last executing test programs: 3m17.038471005s ago: executing program 4 (id=106): r0 = getpid() syz_pidfd_open(r0, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) ioctl$USBDEVFS_CONTROL(r4, 0xc0105500, &(0x7f0000000000)={0x80, 0x6, 0x301, 0x0, 0xe0, 0x101, 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f00000008c0)=@newtaction={0x88c, 0x30, 0x12f, 0x0, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x0, 0x6}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x6}}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xacd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x88c}}, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000200)=""/104, 0x68, 0x7fffffff) 3m16.0800541s ago: executing program 4 (id=112): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f0000000b80), 0x200008, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f00000002c0)='./bus\x00', 0x322020, &(0x7f0000000440)=ANY=[], 0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) inotify_init1(0x80000) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f00000031c0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f00000032c0)=ANY=[@ANYBLOB="020000000100030000000000040001000000000020"], 0x1c, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_socket_connect_nvme_tcp() r3 = socket$inet_tcp(0x2, 0x1, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000100), 0x0) dup2(0xffffffffffffffff, r3) 3m14.828652664s ago: executing program 4 (id=115): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGREP(r0, 0x80084503, &(0x7f0000000940)=""/168) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x17, 0x8, &(0x7f0000002c80)=ANY=[@ANYBLOB="6a0af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a26c7670568982b4e020f698393a1587aee89eb5603111ced3a0f3881f9c24561f1b2607995daa56f151905ea23c22624c12533d3984e835a3c61a7a9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0c884625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130bd030000c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2369149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300005d2c4df17c91e5451f1e44467a1ed30480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf607aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a9963b924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8241ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcfffffffffaffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda420d3e53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fd73c294290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd96058e7bf5b51cce33bd30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c9b2c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbd008fc1be8ea216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d253118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998e340aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1502a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c6d083cf2fb4598a4743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b9314dcdfadafff7ca3243a9c40a67ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b368a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f00000000010000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e35fd7834f63e022fe755f4007a4a899eaf52c4f491d8e97c862e29e4570600000091c674e6e549227d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb07005dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3badf2f6ffda1360c2786e16937ab61d7dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68ac3c64458943fc59c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18a6e452a31bde54ad3e16304d06a234f5fb3abc96478924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0cb3d67bbcd9b91072659d872976b796e2b81025edb5f45f785e2019ca659be7e8ae953325a27564fdab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfd1016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1bfeef448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d0f6c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e7cdd690c57bdfdc1f069f9491bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7b828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677ec97c5c6b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c51ff4040068ae2676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc215a18ca0265400abf38e9f367f2eb36eed56c037991d4026f8c743c1360a29d8177d1250ff303e207f02c33b6009abb9948d7e787c863998f0a5f1b3761e8006c8095dd0adb892e5f020a1e1032f3b4ad237e9573faa2bece611b2af8de93c3157af2a1797f696493dcda51b9c63f31f85f82689d23c1bb1b2027f6583ec9d1418e684183480cb2ce5dae947313be0000000000009b941d0c4e344baf15e63f581e9ead164a550d5d78864b0218ac8a33ee3433de56a991c72a046386223ff52c139ed3ebed412c78112524ee6b3385b2954cc89e2635d4d62d51b18b196716032e9fd4d8a5cefcd8c36125bfb92efc658fb0b7d2e933f9957fc78dc15eb3e0fc77cb84177e41db5a65c7dd3a4b3431d2f52c4c3971a83b12e399b3e91281fa1200591430fcd74269f3f14332b175225120432b0babc737be65257fbc833c096fcb8b1d5731e6f95e8259bc1aa73e75132b28aedf5bb34f5c33c319b4e25b951189d5c03815e0259448ed9c51e6e6c371e387ad82734990a37071c6225a2116db67b503f48460430b6fe6c57eca9b4ddd5c699d1883891f047ac9792eeca5f9465bfe4d6e5faf78d81b376415935d145151a47b23af15d61db53a5afcf0a792afa5e43e2f742449c1a4cbdad69dc5c1013aa36fba2013ffb4b65216618222469ab0a63d141cd11b31caadeea6e9ee58854684350bffc86f09fc563b1a68c03b828ab51fe2e36594ab83cb5a9d4417231b0988bc38b073a88054e8a066b89e24e5d651d891acfd13518f3538c9c6c91bba247ff3a5fd41934a932c7b23bfb7ac9f1a9bf72243e56508ab8e31d99287ad5bb0795e48598b4b752cf801e29d3919ae547b51392bd9bd74b8e2dd5f384b5d721d7a877227797807119746ba65f42c291e3510d80b6c0bcfad2e8bdc51f07c9916f2f9364381b633518d0fc14834aaa5c2302b6040cdc0e09626f3f86cd2eba4736d4c6e0fe8f778851f5484a179fc4c430258f06bf2c08c11a36ff4dd4bd8ff174feaff7c29154d751fbb7c122d515541a9c8421536e032f8fe5170925c83c91600b7e3d9827bf984d30a3193e1b2c3bda2494c67686a7b308ab19d884ff074071b14d8a016758b6aca4b2c9f904cda56ca14fe97b26ba61cc11c95c34e324bceb8d11ccb65744759fb602fdee6f09e07f60a8937da7b2196c6586824961386a81df193491fb050308c96227b84ef9d782b912aed6d2b86e2edb373a0d5a51e6a442eedfe0a3d4b11d8426e6fb6b50a302f03477ee5746189c3765d9c1de0cb0b32f44ef0c8d3e97aecd7a588ce76d4664f7cd4f2d73ef8030144fb459e85656831742dacfcfd018fb1620e5bd2d1913e3d069d0990ddfe4577a4c639485f5fbc7cfe8703842a8e00000000000000000000000000000044013357f3db4f3d593817847481eed577be82a6eb45fb9ffd62ce99fd5e9b5e5ddfada42b2c3a70ad4e21fd09351ce78496f71c28da5e626f6ce1f277021bc094f057a2e9d6f7cd5f778fcb4a6731e03b947740fc8b332eeb9e5104cc8d2bf6eed83907f084f00f616ef29ed7bcbef74319a2ee81ea70b09f0afc61b53b6f96b2edc7e7d76694a8ba9abcc01e1b4476fc254a13d62806ded5170546bc23065572f0a39140659f919f86e0059e22035aae1e954fbb9fa8cf0760cf3c7c1d3e822ec3aecfb1347e947a871c4347571b9f9f6aa21c2257335405cb065dd6e60cfe9d0e5cf4b6ac2f6efa6c4b3d9ce5a41b8b391c8da52e67b5a60c4f791d36fc1f0538301b554ebe115bf2974b17c97f20201fa192eacd8d7c4687e774e08e3d5cd17c5ad52ed0a32fe938ff1d8d4b87d44bab2b3118efb95014c16c5674d8c8c61cd0a8ba3a3f623e4542b30d193a0c81ece179ad4af7db3e3adfce43c886cf50f55b45294f11c1b4fcc42e435f7042651de550b12291cee52c1fb622f654b36918f5de6ac212e847d313bc13c4396e286a085566837d660b51165efb063826ebd341be48ebf9217bb2ea261fd990ed"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffdc0}, 0x41) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0xb, &(0x7f00000007c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00', r1}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=@getchain={0x4c, 0x66, 0x200, 0x7f, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xe, 0xfffb}, {0xc, 0x691cc01c23fdf777}, {0x8, 0x5}}, [{0x8, 0xb, 0x2}, {0x8, 0xb, 0x3}, {0x8}, {0x8}, {0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x10) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{}, &(0x7f0000000240), &(0x7f0000000280)=r1}, 0x20) r3 = socket$inet(0x2, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'team_slave_0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r6 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) syz_io_uring_setup(0x80497, &(0x7f0000000200)={0x0, 0x7279, 0x200, 0x4, 0x18e}, &(0x7f0000000000)=0x0, &(0x7f0000000280)) syz_io_uring_complete(r9) timerfd_create(0x0, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@newqdisc={0x84, 0x24, 0xf0b, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x54, 0x2, {{0x7f, 0x372, 0x401, 0x3, 0x3, 0xe}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x80000009, 0x800, 0x0, 0x0, 0x2, 0xfffffffffffffffc}}, @TCA_NETEM_RATE64={0xc, 0x8, 0xc15402c14a8e2e52}]}}}]}, 0x84}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x2}, 0x50) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r10, 0xffffffffffffffff, 0x0) 3m10.942643697s ago: executing program 4 (id=126): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x800, 0x0, 0x0) io_submit(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x17, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="180000000000000000000000000000007910000000002e7dff49cf964a430000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14}, 0x80) setgid(0x0) syz_open_dev$usbfs(&(0x7f00000000c0), 0x6, 0x400) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x300c056, &(0x7f0000000d80)={[{@noload}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@errors_remount}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x55a, &(0x7f0000000480)="$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") syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) creat(&(0x7f0000000240)='./bus\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r4, &(0x7f0000000280)='B', 0x1) sendfile(r4, r3, 0x0, 0x3ffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) socket$inet6_tcp(0xa, 0x1, 0x0) 3m8.275227061s ago: executing program 4 (id=132): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f00000001c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8a}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4) connect$inet6(r5, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee05", 0xa7, 0x840, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r5, r6, 0x0) syz_clone(0x60000400, 0x0, 0x0, 0x0, 0x0, 0x0) 3m6.734405023s ago: executing program 4 (id=136): syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x31}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) mount$incfs(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='./bus\x00', &(0x7f0000000640), 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./bus\x00', 0x0, 0x1164420, &(0x7f0000000840)={[], [{@fsname={'fsname', 0x3d, 'kfree\x00'}}]}) 3m6.377539798s ago: executing program 32 (id=136): syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x31}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) mount$incfs(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='./bus\x00', &(0x7f0000000640), 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./bus\x00', 0x0, 0x1164420, &(0x7f0000000840)={[], [{@fsname={'fsname', 0x3d, 'kfree\x00'}}]}) 1m38.667674578s ago: executing program 3 (id=450): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0200003d147350844e88e0464b544bca3aa778"], 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f0000000b80), 0x200008, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}]}) syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f00000002c0)='./bus\x00', 0x322020, &(0x7f0000000440)=ANY=[], 0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) inotify_init1(0x80000) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f00000031c0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f00000032c0)=ANY=[@ANYBLOB="020000000100030000000000040001000000000020"], 0x1c, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_socket_connect_nvme_tcp() r3 = socket$inet_tcp(0x2, 0x1, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000100), 0x0) dup2(0xffffffffffffffff, r3) 1m37.083956154s ago: executing program 3 (id=458): bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x10, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x39, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='module_request\x00', r0}, 0x10) socketpair(0xb, 0x6, 0x0, &(0x7f00000002c0)) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000080000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000100000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x18) mincore(&(0x7f0000f0c000/0x3000)=nil, 0x0, &(0x7f0000afaf0a)=""/246) 1m36.980209895s ago: executing program 3 (id=460): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0xfffffffffffffe15, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x19}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r1}, 0x10) process_madvise(0xffffffffffffffff, 0x0, 0x0, 0x64, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r0, 0x1000) r2 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000000)=0x9) 1m36.00736152s ago: executing program 3 (id=470): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2000000000010104000000200000000002000000060012400004000004815f88"], 0x20}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00', r2}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="b9ff03316844268cb89e14f0080047e0ffff00124000632f77fbac14fe16e000030a07080403fe80000020006558845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0x24, 0x60000000}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000061186d000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000006c0)={0x1, &(0x7f0000000500)=[{0x6, 0x43, 0x0, 0x7fff0000}]}) futex_waitv(0x0, 0x0, 0x0, 0x0, 0x1) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000001180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='net_dev_xmit\x00', r5}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='net_dev_xmit\x00', r6}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/2566], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="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", 0x0, 0x8, 0x60000000}, 0x1e) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="07000000040000008000000004"], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000700000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0xfffffffffffffc41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000300)='kmem_cache_free\x00', r9}, 0x18) r10 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r10, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r10, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r10, &(0x7f0000000380)={0x50, 0x0, r11, {0x7, 0x28, 0x0, 0x40488060, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffc}}, 0x50) write$FUSE_POLL(r4, &(0x7f0000000380)={0x18, 0x0, r11, {0x7ffffffc}}, 0x18) ioctl$KDGKBTYPE(r4, 0x4b33, &(0x7f0000000400)) 1m35.833740518s ago: executing program 3 (id=473): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x4}, 0x4) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000b00)={0xa, 0xfdfe, 0x100007, @remote, 0x6}, 0x1c) connect$pppl2tp(r1, &(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x8, 0x0, 0x2, 0x0, {0xa, 0x0, 0xf9d, @private2={0xfc, 0x2, '\x00', 0x1}}}}, 0x32) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34060}], 0x1) 1m35.742075517s ago: executing program 3 (id=474): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) (async) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0xb, [@fwd={0x5}, @enum={0xf, 0x2, 0x0, 0x6, 0x4, [{0xc, 0x6}, {0x8, 0x1}]}, @const={0x4, 0x0, 0x0, 0xa, 0x2}]}, {0x0, [0x61, 0x0, 0x5f, 0x0, 0x0, 0x0, 0x30, 0x61, 0x30]}}, &(0x7f00000004c0)=""/254, 0x57, 0xfe, 0x1, 0x1, 0x10000, @value=r3}, 0x28) renameat(r0, &(0x7f00000002c0)='./file0\x00', r0, &(0x7f00000003c0)='./file0\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x24, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff57, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x24, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff57, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000400)={@map=r7, r5, 0x36, 0x70e12c9f29420712, 0x0, @void, @value=r6}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r6}, 0x10) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) (async) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 1m19.053748575s ago: executing program 33 (id=474): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) (async) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0xb, [@fwd={0x5}, @enum={0xf, 0x2, 0x0, 0x6, 0x4, [{0xc, 0x6}, {0x8, 0x1}]}, @const={0x4, 0x0, 0x0, 0xa, 0x2}]}, {0x0, [0x61, 0x0, 0x5f, 0x0, 0x0, 0x0, 0x30, 0x61, 0x30]}}, &(0x7f00000004c0)=""/254, 0x57, 0xfe, 0x1, 0x1, 0x10000, @value=r3}, 0x28) renameat(r0, &(0x7f00000002c0)='./file0\x00', r0, &(0x7f00000003c0)='./file0\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x24, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff57, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x24, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff57, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000400)={@map=r7, r5, 0x36, 0x70e12c9f29420712, 0x0, @void, @value=r6}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r6}, 0x10) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) (async) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 20.304961895s ago: executing program 0 (id=819): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = socket(0x10, 0x80002, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00', r1}, 0x10) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) syz_clone(0x10000000, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x482, 0x0) ioctl$TCSETS(r2, 0x5402, 0x0) write$binfmt_aout(r2, &(0x7f0000000400)=ANY=[], 0xff2e) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x83, "00000000000000000000ffff00"}) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000080)={0x0, 0xfffffffd, 0x0, 0x6, 0x1, "e315bc1cc24ff7b7cdb242e1ff0aa6905446b3"}) r3 = syz_open_pts(r2, 0x0) r4 = dup3(r3, r2, 0x0) read$FUSE(r4, &(0x7f0000003f80)={0x2020}, 0x2020) read$watch_queue(r4, &(0x7f0000000340)=""/133, 0x85) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=@bridge_setlink={0x34, 0x13, 0xa29, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x3, 0x0, 0x1, {0x4, 0x5}}]}, @IFLA_GSO_MAX_SEGS={0x8}]}, 0x34}}, 0x0) 19.420518262s ago: executing program 0 (id=824): bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x901800, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9fa0000000f8701d1d10fc4020a1bf7b805000000b908001bfe0fae41d9a0000005009100918b7fae260f3200000f30660fc775022e0fba600c980f320f3566b85700c30fefd0", 0x4c}], 0x1, 0x1b, 0x0, 0xfffffe55) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x13, 0x51, &(0x7f0000000080)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5333}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) 19.384858856s ago: executing program 0 (id=825): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x94) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x482, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)={0x7, 0xd, 0x0, 0xffdffffc, 0x6, "00001000"}) write$binfmt_aout(r1, &(0x7f0000000400)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x83, "00000000000000000000ffff00"}) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000080)={0x0, 0xfffffffd, 0x0, 0x6, 0x1, "e315bc1cc24ff7b7cdb242e1ff0aa6905446b3"}) r2 = syz_open_pts(r1, 0x0) r3 = dup3(r2, r1, 0x0) read$FUSE(r3, &(0x7f0000003f80)={0x2020}, 0x2020) 18.679885545s ago: executing program 0 (id=827): bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffee2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r1 = syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file0\x00', 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="001e925c0ddf2b361f8402cf6217e13bf2609f9b7fcd4ec2e6fc0da9f15eb10d00000000000000d3247abdae42e94408d7994ca2dad5683f2f9b8575f6a72512c31e34d8abf34c662c3d6164793757eec28bf2fe37541cbf55848bf27913a9a6a3ee500c9b8af211ab4d"], 0x1, 0x5508, &(0x7f0000002480)="$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") r2 = syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x9000e0, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x101142, 0x56633bd1cf1d94b2) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c000001", @ANYRESOCT=r1, @ANYBLOB="595300000000000000086b00000008000300", @ANYRES64, @ANYBLOB="0c009900020000007200000004001d80", @ANYRES16, @ANYRES64=r3, @ANYRESDEC=r2], 0x2c}}, 0x0) setxattr(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0)=@known='trusted.syz\x00', 0x0, 0x0, 0x1) llistxattr(&(0x7f0000000040)='./file1\x00', 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x3, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='br_fdb_add\x00', r5}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='br_fdb_add\x00', r6}, 0x10) socket$nl_route(0x10, 0x3, 0x0) link(&(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0)='./file0\x00') r7 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r8, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000080000000000000000078d309df0000", @ANYRES32=r8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x53, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r9}, 0x10) syz_mount_image$ext4(0x0, &(0x7f0000000580)='./file0\x00', 0x19560c0, 0x0, 0x0, 0x0, 0x0) open(&(0x7f00000002c0)='./file0/file0\x00', 0x141840, 0x0) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, 0x0) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, 0x0) open(&(0x7f0000000200)='./file0/file0\x00', 0x400, 0x8) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'bridge0\x00'}) 15.940576296s ago: executing program 0 (id=837): socket$inet_udplite(0x2, 0x2, 0x88) socket(0x10, 0x80002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x94) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x482, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x7, 0xd, 0x0, 0xffdffffc, 0x6, "00001000"}) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x83, "00000000000000000000ffff00"}) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000080)={0x0, 0xfffffffd, 0x0, 0x6, 0x1, "e315bc1cc24ff7b7cdb242e1ff0aa6905446b3"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) read$FUSE(r2, &(0x7f0000003f80)={0x2020}, 0x2020) 15.148681984s ago: executing program 0 (id=841): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000030) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c000000100039042abd70000000000000000000", @ANYRES32=r1, @ANYBLOB="01180200031100002c0012800e00010069703665727370616e0000001800028008001500a8bc0d00040012"], 0x4c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB="6800000010000104000000000300000000000000", @ANYRES32=r1, @ANYBLOB="00000000051c0000480020800e00010069703665727370616e000000340002800400160002000000060010004e23000014000700fe8000000000000000000000000000aa00"/80], 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x12) 15.031525236s ago: executing program 34 (id=841): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000030) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c000000100039042abd70000000000000000000", @ANYRES32=r1, @ANYBLOB="01180200031100002c0012800e00010069703665727370616e0000001800028008001500a8bc0d00040012"], 0x4c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB="6800000010000104000000000300000000000000", @ANYRES32=r1, @ANYBLOB="00000000051c0000480020800e00010069703665727370616e000000340002800400160002000000060010004e23000014000700fe8000000000000000000000000000aa00"/80], 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x12) 7.724596007s ago: executing program 7 (id=875): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800007c5e0000f2000000000000000018b34c82a0ea192c6dbb110000bb0ec860fee784e686609538f11980edc2699740ab49e697b7121db7b88df229bcb66ba076f3c7912985a2d86330260cde45ac430de492a86d131f68074a93e7e47445b02a1a519830f54d439c0521f2bffa3a2603fa2209fe604bd89690b9434cf4c274ceab071e6b8d9819a74daf85a443fa6f507b078673ed3d84488bfbe5370f0d291d6a2d472483648b5ec9030d763b7d4984db9dd072760355d6b5a27cd9a0c39475cd3ad478167dccdd"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x2ff, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x2}, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xf, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x3, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[], 0x0, 0x7ff}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x35c, 0x0) pread64(r4, &(0x7f0000002440)=""/68, 0x44, 0x5) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r5, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xa, 0x101, 0x7ffc, 0xcc}, 0x50) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/rcu_normal', 0x1e1242, 0xfe) bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000081801000020696c2500000000002020207b1af8ff00000000bfa100000000000045b10000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2bed}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 6.022575765s ago: executing program 7 (id=881): syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x0, &(0x7f0000000640), 0x1, 0x5b3, &(0x7f0000000680)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000074"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) clock_gettime(0x426f864dbf73064e, 0x0) r5 = socket(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newlink={0x7c, 0x10, 0xffffffffffffffff, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x13497, 0x871e4b6054fa9fac}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x30, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r7}, @IFLA_IPTUN_ENCAP_SPORT={0x6, 0x11, 0x4e22}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x2}, @IFLA_IPTUN_PMTUDISC={0x5, 0xa, 0x1}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x9}, @IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) 4.920654454s ago: executing program 7 (id=888): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x8, 0x0, 0x0, 0x40f00, 0x7, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000002c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd6002adf700083a"], 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2c24, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x64, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x400}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="60d21e"], 0x0, 0x0, 0x0, 0x0}, 0x0) 4.323009313s ago: executing program 1 (id=891): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$null(0xffffffffffffff9c, 0x0, 0x1e1640, 0x0) ioctl$USBDEVFS_ALLOW_SUSPEND(r1, 0x5522) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="480000000001010400000000000000000a008000040001802400028014000180080001006401010008000200e00000010ca463800500010000000000000007400000000004000680dcfe1396183e2f766a4dae0a6115c178e265cec3997c604304592e356771d4298912f85f495be6452d4f87ab3d825528a769dd6bd6730a901d2d87e07a630caa721a853b73e7968cf984b1e63c09f1c4d3d5c69025e80e0e22d1eb5beea5dd776d5a31624e26158f8386e289657fbdc398faf06e7d5698d1134648df606e85fe360057025fce8e4a48ff086dbd"], 0x48}}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d000000850000002a00000095", @ANYRESDEC=0x0, @ANYRES16=r0, @ANYRESOCT=r0], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r5}, &(0x7f0000000340), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000400)='net_dev_xmit\x00', r8}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="b9ff03076844268cb89e14f005dd1be0ffff00fe3a21632f77fbac14141de007031762079f4b4d2f87e5feca6aab845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0x8, 0x60000000}, 0x1e) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r6}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r9}, 0x10) syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7736, 0x80, 0x2, 0x34f}, &(0x7f00000000c0), &(0x7f0000000080)) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x218}}, 0x0) getsockname$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040020000010000000", @ANYRES32=r11, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000010c0)=ANY=[@ANYBLOB="3c0000001800010000000000000000000a00000000000000000000000c00090008000000", @ANYBLOB="14000500fe80917a952a643f152befd0599ecd85"], 0x3c}}, 0x0) 4.246218101s ago: executing program 1 (id=892): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x8, 0x0, 0x0, 0x40f00, 0x7, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000002c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd6002adf700083a"], 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2c24, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x64, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x400}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="60d21e"], 0x0, 0x0, 0x0, 0x0}, 0x0) 4.011116424s ago: executing program 5 (id=894): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0200003d147350844e88e0464b544bca3aa778"], 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f0000000b80), 0x200008, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f00000002c0)='./bus\x00', 0x322020, &(0x7f0000000440)=ANY=[], 0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) inotify_init1(0x80000) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f00000031c0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000100)='system.posix_acl_access\x00', 0x0, 0x1c, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_socket_connect_nvme_tcp() r3 = socket$inet_tcp(0x2, 0x1, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000100), 0x0) dup2(0xffffffffffffffff, r3) 3.994870116s ago: executing program 6 (id=895): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0200003d147350844e88e0464b544bca3aa778000400000006841b43d7cf26054d288a38f0aeb96b10"], 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f0000000b80), 0x200008, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f00000002c0)='./bus\x00', 0x322020, &(0x7f0000000440)=ANY=[], 0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r3 = inotify_init1(0x80000) inotify_add_watch(r3, &(0x7f0000000240)='.\x00', 0x60000726) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f0000000140)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f00000031c0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f00000032c0)=ANY=[@ANYBLOB="020000000100030000000000040001000000000020"], 0x1c, 0x0) 3.663952228s ago: executing program 2 (id=896): bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9fa0000000f8701d1d10fc4020a1bf7b805000000b908001bfe0fae41d9a0000005009100918b7fae260f3200000f30660fc775022e0fba600c980f320f3566b85700c30fefd0", 0x4c}], 0x1, 0x1b, 0x0, 0xfffffe55) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x13, 0x51, &(0x7f0000000080)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5333}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_kvm_setup_cpu$x86(r0, r1, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 3.526075572s ago: executing program 2 (id=897): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) socket(0x10, 0x80002, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00', r1}, 0x10) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r2 = syz_clone(0x10000000, 0x0, 0x0, 0x0, &(0x7f00000003c0), &(0x7f00000004c0)) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x482, 0x0) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000000)={0x7, 0xd, 0x0, 0xffdffffc, 0x6, "00001000"}) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x83, "00000000000000000000ffff00"}) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000080)={0x0, 0xfffffffd, 0x0, 0x6, 0x1, "e315bc1cc24ff7b7cdb242e1ff0aa6905446b3"}) r4 = dup3(0xffffffffffffffff, r3, 0x0) read$FUSE(r4, &(0x7f0000003f80)={0x2020}, 0x2020) read$watch_queue(r4, &(0x7f0000000340)=""/133, 0x85) read$FUSE(r4, 0x0, 0x0) ptrace$PTRACE_GETSIGMASK(0x420a, r2, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r5, 0x2000012, 0xff0, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) open(0x0, 0x143142, 0x80) syz_usb_connect(0x2, 0x2d, 0x0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0}) 3.198555404s ago: executing program 5 (id=898): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) socket(0x10, 0x80002, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00', r1}, 0x10) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r2 = syz_clone(0x10000000, 0x0, 0x0, 0x0, &(0x7f00000003c0), &(0x7f00000004c0)) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x482, 0x0) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000000)={0x7, 0xd, 0x0, 0xffdffffc, 0x6, "00001000"}) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x83, "00000000000000000000ffff00"}) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000080)={0x0, 0xfffffffd, 0x0, 0x6, 0x1, "e315bc1cc24ff7b7cdb242e1ff0aa6905446b3"}) r4 = dup3(0xffffffffffffffff, r3, 0x0) read$FUSE(r4, &(0x7f0000003f80)={0x2020}, 0x2020) read$watch_queue(r4, &(0x7f0000000340)=""/133, 0x85) read$FUSE(r4, 0x0, 0x0) ptrace$PTRACE_GETSIGMASK(0x420a, r2, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r5, 0x2000012, 0xff0, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) open(0x0, 0x143142, 0x80) syz_usb_connect(0x2, 0x2d, 0x0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0}) 3.015075592s ago: executing program 2 (id=899): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0200003d147350844e88e0464b544bca3aa778000400000006841b43d7cf26054d288a38f0aeb96b10"], 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f0000000b80), 0x200008, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f00000002c0)='./bus\x00', 0x322020, &(0x7f0000000440)=ANY=[], 0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r3 = inotify_init1(0x80000) inotify_add_watch(r3, 0x0, 0x60000726) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f00000031c0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f00000032c0)=ANY=[@ANYBLOB="020000000100030000000000040001000000000020"], 0x1c, 0x0) 2.621962831s ago: executing program 7 (id=900): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x1808014, &(0x7f0000000600)=ANY=[@ANYBLOB="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"/716], 0x5, 0x558b, &(0x7f00000079c0)="$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") syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = open(&(0x7f0000000340)='./file1\x00', 0x185102, 0x38) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x28011, r0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./file1\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x1219, &(0x7f0000001100)="$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") sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20094) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file2\x00', 0x280004, &(0x7f0000000400), 0xfc, 0x564, &(0x7f00000008c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1e5) open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x8005, 0x0, 0x0, 0x19, 0x1c, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x141042, 0x0) pwritev2(r2, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) syz_open_procfs(0x0, &(0x7f0000000740)='net/vlan/vlan1\x00') recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000780)=ANY=[@ANYBLOB="18020000000000000000000000000000850000004100000095000000000000006e94a9329d838f20b58579da07fec753a1ea9ec82d3a91961bc6cb79ae"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.53661118s ago: executing program 5 (id=901): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x22) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c250000000007"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000040)=@generic={0x1, 0x9000000000000, 0x4}) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000040000000001, 0xffffffffffffffff}) write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r6}, 0x18) bpf$ENABLE_STATS(0x20, 0x0, 0x0) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r4, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x2e) ioctl$KVM_CAP_EXIT_ON_EMULATION_FAILURE(r8, 0x4068aea3, &(0x7f0000000500)={0xcc, 0x0, 0x1}) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f0000000280)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.535976809s ago: executing program 6 (id=902): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$null(0xffffffffffffff9c, 0x0, 0x1e1640, 0x0) ioctl$USBDEVFS_ALLOW_SUSPEND(r1, 0x5522) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="480000000001010400000000000000000a008000040001802400028014000180080001006401010008000200e00000010ca463800500010000000000000007400000000004000680dcfe1396183e2f766a4dae0a6115c178e265cec3997c604304592e356771d4298912f85f495be6452d4f87ab3d825528a769dd6bd6730a901d2d87e07a630caa721a853b73e7968cf984b1e63c09f1c4d3d5c69025e80e0e22d1eb5beea5dd776d5a31624e26158f8386e289657fbdc398faf06e7d5698d1134648df606e85fe360057025fce8e4a48ff086dbd"], 0x48}}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d000000850000002a00000095", @ANYRESDEC=0x0, @ANYRES16=r0, @ANYRESOCT=r0], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r5}, &(0x7f0000000340), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000400)='net_dev_xmit\x00', r8}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="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", 0x0, 0x8, 0x60000000}, 0x1e) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r6}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r9}, 0x10) syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7736, 0x80, 0x2, 0x34f}, &(0x7f00000000c0), &(0x7f0000000080)) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x218}}, 0x0) getsockname$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040020000010000000", @ANYRES32=r11, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000010c0)=ANY=[@ANYBLOB="3c0000001800010000000000000000000a00000000000000000000000c00090008000000", @ANYBLOB="14000500fe80917a952a643f152befd0599ecd85"], 0x3c}}, 0x0) 2.451311918s ago: executing program 6 (id=903): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() syz_io_uring_setup(0x2777, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x4000, &(0x7f0000000400)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40}}, {@mblk_io_submit}, {@orlov}, {@test_dummy_encryption}, {@nobarrier}, {@nodelalloc}, {@noinit_itable}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}]}, 0x1, 0xbaf, &(0x7f00000017c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40086610, &(0x7f0000000140)={0x1, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000000980)={{0x0, 0x3, 0xa, 0x8, 0x100, 0x7, 0x80000001, 0x1, 0x0, 0x4, 0x1, 0x6, 0x8b, 0xfffffffffffffff6, 0x1}}) ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, &(0x7f0000002040)={r3, 0x8}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080", @ANYRES32=0x0, @ANYBLOB], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x41, &(0x7f0000000340)=0x63ba, 0x4) sendmmsg$inet6(r6, &(0x7f0000006040)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0xfe42, @loopback, 