last executing test programs: 36.687726221s ago: executing program 1 (id=207): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x16, &(0x7f0000000040)=@raw=[@map_idx_val={0x18, 0x7, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}}, @map_fd={0x18, 0x6, 0x1, 0x0, 0x1}, @map_idx={0x18, 0x5, 0x5, 0x0, 0xb}, @jmp={0x5, 0x1, 0x1, 0x3, 0x3, 0x10, 0xffffffffffffffff}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @exit], &(0x7f0000000100)='GPL\x00', 0x7d22, 0x0, 0x0, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000140)={0x2, 0x8, 0x2, 0x2cf8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000180)=[0x1], &(0x7f00000001c0)=[{0x3, 0x2, 0x2, 0x7}, {0x0, 0x3, 0xf}, {0x3, 0x3, 0xe, 0xb}, {0x5, 0x3, 0x10, 0xa}, {0x2, 0x3, 0xf, 0x9}], 0x10, 0xa}, 0x94) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000300)=@generic={&(0x7f0000000000)='./file0\x00', r0}, 0x18) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000440)={@ifindex=0x0, 0x31, 0x0, 0x9, &(0x7f0000000340)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r3 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000480)={@fallback=r0, r0, 0x1c, 0x2000, 0x0, @value=r3, @void, @void, @void, r2}, 0x20) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f00000004c0)={'team0\x00', 0x0}) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f00000005c0)=0x0) r6 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000600)={r0, r3, 0x0, 0x0, @val=@uprobe_multi={&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)=[0x7, 0x8], &(0x7f0000000580)=[0x3], 0x6, 0x2, 0x1, r5}}, 0x40) getresuid(&(0x7f00000006c0)=0x0, &(0x7f0000000700), &(0x7f0000000740)=0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000780)={{{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@private0}}, &(0x7f0000000880)=0xe8) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000008c0)={0x0, 0x0, 0x0}, &(0x7f0000000900)=0xc) r12 = getgid() getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000940)={0x0, 0x0, 0x0}, &(0x7f0000000980)=0xc) stat(&(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(r3, &(0x7f0000000a80)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) read$FUSE(r3, &(0x7f0000002ac0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) lsetxattr$system_posix_acl(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='system.posix_acl_access\x00', &(0x7f0000004b00)={{}, {0x1, 0x2}, [{0x2, 0x1, r7}, {0x2, 0x3, r10}], {0x4, 0x4}, [{0x8, 0x3, r11}, {0x8, 0x6, r12}, {0x8, 0x4, r13}, {0x8, 0x4, r14}, {0x8, 0x3, r16}, {0x8, 0x4, r18}], {}, {0x20, 0x4}}, 0x64, 0x3) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000004bc0)={'syzkaller1\x00', &(0x7f0000004b80)=@ethtool_gstrings={0x1b, 0x4, 0x1b, "4b9bb8c8dd21b6a1f5465b1391702c9d2ef10830a7e2dc691d449e"}}) ioctl$TUNGETVNETLE(r3, 0x800454dd, &(0x7f0000004c00)) r19 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000004c40), 0x800, 0x0) r20 = syz_genetlink_get_family_id$ethtool(&(0x7f0000004cc0), r19) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000004d80)={'ip6gre0\x00', &(0x7f0000004d00)={'ip6_vti0\x00', r4, 0x29, 0x4, 0x0, 0x96be, 0x2, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x8000, 0x7fffffff, 0x82}}) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000004f80)={&(0x7f0000004c80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000004f40)={&(0x7f0000004dc0)={0x154, r20, 0x20, 0x70bd2d, 0x25dfdbff, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r21}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xf8a6dffeff0e4a2b}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}]}]}, 0x154}, 0x1, 0x0, 0x0, 0x4000002}, 0x24000810) mknod$loop(&(0x7f0000004fc0)='./file0\x00', 0x100, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r3, &(0x7f0000005200)={&(0x7f0000005000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000051c0)={&(0x7f0000005040)={0x180, r20, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0x144, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x60, 0x3, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}]}, @ETHTOOL_A_BITSET_MASK={0x6a, 0x5, "f24ad3eb2c7cb59097c706da3b1ff15a12f711b2c9e274e7e79534727ccf97b019907efa669e207673fb921f59b924e5f2d9f0c961b527e70fe298d845fadd8483ca60806c74603552b898bdec8721a48935ab4c2b492b2bfeee620604609e13aabde5831dc6"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x68, 0x3, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '-\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, ':}\'\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'team0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x101}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffffa}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x800}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}]}]}, 0x180}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r22 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000005400), 0x2001, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000005580)={&(0x7f0000005240)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f00000053c0)=[{&(0x7f00000052c0)="eaccc38a33f4aa773062933ee6500b4b4b00df27ec38283a93d4f81f59ff5c83c71ec34e2db243714b02560bbdf070d1383fdee72c4dce63a14ee97801dfe3a271664e882e3ef451977e9104a91074356e206f5e72a0b1c87876785a652208a1c71012ab188e5aedd74dca558c571e6c6a0f98c99e5eee776e1f3fc07f78c313c7e6a2af1781778a812fe2969fb9c661d65f10d286685fc11b058240cb70549e7dff407d9b6ae4dce0758a5c225c2078dedc90f06118c83328fafc2723eb8b75d1795ec0e375dc4fa9b72f047fe55d0527fb7ecac999cdde4b0941ac1ac31109f5a80c80", 0xe4}], 0x1, &(0x7f0000005440)=[@rights={{0x24, 0x1, 0x1, [r6, r6, r0, r6, r19]}}, @cred={{0x1c, 0x1, 0x2, {r17, r10, r14}}}, @rights={{0x14, 0x1, 0x1, [r22]}}, @rights={{0x20, 0x1, 0x1, [r3, r19, r19, r19]}}, @rights={{0x2c, 0x1, 0x1, [r19, r0, r6, r0, r6, r0, r6]}}, @cred={{0x1c, 0x1, 0x2, {r5, r8, r14}}}, @rights={{0x30, 0x1, 0x1, [r6, r6, r3, r6, r0, r6, r0, r3]}}, @cred={{0x1c, 0x1, 0x2, {r5, r15, r18}}}], 0x120, 0x400448c4}, 0x20000885) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000005600)=@generic={&(0x7f00000055c0)='./file0\x00', r22}, 0x18) r23 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005680), r22) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r3, &(0x7f0000006400)={&(0x7f0000005640)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000063c0)={&(0x7f00000056c0)={0xcec, r23, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_NAN_FUNC={0x530, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa, 0x8, @broadcast}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_SERVICE_INFO={0x101, 0xb, "9f11e4b3f3da3ff9cb48b0dd6ff7419ce93ac9fed90d8fa39c177939e7cadd3c13f903e0557051eba0e1a0c7fa6f8f82aebf1676ad1b03dad6d19b64fbbc464d25087f0670ec2d84c98be2d183420f523cb39b30e9ec975f2d617370f42906d37fe20688d5d7aad1b19f8d2c94ec2ed9c202a6654605e6a4f3986f24d3377f22a4aebbbcd804b3cf1c1e5897e0e614ead7941339502b6c4e2bab0a65149faf75b80c8adeb3423c4bd9c59cfaa2346c17027b3ddfa08464bb372393dd455c5eb8e7313a901987eee77c9148c24c1567c62a7f0452dd50f9500ccf89f0b6b496da9c4c655d33cd876460a35a87d0dc36570e05d28a6f056a939ded6c8ca3"}, @NL80211_NAN_FUNC_TX_MATCH_FILTER={0x304, 0xe, 0x0, 0x1, [{0x7c, 0x0, "8ea5bb10eed5957cca3a69759ae0e644bd757a1b460ae756e916709bfba7817a3adb5c75a943519994c8fe3693be3fba0c2ce35e5134ea10f76fae1f9c9da4a4b9eb33a2deb5854b32f4345cb30e33c0798a6d6bf3fbe017011636a10eba1e8ca5d9d8527e6debf67d770e6cac66e5f48f99e44b524ed346"}, {0xfd, 0x0, "a85d9a29b595cedb79829c01c77ffefaf2b93797e3f01c05867788d97047e5be217cd87894c527f691cd108a17b4e3c84821b706a9d177473154659aeaafc383f7babdbf522f680381b568c85c768c2bbca8cb0b16cef1f722ec1a5162813a005cb3d197590ea3ae4d3c9834f79fdc65054e8aaa86a6cbf6ac6de6d6bbca5a415dc20f8b31dc75526eff512f50d91786f18018fae40cf531317f757e76a2121f48f3410d27b935fc1588526d495c66f69ae262975bbb8cd03946ad151021116b7a5ae78900367e65b3ef166bb359bd28154d6da6d878f5f8139ab9e25df1d46d98c1269ab98339b3a3d9500f43b220dcd7b8f799357d746af7"}, {0xb8, 0x0, "2166b0463a65e085852df215ceb6903be0df101e0ab52d906ba076de7e594814a4077af92924c468baa7e757fbcae8c383985a5165c40ff4f3886902c13a91ea33c6cfd1f68eb07b8317d55ee851c9c472c5295d00c2a6f6230073a688a0487e1b3ae77881cfbee6ea1050bacc00664c58cf139504fd04a83a4eb8b35137e46d57e9f0e301cce7d27f9092a70f1b43d3cdd67f3d6293f0ed1399e54c44ae8e08c048c08299a0e9cc89867af4cb8ae63dcd91249b"}, {0xc9, 0x0, "0486063f060324f8b35bf815301fbf1c2f2ac0178a4c6730173e05caedf494d36bd240938f4061f62ead8edb1262e966cb8d8f65f44bd38cb453dc7f9c14d4c9439bfac2667fdfadc75d52f3d3f5aa26b8bb913b9ac09148e0a56b5366483ed6b917020d3e64afd87e84b4d7f6e9cf6f2126c210728ea4c7b23a3b72b3912f5bb588ff5911018ad23db6e7f73f9d61726074607f3948fe9799abc3609073fccdd1eb1b5fa183e8be1a22c386b65774d19c8310a8501f46790df31f1064c0daeb7087d8943d"}]}, @NL80211_NAN_FUNC_RX_MATCH_FILTER={0x114, 0xd, 0x0, 0x1, [{0x2f, 0x0, "9ecb1cc83d68ecc735a00aa7e9ab9e5e19b1e5f742faca0656c4903cfcb5c358f1944e4d14a1251b347df1"}, {0xde, 0x0, "c4ab7394452d0c213d2945f63229a1aa2613411e3a37a5e08afe01e6a39cd6eab6c99c1096d355a6a98dd94e91fbc969e6426a2470e36858e8e7afc689c01f581b984a030edc975df3d4a795eaa6554ad1dfcbed670cc3e5d548aac0ea4e8f827a5fff69a74bbbd2fcc33a8cf4539dc7a48aa92d6dc19722d8edcbf15bb06edfc782bcdfa56e6362115f7461d52b37cae3ff8ed80e9cc32167aaf6ae802cbc11cb6a064622d9ed696448e0e6294015f82abfe7b9d1efdc63c8cf382d79b346c314487a0169f064c34ef4061c43d4cc7a82d3c883a37d00cbe465"}]}]}, @NL80211_ATTR_NAN_FUNC={0x124, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0x3}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa, 0x8, @device_b}, @NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0x3}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "abe659643ad7"}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "725b4b9658ea"}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5}, @NL80211_NAN_FUNC_SERVICE_INFO={0xdf, 0xb, "f8dfc693561ea4fcca7ae102b28b6e567b4970ab2bd9a6227c28ca3ce181e9dc02cc8eafd3ffec29a0a96a4966728da8df958c168ef41964ef176f7827f11e1b4e58e50bf36b31bc983140c0f0090eabb1a52016f4f3b2ece93bc80579e9e8713276cb3cbdae238d51867ba704be9ad5aa551221d4f042f017643cf4fdea00010d7ef9513f8d7b70e9c4fdea8276d6e2ca87fb42e0e36a364909b3334d727fecb241c2f4f7369fb5e24c8410236382b6e43a0b8b73f8942c76882f79d0d50428300ad22194a407d3099b4cc2f04e7fff1628684d164bcdebba39c7"}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}]}, @NL80211_ATTR_NAN_FUNC={0x14, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x6}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0x9}]}, @NL80211_ATTR_NAN_FUNC={0xc, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}]}, @NL80211_ATTR_NAN_FUNC={0x65c, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x4}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "e987076041b3"}, @NL80211_NAN_FUNC_RX_MATCH_FILTER={0x198, 0xd, 0x0, 0x1, [{0x69, 0x0, "c7f1a5dada715119a250f81b21a69235f7f9d44c5154522ad2449a16568e340da2a2c99b452e90761f42994bbbba9a17e45cc6f4c4744eb5b7e9499a5b79c3895a004253cfb39d9b3c1f26060b75004c04682416b66df55820fd6b4d35c4bef9269a5235d1"}, {0x62, 0x0, "037250b89385e73911f85142c9f1a28d9cb567f98495a887eb3924775c6f30b68f5878a3ae3ee0c192424a38a01ab0fad75aa58cebe905a408a0e727bfe3e0be57c66f7d0049cdefac5f4b6a1d6f8b2704b431339a1ff112a7a1c1b2da1a"}, {0xc1, 0x0, "4c8f1bbe5b8e1a2cc6fededed38cd0f18e55667fdba397a85592f590787ea9dbebaaeceee9706c167875f2abd44f6374dd0fd65765d4715f76172e8abf6433ab7e089e646a9c8c333eac2907ff7039703d9c059043902d3766bb92c07ebefe06a84d7e01d973a59425f523cd3ee69616359c9dc96fca1c6f0ee5fae190906c168444ff6bdbe91f569b414c6e3c0c4fa7b4df4ab276f5ccf54bfa0be61516d03d4c34372117b96e8329c5e45fcc8fbf0b81f95376f148bdaaf662dfe595"}]}, @NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0x9}, @NL80211_NAN_FUNC_TX_MATCH_FILTER={0x320, 0xe, 0x0, 0x1, [{0x20, 0x0, "a9fe1e56439e5c67ed9f4ac2eea13cc77109c8dfe6f0a409ae662010"}, {0xb3, 0x0, "347aeacc44c68f29d2655f506e913bfd3ae6cd6d639294540375ce1211fe011209d1a03f21de45ff67d18952d667b8477abdce3655dfcbc7b328b48a358051b276386cdc3c6870823fe0c209f6a13b1dada5e16800fdc764c07f869e56b3e28a99c2b0e6bc82190f10b38f5014a20a88b979a3dcad6a12f6aa53b6109d7644dd42e61961b73be44da9cef91f1025bf33eb57674a1a595224d04f98a0d7708e5324e90cf110b5c490a8b5e49d67572d"}, {0x48, 0x0, "87c347214876cd4f802b6d5e725ad7d9ebb3ff9c14a0e526f9184b7aa599deaf3ce50d31f8ac19c92f2f9c02612b1c8a52e53f0f09367fb853e5e492a94b23be67b512d5"}, {0x5e, 0x0, "ef718c3003ef7a392576ea87d2816f26e08a8043b96123dd3c17d1f3c308eced23f93482d08f55589cb60bb072a585a16976a4c048b162d164297da08182842a310d453264c2723ff5c7f286970872e1fbefceb2c0065c899cb3"}, {0xed, 0x0, "0eabd26fb7cd96f30fa2be7a3fdb5be5ea86702e1ab5800c75d7aedf0eef9262dde59498dd1ff97e8044126888a0e42e8f465130872ed503d223525cc29c7acd6e73999d42c2afcd1f8bb9c83bfed957040b1b0c5bc34e778d9ce9033cd1bde40ea1c76a933f7a1bd4b4fbaddcdb364b0e7f3216abf05bb04d90472591376d230d8f2e811642624d7a59541b17f28eaa599b4620476196f774713bda5156a4bbc4a38d9971f4fe9ab433aa5ed0eede80d62a2cbec168240734a7a9a0af6c324dfee5ec0c7a972f526c9ae70e34d2a99d2d76c29cf60be020c5b408514e499f845ebe1375c3178b4fbe"}, {0x66, 0x0, "7023c0f2a3160e124ab31749a32e1397ba76acaaab23489d8d4a2218c68640feffda7b49a90d56853bfa86a4f7c2ef0eed6de3ec987a00baf4a2ebbbd715b1984169c9962c0e56ab564e5e4c0bc6913c2a19aee0f9c868f40b116c42a6923d84a671"}, {0x47, 0x0, "232ab0cae6f07948c29d2f0be695b5ce0baa0bf9a7acfab7cc22d187192981e3361b2785e7aaa60192ebd4c1535d74fcc55212ec31ddf0f38b567e48cdc219d87d8d7c"}]}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x80000000}, @NL80211_NAN_FUNC_TX_MATCH_FILTER={0x178, 0xe, 0x0, 0x1, [{0x9d, 0x0, "c7824938855efb55f2d49d3e5fac44899e1899410fba3344bd4095932b65495f92a558466c3779cce0bb4e9bd8cdc97824c81396320504c41288cd02f26a4350bdc1e7d5f205d00e34c03322ca12317ed41afd8d84d88e332b009406e057372aeeddaac16a873aeab94948ebecfd747e2bdee5da93973cafa83495938ed65a9159c3b11dc60714387797341c6b9bd6db5f72191e9644263f92"}, {0x19, 0x0, "9eafac896e5094ae1f1d4541a96eb41c42194815da"}, {0x64, 0x0, "2f54a3a787b57c15af6a4f1720e2a787bae9492effb61bb207a1ddb49c6b98503347e5c07a1b1383e4a3d1c825363f8da08d6d59c5f1e26b05dc884aac086094b9234308977137f34a2e59cbe043973b3eb44d1a02adda5c2c06fd640d3a5aa9"}, {0x51, 0x0, "dfdf5a358f73498ea00258d6f5aeb8a0ba94ca76d508a6c1c68c94e4d249f9f57414e9c0855f0b0aa341de16682c89c795f7dcc2b1c0828a26af2fde239fb4f9f53fef403c3f05c12c812ee398"}]}]}]}, 0xcec}, 0x1, 0x0, 0x0, 0x4014}, 0x40810) 36.620189807s ago: executing program 1 (id=208): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0x0, 0x40, &(0x7f0000000000)={0x4b5a9da54893e123, 0x14, 0x8, 0x2}, 0x8, 0x7, 0x200, 0x0, 0x0, 0x40, 0x0}) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe00}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000008"], 0x48) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000340)='sched_kthread_stop_ret\x00', r4}, 0x10) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e0001007769726567756172640000000400028008000a00b8"], 0x40}}, 0x0) write$selinux_load(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757814"], 0x65) 36.476243918s ago: executing program 1 (id=211): r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0x2, 0x10001) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000440), 0x10) listen(r1, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) r2 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="03000000000000000000000000000071510000009c237297020089d807ac6f4bc5d1c8b3b2744d758230cad4e56d", @ANYRES16=r1, @ANYRES16=r2, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3, 0xffffffffffffffff}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="05000000070000000700000001"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{r6}, &(0x7f0000000600), &(0x7f0000000680)=r7}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000980)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x46, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r8}, 0x10) io_pgetevents(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) connect$vsock_stream(r2, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) writev(r2, &(0x7f0000000080), 0x0) r9 = accept4$unix(r1, 0x0, 0x0, 0x80800) recvfrom$unix(r9, &(0x7f00000002c0)=""/236, 0xec, 0x10120, 0x0, 0x0) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000006000000000000000064000000070000000c0000000000000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r10}, 0x10) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="d80000001b0001002dbd7000fddbdf2500000000000000000000000000000000ac1e00010000000000000000000000004e2200004e23000c0a00008032000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00080009000000008000000000000000f8ffffffffffffffff01000000000000010000000000000001000000000000800900000000000000000000008015010002000000000000000100000000000000fd002ceb3950466f6ff00000000000000700000000000000000002030000000029000000000000000c00150053073500040000000c0008"], 0xd8}, 0x1, 0x0, 0x0, 0x2000c0c4}, 0x8010) r12 = openat$cgroup_ro(r0, &(0x7f00000000c0)='blkio.bfq.sectors\x00', 0x0, 0x0) openat$incfs(r12, &(0x7f0000000040)='.pending_reads\x00', 0x4000, 0x140) 36.379488935s ago: executing program 1 (id=212): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f00000000c0), 0x0) socket(0x10, 0x3, 0x0) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f00000001c0)='./file0\x00', 0x88, &(0x7f0000000bc0)={[{@utf8no}, {@shortname_winnt}, {@uni_xlate}, {@fat=@check_strict}, {@uni_xlateno}, {@uni_xlateno}, {@fat=@sys_immutable}, {@fat=@usefree}, {@uni_xlateno}, {@shortname_lower}, {@fat=@quiet}, {@utf8}]}, 0x0, 0x29f, &(0x7f0000000840)="$eJzs3UFrE1sYxvGnSdukKW2yKBfuhct9uW50M7TxEwRpQQwotRF1IUztREPGpGRiJCK2O7d+juLSlYL6Bbpx517cFEFw04UYaZKxaRswra1Tzf8HYU7OOe/MmZyZ8M5AJlvXn94rFwOn6NYVS5pi0rq2pcxOqWuku4y1y+Pqta5zk5/f/Xv1xs1LuXx+ftFsIbd0Pmtm0/+9evDo2f9v6pPXnk+/TGgzc2vrU/b95l+bf299XQrXXpVcW65W6+6y79lKKSg7Zld8zw08K1UCr1a3nvaiX11dbZpbWZlKrda8IDC30rSy17R61eq1prl33FLFHMexqZSGTfzQEYWNxUU3dyKDQRQm+lXWajk33rexsPErBgUAAE6XqPL/u6XASoFVqnvy+4P5f0yHyP+loc7/D4/8fxjs5P+p7vm7F/k/AAAAAAAAAAAAAAAAAAAAAAC/g+1WK91qtdLhMnwlJCUlhe+jHidOBvM/3Hp+uJeU/CeNQqPQWXbac0WV5MvT7Jj0pX08dHXKCxfz87PWltFrf60bv9YoxJUI40OZ/vFznXjrjV/TmFK9288qrZn+8dk+8Y3CuM6eaSW6W/bkKK23t1WVr5X2cb0b/3jO7MLl/L74iXY/AAAAAAD+BI59d+D6vd3uWPjYkH3tncrd+wNK/+D+wL7r61H9MxrdfgMAAAAAMEyC5sOy6/tebQgK4f8fHMsKo//okoN2HpXUrXlxWuZikEJM0lHD4z83yx8l7amZiXy6j6Pw4X7nDBikc5TfSgAAAABOQpj0j0Q9EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAhtigDw8L+x/l2WM9m4tHs5cAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA6fAtAAD//2kbF4o=") r0 = syz_open_procfs(0x0, &(0x7f0000000340)='net/rpc\x00') mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'nr0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x810) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@newqdisc={0xa8, 0x24, 0x800, 0x70b923, 0x7fffe, {0x0, 0x0, 0x0, r5, {0x1, 0x1}, {0xfff2, 0xfff2}, {0x2, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x80, 0x808, 0x205, 0x1, 0x80000c}, 0xb, 0x0, 0x5, 0x5, 0x9, 0x2, 0x9, 0xd, 0x1, 0x1, {0xffff1c72, 0x2, 0x1000, 0xfd, 0xfffffffe, 0x7583}}}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x3, 0x7025, 0x7fffffff, 0x0, 0xffff, 0x7, 0x2}}, {0x8, 0x2, [0x9, 0xfffd]}}]}, @TCA_RATE={0x6, 0x5, {0x46, 0xfb}}]}, 0xa8}}, 0x8000) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r8, &(0x7f0000000200)="bada30fbc99b5400040000ea0756a8", 0xf, 0x8040, &(0x7f00000001c0)={0x11, 0x88a8, r7, 0x1, 0xd8, 0x6, @multicast}, 0x14) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333404, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x11080, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) read$FUSE(r0, &(0x7f0000002c00)={0x2020}, 0x2020) pipe2(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) splice(r10, 0x0, r9, 0x0, 0x1, 0x0) fcntl$setpipe(r9, 0x408, 0x7) 35.198400838s ago: executing program 1 (id=219): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) timer_create(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1700000000000000040000000300000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000a1277ee756ada55f0000a92c573eee7d05e04e50b6400000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000001c0)='xprtrdma_mrs_zap\x00'}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRESHEX=0x0, @ANYRESDEC=r1], 0x48) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x800092, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x46, 0x2d1, &(0x7f0000000740)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$vfat(&(0x7f0000001800), &(0x7f0000000240)='./file1\x00', 0x8, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x4, 0x27a, &(0x7f0000000440)="$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") openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) r4 = eventfd(0x40048c67) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x27801000000, 0x0, 0x1, r4, 0x5}) getpid() 34.841233436s ago: executing program 1 (id=220): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = dup(r1) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x0) tgkill(0x0, 0x0, 0x2f) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001700)=@newqdisc={0x74, 0x24, 0xf0b, 0x70bd2e, 0x0, {0x0, 0x0, 0x12, 0x0, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x48, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x0, 0x3, 0xc, 0x9c, 0x7ff}, {0x2, 0x2, 0x7, 0xff92, 0x0, 0x8}, 0x9, 0x2, 0x1470}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xf39a0a944d4bc56b}, @TCA_TBF_BURST={0x8, 0x6, 0xfff}, @TCA_TBF_PBURST={0x8, 0x7, 0x16cd}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x3c000001}, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000180)=0x10, 0x4) 34.840927686s ago: executing program 32 (id=220): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = dup(r1) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x0) tgkill(0x0, 0x0, 0x2f) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001700)=@newqdisc={0x74, 0x24, 0xf0b, 0x70bd2e, 0x0, {0x0, 0x0, 0x12, 0x0, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x48, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x0, 0x3, 0xc, 0x9c, 0x7ff}, {0x2, 0x2, 0x7, 0xff92, 0x0, 0x8}, 0x9, 0x2, 0x1470}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xf39a0a944d4bc56b}, @TCA_TBF_BURST={0x8, 0x6, 0xfff}, @TCA_TBF_PBURST={0x8, 0x7, 0x16cd}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x3c000001}, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000180)=0x10, 0x4) 5.336336173s ago: executing program 3 (id=431): r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x12, r0, 0xa8bdb000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c40)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb01001800000000000000200000002000000005000000030000000100000f040000000a000000030000000f000000000000030000000000000061"], &(0x7f0000001fc0)=""/4115, 0x3d, 0x1013, 0x1}, 0x28) 5.336019393s ago: executing program 3 (id=432): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000240)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@block_validity}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x101}}, {@bh}, {@grpquota}, {@abort}, {@user_xattr}, {@journal_path={'journal_path', 0x3d, './file1'}}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000000a40)="$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") bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="0000000000000000000000008100181100000000", @ANYRES32, @ANYBLOB="0000000000000000588469d754cb6e0da4a59b833cb7080000000000007b8a010000000000000000000000000007020000f8ff1300b803000008000000b704000000000000850000000300000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00'}, 0x10) pipe(0x0) socket$inet_udp(0x2, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x41) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='tlb_flush\x00', r5}, 0x18) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) rt_tgsigqueueinfo(0x0, 0x0, 0x400000a, &(0x7f0000000600)={0x81, 0x3, 0xfffff2bb}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) pipe2$9p(&(0x7f0000000240), 0x800) 4.796636345s ago: executing program 5 (id=435): mkdirat(0xffffffffffffff9c, &(0x7f0000006f40)='./file0\x00', 0x190) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) utime(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x9f11, 0x8}) syz_fuse_handle_req(r0, &(0x7f00000021c0), 0x2000, &(0x7f00000041c0)={&(0x7f00000001c0)={0x50, 0x0, 0x0, {0x7, 0x29, 0x7, 0x140008, 0x3, 0x0, 0x1, 0x57, 0x0, 0x0, 0x20}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000a80)={{r1}, &(0x7f0000000a00), &(0x7f0000000a40)='%pK \x00'}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r2}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) syz_fuse_handle_req(r0, &(0x7f0000004300)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004280)={0x78, 0x0, 0x100000000, {0x6, 0x803, 0x0, {0x5, 0x6, 0x6, 0x6c, 0x6, 0x9, 0x3, 0xfffff2df, 0x101, 0x4000, 0x2, 0xee00, 0xffffffffffffffff, 0x4, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x164) 4.704127142s ago: executing program 5 (id=437): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r0}, 0x10) (async) r1 = socket(0x10, 0x3, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r1, 0x29, 0x41, &(0x7f0000000040)={'nat\x00'}, &(0x7f0000000080)=0x24) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0xfffffffb}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c000000120001ee", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\n'], 0x2c}, 0x1, 0x0, 0x0, 0x40010}, 0x44010) 4.696248233s ago: executing program 5 (id=439): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000280)='./file0\x00', 0x800, &(0x7f0000000400)={[{@allow_utime}, {@gid}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@errors_remount}, {@iocharset={'iocharset', 0x3d, 'cp861'}}, {@uid={'uid', 0x3d, 0xffffffffffffffff}}, {@iocharset={'iocharset', 0x3d, 'maccenteuro'}}, {@discard}, {@utf8}, {}, {@utf8}, {@discard}, {@namecase}]}, 0x1, 0x153a, &(0x7f0000000680)="$eJzs3AuYTlUXOPC19t5nDIm3SS7D3nsdXnLZJklySZJLklSSJLeEpEk+SUgMIUlDEpLLkMQQksvEpHG/3y8JSdIkSUhuyf4/U/x9fdW/79L/0/PN+j3Peexln73POmfN+777HOb9uuvQ2k3q1GhERPAfwZ//SAKAWAAYCAB5ASAAgApxFeKy+nNKTPrPDsL+XPenXu4M2OXE9c/euP7ZG9c/e+P6Z29c/+yN65+9cf2zN64/Y9nZpmmFruIt+278/D8748///yGZZcd+vqbsNd0AYv7ZIVz/7I3r/z8r+Gd24vpnb1z/7Cr2cifA/gL49Z8d5PjdHq5/9sb1Zyw7u9zPny/3BpG/2DU4kvPnwvy3zp8xxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGPsvOO0vUQBwsX2582KMMcYYY4wxxtifx+e43BkwxhhjjDHGGGPs/z8EARIUBBADOSAWckIuEABwJeSBvBCBqyAOroZ8cA3khwJQEApBPBSGIqDBgAWCEIpCMYhCcSgB10JJKAWloQw4KAsJcB2Ug+uhPNwAFeBGqAg3QSWoDFWgKtwM1eAWqA63Qg24DWpCLagNdeB2qAt3QD24E+rDXdAA7oZ74F5oCPdBI7gfGsMD0AQehKbwEDSD5tACWkKrf2v8s9ATnoNe0BuSoA/0heehH/SHAfACDIQXYRC8BIPhZUiGITAUXoFh8CoMh9dgBIyEUfA6jIY3YAyMhXEwHlJgAkyEN2ESvAWT4W2YAlMhFabBdHgHZsBMmAXvwmx4D+bAXJgH8yEN3ocFsBDS4QNYBB9CBiyGJbAUlsFyWAErYRWshjWwFtbBetgAG2ETbIYtsBW2wXbYAR/BTvgYdsFu2AOfwF749F8cf+ofxndDQECBAhUqjMEYjMVYzIW5MDfmxjyYByMYwTiMw3yYD/NjfiyIBTEe47EIFkGDBgkJi2JRjGIUS2AJLIklsTSWRocOEzABy+H1WB7LYwWsgBWxIlbCylgZq2JVrIbVsDpWxxpYA2tiTayNtfF2vB37YD2sh/WxPjbABhcfT2EjbISNsTE2wSbYFJtiM2yGLbAFtsJW2BpbYxtsg+2wHbbH9tgBO2AiJmJH7IidsBN2xs7YBbtgV+yK3bA7ds98Ngfgc/gc9saaog/2xb7YD5NzDMAX8AV8EQfhS/gSvozJOARLF38FX8FXcTiexBE4EkfhKKwm3sAxOBZJjMcUTMGJOBEn4STMSvRtnIqpOA2n43ScgTNxJr6Ls/E9fA/n4lycj2mYhgtwIaZjOi7CU5iBi3EJLsVluByX4UpchStxDa7FNbge1+NG3IibcTNuxa24HbfjR6gA8GPcjbsxGffiXtyH+3A/7scDeAAzMRMP4kE8hIfwMB7GI3gEj+IxPI7H8ASewJN4Ck/jaTyLZ/EcPh3/ZeOPSq1OBpFFCSViRIyIFbEil8glcovcIo/IIyIiIuJEnMgn8on8Ir8oKAqKeBEviogiwggjSIQxACCiIipKiBKipCgpSovSwgknEkSCKCfKifKivKggbhQVxU2ikqgs2rqqoqqoJtq56uJWUUPUEDVFLVFb1BF1RF1RV9QT9UR9UV80EA3EPeJe0VD0wQF4v8iqTBMxBJuKodhMNBfywjtYazEc24i2op14VIzEEdhBtHaJ4gnRUYzBTuJvYiw+JbqI8dhVPCO6ie6ih3hW9BRtXC/RW0zGPqKvmIr9RH8xQLwgZmAt8S7OzllbvCySxRAxVLwi5uOrYrh4TYwQI8Uo8boYLd4QY8RYMU6MFyligpgo3hSTxFtisnhbTBFTRaqYJqaLd8QMMVPMEu+K2eI9MUfMFfPEfJEm3hcLxEKRLj4Qi8SHIkMsFkvEUrFMLBcrxEqxSqwWa8RasU6sFxvERrFJbBZbRCxsE9vFDvGR2Ck+FrvEbrFHfCL2ik/FPvGZ2C8+FwfEFyJTfCkOiq/EIfG1OCy+EUfEt+KoOCaOi+/ECfG9OClOidPijDgrfhDnxI/ivPACJEohpVQykDEyh4yVOWUueYXMLYMLV/cqGSevlvnkNTK/LCALykIyXhaWRaSWRlpJMpRFZTEZlcVlCXmtLClLydKyjHSyrEyQ18ly8npZXt4gK8gbZUV5k6wkK8sqsqq8WVaTt0iI/HyMmrKWrC3ryNtlEtwh68k7ZX15l2wg75b3yHtlQ3mfbCTvl43lA7KJfFA2lQ/JZrK5bCFbylbyYdlaPiLbyLaynXxUtpePyQ7ycZkon5Adpb/wI/KU7CKfll3lM7Kb7C57yB/leellL9lbQh+QfeXzsp/sLwfEAoB8UQ6SL8nB8mWZLIfIofIVOUy+KofL1+QIOVKOkq/L0fINOUaOlePkeJkiJ8iJ8k05Sb4lJ8u35RQ5VabKaXKAHPjTTLOk/MPxb/7G+ME/HX2j3CQ3yy1yq9wmt8sd8iO5U+6Uu+QuuUfukXvlXrlP7pP75X55QB6QmTJTHpQH5SF5SB6Wh+UReUQelcfkGfmdPCG/lyflKXlKnpFn5Vl57sI1AIVKKKmUClSMyqFiVU6VS12hcqsrVR6VV0XUVSpOXa3yqWtUflVAFVSFVLwqrIoorYyyilSoiqpiKqqK44UfGFValVFOlVUJ6rp/Zbwqoa5VJVWpX4y/mF/S7+TXSrVSrVVr1Ua1Ue1UO9VetVcdVAeVqBJVR9VRdVKdVGfVWXVRXVRX1VV1U91UD9VD9VQ9VS/VSyWpJNVXPa/6qf5qgHpBDVQvqkFqkBqsBqtklayGqqFqmBqmhqvhaoQaoUapUWq0Gq3GqDFqnBqnUlSKmqgmqklqkpqsJqspaopKValqupquZqgZapaapWar2WqOmqPmqXkqTaWpBWqBSlfpapFapDLUYrVYLVVL1XK1XK1UK9VqtVqtVWvVerVeZahNapPaoraobWqb2qF2qJ1qp9oldqk9ao/aq/aqfWqf2q/2qwPqgMpUmeqgOqgOqUPqsDqsjqgj6qg6qo6r4+qEOqFOqpPqtDqtzqqz6pw6p86r81nLvkAEIlCBCmKCmCA2iA1yBbmC3EHuIE+QJ4gEkSAuiAvyBdcE+YMCQcGgUBAfFA6KBDowgQ3EhaJHg+JBieDaoGRQKigdlAlcUDZICK4LygXXB+WDG4IKwY1BxeCmoFJQOagSVA1uDqoFtwTVg1uDGsFtQc2gVlA7qBPcHtQN7gjqBXcG9YO7ggbB3cE9wb1Bw+C+oFFwf9A4eCBoEjwYNA0eCpoFzYMWQcug1Z86v/cnCzzieuneOkn30X3187qf7q8H6Bf0QP2iHqRf0oP1yzpZD9FD9St6mH5VD9ev6RF6pB6lX9ej9Rt6jB6rx+nxOkVP0BP1m3qSfktP1m/rKXqqTtXT9HT9jp6hZ+pZ+l09W7+n5+i5ep6er9P0+3qBXqjT9Qd6kf5QZ+jFeoleqpfp5XqFXqlX6dV6jV6r1+n1eoPeqDfpzXqL3qq36e16h/5I79Qf6116t96jP9F79ad6n/5M79ef6wP6C52pv9QH9Vf6kP5aH9bf6CP6W31UH9PH9Xf6hP5en9Sn9Gl9Rp/VP+hz+kd9XvusxX3Wx7tRRpkYE2NiTazJZXKZ3Ca3yWPymIiJmDgTZ/KZfCa/yW8KmoIm3sSbIqaIyUKGTFFT1ERN1JQwJUxJU9KUNqWNM84kmARTzpQz5U15U8FUMBVNRVPJVDJVTBVzs7nZ3GJuMbeaW81t5jZTy9QydUwdU9fUNfVMPVPf1DcNTANzj7nHNDQNTSPTyDQ2jU0T08Q0NU1NM9PMtDAtTCvTyrQ2rU0b08a0M+1Me9PedDAdTKJJNB1NR9PJdDKdTWfTxXQxXU1X0810Mz1MD9PT9DS9TC+TZJJMX9PX9DP9zAAzwAw0A80gM8gMNoNNskk2Q81QM8wMM8PNcDPCjDSjshaq5g0zxow148x4k2JSzEQz0Uwyk8xkM9lMMVNMqkk10810M8PMMLPMLDPbzDZzzBwzz8wzaSbNLDALTLpJN4vMIpNhMswSs8QsM8vMCrPCrDKrzBqzxqyDdWaD2WA2mU1mi9litpltZofZYXaanWaX2WX2mD1mr9lr9pl9Zr/Zbw6YAybTZJqD5qA5ZA6Zw+awOWKOmKPmqDlujpsT5oQ5aU6a0+a0OWsKXPi89CbW5rS57BU2t73S5rF57T/GBW0hG28L2yJW2/y2wC9iY60taUvZ0raMdbasTbDX/SquZCvbKraqvdlWs7fY6r+K69o7bD17p61v77J17O2/iBvYu23W6qQhIoBtbhvblraJfdA2tQ/ZZra5bWFb2vb2MdvBPm4T7RO2o33yV/ECu9CusqvtGrvW7rK77Wl7xh6yX9uz9gfby/a2A+2LdpB9yQ62L9tkO+RX8Sj7uh1t37Bj7Fg7zo7/VTzFTrWpdpqdbt+xM+zMX8Vp9n0726bbOXaunWfn/xRn5ZRuP7CL7Ic2wwawxC61y+xyu8KuvJirz2vX2w12o91pP7Zb7Fa7zW63Oy4uhO1uu8d+YvfaT+1B+5Xdbz+3B+xhm2m//CnOOr/D9ht7xH5rj9pj9rj9zp6w36uLo7PO/Tv7oz1vvQVCApKkKKAYykGxlJNy0RWUm66kPJSXInQVxdHVlI+uofxUgApSIYqnwlSENBmyRBRSUSpGUSpOF9MrTWXIUVlKoOuoHF1P5ekGqkA3UkW6iSpRZapCVelmqka3UHW6lWrQbVSTalFtqkO3U126g+rRnVSf7qIGdDfdQ/dSQ7qPGtH91JgeoCb0IDWlh6gZNacW1JJa0cPUmh6hNtSW2tGj1J4eow70OCXSE9SRnqRO9DfqTE9RF3qautIz1I26Uw96lnrSc9SLelMS9aG+9Dz1o/40gF6ggfQiDaKXaDC9TMk0hIbSKzSMXqXh9BqNoJE0il6n0fQGjaGxNI7GUwpNoIn0Jk2it2gyvU1TaCql0jSaTu/QDJpJs+hdmk3v0RyaS/NoPqXR+7SAFlI6fUCL6EPKoMW0hJbSMlpOK2glraLVtIbW0jpaTxtoI22izbSFttI22k476CPaSR/TLtpNe+gT2kufEtJntJ8+pwP0BWXSl3SQvqJD9DUdpm98b/qWjtIxOk7f0Qn6nk7SKTpNZ+gs/UDn6Ec6T54gxFCEMlRhEMaEOcLYMGeYK7wizB1eGeYJ84aR8KowLrw6zBdeE+YPC4QFw0JhfFg4LBLq0IQ2pDAMi4bFwmhYPCwRXhuWDEuFpcMyoQvLhgnhdWG58PqwfHhDWCG8MawY3hRWCiuHD95VNbw5rBbeElYPbw1rhLeFNcNaYe2wTnh7WDf9jrBeeGdYP7wrLB/eHd4T3hs2DO8LG4X3h43DB8Im4YNh0/ChsFnYPGwRtgxbhRdXJm3DduGjYfvwsbBD+HiYGD4RdgyfDFuFD4d3L3wkbBP+dn9S2CfsGz4fPh96f6ecF50fTYu+H10QXRhNj34QXRT9MJoRXRxdEl0aXRZdHl0RXRldFV0dXRNdG10XXR/dEN0Y9b5ODnDohJNOucDFuBwu1uV0udwVLre70uVxeV3EXeXi3NUun7vG5XcFXEFXyMW7wq6I084468iFrqgr5qKuuCvhrnUlXSlX2pVxzpV1Ca6la+VaudbuEdfGtXXt3KPuUfeYe8w97h53T7iO7knXyf3NdXZPuS7uafe0e8Z1c91dD/es6+km5Pn56iS5vq6v6+f6uQFugBvoBrpBbpAb7Aa7ZJfshrqhbpgb5oa74W6EG+FGuVFutBvtxrgxbpwb51JcipvoJrpJbpKb7Ca7KW6KS3Wpbrqb7ma4Ga7azJ+PMsfNcfPcPJfm0twCl1WZdLfILXIZLsMtcUvcMrfMrXAr3Cq3yq1xa9w6t85tcBvcJrfJbXFb3Da3ze1wO9xOt9Pt8nl/ntTtdfvcPrff7XcH3Bcu033pDrqv3CH3tTvsvnFH3LfuqDvmjrvv3An3vTvpTrnT7ow7635w59yP7rzzLiUyITIx8mZkUuStyOTI25EpkamR1Mi0yPTIO5EZkZmRWZF3I7Mj70XmROZG5kXmR9Ii70cWRBZG0iMfRBZFPoxkRBZHlkSWRpZFlke8L7wl9EV9MR/1xX0Jf60v6Uv50r6Md76sT/DX+XL+el/e3+Ar+Bt9RX+Tr+Qr+yr+Id/MN/ctfEvfyj/sW/tHfBvf1rfzj/r2/jHfwT/uE/0TvqN/0nfyf/Od/VO+i3/ad/XP+G6+u+/hn/U9/XO+l+/tk3wf39c/7/v5/n6Af8EP9C/6Qf4lP9i/7JP9ED/Uv+KH+Vf9cP+aH+FH+lExr/vRF2+RYbxP8RP8RP+mn+Tf8pP9236Kn+pT/TQ/3b/jZ/iZfpZ/18/27/k5fq6f5+f7NP++X+AX+nT/gV/kP/QZfvHFh8p+hV/pV/nVfo1f69f59X6D3+g3+c1+i9/qt/ntfof/yO/0H/tdfrff4z/xe/2nfp//zO/3n/sD/guf6b/0B/1X/pD/2h/23/gj/lt/1B/zx/13/oT/3p/0p/xpf8af9T/4c/5Hf55/Z40xxhhj7J8y4VJT/LLn58f5fX5jjPi7nfsCwJVbC2X+fX/WinJd/p/b/UV8+wgAPNG76/0Xt5o1k5KSLuybISEoNhfg4r8EZYmBS/FiaAePQSK0hXK/mX9/0f0s/cH80RsBcv3dmFi4FF+a/zMATPqN+R9+dNSCiuHpuP/H/HMBSha7NCYnXIoXQ7ufnq+0hfK/k3+B1n+Qf87PUwDa/N2Y3HApvpR/AjwCT0LiL/b8pZjf7WGMMcYYY4wx9r+uv6jS+eL958X/8flb9+fx6tKYHHAp/qP7c8YYY4wxxhhjjF1+T3Xv8fjDiYltO//rjep/vI/692b+qdEU/t3E/qKNt8r9JdL43Yb3AP+3cADwH04IkNWQ/82z2PxfOVbyhZfOP3YtO+MD+GuU8s9oXOY3JsYYY4wxxtif7tKi/5d/ry5XQowxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGWDb0n37HG/wT39J3uc+RMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYu9z+TwAAAP//9C/4Pg==") chroot(&(0x7f0000000000)='./file0\x00') (async, rerun: 64) r0 = inotify_init1(0x80000) (rerun: 64) inotify_add_watch(r0, &(0x7f0000000080)='.\x00', 0x2000775) (async) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x121042, 0x18) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) (async) splice(r1, 0x0, r3, 0x0, 0x200000000001, 0x0) (async) chmod(&(0x7f0000000100)='./file0\x00', 0x24c) 4.509192987s ago: executing program 3 (id=444): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) dup2(r0, r1) rmdir(0x0) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x22400049, &(0x7f00000003c0)={[{@nomblk_io_submit}, {@abort}, {@nogrpid}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@nolazytime}, {@jqfmt_vfsold}, {@jqfmt_vfsv0}, {@barrier_val={'barrier', 0x3d, 0xd95a}}, {@debug}, {@noload}, {@bsdgroups}]}, 0x84, 0x490, &(0x7f0000001880)="$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") openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$KVM_X86_SET_MCE(0xffffffffffffffff, 0x4040ae9e, 0x0) syz_open_procfs(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(0xffffffffffffffff, 0x0, 0x4) sendmsg$NL802154_CMD_GET_SEC_DEV(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000300), 0xc, &(0x7f0000000880)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x801) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4) socket$nl_generic(0x10, 0x3, 0x10) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x92, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0x2c95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x80000000, 0x20000006, 0x4d, 0x9, 0x5d, 0x8, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0xd, 0x7, 0x0, 0x1, 0x4, 0x4, 0x7, 0x3, 0x8, 0x4c75, 0x80000000, 0xfffffffe, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x40017, 0x1, 0x7, 0x5, 0x3e, 0x3, 0x6, 0xffff, 0x0, 0x6, 0x4, 0x8008, 0x400, 0x80, 0x0, 0x5, 0x5, 0x8, 0x4, 0x1, 0xfffffff9], [0x10000007, 0x409, 0x8000012f, 0x2008004, 0x5, 0xfffffff3, 0x129432e3, 0x40c8, 0x697, 0xe, 0x2c0, 0x6c7, 0x8, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x5, 0xea4, 0x0, 0xb94, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x200006, 0x1, 0xff, 0x5, 0x1000005, 0x5f2e, 0x2d, 0x4e2, 0x5, 0x4, 0xb, 0x2000004, 0x9, 0x80000001, 0x9, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0x8, 0x2, 0x4, 0x9, 0x3, 0x8000, 0x9, 0x1, 0x3, 0x3, 0x81, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x7, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x8000, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x4000000, 0x1eb, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0xfffffffe, 0x3, 0x20000008, 0x4, 0x6d01, 0x2, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x8000004, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x4005, 0x6, 0xac8, 0xca, 0x2, 0x3, 0x7ff, 0xbe, 0x4, 0x7, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x4, 0x2006, 0x80a2ed, 0x4, 0x3c484551], [0x9, 0xbb33, 0x7, 0xb, 0x6, 0x93a, 0x5, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x9, 0x2, 0x101, 0x10000, 0x2000004, 0x7fff, 0xfffc, 0xa620, 0x2, 0x5, 0x6, 0x2, 0x14c, 0xab9f, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0xffffffd9, 0xfffff000, 0x10010000, 0x0, 0x7e, 0x6, 0x9602, 0x7, 0xaf, 0x5, 0x6, 0x226, 0x2, 0x5, 0x8, 0x20b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x201, 0x2, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 4.492165809s ago: executing program 5 (id=446): socket$nl_generic(0x11, 0x3, 0x10) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000008c0)='./file0\x00', 0x1008490, &(0x7f0000000a40)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000a80)="$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") prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0x7, 0x0, 0x0) connect$unix(r1, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000380)={'pimreg\x00', 0x5005}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010024bd7000fc0ddf2500000000", @ANYRES32=0x0, @ANYBLOB="1b0b04000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) write$tun(r4, &(0x7f0000002300)=ANY=[@ANYBLOB="02040800040019000c00660040090fb83a0000000000000000000000ffff7f000001ff02000000000000000000000000000103019078030000006400f0ff000500ff00000000000000000000000000000001000000000000000000000000000000012c04040281080e00fe80000000000000000000000000003cfe8000000000000000000000000000bb2f02000000000000c910fc020000000000000000000000000000000000000000ae9c08d8cff843f1bda9da15625adfa9c93039d2fdd49dfc101a06a94cc3232690728492b9a0f2662154232cbfc46353a6841ea171ef8d60f7aadd11933cba9351f89e07ba6db725c4a48cbd0c2b08e282f918b0b9ff7b52a62b2cd0515a27ecde119cbcde199deb35b639325a368c12d7385174b007ebb9f2fab23350b88f2375fd23d8e19dd9b7fc7ffeed6f85f7b264cf90eb0945dec261efe4599ca320053501cfcc46bc0239b08d689661089770fc0d2ac4bddad1302e7624585b3f4492123a05adc0821f12fca02fd265e2ba9f8ead72ce68a964f259312a5706f8a0dd4bb404fa592633c7af91582e13f6fc122f23b5886402abd4ed7b75d36d7df1b1f27ec4d906127a70f8ee31b00fa96cd45c9a864803c644062b281fd82668dbe263b73cc13300dd82458f9429768317817a0d1d5036495b426907f4bcff52313faac49b62b255515b4189f89c49310b8c9d3185ce9844e2f1ba2cd2f01b9b154fb7f7608cee00f9db34b1ecde60b1ca7ea51a7a1030774fe8b472435edfcdded43ba236c29f3abfec8f4eb737fa5c66e42b85237dc52979c81670b41a7218793e96c0de29d19a215f1be036354c1f644a6aafe982176cecffdf2228a68fc8366cc1110b71327d7a83f7c5f81f9de3638b235c1dd001530f9ad42303b11c13656816b6cc81a4cf80d31a9be3b99522f7cdbf04fd57964aeb84dfe6305a2613d372649550c91f97b825201bb12e59cf1401b27b9d423caaf68d7ec5524b54ea1e22dc9ab3f97958c877244c44594bfa039942672f4cf3d33cc3150bf2e50f6671bc133ee069f2cddabea3fd38fbb80d80e6a1b7c0fc584797e2e50f01762e8e0bba28a50954c7dc369f9a9541344afb44df80f0c95d608cfc0af53a5a39a183d85af129ac33b123de713cd89f0323422184595943a7b22d9bb7966d604b73b5f0b7dcca8cddea7c4e3d6da32ec1457bfbfc37ae7097294dedc78b48b08890740c435c066cc89cb55722b6185482dc1cdb0ea51386bc781d366d7eaaf849d72d07d9894734ff6edb0b0c1ad310733713c5ca38a7a2d6c78391e1c3fff5805db5282cce8fd1441399839c12477c9262bd83d0808e590da3f0c7e79c44730c6d9e61273cb7295ec55bbdf22eae98b72d0f8aacd04e681ca3dd4a22a84ea44a52ecd74f4d47628973279bec546d3a05db0b79a1e0c8c6446b9da1c73a18d0a578aabe73646690c70ed2b890d117c0111f9b636754aeed0c1a0be362c7ba6d689c26dda796bcb2fd5e3e0f429a8964d0bcb90553680e7ae37d0c65487930949e555582cb49f4bcf6fd0389dc418e09a97c7e418de961982522cc6d09693f934a5c5bcab2f3983b5f98232821787827103a5af2b15dd6169c40ec9d0c94fa77344fbaf016b1dbd625f7380ac6bc36e1f3a63d11335eacc4fa29e7a3217cceed838bb1525c8b16d17371e8e3adc2f935429dc10092dcb812e8b0009963be3aed0c5a992a45e18cff8c8b1e74bfad946311f0d12985835a882ab2d5f692163160b4ca9377a0639cd00deb23b164be8c07396d49b997544b9ef9d35eab7ad285c76119af7edd363091e6db24c2c1e3eb462a758dab71ee02a9cd7105603655236215fb3ebe400208a86764e38307ae0c14b863a0bf200fc609a5d19b01244e8d6e73372d76189148776cb157ca0846b12b4cabd63b24830af1153d94e56eec4205383887396a33f2b65f01586b089eab74de45a13a4ba2bdf69bec95251d5bd3b1c99412b5e4da0a0ac8b01f5edae434fd9b77713f4a70f583885292efa0331c8154a896f5edfdea8aaf77772511c4aa8f33fe86ad8a0bfcaefbc05eaf6ff67382c5b6ab055c984881ae9e08234f7c13bcc92835a8cf58674878aac18bf269a5de3a3ef7aab2ccb759f605bde1116526a597c7905eb048057398917d057464b30c64ef96768827258fb29257fbbdc14f172a1e9c7fff6b903e35d7a30b5e0656f7b3c8d6b4e82917606e282ef88fe4edda902485ea8e8e6b254b45af062b56525666a43aef0d67714f7ccc6c87569188924a7fb0cf56e1588de309531f04211657a4f76a49a08b14d1ffe8f524b686ac5325d39cef8d1821ffd16be4ba33c30b1311042348d10854bb54dafbd7c8a7bfa36e829a651df254ee87d42567d70a78d252f0f93c883e2ceb818bdb6e302f3dc5fed3ea24de4f960fac7be5818f5057f5ec8ec938a122465b471ee97f28e71d84bc20a95c6233afe5c19b3b14b84af4480c84194b59aa2e8d3fb0b48847284b998478502a095f91b282dda9de5ddf52a9314819ece9c71a79e480752bc76e99f5ab26ef285340390e40b32bbbbaf8af5c72c448e1618b6b1dc9534b63b8f36968e785f25b3742b14212441fc00ec144a1a4239c264d2b5f79106ef614c4b85e8cc4b05ed24359056a23db77e65adb59eaacf9fd8d0586723f6808cb1502f06740cc31a3db38a234e14205492c7ad9e8c14f6391dcf296c08864b5eeec6940d7c476b1c343579711fa8cefdb1f25551633db9bf8b3f7666ac09fdf9f2ead8936c57e292b1ec0922f412815704a5a733575fe860c5458d106f61104e7ed203ac5353a8dc814db5e18e247dc4c06dbfb98e619ced68d376d3d77a5e0f915f9ec478fbf7dc363bc4e2eb7dfd2a055bc64aaa0411b6d3e28f3e94029fa03baa3086f85a8b7f6a4f7e57615394230e4213bf05eac572b4cc19bc1e8ac48d67b38cdb57884a76c183ac8d4e4c78bdf3dcc5ed2a4a6df2fa428ef9ca848d02530253466dc6935824c6f539ef70a8e746b7877c4c27c5a26e6f969e9b8fd7bd635a8aaf384084878fcf996c5a8160c142a1b58e81b09a3e58b044f03a30971fdd81167b379e5d54e206b5dbb0ccd13bb1a42bc973e69b1a1d1aac9e78ec6f87732b1aee860b28b6a4f944ff34ec9f3fea44fc4e0dbbce972cba9d4642f2a1e3a27d007c75b489a769a6c79d0d862f6be1bb12b4ed63a5dd69a1c30196dbc43b314ad9b9f0669b333f4808c5bc54ccb48d12072bf9a80b8ba4ca1e839af42ba40d184f929a8742b3f4c8ebf0395bc0e7c920bfbfd5c1471f097c63e41bd3322c258cb3fbfac7e55b48e7f71818383e85d8fc62c15c2fd9df3c6c2685614947c14276518f7571df70a3804b9a21f86f1af831078de972583216b1389cc82787fba3bd9116d70e96b8379263377296b2936902e58066548512ada8865b38efb616fcd1e85c0d0a0fbfe1dceb69216e729320b995509589c82fb9c4bcad6cc7bc4277fd2a0485beec784e52bb0340a6a3edfd10d0b98945ab01870d5078e5c5695080094b705ad0c5fc4ab6edeb5a734734bb501b9c916beda7668302d02348d50e2285b88f0c588fea02e312e2aa55c9762d86ac4ce7aa261662a5aea4cfba4ecf9f65a57383dc4abd77adfd12a62c5b3059b44ba6e282f807f971d94b5149aa4fc9ccdd03138e9dc86ccf5df20899980299e546425d87a54e3ebfcbde926647dfe577b0dbcd43fc000af14f12035e635d1d08b0fb939728b35322cedf9cb1a89ac528c80fd874f1b271951899e06c5a864dc77ca7019c715b84415e81b247242a46e5ee3d18a0cb56964a35c497b1adb9e3c2bf12a67afd0a0260d6a5edae60d5a57400032728e1fce6befeac2e15bef2fa0f79763c4b615ad7e4e146831864174887b018fa1dcd3ad13079aafa5686ac024597dd20e50f2eac9fa7282bf18314b5c1db532afec0dfae1c6ec3ad048496b25e4f3c6597729cf4bf719bdf19ed3ca1386522581060db1fb7a4d3816efa39049bb3b32f4263777804f4300548100dbd6a20c15b6c2a51bec11ee6c170b59bfadc81ba76b96c077a3fd0f4cdccc4c95d739f36a8e8cae486377578335f2ac4e1eca3aa83c8dfa0da2984ea062f0270656c9b5b82d65b2d7c3f23083b6d9961bb74e8add11f940b2ed579247d22987012f1b3676ef6f7ba338b5966b9e0cd0d16b9b74a5ce28007b2ccdf971def82e0204542348485eba09a5e0af8ae4cc96906ad01f9757f5af8ae2f5bb6d3a61152b09b265074d30398fd4b1c63ed45abcd2a2e08166d8f207ad3578ba29aa06d737dfaa1a4d720a4f10b97f8c8969e84a3ce5b1260ecf31e7a945ac9cb8b59470c83dc62d4eb521fc0ffafb2b24272f7da5d81f1ee67f311f7e860209aa8eacf7a42500c0e83f54ebe2e65f04ea34c8ccb5dc8f6b23d391380d4c1a1322fa68ee811b36b8e12f6a37eea8d227b5a9742f25ff9b086e0df0f3d9a34dc4532821eca3a87602776ce86475ec73c2b16616f5c24b1037dde7aee549f557a7451d5ad633e9887fc2c7ee7f0da8cd781ce05352255593410ff14452679ff59ebdcf1b0a274c785749e58f29b0901eed2e5713c9fe8d140d5dbad394ed3592da7ba46d78e91cebcea6e7721cc9dc6c94c232e3c5f2a2d3227ece62e97da4bccdeab016ff2b3085b10c738d5c6b5092c2364485a41463d0d482fc42aa761e23de67707742a27de5e3989ceeff5399306e7e14a4c411c0d42af105cace7a5e0f635daa69a30620d9afbfc353de338521b1ae12f96c1cfda2d2cf39323fb5dc59e1c303661328d291c21a0fe18b1ad43854e46b43d313650efd1259593982e6c28f18537d3e43ab51c189741ba1ee53f186db42cbb2355ee3a9f79ea360e5c43073173266f1cb645725eea08cc9d15be3c4bf50761983fb0530eb588765230ab71954e92de82a5f48fed09b9f8db5def779d4af7c6a29f2862194d6df9ccb48dfbe4f1e7e1920c843cc3bc36cab57df651690553b893037a6c8df9f28240a216fb367ebbae4f40ed84a11ee4a0621333b286cf781e86ac6a52b7f34730889384903a02e7288a86987181ce1b74c5056ceadc2330607ad729c7d3a8e4c79e148549da9df2acfcdc325dc77223e59a32c254d37b7673b45e6a23f87b2ca0014ac404b5bb4ea304bc618ef45d98842f83469e24bac4ea3f9daf8a0924bf78ad0c670f10979dc0c11da925db2335569347d12e6b748d1221662ca3740bb949928f05d9b15873a6fd7361ecce94b8a854744c81ba8e0ff1bcd5bd07af97fd89a15ec6f06be273ef735bab3e6605590750ef5316dc2c81852e7c568b60cc08e793003a34ba1f59c1f12a0f4fe8e7d3b55893e0b90246614406531ff21b3e9a8b6a0af86ab34ea2b6e72b9b7698fce1f35cdd7998b94ba3de039884fe73b5640b1a617d2f9f88801a935e31eee100e5d2499a725775ab4f87116bc77e5d2f075a481e230495230abef2499414264adaa15554edc16d08ca41c71a1e5a4aada0bbbfe60f910fe4eb6926ccb97aeb3150f3551a66e768fe159ff941b9b9aec8884fe611c12d052c2eff120debe913c814b4a230135ef05ae3dedcce60484627c02d0c844e16f9020ebd743ef118afb9499c71e4aa10cae0ef4566d7909ed061b8b3f62a0268c1e0ff427ee5f1deb89da0af36e4e41537202fb525d44b7c540ba8f125cd0854ac040065bfe3987f12b27627ccc218a7e8e6ca8d17ef649ec9d31dd2119b9b2"], 0xfea) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0xd, 0x0, 0x480c5}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8002, &(0x7f00000000c0), 0x1, 0x4b4, &(0x7f0000000c80)="$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") syz_open_procfs(0x0, &(0x7f0000000100)='net/ptype\x00') 2.886754664s ago: executing program 5 (id=448): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_X86_SET_MSR_FILTER(r2, 0x4188aec6, &(0x7f0000000ec0)={0x1, [{0x0, 0x0, 0x81, 0x0}, {0x0, 0x0, 0x2, 0x0}, {0x0, 0x0, 0x2, 0x0}, {0x0, 0x0, 0x3, 0x0}, {0x2, 0x0, 0x80000001, 0x0}, {0x0, 0x0, 0x7, 0x0}, {0x3, 0x0, 0x5, 0x0}, {0x1, 0x0, 0x200, 0x0}, {0x1, 0x0, 0x222, 0x0}, {0x3, 0x0, 0x3, 0x0}, {0x3, 0x0, 0x3, 0x0}, {0x2, 0x0, 0xffffffff, 0x0}, {0x3, 0x0, 0xc1, 0x0}, {0x1, 0x0, 0x4, 0x0}, {0x2, 0x0, 0x9d2, 0x0}, {0x1, 0x0, 0x4, 0x0}]}) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x5}, 0x1c) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in=@loopback, @in6=@remote, 0x4e23, 0x5, 0x800, 0x4, 0xa, 0x0, 0x20, 0x8, r3}, {0xfffffffffffffffa, 0x9, 0x401, 0x5, 0x0, 0x9, 0x9, 0x7fffffffffffffff}, {0x80000000, 0x4, 0xa5a, 0xea8}, 0x363b, 0x0, 0x0, 0x1}, {{@in=@private=0xa010102, 0x4d4, 0x2b}, 0x2, @in=@multicast1, 0x3507, 0x4, 0x1, 0xc, 0x1, 0xffffffb7, 0x5}}, 0xe8) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0xa3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000e41621eb70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc2241, 0x0) ioctl$TCSETSW2(r5, 0x402c542c, &(0x7f0000000040)={0x8, 0x7fff, 0x1, 0x1ff, 0x6, "29cf29c2b287426ddb33f844374acd18bfcf4f", 0x4, 0x1000000}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r6}, 0x10) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0xc0c00, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) connect$netlink(r0, 0x0, 0x0) 2.831537808s ago: executing program 3 (id=451): bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b0000000000"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) timer_create(0x0, 0x0, &(0x7f0000000100)) timer_create(0x0, &(0x7f0000000180)={0x0, 0x13}, &(0x7f0000000240)) pause() r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='sched_switch\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000580)={'veth0_to_team\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r2, r4, 0x25, 0x0, @void}, 0x10) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f00000014c0)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r9, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x7, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000340)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) ioctl$KVM_SET_REGS(r10, 0x4090ae82, &(0x7f0000000040)={[0x4, 0x2, 0x80, 0x10000000000025, 0x20000004, 0x7f, 0x44233, 0x0, 0x81, 0x9c1, 0x8001, 0x1005, 0xc, 0x4db6, 0x0, 0xfffffdfffffffffd], 0x2000, 0x80300}) ioctl$KVM_SET_VCPU_EVENTS(r10, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff, 0x0, '\x00', 0x1}) ioctl$KVM_RUN(r10, 0xae80, 0x0) socket$nl_route(0x10, 0x3, 0x0) 2.520321803s ago: executing program 4 (id=455): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) pipe2$9p(&(0x7f0000000400), 0x0) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="5f3b8b21791045a026", @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000d00000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYRES32=r2, @ANYRES16=r0], &(0x7f0000000240)='GPL\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000006c0)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x20048001}, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8101, 0x0) ioctl$KVM_CHECK_EXTENSION(r6, 0xae03, 0x61) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_setup(0x20, &(0x7f0000001140)=0x0) pipe2$9p(&(0x7f0000000240), 