC@êómå*6" or missing value [ 1121.851718][T14971] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14971 comm=syz.5.3616 [ 1122.295750][T14993] random: crng reseeded on system resumption [ 1122.850655][T14996] ------------[ cut here ]------------ [ 1122.856218][T14996] WARNING: CPU: 0 PID: 14996 at fs/overlayfs/util.c:489 ovl_dir_modified+0x189/0x1c0 [ 1122.865808][T14996] Modules linked in: [ 1122.869753][T14996] CPU: 0 PID: 14996 Comm: syz.0.3626 Not tainted syzkaller #0 [ 1122.877276][T14996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1122.887379][T14996] RIP: 0010:ovl_dir_modified+0x189/0x1c0 [ 1122.893058][T14996] Code: 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 ae 24 a5 ff 49 ff 06 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 47 b5 60 ff <0f> 0b e9 17 ff ff ff e8 3b b5 60 ff 0f 0b e9 51 ff ff ff 44 89 e1 [ 1122.912748][T14996] RSP: 0018:ffffc90005427b20 EFLAGS: 00010283 [ 1122.918994][T14996] RAX: ffffffff820f68d9 RBX: 1ffff11022f0de8e RCX: 0000000000080000 [ 1122.927036][T14996] RDX: ffffc900062bd000 RSI: 0000000000000b12 RDI: 0000000000000b13 [ 1122.935027][T14996] RBP: ffffc90005427b50 R08: dffffc0000000000 R09: ffffed102643fb4c [ 1122.943065][T14996] R10: ffffed102643fb4c R11: 1ffff1102643fb4b R12: ffff88811786f440 [ 1122.951077][T14996] R13: 0000000000000000 R14: ffff8881321fd9b8 R15: ffff88811786f470 [ 1122.959118][T14996] FS: 00007f0b9fba36c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 1122.968104][T14996] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1122.974718][T14996] CR2: 0000001b32f17ff8 CR3: 000000012fd3d000 CR4: 00000000003506b0 [ 1122.982894][T14996] Call Trace: [ 1122.986203][T14996] [ 1122.989175][T14996] ovl_do_remove+0x79e/0xba0 [ 1122.993802][T14996] ? ovl_set_redirect+0x6c0/0x6c0 [ 1122.998884][T14996] ? selinux_inode_rmdir+0x22/0x30 [ 1123.004036][T14996] ovl_rmdir+0x1a/0x20 [ 1123.008178][T14996] vfs_rmdir+0x393/0x500 [ 1123.012461][T14996] incfs_kill_sb+0x105/0x220 [ 1123.017200][T14996] deactivate_locked_super+0xb5/0x120 [ 1123.022604][T14996] deactivate_super+0xaf/0xe0 [ 1123.027346][T14996] cleanup_mnt+0x45f/0x4e0 [ 1123.031785][T14996] __cleanup_mnt+0x19/0x20 [ 1123.036222][T14996] task_work_run+0x1db/0x240 [ 1123.040871][T14996] ? __cfi_task_work_run+0x10/0x10 [ 1123.046016][T14996] ? __x64_sys_umount+0x125/0x160 [ 1123.051103][T14996] ? __cfi___x64_sys_umount+0x10/0x10 [ 1123.056510][T14996] exit_to_user_mode_loop+0x9b/0xb0 [ 1123.061755][T14996] exit_to_user_mode_prepare+0x5a/0xa0 [ 1123.067269][T14996] syscall_exit_to_user_mode+0x1a/0x30 [ 1123.072770][T14996] do_syscall_64+0x58/0xa0 [ 1123.077250][T14996] ? clear_bhb_loop+0x30/0x80 [ 1123.081966][T14996] ? clear_bhb_loop+0x30/0x80 [ 1123.086681][T14996] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1123.092661][T14996] RIP: 0033:0x7f0b9ed8efc9 [ 1123.097116][T14996] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1123.116792][T14996] RSP: 002b:00007f0b9fba3038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1123.125229][T14996] RAX: 0000000000000000 RBX: 00007f0b9efe5fa0 RCX: 00007f0b9ed8efc9 [ 1123.133383][T14996] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000200000000040 [ 1123.141414][T14996] RBP: 00007f0b9ee11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1123.149464][T14996] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1123.157504][T14996] R13: 00007f0b9efe6038 R14: 00007f0b9efe5fa0 R15: 00007fffdc3c67b8 [ 1123.165512][T14996] [ 1123.168578][T14996] ---[ end trace 0000000000000000 ]--- [ 1123.176520][T14996] ------------[ cut here ]------------ [ 1123.182072][T14996] WARNING: CPU: 1 PID: 14996 at fs/overlayfs/util.c:489 ovl_dir_modified+0x189/0x1c0 [ 1123.191624][T14996] Modules linked in: [ 1123.195540][T14996] CPU: 1 PID: 14996 Comm: syz.0.3626 Tainted: G W syzkaller #0 [ 1123.204517][T14996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1123.214612][T14996] RIP: 0010:ovl_dir_modified+0x189/0x1c0 [ 1123.220320][T14996] Code: 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 ae 24 a5 ff 49 ff 06 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 47 b5 60 ff <0f> 0b e9 17 ff ff ff e8 3b b5 60 ff 0f 0b e9 51 ff ff ff 44 89 e1 [ 1123.240016][T14996] RSP: 0018:ffffc90005427b20 EFLAGS: 00010287 [ 1123.246111][T14996] RAX: ffffffff820f68d9 RBX: 1ffff11022f0de8e RCX: 0000000000080000 [ 1123.254132][T14996] RDX: ffffc900062bd000 RSI: 0000000000048cda RDI: 0000000000048cdb [ 1123.262144][T14996] RBP: ffffc90005427b50 R08: dffffc0000000000 R09: ffffed102643fb4c [ 1123.270167][T14996] R10: ffffed102643fb4c R11: 1ffff1102643fb4b R12: ffff88811786f440 [ 1123.278177][T14996] R13: 0000000000000000 R14: ffff8881321fd9b8 R15: ffff88811786f470 [ 1123.286170][T14996] FS: 00007f0b9fba36c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 1123.295237][T14996] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1123.301871][T14996] CR2: 00007f9943853f98 CR3: 000000012fd3d000 CR4: 00000000003506a0 [ 1123.309903][T14996] Call Trace: [ 1123.313195][T14996] [ 1123.316151][T14996] ovl_do_remove+0x79e/0xba0 [ 1123.320810][T14996] ? ovl_set_redirect+0x6c0/0x6c0 [ 1123.325866][T14996] ? selinux_inode_rmdir+0x22/0x30 [ 1123.331039][T14996] ovl_rmdir+0x1a/0x20 [ 1123.335134][T14996] vfs_rmdir+0x393/0x500 [ 1123.339429][T14996] incfs_kill_sb+0x198/0x220 [ 1123.344046][T14996] deactivate_locked_super+0xb5/0x120 [ 1123.349481][T14996] deactivate_super+0xaf/0xe0 [ 1123.354185][T14996] cleanup_mnt+0x45f/0x4e0 [ 1123.358669][T14996] __cleanup_mnt+0x19/0x20 [ 1123.363105][T14996] task_work_run+0x1db/0x240 [ 1123.367764][T14996] ? __cfi_task_work_run+0x10/0x10 [ 1123.372904][T14996] ? __x64_sys_umount+0x125/0x160 [ 1123.377987][T14996] ? __cfi___x64_sys_umount+0x10/0x10 [ 1123.383398][T14996] exit_to_user_mode_loop+0x9b/0xb0 [ 1123.388658][T14996] exit_to_user_mode_prepare+0x5a/0xa0 [ 1123.394149][T14996] syscall_exit_to_user_mode+0x1a/0x30 [ 1123.399675][T14996] do_syscall_64+0x58/0xa0 [ 1123.404121][T14996] ? clear_bhb_loop+0x30/0x80 [ 1123.408857][T14996] ? clear_bhb_loop+0x30/0x80 [ 1123.413563][T14996] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1123.419511][T14996] RIP: 0033:0x7f0b9ed8efc9 [ 1123.423949][T14996] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1123.443699][T14996] RSP: 002b:00007f0b9fba3038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1123.452172][T14996] RAX: 0000000000000000 RBX: 00007f0b9efe5fa0 RCX: 00007f0b9ed8efc9 [ 1123.460190][T14996] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000200000000040 [ 1123.468215][T14996] RBP: 00007f0b9ee11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1123.476204][T14996] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1123.484228][T14996] R13: 00007f0b9efe6038 R14: 00007f0b9efe5fa0 R15: 00007fffdc3c67b8 [ 1123.492249][T14996] [ 1123.495283][T14996] ---[ end trace 0000000000000000 ]--- [ 1123.836820][T15011] loop4: detected capacity change from 0 to 256 [ 1123.959606][T15011] FAT-fs (loop4): Directory bread(block 64) failed [ 1123.966341][T15011] FAT-fs (loop4): Directory bread(block 65) failed [ 1123.973293][T15011] FAT-fs (loop4): Directory bread(block 66) failed [ 1123.979980][T15011] FAT-fs (loop4): Directory bread(block 67) failed [ 1123.986908][T15011] FAT-fs (loop4): Directory bread(block 68) failed [ 1123.993706][T15011] FAT-fs (loop4): Directory bread(block 69) failed [ 1124.000710][T15011] FAT-fs (loop4): Directory bread(block 70) failed [ 1124.007426][T15011] FAT-fs (loop4): Directory bread(block 71) failed [ 1124.014388][T15011] FAT-fs (loop4): Directory bread(block 72) failed [ 1124.021034][T15011] FAT-fs (loop4): Directory bread(block 73) failed [ 