0xf5ef}, 0x1c, 0x0}}], 0x1, 0x1) recvmmsg(r6, &(0x7f0000000940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001f80)=""/130, 0x20}, 0xdb30}], 0x1, 0x40002042, 0x0) 2.12582352s ago: executing program 5 (id=904): io_setup(0x6, &(0x7f0000000140)) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xc, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000850000009e0000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000800000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) syz_open_dev$usbfs(&(0x7f00000000c0), 0x1ff, 0x41101) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socket$nl_xfrm(0x10, 0x3, 0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ffffffe}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r5}, 0x10) timer_getoverrun(0x0) 2.106637512s ago: executing program 2 (id=905): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[], 0x118) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x33, &(0x7f0000000000)=0x7, 0x4) getsockopt$inet6_buf(r2, 0x29, 0x6, &(0x7f0000000680)=""/35, &(0x7f0000000080)=0x23) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r1, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x14, 0xc, 0x4}) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaa"], 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0xff80}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 2.075608985s ago: executing program 2 (id=906): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r0, 0x40046210, &(0x7f0000000040)=0x1) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@empty, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@private2}}, &(0x7f0000000180)=0xe8) quotactl_fd$Q_GETINFO(r0, 0xffffffff80000502, r2, &(0x7f00000001c0)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000340)={'\x00', 0xf38b, 0x7fff, 0x4, 0x3ff, 0x3, 0x0}) r5 = socket$inet(0x2, 0x80009, 0x2) r6 = openat$cgroup_int(0xffffffffffffffff, &(0x7f00000003c0)='cgroup.max.depth\x00', 0x2, 0x0) r7 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000400)={0xffffffffffffffff, r1, 0x25, 0x0, @void}, 0x10) sendmsg$netlink(r3, &(0x7f0000000500)={&(0x7f0000000200)=@kern={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)=[{&(0x7f0000000240)={0xbc, 0x38, 0x1b88, 0x70bd25, 0x25dfdbfb, "", [@generic="65e7311bd2acf9e08546c6251f2d662aec1571fb5ec4674b854954520438421ffc08a79b99be5cb874a1e775758acb942b10960c44a8af39ed91e344e65558002e200bc4d2305a50b230c702829e666c5ef9e225d2ed044bb33f4b112b52ddac8c833f2b783226112a1bcd8eb5451d57ca629cce31c4e514de5d080b24f59be0600c0d38c68be946749b017ff8393f0b3837254f0214cffc140900380ee4e930bcdf2f75eb9e306a6f40"]}, 0xbc}], 0x1, &(0x7f0000000440)=[@cred={{0x1c, 0x1, 0x2, {r4, r2, 0xffffffffffffffff}}}, @rights={{0x34, 0x1, 0x1, [r0, r0, r5, r6, r0, r0, r0, 0xffffffffffffffff, r0]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [r0, r0, r0, r0, r0, r0, r0, r7, r0]}}], 0xa8, 0x4}, 0x8000) r8 = epoll_create(0x1) clock_gettime(0x0, &(0x7f00000005c0)={0x0, 0x0}) epoll_pwait2(r8, &(0x7f0000000540)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, &(0x7f0000000600)={r9, r10+60000000}, &(0x7f0000000640)={[0x1ff]}, 0x8) ioctl$FS_IOC_ENABLE_VERITY(r7, 0x40806685, &(0x7f0000000780)={0x1, 0x2, 0x1000, 0x75, &(0x7f0000000680)="3ff775fdb47f9e73dcb1bf562210d0675ab7c312808ec6254f39f67cd30b6a07d14b464d22b5ae56f88e5b3b0b35819cb8fb4128359fbef66de085c37a4e0bde4ef9317e1d9d19ea7a57b1f9125224622214dc047cc4cf4f046ba1d2419f6d692e000dd8f94b7ea6a54e82b23f5770b3cc7b04a326", 0x47, 0x0, &(0x7f0000000700)="ab2db00a8bcd9408e398e0adb1cab08c730efa7d2b0be93d00ec3161c8ad51bbcd91e600773fa19d580a76e3954faa6de667ab82f3b1ea4d3722e467232aabf6bd3b2c125166d8"}) ioctl$F2FS_IOC_SEC_TRIM_FILE(r3, 0x4018f514, &(0x7f0000000800)={0x0, 0x30, 0x2}) r11 = accept$unix(0xffffffffffffffff, &(0x7f0000000840)=@abs, &(0x7f00000008c0)=0x6e) connect$unix(r11, &(0x7f0000000900)=@abs={0x1, 0x0, 0x4e22}, 0x6e) r12 = creat(&(0x7f0000000980)='./file0\x00', 0x80) sendmsg$nl_route_sched(r12, &(0x7f0000000c00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000a00)=@newqdisc={0x1a8, 0x24, 0x800, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x9, 0xfff2}, {0x5, 0x3}, {0xffff, 0xfff2}}, [@TCA_STAB={0xa4, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1, 0x1f, 0x6, 0x8, 0x2, 0x6, 0x6, 0x3}}, {0xa, 0x2, [0x6, 0x4, 0x4]}}, {{0x1c, 0x1, {0x0, 0x8, 0x5, 0x1, 0x1, 0x4, 0x80, 0x5}}, {0xe, 0x2, [0xb7e9, 0x100, 0x9, 0x5, 0xfff]}}, {{0x1c, 0x1, {0x0, 0x8, 0x3, 0x2fa, 0x0, 0x10000, 0x8, 0x1}}, {0x6, 0x2, [0x0]}}, {{0x1c, 0x1, {0x5, 0xae, 0xcbb, 0x33f, 0x0, 0x3, 0x1, 0x3}}, {0xa, 0x2, [0x8, 0x81, 0xdcc]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xc13}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x4}, @TCA_STAB={0x58, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x4, 0x0, 0x5, 0x2, 0x0, 0x1, 0x2, 0x7}}, {0x12, 0x2, [0x2c, 0xd, 0xeec, 0x219, 0xfba4, 0x9, 0xff]}}, {{0x1c, 0x1, {0x6, 0x5, 0x1, 0xd46, 0x2, 0x1, 0x2, 0x1}}, {0x6, 0x2, [0x6]}}]}, @TCA_STAB={0x78, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x1, 0x9, 0x0, 0x1, 0x5, 0xb, 0x5}}, {0xe, 0x2, [0x80, 0xd, 0x2, 0xde0, 0x7]}}, {{0x1c, 0x1, {0x30, 0xf0, 0x6, 0x0, 0x2, 0x1, 0x3ec1, 0x2}}, {0x8, 0x2, [0x8, 0x19]}}, {{0x1c, 0x1, {0xc6, 0x9, 0x3, 0x5, 0x4, 0x4, 0x101, 0x2}}, {0x8, 0x2, [0x3, 0x0]}}]}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x10}, 0x8000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000c40)='./cgroup/syz0\x00', 0x1ff) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000c80)={r12, r12, 0x1, 0x0, @void}, 0x10) r13 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000cc0), 0x1, 0x0) preadv2(r13, &(0x7f0000000d00), 0x0, 0x7, 0x2, 0x10) r14 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x2, 0x6, &(0x7f0000000d40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x9}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @map_fd={0x18, 0x6, 0x1, 0x0, r12}]}, &(0x7f0000000d80)='syzkaller\x00', 0x4, 0xc0, &(0x7f0000000dc0)=""/192, 0x41000, 0x22, '\x00', r1, @fallback=0x2f, r12, 0x8, &(0x7f0000000e80)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000ec0)={0x3, 0x2, 0xffffffff, 0x4}, 0x10, 0xffffffffffffffff, r12, 0x3, &(0x7f0000000f00)=[r12], &(0x7f0000000f40)=[{0x4, 0x2, 0x6, 0xc}, {0x1, 0x3, 0xc}, {0x1, 0x3, 0x2, 0x5}], 0x10, 0x81}, 0x94) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001100)={r12, &(0x7f0000001040)="255d86ee0900f9a9570bfd70d2fdf02587d78407f8bb33b16b0e04684293bfceb94cb8f455c3ca84cad52e63bd67a054e6efbd01d0693ef81e272a8889dc5b3465bc912a3df67e0078ce7a32f5fd80d7f798c1137dc3f96a12f1106f75f09dd494075cd386dc6085205a91c44f9cbc8d4de7adfaa5c985ef36259aa584826330241002f7f4da4e6c90a3f8"}, 0x20) write$binfmt_misc(r6, &(0x7f0000001140)="6b6e08413adc9144488b4a00df4a52ddd250535361405ee9f9064eece8a8fbd4273def4e55785302959d6db733e18ce140daf7486c36156697a7689d868dbb24481180e7537fe1492e66822540d200e0934a182da51f4082b6e56741e2fb9dd1caac691e1a2a2230c604f646e6edc7d359206ac939a2a487e3bb9dd0aacb45bda98d2a08ec67b452323c2601b29c11265d037181d6f6cf37a94ebbda0d9d6938869aa00bfb1673f50eada9e92f8ccd8d77dd84de2ae43fe7f4a4987b89285a02a6b399f07d13e74778", 0xc9) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000012c0)={{r12, 0xffffffffffffffff}, &(0x7f0000001240), &(0x7f0000001280)=r14}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001480)={r15, &(0x7f0000001300)="39bee595394f818b6a989d1b99f42a3204387dfe075147e43af80e35f0464c90bef70614d6e065e79f46b0f6524181d5c2ecffa01719f3ca39e7f8f41486abed86db8cb7b5cb18d004657e066c535239218ee2e26e038e6c13ced7b67cf3cc6317b01c65d565203544157135258e74aacbb2f968c226070ab0ff1b4d8daccf1e1f319aea572c3915452bfb68591c8d2b2e667da221ebfe809a23620fc2ec01", &(0x7f00000013c0)=@buf="e715b19a018151670c55657e44f487f9bde9a9b5fd72099f925cacf847f186e03028fd28bbb22a1365e685d7d33b4ae46576966caeaf3287aeac55232e7ef54be1b70b7ccad2cd46bb782c9437855b47215a4c11f40dc58ae0d3d3717cbc7506bb927ef51467d8be80e75e87a7170738188a36cf58830259b1985ced9544f649ec73f8ef1c794254e2bccda6d2b11989cb64729df33486f3ab9b1bc6710be787a424997d24ee49eaf0e8efd4177e29d36a94698a369ebd", 0x4}, 0x20) inotify_init() bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000001740)={&(0x7f00000014c0)="357f3cdff7b7cf5da8603c6765b4b072131765c48886ced393c5b94854aace03ded83c0b9be3242220b4ce", &(0x7f0000001500)=""/138, &(0x7f00000015c0)="8605f2b1c653a392c50ee640a878baa4e334e2f7166be3457768390c56849be1149c803afa85bec6ab6c61ffcba553ce3db609b177d61a78b78ad6760eeaf08e0b4a7e2e20277b5a1e0681352161b16c59c0b2b798bdd881b03172e369a88df130d1b83c4f22646f2fa903fb67ea7a2d945f2becceeae572cb22b0a4c20bc2a1deb5435f1142c68e0bacd093145e2a5b29b6f2a21670d4dcbd6bc1aa6f1170aa3f65bdac6f892ceb6fb66e3b049a73c014895ddd1fb9154c3ef1293f059b985144f351f88f8e0ed563be0cb915f5f5cf3cd89d21a5996e903f3e4ed93ca6a12344b52d2644488d55ae741247cb9b4fb8c30db7050a5b90", &(0x7f00000016c0)="d062487408ebd7cc519246d0aafdad6c84d3bb5b122a758d724503ff743175a87ceacf158c887b99b1d5c379839462dc3e9f2c8bc8b05249c10eaea45171c0132f8706d65552ea8a44b58095f54c12a2e203af24301b8a74a49abc4c56e1d8c1286d34a2fcd5", 0x3, r15, 0x4}, 0x38) 1.961424436s ago: executing program 1 (id=907): bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9fa0000000f8701d1d10fc4020a1bf7b805000000b908001bfe0fae41d9a0000005009100918b7fae260f3200000f30660fc775022e0fba600c980f320f3566b85700c30fefd0", 0x4c}], 0x1, 0x1b, 0x0, 0xfffffe55) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x13, 0x51, &(0x7f0000000080)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5333}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_kvm_setup_cpu$x86(r0, r1, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 1.677990554s ago: executing program 1 (id=908): pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x1ed}}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="09000000030000000800000004"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r4}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x4, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000001700)=0x4) r8 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r8, 0x28, 0x6, &(0x7f0000001680)=""/59, &(0x7f0000000000)=0x3b) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000000000000000000fcffff0318110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r9}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x20) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) mount$incfs(&(0x7f0000000340)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000280), 0x8040, 0x0) 1.572168575s ago: executing program 6 (id=909): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xe, 0x4, 0x8, 0x800}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0xf0ffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000001180)={0x2d8, 0x5, 0xb, 0x101, 0x70bd2d, 0x25dfdbfd, {0x1, 0x0, 0x8}, [@nested={0x1c0, 0x14a, 0x0, 0x1, [@typed={0x8, 0x73, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @nested={0x4, 0x2d}, @generic="4b95cba518b7cacf44f19bb311e35c30a6e011342e7ed3966029471392e0116f762c13b048baef85bf9fbea309de169f6a142bb230f9e7feb66688b75a27ba32964ef9645a2daf8a256523c6d2ffd2618c6124c870140eeae0a18fc0b2c5e61aeb42a3fca0ab6ec935064c7ca94afee0cb0d10a026bca84901d8f6d2f486bf505176e2d7dd092fe5a4003cff6bc3d1e64af8fb5eabce5aba1e1b4e151768a40fc528e2a318917cfd43f414a7f9141f0748ae040b5b361f92bef4f8e208d84d2a", @generic, @generic="4f00e37be465514b8eca1ba212775469fa9af56e99b3e77360bf3688e83e8e4390e5ac5fbee8dd2b4d512bd4bb1700d2a26ea5e1de2c57cad7afbc3a14c3aa1ced2af91ce8ebb3b6c32862ec9bd804e52bf6627e10916b6a94f4ece7a876243cb93cc0081a520ef43f6f6f6902c0f1b4edea39f8b12ba90b04db196250bb18dc98a77d09e504be77c6450a2493bc4a38336f18f1e8a46f1d56834606af1cecf4669f0ec052fe68c798c1505bc7a88c30d6200476e4fa75cbb9875daa2d78e0aa05e53b2a4761bef6035e347f507573bdfb00f901e25f3c7aa2acfabbd449277ff9f9add36652763d", @typed={0x8, 0x12f, 0x0, 0x0, @u32=0xe05}]}, @nested={0x7e, 0x39, 0x0, 0x1, [@generic="450e1700d8c4cffbbb155c3171408a439989644becd9e6845691dc63ea9da3a1b792f50a028712a61dde981a9cbefab436736f7977a748156bfe021b5ad2ed8ace3ff1966228395793b78a7f899c3c9aecb3d15b5b4bfbb400fc5ae64269", @nested={0x4, 0xc0}, @typed={0x4, 0x14f, 0x0, 0x0, @binary}, @typed={0x11, 0x5c, 0x0, 0x0, @str='sched_switch\x00'}, @generic]}, @generic="5897d20a7b2bea3ec02525d97af7614007abb99dde28a8386d3d9a99909c4ef9fc26db34a813266dd63c32f53f75", @nested={0x18, 0x59, 0x0, 0x1, [@typed={0xc, 0x23, 0x0, 0x0, @u64=0x7ff}, @nested={0x4, 0x2e}, @nested={0x4, 0xd5}]}, @typed={0x4, 0x132}, @nested={0x2a, 0x12a, 0x0, 0x1, [@generic="852fe4904b4b5d528ea98604ed54211986a9bfd1b78c6a20d800957c3f99658a13869ae1d2d0"]}, @typed={0x8, 0xed, 0x0, 0x0, @u32=0x80000000}, @typed={0x4, 0x62}]}, 0x2d8}, 0x1, 0x0, 0x0, 0x4}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r4, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7020000140000e5b7030000000700008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x10) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x513, &(0x7f0000000c40)="$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") r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') socket$nl_route(0x10, 0x3, 0x0) close(0xffffffffffffffff) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10500, 0x0) read$FUSE(r7, &(0x7f00000020c0)={0x2020}, 0x2020) 1.473973784s ago: executing program 7 (id=910): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x83, 0x0, 0x0) r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r3, 0x29, 0xc8, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) setresuid(0xee01, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x18) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x12, 0x6, &(0x7f0000000480)=@framed={{}, [@cb_func={0x18, 0x7, 0x4, 0x0, 0xfffffffffffffffc}, @jmp={0x5, 0x0, 0xc, 0xc, 0x6, 0x1, 0x8}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$tun(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r6 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r6, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x2}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000003cc0)=[{{0x0, 0x97ff, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) ioctl$EXT4_IOC_GROUP_EXTEND(r6, 0x40086607, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x2241, 0x0) ioctl$TUNDETACHFILTER(r5, 0x401054d6, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 1.184680473s ago: executing program 2 (id=911): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) socket(0x10, 0x80002, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00', r1}, 0x10) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r2 = syz_clone(0x10000000, 0x0, 0x0, 0x0, &(0x7f00000003c0), &(0x7f00000004c0)) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x482, 0x0) write$binfmt_aout(r3, &(0x7f0000000400)=ANY=[], 0xff2e) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x83, "00000000000000000000ffff00"}) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000080)={0x0, 0xfffffffd, 0x0, 0x6, 0x1, "e315bc1cc24ff7b7cdb242e1ff0aa6905446b3"}) r4 = dup3(0xffffffffffffffff, r3, 0x0) read$FUSE(r4, &(0x7f0000003f80)={0x2020}, 0x2020) read$watch_queue(r4, &(0x7f0000000340)=""/133, 0x85) read$FUSE(r4, 0x0, 0x0) ptrace$PTRACE_GETSIGMASK(0x420a, r2, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r5, 0x2000012, 0xff0, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) open(0x0, 0x143142, 0x80) syz_usb_connect(0x2, 0x2d, 0x0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0}) 1.180256753s ago: executing program 7 (id=912): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x8, 0x0, 0x0, 0x40f00, 0x7, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x10) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2c24, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x64, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x400}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="60d21e"], 0x0, 0x0, 0x0, 0x0}, 0x0) 1.154339286s ago: executing program 35 (id=912): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x8, 0x0, 0x0, 0x40f00, 0x7, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x10) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2c24, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x64, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x400}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="60d21e"], 0x0, 0x0, 0x0, 0x0}, 0x0) 1.152060106s ago: executing program 5 (id=914): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x11, &(0x7f0000000100)={[], [{@hash}]}, 0x0, 0x62a, &(0x7f0000001340)="$eJzs3b9vFFceAPDvrNe/784Gne6OKw5LpxNId9jYwAmlCbQRQhDSpXKwQQSDEXaUmCBhJNJEitKkiJQqRch/kSClTZE2RZpUERKKIooQobDR7M7Y612vf6z3h7E/H2nwmxnve2+Mv/7OvH0zG8C+NZb+U4g4FBG3koiRqn3FyHaOVb7v6S93L6dLEqXSpZ+TuHsvWa6uK8m+Dmcv/n0kku8KEQd76ttdWLpzfXpubvZ2tj6xeOPWxMLSnWPXbkxfnb06e3Pq/1OnT508dXry+I6OL6kqn3vw9rsjH55/84vPnieTX/5wPokz8SLrW3pcta/t31HL6c9sLEoVz6q3pz/X0zuse7f4dST/PVmV1G5g1ypkv4+9EfH3GImeqv/NkfjgYlc7B7RVKYk8R5XSVFgC9pGkqZgfaH1HgA7LzwPya/v1roPrFdp8VgJ0wpOzlQGASuz3RkQe/8XK2GAMlMcGhp4mUYy+ldclEbGzkbmKtI1vvzn/IF2iwTgc0B7L9/NR7tr8n5RjczQGymtDTwtrxnkLVUu6/fUm2x+rWa+L/9earBjY1PL9iPhHlv/7YlvxP1YV/2812f6m8Q8AAAAAAABs2aOzEfG/9eb/FVbm//StzP9ZNRwRZ1rQ/ubv/xUeZ4WkBc0BVZ6crUzqWy/+M6M92dqfy/MBepMr1+Zmj0fEXyLiaPT2p+uTNfVWzxA+9tHBTxu1Xz3/L13S9vO5gFlNj4s1N+LOTC9O7/CwgTT+70f8szz/93C2Ze38nzT/J+vk/zS+b22xjYP/eXih0b7N4x9ol9LnEUfWzf+rp9vJxs/nmCifD0zkZwX1/vX+x181al/8Q/ek+X9o4/jvT6qf17OwvfrTi4sTS8VSo/3Nnv/3JW/05PWn3pteXLw9GdGXnKvfPrW9PsNelcdDHi9p/B/998bjfyvn/1VxOLiNe4D/9mL4x0b7dpb/B7fcB6BeGv8zG+f/0bX5f/uFqYejXzdq/8KW8v/Jck4/mm0x/gfV6nPxVgO0K90FAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgJdcISL+FElhfKVcKIyPRwxHxF9jqDA3v7D43yvz79ycSfeVP/+/kH/S70hlPck//3+0an2qZv1ERByIiE96Bsvr45fn52a6ffAAAAAAAAAAAAAAAAAAAACwSwyX7/kv9dfe/5/6qafbvQParph9Fe+w/xSbfmWpv/G+gaZrBTqn+fgHXnZbj//etvYD6LzG8f/seamso90BOsj5P+xfTcZ/T0RcvNTqzgAdJf/DfrXFMT1v58GeJP8DAAAAAMCecuDwo++TiFh+ZbC8pPqyfSb7w95W6HYHgK7xyA/Yv4rzm3/PYCc6AnSca3wgWSn9tu7N/o1n/ye1G0ql0r2W9QsAAAAAAAAAAAAAWHXkkPv/Yb/a+P7/urn9wB6ywf3/6wW/xwXAHtL4oz/kftjrXOMDm2X7bdz/DwAAAAAAAAAAAAC0y8Cd69Nzc7O3F5ZaX5iNdtVcKbzatprbWFie3hXdaF0hnxre+pp7I2IXHGAXCvkjOLrYjS7+TQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANb4IwAA//8UeCKd") r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r1, r0, 0x80000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000140)=[@request_death={0x400c6313}], 0x4c, 0x1000000, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x101000, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r5 = getpid() process_vm_readv(r5, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x5, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 975.815503ms ago: executing program 1 (id=915): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x10, &(0x7f00000004c0)={[{@i_version}, {@nodiscard}, {@min_batch_time={'min_batch_time', 0x3d, 0x3ff}}]}, 0x1, 0x3f7, &(0x7f0000003080)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000280)=0xfffffffa, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x589b}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095000000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x3, &(0x7f0000000500)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) getrlimit(0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = getpid() prlimit64(r5, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x8) r6 