0x800) r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002340), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f00000022c0)={{'fd', 0x3d, r9}, 0x2c, {'rootmode', 0x3d, 0x6000}}, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000002440)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r9}}) io_submit(r7, 0x1, &(0x7f0000000300)=[&(0x7f0000002040)={0xf, 0x400000000000, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0}]) 2.505934554s ago: executing program 5 (id=456): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x181) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x1320022, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) r0 = syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x14a0, &(0x7f0000000700)=ANY=[], 0x1, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x88040, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0001}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) socket(0x2a, 0x2, 0x7) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910700004f78d4c1a0731cccff"], 0x1c}}, 0x0) pread64(r0, &(0x7f00000021c0)=""/132, 0x84, 0x6) read$FUSE(r1, &(0x7f0000000180)={0x2020}, 0x2020) syz_usb_connect(0x2, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000f000000000000100001844a7aa7f0000000109c4cc00010400"], 0x0) 1.757805262s ago: executing program 2 (id=457): alarm(0x8000000000000001) r0 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000000)={'erspan0\x00', 0x0, 0x80, 0x10, 0x4, 0x1, {{0x1d, 0x4, 0x2, 0x18, 0x74, 0x64, 0x0, 0x80, 0x29, 0x0, @loopback, @local, {[@rr={0x7, 0x23, 0x6c, [@empty, @dev={0xac, 0x14, 0x14, 0x36}, @loopback, @dev={0xac, 0x14, 0x14, 0x2b}, @loopback, @rand_addr=0x64010101, @remote, @loopback]}, @timestamp_addr={0x44, 0xc, 0xe9, 0x1, 0x3, [{@loopback, 0xfffffff8}]}, @generic={0x7, 0x12, "17e55d2df321d83011eaf52e8cfc7b6e"}, @timestamp_addr={0x44, 0x1c, 0x58, 0x1, 0x0, [{@local, 0x8}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7}, {@rand_addr=0x64010100, 0xffffffff}]}]}}}}}) setsockopt$MRT6_DEL_MIF(r0, 0x29, 0xcb, &(0x7f0000000100)={0xffffffffffffffff, 0x1, 0xae, r1, 0xe96}, 0xc) alarm(0x6) 1.708183426s ago: executing program 2 (id=458): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="400000001000015361ba80ff33b3b5000000ffff", @ANYRES32=0x0, @ANYBLOB="0000000000010000200012800b0001006272696467650000100002800c002200ffffff7f00000000"], 0x40}}, 0x4048000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r1) sendmsg$IPVS_CMD_DEL_DAEMON(r1, &(0x7f0000000500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x24, r4, 0x8, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x41}, 0x4000041) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[], 0x3c}}, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r5, 0xae9a) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x87, 0x5, 0x0, 0x2, 0xff], 0x0, 0x80}) syz_usb_connect(0x0, 0x24, &(0x7f00000005c0)={{0x12, 0x1, 0x110, 0x56, 0x5d, 0x2e, 0x20, 0x1949, 0x4, 0x3e48, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xc, 0xd, 0x10, 0x80, [{{0x9, 0x4, 0x28, 0x43, 0x0, 0x62, 0x2, 0xc2, 0x5}}]}}]}}, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000002c0)={[0x5206, 0x5, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x0, 0x1c, 0x0, 0xffffffffffffffff, 0x6, 0xffffffffffffffff], 0x0, 0x41901}) ioctl$KVM_RUN(r5, 0xae80, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESOCT=r0, @ANYBLOB="0000000000000000b702000014000000b70300000000ff018500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r6}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x12, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000540000000000000070000006b110c000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @cgroup_sock_addr=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x2, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f0000000180), 0xb9) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r7}, 0x10) r9 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r9}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 1.335821236s ago: executing program 4 (id=461): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) dup2(r0, r1) rmdir(0x0) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x22400049, &(0x7f00000003c0)={[{@nomblk_io_submit}, {@abort}, {@nogrpid}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@nolazytime}, {@jqfmt_vfsold}, {@jqfmt_vfsv0}, {@barrier_val={'barrier', 0x3d, 0xd95a}}, {@debug}, {@noload}, {@bsdgroups}]}, 0x84, 0x490, &(0x7f0000001880)="$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") openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$KVM_X86_SET_MCE(0xffffffffffffffff, 0x4040ae9e, 0x0) syz_open_procfs(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(0xffffffffffffffff, 0x0, 0x4) sendmsg$NL802154_CMD_GET_SEC_DEV(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000300), 0xc, &(0x7f0000000880)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x801) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4) socket$nl_generic(0x10, 0x3, 0x10) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x92, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0x2c95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x80000000, 0x20000006, 0x4d, 0x9, 0x5d, 0x8, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0xd, 0x7, 0x0, 0x1, 0x4, 0x4, 0x7, 0x3, 0x8, 0x4c75, 0x80000000, 0xfffffffe, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x40017, 0x1, 0x7, 0x5, 0x3e, 0x3, 0x6, 0xffff, 0x0, 0x6, 0x4, 0x8008, 0x400, 0x80, 0x0, 0x5, 0x5, 0x8, 0x4, 0x1, 0xfffffff9], [0x10000007, 0x409, 0x8000012f, 0x2008004, 0x5, 0xfffffff3, 0x129432e3, 0x40c8, 0x697, 0xe, 0x2c0, 0x6c7, 0x8, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x5, 0xea4, 0x0, 0xb94, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x200006, 0x1, 0xff, 0x5, 0x1000005, 0x5f2e, 0x2d, 0x4e2, 0x5, 0x4, 0xb, 0x2000004, 0x9, 0x80000001, 0x9, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0x8, 0x2, 0x4, 0x9, 0x3, 0x8000, 0x9, 0x1, 0x3, 0x3, 0x81, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x7, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x8000, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x4000000, 0x1eb, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0xfffffffe, 0x3, 0x20000008, 0x4, 0x6d01, 0x2, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x8000004, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x4005, 0x6, 0xac8, 0xca, 0x2, 0x3, 0x7ff, 0xbe, 0x4, 0x7, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x4, 0x2006, 0x80a2ed, 0x4, 0x3c484551], [0x9, 0xbb33, 0x7, 0xb, 0x6, 0x93a, 0x5, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x9, 0x2, 0x101, 0x10000, 0x2000004, 0x7fff, 0xfffc, 0xa620, 0x2, 0x5, 0x6, 0x2, 0x14c, 0xab9f, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0xffffffd9, 0xfffff000, 0x10010000, 0x0, 0x7e, 0x6, 0x9602, 0x7, 0xaf, 0x5, 0x6, 0x226, 0x2, 0x5, 0x8, 0x20b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x201, 0x2, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 1.335486956s ago: executing program 3 (id=462): r0 = socket$netlink(0x10, 0x3, 0x0) timer_create(0x2, 0x0, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x0, &(0x7f0000000080)={{}, {0x77359400}}, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) syz_btf_id_by_name$bpf_lsm(&(0x7f0000000000)='bpf_lsm_bpf_map\x00') sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x48, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe, 0xd}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1a}, {0x4, 0x1b}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f00000000c0)={0x0, 'wg2\x00', {0x4}, 0xa2}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb01001800000000000000500000005000000002000000000000000300000d0000000000000000000000000b000000000000000600000003000000000000000000000d000000000000000001000013040000007f4adfa0"], &(0x7f0000000c00)=""/253, 0x6a, 0xfd, 0x1}, 0x28) 1.316076187s ago: executing program 0 (id=463): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x2, 0x0, @pic={0x0, 0x7, 0x5, 0xd3, 0x0, 0x3, 0x4, 0xbb, 0x6d, 0xc0, 0x6d, 0x7, 0x61, 0xb, 0x95, 0xd}}) (async) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x2, 0x0, @pic={0x0, 0x7, 0x5, 0xd3, 0x0, 0x3, 0x4, 0xbb, 0x6d, 0xc0, 0x6d, 0x7, 0x61, 0xb, 0x95, 0xd}}) 1.235814003s ago: executing program 2 (id=464): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x8, 0x4, 0x4, 0x6}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000500000000040000cd00000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000107000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x7a04e413bcb59324, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000070000008500000021000000b70000000000000095"], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f0800", 0x0, 0xe8a2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.194882947s ago: executing program 3 (id=465): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r1 = openat$random(0xffffffffffffff9c, &(0x7f000000fe80), 0x40800, 0x0) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f000000fec0)=ANY=[@ANYBLOB="04000000000010"]) r2 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x79, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0xc7, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000400)={0x0, 0x22, 0x2, {[@main=@item_012={0x1, 0x0, 0xc, "d9"}]}}, 0x0}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="06000000040000000800000007"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000005000085000000b000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)='W', 0x1}], 0x1}, 0x0) close(r5) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xa8403, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETOFFLOAD(r6, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r5, 0xc008744c, &(0x7f0000000180)) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r4}, 0xc) syz_mount_image$ext4(&(0x7f0000000c80)='ext4\x00', &(0x7f0000000cc0)='./file0\x00', 0x0, &(0x7f0000000d00), 0x1, 0xc65, &(0x7f0000000d40)="$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") 1.194439027s ago: executing program 0 (id=466): r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x12, r0, 0xa8bdb000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c40)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb01001800000000000000200000002000000005000000030000000100000f040000000a000000030000000f000000000003040000000000000061"], &(0x7f0000001fc0)=""/4115, 0x3d, 0x1013, 0x1}, 0x28) 1.193688037s ago: executing program 2 (id=467): r0 = accept(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, &(0x7f0000000080)=0x80) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r0, 0x80089419, &(0x7f00000000c0)) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='rss_stat\x00', r2, 0x0, 0xfffffffffffffffa}, 0x18) r3 = syz_open_dev$vcsu(&(0x7f00000001c0), 0x8, 0x501000) accept$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000240)=0x14) r5 = syz_open_dev$hiddev(&(0x7f0000000280), 0x5, 0x17bb0e5164480024) read$hiddev(r5, &(0x7f00000002c0)=""/137, 0x89) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), r3) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000001480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001440)={&(0x7f0000000400)={0x1028, r6, 0x2, 0x70bd28, 0x25dfdbfc, {}, [@WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_PEERS={0xe14, 0x8, 0x0, 0x1, [{0x64, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "d9f98fe2abcadcbb44de3dc4681a57a443824c2de1fb0489881d4bd4beb5d97c"}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "4981b8edcb4f475ba86cfa320af44c70b7be56524e2919c8e49ce2ebc6b06f19"}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x6}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}]}, {0x20, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @multicast2}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x100}]}, {0x6c8, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x1a0, 0x9, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x10}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "1a2278cb27b8c582603fd44169a2fe0ca5e100aaa616d7f199f20de59ec510b0"}, @WGPEER_A_ALLOWEDIPS={0x120, 0x9, 0x0, 0x1, [{0xf4, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2c}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_ALLOWEDIPS={0x1d8, 0x9, 0x0, 0x1, [{0x100, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x1}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x3}}]}, {0xb8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x18}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "718d549b8a2c3c910f856db085e97777cb42c14b8c442eecf018ccc8b62f7c29"}, @WGPEER_A_ALLOWEDIPS={0x1b0, 0x9, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}]}]}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "fb51ebf55af052778737978e45d56eb6ef726b6975fea2032969269a8a4c7d5d"}]}, {0x38, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xffc0}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "9d46215598d30d4cbef9e8e50542fb7c9c12c60fba4337088e36666efc521565"}]}, {0x4f4, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x6}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_ALLOWEDIPS={0x4ac, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x3}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x13}}, {0x5, 0x3, 0x3}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @local}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0xc}}, {0x5, 0x3, 0x3}}]}, {0xb8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}]}, {0x118, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x40}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0xa0}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}]}, {0x10c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x10}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0xc}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x54d1}]}, {0x198, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_ALLOWEDIPS={0x114, 0x9, 0x0, 0x1, [{0xd0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0xe}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x44}}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xa}}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xd}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @multicast1}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x922}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "677e0499e2c8db9d09877081addf458853263cb08c0f49649a066b3c5d2aa785"}]}]}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_PEERS={0x1d4, 0x8, 0x0, 0x1, [{0x1ac, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x1ff}, @WGPEER_A_ALLOWEDIPS={0x1a0, 0x9, 0x0, 0x1, [{0x94, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x1}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}]}, {0x4}]}]}, {0x24, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x1, @loopback, 0x9}}]}]}]}, 0x1028}, 0x1, 0x0, 0x0, 0x24000080}, 0x8000) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$fou(&(0x7f0000001500), r1) sendmsg$FOU_CMD_DEL(r7, &(0x7f00000015c0)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001580)={&(0x7f0000001540)={0x30, r8, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@FOU_ATTR_TYPE={0x5}, @FOU_ATTR_PEER_V6={0x14, 0x9, @private1}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004) io_setup(0x80000001, &(0x7f0000001600)) ioctl$PTP_ENABLE_PPS(r3, 0x40043d04, 0x1) r9 = accept4$unix(r1, &(0x7f0000001640)=@abs, &(0x7f00000016c0)=0x6e, 0x80000) fcntl$getownex(r9, 0x10, &(0x7f0000001700)) r10 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000001740), 0x1, 0x0) setsockopt$MRT6_INIT(r10, 0x29, 0xc8, &(0x7f0000001780), 0x4) socketpair(0x2c, 0x2, 0x4, &(0x7f00000017c0)={0xffffffffffffffff}) write(r11, &(0x7f0000001800)="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", 0x1000) sendmsg$nl_route_sched(r3, &(0x7f0000002900)={&(0x7f0000002800)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000028c0)={&(0x7f0000002840)=@getqdisc={0x44, 0x26, 0x400, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x1, 0x5}, {0xa}, {0x7, 0x4}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) r12 = syz_genetlink_get_family_id$SEG6(&(0x7f0000002980), r1) sendmsg$SEG6_CMD_GET_TUNSRC(r11, &(0x7f0000002a40)={&(0x7f0000002940)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000002a00)={&(0x7f00000029c0)={0x34, r12, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@SEG6_ATTR_SECRET={0xc, 0x4, [0x6, 0xde1]}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0xb}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040}, 0x8010) ioctl$KVM_RUN(r3, 0xae80, 0x0) r13 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002ac0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_GET(r10, &(0x7f0000002c40)={&(0x7f0000002a80)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000002c00)={&(0x7f0000002b00)={0xe4, r13, 0x0, 0x70bd2c, 0x25dfdbfd, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000002c80)='./file0\x00', 0x200800, 0x4d) fadvise64(r0, 0x8d4e, 0xe5, 0x3) setsockopt$MRT6_ADD_MFC_PROXY(r11, 0x29, 0xd2, &(0x7f0000002cc0)={{0xa, 0x4e22, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xfffff801}, {0xa, 0x4e20, 0x8, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x91735d85}, 0x1, {[0xd7, 0x2, 0xb321, 0xc8a, 0x0, 0x10001, 0x9, 0xae89]}}, 0x5c) 1.14329284s ago: executing program 0 (id=468): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x1010008, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x1, 0x369, &(0x7f0000000a80)="$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") bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x1840, 0x42c04}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_IGMP_VERSION={0x5, 0x2b, 0x2}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x300}, 0x24) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000030000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000efffffff850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) r3 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={0x1, &(0x7f0000000080)="b6d90e84368250b860e1e35f1831555055f28ec5e252327d8d32d4be27f6faa4636bd4fc64c324b5dca93cdc9824977e050921333f9eafeb5fdff7bea67517ee16a566fed89251a751aac742afc2dc40d65df9612da58c9feb4e056b7b477c9d581a2c4021df9cc8df1adfef7f33f37b37932c54b7eea675bbaa9316d13868ea18b313763f0bd6d3d9bc244383981ae850a89b09dae1bb91a3b7fc346b8f5eddcb0d9abffd42c2055122e336270410cec4c616046b75d7d4bc5454cd70ade999db3e7e74047feafb43fca3107123186add9b4a92621e", &(0x7f0000000240)=@udp=r3}, 0x20) sendmsg$unix(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40840}, 0x8000) r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000340)={[0xfffffffffffffffd]}, 0x8, 0x800) io_setup(0x1, &(0x7f00000001c0)=0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r7}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r6}, 0x10) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r8, &(0x7f0000000180), 0x40010) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='sys_enter\x00', r9}, 0x10) getrlimit(0x0, &(0x7f00000002c0)) io_submit(r5, 0x1, &(0x7f0000000300)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x406, r4, 0x0, 0x0, 0x0, 0x0, 0x2}]) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x2000}, 0x4) 1.14252198s ago: executing program 2 (id=469): r0 = syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f0000000580)={[{@debug}, {@delalloc}, {@resuid}, {@test_dummy_encryption}, {@errors_continue}, {@errors_remount}, {@delalloc}, {@barrier}]}, 0x1, 0xbc8, &(0x7f0000002380)="$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") chdir(0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r3 = timerfd_create(0x0, 0x0) timerfd_settime(r3, 0x3, &(0x7f0000000440)={{0x0, 0x3938700}}, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r7 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) connect$unix(r8, &(0x7f0000000600)=@abs={0x0, 0x0, 0x4e24}, 0x6e) recvmmsg(r8, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYRES8=r7, @ANYRES8=r7, @ANYRES32, @ANYRESHEX=r5, @ANYRES32=r2, @ANYRESDEC=r0, @ANYRESDEC=r1, @ANYRES8=r6, @ANYRES16=r7, @ANYRES8=r4], &(0x7f0000000840)=""/251, 0x37, 0xfb, 0x1, 0x5}, 0x28) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r9, @ANYBLOB="0000000000000000b707000008000000850000006900000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r11, 0xae60) ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) read(r3, &(0x7f0000000240)=""/123, 0x7b) clock_adjtime(0x200000000000000, &(0x7f0000000000)={0x3ff, 0x0, 0x0, 0xc, 0x0, 0x0, 0x9, 0x2, 0x0, 0x100, 0x0, 0xb000000, 0x9, 0xfffffffffffffffe, 0x0, 0xfffffffffffffffd, 0x2, 0x18, 0x40000001000, 0x8, 0x2, 0x3, 0x8, 0x3}) 963.433654ms ago: executing program 0 (id=470): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000300)='tegra_dma_complete_cb\x00', r0, 0x0, 0x5}, 0x18) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000300)='tegra_dma_complete_cb\x00', r0, 0x0, 0x5}, 0x18) syz_usb_connect(0x1, 0xfffffffffffffd22, 0x0, 0x0) (async) syz_usb_connect(0x1, 0xfffffffffffffd22, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0xffffffffffffff5c) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0xffffffffffffff5c) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f00000005c0), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="050000007f", @ANYRESOCT], 0x48}, 0x1, 0x0, 0x0, 0x8000010}, 0x20004801) eventfd(0xc) (async) r3 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r3) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r3}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) (async) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74, 0xdddd1000}) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000700)={0x1, 0x0, [{0x11000, 0x89, &(0x7f0000000580)=""/137}]}) (async) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000700)={0x1, 0x0, [{0x11000, 0x89, &(0x7f0000000580)=""/137}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) unshare(0x64000600) (async) unshare(0x64000600) socket(0xa, 0x3, 0x3a) r4 = socket$netlink(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) (async) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000200), 0x4) (async) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000200), 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT(r7, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) 517.86876ms ago: executing program 4 (id=471): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb0100180000000000000030000000300000000a000000000000000100000d000000000100000003000000020000000000000e0300000000000000000000000000000500000000005f612e"], 0x0, 0x52}, 0x28) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) (async) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) open(&(0x7f00000002c0)='./file0/file0\x00', 0x141840, 0x0) (async) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="070000000400000008020000d9"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r3}, 0x18) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, 0x0) (async) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, 0x0) (async) open(&(0x7f0000000200)='./file0/file0\x00', 0x0, 0x0) (async) mremap(&(0x7f0000006000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil) 128.75738ms ago: executing program 0 (id=472): r0 = socket(0x1d, 0x800, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000200)='./file0\x00', 0x18000, &(0x7f0000000300)=ANY=[@ANYRESHEX=r1, @ANYRES8, @ANYRES16=0x0, @ANYRESOCT=r0, @ANYRES32, @ANYRES32], 0x1, 0x2ee, &(0x7f00000009c0)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) write$binfmt_script(r2, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000004c0)=ANY=[@ANYRES64=r3, @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000100)='./bus\x00', &(0x7f0000000840), 0x1004002, 0x0) chdir(&(0x7f00000001c0)='./bus\x00') mkdirat(r2, &(0x7f0000001dc0)='./bus\x00', 0x0) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)='./file0\x00') fdatasync(r2) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x0, 0x0}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock2(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r6 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x5}]}, 0x10) sendmsg$inet6(r6, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0xd1) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x44, &(0x7f0000000000)={0x0, 0x0}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x13, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 128.14885ms