1124.499008][T15029] loop5: detected capacity change from 0 to 128 [ 1126.667213][T15075] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3651'. [ 1126.678991][T15075] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1126.705795][T15074] loop4: detected capacity change from 0 to 16 [ 1126.726732][T15074] erofs: Unknown parameter '' [ 1126.727619][ T103] udevd[103]: worker [5766] terminated by signal 33 (Unknown signal 33) [ 1126.732509][ T103] udevd[103]: worker [5766] failed while handling '/devices/virtual/block/loop4' [ 1126.805636][ T103] udevd[103]: worker [5773] terminated by signal 33 (Unknown signal 33) [ 1126.816220][ T103] udevd[103]: worker [5773] failed while handling '/devices/virtual/block/loop1' [ 1126.971831][T15078] loop2: detected capacity change from 0 to 40427 [ 1127.055205][T15078] F2FS-fs (loop2): fault_injection options not supported [ 1127.067108][T15078] F2FS-fs (loop2): invalid crc value [ 1127.092607][T15078] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1127.560836][T15078] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 1127.713891][T12969] syz-executor: attempt to access beyond end of device [ 1127.713891][T12969] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1128.647460][T15106] loop2: detected capacity change from 0 to 128 [ 1128.836362][T15121] netlink: 52 bytes leftover after parsing attributes in process `syz.5.3659'. [ 1128.922926][ T28] audit: type=1400 audit(1760871042.296:729): avc: denied { create } for pid=15123 comm="syz.2.3665" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1128.996999][T15120] input: syz1 as /devices/virtual/input/input21 [ 1129.003300][T15120] input: failed to attach handler leds to device input21, error: -6 [ 1129.027898][T15129] fuse: Unknown parameter 'rootmode¯”ÑÐ0000000yw]00040000' [ 1130.184225][T15152] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3674'. [ 1130.201534][T15152] bridge1: port 1(veth3) entered blocking state [ 1130.208009][T15152] bridge1: port 1(veth3) entered disabled state [ 1130.214914][T15152] device veth3 entered promiscuous mode [ 1130.225678][T15152] bridge1: port 2(veth0_to_bond) entered blocking state [ 1130.232909][T15152] bridge1: port 2(veth0_to_bond) entered disabled state [ 1130.240589][T15152] device veth0_to_bond entered promiscuous mode [ 1130.250601][T15152] bridge1: port 3(vlan2) entered blocking state [ 1130.257089][T15152] bridge1: port 3(vlan2) entered disabled state [ 1130.263907][T15152] device vlan2 entered promiscuous mode [ 1130.270073][T15152] device veth0_to_hsr entered promiscuous mode [ 1130.404050][T15158] loop4: detected capacity change from 0 to 256 [ 1130.570914][T15158] FAT-fs (loop4): Directory bread(block 64) failed [ 1130.577623][T15158] FAT-fs (loop4): Directory bread(block 65) failed [ 1130.584501][T15158] FAT-fs (loop4): Directory bread(block 66) failed [ 1130.591175][T15158] FAT-fs (loop4): Directory bread(block 67) failed [ 1130.598224][T15158] FAT-fs (loop4): Directory bread(block 68) failed [ 1130.604869][T15158] FAT-fs (loop4): Directory bread(block 69) failed [ 1130.611665][T15158] FAT-fs (loop4): Directory bread(block 70) failed [ 1130.618312][T15158] FAT-fs (loop4): Directory bread(block 71) failed [ 1130.625072][T15158] FAT-fs (loop4): Directory bread(block 72) failed [ 1130.631763][T15158] FAT-fs (loop4): Directory bread(block 73) failed [ 1132.188330][T15167] loop5: detected capacity change from 0 to 256 [ 1134.751527][T15167] FAT-fs (loop5): Directory bread(block 64) failed [ 1134.758356][T15167] FAT-fs (loop5): Directory bread(block 65) failed [ 1134.764999][T15167] FAT-fs (loop5): Directory bread(block 66) failed [ 1134.771615][T15167] FAT-fs (loop5): Directory bread(block 67) failed [ 1134.778237][T15167] FAT-fs (loop5): Directory bread(block 68) failed [ 1134.784805][T15167] FAT-fs (loop5): Directory bread(block 69) failed [ 1134.791407][T15167] FAT-fs (loop5): Directory bread(block 70) failed [ 1134.797965][T15167] FAT-fs (loop5): Directory bread(block 71) failed [ 1134.804520][T15167] FAT-fs (loop5): Directory bread(block 72) failed [ 1134.811085][T15167] FAT-fs (loop5): Directory bread(block 73) failed [ 1134.969998][T15175] random: crng reseeded on system resumption [ 1135.092270][ T28] audit: type=1400 audit(1760871048.466:730): avc: denied { audit_control } for pid=15183 comm="syz.5.3684" capability=30 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 1136.741960][T15225] loop5: detected capacity change from 0 to 1024 [ 1136.765058][T15225] EXT4-fs (loop5): bad geometry: block count 1111 exceeds size of device (512 blocks) [ 1137.183218][T15227] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3696'. [ 1137.599662][T15239] fuse: Bad value for 'fd' [ 1137.606183][ T28] audit: type=1400 audit(1760871050.976:731): avc: denied { validate_trans } for pid=15238 comm="syz.4.3703" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 1137.614568][T15239] 9pnet_fd: Insufficient options for proto=fd [ 1138.003095][T15257] loop4: detected capacity change from 0 to 1024 [ 1138.012703][T15257] EXT4-fs (loop4): bad geometry: block count 1111 exceeds size of device (512 blocks) [ 1138.076859][T13112] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 1138.257942][T13112] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1138.268250][T13112] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1138.279561][T13112] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1138.289604][T13112] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1138.303523][T13112] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 1138.312923][T13112] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1138.321119][T13112] usb 6-1: SerialNumber: syz [ 1138.328016][T13112] cdc_ether: probe of 6-1:1.0 failed with error -22 [ 1138.335514][T13112] usb-storage 6-1:1.0: USB Mass Storage device detected [ 1138.367324][T13112] usb-storage 6-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 1138.379985][T15265] overlayfs: missing 'lowerdir' [ 1139.360788][T15248] loop5: detected capacity change from 0 to 40427 [ 1139.369289][T15248] F2FS-fs (loop5): fault_injection options not supported [ 1139.377594][T15248] F2FS-fs (loop5): invalid crc value [ 1139.409493][T15248] F2FS-fs (loop5): Found nat_bits in checkpoint [ 1139.473657][T15248] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 1139.661651][T15282] netlink: 96 bytes leftover after parsing attributes in process `syz.5.3706'. [ 1139.894100][T15284] loop2: detected capacity change from 0 to 256 [ 1141.289657][T15310] loop4: detected capacity change from 0 to 1024 [ 1141.306610][T15310] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1141.474465][T15310] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1141.491492][T15317] overlayfs: missing 'lowerdir' [ 1141.989926][ T6] usb 6-1: USB disconnect, device number 9 [ 1142.049272][T13265] EXT4-fs (loop4): unmounting filesystem. [ 1143.509375][T15346] fuse: Bad value for 'fd' [ 1143.686973][T15352] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3734'. [ 1144.174157][T15358] loop5: detected capacity change from 0 to 512 [ 1144.310378][T15365] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3738'. [ 1144.322283][T15358] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1144.335728][T15358] ext4 filesystem being mounted at /164/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1145.311287][T12209] EXT4-fs (loop5): unmounting filesystem. [ 1145.839894][T14595] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 1146.013226][T14595] usb 2-1: device descriptor read/64, error -71 [ 1146.250299][T15393] mmap: syz.4.3747 (15393) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 