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r6, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 595.258291ms ago: executing program 5 (id=916): io_setup(0xb0, &(0x7f00000014c0)) syz_open_procfs(0x0, &(0x7f0000000400)='net/mcfilter6\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0xa0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) keyctl$setperm(0x5, 0x0, 0x30925) syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000400000e0000000000000000850000002300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000004000ed0000000008100d00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r3}, 0x10) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000328bd7000fcdbdf250a0000007bfe01007063690011000200303030303a30303a31302e300000000008000300020000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000800030000000000f62d120ad372045514ae2dcbfa539780a29cdb050af28c99bb744ff3b12f4a40db552637d4824380746faf8048"], 0x60}, 0x1, 0x0, 0x0, 0x448c0}, 0x40001) pidfd_send_signal(0xffffffffffffffff, 0x28, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000900)='./file0\x00', 0x1a5004, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r5 = dup(r4) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f00000000c0)={0x14c}, 0x137) socket$inet6_udplite(0xa, 0x2, 0x88) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[], 0x48) connect$inet6(0xffffffffffffffff, &(0x7f00000003c0)={0xa, 0x4e20, 0xe59, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x9e}, 0x1c) r6 = syz_usb_connect$hid(0x5, 0x2c, &(0x7f0000000bc0)=ANY=[@ANYBLOB="120100000000000843554200000000000001090224000100004020090400050203000100092107000001220500090581030002068000c45494cf7f9ba0ff7481987fa7e3f3d6310e34de04caaffa362618a27bc06a6c64ae83c082cd0c89df2f4fa46c571c3a4ccc687303876b4caf8538528a7e837a45e74cf82f569fc0a4f4e2240e8fae8d7ead51d452876dbf483b14806d6057dd23b709fb902274dab0a4afca4da1a17cb6291b84ce823868f9916cae2b3aa7831f897987", @ANYBLOB="3bafcd44bf78677ff3bce3d26d2b706b4a9888e2def8e0e076c361087d5c35ffe13838e24c126ec7321dda503d5c364234b18f9d5ad1b6541393596734292d156771e2d1f9298e8ee9c75b861ceb76d94518e30fce771f333880a385f62d5afd199cf0f81d156b3d443899cd5481a3b2f24853ac37ad07e315e5924ddbe1a96387e0133008ad3111cc5ba8ea88a9e83428fd68b8e506cde792c2cd81df1131e86440f795a0b6819364e1", @ANYBLOB="21f994fb689be667932884a94f2c2fe19bdab0d859ad6fe1adf774d9f7422a6f234aae41662b579b3297609996ad4d9b2f551d", @ANYBLOB="13632645a9abdbfe13a4913a2baf71befa918957b23d8a7a14e4b0194c28388c248c6ae8637e1fb39aa6950038b8f6d9d0a531042769153211192e3201f3904fac857c4510a0f7b655e27c42f31b44485ca65cfb34d3cb598b5267b1cc114a8b19bd6be721808ce8b098a732bc3687b968ddf731ab5bcfd965c8f3b9ee43ee92f906fc892a06ab85f999a45a25f86c33719bbaf0704737c43389c8d19764229393878dd43eb7972912c24b9029ab7ff3425db02cc454884688dbe9089d5db470b844605d944e624211ab2c722c82ac", @ANYRESDEC=r2, @ANYRES64=r1], 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_io_uring_setup(0x950, &(0x7f00000005c0)={0x0, 0x704b, 0x0, 0x4000000, 0x69}, &(0x7f0000000380)=0x0, &(0x7f0000000080)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x40, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) 454.398415ms ago: executing program 6 (id=917): socketpair$unix(0x1, 0x1, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f00000000c0)=0x6, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socket(0x3c, 0x1, 0x9) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x2404c8c0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xd, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xe, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41100, 0x39, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0xa, 0x200008, 0x5, 0x1ffff}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r0], 0x4c}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="2800000010000108000000000000000202000000", @ANYRES32=0x0, @ANYBLOB="b40200000000000008001b"], 0x28}}, 0x0) 82.248051ms ago: executing program 1 (id=918): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002ac0)={0x1a, 0x3, &(0x7f00000012c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2000}, 0x90) close_range(r0, 0xffffffffffffffff, 0x0) (fail_nth: 1) 0s ago: executing program 6 (id=919): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[], 0x118) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x33, &(0x7f0000000000)=0x7, 0x4) getsockopt$inet6_buf(r2, 0x29, 0x6, &(0x7f0000000680)=""/35, &(0x7f0000000080)=0x23) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r1, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00'}, 0x10) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x14, 0xc, 0x4}) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaa"], 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0xff80}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) kernel console output (not intermixed with test programs): 76): avc: denied { create } for pid=2194 comm="syz.1.457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 171.990806][ T28] audit: type=1400 audit(1760877722.469:277): avc: denied { create } for pid=2199 comm="syz.3.458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 172.098203][ T524] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 172.114435][ T524] hid-generic 0000:0000:0000.0005: hidraw2: HID v0.00 Device [syz1] on syz0 [ 172.125363][ T28] audit: type=1400 audit(1760877722.609:278): avc: denied { ioctl } for pid=2212 comm="syz.0.462" path="/dev/vhost-vsock" dev="devtmpfs" ino=268 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 172.984971][ T28] audit: type=1400 audit(1760877723.469:279): avc: denied { ioctl } for pid=2237 comm="syz.2.469" path="socket:[22844]" dev="sockfs" ino=22844 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 173.032834][ T2240] netlink: 4 bytes leftover after parsing attributes in process `syz.3.470'. [ 173.043120][ T2240] syz.3.470[2240] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 173.043197][ T2240] syz.3.470[2240] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 173.152028][ T28] audit: type=1400 audit(1760877723.639:280): avc: denied { write } for pid=2245 comm="syz.0.472" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 173.211228][ T2249] loop0: detected capacity change from 0 to 512 [ 173.244035][ T2249] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (3832!=33349) [ 173.272795][ T2253] syz.3.474[2253] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 173.272895][ T2253] syz.3.474[2253] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 173.287532][ T2236] loop1: detected capacity change from 0 to 40427 [ 173.306386][ T2249] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e02c, mo2=0002] [ 173.314509][ T2249] System zones: 1-12 [ 173.319048][ T2249] EXT4-fs (loop0): orphan cleanup on readonly fs [ 173.325960][ T2249] EXT4-fs error (device loop0): ext4_read_inode_bitmap:168: comm syz.0.472: Inode bitmap for bg 0 marked uninitialized [ 173.349540][ T2236] F2FS-fs (loop1): Invalid log sectors per block(0) log sectorsize(9) [ 173.357761][ T2236] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 173.375297][ T2249] EXT4-fs (loop0): Remounting filesystem read-only [ 173.383220][ T2236] F2FS-fs (loop1): invalid crc value [ 173.388632][ T2249] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 173.416635][ T2249] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:511: comm syz.0.472: Block bitmap for bg 0 marked uninitialized [ 173.418578][ T2236] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 173.442683][ T28] audit: type=1400 audit(1760877723.929:281): avc: denied { read } for pid=2245 comm="syz.0.472" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 173.469375][ T283] EXT4-fs (loop0): unmounting filesystem. [ 173.477976][ T2236] F2FS-fs (loop1): Start checkpoint disabled! [ 173.501117][ T2236] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 173.508252][ T2236] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 173.524440][ T2236] F2FS-fs (loop1): switch discard_unit option is not allowed [ 173.540114][ T8] kworker/u4:0: attempt to access beyond end of device [ 173.540114][ T8] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 174.620713][ T2280] device wg2 entered promiscuous mode [ 175.389695][ T390] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 175.720567][ T390] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 175.735644][ T390] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 175.776023][ T390] usb 2-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 175.803970][ T2300] overlayfs: missing 'lowerdir' [ 175.846611][ T390] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.920235][ T390] usb 2-1: config 0 descriptor?? [ 176.393372][ T2297] loop0: detected capacity change from 0 to 40427 [ 176.400605][ T2297] F2FS-fs (loop0): Invalid log sectors per block(0) log sectorsize(9) [ 176.426621][ T2297] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 176.436768][ T2297] F2FS-fs (loop0): invalid crc value [ 176.443836][ T2297] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 176.484470][ T2297] F2FS-fs (loop0): Start checkpoint disabled! [ 176.491687][ T2297] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 176.498855][ T2297] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 176.511137][ T2297] F2FS-fs (loop0): switch discard_unit option is not allowed [ 176.571957][ T2278] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 176.594941][ T2278] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 176.689784][ T2321] loop5: detected capacity change from 0 to 512 [ 176.750537][ T1323] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 176.827381][ T28] audit: type=1326 audit(1760877727.309:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2320 comm="syz.5.492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f492478efc9 code=0x7ffc0000 [ 176.881353][ T28] audit: type=1326 audit(1760877727.339:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2320 comm="syz.5.492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f492478efc9 code=0x7ffc0000 [ 176.931979][ T28] audit: type=1326 audit(1760877727.339:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2320 comm="syz.5.492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f492478efc9 code=0x7ffc0000 [ 176.986574][ T28] audit: type=1326 audit(1760877727.339:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2320 comm="syz.5.492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f492478efc9 code=0x7ffc0000 [ 177.039505][ T28] audit: type=1326 audit(1760877727.339:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2320 comm="syz.5.492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f492478efc9 code=0x7ffc0000 [ 177.149940][ T28] audit: type=1326 audit(1760877727.339:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2320 comm="syz.5.492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f492478efc9 code=0x7ffc0000 [ 177.189513][ T28] audit: type=1326 audit(1760877727.339:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2320 comm="syz.5.492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f492478efc9 code=0x7ffc0000 [ 177.571387][ T2334] netlink: 12 bytes leftover after parsing attributes in process `syz.0.495'. [ 177.615549][ T2334] netlink: 20 bytes leftover after parsing attributes in process `syz.0.495'. [ 177.931714][ T2324] loop1: detected capacity change from 0 to 16 [ 177.939232][ T2324] erofs: Unknown parameter '00000000000000000000010' [ 179.051989][ T2343] dvmrp1: tun_chr_ioctl cmd 35108 [ 179.058256][ T1323] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 179.143832][ T2338] dvmrp1: tun_chr_ioctl cmd 1074025672 [ 179.149711][ T2338] dvmrp1: ignored: set checksum disabled [ 179.155470][ T390] usbhid 2-1:0.0: can't add hid device: -71 [ 179.161940][ T390] usbhid: probe of 2-1:0.0 failed with error -71 [ 179.172193][ T390] usb 2-1: USB disconnect, device number 6 [ 179.339758][ T2353] overlayfs: missing 'workdir' [ 179.533497][ T2356] netlink: 'syz.5.501': attribute type 13 has an invalid length. [ 179.597327][ T2356] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.604594][ T2356] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.078751][ T2369] netlink: 12 bytes leftover after parsing attributes in process `syz.2.504'. [ 180.100710][ T2369] netlink: 20 bytes leftover after parsing attributes in process `syz.2.504'. [ 180.132642][ T2374] loop2: detected capacity change from 0 to 512 [ 180.159863][ T2374] EXT4-fs (loop2): failed to initialize system zone (-117) [ 180.179715][ T2374] EXT4-fs (loop2): mount failed [ 180.204616][ T28] kauditd_printk_skb: 34 callbacks suppressed [ 180.204635][ T28] audit: type=1400 audit(1760877730.689:323): avc: denied { setcheckreqprot } for pid=2370 comm="syz.0.506" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 180.493658][ T2380] netlink: 12 bytes leftover after parsing attributes in process `syz.0.508'. [ 180.506850][ T2380] netlink: 20 bytes leftover after parsing attributes in process `syz.0.508'. [ 180.574175][ T2384] loop5: detected capacity change from 0 to 1024 [ 180.581308][ T2384] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 180.669627][ T39] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 180.871998][ T39] usb 3-1: unable to get BOS descriptor or descriptor too short [ 180.887385][ T39] usb 3-1: not running at top speed; connect to a high speed hub [ 180.898173][ T39] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 180.910876][ T39] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 180.922354][ T39] usb 3-1: string descriptor 0 read error: -22 [ 180.930493][ T39] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 180.939614][ T39] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.949730][ T39] usb 3-1: 0:2 : does not exist [ 181.434429][ T2399] loop5: detected capacity change from 0 to 512 [ 181.459123][ T2397] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 181.475078][ T2399] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 181.484578][ T2399] ext4 filesystem being mounted at /78/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 181.750836][ T28] audit: type=1400 audit(1760877732.149:324): avc: denied { bind } for pid=2403 comm="syz.0.515" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 182.009575][ T28] audit: type=1400 audit(1760877732.149:325): avc: denied { write } for pid=2403 comm="syz.0.515" path="socket:[22386]" dev="sockfs" ino=22386 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 182.339591][ T2414] overlayfs: missing 'workdir' [ 182.786892][ T952] EXT4-fs (loop5): unmounting filesystem. [ 182.882720][ T2429] netlink: 12 bytes leftover after parsing attributes in process `syz.0.520'. [ 182.898445][ T2429] netlink: 4 bytes leftover after parsing attributes in process `syz.0.520'. [ 183.171821][ T39] usb 3-1: 5:0: cannot get min/max values for control 2 (id 5) [ 183.191538][ T39] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5) [ 183.212833][ T39] usb 3-1: 5:0: failed to get current value for ch 1 (-22) [ 183.226114][ T2440] loop2: detected capacity change from 0 to 2048 [ 183.238636][ T39] usb 3-1: USB disconnect, device number 3 [ 183.370609][ T1323] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 183.705001][ T1152] udevd[1152]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 183.752140][ T60] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 183.760196][ T60] hid-generic 0000:0000:0000.0006: hidraw3: HID v0.00 Device [syz1] on syz0 [ 183.787201][ T2456] fuse: Unknown parameter '0x000000000000000a' [ 183.789221][ T2455] fido_id[2455]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 183.910351][ T2465] netlink: 12 bytes leftover after parsing attributes in process `syz.5.531'. [ 183.923153][ T2465] netlink: 4 bytes leftover after parsing attributes in process `syz.5.531'. [ 184.596940][ T2476] overlayfs: missing 'workdir' [ 184.848689][ T2482] netlink: 24 bytes leftover after parsing attributes in process `syz.0.537'. [ 184.864838][ T2482] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=2482 comm=syz.0.537 [ 185.103969][ T2493] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 185.112974][ T2493] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 185.427665][ T2499] netlink: 12 bytes leftover after parsing attributes in process `syz.1.542'. [ 185.440964][ T2499] netlink: 4 bytes leftover after parsing attributes in process `syz.1.542'. [ 185.564424][ T2501] loop1: detected capacity change from 0 to 40427 [ 185.574011][ T2501] F2FS-fs (loop1): Invalid log sectors per block(0) log sectorsize(9) [ 185.584147][ T2501] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 185.594661][ T2501] F2FS-fs (loop1): invalid crc value [ 185.601865][ T2501] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 185.629270][ T2501] F2FS-fs (loop1): Start checkpoint disabled! [ 185.636571][ T2501] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 185.643990][ T2501] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 185.658344][ T2501] F2FS-fs (loop1): switch discard_unit option is not allowed [ 185.735448][ T2507] netlink: 'syz.2.544': attribute type 16 has an invalid length. [ 185.743330][ T2507] netlink: 'syz.2.544': attribute type 17 has an invalid length. [ 185.751372][ T2507] netlink: 'syz.2.544': attribute type 27 has an invalid length. [ 186.325952][ T2520] netlink: 12 bytes leftover after parsing attributes in process `syz.5.548'. [ 186.345643][ T2522] loop0: detected capacity change from 0 to 1024 [ 186.366712][ T2522] EXT4-fs: Ignoring removed oldalloc option [ 186.373995][ T2522] EXT4-fs: Ignoring removed bh option [ 186.381077][ T2522] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 186.401371][ T2522] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 186.547507][ T2533] netlink: 388 bytes leftover after parsing attributes in process `syz.2.551'. [ 186.651703][ T283] EXT4-fs (loop0): unmounting filesystem. [ 186.809267][ T2543] netlink: 12 bytes leftover after parsing attributes in process `syz.1.554'. [ 187.720484][ T2564] netlink: 'syz.2.561': attribute type 16 has an invalid length. [ 187.911634][ T2567] loop0: detected capacity change from 0 to 512 [ 189.632775][ T2569] tty tty23: ldisc open failed (-12), clearing slot 22 [ 189.672450][ T2567] EXT4-fs (loop0): 1 orphan inode deleted [ 189.678254][ T2567] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 189.688333][ T2567] ext4 filesystem being mounted at /123/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 189.723603][ T383] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 189.743738][ T383] EXT4-fs error (device loop0): ext4_release_dquot:6839: comm kworker/u4:6: Failed to release dquot type 1 [ 189.998988][ T2579] __nla_validate_parse: 4 callbacks suppressed [ 189.999006][ T2579] netlink: 12 bytes leftover after parsing attributes in process `syz.1.565'. [ 190.019279][ T2579] netlink: 4 bytes leftover after parsing attributes in process `syz.1.565'. [ 190.048198][ T2582] netlink: 'syz.5.564': attribute type 16 has an invalid length. [ 190.056843][ T2582] netlink: 'syz.5.564': attribute type 17 has an invalid length. [ 190.066619][ T2582] netlink: 'syz.5.564': attribute type 27 has an invalid length. [ 190.121113][ T283] EXT4-fs (loop0): unmounting filesystem. [ 190.144267][ T2583] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.162153][ T2583] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.170033][ T2583] device bridge_slave_0 entered promiscuous mode [ 190.177281][ T2583] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.195424][ T2583] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.203631][ T2583] device bridge_slave_1 entered promiscuous mode [ 190.210567][ T2590] loop1: detected capacity change from 0 to 4096 [ 190.240694][ T2590] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 190.269602][ T60] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 190.357396][ T2583] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.364608][ T2583] bridge0: port 2(bridge_slave_1) entered forwarding state [ 190.372051][ T2583] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.379098][ T2583] bridge0: port 1(bridge_slave_0) entered forwarding state [ 190.413633][ T383] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.421816][ T383] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.430982][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 190.438699][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 190.456126][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 190.464868][ T383] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.471973][ T383] bridge0: port 1(bridge_slave_0) entered forwarding state [ 190.480103][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 190.488492][ T383] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.495624][ T383] bridge0: port 2(bridge_slave_1) entered forwarding state [ 190.518043][ T60] usb 3-1: Using ep0 maxpacket: 16 [ 190.524006][ T284] EXT4-fs (loop1): unmounting filesystem. [ 190.531517][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 190.543532][ T60] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 190.555636][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 190.563899][ T60] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 190.586097][ T2583] device veth0_vlan entered promiscuous mode [ 190.592631][ T60] usb 3-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 190.602328][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 190.611176][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 190.618952][ T60] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.628339][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 190.636565][ T60] usb 3-1: config 0 descriptor?? [ 190.642192][ T383] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 190.655508][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 190.665980][ T2583] device veth1_macvtap entered promiscuous mode [ 190.676478][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 190.686852][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 190.712860][ T28] audit: type=1400 audit(1760877741.199:326): avc: denied { mounton } for pid=2583 comm="syz-executor" path="/root/syzkaller.KGGqKC/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 191.299367][ T2614] overlayfs: missing 'lowerdir' [ 191.485044][ T60] hid-multitouch 0003:1FD2:6007.0007: unknown main item tag 0x1 [ 191.494379][ T60] hid-multitouch 0003:1FD2:6007.0007: hidraw2: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.2-1/input0 [ 191.524501][ T2623] netlink: 12 bytes leftover after parsing attributes in process `syz.0.576'. [ 191.541119][ T2621] netlink: 12 bytes leftover after parsing attributes in process `syz.6.575'. [ 191.559853][ T39] usb 3-1: USB disconnect, device number 4 [ 191.577189][ T2623] netlink: 4 bytes leftover after parsing attributes in process `syz.0.576'. [ 191.742695][ T2632] xt_CT: No such helper "syz0" [ 191.800749][ T2633] x_tables: duplicate underflow at hook 2 [ 192.086583][ T2626] loop1: detected capacity change from 0 to 40427 [ 192.101527][ T2626] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 192.147026][ T2626] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 192.171616][ T2626] F2FS-fs (loop1): invalid crc value [ 192.213704][ T2626] F2FS-fs (loop1): Found nat_bits in checkpoint [ 192.389062][ T2626] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 192.399488][ T2626] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 192.406504][ T2641] loop2: detected capacity change from 0 to 8192 [ 192.422607][ T28] audit: type=1400 audit(1760877742.909:327): avc: denied { mounton } for pid=2636 comm="syz.2.580" path="/117/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 192.879520][ T1801] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 193.021012][ T2647] loop0: detected capacity change from 0 to 1024 [ 193.030977][ T2647] EXT4-fs: Ignoring removed orlov option [ 193.064676][ T2647] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 193.075136][ T8] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 193.085428][ T2647] 9pnet_fd: Insufficient options for proto=fd [ 193.098914][ T1801] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 193.110271][ T283] EXT4-fs (loop0): unmounting filesystem. [ 193.116681][ T8] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 193.120280][ T1801] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 193.141066][ T1801] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.218220][ T1801] usb 6-1: config 0 descriptor?? [ 193.503037][ T2655] loop1: detected capacity change from 0 to 512 [ 193.591538][ T2655] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 193.689693][ T1801] keytouch 0003:0926:3333.0008: fixing up Keytouch IEC report descriptor [ 193.699926][ T1801] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.0008/input/input6 [ 193.964088][ T1801] keytouch 0003:0926:3333.0008: input,hidraw2: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 194.051341][ T28] audit: type=1326 audit(1760877744.539:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2666 comm="syz.0.587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24b9d8efc9 code=0x7ffc0000 [ 194.075108][ T28] audit: type=1326 audit(1760877744.539:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2666 comm="syz.0.587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24b9d8efc9 code=0x7ffc0000 [ 194.100116][ T28] audit: type=1326 audit(1760877744.539:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2666 comm="syz.0.587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f24b9d8efc9 code=0x7ffc0000 [ 194.123975][ T28] audit: type=1326 audit(1760877744.539:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2666 comm="syz.0.587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24b9d8efc9 code=0x7ffc0000 [ 194.148121][ T28] audit: type=1326 audit(1760877744.539:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2666 comm="syz.0.587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24b9d8efc9 code=0x7ffc0000 [ 194.196968][ T28] audit: type=1326 audit(1760877744.539:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2666 comm="syz.0.587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f24b9d8efc9 code=0x7ffc0000 [ 194.220911][ T28] audit: type=1326 audit(1760877744.539:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2666 comm="syz.0.587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24b9d8efc9 code=0x7ffc0000 [ 194.549868][ T2673] netlink: 12 bytes leftover after parsing attributes in process `syz.6.588'. [ 194.564410][ T2673] netlink: 4 bytes leftover after parsing attributes in process `syz.6.588'. [ 194.574187][ T284] EXT4-fs (loop1): unmounting filesystem. [ 194.604215][ T2677] syz.6.590[2677] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 194.604423][ T2677] syz.6.590[2677] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 195.350691][ T28] kauditd_printk_skb: 32 callbacks suppressed [ 195.351470][ T28] audit: type=1326 audit(1760877745.559:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2666 comm="syz.0.587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24b9d8efc9 code=0x7ffc0000 [ 195.399747][ T28] audit: type=1326 audit(1760877745.559:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2666 comm="syz.0.587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24b9d8efc9 code=0x7ffc0000 [ 195.444084][ T2688] loop0: detected capacity change from 0 to 512 [ 195.454947][ T2688] EXT4-fs (loop0): failed to initialize system zone (-117) [ 195.476228][ T2688] EXT4-fs (loop0): mount failed [ 195.492702][ T2691] loop2: detected capacity change from 0 to 1024 [ 195.500255][ T2691] EXT4-fs: Ignoring removed orlov option [ 195.511054][ T2691] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 195.522680][ T2691] 9pnet_fd: Insufficient options for proto=fd [ 195.618424][ T793] usb 6-1: USB disconnect, device number 7 [ 195.654912][ T286] EXT4-fs (loop2): unmounting filesystem. [ 195.899579][ T390] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 196.015553][ T2710] netlink: 12 bytes leftover after parsing attributes in process `syz.5.600'. [ 196.086725][ T2710] netlink: 4 bytes leftover after parsing attributes in process `syz.5.600'. [ 196.160982][ T390] usb 1-1: unable to get BOS descriptor or descriptor too short [ 196.174007][ T390] usb 1-1: not running at top speed; connect to a high speed hub [ 196.196961][ T390] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 196.226801][ T390] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 196.263600][ T2697] loop6: detected capacity change from 0 to 40427 [ 196.265681][ T390] usb 1-1: string descriptor 0 read error: -22 [ 196.276525][ T2697] F2FS-fs (loop6): Invalid log sectors per block(0) log sectorsize(9) [ 196.285222][ T2697] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 196.285205][ T390] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 196.305884][ T2717] netlink: 12 bytes leftover after parsing attributes in process `syz.5.603'. [ 196.307670][ T2697] F2FS-fs (loop6): invalid crc value [ 196.315185][ T390] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.330146][ T2697] F2FS-fs (loop6): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 196.338780][ T390] usb 1-1: 0:2 : does not exist [ 196.372825][ T2697] F2FS-fs (loop6): Start checkpoint disabled! [ 196.379945][ T2697] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 196.387229][ T2697] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 196.569484][ T2724] loop5: detected capacity change from 0 to 512 [ 197.399980][ T2731] loop2: detected capacity change from 0 to 512 [ 197.458572][ T390] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5) [ 197.503246][ T2724] EXT4-fs (loop5): 1 orphan inode deleted [ 197.509075][ T2724] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 197.520779][ T2724] ext4 filesystem being mounted at /97/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 197.607289][ T2731] EXT4-fs (loop2): 1 orphan inode deleted [ 197.613380][ T2731] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 197.624431][ T2731] ext4 filesystem being mounted at /120/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 197.761410][ T390] usb 1-1: 5:0: failed to get current value for ch 1 (-22) [ 197.795253][ T43] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 197.810236][ T43] EXT4-fs error (device loop5): ext4_release_dquot:6839: comm kworker/u4:2: Failed to release dquot type 1 [ 197.845654][ T390] usb 1-1: USB disconnect, device number 4 [ 197.880433][ T43] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 197.894868][ T43] EXT4-fs error (device loop2): ext4_release_dquot:6839: comm kworker/u4:2: Failed to release dquot type 1 [ 197.919959][ T952] EXT4-fs (loop5): unmounting filesystem. [ 197.968558][ T28] audit: type=1400 audit(1760877748.449:369): avc: denied { ioctl } for pid=2741 comm="syz.5.608" path="socket:[24136]" dev="sockfs" ino=24136 ioctlcmd=0x7459 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 198.137212][ T2749] loop0: detected capacity change from 0 to 8192 [ 198.690382][ T286] EXT4-fs (loop2): unmounting filesystem. [ 199.220028][ T28] audit: type=1400 audit(1760877749.709:370): avc: denied { bind } for pid=2770 comm="syz.0.618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 199.243819][ T2767] loop2: detected capacity change from 0 to 512 [ 199.261162][ T2767] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 199.270362][ T2767] ext4 filesystem being mounted at /121/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 200.292209][ T2791] netlink: 12 bytes leftover after parsing attributes in process `syz.0.623'. [ 200.326182][ T286] EXT4-fs (loop2): unmounting filesystem. [ 200.355122][ T2791] netlink: 4 bytes leftover after parsing attributes in process `syz.0.623'. [ 200.365688][ T2798] loop2: detected capacity change from 0 to 1024 [ 200.373458][ T2798] EXT4-fs: Ignoring removed oldalloc option [ 200.379950][ T2798] EXT4-fs: Ignoring removed bh option [ 200.386919][ T2798] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 200.484244][ T2803] SELinux: Context 9p is not valid (left unmapped). [ 200.539522][ T28] audit: type=1400 audit(1760877750.969:371): avc: denied { relabelfrom } for pid=2795 comm="syz.5.626" name="" dev="pipefs" ino=24292 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 200.628404][ T28] audit: type=1400 audit(1760877750.979:372): avc: denied { relabelto } for pid=2795 comm="syz.5.626" name="" dev="pipefs" ino=24292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 trawcon="9p" [ 200.740551][ T2798] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 200.987074][ T2801] loop0: detected capacity change from 0 to 40427 [ 201.000293][ T286] EXT4-fs (loop2): unmounting filesystem. [ 201.008212][ T2801] F2FS-fs (loop0): Invalid log sectors per block(0) log sectorsize(9) [ 201.019480][ T2801] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 201.038410][ T2801] F2FS-fs (loop0): invalid crc value [ 201.072564][ T2801] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 201.104792][ T28] audit: type=1400 audit(1760877751.589:373): avc: denied { getopt } for pid=2816 comm="syz.1.630" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 201.132091][ T28] audit: type=1400 audit(1760877751.589:374): avc: denied { bind } for pid=2816 comm="syz.1.630" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 201.151747][ T2801] F2FS-fs (loop0): Start checkpoint disabled! [ 201.162707][ T2801] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 201.189522][ T2801] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 201.320797][ T2801] F2FS-fs (loop0): switch discard_unit option is not allowed [ 201.899605][ T2838] FAULT_INJECTION: forcing a failure. [ 201.899605][ T2838] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 202.223488][ T2838] CPU: 1 PID: 2838 Comm: syz.0.633 Not tainted syzkaller #0 [ 202.230917][ T2838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 202.238646][ T2842] loop2: detected capacity change from 0 to 512 [ 202.241006][ T2838] Call Trace: [ 202.241016][ T2838] [ 202.241024][ T2838] __dump_stack+0x21/0x24 [ 202.257963][ T2838] dump_stack_lvl+0xee/0x150 [ 202.262676][ T2838] ? __cfi_dump_stack_lvl+0x8/0x8 [ 202.267745][ T2838] ? preempt_schedule+0xa7/0xb0 [ 202.272642][ T2838] ? __cfi_preempt_schedule+0x10/0x10 [ 202.278125][ T2838] dump_stack+0x15/0x24 [ 202.282313][ T2838] should_fail_ex+0x3d4/0x520 [ 202.287026][ T2838] should_fail+0xb/0x10 [ 202.291316][ T2838] should_fail_usercopy+0x1a/0x20 [ 202.296369][ T2838] copy_fpstate_to_sigframe+0x849/0xaa0 [ 202.301946][ T2838] ? copy_fpstate_to_sigframe+0x17c/0xaa0 [ 202.307677][ T2838] ? __cfi_copy_fpstate_to_sigframe+0x10/0x10 [ 202.313850][ T2838] ? get_signal+0x124b/0x1520 [ 202.318551][ T2838] ? fpu__alloc_mathframe+0xb3/0x130 [ 202.324109][ T2838] arch_do_signal_or_restart+0x5bd/0x1030 [ 202.330102][ T2838] ? fput+0x154/0x1a0 [ 202.334092][ T2838] ? generic_file_rw_checks+0x2a0/0x2a0 [ 202.339653][ T2838] ? __switch_to_asm+0x3a/0x60 [ 202.344425][ T2838] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 202.350595][ T2838] exit_to_user_mode_loop+0x7a/0xb0 [ 202.355798][ T2838] exit_to_user_mode_prepare+0x5a/0xa0 [ 202.361268][ T2838] syscall_exit_to_user_mode+0x1a/0x30 [ 202.366746][ T2838] do_syscall_64+0x58/0xa0 [ 202.371180][ T2838] ? clear_bhb_loop+0x30/0x80 [ 202.375887][ T2838] ? clear_bhb_loop+0x30/0x80 [ 202.380589][ T2838] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 202.386513][ T2838] RIP: 0033:0x7f24b9d8efc7 [ 202.390958][ T2838] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 [ 202.410665][ T2838] RSP: 002b:00007f24bacfa038 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 202.419107][ T2838] RAX: 0000000000000013 RBX: 00007f24b9fe5fa0 RCX: 00007f24b9d8efc9 [ 202.427343][ T2838] RDX: 0000000000000001 RSI: 00002000000003c0 RDI: 0000000000000003 [ 202.435313][ T2838] RBP: 00007f24bacfa090 R08: 0000000000000000 R09: 0000000000000000 [ 202.443296][ T2838] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 202.451268][ T2838] R13: 00007f24b9fe6038 R14: 00007f24b9fe5fa0 R15: 00007ffc7d3c9518 [ 202.459263][ T2838] [ 202.496769][ T2842] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 202.523965][ T2842] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2818: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 202.557900][ T2842] EXT4-fs (loop2): 1 truncate cleaned up [ 202.570790][ T2842] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 202.592244][ T2848] netlink: 12 bytes leftover after parsing attributes in process `syz.0.637'. [ 202.954174][ T2848] netlink: 4 bytes leftover after parsing attributes in process `syz.0.637'. [ 203.078569][ T286] EXT4-fs (loop2): unmounting filesystem. [ 203.542478][ T2852] loop6: detected capacity change from 0 to 40427 [ 203.568684][ T2852] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 203.582299][ T2852] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 203.591983][ T2852] F2FS-fs (loop6): invalid crc value [ 203.612126][ T2852] F2FS-fs (loop6): Found nat_bits in checkpoint [ 203.648756][ T2871] loop2: detected capacity change from 0 to 512 [ 203.672567][ T28] audit: type=1400 audit(1760877754.159:375): avc: denied { remount } for pid=2872 comm="syz.0.644" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 203.694067][ T2873] tmpfs: Unknown parameter 'ÿÿÿÿÿÿÿÿÿ01777777777777777777777ñ¼ÊíXc¥vÌ:ýQºòœÞ' [ 203.710888][ T2871] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:477: comm syz.2.643: Invalid block bitmap block 0 in block_group 0 [ 203.744586][ T28] audit: type=1326 audit(1760877754.219:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2872 comm="syz.0.644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24b9d8efc9 code=0x7ffc0000 [ 203.798062][ T2871] EXT4-fs (loop2): Remounting filesystem read-only [ 203.808989][ T28] audit: type=1326 audit(1760877754.219:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2872 comm="syz.0.644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=162 compat=0 ip=0x7f24b9d8efc9 code=0x7ffc0000 [ 203.836572][ T2871] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6165: Corrupt filesystem [ 203.846085][ T2871] EXT4-fs (loop2): Remounting filesystem read-only [ 203.846914][ T2852] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 203.852947][ T2871] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #13: comm syz.2.643: attempt to clear invalid blocks 983261 len 1 [ 203.867114][ T2852] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 