ago: executing program 4 (id=473): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f00000007c0)={[{@nodiscard}, {@nodiscard}, {}, {@grpjquota}, {@grpjquota}, {@noquota}, {@auto_da_alloc}, {@noload}, {@journal_async_commit}]}, 0x1, 0x50c, &(0x7f0000000200)="$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") (fail_nth: 14) 71.627064ms ago: executing program 2 (id=474): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1f) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$SNDRV_TIMER_IOCTL_TREAD64(r1, 0x400454a4, &(0x7f0000000200)=0x1) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000030020f003176c4000000000010902247251000000000904000012070103"], 0x0) 52.612206ms ago: executing program 4 (id=475): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r2}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000010c0)) 206.14µs ago: executing program 4 (id=476): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = socket$can_raw(0x1d, 0x3, 0x1) r2 = gettid() timer_create(0x0, &(0x7f00000005c0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) read(r1, &(0x7f00000027c0)=""/4073, 0xfe9) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000007c0)={0x90000001}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r6}, 0x20) mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r8, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r9 = dup(r8) mount$9p_fd(0x0, &(0x7f0000001480)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB=',wfdno=', @ANYRESHEX=r9]) 0s ago: executing program 0 (id=477): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000059c0)='./bus\x00', 0x1400e, &(0x7f0000000100)={[{@quota}]}, 0x1, 0x441, &(0x7f00000009c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00'}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000024c0), 0xc0200, 0x0) fcntl$setflags(r3, 0x2, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000000), 0x76, 0x103381) ioctl$USBDEVFS_DROP_PRIVILEGES(r4, 0x4004551e, 0x0) ioctl$USBDEVFS_CONNECTINFO(r4, 0x8108551b, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x183341, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x2) fsconfig$FSCONFIG_SET_BINARY(r5, 0x2, &(0x7f00000000c0)='/dev/kvm\x00', &(0x7f0000000380)="c7ce1f43ebae3a9f2c4fb8b792ea3925572cc77b5c131c46d4dca4ce81a21dc3fab87cc36fdb624dbe28da0befbacb5c42a0fb2da1b97816648d8681a5c3b4561e73a48cc87941b321321d6f126dc2cf93095c867aac68d00c8f372993", 0x5d) ioctl$KVM_SET_MSRS(r11, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0xc0011022, 0x0, 0x3be4}]}) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r8, {}, {}, {0xfff3}}}, 0x24}}, 0x0) kernel console output (not intermixed with test programs): 55] usb 3-1: config 0 has no interface number 0 [ 40.573841][ T555] usb 3-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 40.584121][ T555] usb 3-1: config 0 interface 196 has no altsetting 0 [ 40.601141][ T555] usb 3-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 40.615343][ T555] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 40.623507][ T555] usb 3-1: Product: syz [ 40.627687][ T555] usb 3-1: Manufacturer: syz [ 40.632504][ T555] usb 3-1: SerialNumber: syz [ 40.640229][ T555] usb 3-1: config 0 descriptor?? [ 40.645447][ T584] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 40.718471][ T284] EXT4-fs (loop3): unmounting filesystem. [ 40.719675][ T28] audit: type=1400 audit(1765888597.364:202): avc: denied { unmount } for pid=283 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 40.757593][ T596] netlink: 16 bytes leftover after parsing attributes in process `syz.4.75'. [ 40.928257][ T60] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 40.980555][ T605] Illegal XDP return value 4294967274 on prog (id 51) dev N/A, expect packet loss! [ 41.084928][ T19] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 41.095500][ T555] ipheth 3-1:0.196: Apple iPhone USB Ethernet device attached [ 41.146757][ T28] audit: type=1400 audit(1765888597.814:203): avc: denied { read } for pid=142 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 41.168769][ T28] audit: type=1400 audit(1765888597.824:204): avc: denied { search } for pid=142 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 41.190260][ T28] audit: type=1400 audit(1765888597.824:205): avc: denied { read } for pid=142 comm="dhcpcd" name="n15" dev="tmpfs" ino=1139 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 41.214442][ T60] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 41.227692][ T60] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 41.241478][ T60] usb 1-1: Product: syz [ 41.249219][ T60] usb 1-1: Manufacturer: syz [ 41.257328][ T28] audit: type=1400 audit(1765888597.824:206): avc: denied { open } for pid=142 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=1139 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 41.264755][ T609] netlink: 32 bytes leftover after parsing attributes in process `syz.1.79'. [ 41.280493][ T60] usb 1-1: SerialNumber: syz [ 41.288990][ T609] netlink: 32 bytes leftover after parsing attributes in process `syz.1.79'. [ 41.313352][ T28] audit: type=1400 audit(1765888597.824:207): avc: denied { getattr } for pid=142 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=1139 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 41.321573][ T555] usb 3-1: USB disconnect, device number 3 [ 41.342279][ T19] usb 5-1: Using ep0 maxpacket: 16 [ 41.351497][ T19] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 41.364596][ T19] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 41.372755][ T19] usb 5-1: Product: syz [ 41.376955][ T19] usb 5-1: Manufacturer: syz [ 41.382016][ T19] usb 5-1: SerialNumber: syz [ 41.391397][ T19] r8152-cfgselector 5-1: config 0 descriptor?? [ 41.398866][ T555] ipheth 3-1:0.196: Apple iPhone USB Ethernet now disconnected [ 41.598478][ T19] r8152-cfgselector 5-1: Unknown version 0x0000 [ 41.809125][ T19] r8152-cfgselector 5-1: Unknown version 0x0000 [ 41.816064][ T19] r8152-cfgselector 5-1: USB disconnect, device number 3 [ 41.838657][ T644] loop2: detected capacity change from 0 to 256 [ 41.888575][ T644] FAT-fs (loop2): error, clusters badly computed (0 != 128) [ 41.895916][ T644] FAT-fs (loop2): Filesystem has been set read-only [ 41.985634][ T646] loop1: detected capacity change from 0 to 40427 [ 41.995663][ T646] F2FS-fs (loop1): invalid crc value [ 42.002215][ T646] F2FS-fs (loop1): Found nat_bits in checkpoint [ 42.011668][ T644] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 42.022960][ T644] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 42.044027][ T646] F2FS-fs (loop1): Start checkpoint disabled! [ 42.050944][ T646] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 42.068397][ T651] syz.2.83[651] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 42.068465][ T651] syz.2.83[651] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 42.078703][ T652] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.100957][ T652] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.112974][ T652] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.124897][ T655] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.125542][ T652] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.134034][ T655] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.149874][ T652] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.158385][ T652] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.341283][ T309] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 42.350425][ T663] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 42.431001][ T664] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 42.551762][ T664] overlayfs: d_ino too big (., ino=4611686018427387905, xinobits=3) [ 43.127366][ T309] usb 2-1: device descriptor read/64, error -71 [ 43.448262][ T309] usb 2-1: device descriptor read/64, error -71 [ 43.478239][ T555] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 43.565961][ T593] syz.0.73 (593) used greatest stack depth: 21248 bytes left [ 43.578624][ T60] cdc_ncm 1-1:1.0: failed GET_NTB_PARAMETERS [ 43.590829][ T60] cdc_ncm 1-1:1.0: bind() failure [ 43.597324][ T60] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 43.604342][ T60] cdc_ncm 1-1:1.1: bind() failure [ 43.611025][ T60] usb 1-1: USB disconnect, device number 3 [ 43.679537][ T555] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 43.694838][ T555] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 43.713874][ T555] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 43.730658][ T555] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 43.731393][ T678] loop4: detected capacity change from 0 to 8192 [ 43.739438][ T555] usb 4-1: SerialNumber: syz [ 43.788261][ T309] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 43.799593][ T678] loop4: p2 p3 p4[EZD] [ 43.807181][ T678] loop4: p3 start 360447 is beyond EOD, truncated [ 43.813946][ T678] loop4: p4 size 264072 extends beyond EOD, truncated [ 43.850404][ T362] udevd[362]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 43.861284][ T452] udevd[452]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 43.952236][ T555] usb 4-1: 0:2 : does not exist [ 43.958330][ T309] usb 2-1: device descriptor read/64, error -71 [ 43.962500][ T555] usb 4-1: USB disconnect, device number 4 [ 44.278240][ T309] usb 2-1: device descriptor read/64, error -71 [ 44.338247][ T669] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 44.408302][ T309] usb usb2-port1: attempt power cycle [ 44.488247][ T669] usb 5-1: device descriptor read/64, error -71 [ 44.539416][ T690] netlink: 'syz.3.92': attribute type 3 has an invalid length. [ 44.758247][ T669] usb 5-1: device descriptor read/64, error -71 [ 44.818238][ T555] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 44.838269][ T309] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 44.869178][ T309] usb 2-1: device descriptor read/8, error -71 [ 44.998230][ T555] usb 4-1: Using ep0 maxpacket: 32 [ 45.004390][ T555] usb 4-1: config 0 has an invalid interface number: 196 but max is 0 [ 45.012584][ T555] usb 4-1: config 0 has no interface number 0 [ 45.018711][ T555] usb 4-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 45.028870][ T309] usb 2-1: device descriptor read/8, error -71 [ 45.028981][ T555] usb 4-1: config 0 interface 196 has no altsetting 0 [ 45.042263][ T28] kauditd_printk_skb: 20 callbacks suppressed [ 45.042273][ T28] audit: type=1400 audit(1765888601.714:228): avc: denied { wake_alarm } for pid=691 comm="syz.1.93" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 45.043286][ T555] usb 4-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 45.048586][ T669] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 45.069209][ T555] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 45.093647][ T555] usb 4-1: Product: syz [ 45.097924][ T555] usb 4-1: Manufacturer: syz [ 45.102590][ T555] usb 4-1: SerialNumber: syz [ 45.107909][ T555] usb 4-1: config 0 descriptor?? [ 45.113118][ T690] raw-gadget.6 gadget.3: fail, usb_ep_enable returned -22 [ 45.218271][ T669] usb 5-1: device descriptor read/64, error -71 [ 45.269639][ T706] syz.2.98[706] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 45.269709][ T706] syz.2.98[706] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 45.301889][ T709] loop2: detected capacity change from 0 to 512 [ 45.331335][ T709] EXT4-fs error (device loop2): ext4_orphan_get:1400: inode #15: comm syz.2.99: inode has both inline data and extents flags [ 45.345193][ T709] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.99: couldn't read orphan inode 15 (err -117) [ 45.352353][ T704] syz.0.97 (704) used greatest stack depth: 21072 bytes left [ 45.357445][ T709] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 45.364566][ T28] audit: type=1400 audit(1765888602.024:229): avc: denied { unmount } for pid=285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 45.403099][ T28] audit: type=1400 audit(1765888602.074:230): avc: denied { setattr } for pid=708 comm="syz.2.99" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 45.488247][ T669] usb 5-1: device descriptor read/64, error -71 [ 45.523804][ T555] ipheth 4-1:0.196: Apple iPhone USB Ethernet device attached [ 45.608313][ T669] usb usb5-port1: attempt power cycle [ 45.688259][ T349] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 45.760242][ T24] usb 4-1: USB disconnect, device number 5 [ 45.799054][ T24] ipheth 4-1:0.196: Apple iPhone USB Ethernet now disconnected [ 45.869209][ T349] usb 3-1: New USB device found, idVendor=05dc, idProduct=0001, bcdDevice= 0.01 [ 45.878505][ T349] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 45.886909][ T349] usb 3-1: config 0 descriptor?? [ 45.892671][ T349] ums-jumpshot 3-1:0.0: USB Mass Storage device detected [ 45.900272][ T349] ums-jumpshot 3-1:0.0: Quirks match for vid 05dc pid 0001: 2 [ 45.937398][ T752] loop1: detected capacity change from 0 to 128 [ 45.947079][ T752] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 45.955779][ T752] ext4 filesystem being mounted at /17/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 45.986281][ T28] audit: type=1400 audit(1765888602.654:231): avc: denied { write } for pid=751 comm="syz.1.102" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 46.007868][ T28] audit: type=1400 audit(1765888602.654:232): avc: denied { add_name } for pid=751 comm="syz.1.102" name="file2" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 46.028278][ T669] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 46.035851][ T28] audit: type=1400 audit(1765888602.654:233): avc: denied { create } for pid=751 comm="syz.1.102" name="file2" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 46.055829][ T28] audit: type=1400 audit(1765888602.654:234): avc: denied { read write open } for pid=751 comm="syz.1.102" path="/17/mnt/file2" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 46.059869][ T669] usb 5-1: device descriptor read/8, error -71 [ 46.085699][ T28] audit: type=1400 audit(1765888602.754:235): avc: denied { create } for pid=751 comm="syz.1.102" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 46.102837][ T60] usb 3-1: USB disconnect, device number 4 [ 46.127552][ T28] audit: type=1400 audit(1765888602.764:236): avc: denied { create } for pid=751 comm="syz.1.102" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 46.153157][ T28] audit: type=1400 audit(1765888602.774:237): avc: denied { bind } for pid=708 comm="syz.2.99" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 46.229274][ T669] usb 5-1: device descriptor read/8, error -71 [ 46.248443][ T756] loop0: detected capacity change from 0 to 512 [ 46.258272][ T756] EXT4-fs: Ignoring removed nomblk_io_submit option [ 46.266222][ T756] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 46.274437][ T756] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802c11c, mo2=0102] [ 46.282537][ T756] System zones: 1-12 [ 46.287014][ T756] EXT4-fs (loop0): couldn't mount RDWR because of unsupported optional features (80) [ 46.297791][ T756] EXT4-fs (loop0): Skipping orphan cleanup due to unknown ROCOMPAT features [ 46.306835][ T756] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 46.406144][ T761] loop3: detected capacity change from 0 to 16 [ 46.415253][ T761] erofs: (device loop3): mounted with root inode @ nid 36. [ 46.433079][ T761] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 46.538321][ T669] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 46.569936][ T669] usb 5-1: device descriptor read/8, error -71 [ 46.699723][ T286] EXT4-fs (loop2): unmounting filesystem. [ 46.814018][ T770] loop3: detected capacity change from 0 to 512 [ 46.869749][ T770] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 46.879206][ T770] EXT4-fs (loop3): can't mount with journal_async_commit, fs mounted w/o journal [ 46.942425][ T770] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 47.061499][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 47.156543][ T669] usb 5-1: device descriptor read/8, error -71 [ 47.165322][ T285] EXT4-fs (loop0): unmounting filesystem. [ 47.266231][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 47.377594][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 47.420315][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 47.460042][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 47.924843][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 47.963178][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 47.997475][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 48.020669][ T283] EXT4-fs (loop1): unmounting filesystem. [ 48.098586][ T669] usb usb5-port1: unable to enumerate USB device [ 48.099627][ T783] loop2: detected capacity change from 0 to 512 [ 48.152220][ T783] EXT4-fs: Ignoring removed nomblk_io_submit option [ 48.154730][ T787] loop3: detected capacity change from 0 to 1024 [ 48.180802][ T783] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 48.203650][ T779] loop4: detected capacity change from 0 to 512 [ 48.216350][ T783] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802c11c, mo2=0102] [ 48.234924][ T779] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 48.238028][ T783] System zones: 1-12 [ 48.250851][ T783] EXT4-fs (loop2): couldn't mount RDWR because of unsupported optional features (80) [ 48.255978][ T787] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 48.260873][ T783] EXT4-fs (loop2): Skipping orphan cleanup due to unknown ROCOMPAT features [ 48.269027][ T787] ext4 filesystem being mounted at /16/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.277697][ T783] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 48.306580][ T779] EXT4-fs (loop4): required journal recovery suppressed and not mounted read-only [ 48.328346][ T349] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 48.542033][ T796] loop0: detected capacity change from 0 to 1024 [ 48.548801][ T796] ext4: Unknown parameter 'nombcac' [ 49.395553][ T284] EXT4-fs (loop3): unmounting filesystem. [ 49.413011][ T286] EXT4-fs (loop2): unmounting filesystem. [ 49.427136][ T801] netlink: 8 bytes leftover after parsing attributes in process `syz.2.116'. [ 49.440703][ T801] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 49.445715][ T349] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 49.467391][ T802] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 49.478613][ T349] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 49.652556][ T349] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 49.661969][ T349] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.017102][ T349] usb 2-1: config 0 descriptor?? [ 50.062355][ T809] capability: warning: `syz.3.115' uses 32-bit capabilities (legacy support in use) [ 50.248274][ T309] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 50.418253][ T24] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 50.425798][ T309] usb 3-1: device descriptor read/64, error -71 [ 50.500083][ T349] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 50.512987][ T824] loop4: detected capacity change from 0 to 1024 [ 50.515106][ T349] cp2112 0003:10C4:EA90.0002: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 50.576874][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 50.576886][ T28] audit: type=1400 audit(1765888607.244:247): avc: denied { create } for pid=829 comm="syz.0.123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 50.606993][ T831] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 50.609493][ T28] audit: type=1400 audit(1765888607.254:248): avc: denied { create } for pid=823 comm="syz.4.121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 50.651357][ T28] audit: type=1400 audit(1765888607.324:249): avc: denied { lock } for pid=829 comm="syz.0.123" path="socket:[17821]" dev="sockfs" ino=17821 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 50.688293][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 50.696893][ T24] usb 4-1: unable to get BOS descriptor or descriptor too short [ 50.702660][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 50.704887][ T349] cp2112 0003:10C4:EA90.0002: Part Number: 0x82 Device Version: 0xFE [ 50.713055][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 50.728235][ T24] usb 4-1: not running at top speed; connect to a high speed hub [ 50.728743][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 50.736761][ T24] usb 4-1: config 1 has an invalid descriptor of length 7, skipping remainder of the config [ 50.744444][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 50.754233][ T24] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 50.762228][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 50.770854][ T309] usb 3-1: device descriptor read/64, error -71 [ 50.779182][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 50.784850][ T24] usb 4-1: config 1 has no interface number 1 [ 50.793089][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 50.798936][ T24] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 50.823680][ T28] audit: type=1400 audit(1765888607.494:250): avc: denied { read } for pid=835 comm="syz.4.124" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 50.838957][ T24] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 50.848382][ T28] audit: type=1400 audit(1765888607.494:251): avc: denied { open } for pid=835 comm="syz.4.124" path="/25/file0/.pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 50.878224][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.888001][ T24] usb 4-1: Product: syz [ 50.905099][ T24] usb 4-1: Manufacturer: syz [ 50.909947][ T24] usb 4-1: SerialNumber: syz [ 51.068262][ T309] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 51.218285][ T309] usb 3-1: device descriptor read/64, error -71 [ 51.307042][ T349] cp2112 0003:10C4:EA90.0002: error reading lock byte: -71 [ 51.338941][ T349] usb 2-1: USB disconnect, device number 7 [ 51.374699][ T841] loop0: detected capacity change from 0 to 512 [ 51.388183][ T841] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 51.402360][ T841] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 51.413653][ T841] EXT4-fs (loop0): 1 truncate cleaned up [ 51.419505][ T841] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 51.539735][ T309] usb 3-1: device descriptor read/64, error -71 [ 51.657212][ T849] netlink: 12 bytes leftover after parsing attributes in process `syz.0.125'. [ 51.677848][ T849] device vlan2 entered promiscuous mode [ 51.683466][ T849] device erspan0 entered promiscuous mode [ 51.704515][ T309] usb usb3-port1: attempt power cycle [ 52.188359][ T309] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 52.301273][ T309] usb 3-1: device descriptor read/8, error -71 [ 52.378251][ T28] audit: type=1400 audit(1765888608.964:252): avc: denied { create } for pid=851 comm="syz.1.127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 52.409040][ T285] EXT4-fs (loop0): unmounting filesystem. [ 52.451472][ T854] loop1: detected capacity change from 0 to 4096 [ 52.467693][ T28] audit: type=1400 audit(1765888609.024:253): avc: denied { create } for pid=853 comm="syz.1.128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 52.489024][ T28] audit: type=1400 audit(1765888609.024:254): avc: denied { write } for pid=853 comm="syz.1.128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 52.489596][ T309] usb 3-1: device descriptor read/8, error -71 [ 52.509560][ T28] audit: type=1400 audit(1765888609.024:255): avc: denied { nlmsg_write } for pid=853 comm="syz.1.128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 52.535483][ T854] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 52.536751][ T24] usb 4-1: 2:1 : no UAC_FORMAT_TYPE desc [ 52.555388][ T28] audit: type=1400 audit(1765888609.124:256): avc: denied { mount } for pid=855 comm="syz.0.129" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 52.584049][ T24] usb 4-1: USB disconnect, device number 6 [ 52.670958][ T861] loop2: detected capacity change from 0 to 2048 [ 52.768475][ T876] netlink: 8 bytes leftover after parsing attributes in process `syz.1.128'. [ 52.942626][ T861] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 52.952107][ T452] udevd[452]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 52.976653][ T286] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 52.991376][ T286] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6165: Corrupt filesystem [ 