1146.305775][T14595] usb 2-1: device descriptor read/64, error -71 [ 1146.342636][T15396] FAULT_INJECTION: forcing a failure. [ 1146.342636][T15396] name failslab, interval 1, probability 0, space 0, times 0 [ 1146.356134][T15396] CPU: 0 PID: 15396 Comm: syz.4.3748 Tainted: G W syzkaller #0 [ 1146.365113][T15396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1146.375179][T15396] Call Trace: [ 1146.378465][T15396] [ 1146.381398][T15396] __dump_stack+0x21/0x24 [ 1146.385738][T15396] dump_stack_lvl+0xee/0x150 [ 1146.390338][T15396] ? __cfi_dump_stack_lvl+0x8/0x8 [ 1146.395396][T15396] ? __kasan_check_write+0x14/0x20 [ 1146.400515][T15396] ? _raw_spin_lock+0x8e/0xe0 [ 1146.405207][T15396] ? __cfi__raw_spin_lock+0x10/0x10 [ 1146.410410][T15396] dump_stack+0x15/0x24 [ 1146.414573][T15396] should_fail_ex+0x3d4/0x520 [ 1146.419259][T15396] ? __alloc_file+0x28/0x2a0 [ 1146.423864][T15396] __should_failslab+0xac/0xf0 [ 1146.428642][T15396] should_failslab+0x9/0x20 [ 1146.433148][T15396] kmem_cache_alloc+0x3b/0x330 [ 1146.437941][T15396] ? __cfi__raw_spin_lock+0x10/0x10 [ 1146.443151][T15396] __alloc_file+0x28/0x2a0 [ 1146.447573][T15396] alloc_empty_file+0x97/0x180 [ 1146.452346][T15396] alloc_file+0x59/0x640 [ 1146.456594][T15396] alloc_file_pseudo+0x17a/0x1f0 [ 1146.461540][T15396] ? __cfi_alloc_file_pseudo+0x10/0x10 [ 1146.467275][T15396] ? __kasan_check_write+0x14/0x20 [ 1146.472391][T15396] ? clear_nlink+0x8a/0xe0 [ 1146.476810][T15396] __shmem_file_setup+0x1df/0x2b0 [ 1146.481929][T15396] shmem_file_setup+0x2f/0x40 [ 1146.486612][T15396] __se_sys_memfd_create+0x1e6/0x3b0 [ 1146.491900][T15396] __x64_sys_memfd_create+0x5b/0x70 [ 1146.497103][T15396] x64_sys_call+0x235/0x9a0 [ 1146.501945][T15396] do_syscall_64+0x4c/0xa0 [ 1146.506369][T15396] ? clear_bhb_loop+0x30/0x80 [ 1146.511056][T15396] ? clear_bhb_loop+0x30/0x80 [ 1146.515741][T15396] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1146.521642][T15396] RIP: 0033:0x7f994298efc9 [ 1146.526063][T15396] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1146.545674][T15396] RSP: 002b:00007f9943874e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 1146.554102][T15396] RAX: ffffffffffffffda RBX: 00000000000004e8 RCX: 00007f994298efc9 [ 1146.562076][T15396] RDX: 00007f9943874ef0 RSI: 0000000000000000 RDI: 00007f9942a12960 [ 1146.570050][T15396] RBP: 00002000000005c0 R08: 00007f9943874bb7 R09: 00007f9943874e40 [ 1146.578022][T15396] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000540 [ 1146.586002][T15396] R13: 00007f9943874ef0 R14: 00007f9943874eb0 R15: 0000200000000580 [ 1146.593981][T15396] [ 1146.625904][T15398] overlayfs: missing 'lowerdir' [ 1146.760918][T14595] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 1147.194178][T14595] usb 2-1: device descriptor read/64, error -71 [ 1147.486842][T14595] usb 2-1: device descriptor read/64, error -71 [ 1147.630892][T14595] usb usb2-port1: attempt power cycle [ 1147.638167][T15414] loop2: detected capacity change from 0 to 512 [ 1147.651410][T15414] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1147.654311][T15416] loop5: detected capacity change from 0 to 128 [ 1147.688696][T15416] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1147.736882][T15414] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1147.746547][T15416] ext4 filesystem being mounted at /168/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1148.084070][T15414] ext4 filesystem being mounted at /128/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1148.174758][T15416] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3754'. [ 1148.578356][T15423] bridge1: port 1(veth3) entered blocking state [ 1148.648939][T15423] bridge1: port 1(veth3) entered disabled state [ 1148.659109][T15423] device veth3 entered promiscuous mode [ 1148.674230][T15424] netlink: 'syz.2.3752': attribute type 27 has an invalid length. [ 1148.693272][T15416] bridge1: port 2(vlan0) entered blocking state [ 1148.710218][T15416] bridge1: port 2(vlan0) entered disabled state [ 1148.726212][T15416] device vlan0 entered promiscuous mode [ 1149.028973][T15416] device veth0_to_hsr entered promiscuous mode [ 1149.059494][T12209] EXT4-fs (loop5): unmounting filesystem. [ 1149.769030][T15420] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 1149.821942][T12969] EXT4-fs (loop2): unmounting filesystem. [ 1155.991676][ T28] audit: type=1400 audit(1760871324.410:732): avc: denied { mounton } for pid=15533 comm="syz.5.3788" path="/proc/640/task" dev="proc" ino=75056 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 1157.808196][T15577] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3796'. [ 1161.186340][T15604] input: syz1 as /devices/virtual/input/input22 [ 1161.197347][T15604] input: failed to attach handler leds to device input22, error: -6 [ 1161.536088][T15613] loop5: detected capacity change from 0 to 512 [ 1161.557344][T15613] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1161.615645][T15613] EXT4-fs (loop5): 1 truncate cleaned up [ 1161.621586][T15613] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1161.669740][T12209] EXT4-fs (loop5): unmounting filesystem. [ 1161.789484][T15624] random: crng reseeded on system resumption [ 1164.521014][T15655] kthread_run failed with err -4 [ 1170.400298][T15705] loop2: detected capacity change from 0 to 256 [ 1172.843912][T15705] FAT-fs (loop2): Directory bread(block 64) failed [ 1172.847251][T15713] input: syz1 as /devices/virtual/input/input23 [ 1172.857091][T15713] input: failed to attach handler leds to device input23, error: -6 [ 1172.865594][T15705] FAT-fs (loop2): Directory bread(block 65) failed [ 1172.891587][T15716] fuse: Bad value for 'fd' [ 1172.896270][T15705] FAT-fs (loop2): Directory bread(block 66) failed [ 1172.902821][T15705] FAT-fs (loop2): Directory bread(block 67) failed [ 1172.936426][T15705] FAT-fs (loop2): Directory bread(block 68) failed [ 1172.943010][T15705] FAT-fs (loop2): Directory bread(block 69) failed [ 1172.950422][T15705] FAT-fs (loop2): Directory bread(block 70) failed [ 1172.964636][T15705] FAT-fs (loop2): Directory bread(block 71) failed [ 1172.972238][T15705] FAT-fs (loop2): Directory bread(block 72) failed [ 1172.978786][T15705] FAT-fs (loop2): Directory bread(block 73) failed [ 1173.213154][T15732] random: crng reseeded on system resumption [ 1174.618903][T15740] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3845'. [ 1174.680911][ T28] audit: type=1400 audit(1760871341.799:733): avc: denied { nlmsg_read } for pid=15739 comm="syz.5.3845" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1182.234865][ T28] audit: type=1400 audit(1760871348.592:734): avc: denied { accept } for pid=15776 comm="syz.5.3856" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1182.975036][T15789] netlink: 72 bytes leftover after parsing attributes in process `syz.5.3858'. [ 1185.525700][ T892] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 1185.764790][T15839] syz.0.3872[15839] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1185.765013][T15839] syz.0.3872[15839] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1188.937813][ T450] usb 2-1: new low-speed USB device number 36 using dummy_hcd [ 1190.271070][ T450] usb 2-1: device descriptor read/64, error -71 [ 1192.103373][ T892] usb 6-1: Using ep0 maxpacket: 32 [ 1193.725164][ T892] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1193.736360][ T892] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1193.746450][ T892] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1193.755564][ T892] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1193.764292][ T892] usb 6-1: config 0 descriptor?? [ 