203.896411][ T2871] EXT4-fs (loop2): Remounting filesystem read-only [ 203.903438][ T2871] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.643: invalid indirect mapped block 2683928664 (level 0) [ 203.918222][ T2871] EXT4-fs (loop2): Remounting filesystem read-only [ 203.925630][ T2871] EXT4-fs error (device loop2): __ext4_get_inode_loc:4509: comm syz.2.643: Invalid inode table block 0 in block_group 0 [ 203.939071][ T2871] EXT4-fs (loop2): Remounting filesystem read-only [ 203.959671][ T2871] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5917: Corrupt filesystem [ 203.969656][ T2871] EXT4-fs (loop2): Remounting filesystem read-only [ 203.976202][ T2871] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 204.030007][ T2882] loop5: detected capacity change from 0 to 512 [ 204.037609][ T2871] EXT4-fs (loop2): Remounting filesystem read-only [ 204.045778][ T2871] EXT4-fs error (device loop2): __ext4_get_inode_loc:4509: comm syz.2.643: Invalid inode table block 0 in block_group 0 [ 204.061521][ T2871] EXT4-fs (loop2): Remounting filesystem read-only [ 204.068077][ T2871] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5917: Corrupt filesystem [ 204.077828][ T2871] EXT4-fs (loop2): Remounting filesystem read-only [ 204.084687][ T2871] EXT4-fs error (device loop2): ext4_truncate:4314: inode #13: comm syz.2.643: mark_inode_dirty error [ 204.096082][ T2871] EXT4-fs (loop2): Remounting filesystem read-only [ 204.101422][ T2882] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:477: comm syz.5.646: Invalid block bitmap block 0 in block_group 0 [ 204.102940][ T2871] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 204.116760][ T2882] EXT4-fs (loop5): Remounting filesystem read-only [ 204.132209][ T2882] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6165: Corrupt filesystem [ 204.141176][ T2882] EXT4-fs (loop5): Remounting filesystem read-only [ 204.147852][ T2882] EXT4-fs error (device loop5): ext4_clear_blocks:883: inode #13: comm syz.5.646: attempt to clear invalid blocks 983261 len 1 [ 204.161360][ T2882] EXT4-fs (loop5): Remounting filesystem read-only [ 204.167910][ T2882] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.646: invalid indirect mapped block 2683928664 (level 0) [ 204.182282][ T2882] EXT4-fs (loop5): Remounting filesystem read-only [ 204.188840][ T2882] EXT4-fs error (device loop5): __ext4_get_inode_loc:4509: comm syz.5.646: Invalid inode table block 0 in block_group 0 [ 204.201791][ T2882] EXT4-fs (loop5): Remounting filesystem read-only [ 204.208438][ T2882] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5917: Corrupt filesystem [ 204.218221][ T2882] EXT4-fs (loop5): Remounting filesystem read-only [ 204.225066][ T2882] EXT4-fs error (device loop5) in ext4_orphan_del:305: Corrupt filesystem [ 204.233943][ T2882] EXT4-fs (loop5): Remounting filesystem read-only [ 204.240587][ T2871] EXT4-fs (loop2): Remounting filesystem read-only [ 204.249383][ T2882] EXT4-fs error (device loop5): __ext4_get_inode_loc:4509: comm syz.5.646: Invalid inode table block 0 in block_group 0 [ 204.263241][ T2871] EXT4-fs error (device loop2): __ext4_get_inode_loc:4509: comm syz.2.643: Invalid inode table block 0 in block_group 0 [ 204.280456][ T2882] EXT4-fs (loop5): Remounting filesystem read-only [ 204.287334][ T2871] EXT4-fs (loop2): Remounting filesystem read-only [ 204.295720][ T2882] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5917: Corrupt filesystem [ 204.305805][ T2871] EXT4-fs (loop2): 1 truncate cleaned up [ 204.310881][ T2882] EXT4-fs (loop5): Remounting filesystem read-only [ 204.311794][ T2871] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 204.320477][ T2882] EXT4-fs error (device loop5): ext4_truncate:4314: inode #13: comm syz.5.646: mark_inode_dirty error [ 204.337765][ T2882] EXT4-fs (loop5): Remounting filesystem read-only [ 204.344638][ T2882] EXT4-fs error (device loop5) in ext4_process_orphan:347: Corrupt filesystem [ 204.354171][ T2882] EXT4-fs (loop5): Remounting filesystem read-only [ 204.360964][ T2882] EXT4-fs error (device loop5): __ext4_get_inode_loc:4509: comm syz.5.646: Invalid inode table block 0 in block_group 0 [ 204.374608][ T2882] EXT4-fs (loop5): Remounting filesystem read-only [ 204.381516][ T2882] EXT4-fs (loop5): 1 truncate cleaned up [ 204.387353][ T2882] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 204.688306][ T2886] FAULT_INJECTION: forcing a failure. [ 204.688306][ T2886] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 204.701510][ T2886] CPU: 1 PID: 2886 Comm: syz.2.643 Not tainted syzkaller #0 [ 204.708822][ T2886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 204.718908][ T2886] Call Trace: [ 204.722208][ T2886] [ 204.725153][ T2886] __dump_stack+0x21/0x24 [ 204.729512][ T2886] dump_stack_lvl+0xee/0x150 [ 204.734130][ T2886] ? __cfi_dump_stack_lvl+0x8/0x8 [ 204.739228][ T2886] ? tracing_record_taskinfo_sched_switch+0x80/0x3a0 [ 204.745927][ T2886] ? probe_sched_switch+0x63/0x90 [ 204.751156][ T2886] dump_stack+0x15/0x24 [ 204.755352][ T2886] should_fail_ex+0x3d4/0x520 [ 204.760056][ T2886] should_fail+0xb/0x10 [ 204.764233][ T2886] should_fail_usercopy+0x1a/0x20 [ 204.769282][ T2886] _copy_from_user+0x1e/0xc0 [ 204.773895][ T2886] iovec_from_user+0x1aa/0x2e0 [ 204.778776][ T2886] __import_iovec+0x71/0x470 [ 204.783396][ T2886] import_iovec+0x7c/0xb0 [ 204.787833][ T2886] ___sys_sendmsg+0x1e4/0x290 [ 204.792521][ T2886] ? __sys_sendmsg+0x270/0x270 [ 204.797312][ T2886] ? __fdget+0x19c/0x220 [ 204.801560][ T2886] __x64_sys_sendmsg+0x1f0/0x2c0 [ 204.806509][ T2886] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 204.811979][ T2886] x64_sys_call+0x171/0x9a0 [ 204.816489][ T2886] do_syscall_64+0x4c/0xa0 [ 204.820916][ T2886] ? clear_bhb_loop+0x30/0x80 [ 204.825618][ T2886] ? clear_bhb_loop+0x30/0x80 [ 204.830324][ T2886] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 204.836232][ T2886] RIP: 0033:0x7f7c8f78efc9 [ 204.840678][ T2886] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 204.860318][ T2886] RSP: 002b:00007f7c8e1b5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 204.868872][ T2886] RAX: ffffffffffffffda RBX: 00007f7c8f9e6180 RCX: 00007f7c8f78efc9 [ 204.876932][ T2886] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 000000000000000a [ 204.884908][ T2886] RBP: 00007f7c8e1b5090 R08: 0000000000000000 R09: 0000000000000000 [ 204.892892][ T2886] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 204.900877][ T2886] R13: 00007f7c8f9e6218 R14: 00007f7c8f9e6180 R15: 00007ffd6c877be8 [ 204.908954][ T2886] [ 205.201743][ T907] F2FS-fs (loop6): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 205.217416][ T2887] netlink: 108 bytes leftover after parsing attributes in process `syz.5.646'. [ 205.217869][ T286] EXT4-fs (loop2): unmounting filesystem. [ 205.240393][ T907] F2FS-fs (loop6): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 205.307573][ T2890] FAULT_INJECTION: forcing a failure. [ 205.307573][ T2890] name failslab, interval 1, probability 0, space 0, times 0 [ 205.320243][ T2890] CPU: 0 PID: 2890 Comm: syz.1.649 Not tainted syzkaller #0 [ 205.327565][ T2890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 205.337634][ T2890] Call Trace: [ 205.340933][ T2890] [ 205.343885][ T2890] __dump_stack+0x21/0x24 [ 205.348246][ T2890] dump_stack_lvl+0xee/0x150 [ 205.352869][ T2890] ? __cfi_dump_stack_lvl+0x8/0x8 [ 205.357916][ T2890] ? unwind_get_return_address+0x4d/0x90 [ 205.363630][ T2890] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 205.369815][ T2890] ? arch_stack_walk+0xfc/0x150 [ 205.374798][ T2890] dump_stack+0x15/0x24 [ 205.378977][ T2890] should_fail_ex+0x3d4/0x520 [ 205.383682][ T2890] ? __sigqueue_alloc+0x13f/0x210 [ 205.388735][ T2890] __should_failslab+0xac/0xf0 [ 205.393882][ T2890] should_failslab+0x9/0x20 [ 205.398403][ T2890] kmem_cache_alloc+0x3b/0x330 [ 205.403221][ T2890] __sigqueue_alloc+0x13f/0x210 [ 205.408122][ T2890] __send_signal_locked+0x19d/0xb70 [ 205.413356][ T2890] ? __kasan_check_write+0x14/0x20 [ 205.418468][ T2890] ? __task_pid_nr_ns+0x1dd/0x280 [ 205.423501][ T2890] send_signal_locked+0x422/0x580 [ 205.428618][ T2890] do_send_sig_info+0xd6/0x210 [ 205.433387][ T2890] send_sig+0x5b/0x70 [ 205.437379][ T2890] sk_stream_error+0xb1/0x130 [ 205.442061][ T2890] tcp_sendmsg_locked+0x3689/0x3d90 [ 205.447270][ T2890] ? __kasan_check_write+0x14/0x20 [ 205.452386][ T2890] ? avc_has_perm+0x158/0x240 [ 205.457076][ T2890] ? __kasan_check_write+0x14/0x20 [ 205.462283][ T2890] ? _raw_spin_lock_bh+0x8e/0xe0 [ 205.467338][ T2890] ? __cfi__raw_spin_lock_bh+0x10/0x10 [ 205.472903][ T2890] ? __local_bh_enable_ip+0x58/0x80 [ 205.478109][ T2890] ? _raw_spin_unlock_bh+0x50/0x60 [ 205.483365][ T2890] ? lock_sock_nested+0x1ec/0x280 [ 205.488398][ T2890] ? __cfi_selinux_socket_sendmsg+0x10/0x10 [ 205.494310][ T2890] ? __cfi_tcp_sendmsg_locked+0x10/0x10 [ 205.499866][ T2890] ? kernel_text_address+0xa0/0xd0 [ 205.504988][ T2890] tcp_sendmsg+0x2f/0x50 [ 205.509238][ T2890] inet6_sendmsg+0xb6/0xd0 [ 205.513673][ T2890] ? __cfi_inet6_sendmsg+0x10/0x10 [ 205.519326][ T2890] ____sys_sendmsg+0x5a9/0x990 [ 205.524107][ T2890] ? __sys_sendmsg_sock+0x40/0x40 [ 205.529161][ T2890] ? import_iovec+0x7c/0xb0 [ 205.533679][ T2890] ___sys_sendmsg+0x21c/0x290 [ 205.538364][ T2890] ? __sys_sendmsg+0x270/0x270 [ 205.543152][ T2890] ? kstrtouint+0x74/0xe0 [ 205.547500][ T2890] ? __fdget+0x19c/0x220 [ 205.551742][ T2890] __sys_sendmmsg+0x274/0x460 [ 205.556425][ T2890] ? slab_free_freelist_hook+0xc2/0x190 [ 205.561985][ T2890] ? __cfi___sys_sendmmsg+0x10/0x10 [ 205.567254][ T2890] ? bpf_probe_read_user_str+0x4a/0x70 [ 205.572745][ T2890] ? __cfi_ksys_write+0x10/0x10 [ 205.577611][ T2890] ? __bpf_trace_sys_enter+0x62/0x70 [ 205.582904][ T2890] __x64_sys_sendmmsg+0xa0/0xb0 [ 205.587766][ T2890] x64_sys_call+0x3f5/0x9a0 [ 205.592280][ T2890] do_syscall_64+0x4c/0xa0 [ 205.596703][ T2890] ? clear_bhb_loop+0x30/0x80 [ 205.601393][ T2890] ? clear_bhb_loop+0x30/0x80 [ 205.606077][ T2890] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 205.611974][ T2890] RIP: 0033:0x7f107e58efc9 [ 205.616402][ T2890] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 205.636096][ T2890] RSP: 002b:00007f107f393038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 205.644510][ T2890] RAX: ffffffffffffffda RBX: 00007f107e7e5fa0 RCX: 00007f107e58efc9 [ 205.652490][ T2890] RDX: 0000000000000001 RSI: 0000200000003c00 RDI: 0000000000000003 [ 205.660465][ T2890] RBP: 00007f107f393090 R08: 0000000000000000 R09: 0000000000000000 [ 205.668437][ T2890] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 205.676409][ T2890] R13: 00007f107e7e6038 R14: 00007f107e7e5fa0 R15: 00007ffdb36f56f8 [ 205.684387][ T2890] [ 205.734221][ T952] EXT4-fs (loop5): unmounting filesystem. [ 206.521797][ T2899] kernel read not supported for file /policy (pid: 2899 comm: syz.0.650) [ 206.556233][ T28] audit: type=1400 audit(1760877757.009:378): avc: denied { sys_module } for pid=2891 comm="syz.0.650" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 206.693556][ T28] audit: type=1400 audit(1760877757.009:379): avc: denied { module_load } for pid=2891 comm="syz.0.650" path="/selinux/policy" dev="selinuxfs" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=system permissive=1 [ 206.926011][ T2915] loop1: detected capacity change from 0 to 512 [ 206.994224][ T2915] EXT4-fs (loop1): 1 orphan inode deleted [ 207.000057][ T2915] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 207.009517][ T2915] ext4 filesystem being mounted at /134/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 207.023499][ T1802] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 209.052787][ T1802] EXT4-fs error (device loop1): ext4_release_dquot:6839: comm kworker/u4:8: Failed to release dquot type 1 [ 209.126416][ T284] EXT4-fs (loop1): unmounting filesystem. [ 209.272758][ T2927] loop2: detected capacity change from 0 to 512 [ 209.279531][ T2927] EXT4-fs: Ignoring removed nobh option [ 209.285612][ T2927] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 209.300564][ T2927] EXT4-fs (loop2): 1 truncate cleaned up [ 209.306503][ T2927] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 209.316713][ T28] audit: type=1400 audit(1760877759.799:380): avc: denied { map } for pid=2918 comm="syz.2.656" path="/131/file1/file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 209.320396][ T2927] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2195: inode #15: comm syz.2.656: corrupted in-inode xattr [ 209.354050][ T2927] EXT4-fs (loop2): Remounting filesystem read-only [ 209.360818][ T2927] EXT4-fs warning (device loop2): ext4_xattr_set_entry:1732: inode #15: comm syz.2.656: unable to update i_inline_off [ 209.409592][ T793] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 209.417217][ T60] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 209.494477][ T286] EXT4-fs (loop2): unmounting filesystem. [ 209.620819][ T793] usb 2-1: config index 0 descriptor too short (expected 64575, got 68) [ 209.629232][ T793] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 209.639532][ T60] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 209.650495][ T60] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2c24, bcdDevice= 0.00 [ 209.659605][ T793] usb 2-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 3, skipping [ 209.670656][ T60] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.682885][ T60] usb 6-1: config 0 descriptor?? [ 209.687937][ T793] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 209.706222][ T793] usb 2-1: config index 1 descriptor too short (expected 64575, got 68) [ 209.716390][ T793] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 209.726930][ T793] usb 2-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 3, skipping [ 209.738394][ T793] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 210.847464][ T2939] loop6: detected capacity change from 0 to 40427 [ 210.862446][ T2939] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 210.870398][ T2939] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 211.065590][ T2939] F2FS-fs (loop6): Found nat_bits in checkpoint [ 211.138306][ T60] usbhid 6-1:0.0: can't add hid device: -71 [ 211.167393][ T60] usbhid: probe of 6-1:0.0 failed with error -71 [ 211.336294][ T60] usb 6-1: USB disconnect, device number 8 [ 211.678332][ T2939] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 211.685686][ T2939] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 211.721017][ T2936] overlayfs: failed to resolve './file0': -2 [ 212.875127][ T2954] tmpfs: Bad value for 'huge' [ 213.075664][ T793] usb 2-1: string descriptor 0 read error: -71 [ 213.082286][ T793] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 213.093219][ T793] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.099029][ T28] audit: type=1400 audit(1760877763.579:381): avc: denied { append } for pid=2957 comm="syz.1.666" name="snapshot" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 213.104765][ T793] usb 2-1: can't set config #1, error -71 [ 213.141292][ T2959] fuse: Unknown parameter 'Ô áë’oj%7\hþ{Dø±êqi!'yõâÊ©:é„™ÐÈiÓõ@yÐeÞè—)Û)Úò'äÛÿÏ' [ 213.155355][ T2960] loop1: detected capacity change from 0 to 256 [ 213.165836][ T28] audit: type=1400 audit(1760877763.639:382): avc: denied { ioctl } for pid=2957 comm="syz.1.666" path="socket:[26644]" dev="sockfs" ino=26644 ioctlcmd=0x941d scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 213.169795][ T2958] random: crng reseeded on system resumption [ 213.197983][ T793] usb 2-1: USB disconnect, device number 7 [ 213.310338][ T28] audit: type=1400 audit(1760877763.649:383): avc: denied { open } for pid=2957 comm="syz.1.666" path="/dev/snapshot" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 213.446882][ T2970] loop0: detected capacity change from 0 to 512 [ 213.513952][ T2970] EXT4-fs (loop0): 1 orphan inode deleted [ 213.520079][ T2970] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 213.530228][ T1802] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 213.540144][ T2970] ext4 filesystem being mounted at /149/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 213.608783][ T1802] EXT4-fs error (device loop0): ext4_release_dquot:6839: comm kworker/u4:8: Failed to release dquot type 1 [ 213.809752][ T390] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 214.031339][ T390] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 214.047818][ T390] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2c24, bcdDevice= 0.00 [ 214.059106][ T390] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.109184][ T390] usb 7-1: config 0 descriptor?? [ 214.608633][ T390] pyra 0003:1E7D:2C24.0009: unknown main item tag 0x0 [ 214.618578][ T283] EXT4-fs (loop0): unmounting filesystem. [ 214.624973][ T390] pyra 0003:1E7D:2C24.0009: unknown main item tag 0x0 [ 214.632500][ T390] pyra 0003:1E7D:2C24.0009: item fetching failed at offset 2/7 [ 214.646007][ T390] pyra 0003:1E7D:2C24.0009: parse failed [ 214.652096][ T390] pyra: probe of 0003:1E7D:2C24.0009 failed with error -22 [ 215.019254][ T60] usb 7-1: USB disconnect, device number 2 [ 215.066996][ T2989] loop1: detected capacity change from 0 to 40427 [ 215.076939][ T2989] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 215.084763][ T2989] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 215.108497][ T2989] F2FS-fs (loop1): Found nat_bits in checkpoint [ 215.199879][ T2989] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 215.207042][ T2989] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 215.553768][ T3009] loop2: detected capacity change from 0 to 1024 [ 215.560663][ T3009] EXT4-fs: Ignoring removed i_version option [ 215.567118][ T3009] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 215.595496][ T3009] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 215.642313][ T284] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 215.642332][ T284] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 215.654637][ T284] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 215.671670][ T284] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 215.679380][ T284] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 215.687143][ T284] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 215.858138][ T284] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 215.858191][ T28] audit: type=1400 audit(1760877766.179:384): avc: denied { bpf } for pid=3008 comm="syz.2.678" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 215.894893][ T28] audit: type=1400 audit(1760877766.179:385): avc: denied { map_create } for pid=3008 comm="syz.2.678" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 215.943602][ T286] EXT4-fs (loop2): unmounting filesystem. [ 215.951600][ T28] audit: type=1400 audit(1760877766.179:386): avc: denied { perfmon } for pid=3008 comm="syz.2.678" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 215.986964][ T28] audit: type=1400 audit(1760877766.179:387): avc: denied { map_read map_write } for pid=3008 comm="syz.2.678" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 216.014006][ T28] audit: type=1400 audit(1760877766.179:388): avc: denied { prog_load } for pid=3008 