53.002766][ T286] EXT4-fs (loop2): unmounting filesystem. [ 53.028339][ T39] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 53.246761][ T283] EXT4-fs (loop1): unmounting filesystem. [ 53.391722][ T887] netlink: 4 bytes leftover after parsing attributes in process `syz.0.138'. [ 54.039214][ T890] loop1: detected capacity change from 0 to 256 [ 54.039280][ T39] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 54.055561][ T39] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 54.066176][ T39] usb 5-1: config 220 has no interface number 2 [ 54.072479][ T39] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 54.094075][ T39] usb 5-1: config 220 interface 0 has no altsetting 0 [ 54.101360][ T39] usb 5-1: config 220 interface 76 has no altsetting 0 [ 54.108511][ T39] usb 5-1: config 220 interface 1 has no altsetting 0 [ 54.126497][ T39] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 54.135623][ T39] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 54.144269][ T39] usb 5-1: Product: syz [ 54.148498][ T39] usb 5-1: Manufacturer: syz [ 54.153101][ T39] usb 5-1: SerialNumber: syz [ 54.262652][ T899] loop1: detected capacity change from 0 to 512 [ 54.382249][ T875] netlink: 12 bytes leftover after parsing attributes in process `syz.4.134'. [ 54.480150][ T892] loop0: detected capacity change from 0 to 40427 [ 54.487682][ T337] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 54.499515][ T892] F2FS-fs (loop0): Unrecognized mount option "ü" or missing value [ 54.768353][ T309] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 55.029480][ T309] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 55.050803][ T309] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 55.080464][ T309] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 55.119682][ T309] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 55.147221][ T309] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.175680][ T309] usb 2-1: config 0 descriptor?? [ 55.593052][ T309] plantronics 0003:047F:FFFF.0003: unknown main item tag 0xd [ 55.601486][ T309] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 55.609417][ T921] loop0: detected capacity change from 0 to 512 [ 55.610654][ T309] plantronics 0003:047F:FFFF.0003: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 55.616004][ T921] EXT4-fs: Ignoring removed orlov option [ 55.644586][ T921] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 55.660680][ T921] EXT4-fs (loop0): can't mount with data=, fs mounted w/o journal [ 55.913269][ T925] loop3: detected capacity change from 0 to 512 [ 55.919836][ T925] EXT4-fs: Ignoring removed nomblk_io_submit option [ 55.933183][ T925] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 55.942553][ T925] ext4 filesystem being mounted at /21/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 56.030202][ T930] EXT4-fs error (device loop3): ext4_lookup:1858: inode #12: comm syz.3.146: iget: bad i_size value: 2533274857506816 [ 56.043769][ T930] EXT4-fs error (device loop3): ext4_lookup:1858: inode #12: comm syz.3.146: iget: bad i_size value: 2533274857506816 [ 56.065256][ T28] kauditd_printk_skb: 15 callbacks suppressed [ 56.065268][ T28] audit: type=1400 audit(1765888612.734:272): avc: denied { ioctl } for pid=931 comm="syz.2.147" path="socket:[18155]" dev="sockfs" ino=18155 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 56.096419][ T28] audit: type=1400 audit(1765888612.764:273): avc: denied { write } for pid=931 comm="syz.2.147" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 56.201125][ T932] loop2: detected capacity change from 0 to 40427 [ 56.208862][ T932] F2FS-fs (loop2): fault_injection options not supported [ 56.216780][ T932] F2FS-fs (loop2): invalid crc value [ 56.223588][ T932] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 56.252239][ T932] F2FS-fs (loop2): Start checkpoint disabled! [ 56.259501][ T932] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 56.377290][ T28] audit: type=1400 audit(1765888613.044:274): avc: denied { read write } for pid=939 comm="syz.2.149" name="vhost-vsock" dev="devtmpfs" ino=268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 56.401848][ T28] audit: type=1400 audit(1765888613.044:275): avc: denied { open } for pid=939 comm="syz.2.149" path="/dev/vhost-vsock" dev="devtmpfs" ino=268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 56.426040][ T28] audit: type=1400 audit(1765888613.074:276): avc: denied { ioctl } for pid=939 comm="syz.2.149" path="/dev/vhost-vsock" dev="devtmpfs" ino=268 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 56.482012][ T39] usb 5-1: selecting invalid altsetting 0 [ 56.487878][ T39] usb 5-1: Found UVC 7.01 device syz (8086:0b07) [ 56.498265][ T39] usb 5-1: No valid video chain found. [ 56.511194][ T39] usb 5-1: USB disconnect, device number 8 [ 56.649718][ T946] loop4: detected capacity change from 0 to 512 [ 56.661016][ T946] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 56.670232][ T946] EXT4-fs (loop4): can't mount with journal_async_commit, fs mounted w/o journal [ 56.849329][ T284] EXT4-fs (loop3): unmounting filesystem. [ 57.349633][ T28] audit: type=1400 audit(1765888614.024:277): avc: denied { watch } for pid=948 comm="syz.3.151" path="/22" dev="tmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 57.509064][ T39] usb 2-1: USB disconnect, device number 8 [ 57.607684][ T967] loop0: detected capacity change from 0 to 256 [ 57.650934][ T967] tipc: Started in network mode [ 57.655841][ T967] tipc: Node identity 00000000000000000040000000000001, cluster identity 4711 [ 57.665295][ T967] tipc: Enabling of bearer rejected, failed to enable media [ 58.020381][ T28] audit: type=1400 audit(1765888614.694:278): avc: denied { read write } for pid=981 comm="syz.2.162" name="uhid" dev="devtmpfs" ino=267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 58.108099][ T28] audit: type=1400 audit(1765888614.694:279): avc: denied { open } for pid=981 comm="syz.2.162" path="/dev/uhid" dev="devtmpfs" ino=267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 58.131372][ T39] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 58.165953][ T28] audit: type=1400 audit(1765888614.734:280): avc: denied { create } for pid=960 comm="syz.3.156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 58.257236][ T28] audit: type=1400 audit(1765888614.744:281): avc: denied { sys_admin } for pid=960 comm="syz.3.156" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 58.339929][ T39] usb 2-1: unable to get BOS descriptor or descriptor too short [ 58.348077][ T39] usb 2-1: not running at top speed; connect to a high speed hub [ 58.360408][ T39] usb 2-1: config 4 has an invalid interface number: 147 but max is 0 [ 58.376211][ T39] usb 2-1: config 4 has an invalid descriptor of length 255, skipping remainder of the config [ 58.399154][ T39] usb 2-1: config 4 has no interface number 0 [ 58.407781][ T39] usb 2-1: string descriptor 0 read error: -22 [ 58.421312][ T39] usb 2-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 58.438272][ T39] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.710452][ T555] usb 2-1: USB disconnect, device number 9 [ 58.718060][ T966] mmap: syz.1.158 (966): VmData 167489536 exceed data ulimit 33554432. Update limits or use boot option ignore_rlimit_data. [ 58.852615][ T997] loop2: detected capacity change from 0 to 7 [ 58.873616][ T999] loop2: detected capacity change from 0 to 512 [ 58.888873][ T999] EXT4-fs: Ignoring removed nomblk_io_submit option [ 58.896374][ T999] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 58.904555][ T999] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802c11c, mo2=0102] [ 58.912981][ T999] System zones: 1-12 [ 58.917357][ T999] EXT4-fs (loop2): couldn't mount RDWR because of unsupported optional features (80) [ 58.926997][ T999] EXT4-fs (loop2): Skipping orphan cleanup due to unknown ROCOMPAT features [ 58.937058][ T999] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 59.266899][ T1008] loop0: detected capacity change from 0 to 512 [ 59.274374][ T1008] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 59.284402][ T1008] EXT4-fs (loop0): can't mount with journal_async_commit, fs mounted w/o journal [ 59.487468][ T1013] loop1: detected capacity change from 0 to 512 [ 59.686196][ T1013] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 59.696111][ T1013] ext4 filesystem being mounted at /26/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 59.739436][ T286] EXT4-fs (loop2): unmounting filesystem. [ 59.948428][ T1023] netlink: 28 bytes leftover after parsing attributes in process `syz.3.170'. [ 59.973531][ T1023] netlink: 28 bytes leftover after parsing attributes in process `syz.3.170'. [ 60.088946][ T1029] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.097553][ T1029] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.213297][ T1038] loop3: detected capacity change from 0 to 512 [ 60.223071][ T1038] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 60.364091][ T1038] EXT4-fs (loop3): 1 truncate cleaned up [ 60.369812][ T1038] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 60.652191][ T1051] loop2: detected capacity change from 0 to 7 [ 60.705017][ T284] EXT4-fs (loop3): unmounting filesystem. [ 60.734662][ T1054] loop4: detected capacity change from 0 to 512 [ 60.741347][ T1054] EXT4-fs: Ignoring removed nomblk_io_submit option [ 60.765762][ T1054] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 60.773787][ T1054] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802c11c, mo2=0102] [ 60.876979][ T1054] System zones: 1-12 [ 60.892413][ T283] EXT4-fs (loop1): unmounting filesystem. [ 60.922413][ T1054] EXT4-fs (loop4): couldn't mount RDWR because of unsupported optional features (80) [ 60.968118][ T1054] EXT4-fs (loop4): Skipping orphan cleanup due to unknown ROCOMPAT features [ 61.011273][ T1054] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 61.733691][ T287] EXT4-fs (loop4): unmounting filesystem. [ 61.906602][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 61.906616][ T28] audit: type=1400 audit(1765888618.574:283): avc: denied { create } for pid=1073 comm="syz.1.183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 62.148209][ C0] sched: RT throttling activated [ 62.238303][ T309] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 62.429328][ T309] usb 4-1: New USB device found, idVendor=04b4, idProduct=6830, bcdDevice=86.cf [ 62.452474][ T309] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.504683][ T309] ums-cypress 4-1:1.0: USB Mass Storage device detected [ 62.557845][ T1086] loop1: detected capacity change from 0 to 40427 [ 62.603329][ T1086] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 62.615033][ T1086] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 62.714298][ T1086] F2FS-fs (loop1): Found nat_bits in checkpoint [ 62.728412][ T1094] x_tables: duplicate underflow at hook 1 [ 62.734212][ T1094] x_tables: duplicate underflow at hook 1 [ 62.783568][ T1086] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 62.806860][ T1086] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 62.861983][ T28] audit: type=1400 audit(1765888619.534:284): avc: denied { read write open } for pid=1085 comm="syz.1.186" path="/32/file0/file1" dev="loop1" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 62.975549][ T1104] loop2: detected capacity change from 0 to 7 [ 63.052942][ T1106] syz.1.186: attempt to access beyond end of device [ 63.052942][ T1106] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 63.077691][ T1106] syz.1.186: attempt to access beyond end of device [ 63.077691][ T1106] loop1: rw=0, sector=45096, nr_sectors = 8 limit=40427 [ 63.219952][ T28] audit: type=1400 audit(1765888619.804:285): avc: denied { setattr } for pid=1085 comm="syz.1.186" name="file1" dev="loop1" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 63.344418][ T1117] loop2: detected capacity change from 0 to 4096 [ 63.373049][ T28] audit: type=1400 audit(1765888620.044:286): avc: denied { create } for pid=1118 comm="syz.4.193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 63.411576][ T28] audit: type=1400 audit(1765888620.064:287): avc: denied { connect } for pid=1118 comm="syz.4.193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 63.431106][ T28] audit: type=1400 audit(1765888620.064:288): avc: denied { shutdown } for pid=1118 comm="syz.4.193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 63.460393][ T1117] EXT4-fs (loop2): Test dummy encryption mode enabled [ 63.475246][ T1117] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c028, mo2=0003] [ 63.483848][ T39] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 63.523135][ T1117] System zones: 0-5 [ 63.545477][ T1117] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 63.699379][ T39] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 63.724183][ T39] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8 [ 63.765884][ T39] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 63.792689][ T39] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.828237][ T39] usb 1-1: Product: syz [ 63.841256][ T39] usb 1-1: Manufacturer: syz [ 63.855112][ T39] usb 1-1: SerialNumber: syz [ 63.863012][ T1129] syz.4.194[1129] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 63.863105][ T1129] syz.4.194[1129] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 64.090591][ T39] cdc_ncm 1-1:1.0: bind() failure [ 64.138335][ T28] audit: type=1400 audit(1765888620.814:289): avc: denied { bind } for pid=1136 comm="syz.0.195" lport=5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 64.177878][ T39] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 64.194629][ T283] syz-executor: attempt to access beyond end of device [ 64.194629][ T283] loop1: rw=2051, sector=45096, nr_sectors = 8 limit=40427 [ 64.211409][ T28] audit: type=1400 audit(1765888620.834:290): avc: denied { node_bind } for pid=1136 comm="syz.0.195" saddr=172.20.20.170 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 64.213499][ T39] cdc_ncm 1-1:1.1: bind() failure [ 64.241741][ T283] F2FS-fs (loop1): Issue discard(5637, 5637, 1) failed, ret: -5 [ 64.268337][ T28] audit: type=1400 audit(1765888620.884:291): avc: denied { lock } for pid=1141 comm="syz.0.197" path="socket:[18497]" dev="sockfs" ino=18497 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 64.272241][ T39] usb 1-1: USB disconnect, device number 4 [ 64.477353][ T286] EXT4-fs (loop2): unmounting filesystem. [ 64.553801][ T1153] loop2: detected capacity change from 0 to 7 [ 64.618774][ T1156] loop1: detected capacity change from 0 to 4096 [ 64.636159][ T1156] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 64.653236][ T1156] EXT4-fs (loop1): Test dummy encryption mode enabled [ 64.670644][ T1156] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 64.720963][ T1156] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 64.731536][ T28] audit: type=1400 audit(1765888621.404:292): avc: denied { append } for pid=1155 comm="syz.1.202" path=2F33352F131377C5FC35D41454D5D41D29AD1A6029598146E6BE166E41AD0DBD4054033C9F33BBDA8224A2F3D772E7636E48B33CBF708372E8F1B9933EC5127743BE2206209EF02DF9CBF2F6E880D3382F6D656D6F72792E6576656E74732E6C6F63616C dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 64.800894][ T283] EXT4-fs (loop1): unmounting filesystem. [ 65.423978][ T1151] loop2: detected capacity change from 0 to 131072 [ 65.453880][ T1151] F2FS-fs (loop2): invalid crc value [ 65.499151][ T1151] F2FS-fs (loop2): Found nat_bits in checkpoint [ 65.588344][ T1151] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 65.638303][ T888] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 66.017469][ T1175] loop0: detected capacity change from 0 to 40427 [ 66.061684][ T1175] F2FS-fs (loop0): heap/no_heap options were deprecated [ 66.088267][ T1175] F2FS-fs (loop0): fault_injection options not supported [ 66.095347][ T1175] F2FS-fs (loop0): fault_type options not supported [ 66.128858][ T1175] F2FS-fs (loop0): invalid crc value [ 66.192456][ T39] usb 4-1: USB disconnect, device number 7 [ 66.198649][ T1175] F2FS-fs (loop0): Found nat_bits in checkpoint [ 66.261516][ T1183] SELinux: policydb version 1556 does not match my version range 15-33 [ 66.276663][ T1183] SELinux: failed to load policy [ 66.311429][ T1186] loop3: detected capacity change from 0 to 4096 [ 66.317817][ T1175] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 66.350201][ T1186] EXT4-fs (loop3): Test dummy encryption mode enabled [ 66.362954][ T1194] loop2: detected capacity change from 0 to 128 [ 66.373212][ T1175] netlink: 16 bytes leftover after parsing attributes in process `syz.0.205'. [ 66.382767][ T1175] netlink: 16 bytes leftover after parsing attributes in process `syz.0.205'. [ 66.392476][ T1194] EXT4-fs (loop2): Test dummy encryption mode enabled [ 66.401245][ T1194] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 576460752303423507)! [ 66.418439][ T1186] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c028, mo2=0003] [ 66.426611][ T1186] System zones: 0-5 [ 66.438254][ T1194] EXT4-fs (loop2): group descriptors corrupted! [ 66.459003][ T1186] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 66.553088][ T1201] loop1: detected capacity change from 0 to 128 [ 66.577800][ T1201] device syzkaller0 entered promiscuous mode [ 66.592482][ T1207] loop4: detected capacity change from 0 to 2048 [ 66.640095][ T1207] EXT4-fs: Ignoring removed i_version option [ 66.656100][ T1207] EXT4-fs: test_dummy_encryption requires encrypt feature [ 67.004941][ T1216] loop0: detected capacity change from 0 to 40427 [ 67.012252][ T1216] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 67.020010][ T1216] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 67.029036][ T1216] F2FS-fs (loop0): invalid crc value [ 67.047389][ T1216] F2FS-fs (loop0): Found nat_bits in checkpoint [ 67.080022][ T1216] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 67.087058][ T1216] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 67.307274][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 67.315394][ T28] audit: type=1400 audit(1765888623.974:300): avc: denied { write } for pid=1215 comm="syz.0.216" name="snmp6" dev="proc" ino=4026532689 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 67.654043][ T28] audit: type=1400 audit(1765888624.324:301): avc: denied { unmount } for pid=283 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 67.918613][ T8] tipc: Disabling bearer [ 67.927709][ T8] tipc: Left network mode [ 68.082568][ T28] audit: type=1400 audit(1765888624.754:302): avc: denied { mounton } for pid=1232 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 68.118354][ T284] EXT4-fs (loop3): unmounting filesystem. [ 68.179730][ T1235] loop0: detected capacity change from 0 to 512 [ 68.200097][ T1235] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 68.209113][ T1235] ext4 filesystem being mounted at /57/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 68.232978][ T285] EXT4-fs (loop0): unmounting filesystem. [ 68.267591][ T1232] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.277484][ T1232] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.288240][ T888] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 68.299977][ T1232] device bridge_slave_0 entered promiscuous mode [ 68.324406][ T1250] device dummy0 entered promiscuous mode [ 68.331760][ T1250] device dummy0 left promiscuous mode [ 68.343003][ T1232] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.350169][ T1232] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.360579][ T1232] device bridge_slave_1 entered promiscuous mode [ 68.434650][ T1256] loop0: detected capacity change from 0 to 512 [ 68.442828][ T1256] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 68.454452][ T1256] EXT4-fs (loop0): 1 truncate cleaned up [ 68.460221][ T1256] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 68.559883][ T773] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.567628][ T773] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.646906][ T773] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.655614][ T773] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.664303][ T773] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.671374][ T773] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.671559][ T39] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 68.685434][ T773] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.696498][ T773] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.704030][ T1231] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.704740][ T773] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.712912][ T28] audit: type=1400 audit(1765888625.364:303): avc: denied { append } for pid=1230 comm="syz.4.222" name="hwrng" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 68.719818][ T773] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.750779][ T1231] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.758719][ T773] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.824928][ T1270] usb usb8: usbfs: process 1270 (syz.0.227) did not claim interface 0 before use [ 68.872947][ T39] usb 4-1: device descriptor read/64, error -71 [ 69.184098][ T1232] device veth0_vlan entered promiscuous mode [ 69.208351][ T39] usb 4-1: device descriptor read/64, error -71 [ 69.374669][ T1232] device veth1_macvtap entered promiscuous mode [ 69.395586][ T1274] loop2: detected capacity change from 0 to 512 [ 69.415876][ T28] audit: type=1400 audit(1765888626.084:304): avc: denied { mount } for pid=1232 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 69.480529][ T1274] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 69.492647][ T1277] loop5: detected capacity change from 0 to 128 [ 69.500126][ T28] audit: type=1400 audit(1765888626.114:305): avc: denied { mounton } for pid=1232 comm="syz-executor" path="/root/syzkaller.5LKqK0/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 69.526999][ T39] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 69.559427][ T1274] EXT4-fs (loop2): 1 truncate cleaned up [ 69.565177][ T1274] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 69.596108][ T285] EXT4-fs (loop0): unmounting filesystem. [ 69.598794][ T888] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 69.609583][ T888] usb 5-1: can't read configurations, error -71 [ 69.610708][ T773] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.625438][ T773] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.633785][ T773] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 69.647858][ T773] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 69.655926][ T773] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.664565][ T773] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.673003][ T773] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.681779][ T773] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.690571][ T773] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.700756][ T39] usb 4-1: device descriptor read/64, error -71 [ 69.704094][ T773] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.723412][ T773] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.732080][ T773] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.733657][ T286] EXT4-fs (loop2): unmounting filesystem. [ 69.740505][ T773] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.771713][ T8] device bridge_slave_1 left promiscuous mode [ 69.777817][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.792921][ T8] device bridge_slave_0 left promiscuous mode [ 69.800019][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.809040][ T8] device veth1_macvtap left promiscuous mode [ 69.815140][ T8] device veth0_vlan left promiscuous mode [ 69.978248][ T39] usb 4-1: device descriptor read/64, error -71 [ 70.058273][ T451] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 70.098463][ T39] usb usb4-port1: attempt power cycle [ 70.249303][ T451] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 70.257625][ T451] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 70.266526][ T451] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 70.276866][ T451] usb 3-1: config 220 has no interface number 2 [ 70.283182][ T451] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 70.299412][ T451] usb 3-1: config 220 interface 0 has no altsetting 0 [ 70.307319][ T451] usb 3-1: config 220 