1193.769562][ T892] usb 6-1: can't set config #0, error -71 [ 1193.776170][ T892] usb 6-1: USB disconnect, device number 10 [ 1193.810260][T15898] overlayfs: failed to clone upperpath [ 1194.625023][T15911] loop5: detected capacity change from 0 to 256 [ 1194.720562][T15911] FAT-fs (loop5): Directory bread(block 64) failed [ 1194.727587][T15911] FAT-fs (loop5): Directory bread(block 65) failed [ 1194.734167][T15911] FAT-fs (loop5): Directory bread(block 66) failed [ 1194.742462][T15911] FAT-fs (loop5): Directory bread(block 67) failed [ 1194.749569][T15911] FAT-fs (loop5): Directory bread(block 68) failed [ 1194.756272][T15911] FAT-fs (loop5): Directory bread(block 69) failed [ 1194.770570][T15911] FAT-fs (loop5): Directory bread(block 70) failed [ 1194.777166][T15911] FAT-fs (loop5): Directory bread(block 71) failed [ 1194.784665][T15911] FAT-fs (loop5): Directory bread(block 72) failed [ 1194.791565][T15911] FAT-fs (loop5): Directory bread(block 73) failed [ 1197.404534][T15938] fuse: Unknown parameter '0x00000000000000040x0000000000000004' [ 1197.869975][T15931] loop2: detected capacity change from 0 to 256 [ 1200.285924][T15931] FAT-fs (loop2): Directory bread(block 64) failed [ 1200.292620][T15931] FAT-fs (loop2): Directory bread(block 65) failed [ 1200.299641][T15931] FAT-fs (loop2): Directory bread(block 66) failed [ 1200.306412][T15931] FAT-fs (loop2): Directory bread(block 67) failed [ 1200.313282][T15931] FAT-fs (loop2): Directory bread(block 68) failed [ 1200.319968][T15931] FAT-fs (loop2): Directory bread(block 69) failed [ 1200.326972][T15931] FAT-fs (loop2): Directory bread(block 70) failed [ 1200.333631][T15931] FAT-fs (loop2): Directory bread(block 71) failed [ 1200.340458][T15931] FAT-fs (loop2): Directory bread(block 72) failed [ 1200.347117][T15931] FAT-fs (loop2): Directory bread(block 73) failed [ 1200.740106][T15975] netlink: 'syz.2.3914': attribute type 49 has an invalid length. [ 1204.851713][ T28] audit: type=1400 audit(1760871369.637:735): avc: denied { lock } for pid=16000 comm="syz.0.3923" path="socket:[76246]" dev="sockfs" ino=76246 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 1204.876644][T16001] tipc: Enabling of bearer rejected, failed to enable media [ 1204.956929][ T518] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 1205.430500][ T518] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1205.559911][ T518] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1205.608435][ T518] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1205.649018][ T518] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1205.938415][ T518] usb 6-1: config 0 descriptor?? [ 1206.225080][T16021] random: crng reseeded on system resumption [ 1206.387412][ T518] cp2112 0003:10C4:EA90.0058: unknown main item tag 0x0 [ 1206.403826][ T518] cp2112 0003:10C4:EA90.0058: unknown main item tag 0x0 [ 1206.413414][ T518] cp2112 0003:10C4:EA90.0058: unknown main item tag 0x0 [ 1206.424957][ T518] cp2112 0003:10C4:EA90.0058: unknown main item tag 0x0 [ 1206.437517][ T518] cp2112 0003:10C4:EA90.0058: unknown main item tag 0x0 [ 1206.450338][ T518] cp2112 0003:10C4:EA90.0058: unknown main item tag 0x0 [ 1206.460193][ T518] cp2112 0003:10C4:EA90.0058: unknown main item tag 0x0 [ 1206.467932][ T518] cp2112 0003:10C4:EA90.0058: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.5-1/input0 [ 1206.604025][ T518] cp2112 0003:10C4:EA90.0058: Part Number: 0x00 Device Version: 0x00 [ 1207.881175][T16036] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3933'. [ 1208.132295][T16040] loop2: detected capacity change from 0 to 512 [ 1208.182486][T16040] EXT4-fs (loop2): Test dummy encryption mode enabled [ 1208.199805][T16040] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1208.224428][T16040] EXT4-fs (loop2): 1 truncate cleaned up [ 1208.232488][T16040] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1208.249059][ T28] audit: type=1400 audit(1760871372.775:736): avc: denied { rename } for pid=16039 comm="syz.2.3935" name="file0" dev="loop2" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1211.542408][ T518] cp2112 0003:10C4:EA90.0058: error requesting SMBus config [ 1211.553650][T12969] EXT4-fs (loop2): unmounting filesystem. [ 1211.561022][ T518] cp2112: probe of 0003:10C4:EA90.0058 failed with error -71 [ 1211.601600][ T518] usb 6-1: USB disconnect, device number 11 [ 1211.619504][ T28] audit: type=1400 audit(1760871375.885:737): avc: denied { read write } for pid=16057 comm="syz.1.3940" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 1211.645206][ T28] audit: type=1400 audit(1760871375.904:738): avc: denied { open } for pid=16057 comm="syz.1.3940" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 1211.926754][T16080] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3948'. [ 1212.372573][T16088] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3945'. [ 1214.777234][T16120] loop5: detected capacity change from 0 to 512 [ 1214.790615][T16120] EXT4-fs: Ignoring removed mblk_io_submit option [ 1214.800236][T16120] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -13 [ 1214.808910][T16120] EXT4-fs error (device loop5): ext4_clear_blocks:883: inode #13: comm syz.5.3959: attempt to clear invalid blocks 2 len 1 [ 1214.822790][T16120] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 1214.837541][T16120] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.3959: invalid indirect mapped block 1819239214 (level 0) [ 1214.851915][T16120] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.3959: invalid indirect mapped block 1819239214 (level 1) [ 1214.866695][T16120] EXT4-fs (loop5): 1 truncate cleaned up [ 1214.872471][T16120] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1214.884832][T16120] EXT4-fs (loop5): Quota file not on filesystem root. Journaled quota will not work [ 1214.894606][ T28] audit: type=1400 audit(1760871378.913:739): avc: denied { quotaon } for pid=16119 comm="syz.5.3959" name="file0" dev="loop5" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1214.932228][T12209] EXT4-fs (loop5): unmounting filesystem. [ 1215.164259][ T28] audit: type=1400 audit(1760871379.153:740): avc: denied { read } for pid=16130 comm="syz.1.3963" name="msr" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1215.189805][ T28] audit: type=1400 audit(1760871379.153:741): avc: denied { open } for pid=16130 comm="syz.1.3963" path="/dev/cpu/0/msr" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1217.727766][ T892] hid-generic 0000:0000:0000.0059: unknown main item tag 0x0 [ 1217.736011][ T892] hid-generic 0000:0000:0000.0059: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1218.222098][T16181] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3978'. [ 1219.081529][T16200] tipc: Started in network mode [ 1219.086774][T16200] tipc: Node identity 4, cluster identity 4711 [ 1219.093025][T16200] tipc: Node number set to 4 [ 1220.163293][T16223] overlayfs: failed to clone upperpath [ 1220.174905][T16223] overlayfs: failed to clone upperpath [ 1220.340696][T16242] overlayfs: failed to clone upperpath [ 1220.856257][ T28] audit: type=1400 audit(1760871384.405:742): avc: denied { wake_alarm } for pid=16233 comm="syz.4.3999" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1221.029754][T14595] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 1221.430324][T14595] usb 2-1: Using ep0 maxpacket: 32 [ 1221.437099][T14595] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 1221.442884][T16259] loop5: detected capacity change from 0 to 1024 [ 1221.454095][T14595] usb 2-1: config 0 has no interface number 0 [ 1221.460929][T16259] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 1221.465903][T14595] usb 