comm="syz.2.678" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 216.033232][ T28] audit: type=1400 audit(1760877766.179:389): avc: denied { validate_trans } for pid=3008 comm="syz.2.678" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 216.065353][ T3020] netlink: 16 bytes leftover after parsing attributes in process `syz.5.682'. [ 217.511623][ T390] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 217.913895][ T3057] netlink: 'syz.6.689': attribute type 16 has an invalid length. [ 217.921758][ T3057] netlink: 'syz.6.689': attribute type 17 has an invalid length. [ 217.933615][ T3057] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 217.941064][ T3057] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 217.955879][ T3057] device dummy0 entered promiscuous mode [ 217.963866][ T1802] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 217.980549][ T1802] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 218.011464][ T390] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 218.110814][ T1802] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 218.153784][ T1802] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 218.187149][ T390] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2c24, bcdDevice= 0.00 [ 218.233501][ T390] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.247842][ T1802] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 218.256238][ T1802] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 218.257429][ T390] usb 3-1: config 0 descriptor?? [ 218.264723][ T1802] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 218.277729][ T1802] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 218.593874][ T28] kauditd_printk_skb: 32 callbacks suppressed [ 218.593891][ T28] audit: type=1400 audit(1760877769.079:422): avc: denied { read } for pid=3059 comm="syz.5.691" dev="nsfs" ino=4026532735 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 218.621563][ T28] audit: type=1400 audit(1760877769.079:423): avc: denied { open } for pid=3059 comm="syz.5.691" path="net:[4026532735]" dev="nsfs" ino=4026532735 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 218.644996][ T28] audit: type=1400 audit(1760877769.079:424): avc: denied { create } for pid=3059 comm="syz.5.691" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 218.681937][ T390] usbhid 3-1:0.0: can't add hid device: -71 [ 218.687942][ T390] usbhid: probe of 3-1:0.0 failed with error -71 [ 218.714434][ T390] usb 3-1: USB disconnect, device number 5 [ 218.726191][ T28] audit: type=1400 audit(1760877769.089:425): avc: denied { create } for pid=3059 comm="syz.5.691" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 218.779192][ T28] audit: type=1400 audit(1760877769.089:426): avc: denied { write } for pid=3059 comm="syz.5.691" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 218.810057][ T28] audit: type=1400 audit(1760877769.159:427): avc: denied { mounton } for pid=3059 comm="syz.5.691" path="/112/file0" dev="tmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 218.842128][ T28] audit: type=1400 audit(1760877769.239:428): avc: denied { ioctl } for pid=3065 comm="syz.0.694" path="socket:[26234]" dev="sockfs" ino=26234 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 220.120581][ T28] audit: type=1400 audit(1760877770.609:429): avc: denied { write } for pid=3076 comm="syz.0.696" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 220.148061][ T3084] loop0: detected capacity change from 0 to 256 [ 220.176697][ T28] audit: type=1400 audit(1760877770.649:430): avc: denied { mount } for pid=3080 comm="syz.5.699" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 220.199200][ T28] audit: type=1400 audit(1760877770.649:431): avc: denied { read write } for pid=3080 comm="syz.5.699" name="event0" dev="devtmpfs" ino=260 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 220.224404][ T3084] FAT-fs (loop0): Unrecognized mount option "00000000000000000006#DkÊøË·9Ð8‰R‹MzÝá=ö)nÞÔä{.Y¨'@·ÿ›|ŸòmX"jr(HÍú”·ŠUαs@ŒTxb–¡IŸwÁŸª ‰ñ|?‚rÖý" or missing value [ 220.745615][ T3100] 9pnet: Could not find request transport: unixÿÿ [ 220.753438][ T390] kernel write not supported for file bpf-prog (pid: 390 comm: kworker/1:4) [ 220.889505][ T703] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 221.021491][ T3103] FAULT_INJECTION: forcing a failure. [ 221.021491][ T3103] name failslab, interval 1, probability 0, space 0, times 0 [ 221.048084][ T3103] CPU: 1 PID: 3103 Comm: syz.6.705 Not tainted syzkaller #0 [ 221.055626][ T3103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 221.065799][ T3103] Call Trace: [ 221.069111][ T3103] [ 221.072066][ T3103] __dump_stack+0x21/0x24 [ 221.076424][ T3103] dump_stack_lvl+0xee/0x150 [ 221.081049][ T3103] ? __cfi_dump_stack_lvl+0x8/0x8 [ 221.086106][ T3103] ? __local_bh_enable_ip+0x58/0x80 [ 221.091341][ T3103] ? release_sock+0x169/0x1c0 [ 221.096041][ T3103] dump_stack+0x15/0x24 [ 221.100307][ T3103] should_fail_ex+0x3d4/0x520 [ 221.105111][ T3103] __should_failslab+0xac/0xf0 [ 221.109909][ T3103] should_failslab+0x9/0x20 [ 221.114644][ T3103] kmem_cache_alloc_node+0x42/0x340 [ 221.119960][ T3103] ? __alloc_skb+0xea/0x4b0 [ 221.124490][ T3103] __alloc_skb+0xea/0x4b0 [ 221.128925][ T3103] ? netlink_autobind+0x168/0x1a0 [ 221.133979][ T3103] netlink_sendmsg+0x626/0xbc0 [ 221.138859][ T3103] ? __cfi_netlink_sendmsg+0x10/0x10 [ 221.144360][ T3103] ? security_socket_sendmsg+0x93/0xb0 [ 221.150049][ T3103] ? __cfi_netlink_sendmsg+0x10/0x10 [ 221.155448][ T3103] ____sys_sendmsg+0x5a9/0x990 [ 221.160264][ T3103] ? __sys_sendmsg_sock+0x40/0x40 [ 221.166209][ T3103] ? import_iovec+0x7c/0xb0 [ 221.171557][ T3103] ___sys_sendmsg+0x21c/0x290 [ 221.177952][ T3103] ? __sys_sendmsg+0x270/0x270 [ 221.184319][ T3103] ? __kasan_check_write+0x14/0x20 [ 221.190832][ T3103] ? proc_fail_nth_write+0x17a/0x1f0 [ 221.196942][ T3103] ? vfs_write+0x9d6/0xca0 [ 221.201476][ T3103] ? __fdget+0x19c/0x220 [ 221.206725][ T3103] __x64_sys_sendmsg+0x1f0/0x2c0 [ 221.211688][ T3103] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 221.217195][ T3103] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 221.223290][ T3103] x64_sys_call+0x171/0x9a0 [ 221.227821][ T3103] do_syscall_64+0x4c/0xa0 [ 221.232254][ T3103] ? clear_bhb_loop+0x30/0x80 [ 221.236948][ T3103] ? clear_bhb_loop+0x30/0x80 [ 221.241650][ T3103] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 221.247561][ T3103] RIP: 0033:0x7f02e138efc9 [ 221.251997][ T3103] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 221.271608][ T3103] RSP: 002b:00007f02e2173038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 221.280035][ T3103] RAX: ffffffffffffffda RBX: 00007f02e15e5fa0 RCX: 00007f02e138efc9 [ 221.288010][ T3103] RDX: 0000000000040814 RSI: 0000200000001200 RDI: 0000000000000003 [ 221.295981][ T3103] RBP: 00007f02e2173090 R08: 0000000000000000 R09: 0000000000000000 [ 221.303959][ T3103] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 221.311938][ T3103] R13: 00007f02e15e6038 R14: 00007f02e15e5fa0 R15: 00007ffc70745bc8 [ 221.319929][ T3103] [ 221.326506][ T703] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 221.340437][ T703] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2c24, bcdDevice= 0.00 [ 221.350064][ T703] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.358968][ T703] usb 6-1: config 0 descriptor?? [ 221.689513][ T793] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 221.784851][ T703] usbhid 6-1:0.0: can't add hid device: -71 [ 221.791085][ T703] usbhid: probe of 6-1:0.0 failed with error -71 [ 221.798424][ T703] usb 6-1: USB disconnect, device number 9 [ 222.113260][ T793] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 222.127682][ T793] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2c24, bcdDevice= 0.00 [ 222.137066][ T793] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.148495][ T793] usb 7-1: config 0 descriptor?? [ 222.456522][ T3133] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 222.725890][ T793] usbhid 7-1:0.0: can't add hid device: -71 [ 222.739191][ T793] usbhid: probe of 7-1:0.0 failed with error -71 [ 222.756757][ T793] usb 7-1: USB disconnect, device number 3 [ 223.228955][ T3148] loop1: detected capacity change from 0 to 128 [ 225.041728][ T28] kauditd_printk_skb: 12 callbacks suppressed [ 225.041748][ T28] audit: type=1400 audit(1760877774.959:444): avc: denied { create } for pid=3156 comm="syz.0.721" name="#71" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 225.082536][ T3162] loop0: detected capacity change from 0 to 128 [ 225.159542][ T28] audit: type=1400 audit(1760877774.959:445): avc: denied { link } for pid=3156 comm="syz.0.721" name="#71" dev="tmpfs" ino=1000 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 225.300560][ T28] audit: type=1400 audit(1760877774.959:446): avc: denied { rename } for pid=3156 comm="syz.0.721" name="#72" dev="tmpfs" ino=1000 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 225.334831][ T28] audit: type=1400 audit(1760877775.559:447): avc: denied { unmount } for pid=283 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 225.489523][ T28] audit: type=1400 audit(1760877775.569:448): avc: denied { create } for pid=3161 comm="syz.0.722" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 225.535840][ T28] audit: type=1400 audit(1760877775.619:449): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 225.569071][ T28] audit: type=1400 audit(1760877775.749:450): avc: denied { create } for pid=3152 comm="syz.6.720" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 225.588736][ T28] audit: type=1400 audit(1760877775.749:451): avc: denied { bind } for pid=3152 comm="syz.6.720" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 225.609571][ T28] audit: type=1400 audit(1760877775.749:452): avc: denied { listen } for pid=3152 comm="syz.6.720" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 225.629185][ T28] audit: type=1400 audit(1760877775.749:453): avc: denied { connect } for pid=3152 comm="syz.6.720" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 228.499228][ T3213] netlink: 'syz.6.735': attribute type 12 has an invalid length. [ 228.589535][ T350] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 228.677151][ T3207] syz.5.733 (3207) used greatest stack depth: 19424 bytes left [ 228.790577][ T350] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 228.804827][ T350] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2c24, bcdDevice= 0.00 [ 228.818109][ T350] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.833858][ T350] usb 3-1: config 0 descriptor?? [ 229.246982][ T350] usbhid 3-1:0.0: can't add hid device: -71 [ 229.254188][ T350] usbhid: probe of 3-1:0.0 failed with error -71 [ 229.272033][ T350] usb 3-1: USB disconnect, device number 6 [ 229.380550][ T3228] loop6: detected capacity change from 0 to 128 [ 229.786058][ T3239] netlink: 12 bytes leftover after parsing attributes in process `syz.2.743'. [ 230.021092][ T3239] netlink: 4 bytes leftover after parsing attributes in process `syz.2.743'. [ 230.096248][ T3239] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 230.103535][ T3239] IPv6: NLM_F_CREATE should be set when creating new route [ 230.804984][ T3250] loop0: detected capacity change from 0 to 40427 [ 230.813030][ T3250] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 230.820851][ T3250] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 230.840197][ T3250] F2FS-fs (loop0): Found nat_bits in checkpoint [ 230.883215][ T3250] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 230.890364][ T3250] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 230.952052][ T28] kauditd_printk_skb: 12 callbacks suppressed [ 230.952067][ T28] audit: type=1400 audit(1760877781.439:466): avc: denied { add_name } for pid=3241 comm="syz.0.744" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 230.982401][ T3247] overlayfs: failed to resolve './file0': -2 [ 231.000173][ T3264] loop1: detected capacity change from 0 to 128 [ 231.028657][ T28] audit: type=1400 audit(1760877781.439:467): avc: denied { create } for pid=3241 comm="syz.0.744" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 231.077186][ T28] audit: type=1400 audit(1760877781.469:468): avc: denied { mounton } for pid=3241 comm="syz.0.744" path="/171/bus/bus" dev="loop0" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 231.117156][ T28] audit: type=1400 audit(1760877781.469:469): avc: denied { write } for pid=3241 comm="syz.0.744" name="bus" dev="loop0" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 231.182028][ T28] audit: type=1400 audit(1760877781.469:470): avc: denied { add_name } for pid=3241 comm="syz.0.744" name="work" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 231.205824][ T3268] tipc: Started in network mode [ 231.211089][ T3268] tipc: Node identity da58dfcc4dce, cluster identity 4711 [ 231.218319][ T3268] tipc: Enabled bearer , priority 0 [ 231.225078][ T28] audit: type=1400 audit(1760877781.469:471): avc: denied { setattr } for pid=3241 comm="syz.0.744" name="work" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 231.248011][ T3268] device syzkaller0 entered promiscuous mode [ 231.257155][ T3268] tipc: Resetting bearer [ 231.263563][ T28] audit: type=1400 audit(1760877781.469:472): avc: denied { write open } for pid=3241 comm="syz.0.744" path=2F202864656C6574656429 dev="loop0" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 231.290315][ T28] audit: type=1400 audit(1760877781.469:473): avc: denied { create } for pid=3241 comm="syz.0.744" name="#77" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 231.290429][ T3267] tipc: Resetting bearer [ 231.320695][ T3267] tipc: Disabling bearer [ 231.326541][ T28] audit: type=1400 audit(1760877781.469:474): avc: denied { remove_name } for pid=3241 comm="syz.0.744" name="#77" dev="loop0" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 231.348741][ T703] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 231.379511][ T28] audit: type=1400 audit(1760877781.469:475): avc: denied { rename } for pid=3241 comm="syz.0.744" name="#77" dev="loop0" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 231.585134][ T703] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 231.609463][ T703] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 231.619310][ T703] usb 2-1: config 0 interface 0 has no altsetting 0 [ 231.688792][ T703] usb 2-1: New USB device found, idVendor=5543, idProduct=3031, bcdDevice= 0.00 [ 232.295932][ T703] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.640067][ T703] usb 2-1: config 0 descriptor?? [ 232.664880][ T3285] netlink: 12 bytes leftover after parsing attributes in process `syz.0.755'. [ 232.734825][ T3289] netlink: 4 bytes leftover after parsing attributes in process `syz.0.755'. [ 232.805297][ T3285] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 232.812661][ T3285] IPv6: NLM_F_CREATE should be set when creating new route [ 233.065596][ T703] usbhid 2-1:0.0: can't add hid device: -71 [ 233.109378][ T703] usbhid: probe of 2-1:0.0 failed with error -71 [ 233.142378][ T703] usb 2-1: USB disconnect, device number 8 [ 233.274183][ T3302] netlink: 12 bytes leftover after parsing attributes in process `syz.0.758'. [ 234.273534][ T3309] loop0: detected capacity change from 0 to 512 [ 234.468022][ T3309] EXT4-fs (loop0): 1 orphan inode deleted [ 234.473984][ T3309] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 234.485730][ T3309] ext4 filesystem being mounted at /175/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 234.844423][ T3317] netlink: 44 bytes leftover after parsing attributes in process `syz.6.760'. [ 235.600218][ T907] EXT4-fs error (device loop0): ext4_release_dquot:6839: comm kworker/u4:7: Failed to release dquot type 1 [ 235.917410][ T283] EXT4-fs (loop0): unmounting filesystem. [ 235.927432][ T3319] loop2: detected capacity change from 0 to 1024 [ 235.955350][ T3319] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 236.001958][ T3319] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 236.041763][ T3319] JBD2: no valid journal superblock found [ 236.234464][ T3319] EXT4-fs (loop2): error loading journal [ 236.542888][ T3340] netlink: 12 bytes leftover after parsing attributes in process `syz.5.766'. [ 236.557729][ T3340] netlink: 4 bytes leftover after parsing attributes in process `syz.5.766'. [ 236.572132][ T3340] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 236.579529][ T3340] IPv6: NLM_F_CREATE should be set when creating new route [ 237.032278][ T3350] 9pnet: Could not find request transport:  [ 237.077947][ T3354] loop6: detected capacity change from 0 to 2048 [ 237.199716][ T3354] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 237.208248][ T3354] ext4 filesystem being mounted at /37/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 237.532018][ T350] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 238.037131][ T3366] 9pnet_fd: Insufficient options for proto=fd [ 238.059349][ T28] kauditd_printk_skb: 14 callbacks suppressed [ 238.059366][ T28] audit: type=1400 audit(1760877788.539:489): avc: denied { execute } for pid=3369 comm="syz.5.773" path="/127/cpuacct.usage_percpu" dev="tmpfs" ino=718 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 238.071026][ T350] usb 2-1: config 0 has an invalid interface number: 205 but max is 0 [ 238.100400][ T350] usb 2-1: config 0 has no interface number 0 [ 238.108177][ T350] usb 2-1: New USB device found, idVendor=04dd, idProduct=9031, bcdDevice=65.c7 [ 238.125617][ T350] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.147929][ T350] usb 2-1: Product: syz [ 238.152358][ T3373] netlink: 12 bytes leftover after parsing attributes in process `syz.0.774'. [ 238.158579][ T350] usb 2-1: Manufacturer: syz [ 238.184927][ T350] usb 2-1: SerialNumber: syz [ 238.197643][ T350] usb 2-1: config 0 descriptor?? [ 238.204977][ T350] usb 2-1: bad CDC descriptors [ 238.210355][ T350] usb 2-1: unsupported MDLM descriptors [ 238.874880][ T3382] loop0: detected capacity change from 0 to 512 [ 239.535955][ T3382] EXT4-fs (loop0): 1 orphan inode deleted [ 239.541891][ T3382] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 239.553329][ T3382] ext4 filesystem being mounted at /179/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 239.688590][ T3387] netlink: 12 bytes leftover after parsing attributes in process `syz.5.778'. [ 239.890545][ T3387] netlink: 4 bytes leftover after parsing attributes in process `syz.5.778'. [ 239.921373][ T3352] netlink: 44 bytes leftover after parsing attributes in process `syz.1.769'. [ 239.933446][ T3387] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 239.940746][ T3387] IPv6: NLM_F_CREATE should be set when creating new route [ 240.110500][ T383] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 240.122617][ T383] EXT4-fs error (device loop0): ext4_release_dquot:6839: comm kworker/u4:6: Failed to release dquot type 1 [ 240.136219][ T283] EXT4-fs (loop0): unmounting filesystem. [ 240.143060][ T2583] EXT4-fs (loop6): unmounting filesystem. [ 240.203696][ T28] audit: type=1400 audit(1760877790.689:490): avc: denied { write } for pid=3397 comm="syz.6.779" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 240.245517][ T3402] netlink: 12 bytes leftover after parsing attributes in