interface 76 has no altsetting 0 [ 70.323261][ T451] usb 3-1: config 220 interface 1 has no altsetting 0 [ 70.374904][ T1295] loop4: detected capacity change from 0 to 4096 [ 70.382132][ T1295] EXT4-fs (loop4): Test dummy encryption mode enabled [ 70.396824][ T1295] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c118, mo2=0102] [ 70.405052][ T451] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 70.409469][ T1295] System zones: 0-5 [ 70.414117][ T451] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.418936][ T1295] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 70.426007][ T451] usb 3-1: Product: syz [ 70.440197][ T451] usb 3-1: Manufacturer: syz [ 70.444816][ T451] usb 3-1: SerialNumber: syz [ 70.508859][ T1298] loop5: detected capacity change from 0 to 512 [ 70.515422][ T39] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 70.568564][ T1298] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 70.639979][ T1298] EXT4-fs (loop5): 1 truncate cleaned up [ 70.645711][ T1298] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 70.715436][ T28] audit: type=1400 audit(1765888627.384:306): avc: denied { ioctl } for pid=1292 comm="syz.5.234" path="/1/bus/file1" dev="loop5" ino=15 ioctlcmd=0xf509 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 70.742670][ T39] usb 4-1: device descriptor read/8, error -71 [ 70.752914][ T1295] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 70.769079][ T28] audit: type=1400 audit(1765888627.434:307): avc: denied { mounton } for pid=1294 comm="syz.4.235" path="/42/file0/file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 70.797299][ T28] audit: type=1400 audit(1765888627.434:308): avc: denied { write } for pid=1294 comm="syz.4.235" name="bus" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 70.818736][ T28] audit: type=1400 audit(1765888627.434:309): avc: denied { add_name } for pid=1294 comm="syz.4.235" name="work" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 70.823741][ T1302] loop0: detected capacity change from 0 to 512 [ 70.846915][ T287] EXT4-fs (loop4): unmounting filesystem. [ 70.852924][ T1302] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 70.861565][ T1302] EXT4-fs (loop0): can't mount with journal_async_commit, fs mounted w/o journal [ 70.904715][ T451] usb 3-1: selecting invalid altsetting 0 [ 70.911462][ T451] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 70.911493][ T451] usb 3-1: No valid video chain found. [ 70.912682][ T39] usb 4-1: device descriptor read/8, error -71 [ 70.942581][ T451] usb 3-1: USB disconnect, device number 9 [ 71.071797][ T1318] netlink: 96 bytes leftover after parsing attributes in process `syz.0.239'. [ 71.198305][ T39] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 71.348154][ T1232] EXT4-fs (loop5): unmounting filesystem. [ 71.493199][ T1327] syz.3.243 (1327) used greatest stack depth: 20992 bytes left [ 71.908062][ T39] usb 4-1: device not accepting address 11, error -71 [ 71.948418][ T39] usb usb4-port1: unable to enumerate USB device [ 72.027463][ T1343] tunl0: Caught tx_queue_len zero misconfig [ 72.046577][ T1346] loop0: detected capacity change from 0 to 512 [ 72.049026][ T103] udevd[103]: worker [452] terminated by signal 33 (Unknown signal 33) [ 72.061593][ T1346] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 72.062649][ T103] udevd[103]: worker [452] failed while handling '/devices/virtual/block/loop0' [ 72.070455][ T1346] EXT4-fs (loop0): can't mount with journal_async_commit, fs mounted w/o journal [ 72.303994][ T1351] loop0: detected capacity change from 0 to 1024 [ 72.310612][ T1351] EXT4-fs: Ignoring removed orlov option [ 72.363607][ T1351] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 72.593753][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 72.593774][ T28] audit: type=1400 audit(1765888629.264:323): avc: denied { ioctl } for pid=1357 comm="syz.3.252" path="socket:[20323]" dev="sockfs" ino=20323 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 72.768291][ T451] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 72.911276][ T1375] loop4: detected capacity change from 0 to 4096 [ 72.918611][ T1375] EXT4-fs (loop4): Test dummy encryption mode enabled [ 72.926010][ T1375] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 72.928259][ T451] usb 6-1: device descriptor read/64, error -71 [ 72.934650][ T1375] System zones: 0-5 [ 72.945413][ T1375] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 73.134257][ T285] EXT4-fs (loop0): unmounting filesystem. [ 73.312255][ T28] audit: type=1404 audit(1765888629.984:324): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 73.342556][ T28] audit: type=1404 audit(1765888630.004:325): enforcing=0 old_enforcing=1 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 73.375430][ T28] audit: type=1400 audit(1765888630.004:326): avc: denied { ioctl } for pid=1383 comm="syz.2.258" path="socket:[18997]" dev="sockfs" ino=18997 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 73.398250][ T24] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 73.407025][ T28] audit: type=1400 audit(1765888630.004:327): avc: denied { bind } for pid=1383 comm="syz.2.258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 73.465555][ T28] audit: type=1400 audit(1765888630.004:328): avc: denied { read } for pid=1383 comm="syz.2.258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 73.505329][ T28] audit: type=1400 audit(1765888630.004:329): avc: denied { write } for pid=1383 comm="syz.2.258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 73.518249][ T451] usb 6-1: device descriptor read/64, error -71 [ 73.544829][ T28] audit: type=1400 audit(1765888630.044:330): avc: denied { ioctl } for pid=1352 comm="syz.5.251" path="/dev/raw-gadget" dev="devtmpfs" ino=258 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 73.596179][ T28] audit: type=1400 audit(1765888630.054:331): avc: denied { bpf } for pid=1379 comm="syz.0.257" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 73.600428][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 73.627845][ T24] usb 4-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice= 0.00 [ 73.641325][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.651169][ T24] usb 4-1: config 0 descriptor?? [ 73.656080][ T28] audit: type=1400 audit(1765888630.054:332): avc: denied { map_create } for pid=1379 comm="syz.0.257" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 73.737261][ T287] EXT4-fs (loop4): unmounting filesystem. [ 73.795860][ T1394] loop2: detected capacity change from 0 to 7 [ 73.828258][ T451] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 73.918315][ T39] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 73.978317][ T451] usb 6-1: device descriptor read/64, error -71 [ 74.059748][ T24] zeroplus 0003:0C12:0005.0004: item fetching failed at offset 0/3 [ 74.067932][ T24] zeroplus 0003:0C12:0005.0004: parse failed [ 74.074259][ T24] zeroplus: probe of 0003:0C12:0005.0004 failed with error -22 [ 74.088285][ T888] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 74.109379][ T39] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 74.120400][ T39] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 74.129588][ T39] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.138720][ T39] usb 3-1: config 0 descriptor?? [ 74.248350][ T451] usb 6-1: device descriptor read/64, error -71 [ 74.425995][ T451] usb usb6-port1: attempt power cycle [ 74.449399][ T888] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 74.460420][ T888] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 74.470391][ T888] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 75.157073][ T888] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.167407][ T888] usb 5-1: config 0 descriptor?? [ 75.287929][ T1411] loop0: detected capacity change from 0 to 40427 [ 75.295266][ T1411] F2FS-fs (loop0): Unrecognized mount option "jqfmt=vfs2ÖReap" or missing value [ 75.451243][ T1413] loop5: detected capacity change from 0 to 40427 [ 75.459646][ T1413] F2FS-fs (loop5): invalid crc value [ 75.466424][ T1413] F2FS-fs (loop5): Found nat_bits in checkpoint [ 75.496752][ T1413] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 75.576006][ T888] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0 [ 75.589674][ T888] cp2112 0003:10C4:EA90.0005: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 75.777240][ T888] cp2112 0003:10C4:EA90.0005: Part Number: 0x82 Device Version: 0xFE [ 75.830463][ T1426] loop5: detected capacity change from 0 to 256 [ 75.999281][ T24] usb 4-1: USB disconnect, device number 12 [ 76.286001][ T1433] loop0: detected capacity change from 0 to 512 [ 76.292610][ T1433] ext3: Unknown parameter 'dont_measure' [ 76.388925][ T888] cp2112 0003:10C4:EA90.0005: error reading lock byte: -71 [ 76.397365][ T888] usb 5-1: USB disconnect, device number 11 [ 76.709714][ T39] usbhid 3-1:0.0: can't add hid device: -71 [ 76.715769][ T39] usbhid: probe of 3-1:0.0 failed with error -71 [ 76.723069][ T39] usb 3-1: USB disconnect, device number 10 [ 76.738558][ T1438] loop2: detected capacity change from 0 to 512 [ 76.750949][ T1438] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.271: inode #1: comm syz.2.271: iget: illegal inode # [ 76.763976][ T1438] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.271: error while reading EA inode 1 err=-117 [ 76.776855][ T1438] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2819: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 76.779110][ T1455] loop5: detected capacity change from 0 to 1024 [ 76.790360][ T1438] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.271: inode #1: comm syz.2.271: iget: illegal inode # [ 76.796480][ T1455] EXT4-fs: Ignoring removed nomblk_io_submit option [ 76.809309][ T1438] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.271: error while reading EA inode 1 err=-117 [ 76.827931][ T1438] EXT4-fs (loop2): 1 orphan inode deleted [ 76.833743][ T1438] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 76.835281][ T1455] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 76.859047][ T286] EXT4-fs (loop2): unmounting filesystem. [ 76.912946][ T1464] loop3: detected capacity change from 0 to 16 [ 77.675655][ T1232] EXT4-fs (loop5): unmounting filesystem. [ 77.750178][ T1491] loop2: detected capacity change from 0 to 7 [ 77.884490][ T1498] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.891757][ T1498] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.157349][ T1488] loop5: detected capacity change from 0 to 40427 [ 78.176723][ T1488] F2FS-fs (loop5): Invalid Fs Meta Ino: node(3) meta(0) root(3) [ 78.184590][ T1488] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 78.193255][ T1488] F2FS-fs (loop5): heap/no_heap options were deprecated [ 78.211388][ T1488] F2FS-fs (loop5): invalid crc value [ 78.226502][ T1488] F2FS-fs (loop5): Found nat_bits in checkpoint [ 78.250374][ T1504] netlink: 20 bytes leftover after parsing attributes in process `syz.4.287'. [ 78.312112][ T1488] F2FS-fs (loop5): Start checkpoint disabled! [ 78.334829][ T1488] F2FS-fs (loop5): Try to recover 2th superblock, ret: 0 [ 78.352120][ T1488] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 78.373866][ T28] kauditd_printk_skb: 46 callbacks suppressed [ 78.373878][ T28] audit: type=1400 audit(1765888635.044:379): avc: denied { read write open } for pid=1487 comm="syz.5.283" path="/10/bus/bus" dev="loop5" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 78.421776][ T1510] loop0: detected capacity change from 0 to 256 [ 78.431506][ T1408] kworker/u4:6: attempt to access beyond end of device [ 78.431506][ T1408] loop5: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 78.469794][ T1511] loop0: detected capacity change from 0 to 256 [ 78.521725][ T28] audit: type=1400 audit(1765888635.194:380): avc: denied { read write } for pid=1513 comm="syz.5.289" name="uinput" dev="devtmpfs" ino=262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 78.521845][ T1514] loop0: detected capacity change from 0 to 512 [ 78.552117][ T24] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 78.561037][ T1516] netlink: 'syz.5.289': attribute type 3 has an invalid length. [ 78.561089][ T1517] netlink: 'syz.5.289': attribute type 3 has an invalid length. [ 78.576583][ T1514] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 78.578235][ T28] audit: type=1400 audit(1765888635.194:381): avc: denied { open } for pid=1513 comm="syz.5.289" path="/dev/uinput" dev="devtmpfs" ino=262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 78.585313][ T1514] EXT4-fs (loop0): can't mount with journal_async_commit, fs mounted w/o journal [ 78.624808][ T28] audit: type=1400 audit(1765888635.284:382): avc: denied { block_suspend } for pid=1513 comm="syz.5.289" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 78.628560][ T1515] input: syz0 as /devices/virtual/input/input6 [ 78.650651][ T28] audit: type=1400 audit(1765888635.294:383): avc: denied { ioctl } for pid=1513 comm="syz.5.289" path="/dev/uinput" dev="devtmpfs" ino=262 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 78.654170][ T1519] netlink: 148 bytes leftover after parsing attributes in process `syz.3.291'. [ 78.681475][ T1498] syz.2.286 (1498) used greatest stack depth: 20896 bytes left [ 78.687448][ T1519] loop3: detected capacity change from 0 to 16 [ 78.699148][ T28] audit: type=1400 audit(1765888635.324:384): avc: denied { write } for pid=1518 comm="syz.3.291" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 78.701156][ T1519] erofs: Unknown parameter '€' [ 78.720320][ T28] audit: type=1400 audit(1765888635.324:385): avc: denied { nlmsg_write } for pid=1518 comm="syz.3.291" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 78.745973][ T28] audit: type=1400 audit(1765888635.354:386): avc: denied { ioctl } for pid=1518 comm="syz.3.291" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=19141 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 78.748254][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 78.775848][ T28] audit: type=1400 audit(1765888635.364:387): avc: denied { read } for pid=88 comm="acpid" name="event3" dev="devtmpfs" ino=839 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 78.793701][ T24] usb 5-1: unable to get BOS descriptor or descriptor too short [ 78.805424][ T28] audit: type=1400 audit(1765888635.364:388): avc: denied { open } for pid=88 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=839 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 78.807690][ T24] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 78.845242][ T24] usb 5-1: can't read configurations, error -71 [ 78.905906][ T1543] loop3: detected capacity change from 0 to 512 [ 78.930702][ T1543] EXT4-fs (loop3): 1 orphan inode deleted [ 78.936649][ T1543] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 78.946341][ T1543] ext4 filesystem being mounted at /43/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 79.119399][ T773] EXT4-fs error (device loop3): ext4_release_dquot:6839: comm kworker/u4:5: Failed to release dquot type 1 [ 79.142318][ T1554] FAULT_INJECTION: forcing a failure. [ 79.142318][ T1554] name failslab, interval 1, probability 0, space 0, times 1 [ 79.162074][ T1554] CPU: 1 PID: 1554 Comm: syz.5.298 Not tainted syzkaller #0 [ 79.169375][ T1554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 79.179436][ T1554] Call Trace: [ 79.182709][ T1554] [ 79.185635][ T1554] __dump_stack+0x21/0x24 [ 79.189963][ T1554] dump_stack_lvl+0xee/0x150 [ 79.194547][ T1554] ? __cfi_dump_stack_lvl+0x8/0x8 [ 79.199560][ T1554] ? __stack_depot_save+0x36/0x480 [ 79.204666][ T1554] dump_stack+0x15/0x24 [ 79.208814][ T1554] should_fail_ex+0x3d4/0x520 [ 79.213490][ T1554] __should_failslab+0xac/0xf0 [ 79.218249][ T1554] should_failslab+0x9/0x20 [ 79.222743][ T1554] slab_pre_alloc_hook+0x30/0x1e0 [ 79.227766][ T1554] kmem_cache_alloc_lru+0x49/0x280 [ 79.232870][ T1554] ? shmem_alloc_inode+0x28/0x40 [ 79.237816][ T1554] shmem_alloc_inode+0x28/0x40 [ 79.242574][ T1554] ? __cfi_shmem_alloc_inode+0x10/0x10 [ 79.248035][ T1554] new_inode_pseudo+0x70/0x1f0 [ 79.252795][ T1554] new_inode+0x28/0x1e0 [ 79.256943][ T1554] ? _raw_spin_lock+0x8e/0xe0 [ 79.261617][ T1554] shmem_get_inode+0x349/0xc20 [ 79.266388][ T1554] __shmem_file_setup+0x113/0x2b0 [ 79.271406][ T1554] shmem_file_setup+0x2f/0x40 [ 79.276078][ T1554] __se_sys_memfd_create+0x1e6/0x3b0 [ 79.281360][ T1554] __x64_sys_memfd_create+0x5b/0x70 [ 79.286556][ T1554] x64_sys_call+0x235/0x9a0 [ 79.291054][ T1554] do_syscall_64+0x4c/0xa0 [ 79.295466][ T1554] ? clear_bhb_loop+0x30/0x80 [ 79.300147][ T1554] ? clear_bhb_loop+0x30/0x80 [ 79.305095][ T1554] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 79.310995][ T1554] RIP: 0033:0x7fb92f58f749 [ 79.315414][ T1554] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 79.335014][ T1554] RSP: 002b:00007fb930502e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 79.343434][ T1554] RAX: ffffffffffffffda RBX: 000000000000050c RCX: 00007fb92f58f749 [ 79.351402][ T1554] RDX: 00007fb930502ef0 RSI: 0000000000000000 RDI: 00007fb92f614960 [ 79.359364][ T1554] RBP: 0000200000000200 R08: 00007fb930502bb7 R09: 00007fb930502e40 [ 79.367328][ T1554] R10: 000000000000000a R11: 0000000000000202 R12: 00002000000001c0 [ 79.375296][ T1554] R13: 00007fb930502ef0 R14: 00007fb930502eb0 R15: 00002000000007c0 [ 79.383270][ T1554] [ 79.467494][ T284] EXT4-fs (loop3): unmounting filesystem. [ 79.670428][ T1568] loop0: detected capacity change from 0 to 512 [ 79.767285][ T1568] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 79.778584][ T1568] ext4 filesystem being mounted at /78/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 79.811369][ T1580] loop4: detected capacity change from 0 to 256 [ 79.942399][ T285] EXT4-fs (loop0): unmounting filesystem. [ 79.996428][ T1584] netlink: 552 bytes leftover after parsing attributes in process `syz.0.307'. [ 80.006707][ T1584] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 80.048399][ T1585] netlink: 32 bytes leftover after parsing attributes in process `syz.0.307'. [ 80.061937][ T1585] loop0: detected capacity change from 0 to 1024 [ 80.068749][ T1585] EXT4-fs (loop0): can't mount with both data=journal and delalloc [ 80.228298][ T24] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 80.468414][ T773] Bluetooth: hci0: Frame reassembly failed (-84) [ 80.487116][ T1596] FAULT_INJECTION: forcing a failure. [ 80.487116][ T1596] name failslab, interval 1, probability 0, space 0, times 0 [ 80.503462][ T1596] CPU: 1 PID: 1596 Comm: syz.3.310 Not tainted syzkaller #0 [ 80.510763][ T1596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 80.520809][ T1596] Call Trace: [ 80.524077][ T1596] [ 80.526988][ T1596] __dump_stack+0x21/0x24 [ 80.531301][ T1596] dump_stack_lvl+0xee/0x150 [ 80.535869][ T1596] ? __cfi_dump_stack_lvl+0x8/0x8 [ 80.540873][ T1596] dump_stack+0x15/0x24 [ 80.545043][ T1596] should_fail_ex+0x3d4/0x520 [ 80.549706][ T1596] ? security_inode_alloc+0x33/0x120 [ 80.554973][ T1596] __should_failslab+0xac/0xf0 [ 80.559721][ T1596] should_failslab+0x9/0x20 [ 80.564218][ T1596] kmem_cache_alloc+0x3b/0x330 [ 80.568965][ T1596] ? slab_pre_alloc_hook+0x30/0x1e0 [ 80.574159][ T1596] security_inode_alloc+0x33/0x120 [ 80.579247][ T1596] inode_init_always+0x6fc/0x960 [ 80.584161][ T1596] new_inode_pseudo+0xa2/0x1f0 [ 80.588903][ T1596] new_inode+0x28/0x1e0 [ 80.593037][ T1596] ? _raw_spin_lock+0x8e/0xe0 [ 80.597695][ T1596] shmem_get_inode+0x349/0xc20 [ 80.602437][ T1596] __shmem_file_setup+0x113/0x2b0 [ 80.607440][ T1596] shmem_file_setup+0x2f/0x40 [ 80.612100][ T1596] __se_sys_memfd_create+0x1e6/0x3b0 [ 80.617365][ T1596] __x64_sys_memfd_create+0x5b/0x70 [ 80.622539][ T1596] x64_sys_call+0x235/0x9a0 [ 80.627020][ T1596] do_syscall_64+0x4c/0xa0 [ 80.631412][ T1596] ? clear_bhb_loop+0x30/0x80 [ 80.636071][ T1596] ? clear_bhb_loop+0x30/0x80 [ 80.640728][ T1596] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 80.646599][ T1596] RIP: 0033:0x7eff3978f749 [ 80.650991][ T1596] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 80.670594][ T1596] RSP: 002b:00007eff3a6d0e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 80.678989][ T1596] RAX: ffffffffffffffda RBX: 000000000000050c RCX: 00007eff3978f749 [ 80.686949][ T1596] RDX: 00007eff3a6d0ef0 RSI: 0000000000000000 RDI: 00007eff39814960 [ 80.694898][ T1596] RBP: 0000200000000200 R08: 00007eff3a6d0bb7 R09: 00007eff3a6d0e40 [ 80.703236][ T1596] R10: 000000000000000a R11: 0000000000000202 R12: 00002000000001c0 [ 80.711187][ T1596] R13: 00007eff3a6d0ef0 R14: 00007eff3a6d0eb0 R15: 00002000000007c0 [ 80.719140][ T1596] [ 80.761356][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 80.788882][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 80.800602][ T24] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 80.810562][ T1606] netlink: 4 bytes leftover after parsing attributes in process `syz.5.314'. [ 80.813810][ T24] usb 5-1: New USB device found, idVendor=1b1c, idProduct=0a16, bcdDevice= 0.00 [ 80.841589][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.853667][ T24] usb 5-1: config 0 descriptor?? [ 80.989837][ T1608] netlink: 12 bytes leftover after parsing attributes in process `syz.5.314'. [ 81.260834][ T24] hid-generic 0003:1B1C:0A16.0006: unbalanced collection at end of report description [ 81.270604][ T24] hid-generic: probe of 0003:1B1C:0A16.0006 failed with error -22 [ 81.593120][ T1620] loop3: detected capacity change from 0 to 512 [ 81.628267][ T24] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 81.628524][ T19] usb 5-1: USB disconnect, device number 14 [ 81.830055][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 81.863113][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 81.906860][ T24] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 81.920093][ T24] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 81.929467][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.935302][ T1626] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61726 sclass=netlink_route_socket pid=1626 comm=syz.5.320 [ 81.948365][ T24] usb 3-1: config 0 descriptor?? [ 81.951428][ T1626] netlink: 'syz.5.320': attribute type 12 has an invalid length. [ 82.015739][ T1629] loop4: detected capacity change from 0 to 512 [ 82.022426][ T1629] EXT4-fs: Ignoring removed nomblk_io_submit option [ 82.030214][ T1629] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 82.038186][ T1629] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802c11c, mo2=0102] [ 82.046174][ T1629] System zones: 1-12 [ 82.050592][ T1629] EXT4-fs (loop4): couldn't mount RDWR because of unsupported optional features (80) [ 82.060058][ T1629] EXT4-fs (loop4): Skipping orphan cleanup due to unknown ROCOMPAT features [ 82.068744][ T1629] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 82.088321][ T349] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 82.258621][ T349] usb 4-1: device descriptor read/64, error -71 [ 82.351577][ T1635] syz.5.322 (1635) used greatest stack depth: 20720 bytes left [ 82.961357][ T1593] Bluetooth: hci0: command 0x1003 tx timeout [ 82.998417][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 83.048341][ T349] usb 4-1: device descriptor read/64, error -71 [ 83.057071][ T1641] FAULT_INJECTION: forcing a failure. [ 83.057071][ T1641] name failslab, interval 1, probability 0, space 0, times 0 [ 83.081083][ T287] EXT4-fs (loop4): unmounting filesystem. [ 83.141371][ T24] plantronics 0003:047F:FFFF.0007: No inputs registered, leaving [ 83.169208][ T1641] CPU: 1 PID: 1641 Comm: syz.5.323 Not tainted syzkaller #0 [ 83.176537][ T1641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 83.186593][ T1641] Call Trace: [ 83.189867][ T1641] [ 83.192789][ T1641] __dump_stack+0x21/0x24 [ 83.197122][ T1641] dump_stack_lvl+0xee/0x150 [ 83.201707][ T1641] ? __cfi_dump_stack_lvl+0x8/0x8 [ 83.206736][ T1641] dump_stack+0x15/0x24 [ 83.210898][ T1641] should_fail_ex+0x3d4/0x520 [ 83.215575][ T1641] __should_failslab+0xac/0xf0 [ 83.220342][ T1641] should_failslab+0x9/0x20 [ 83.224843][ T1641] slab_pre_alloc_hook+0x30/0x1e0 [ 83.229872][ T1641] kmem_cache_alloc_lru+0x49/0x280 [ 83.234984][ T1641] ? __d_alloc+0x34/0x6c0 [ 83.239315][ T1641] __d_alloc+0x34/0x6c0 [ 83.243472][ T1641] ? asm_sysvec_reschedule_ipi+0x1b/0x20 [ 83.249104][ T1641] d_alloc_pseudo+0x1d/0x70 [ 83.253605][ T1641] alloc_file_pseudo+0xc8/0x1f0 [ 83.258453][ T1641] ? __cfi_alloc_file_pseudo+0x10/0x10 [ 83.263920][ T1641] ? shmem_get_inode+0x807/0xc20 [ 83.268860][ T1641] ? __kasan_check_write+0x14/0x20 [ 83.273997][ T1641] ? clear_nlink+0x8a/0xe0 [ 83.278413][ T1641] __shmem_file_setup+0x1df/0x2b0 [ 83.283440][ T1641] shmem_file_setup+0x2f/0x40 [ 83.288115][ T1641] __se_sys_memfd_create+0x1e6/0x3b0 [ 83.293440][ T1641] __x64_sys_memfd_create+0x5b/0x70 [ 83.298637][ T1641] x64_sys_call+0x235/0x9a0 [ 83.303141][ T1641] do_syscall_64+0x4c/0xa0 [ 83.307555][ T1641] ? clear_bhb_loop+0x30/0x80 [ 83.312229][ T1641] ? clear_bhb_loop+0x30/0x80 [ 83.316910][ T1641] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 83.322800][ T1641] RIP: 0033:0x7fb92f58f749 [ 83.327207][ T1641] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 83.346804][ T1641] RSP: 002b:00007fb930502e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 83.355212][ T1641] RAX: ffffffffffffffda RBX: 000000000000050c RCX: 00007fb92f58f749 [ 83.363177][ T1641] RDX: 00007fb930502ef0 RSI: 0000000000000000 RDI: 00007fb92f614960 [ 83.371141][ T1641] RBP: 0000200000000200 R08: 00007fb930502bb7 R09: 00007fb930502e40 [ 83.379105][ T1641] R10: 000000000000000a R11: 0000000000000202 R12: 00002000000001c0 [ 83.387071][ T1641] R13: 00007fb930502ef0 R14: 00007fb930502eb0 R15: 00002000000007c0 [ 83.395044][ T1641] [ 83.482822][ T24] plantronics 0003:047F:FFFF.0007: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 83.518923][ T1645] loop4: detected capacity change from 0 to 4096 [ 83.532979][ T1645] EXT4-fs (loop4): Test dummy encryption mode enabled [ 83.538323][ T349] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 83.551087][ T1645] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c028, mo2=0003] [ 83.559280][ T1645] System zones: 0-5 [ 83.566266][ T28] kauditd_printk_skb: 32 callbacks suppressed [ 83.566278][ T28] audit: type=1400 audit(1765888640.234:420): avc: denied { wake_alarm } for pid=1653 comm="syz.5.327" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 83.576571][ T1645] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 83.593663][ T28] audit: type=1400 audit(1765888640.234:421): avc: denied { mounton } for pid=1653 comm="syz.5.327" path="/20/file0" dev="tmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 83.708253][ T349] usb 4-1: device descriptor read/64, error -71 [ 83.978306][ T349] usb 4-1: device descriptor read/64, error -71 [ 84.098309][ T349] usb usb4-port1: attempt power cycle [ 84.358499][ T451] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 84.382369][ T287] EXT4-fs (loop4): unmounting filesystem. [ 84.395048][ T28] audit: type=1400 audit(1765888897.060:422): avc: denied { setopt } for pid=1664 comm="syz.4.329" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 84.423875][ T1665] loop4: detected capacity change from 0 to 2048 [ 84.442716][ T28] audit: type=1400 audit(1765888897.110:423): avc: denied { read } for pid=1666 comm="syz.5.330" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 84.496448][ T1665] loop7: detected capacity change from 0 to 16384 [ 84.508365][ T349] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 84.571828][ T28] audit: type=1400 audit(1765888897.230:424): avc: denied { getopt } for pid=1676 comm="syz.5.332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 84.592683][ T24] usb 3-1: USB disconnect, device number 11 [ 84.598843][ T349] usb 4-1: device descriptor read/8, error -71 [ 84.640135][ T28] audit: type=1400 audit(1765888897.300:425): avc: denied { mounton } for pid=1678 comm="syz.2.333" path="/72/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 84.684361][ T28] audit: type=1400 audit(1765888897.300:426): avc: denied { mount } for pid=1678 comm="syz.2.333" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 84.712293][ T451] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 84.723308][ T451] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 84.730990][ T1684] loop3: detected capacity change from 0 to 512 [ 84.733444][ T451] usb 1-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00 [ 84.748594][ T451] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.757212][ T349] usb 4-1: device descriptor read/8, error -71 [ 84.764982][ T1684] EXT4-fs: Ignoring removed nomblk_io_submit option [ 84.774323][ T451] usb 1-1: config 0 descriptor?? [ 84.787945][ T1684] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 84.812831][ T28] audit: type=1400 audit(1765888897.470:427): avc: denied { name_bind } for pid=1680 comm="syz.5.334" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 84.839055][ T1687] netlink: 4 bytes leftover after parsing attributes in process `syz.5.334'. [ 84.883820][ T1684] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802c11c, mo2=0102] [ 84.890237][ T28] audit: type=1400 audit(1765888897.480:428): avc: denied { node_bind } for pid=1680 comm="syz.5.334" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 84.892214][ T1684] System zones: 1-12 [ 84.916492][ T1684] EXT4-fs (loop3): couldn't mount RDWR because of unsupported optional features (80) [ 84.930181][ T1684] EXT4-fs (loop3): Skipping orphan cleanup due to unknown ROCOMPAT features [ 84.938904][ T1684] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 84.987569][ T451] samsung 0003:0419:0001.0008: unknown main item tag 0x0 [ 84.994839][ T451] samsung 0003:0419:0001.0008: unknown main item tag 0x0 [ 85.002021][ T451] samsung 0003:0419:0001.0008: unknown main item tag 0x0 [ 85.009162][ T451] samsung 0003:0419:0001.0008: unknown main item tag 0x0 [ 85.016203][ T451] samsung 0003:0419:0001.0008: unknown main item tag 0x0 [ 85.023768][ T451] samsung 0003:0419:0001.0008: hidraw0: USB HID v0.00 Device [HID 0419:0001] on usb-dummy_hcd.0-1/input0 [ 85.218275][ T24] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 85.230266][ T451] usb 1-1: USB disconnect, device number 6 [ 85.409256][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 13629, setting to 64 [ 85.420282][ T24] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 85.425704][ T28] audit: type=1400 audit(1765888898.090:429): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 85.433494][ T24] usb 5-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 85.494971][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.503902][ T24] usb 5-1: config 0 descriptor?? [ 85.510099][ T1690] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 85.528005][ T1713] loop2: detected capacity change from 0 to 128 [ 85.580049][ T284] EXT4-fs (loop3): unmounting filesystem. [ 86.218765][ T451] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 86.587149][ T1723] FAT-fs (loop2): error, invalid access to FAT (entry 0x0fff0000) [ 86.595123][ T1723] FAT-fs (loop2): Filesystem has been set read-only [ 86.604958][ T1723] FAT-fs (loop2): error, invalid access to FAT (entry 0x0fff0000) [ 86.631854][ T24] hid-generic 0003:0457:07DA.0009: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.4-1/input0 [ 86.648336][ T349] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 86.746812][ T349] usb 4-1: device descriptor read/8, error -71 [ 86.769455][ T451] usb 1-1: config 0 interface 0 altsetting 119 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 86.800827][ T451] usb 1-1: config 0 interface 0 altsetting 119 endpoint 0x81 has invalid wMaxPacketSize 0 [ 86.878281][ T451] usb 1-1: config 0 interface 0 altsetting 119 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 86.909369][ T349] usb 4-1: device descriptor read/8, error -71 [ 86.915979][ T1690] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.928931][ T1690] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.934534][ T451] usb 1-1: config 0 interface 0 has no altsetting 0 [ 86.938139][ T19] usb 5-1: USB disconnect, device number 15 [ 86.945040][ T451] usb 1-1: New USB device found, idVendor=056e, idProduct=00fb, bcdDevice= 0.00 [ 86.968988][ T451] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.977610][ T451] usb 1-1: config 0 descriptor?? [ 86.985958][ T1746] loop5: detected capacity change from 0 to 8192 [ 87.008814][ T1746] loop5: p1 < > p2 < > p3 p4 < > [ 87.013865][ T1746] loop5: partition table partially beyond EOD, truncated [ 87.021073][ T1746] loop5: p1 start 67108864 is beyond EOD, truncated [ 87.027677][ T1746] loop5: p2 start 4278190080 is beyond EOD, truncated [ 87.028300][ T349] usb usb4-port1: unable to enumerate USB device [ 87.034608][ T1746] loop5: p3 start 100859904 is beyond EOD, truncated [ 87.204065][ T1746] loop5: detected capacity change from 0 to 40427 [ 87.385071][ T451] elecom 0003:056E:00FB.000A: unknown main item tag 0x0 [ 87.392430][ T451] elecom 0003:056E:00FB.000A: unknown main item tag 0x0 [ 87.400202][ T451] elecom 0003:056E:00FB.000A: unknown main item tag 0x0 [ 87.407321][ T451] elecom 0003:056E:00FB.000A: unknown main item tag 0x0 [ 87.414706][ T451] elecom 0003:056E:00FB.000A: unknown main item tag 0x0 [ 87.421899][ T1759] netlink: 8 bytes leftover after parsing attributes in process `syz.5.354'. [ 87.431446][ T451] elecom 0003:056E:00FB.000A: hidraw0: USB HID v0.04 Device [HID 056e:00fb] on usb-dummy_hcd.0-1/input0 [ 87.594971][ T1763] loop4: detected capacity change from 0 to 128 [ 87.603927][ T451] usb 1-1: USB disconnect, device number 7 [ 87.607791][ T1766] syz.5.356[1766] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 87.610055][ T1766] syz.5.356[1766] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 87.621980][ T1763] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 87.642144][ T1763] ext4 filesystem being mounted at /60/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 88.232826][ T1777] loop0: detected capacity change from 0 to 512 [ 88.242671][ T1777] EXT4-fs (loop0): Test dummy encryption mode enabled [ 88.249886][ T1777] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 88.279330][ T1777] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802e01c, mo2=0102] [ 88.289648][ T1777] EXT4-fs (loop0): orphan cleanup on readonly fs [ 88.298851][ T1777] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.360: bg 0: block 361: padding at end of block bitmap is not set [ 88.345500][ T287] EXT4-fs (loop4): unmounting filesystem. [ 88.362794][ T1777] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6165: Corrupt filesystem [ 88.372611][ T1777] EXT4-fs error (device loop0): ext4_clear_blocks:883: inode #11: comm syz.0.360: attempt to clear invalid blocks 33619980 len 1 [ 88.387817][ T1777] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.360: invalid indirect mapped block 1811939328 (level 0) [ 88.402420][ T1777] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.360: invalid indirect mapped block 2185560079 (level 1) [ 88.420907][ T1777] EXT4-fs (loop0): 1 truncate cleaned up [ 88.426599][ T1777] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 88.451907][ T1777] EXT4-fs warning (device loop0): dx_probe:893: inode #2: comm syz.0.360: dx entry: limit 0 != root limit 125 [ 88.463640][ T1777] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.360: Corrupt directory, running e2fsck is recommended [ 88.574676][ T1783] capability: warning: `syz.2.363' uses deprecated v2 capabilities in a way that may be insecure [ 89.211018][ T285] EXT4-fs (loop0): unmounting filesystem. [ 89.249873][ T28] kauditd_printk_skb: 14 callbacks suppressed [ 89.249902][ T28] audit: type=1400 audit(1765888901.920:444): avc: denied { mount } for pid=1798 comm="syz.0.366" name="/" dev="ramfs" ino=21711 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 89.317982][ T28] audit: type=1400 audit(1765888901.960:445): avc: denied { write } for pid=1800 comm="syz.4.367" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 89.322109][ T1806] syz.4.368[1806] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 89.338759][ T1806] syz.4.368[1806] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 89.379607][ T1809] loop2: detected capacity change from 0 to 7 [ 89.475706][ T28] audit: type=1400 audit(1765888902.140:446): avc: denied { sqpoll } for pid=1810 comm="syz.2.370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 90.178491][ T28] audit: type=1400 audit(1765888902.700:447): avc: denied { connect } for pid=1812 comm="syz.0.371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 90.494497][ T1815] loop4: detected capacity change from 0 to 40427 [ 90.501729][ T1815] F2FS-fs (loop4): fault_injection options not supported [ 90.510207][ T1815] F2FS-fs (loop4): fault_type options not supported [ 90.517646][ T1815] F2FS-fs (loop4): invalid crc value [ 90.524032][ T1815] F2FS-fs (loop4): Found nat_bits in checkpoint [ 90.526168][ T1831] loop3: detected capacity change from 0 to 512 [ 91.204388][ T1831] EXT4-fs: Ignoring removed orlov option [ 91.207992][ T1815] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 91.210293][ T1831] ext4: Unknown parameter 'nouser_xattr' [ 91.264475][ T1838] loop0: detected capacity change from 0 to 2048 [ 91.274972][ T1841] netlink: 12 bytes leftover after parsing attributes in process `syz.2.378'. [ 91.294906][ T1838] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 91.309568][ T28] audit: type=1400 audit(1765888903.980:448): avc: denied { mounton } for pid=1837 comm="syz.0.377" path="/88/bus/bus" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 91.354882][ T28] audit: type=1400 audit(1765888904.020:449): avc: denied { remove_name } for pid=285 comm="syz-executor" name="lost+found" dev="loop0" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 91.410951][ T285] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 91.429831][ T28] audit: type=1400 audit(1765888904.080:450): avc: denied { rmdir } for pid=285 comm="syz-executor" name="lost+found" dev="loop0" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 91.452723][ T285] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6165: Corrupt filesystem [ 91.481892][ T1725] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 91.492124][ T1852] loop3: detected capacity change from 0 to 512 [ 91.493335][ T28] audit: type=1400 audit(1765888904.150:451): avc: denied { unlink } for pid=285 comm="syz-executor" name="file0" dev="loop0" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 91.499263][ T285] EXT4-fs (loop0): unmounting filesystem. [ 91.520812][ T28] audit: type=1400 audit(1765888904.150:452): avc: denied { unlink } for pid=285 comm="syz-executor" name="file1" dev="loop0" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 91.530768][ T1852] EXT4-fs: Ignoring removed bh option [ 91.549043][ T28] audit: type=1400 audit(1765888904.160:453): avc: denied { unmount } for pid=285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 91.578823][ T1852] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 91.591416][ T1852] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2196: inode #15: comm syz.3.381: corrupted in-inode xattr [ 91.603517][ T1852] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.381: couldn't read orphan inode 15 (err -117) [ 91.615675][ T1852] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 91.639239][ T1856] syz.0.380[1856] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 91.639304][ T1856] syz.0.380[1856] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 91.691904][ T1858] loop2: detected capacity change from 0 to 7 [ 91.715788][ T1858] loop2: [ 91.718025][ T1860] SELinux: security_context_str_to_sid (defcontext) failed with errno=-22 [ 91.748460][ T1725] usb 6-1: device descriptor read/64, error -71 [ 92.018258][ T451] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 92.018302][ T1725] usb 6-1: device descriptor read/64, error -71 [ 92.335857][ T284] EXT4-fs (loop3): unmounting filesystem. [ 92.404533][ T1895] syz.2.393[1895] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 92.404618][ T1895] syz.2.393[1895] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 92.454279][ T1904] xt_hashlimit: max too large, truncated to 1048576 [ 92.511780][ T451] usb 1-1: Using ep0 maxpacket: 8 [ 92.517978][ T451] usb 1-1: descriptor type invalid, skip [ 92.524423][ T451] usb 1-1: config 0 has no interfaces? [ 92.533954][ T451] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 92.543465][ T451] usb 1-1: New USB device strings: Mfr=252, Product=1, SerialNumber=3 [ 92.551683][ T451] usb 1-1: Product: syz [ 92.555845][ T451] usb 1-1: Manufacturer: syz [ 92.560472][ T451] usb 1-1: SerialNumber: syz [ 92.565668][ T451] usb 1-1: config 0 descriptor?? [ 92.578265][ T1725] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 92.692696][ T1922] netlink: 552 bytes leftover after parsing attributes in process `syz.2.401'. [ 92.702803][ T1922] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 92.738265][ T1725] usb 6-1: device descriptor read/64, error -71 [ 92.777216][ T1862] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.785739][ T1862] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.794189][ T19] usb 1-1: USB disconnect, device number 8 [ 92.970814][ T1926] loop4: detected capacity change from 0 to 256 [ 92.988398][ T1926] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 92.999057][ T1926] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 93.020291][ T1926] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000ff98, chksum : 0x7a885448, utbl_chksum : 0xe619d30d) [ 93.028270][ T1725] usb 6-1: device descriptor read/64, error -71 [ 93.158325][ T1725] usb usb6-port1: attempt power cycle [ 93.276305][ T1939] syz.3.406[1939] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 93.276351][ T1939] syz.3.406[1939] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 93.296774][ T1941] loop3: detected capacity change from 0 to 512 [ 93.315172][ T1941] EXT4-fs: Ignoring removed nomblk_io_submit option [ 93.323180][ T1941] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 93.331273][ T1941] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802c11c, mo2=0102] [ 93.339371][ T1941] System zones: 1-12 [ 93.343937][ T1941] EXT4-fs (loop3): couldn't mount RDWR because of unsupported optional features (80) [ 93.344896][ T1951] loop0: detected capacity change from 0 to 512 [ 93.353656][ T1941] EXT4-fs (loop3): Skipping orphan cleanup due to unknown ROCOMPAT features [ 93.368664][ T1941] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 93.424315][ T1956] loop0: detected capacity change from 0 to 512 [ 93.431043][ T1956] FAT-fs (loop0): Unrecognized mount option "umask=00000000000000>00000002" or missing value [ 93.454303][ T1958] loop5: detected capacity change from 0 to 4096 [ 93.461309][ T1958] EXT4-fs (loop5): Test dummy encryption mode enabled [ 93.469686][ T1958] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c028, mo2=0003] [ 93.477824][ T1958] System zones: 0-5 [ 93.482499][ T1958] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 93.768242][ T566] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 93.968303][ T566] usb 1-1: Using ep0 maxpacket: 8 [ 93.974397][ T566] usb 1-1: config 0 has an invalid interface number: 31 but max is 0 [ 93.982562][ T566] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 93.995421][ T566] usb 1-1: config 0 has no interface number 0 [ 94.003240][ T566] usb 1-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 94.012482][ T566] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.020772][ T566] usb 1-1: Product: syz [ 94.024929][ T566] usb 1-1: Manufacturer: syz [ 94.029537][ T566] usb 1-1: SerialNumber: syz [ 94.034544][ T566] usb 1-1: config 0 descriptor?? [ 94.368981][ T284] EXT4-fs (loop3): unmounting filesystem. [ 94.508902][ T1971] loop4: detected capacity change from 0 to 40427 [ 94.555517][ T1976] syz.2.415[1976] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 94.555799][ T1976] syz.2.415[1976] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 94.594294][ T1971] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 94.613364][ T1971] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 94.625895][ T1971] F2FS-fs (loop4): invalid crc value [ 94.643562][ T1974] device wireguard0 entered promiscuous mode [ 94.692884][ T1232] EXT4-fs (loop5): unmounting filesystem. [ 94.699794][ T1971] F2FS-fs (loop4): Found nat_bits in checkpoint [ 94.730383][ T1971] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 94.737497][ T1971] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 94.830155][ T1991] syz.3.418[1991] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 94.830276][ T1991] syz.3.418[1991] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 95.768248][ T1725] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 97.223192][ T2027] loop0: detected capacity change from 0 to 4096 [ 97.230714][ T2027] EXT4-fs (loop0): Test dummy encryption mode enabled [ 97.238185][ T2027] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c028, mo2=0003] [ 97.246656][ T2027] System zones: 0-5 [ 97.252021][ T2027] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 97.287738][ T1725] usb 5-1: device descriptor read/64, error -71 [ 97.294350][ T24] usb 1-1: USB disconnect, device number 9 [ 97.381763][ T2032] syz.3.429[2032] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 97.381809][ T2032] syz.3.429[2032] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 97.404704][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 97.404718][ T28] audit: type=1400 audit(1765889166.074:465): avc: denied { create } for pid=2035 comm="syz.3.430" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 97.405229][ T2036] netlink: 20 bytes leftover after parsing attributes in process `syz.3.430'. [ 97.450350][ T19] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 97.476955][ T2041] loop3: detected capacity change from 0 to 1024 [ 97.483693][ T2041] EXT4-fs: Ignoring removed bh option [ 97.489316][ T2041] journal_path: Lookup failure for './file1' [ 97.495338][ T2041] EXT4-fs: error: could not find journal device path [ 97.578259][ T1725] usb 5-1: device descriptor read/64, error -71 [ 97.658337][ T19] usb 6-1: Using ep0 maxpacket: 16 [ 97.664988][ T19] usb 6-1: unable to get BOS descriptor or descriptor too short [ 97.673331][ T19] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 83, changing to 7 [ 97.685637][ T19] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 97.694713][ T19] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.702740][ T19] usb 6-1: Product: syz [ 97.706911][ T19] usb 6-1: Manufacturer: syz [ 97.711545][ T19] usb 6-1: SerialNumber: syz [ 97.848276][ T1725] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 97.922621][ T19] usb 6-1: 2:1 : no or invalid class specific endpoint descriptor [ 97.930534][ T19] usb 6-1: 2:1: invalid format type 0x607 is detected, processed as PCM [ 97.938909][ T19] usb 6-1: 2:1 : sample bitwidth 173 in over sample bytes 1 [ 97.946295][ T19] usb 6-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 97.954575][ T19] usb 6-1: USB disconnect, device number 8 [ 98.008286][ T1725] usb 5-1: device descriptor read/64, error -71 [ 98.046654][ T2050] device veth0 entered promiscuous mode [ 98.052562][ T2051] netlink: 4 bytes leftover after parsing attributes in process `syz.2.434'. [ 98.061940][ T2051] device veth0 left promiscuous mode [ 98.085726][ T285] EXT4-fs (loop0): unmounting filesystem. [ 98.122156][ T2063] netlink: 12 bytes leftover after parsing attributes in process `syz.5.437'. [ 98.157940][ T2068] loop5: detected capacity change from 0 to 256 [ 98.171425][ T2068] exfat: Bad value for 'uid' [ 98.182543][ T2072] syz.0.441[2072] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 98.182612][ T2072] syz.0.441[2072] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 98.187219][ T28] audit: type=1326 audit(1765889422.853:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2069 comm="syz.2.440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f660778f749 code=0x7ffc0000 [ 98.229236][ T28] audit: type=1326 audit(1765889422.903:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2069 comm="syz.2.440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f660778f749 code=0x7ffc0000 [ 98.252982][ T28] audit: type=1326 audit(1765889422.903:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2069 comm="syz.2.440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f660778f749 code=0x7ffc0000 [ 98.276723][ T28] audit: type=1326 audit(1765889422.903:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2069 