2-1: config 0 interface 12 has no altsetting 0 [ 1221.479017][T16259] EXT4-fs (loop5): group descriptors corrupted! [ 1221.496964][T14595] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1221.507465][T14595] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1221.515583][T14595] usb 2-1: Product: syz [ 1221.520835][T14595] usb 2-1: Manufacturer: syz [ 1221.525537][T14595] usb 2-1: SerialNumber: syz [ 1221.547724][T14595] usb 2-1: config 0 descriptor?? [ 1222.571641][T16270] loop2: detected capacity change from 0 to 512 [ 1223.647669][ T450] usb 2-1: USB disconnect, device number 37 [ 1224.022091][ T28] audit: type=1326 audit(1760871387.303:743): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16296 comm="syz.2.4019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0f298efc9 code=0x7ffc0000 [ 1224.593938][ T28] audit: type=1326 audit(1760871387.303:744): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16296 comm="syz.2.4019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0f298efc9 code=0x7ffc0000 [ 1224.653295][ T28] audit: type=1326 audit(1760871387.312:745): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16296 comm="syz.2.4019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=98 compat=0 ip=0x7fa0f298efc9 code=0x7ffc0000 [ 1225.644854][ T28] audit: type=1326 audit(1760871387.331:746): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16296 comm="syz.2.4019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0f298efc9 code=0x7ffc0000 [ 1225.705174][ T28] audit: type=1326 audit(1760871387.331:747): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16296 comm="syz.2.4019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0f298efc9 code=0x7ffc0000 [ 1225.751546][T16320] loop5: detected capacity change from 0 to 512 [ 1225.975814][T16320] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1225.995781][T16320] ext4 filesystem being mounted at /226/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1226.015056][ T28] audit: type=1400 audit(1760871389.177:748): avc: denied { setattr } for pid=16319 comm="syz.5.4027" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1226.143944][T12209] EXT4-fs (loop5): unmounting filesystem. [ 1226.534966][T16343] loop5: detected capacity change from 0 to 256 [ 1226.555794][T16343] exfat: Deprecated parameter 'utf8' [ 1226.561423][T16343] exfat: Deprecated parameter 'namecase' [ 1226.568053][T16343] exfat: Deprecated parameter 'namecase' [ 1226.574480][T16343] exfat: Deprecated parameter 'utf8' [ 1226.602031][T16343] exFAT-fs (loop5): failed to load upcase table (idx : 0x00012153, chksum : 0x5dbff8ce, utbl_chksum : 0xe619d30d) [ 1226.786469][ T28] audit: type=1400 audit(1760871389.887:749): avc: denied { write } for pid=16340 comm="syz.5.4030" path="/227/file2/file1" dev="loop5" ino=1048666 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1227.987377][T16364] netlink: 232 bytes leftover after parsing attributes in process `syz.0.4037'. [ 1228.155478][T16374] loop5: detected capacity change from 0 to 128 [ 1228.166315][T16374] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 1228.203029][T16374] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1228.217365][T16374] ext2 filesystem being mounted at /230/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1228.235848][ T28] audit: type=1400 audit(1760871391.226:750): avc: denied { create } for pid=16373 comm="syz.5.4042" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 1228.289331][T12209] EXT4-fs (loop5): unmounting filesystem. [ 1228.318569][T16385] netlink: 96 bytes leftover after parsing attributes in process `syz.5.4046'. [ 1230.156378][ T28] audit: type=1400 audit(1760871392.998:751): avc: denied { mounton } for pid=16408 comm="syz.1.4054" path="/222/file0" dev="tmpfs" ino=1204 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 1230.213547][ T28] audit: type=1400 audit(1760871393.007:752): avc: denied { remount } for pid=16408 comm="syz.1.4054" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 1230.435346][T16416] netlink: 277 bytes leftover after parsing attributes in process `syz.0.4056'. [ 1231.488380][T16434] loop2: detected capacity change from 0 to 256 [ 1233.975950][T16460] tipc: Started in network mode [ 1233.980937][T16460] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 1234.008169][T16460] tipc: Enabling of bearer rejected, failed to enable media [ 1236.674605][T16497] hub 1-0:1.0: USB hub found [ 1236.679363][T16497] hub 1-0:1.0: 1 port detected [ 1238.297005][ T28] audit: type=1400 audit(1760871400.511:753): avc: denied { view } for pid=16532 comm="syz.5.4097" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 1239.014484][T16559] overlayfs: failed to clone upperpath [ 1239.461689][ T28] audit: type=1400 audit(1760871401.591:754): avc: denied { write } for pid=16567 comm="syz.5.4107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1239.556028][T13112] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 1239.751052][T13112] usb 2-1: Using ep0 maxpacket: 32 [ 1239.757416][T13112] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1239.768496][T13112] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1239.779549][T13112] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1239.788669][T13112] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1239.797224][T13112] usb 2-1: Product: syz [ 1239.801482][T13112] usb 2-1: Manufacturer: syz [ 1239.807937][T13112] hub 2-1:4.0: USB hub found [ 1240.032025][T13112] hub 2-1:4.0: 2 ports detected [ 1240.254555][T13112] hub 2-1:4.0: hub_hub_status failed (err = -71) [ 1240.304733][T13112] hub 2-1:4.0: config failed, can't get hub status (err -71) [ 1240.358097][T13112] usb 2-1: USB disconnect, device number 38 [ 1242.037043][ T3170] usb 6-1: new full-speed USB device number 12 using dummy_hcd [ 1244.823765][ T3170] usb 6-1: device descriptor read/all, error -61 [ 1244.984011][ T3170] usb 6-1: new full-speed USB device number 13 using dummy_hcd [ 1245.157322][ T3170] usb 6-1: device descriptor read/64, error -71 [ 1245.851144][ T28] audit: type=1400 audit(1760871407.480:755): avc: denied { connect } for pid=16660 comm="syz.0.4138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1245.877706][T16674] overlayfs: failed to resolve './file0': -2 [ 1246.507943][ T28] audit: type=1400 audit(1760871408.089:756): avc: denied { setopt } for pid=16658 comm="syz.2.4137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1247.705170][ T28] audit: type=1400 audit(1760871409.197:757): avc: denied { bind } for pid=16692 comm="syz.5.4148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1248.247949][T16706] xt_SECMARK: invalid mode: 2 [ 1248.254942][T16707] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=16707 comm=syz.5.4151 [ 1248.267615][T16707] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=16707 comm=syz.5.4151 [ 1248.350718][ T28] audit: type=1400 audit(1760871409.243:758): avc: denied { connect } for pid=16692 comm="syz.5.4148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1248.417758][ T28] audit: type=1400 audit(1760871409.695:759): avc: denied { accept } for pid=16699 comm="syz.5.4151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 1249.233558][T16730] loop5: detected capacity change from 0 to 40427 [ 1249.241596][T16730] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 1249.249499][T16730] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 1249.269340][T16730] F2FS-fs (loop5): invalid crc value [ 1249.414492][T16730] F2FS-fs (loop5): Found nat_bits in checkpoint [ 1249.474664][T16730] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 1249.481806][T16730] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 1249.518012][T16730] syz.5.4161: attempt to access beyond end of device [ 1249.518012][T16730] loop5: rw=2049, sector=77824, nr_sectors = 136 limit=40427 [ 1249.532792][T16730] syz.5.4161: attempt to access beyond end of device [ 1249.532792][T16730] loop5: rw=0, sector=77824, nr_sectors = 8 limit=40427 [ 1250.739828][T16752] overlayfs: failed to clone upperpath [ 1250.993020][T16756] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4165'. [ 1252.343565][T16784] loop5: detected capacity change from 0 to 256 [ 1252.512473][T16784] FAT-fs (loop5): Directory bread(block 64) failed [ 1252.519450][T16784] FAT-fs (loop5): Directory bread(block 65) failed [ 1252.905060][T16784] FAT-fs (loop5): Directory bread(block 66) failed [ 1252.911699][T16784] FAT-fs (loop5): Directory bread(block 67) failed [ 1252.918332][T16784] FAT-fs (loop5): Directory bread(block 68) failed [ 1252.924923][T16784] FAT-fs (loop5): Directory bread(block 69) failed [ 1252.931612][T16784] FAT-fs (loop5): Directory bread(block 70) failed [ 1252.938225][T16784] FAT-fs (loop5): Directory bread(block 71) failed [ 1252.944827][T16784] FAT-fs (loop5): Directory bread(block 72) failed [ 1252.951476][T16784] FAT-fs (loop5): Directory bread(block 73) failed [ 1253.324423][T16790] xt_TCPMSS: Only works on TCP SYN packets [ 1253.561128][T16795] incfs: Backing dir is not set, filesystem can't be mounted. [ 1253.568822][T16795] incfs: mount failed -2 [ 1253.582753][T16795] overlayfs: failed to clone lowerpath [ 1253.708572][ T28] audit: type=1400 audit(1760871414.587:760): avc: denied { mount } for pid=16789 comm="syz.0.4177" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 1254.626689][T16806] loop5: detected capacity change from 0 to 256 [ 1254.641920][T16806] FAT-fs (loop5): Directory bread(block 64) failed [ 1254.648553][T16806] FAT-fs (loop5): Directory bread(block 65) failed [ 1254.655133][T16806] FAT-fs (loop5): Directory bread(block 66) failed [ 1254.661757][T16806] FAT-fs (loop5): Directory bread(block 67) failed [ 1254.668507][T16806] FAT-fs (loop5): Directory bread(block 68) failed [ 1254.675347][T16806] FAT-fs (loop5): Directory bread(block 69) failed [ 1254.682562][T16806] FAT-fs (loop5): Directory bread(block 70) failed [ 1254.689312][T16806] FAT-fs (loop5): Directory bread(block 71) failed [ 1254.696634][T16806] FAT-fs (loop5): Directory bread(block 72) failed [ 1254.703379][T16806] FAT-fs (loop5): Directory bread(block 73) failed [ 1256.328249][T16825] ip6t_rpfilter: unknown options [ 1260.676613][T16870] random: crng reseeded on system resumption [ 1260.778447][T16874] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14 sclass=netlink_route_socket pid=16874 comm=syz.1.4202 [ 1260.953952][ T28] audit: type=1400 audit(1760871421.297:761): avc: denied { map } for pid=16864 comm="syz.2.4199" path="socket:[79612]" dev="sockfs" ino=79612 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1261.823523][T16885] netlink: 272 bytes leftover after parsing attributes in process `syz.0.4198'. [ 1265.732734][T16942] overlayfs: unrecognized mount option "uuid=null" or missing value [ 1265.842980][ T28] audit: type=1400 audit(1760871425.940:762): avc: denied { setattr } for pid=16947 comm="syz.2.4223" name="UDP-Lite" dev="sockfs" ino=79751 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1266.088948][T16954] loop5: detected capacity change from 0 to 256 [ 1266.288979][T16954] FAT-fs (loop5): Directory bread(block 64) failed [ 1266.295724][T16954] FAT-fs (loop5): Directory bread(block 65) failed [ 1266.302453][T16954] FAT-fs (loop5): Directory bread(block 66) failed [ 1266.309084][T16954] FAT-fs (loop5): Directory bread(block 67) failed [ 1266.315746][T16954] FAT-fs (loop5): Directory bread(block 68) failed [ 1266.322423][T16954] FAT-fs (loop5): Directory bread(block 69) failed [ 1266.329234][T16954] FAT-fs (loop5): Directory bread(block 70) failed [ 1266.335838][T16954] FAT-fs (loop5): Directory bread(block 71) failed [ 1266.342629][T16954] FAT-fs (loop5): Directory bread(block 72) failed [ 1266.349270][T16954] FAT-fs (loop5): Directory bread(block 73) failed [ 1267.320715][ T3170] hid-generic 0000:0000:0000.005A: unknown main item tag 0x0 [ 1267.340074][ T3170] hid-generic 0000:0000:0000.005A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1267.540810][ T3170] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 1267.579615][ T28] audit: type=1400 audit(1760871427.537:763): avc: denied { ioctl } for pid=16982 comm="syz.4.4238" path="socket:[78760]" dev="sockfs" ino=78760 ioctlcmd=0xf510 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1267.781220][ T3170] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1267.792792][ T3170] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1267.808620][ T3170] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1267.817947][ T3170] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1267.898965][ T3170] usb 6-1: config 0 descriptor?? [ 1268.261459][T16998] cgroup: subsys name conflicts with all [ 1268.283473][T17000] device batadv_slave_1 entered promiscuous mode [ 1268.290441][T17000] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4244'. [ 1268.299692][T16999] device batadv_slave_1 left promiscuous mode [ 1268.321163][T17002] loop2: detected capacity change from 0 to 256 [ 1268.359049][ T3170] cp2112 0003:10C4:EA90.005B: unknown main item tag 0x0 [ 1268.366605][ T3170] cp2112 0003:10C4:EA90.005B: unknown main item tag 0x0 [ 1268.373775][T16850] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1268.375090][ T3170] cp2112 0003:10C4:EA90.005B: unknown main item tag 0x0 [ 1268.404033][ T3170] cp2112 0003:10C4:EA90.005B: unknown main item tag 0x0 [ 1268.412555][ T3170] cp2112 0003:10C4:EA90.005B: unknown main item tag 0x0 [ 1268.419703][ T3170] cp2112 0003:10C4:EA90.005B: unknown main item tag 0x0 [ 1268.426779][ T3170] cp2112 0003:10C4:EA90.005B: unknown main item tag 0x0 [ 1268.445965][ T3170] cp2112 0003:10C4:EA90.005B: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.5-1/input0 [ 1268.637711][ T3170] cp2112 0003:10C4:EA90.005B: Part Number: 0x00 Device Version: 0x00 [ 1269.493935][T17026] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4252'. [ 1269.611191][ T28] audit: type=1400 audit(1760871429.419:764): avc: denied { read } for pid=17024 comm="syz.0.4252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1270.574442][ T3170] cp2112 0003:10C4:EA90.005B: error requesting SMBus config [ 1270.585153][ T3170] cp2112: probe of 0003:10C4:EA90.005B failed with error -71 [ 1270.619050][ T3170] usb 6-1: USB disconnect, device number 14 [ 1270.660719][T17043] random: crng reseeded on system resumption [ 1270.964701][T17040] fido_id[17040]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 1271.041081][ T28] audit: type=1400 audit(1760871430.739:765): avc: denied { append } for pid=17037 comm="syz.5.4256" name="loop5" dev="devtmpfs" ino=123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1271.068652][ T28] audit: type=1400 audit(1760871430.739:766): avc: denied { map } for pid=17037 comm="syz.5.4256" path="/dev/loop5" dev="devtmpfs" ino=123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1271.073550][T17047] bridge_slave_0: mtu greater than device maximum [ 1273.258830][ T28] audit: type=1400 audit(1760871432.779:767): avc: denied { ioctl } for pid=17074 comm="syz.5.4265" path="socket:[80040]" dev="sockfs" ino=80040 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1273.337142][ T28] audit: type=1400 audit(1760871432.807:768): avc: denied { create } for pid=17074 comm="syz.5.4265" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1273.540464][T17084] device