comm="syz.2.440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f660778f749 code=0x7ffc0000 [ 98.318387][ T1725] usb 5-1: device descriptor read/64, error -71 [ 98.329183][ T28] audit: type=1326 audit(1765889422.903:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2069 comm="syz.2.440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f660778f749 code=0x7ffc0000 [ 98.364045][ T2087] loop3: detected capacity change from 0 to 512 [ 98.364660][ T2086] loop5: detected capacity change from 0 to 512 [ 98.371283][ T2087] EXT4-fs: Ignoring removed nomblk_io_submit option [ 98.429199][ T2089] loop0: detected capacity change from 0 to 4096 [ 98.436246][ T2089] EXT4-fs (loop0): Test dummy encryption mode enabled [ 98.438989][ T28] audit: type=1326 audit(1765889422.923:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2069 comm="syz.2.440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f660778f749 code=0x7ffc0000 [ 98.449736][ T2087] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 98.466617][ T1725] usb usb5-port1: attempt power cycle [ 98.480556][ T28] audit: type=1326 audit(1765889422.923:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2069 comm="syz.2.440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f660778f749 code=0x7ffc0000 [ 98.480579][ T2089] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c028, mo2=0003] [ 98.508575][ T2087] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802c11c, mo2=0102] [ 98.519836][ T28] audit: type=1326 audit(1765889422.923:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2069 comm="syz.2.440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f660778f749 code=0x7ffc0000 [ 98.520354][ T2087] System zones: [ 98.561177][ T2086] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 98.599247][ T2097] overlayfs: './file1' not a directory [ 98.615325][ T2087] 1-12 [ 98.621840][ T2087] EXT4-fs (loop3): couldn't mount RDWR because of unsupported optional features (80) [ 98.636076][ T2086] ext4 filesystem being mounted at /46/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.655518][ T2087] EXT4-fs (loop3): Skipping orphan cleanup due to unknown ROCOMPAT features [ 98.704906][ T2087] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 98.804714][ T28] audit: type=1326 audit(1765889422.923:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2069 comm="syz.2.440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f660778f749 code=0x7ffc0000 [ 98.908121][ T2100] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 99.730264][ T2089] System zones: 0-5 [ 99.756141][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 99.764202][ T2089] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 99.873055][ T2100] syz.5.446 (2100) used greatest stack depth: 20304 bytes left [ 99.894034][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 99.906534][ T1232] EXT4-fs (loop5): unmounting filesystem. [ 99.916611][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 99.934068][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 99.966871][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 99.977100][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 100.014106][ T284] EXT4-fs (loop3): unmounting filesystem. [ 100.103494][ T2118] syz.2.452[2118] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 100.103538][ T2118] syz.2.452[2118] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 100.295210][ T2121] kvm: pic: non byte write [ 100.312332][ T2121] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3343437945 (53495007120 ns) > initial count (52285443328 ns). Using initial count to start timer. [ 101.144399][ T285] EXT4-fs (loop0): unmounting filesystem. [ 101.166806][ T2147] FAULT_INJECTION: forcing a failure. [ 101.166806][ T2147] name failslab, interval 1, probability 0, space 0, times 0 [ 101.179471][ T2147] CPU: 1 PID: 2147 Comm: syz.0.460 Not tainted syzkaller #0 [ 101.186741][ T2147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 101.196774][ T2147] Call Trace: [ 101.200034][ T2147] [ 101.202943][ T2147] __dump_stack+0x21/0x24 [ 101.207251][ T2147] dump_stack_lvl+0xee/0x150 [ 101.211813][ T2147] ? __cfi_dump_stack_lvl+0x8/0x8 [ 101.216811][ T2147] dump_stack+0x15/0x24 [ 101.220936][ T2147] should_fail_ex+0x3d4/0x520 [ 101.225592][ T2147] ? __anon_vma_prepare+0x51/0x420 [ 101.230686][ T2147] __should_failslab+0xac/0xf0 [ 101.235431][ T2147] should_failslab+0x9/0x20 [ 101.239902][ T2147] kmem_cache_alloc+0x3b/0x330 [ 101.244639][ T2147] ? __kasan_check_read+0x11/0x20 [ 101.249635][ T2147] __anon_vma_prepare+0x51/0x420 [ 101.254548][ T2147] wp_page_copy+0x10dd/0x15b0 [ 101.259201][ T2147] ? __this_cpu_preempt_check+0x13/0x20 [ 101.264722][ T2147] ? __mod_node_page_state+0x9e/0xd0 [ 101.269980][ T2147] ? __mod_lruvec_page_state+0x183/0x200 [ 101.275587][ T2147] ? fault_dirty_shared_page+0x310/0x310 [ 101.281197][ T2147] ? _raw_spin_lock+0x8e/0xe0 [ 101.285940][ T2147] ? cap_mmap_addr+0x165/0x2e0 [ 101.290677][ T2147] ? __kasan_slab_free+0x11/0x20 [ 101.295594][ T2147] ? slab_free_freelist_hook+0xc2/0x190 [ 101.301139][ T2147] ? vm_normal_page+0x1eb/0x200 [ 101.305966][ T2147] do_wp_page+0x9f2/0xfc0 [ 101.310275][ T2147] handle_mm_fault+0x10e4/0x2640 [ 101.315199][ T2147] ? __cfi_handle_mm_fault+0x10/0x10 [ 101.320463][ T2147] ? down_read_trylock+0x273/0x640 [ 101.325553][ T2147] ? lock_mm_and_find_vma+0x9e/0x320 [ 101.330822][ T2147] ? do_user_addr_fault+0x346/0x1050 [ 101.336100][ T2147] do_user_addr_fault+0x63b/0x1050 [ 101.341192][ T2147] exc_page_fault+0x51/0xb0 [ 101.345676][ T2147] asm_exc_page_fault+0x27/0x30 [ 101.348262][ T555] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 101.350509][ T2147] RIP: 0033:0x7efcdf250943 [ 101.362333][ T2147] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c [ 101.381918][ T2147] RSP: 002b:00007efce019d4a0 EFLAGS: 00010202 [ 101.387960][ T2147] RAX: 0000000000000400 RBX: 00007efce019d540 RCX: 00007efcd59f8000 [ 101.395908][ T2147] RDX: 00007efce019d6e0 RSI: 0000000000000001 RDI: 00007efce019d5e0 [ 101.403853][ T2147] RBP: 00000000000000f9 R08: 000000000000000a R09: 00000000000003d8 [ 101.411798][ T2147] R10: 00000000000003da R11: 00007efce019d540 R12: 0000000000000001 [ 101.419743][ T2147] R13: 00007efcdf42fc40 R14: 0000000000000020 R15: 00007efce019d5e0 [ 101.427703][ T2147] [ 101.431123][ T2147] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 101.441677][ T2147] loop0: detected capacity change from 0 to 512 [ 101.448769][ T2147] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 101.457381][ T2147] EXT4-fs (loop0): can't mount with journal_async_commit, fs mounted w/o journal [ 101.475790][ T2149] loop4: detected capacity change from 0 to 512 [ 101.482276][ T2149] EXT4-fs: Ignoring removed nomblk_io_submit option [ 101.489775][ T2149] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 101.497676][ T2149] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802c11c, mo2=0102] [ 101.505782][ T2149] System zones: 1-12 [ 101.510051][ T2149] EXT4-fs (loop4): couldn't mount RDWR because of unsupported optional features (80) [ 101.519866][ T2149] EXT4-fs (loop4): Skipping orphan cleanup due to unknown ROCOMPAT features [ 101.528714][ T2149] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 101.538308][ T555] usb 6-1: device descriptor read/64, error -71 [ 101.600261][ T2151] netlink: 'syz.3.462': attribute type 13 has an invalid length. [ 101.609004][ T2151] netlink: 24 bytes leftover after parsing attributes in process `syz.3.462'. [ 101.618331][ T2151] 8021q: VLANs not supported on wg2 [ 101.668678][ T2168] loop0: detected capacity change from 0 to 256 [ 101.681313][ T2168] FAT-fs (loop0): Directory bread(block 64) failed [ 101.687895][ T2168] FAT-fs (loop0): Directory bread(block 65) failed [ 101.694516][ T2168] FAT-fs (loop0): Directory bread(block 66) failed [ 101.701241][ T2168] FAT-fs (loop0): Directory bread(block 67) failed [ 101.708036][ T2168] FAT-fs (loop0): Directory bread(block 68) failed [ 101.715027][ T2168] FAT-fs (loop0): Directory bread(block 69) failed [ 101.721754][ T2168] FAT-fs (loop0): Directory bread(block 70) failed [ 101.728439][ T2168] FAT-fs (loop0): Directory bread(block 71) failed [ 101.735041][ T2168] FAT-fs (loop0): Directory bread(block 72) failed [ 101.742223][ T2168] FAT-fs (loop0): Directory bread(block 73) failed [ 101.765241][ T2168] syz.0.468: attempt to access beyond end of device [ 101.765241][ T2168] loop0: rw=2049, sector=1224, nr_sectors = 516 limit=256 [ 101.808258][ T555] usb 6-1: device descriptor read/64, error -71 [ 101.938303][ T24] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 102.078254][ T555] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 102.139297][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 102.150324][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 102.160074][ T24] usb 4-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00 [ 102.169126][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.177560][ T24] usb 4-1: config 0 descriptor?? [ 102.228281][ T555] usb 6-1: device descriptor read/64, error -71 [ 102.327055][ T287] EXT4-fs (loop4): unmounting filesystem. [ 102.430171][ T2184] loop0: detected capacity change from 0 to 128 [ 102.454354][ T2186] FAULT_INJECTION: forcing a failure. [ 102.454354][ T2186] name failslab, interval 1, probability 0, space 0, times 0 [ 102.467063][ T2186] CPU: 1 PID: 2186 Comm: syz.4.473 Not tainted syzkaller #0 [ 102.474353][ T2186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 102.484401][ T2186] Call Trace: [ 102.487664][ T2186] [ 102.490577][ T2186] __dump_stack+0x21/0x24 [ 102.494903][ T2186] dump_stack_lvl+0xee/0x150 [ 102.499473][ T2186] ? __cfi_dump_stack_lvl+0x8/0x8 [ 102.504481][ T2186] ? mas_prev+0x21c/0x3f0 [ 102.508797][ T2186] dump_stack+0x15/0x24 [ 102.512945][ T2186] should_fail_ex+0x3d4/0x520 [ 102.517608][ T2186] ? __anon_vma_prepare+0x9a/0x420 [ 102.522705][ T2186] __should_failslab+0xac/0xf0 [ 102.527450][ T2186] should_failslab+0x9/0x20 [ 102.531933][ T2186] kmem_cache_alloc+0x3b/0x330 [ 102.536697][ T2186] ? __anon_vma_prepare+0x51/0x420 [ 102.541794][ T2186] __anon_vma_prepare+0x9a/0x420 [ 102.546714][ T2186] wp_page_copy+0x10dd/0x15b0 [ 102.551372][ T2186] ? __this_cpu_preempt_check+0x13/0x20 [ 102.556898][ T2186] ? __mod_node_page_state+0x9e/0xd0 [ 102.562164][ T2186] ? __mod_lruvec_page_state+0x183/0x200 [ 102.567780][ T2186] ? fault_dirty_shared_page+0x310/0x310 [ 102.573397][ T2186] ? _raw_spin_lock+0x8e/0xe0 [ 102.578055][ T2186] ? cap_mmap_addr+0x165/0x2e0 [ 102.582799][ T2186] ? __kasan_slab_free+0x11/0x20 [ 102.587718][ T2186] ? slab_free_freelist_hook+0xc2/0x190 [ 102.593258][ T2186] ? vm_normal_page+0x1eb/0x200 [ 102.598091][ T2186] do_wp_page+0x9f2/0xfc0 [ 102.602402][ T2186] handle_mm_fault+0x10e4/0x2640 [ 102.607334][ T2186] ? __cfi_handle_mm_fault+0x10/0x10 [ 102.612599][ T2186] ? down_read_trylock+0x273/0x640 [ 102.617699][ T2186] ? lock_mm_and_find_vma+0x9e/0x320 [ 102.622964][ T2186] ? do_user_addr_fault+0x346/0x1050 [ 102.628229][ T2186] do_user_addr_fault+0x63b/0x1050 [ 102.633323][ T2186] exc_page_fault+0x51/0xb0 [ 102.637810][ T2186] asm_exc_page_fault+0x27/0x30 [ 102.642643][ T2186] RIP: 0033:0x7f380f650943 [ 102.647038][ T2186] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c [ 102.666715][ T2186] RSP: 002b:00007f38105df4a0 EFLAGS: 00010202 [ 102.672763][ T2186] RAX: 0000000000000400 RBX: 00007f38105df540 RCX: 00007f3805df8000 [ 102.680722][ T2186] RDX: 00007f38105df6e0 RSI: 0000000000000001 RDI: 00007f38105df5e0 [ 102.688684][ T2186] RBP: 00000000000000f9 R08: 000000000000000a R09: 00000000000003d8 [ 102.696638][ T2186] R10: 00000000000003da R11: 00007f38105df540 R12: 0000000000000001 [ 102.704596][ T2186] R13: 00007f380f82fc40 R14: 0000000000000020 R15: 00007f38105df5e0 [ 102.712553][ T2186] [ 102.715843][ T2186] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 102.726951][ T2186] loop4: detected capacity change from 0 to 512 [ 102.732717][ T2184] fuse: Unknown parameter 'ÿÿÿÿÿÿÿÿ0x0000000000000006' [ 102.740197][ T2186] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 102.748835][ T2186] EXT4-fs (loop4): can't mount with journal_async_commit, fs mounted w/o journal [ 102.778262][ T555] usb 6-1: device descriptor read/64, error -71 [ 102.807709][ T28] kauditd_printk_skb: 86 callbacks suppressed [ 102.807722][ T28] audit: type=1400 audit(1765889939.475:561): avc: denied { read } for pid=2192 comm="syz.4.476" path="socket:[23445]" dev="sockfs" ino=23445 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 102.837186][ T285] ------------[ cut here ]------------ [ 102.842746][ T285] WARNING: CPU: 0 PID: 285 at fs/inode.c:335 drop_nlink+0xc5/0x110 [ 102.850774][ T285] Modules linked in: [ 102.854660][ T285] CPU: 0 PID: 285 Comm: syz-executor Not tainted syzkaller #0 [ 102.862242][ T285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 102.872350][ T285] RIP: 0010:drop_nlink+0xc5/0x110 [ 102.877379][ T285] Code: 1b 48 8d bb b8 04 00 00 be 08 00 00 00 e8 f3 e6 f0 ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 bb 69 ac ff <0f> 0b eb 86 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 5e ff ff ff 4c [ 102.897014][ T285] RSP: 0018:ffffc9000d31fc38 EFLAGS: 00010293 [ 102.903101][ T285] RAX: ffffffff81c3c005 RBX: ffff888134b02de0 RCX: ffff88810d4f9440 [ 102.911131][ T285] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 102.919125][ T285] RBP: ffffc9000d31fc60 R08: 0000000000000004 R09: 0000000000000003 [ 102.927100][ T285] R10: fffff52001a63f78 R11: 1ffff92001a63f78 R12: dffffc0000000000 [ 102.935092][ T285] R13: 1ffff110269605c5 R14: ffff888134b02e28 R15: 0000000000000000 [ 102.943076][ T285] FS: 00005555609bd500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 102.952024][ T285] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 102.958614][ T285] CR2: ffffffffdfa50000 CR3: 00000001300e7000 CR4: 00000000003506b0 [ 102.966574][ T285] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 102.974550][ T285] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 102.982544][ T285] Call Trace: [ 102.985819][ T285] [ 102.988885][ T285] shmem_rmdir+0x5b/0x90 [ 102.993209][ T285] vfs_rmdir+0x393/0x500 [ 102.997455][ T285] incfs_kill_sb+0x105/0x220 [ 102.999128][ T28] audit: type=1400 audit(1765889939.645:562): avc: denied { read append } for pid=2160 comm="syz.3.465" name="ppp" dev="devtmpfs" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 103.002076][ T285] deactivate_locked_super+0xb5/0x120 [ 103.030508][ T285] deactivate_super+0xaf/0xe0 [ 103.032980][ T28] audit: type=1400 audit(1765889939.645:563): avc: denied { ioctl open } for pid=2160 comm="syz.3.465" path="/dev/ppp" dev="devtmpfs" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 103.035188][ T285] cleanup_mnt+0x45f/0x4e0 [ 103.035210][ T285] __cleanup_mnt+0x19/0x20 [ 103.067434][ T285] task_work_run+0x1db/0x240 [ 103.072037][ T285] ? __cfi_task_work_run+0x10/0x10 [ 103.077148][ T285] ? __x64_sys_umount+0x125/0x160 [ 103.082181][ T285] ? __cfi___x64_sys_umount+0x10/0x10 [ 103.087551][ T285] exit_to_user_mode_loop+0x9b/0xb0 [ 103.092779][ T285] exit_to_user_mode_prepare+0x87/0xd0 [ 103.098266][ T285] syscall_exit_to_user_mode+0x1a/0x30 [ 103.099665][ T2199] loop3: detected capacity change from 0 to 4096 [ 103.103726][ T285] do_syscall_64+0x58/0xa0 [ 103.103748][ T285] ? clear_bhb_loop+0x30/0x80 [ 103.116265][ T2199] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 103.119196][ T285] ? clear_bhb_loop+0x30/0x80 [ 103.132690][ T285] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 103.138612][ T285] RIP: 0033:0x7efcdf390a77 [ 103.143025][ T285] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 103.162670][ T285] RSP: 002b:00007ffe59960af8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 103.171094][ T285] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007efcdf390a77 [ 103.179082][ T285] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe59960bb0 [ 103.187054][ T285] RBP: 00007ffe59960bb0 R08: 0000000000000000 R09: 0000000000000000 [ 103.195041][ T285] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe59961c40 [ 103.203034][ T285] R13: 00007efcdf413d7d R14: 0000000000019182 R15: 00007ffe59961c80 [ 103.211030][ T285] [ 103.214051][ T285] ---[ end trace 0000000000000000 ]--- [ 103.219659][ T285] ================================================================== [ 103.227711][ T285] BUG: KASAN: null-ptr-deref in ihold+0x20/0x60 [ 103.233941][ T285] Write of size 4 at addr 0000000000000170 by task syz-executor/285 [ 103.241899][ T285] [ 103.244202][ T285] CPU: 1 PID: 285 Comm: syz-executor Tainted: G W syzkaller #0 [ 103.253113][ T285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 103.263144][ T285] Call Trace: [ 103.266405][ T285] [ 103.269319][ T285] __dump_stack+0x21/0x24 [ 103.273640][ T285] dump_stack_lvl+0xee/0x150 [ 103.278219][ T285] ? __cfi_dump_stack_lvl+0x8/0x8 [ 103.283228][ T285] ? ihold+0x20/0x60 [ 103.287105][ T285] ? ihold+0x20/0x60 [ 103.290979][ T285] print_report+0x3d/0x60 [ 103.295288][ T285] kasan_report+0x122/0x150 [ 103.299778][ T285] ? ihold+0x20/0x60 [ 103.303674][ T285] kasan_check_range+0x280/0x290 [ 103.308605][ T285] __kasan_check_write+0x14/0x20 [ 103.313521][ T285] ihold+0x20/0x60 [ 103.317222][ T285] vfs_rmdir+0x25f/0x500 [ 103.321452][ T285] incfs_kill_sb+0x105/0x220 [ 103.326044][ T285] deactivate_locked_super+0xb5/0x120 [ 103.331405][ T285] deactivate_super+0xaf/0xe0 [ 103.336066][ T285] cleanup_mnt+0x45f/0x4e0 [ 103.340464][ T285] __cleanup_mnt+0x19/0x20 [ 103.344865][ T285] task_work_run+0x1db/0x240 [ 103.349439][ T285] ? __cfi_task_work_run+0x10/0x10 [ 103.354540][ T285] ? __x64_sys_umount+0x125/0x160 [ 103.359551][ T285] ? __cfi___x64_sys_umount+0x10/0x10 [ 103.364904][ T285] exit_to_user_mode_loop+0x9b/0xb0 [ 103.370082][ T285] exit_to_user_mode_prepare+0x87/0xd0 [ 103.375519][ T285] syscall_exit_to_user_mode+0x1a/0x30 [ 103.380964][ T285] do_syscall_64+0x58/0xa0 [ 103.385363][ T285] ? clear_bhb_loop+0x30/0x80 [ 103.390024][ T285] ? clear_bhb_loop+0x30/0x80 [ 103.394684][ T285] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 103.400566][ T285] RIP: 0033:0x7efcdf390a77 [ 103.404961][ T285] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 103.424550][ T285] RSP: 002b:00007ffe59960af8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 103.432954][ T285] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007efcdf390a77 [ 103.440909][ T285] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe59960bb0 [ 103.448864][ T285] RBP: 00007ffe59960bb0 R08: 0000000000000000 R09: 0000000000000000 [ 103.456814][ T285] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe59961c40 [ 103.464770][ T285] R13: 00007efcdf413d7d R14: 0000000000019182 R15: 00007ffe59961c80 [ 103.472734][ T285] [ 103.475740][ T285] ================================================================== [ 103.483949][ T555] usb usb6-port1: attempt power cycle [ 103.491343][ T285] Disabling lock debugging due to kernel taint [ 103.497587][ T285] BUG: kernel NULL pointer dereference, address: 0000000000000170 [ 103.505377][ T285] #PF: supervisor write access in kernel mode [ 103.511431][ T285] #PF: error_code(0x0002) - not-present page [ 103.517426][ T285] PGD 134991067 P4D 134991067 PUD 0 [ 103.522720][ T285] Oops: 0002 [#1] PREEMPT SMP KASAN [ 103.525949][ T28] audit: type=1400 audit(1765889940.195:564): avc: denied { read } for pid=85 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 103.527909][ T285] CPU: 1 PID: 285 Comm: syz-executor Tainted: G B W syzkaller #0 [ 103.527928][ T285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 103.527937][ T285] RIP: 0010:ihold+0x26/0x60 [ 103.549863][ T28] audit: type=1400 audit(1765889940.195:565): avc: denied { search } for pid=85 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 103.558499][ T285] Code: 33 36 7c df 55 48 89 e5 41 56 53 48 89 fb e8 21 61 ac ff 48 8d bb 70 01 00 00 be 04 00 00 00 e8 30 de f0 ff 41 be 01 00 00 00 44 0f c1 b3 70 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 11 [ 103.558516][ T285] RSP: 0018:ffffc9000d31fc78 EFLAGS: 00010246 [ 103.558530][ T285] RAX: ffff88810d4f9400 RBX: 0000000000000000 RCX: ffff88810d4f9440 [ 103.569189][ T28] audit: type=1400 audit(1765889940.195:566): avc: denied { write } for pid=85 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 103.573044][ T285] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 103.573056][ T285] RBP: ffffc9000d31fc88 R08: dffffc0000000000 R09: fffffbfff0f2d8fd [ 103.594639][ T28] audit: type=1400 audit(1765889940.195:567): avc: denied { add_name } for pid=85 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 103.613864][ T285] R10: fffffbfff0f2d8fd R11: 1ffffffff0f2d8fc R12: ffff888134b02dec [ 103.613879][ T285] R13: dffffc0000000000 R14: 0000000000000001 R15: 0000000000000000 [ 103.613890][ T285] FS: 00005555609bd500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 103.613904][ T285] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 103.613916][ T285] CR2: 0000000000000170 CR3: 00000001300e7000 CR4: 00000000003506a0 [ 103.613929][ T285] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 103.620400][ T28] audit: type=1400 audit(1765889940.195:568): avc: denied { create } for pid=85 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 103.627913][ T285] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 103.627926][ T285] Call Trace: [ 103.627932][ T285] [ 103.627939][ T285] vfs_rmdir+0x25f/0x500 [ 103.771282][ T285] incfs_kill_sb+0x105/0x220 [ 103.775862][ T285] deactivate_locked_super+0xb5/0x120 [ 103.781227][ T285] deactivate_super+0xaf/0xe0 [ 103.785896][ T285] cleanup_mnt+0x45f/0x4e0 [ 103.790290][ T285] __cleanup_mnt+0x19/0x20 [ 103.794687][ T285] task_work_run+0x1db/0x240 [ 103.799258][ T285] ? __cfi_task_work_run+0x10/0x10 [ 103.804350][ T285] ? __x64_sys_umount+0x125/0x160 [ 103.809357][ T285] ? __cfi___x64_sys_umount+0x10/0x10 [ 103.814747][ T285] exit_to_user_mode_loop+0x9b/0xb0 [ 103.819925][ T285] exit_to_user_mode_prepare+0x87/0xd0 [ 103.825366][ T285] syscall_exit_to_user_mode+0x1a/0x30 [ 103.830808][ T285] do_syscall_64+0x58/0xa0 [ 103.835200][ T285] ? clear_bhb_loop+0x30/0x80 [ 103.839857][ T285] ? clear_bhb_loop+0x30/0x80 [ 103.844514][ T285] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 103.850392][ T285] RIP: 0033:0x7efcdf390a77 [ 103.854791][ T285] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 103.874370][ T285] RSP: 002b:00007ffe59960af8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 103.882763][ T285] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007efcdf390a77 [ 103.890716][ T285] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe59960bb0 [ 103.898669][ T285] RBP: 00007ffe59960bb0 R08: 0000000000000000 R09: 0000000000000000 [ 103.906630][ T285] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe59961c40 [ 103.914587][ T285] R13: 00007efcdf413d7d R14: 0000000000019182 R15: 00007ffe59961c80 [ 103.922551][ T285] [ 103.925552][ T285] Modules linked in: [ 103.929441][ T285] CR2: 0000000000000170 [ 103.933572][ T285] ---[ end trace 0000000000000000 ]--- [ 103.938999][ T285] RIP: 0010:ihold+0x26/0x60 [ 103.943495][ T285] Code: 33 36 7c df 55 48 89 e5 41 56 53 48 89 fb e8 21 61 ac ff 48 8d bb 70 01 00 00 be 04 00 00 00 e8 30 de f0 ff 41 be 01 00 00 00 44 0f c1 b3 70 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 11 [ 103.963087][ T285] RSP: 0018:ffffc9000d31fc78 EFLAGS: 00010246 [ 103.969136][ T285] RAX: ffff88810d4f9400 RBX: 0000000000000000 RCX: ffff88810d4f9440 [ 103.977089][ T285] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 103.985039][ T285] RBP: ffffc9000d31fc88 R08: dffffc0000000000 R09: fffffbfff0f2d8fd [ 103.992997][ T285] R10: fffffbfff0f2d8fd R11: 1ffffffff0f2d8fc R12: ffff888134b02dec [ 104.000947][ T285] R13: dffffc0000000000 R14: 0000000000000001 R15: 0000000000000000 [ 104.008896][ T285] FS: 00005555609bd500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 104.017801][ T285] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 104.024361][ T285] CR2: 0000000000000170 CR3: 00000001300e7000 CR4: 00000000003506a0 [ 104.032314][ T285] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 104.040261][ T285] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 104.048212][ T285] Kernel panic - not syncing: Fatal exception [ 104.054544][ T285] Kernel Offset: disabled [ 104.058844][ T285] Rebooting in 86400 seconds..