batadv_slave_0 entered promiscuous mode [ 1273.559698][ T28] audit: type=1400 audit(1760871432.807:769): avc: denied { getopt } for pid=17074 comm="syz.5.4265" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1273.592806][T17083] device batadv_slave_0 left promiscuous mode [ 1273.639862][ T28] audit: type=1400 audit(1760871432.807:770): avc: denied { setopt } for pid=17074 comm="syz.5.4265" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1273.972395][T17097] overlayfs: failed to create directory ./bus/work (errno: 22); mounting read-only [ 1273.982476][ T28] audit: type=1400 audit(1760871433.435:771): avc: denied { setattr } for pid=17094 comm="syz.1.4273" name="work" dev="incremental-fs" ino=1395 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1275.379678][T17102] loop5: detected capacity change from 0 to 256 [ 1275.398832][T17102] FAT-fs (loop5): Directory bread(block 64) failed [ 1275.405492][T17102] FAT-fs (loop5): Directory bread(block 65) failed [ 1275.425512][T17102] FAT-fs (loop5): Directory bread(block 66) failed [ 1275.435145][T17102] FAT-fs (loop5): Directory bread(block 67) failed [ 1275.442028][T17102] FAT-fs (loop5): Directory bread(block 68) failed [ 1275.448655][T17102] FAT-fs (loop5): Directory bread(block 69) failed [ 1275.458803][T17102] FAT-fs (loop5): Directory bread(block 70) failed [ 1275.465599][T17102] FAT-fs (loop5): Directory bread(block 71) failed [ 1275.479408][T17102] FAT-fs (loop5): Directory bread(block 72) failed [ 1275.486135][T17102] FAT-fs (loop5): Directory bread(block 73) failed [ 1275.497042][T17102] FAULT_INJECTION: forcing a failure. [ 1275.497042][T17102] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1275.517185][T17102] CPU: 0 PID: 17102 Comm: syz.5.4275 Tainted: G W syzkaller #0 [ 1275.526182][T17102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1275.536261][T17102] Call Trace: [ 1275.539568][T17102] [ 1275.542520][T17102] __dump_stack+0x21/0x24 [ 1275.546876][T17102] dump_stack_lvl+0xee/0x150 [ 1275.551496][T17102] ? __cfi_dump_stack_lvl+0x8/0x8 [ 1275.556546][T17102] ? proc_fail_nth_write+0x17a/0x1f0 [ 1275.561857][T17102] dump_stack+0x15/0x24 [ 1275.566033][T17102] should_fail_ex+0x3d4/0x520 [ 1275.570741][T17102] should_fail+0xb/0x10 [ 1275.574935][T17102] should_fail_usercopy+0x1a/0x20 [ 1275.579998][T17102] strncpy_from_user+0x24/0x2d0 [ 1275.584872][T17102] ? getname_flags+0xb9/0x500 [ 1275.589588][T17102] getname_flags+0xf4/0x500 [ 1275.594132][T17102] getname+0x19/0x20 [ 1275.598049][T17102] do_sys_openat2+0xcb/0x7e0 [ 1275.602674][T17102] ? __kasan_check_write+0x14/0x20 [ 1275.607812][T17102] ? do_sys_open+0xe0/0xe0 [ 1275.612250][T17102] ? ksys_write+0x1eb/0x240 [ 1275.616775][T17102] ? __cfi_ksys_write+0x10/0x10 [ 1275.621644][T17102] __x64_sys_openat+0x136/0x160 [ 1275.626522][T17102] x64_sys_call+0x783/0x9a0 [ 1275.631038][T17102] do_syscall_64+0x4c/0xa0 [ 1275.635470][T17102] ? clear_bhb_loop+0x30/0x80 [ 1275.640178][T17102] ? clear_bhb_loop+0x30/0x80 [ 1275.644869][T17102] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1275.650776][T17102] RIP: 0033:0x7f9cf8d8efc9 [ 1275.655199][T17102] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1275.675013][T17102] RSP: 002b:00007f9cf9ca8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1275.683433][T17102] RAX: ffffffffffffffda RBX: 00007f9cf8fe5fa0 RCX: 00007f9cf8d8efc9 [ 1275.691436][T17102] RDX: 0000000000000040 RSI: 0000200000000180 RDI: ffffffffffffff9c [ 1275.699411][T17102] RBP: 00007f9cf9ca8090 R08: 0000000000000000 R09: 0000000000000000 [ 1275.707426][T17102] R10: 000000000000feff R11: 0000000000000246 R12: 0000000000000001 [ 1275.715403][T17102] R13: 00007f9cf8fe6038 R14: 00007f9cf8fe5fa0 R15: 00007ffdbfc74328 [ 1275.723426][T17102] [ 1278.721750][ T28] audit: type=1400 audit(1760871437.810:772): avc: denied { remove_name } for pid=12133 comm="syz-executor" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1278.761333][ T28] audit: type=1400 audit(1760871437.810:773): avc: denied { unlink } for pid=12133 comm="syz-executor" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1278.832288][T12133] ------------[ cut here ]------------ [ 1278.837810][T12133] WARNING: CPU: 1 PID: 12133 at fs/inode.c:335 drop_nlink+0xc5/0x110 [ 1278.846098][T12133] Modules linked in: [ 1278.850014][T12133] CPU: 1 PID: 12133 Comm: syz-executor Tainted: G W syzkaller #0 [ 1278.859301][T12133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1278.869483][T12133] RIP: 0010:drop_nlink+0xc5/0x110 [ 1278.874637][T12133] Code: 1b 48 8d bb b8 04 00 00 be 08 00 00 00 e8 a3 e4 f0 ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 9b 72 ac ff <0f> 0b eb 86 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 5e ff ff ff 4c [ 1278.894441][T12133] RSP: 0018:ffffc90010e7fab8 EFLAGS: 00010293 [ 1278.900647][T12133] RAX: ffffffff81c3ab85 RBX: ffff88812a9f71a8 RCX: ffff888118030000 [ 1278.908761][T12133] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1278.916928][T12133] RBP: ffffc90010e7fae0 R08: 0000000000000004 R09: 0000000000000003 [ 1278.924923][T12133] R10: fffff520021cff48 R11: 1ffff920021cff48 R12: dffffc0000000000 [ 1278.933054][T12133] R13: 1ffff1102553ee3e R14: ffff88812a9f71f0 R15: 0000000000000000 [ 1278.941160][T12133] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 1278.950195][T12133] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1278.956802][T12133] CR2: 0000001b2e816ff8 CR3: 000000011e506000 CR4: 00000000003506a0 [ 1278.964834][T12133] Call Trace: [ 1278.968129][T12133] [ 1278.971113][T12133] shmem_rmdir+0x5b/0x90 [ 1278.975390][T12133] vfs_rmdir+0x393/0x500 [ 1278.979659][T12133] incfs_kill_sb+0x105/0x220 [ 1278.984312][T12133] deactivate_locked_super+0xb5/0x120 [ 1278.989886][T12133] deactivate_super+0xaf/0xe0 [ 1278.994632][T12133] cleanup_mnt+0x45f/0x4e0 [ 1278.999074][T12133] __cleanup_mnt+0x19/0x20 [ 1279.003580][T12133] task_work_run+0x1db/0x240 [ 1279.008203][T12133] ? __cfi_task_work_run+0x10/0x10 [ 1279.013356][T12133] ? free_nsproxy+0x21f/0x270 [ 1279.018139][T12133] do_exit+0xa25/0x2650 [ 1279.022346][T12133] ? __cfi_do_exit+0x10/0x10 [ 1279.027460][T12133] ? __kasan_check_write+0x14/0x20 [ 1279.032599][T12133] ? _raw_spin_lock_irq+0x8f/0xe0 [ 1279.037884][T12133] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 1279.043457][T12133] ? xfd_validate_state+0x70/0x150 [ 1279.048638][T12133] ? zap_other_threads+0x2c1/0x2f0 [ 1279.053781][T12133] do_group_exit+0x210/0x2d0 [ 1279.058607][T12133] __x64_sys_exit_group+0x3f/0x40 [ 1279.063943][T12133] x64_sys_call+0x7b4/0x9a0 [ 1279.068549][T12133] do_syscall_64+0x4c/0xa0 [ 1279.072997][T12133] ? clear_bhb_loop+0x30/0x80 [ 1279.077704][T12133] ? clear_bhb_loop+0x30/0x80 [ 1279.082465][T12133] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1279.088391][T12133] RIP: 0033:0x7fada158efc9 [ 1279.092979][T12133] Code: Unable to access opcode bytes at 0x7fada158ef9f. [ 1279.100012][T12133] RSP: 002b:00007ffd4639a1f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 1279.108486][T12133] RAX: ffffffffffffffda RBX: 00007fada1611ddd RCX: 00007fada158efc9 [ 1279.116498][T12133] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 1279.124533][T12133] RBP: 0000000000000009 R08: 00007ffd46397f97 R09: 00007ffd4639b4b0 [ 1279.132526][T12133] R10: 0000000000000009 R11: 0000000000000246 R12: 00007ffd4639b4b0 [ 1279.140553][T12133] R13: 00007fada1611d7d R14: 0000555560d0f4a8 R15: 00007ffd4639c580 [ 1279.148583][T12133] [ 1279.151618][T12133] ---[ end trace 0000000000000000 ]--- [ 1279.163735][T12133] ================================================================== [ 1279.171834][T12133] BUG: KASAN: null-ptr-deref in ihold+0x20/0x60 [ 1279.178100][T12133] Write of size 4 at addr 0000000000000170 by task syz-executor/12133 [ 1279.186266][T12133] [ 1279.188609][T12133] CPU: 0 PID: 12133 Comm: syz-executor Tainted: G W syzkaller #0 [ 1279.197736][T12133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1279.207813][T12133] Call Trace: [ 1279.211120][T12133] [ 1279.214221][T12133] __dump_stack+0x21/0x24 [ 1279.218583][T12133] dump_stack_lvl+0xee/0x150 [ 1279.223201][T12133] ? __cfi_dump_stack_lvl+0x8/0x8 [ 1279.228258][T12133] ? ihold+0x20/0x60 [ 1279.232172][T12133] ? ihold+0x20/0x60 [ 1279.236172][T12133] print_report+0x3d/0x60 [ 1279.240535][T12133] kasan_report+0x122/0x150 [ 1279.245065][T12133] ? ihold+0x20/0x60 [ 1279.248987][T12133] kasan_check_range+0x280/0x290 [ 1279.253945][T12133] __kasan_check_write+0x14/0x20 [ 1279.258898][T12133] ihold+0x20/0x60 [ 1279.262640][T12133] vfs_rmdir+0x25f/0x500 [ 1279.266903][T12133] incfs_kill_sb+0x105/0x220 [ 1279.271528][T12133] deactivate_locked_super+0xb5/0x120 [ 1279.276919][T12133] deactivate_super+0xaf/0xe0 [ 1279.281612][T12133] cleanup_mnt+0x45f/0x4e0 [ 1279.286033][T12133] __cleanup_mnt+0x19/0x20 [ 1279.290458][T12133] task_work_run+0x1db/0x240 [ 1279.295063][T12133] ? __cfi_task_work_run+0x10/0x10 [ 1279.300188][T12133] ? free_nsproxy+0x21f/0x270 [ 1279.304890][T12133] do_exit+0xa25/0x2650 [ 1279.309057][T12133] ? __cfi_do_exit+0x10/0x10 [ 1279.313661][T12133] ? __kasan_check_write+0x14/0x20 [ 1279.318779][T12133] ? _raw_spin_lock_irq+0x8f/0xe0 [ 1279.323810][T12133] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 1279.329359][T12133] ? xfd_validate_state+0x70/0x150 [ 1279.334492][T12133] ? zap_other_threads+0x2c1/0x2f0 [ 1279.339615][T12133] do_group_exit+0x210/0x2d0 [ 1279.344224][T12133] __x64_sys_exit_group+0x3f/0x40 [ 1279.349257][T12133] x64_sys_call+0x7b4/0x9a0 [ 1279.353768][T12133] do_syscall_64+0x4c/0xa0 [ 1279.358191][T12133] ? clear_bhb_loop+0x30/0x80 [ 1279.362880][T12133] ? clear_bhb_loop+0x30/0x80 [ 1279.367570][T12133] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1279.373474][T12133] RIP: 0033:0x7fada158efc9 [ 1279.377980][T12133] Code: Unable to access opcode bytes at 0x7fada158ef9f. [ 1279.384998][T12133] RSP: 002b:00007ffd4639a1f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 1279.393420][T12133] RAX: ffffffffffffffda RBX: 00007fada1611ddd RCX: 00007fada158efc9 [ 1279.401397][T12133] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 1279.409368][T12133] RBP: 0000000000000009 R08: 00007ffd46397f97 R09: 00007ffd4639b4b0 [ 1279.417342][T12133] R10: 0000000000000009 R11: 0000000000000246 R12: 00007ffd4639b4b0 [ 1279.425318][T12133] R13: 00007fada1611d7d R14: 0000555560d0f4a8 R15: 00007ffd4639c580 [ 1279.433298][T12133] [ 1279.436317][T12133] ================================================================== [ 1279.455536][T12133] Disabling lock debugging due to kernel taint [ 1279.462943][T12133] BUG: kernel NULL pointer dereference, address: 0000000000000170 [ 1279.470773][T12133] #PF: supervisor write access in kernel mode [ 1279.476837][T12133] #PF: error_code(0x0002) - not-present page [ 1279.482818][T12133] PGD 130310067 P4D 130310067 PUD 0 [ 1279.488203][T12133] Oops: 0002 [#1] PREEMPT SMP KASAN [ 1279.493414][T12133] CPU: 0 PID: 12133 Comm: syz-executor Tainted: G B W syzkaller #0 [ 1279.502555][T12133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1279.512612][T12133] RIP: 0010:ihold+0x26/0x60 [ 1279.517123][T12133] Code: 33 36 7c df 55 48 89 e5 41 56 53 48 89 fb e8 01 6a ac ff 48 8d bb 70 01 00 00 be 04 00 00 00 e8 e0 db f0 ff 41 be 01 00 00 00 44 0f c1 b3 70 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 f1 [ 1279.536730][T12133] RSP: 0018:ffffc90010e7faf8 EFLAGS: 00010246 [ 1279.542796][T12133] RAX: ffff888118030000 RBX: 0000000000000000 RCX: ffff888118030000 [ 1279.550768][T12133] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1279.558742][T12133] RBP: ffffc90010e7fb08 R08: dffffc0000000000 R09: fffffbfff0f2d8fd [ 1279.566713][T12133] R10: fffffbfff0f2d8fd R11: 1ffffffff0f2d8fc R12: ffff88812a9f71b4 [ 1279.574715][T12133] R13: dffffc0000000000 R14: 0000000000000001 R15: 0000000000000000 [ 1279.582717][T12133] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 1279.591647][T12133] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1279.598242][T12133] CR2: 0000000000000170 CR3: 000000014e552000 CR4: 00000000003506b0 [ 1279.606231][T12133] Call Trace: [ 1279.609512][T12133] [ 1279.612442][T12133] vfs_rmdir+0x25f/0x500 [ 1279.616703][T12133] incfs_kill_sb+0x105/0x220 [ 1279.621299][T12133] deactivate_locked_super+0xb5/0x120 [ 1279.626762][T12133] deactivate_super+0xaf/0xe0 [ 1279.631467][T12133] cleanup_mnt+0x45f/0x4e0 [ 1279.635880][T12133] __cleanup_mnt+0x19/0x20 [ 1279.640302][T12133] task_work_run+0x1db/0x240 [ 1279.644900][T12133] ? __cfi_task_work_run+0x10/0x10 [ 1279.650018][T12133] ? free_nsproxy+0x21f/0x270 [ 1279.654703][T12133] do_exit+0xa25/0x2650 [ 1279.658866][T12133] ? __cfi_do_exit+0x10/0x10 [ 1279.663508][T12133] ? __kasan_check_write+0x14/0x20 [ 1279.668642][T12133] ? _raw_spin_lock_irq+0x8f/0xe0 [ 1279.673675][T12133] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 1279.679218][T12133] ? xfd_validate_state+0x70/0x150 [ 1279.684337][T12133] ? zap_other_threads+0x2c1/0x2f0 [ 1279.689540][T12133] do_group_exit+0x210/0x2d0 [ 1279.694159][T12133] __x64_sys_exit_group+0x3f/0x40 [ 1279.699246][T12133] x64_sys_call+0x7b4/0x9a0 [ 1279.703768][T12133] do_syscall_64+0x4c/0xa0 [ 1279.708189][T12133] ? clear_bhb_loop+0x30/0x80 [ 1279.712885][T12133] ? clear_bhb_loop+0x30/0x80 [ 1279.717586][T12133] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1279.723484][T12133] RIP: 0033:0x7fada158efc9 [ 1279.727896][T12133] Code: Unable to access opcode bytes at 0x7fada158ef9f. [ 1279.734907][T12133] RSP: 002b:00007ffd4639a1f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 1279.743406][T12133] RAX: ffffffffffffffda RBX: 00007fada1611ddd RCX: 00007fada158efc9 [ 1279.751375][T12133] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 1279.759343][T12133] RBP: 0000000000000009 R08: 00007ffd46397f97 R09: 00007ffd4639b4b0 [ 1279.767317][T12133] R10: 0000000000000009 R11: 0000000000000246 R12: 00007ffd4639b4b0 [ 1279.775298][T12133] R13: 00007fada1611d7d R14: 0000555560d0f4a8 R15: 00007ffd4639c580 [ 1279.783284][T12133] [ 1279.786312][T12133] Modules linked in: [ 1279.790240][T12133] CR2: 0000000000000170 [ 1279.794399][T12133] ---[ end trace 0000000000000000 ]--- [ 1279.799850][T12133] RIP: 0010:ihold+0x26/0x60 [ 1279.804364][T12133] Code: 33 36 7c df 55 48 89 e5 41 56 53 48 89 fb e8 01 6a ac ff 48 8d bb 70 01 00 00 be 04 00 00 00 e8 e0 db f0 ff 41 be 01 00 00 00 44 0f c1 b3 70 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 f1 [ 1279.823970][T12133] RSP: 0018:ffffc90010e7faf8 EFLAGS: 00010246 [ 1279.830046][T12133] RAX: ffff888118030000 RBX: 0000000000000000 RCX: ffff888118030000 [ 1279.838021][T12133] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1279.846017][T12133] RBP: ffffc90010e7fb08 R08: dffffc0000000000 R09: fffffbfff0f2d8fd [ 1279.853993][T12133] R10: fffffbfff0f2d8fd R11: 1ffffffff0f2d8fc R12: ffff88812a9f71b4 [ 1279.861967][T12133] R13: dffffc0000000000 R14: 0000000000000001 R15: 0000000000000000 [ 1279.869969][T12133] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 1279.878920][T12133] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1279.885502][T12133] CR2: 0000000000000170 CR3: 000000014e552000 CR4: 00000000003506b0 [ 1279.893481][T12133] Kernel panic - not syncing: Fatal exception [ 1279.899860][T12133] Kernel Offset: disabled [ 1279.904183][T12133] Rebooting in 86400 seconds..