process `syz.6.782'. [ 240.342187][ T60] usb 2-1: USB disconnect, device number 9 [ 240.410732][ T3405] loop0: detected capacity change from 0 to 1024 [ 240.426725][ T3405] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 240.560247][ T3408] loop6: detected capacity change from 0 to 512 [ 240.733296][ T3408] EXT4-fs (loop6): 1 orphan inode deleted [ 240.739157][ T3408] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 240.751012][ T3408] ext4 filesystem being mounted at /39/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 241.067703][ T28] audit: type=1400 audit(1760877791.549:491): avc: denied { mount } for pid=3404 comm="syz.0.783" name="/" dev="incremental-fs" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 241.649701][ T907] Quota error (device loop6): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 241.708576][ T907] EXT4-fs error (device loop6): ext4_release_dquot:6839: comm kworker/u4:7: Failed to release dquot type 1 [ 241.737153][ T28] audit: type=1400 audit(1760877792.219:492): avc: denied { rmdir } for pid=283 comm="syz-executor" name="lost+found" dev="loop0" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 241.951396][ T2583] EXT4-fs (loop6): unmounting filesystem. [ 242.104076][ T283] EXT4-fs (loop0): unmounting filesystem. [ 242.164714][ T28] audit: type=1400 audit(1760877792.399:493): avc: denied { unmount } for pid=283 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 242.539632][ T3421] loop1: detected capacity change from 0 to 256 [ 242.592796][ T28] audit: type=1400 audit(1760877792.419:494): avc: denied { unlink } for pid=283 comm="syz-executor" name="file0" dev="loop0" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 242.626747][ T3421] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x2e76b09e, utbl_chksum : 0xe619d30d) [ 242.695262][ T3425] loop0: detected capacity change from 0 to 2048 [ 242.825376][ T28] audit: type=1400 audit(1760877792.449:495): avc: denied { unlink } for pid=283 comm="syz-executor" name="file1" dev="loop0" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 242.848303][ T28] audit: type=1400 audit(1760877793.189:496): avc: denied { write } for pid=3420 comm="syz.1.787" name="/" dev="loop1" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 243.192260][ T3425] EXT4-fs warning (device loop0): read_mmp_block:115: Error -117 while reading MMP block 64 [ 243.219648][ T28] audit: type=1400 audit(1760877793.189:497): avc: denied { add_name } for pid=3420 comm="syz.1.787" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 243.243082][ T3433] netlink: 12 bytes leftover after parsing attributes in process `syz.5.790'. [ 243.257516][ T3433] netlink: 4 bytes leftover after parsing attributes in process `syz.5.790'. [ 243.258917][ T28] audit: type=1400 audit(1760877793.189:498): avc: denied { associate } for pid=3420 comm="syz.1.787" name="file1" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 243.271481][ T3433] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 243.295360][ T3433] IPv6: NLM_F_CREATE should be set when creating new route [ 243.314705][ T28] audit: type=1400 audit(1760877793.209:499): avc: denied { read write open } for pid=3420 comm="syz.1.787" path="/158/file0/file1" dev="loop1" ino=1048636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 244.319336][ T3453] netlink: 4 bytes leftover after parsing attributes in process `syz.5.797'. [ 244.330290][ T3453] netlink: 12 bytes leftover after parsing attributes in process `syz.5.797'. [ 244.491877][ T28] audit: type=1400 audit(1760877794.969:500): avc: denied { create } for pid=3452 comm="syz.5.797" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 244.534552][ T28] audit: type=1400 audit(1760877794.969:501): avc: denied { write } for pid=3452 comm="syz.5.797" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 244.817241][ T3463] loop0: detected capacity change from 0 to 128 [ 244.964573][ T28] audit: type=1400 audit(1760877795.449:502): avc: denied { create } for pid=3468 comm="syz.0.800" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 244.984657][ T28] audit: type=1400 audit(1760877795.469:503): avc: denied { connect } for pid=3468 comm="syz.0.800" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 245.004540][ T28] audit: type=1400 audit(1760877795.489:504): avc: denied { setopt } for pid=3468 comm="syz.0.800" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 245.197203][ T3476] netlink: 12 bytes leftover after parsing attributes in process `syz.0.802'. [ 245.219093][ T3476] netlink: 4 bytes leftover after parsing attributes in process `syz.0.802'. [ 245.232404][ T3476] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 245.239760][ T3476] IPv6: NLM_F_CREATE should be set when creating new route [ 246.949562][ T28] audit: type=1400 audit(1760877796.809:505): avc: denied { connect } for pid=3484 comm="syz.0.805" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 247.166353][ T3499] netlink: 4 bytes leftover after parsing attributes in process `syz.6.810'. [ 247.176892][ T3499] netlink: 12 bytes leftover after parsing attributes in process `syz.6.810'. [ 247.252205][ T28] audit: type=1400 audit(1760877797.719:506): avc: denied { ioctl } for pid=3503 comm="syz.2.812" path="/dev/uinput" dev="devtmpfs" ino=262 ioctlcmd=0x55c9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 248.229919][ T3515] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 248.246384][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 248.246401][ T28] audit: type=1400 audit(1760877798.729:509): avc: denied { read write } for pid=3514 comm="syz.2.815" name="vhost-vsock" dev="devtmpfs" ino=268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 248.391064][ T28] audit: type=1400 audit(1760877798.769:510): avc: denied { open } for pid=3514 comm="syz.2.815" path="/dev/vhost-vsock" dev="devtmpfs" ino=268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 248.510672][ T3519] netlink: 12 bytes leftover after parsing attributes in process `syz.5.816'. [ 248.589910][ T3519] netlink: 4 bytes leftover after parsing attributes in process `syz.5.816'. [ 248.618633][ T3516] loop2: detected capacity change from 0 to 256 [ 248.623032][ T3519] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 248.632453][ T3519] IPv6: NLM_F_CREATE should be set when creating new route [ 248.649096][ T3516] FAT-fs (loop2): Unrecognized mount option "check=relaxdd" or missing value [ 248.752251][ T3529] FAULT_INJECTION: forcing a failure. [ 248.752251][ T3529] name failslab, interval 1, probability 0, space 0, times 0 [ 248.765371][ T3529] CPU: 1 PID: 3529 Comm: syz.5.818 Not tainted syzkaller #0 [ 248.772777][ T3529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 248.782951][ T3529] Call Trace: [ 248.786285][ T3529] [ 248.789243][ T3529] __dump_stack+0x21/0x24 [ 248.793624][ T3529] dump_stack_lvl+0xee/0x150 [ 248.798435][ T3529] ? __cfi_dump_stack_lvl+0x8/0x8 [ 248.803502][ T3529] ? create_new_namespaces+0x3a2/0x660 [ 248.809100][ T3529] ? ksys_unshare+0x4ac/0x7b0 [ 248.813902][ T3529] ? __x64_sys_unshare+0x38/0x40 [ 248.818909][ T3529] ? x64_sys_call+0x767/0x9a0 [ 248.823661][ T3529] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 248.829769][ T3529] dump_stack+0x15/0x24 [ 248.833959][ T3529] should_fail_ex+0x3d4/0x520 [ 248.838678][ T3529] __should_failslab+0xac/0xf0 [ 248.843472][ T3529] ? __register_sysctl_table+0xf4/0xe30 [ 248.849138][ T3529] should_failslab+0x9/0x20 [ 248.853674][ T3529] __kmem_cache_alloc_node+0x3d/0x2c0 [ 248.859085][ T3529] ? __register_sysctl_table+0xf4/0xe30 [ 248.864685][ T3529] __kmalloc+0xa1/0x1e0 [ 248.868893][ T3529] __register_sysctl_table+0xf4/0xe30 [ 248.874298][ T3529] ? preempt_count_add+0x90/0x1b0 [ 248.879534][ T3529] register_net_sysctl+0x24f/0x260 [ 248.884704][ T3529] nf_log_net_init+0x5c9/0x680 [ 248.889642][ T3529] ops_init+0x1c8/0x4a0 [ 248.893847][ T3529] ? memset+0x35/0x40 [ 248.897851][ T3529] setup_net+0x4ab/0xcb0 [ 248.902117][ T3529] ? copy_net_ns+0x5c0/0x5c0 [ 248.906723][ T3529] ? kasan_save_alloc_info+0x25/0x30 [ 248.912029][ T3529] ? kmalloc_trace+0x40/0xb0 [ 248.917075][ T3529] copy_net_ns+0x355/0x5c0 [ 248.921791][ T3529] create_new_namespaces+0x3a2/0x660 [ 248.927122][ T3529] unshare_nsproxy_namespaces+0x120/0x170 [ 248.933128][ T3529] ksys_unshare+0x4ac/0x7b0 [ 248.937651][ T3529] ? __cfi_ksys_unshare+0x10/0x10 [ 248.942699][ T3529] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 248.948781][ T3529] __x64_sys_unshare+0x38/0x40 [ 248.953755][ T3529] x64_sys_call+0x767/0x9a0 [ 248.958294][ T3529] do_syscall_64+0x4c/0xa0 [ 248.962718][ T3529] ? clear_bhb_loop+0x30/0x80 [ 248.967850][ T3529] ? clear_bhb_loop+0x30/0x80 [ 248.972571][ T3529] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 248.978534][ T3529] RIP: 0033:0x7f492478efc9 [ 248.983060][ T3529] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 249.002676][ T3529] RSP: 002b:00007f4925664038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 249.011106][ T3529] RAX: ffffffffffffffda RBX: 00007f49249e6090 RCX: 00007f492478efc9 [ 249.019456][ T3529] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000042000000 [ 249.027556][ T3529] RBP: 00007f4925664090 R08: 0000000000000000 R09: 0000000000000000 [ 249.035969][ T3529] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 249.043943][ T3529] R13: 00007f49249e6128 R14: 00007f49249e6090 R15: 00007ffd94254428 [ 249.051923][ T3529] [ 249.090706][ T3520] loop2: detected capacity change from 0 to 8192 [ 249.161332][ T1152] I/O error, dev loop2, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 249.187543][ T28] audit: type=1400 audit(1760877799.669:511): avc: denied { mounton } for pid=3514 comm="syz.2.815" path="/proc/565/task" dev="proc" ino=29006 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 249.220221][ T28] audit: type=1400 audit(1760877799.669:512): avc: denied { mount } for pid=3514 comm="syz.2.815" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 249.467294][ T3543] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 249.478093][ T28] audit: type=1400 audit(1760877799.949:513): avc: denied { write } for pid=3540 comm="syz.2.822" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 249.497678][ T28] audit: type=1400 audit(1760877799.949:514): avc: denied { listen } for pid=3540 comm="syz.2.822" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 249.518151][ T28] audit: type=1400 audit(1760877799.959:515): avc: denied { relabelto } for pid=3540 comm="syz.2.822" name="161" dev="tmpfs" ino=936 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 249.549979][ T28] audit: type=1400 audit(1760877799.959:516): avc: denied { associate } for pid=3540 comm="syz.2.822" name="161" dev="tmpfs" ino=936 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:fsadm_exec_t:s0" [ 249.741553][ T3552] FAULT_INJECTION: forcing a failure. [ 249.741553][ T3552] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 249.754789][ T3552] CPU: 1 PID: 3552 Comm: syz.5.823 Not tainted syzkaller #0 [ 249.762186][ T3552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 249.772262][ T3552] Call Trace: [ 249.775554][ T3552] [ 249.778498][ T3552] __dump_stack+0x21/0x24 [ 249.782858][ T3552] dump_stack_lvl+0xee/0x150 [ 249.787470][ T3552] ? __cfi_dump_stack_lvl+0x8/0x8 [ 249.792531][ T3552] ? __switch_to_asm+0x3a/0x60 [ 249.797322][ T3552] dump_stack+0x15/0x24 [ 249.801511][ T3552] should_fail_ex+0x3d4/0x520 [ 249.806228][ T3552] should_fail+0xb/0x10 [ 249.810407][ T3552] should_fail_usercopy+0x1a/0x20 [ 249.815469][ T3552] _copy_from_user+0x1e/0xc0 [ 249.820086][ T3552] iovec_from_user+0x1aa/0x2e0 [ 249.824884][ T3552] __import_iovec+0x71/0x470 [ 249.829499][ T3552] import_iovec+0x7c/0xb0 [ 249.833871][ T3552] ___sys_sendmsg+0x1e4/0x290 [ 249.838575][ T3552] ? __sys_sendmsg+0x270/0x270 [ 249.843361][ T3552] ? __cfi___switch_to+0x10/0x10 [ 249.848330][ T3552] ? __fdget+0x19c/0x220 [ 249.852616][ T3552] __x64_sys_sendmsg+0x1f0/0x2c0 [ 249.857587][ T3552] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 249.863073][ T3552] ? __kasan_check_write+0x14/0x20 [ 249.868212][ T3552] ? fpregs_restore_userregs+0x128/0x260 [ 249.873868][ T3552] ? switch_fpu_return+0xe/0x10 [ 249.878748][ T3552] x64_sys_call+0x171/0x9a0 [ 249.883292][ T3552] do_syscall_64+0x4c/0xa0 [ 249.887822][ T3552] ? clear_bhb_loop+0x30/0x80 [ 249.892536][ T3552] ? clear_bhb_loop+0x30/0x80 [ 249.897254][ T3552] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 249.903171][ T3552] RIP: 0033:0x7f492478efc9 [ 249.907602][ T3552] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 249.927505][ T3552] RSP: 002b:00007f4925643038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 249.935955][ T3552] RAX: ffffffffffffffda RBX: 00007f49249e6180 RCX: 00007f492478efc9 [ 249.943950][ T3552] RDX: 0000000000000000 RSI: 0000200000000880 RDI: 0000000000000007 [ 249.952375][ T3552] RBP: 00007f4925643090 R08: 0000000000000000 R09: 0000000000000000 [ 249.960367][ T3552] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 249.968373][ T3552] R13: 00007f49249e6218 R14: 00007f49249e6180 R15: 00007ffd94254428 [ 249.976423][ T3552] [ 249.980498][ T3552] netlink: 'syz.5.823': attribute type 4 has an invalid length. [ 250.066331][ T28] audit: type=1400 audit(1760877800.479:517): avc: denied { wake_alarm } for pid=3544 comm="syz.5.823" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 250.549556][ T28] audit: type=1400 audit(1760877800.699:518): avc: denied { write } for pid=286 comm="syz-executor" name="161" dev="tmpfs" ino=936 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 250.860056][ T3559] netlink: 24 bytes leftover after parsing attributes in process `syz.2.826'. [ 251.628793][ T3575] loop6: detected capacity change from 0 to 40427 [ 252.061710][ T3577] loop5: detected capacity change from 0 to 1024 [ 252.068533][ T3577] ext4: Unknown parameter 'subj_role' [ 252.078028][ T3575] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 252.086613][ T3575] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 252.205970][ T3557] loop0: detected capacity change from 0 to 40427 [ 252.476317][ T3575] F2FS-fs (loop6): Found nat_bits in checkpoint [ 252.529452][ T3575] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 252.536871][ T3575] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 252.573979][ T3557] F2FS-fs (loop0): Fix alignment : internally, start(4096) end(16896) block(12288) [ 252.596833][ T3557] F2FS-fs (loop0): invalid crc value [ 252.662476][ T3557] F2FS-fs (loop0): Found nat_bits in checkpoint [ 252.713363][ T2583] F2FS-fs (loop6): invalid namelen(0), ino:0, run fsck to fix. [ 252.713390][ T2583] F2FS-fs (loop6): invalid namelen(0), ino:0, run fsck to fix. [ 252.735623][ T3588] fuse: Bad value for 'group_id' [ 252.750975][ T2583] F2FS-fs (loop6): invalid namelen(0), ino:0, run fsck to fix. [ 252.750995][ T2583] F2FS-fs (loop6): invalid namelen(0), ino:0, run fsck to fix. [ 252.758584][ T2583] F2FS-fs (loop6): invalid namelen(0), ino:0, run fsck to fix. [ 252.809497][ T2583] F2FS-fs (loop6): invalid namelen(0), ino:0, run fsck to fix. [ 252.833400][ T2583] F2FS-fs (loop6): invalid namelen(0), ino:0, run fsck to fix. [ 252.881500][ T3557] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 252.982212][ T3557] F2FS-fs (loop0): Try to recover all the superblocks, ret: 0 [ 253.076715][ T283] syz-executor: attempt to access beyond end of device [ 253.076715][ T283] loop0: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 253.123509][ T283] syz-executor: attempt to access beyond end of device [ 253.123509][ T283] loop0: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 253.235206][ T43] tipc: Disabling bearer [ 253.248727][ T43] tipc: Left network mode [ 253.264507][ T2035] syz.0.409: attempt to access beyond end of device [ 253.264507][ T2035] loop0: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 253.398869][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 253.398886][ T28] audit: type=1400 audit(1760877803.879:532): avc: denied { read write } for pid=3605 comm="syz.5.840" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 253.451961][ T28] audit: type=1400 audit(1760877803.879:533): avc: denied { open } for pid=3605 comm="syz.5.840" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 253.873020][ T43] device bridge_slave_1 left promiscuous mode [ 253.890937][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.930221][ T43] device bridge_slave_0 left promiscuous mode [ 253.946919][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.971592][ T43] device veth1_macvtap left promiscuous mode [ 253.987517][ T43] device veth0_vlan left promiscuous mode [ 254.184823][ T28] audit: type=1400 audit(1760877804.669:534): avc: denied { name_bind } for pid=3615 comm="syz.1.844" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 254.240964][ T28] audit: type=1400 audit(1760877804.669:535): avc: denied { node_bind } for pid=3615 comm="syz.1.844" saddr=255.255.255.255 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 254.278051][ T28] audit: type=1400 audit(1760877804.759:536): avc: denied { mounton } for pid=3622 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 254.613489][ T3621] netlink: 28 bytes leftover after parsing attributes in process `syz.2.845'. [ 254.681508][ T3622] bridge0: port 1(bridge_slave_0) entered blocking state [ 254.688722][ T3622] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.696710][ T3622] device bridge_slave_0 entered promiscuous mode [ 254.705262][ T3622] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.712564][ T3622] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.736727][ T3622] device bridge_slave_1 entered promiscuous mode [ 254.800799][ T3628] loop6: detected capacity change from 0 to 40427 [ 254.807834][ T3628] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 254.815779][ T3628] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 255.018287][ T3628] F2FS-fs (loop6): Found nat_bits in checkpoint [ 255.060465][ T3628] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 255.067590][ T3628] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 255.094069][ T3622] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.101292][ T3622] bridge0: port 2(bridge_slave_1) entered forwarding state [ 255.108606][ T3622] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.115717][ T3622] bridge0: port 1(bridge_slave_0) entered forwarding state [ 255.196293][ T907] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 255.208786][ T907] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.216721][ T907] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.234252][ T907] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 255.242715][ T907] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.249805][ T907] bridge0: port 1(bridge_slave_0) entered forwarding state [ 255.356698][ T907] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 255.414010][ T2583] F2FS-fs (loop6): invalid namelen(0), ino:0, run fsck to fix. [ 255.414067][ T2583] F2FS-fs (loop6): invalid namelen(0), ino:0, run fsck to fix. [ 255.445619][ T2583] F2FS-fs (loop6): invalid namelen(0), ino:0, run fsck to fix. [ 255.476007][ T907] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.491530][ T907] bridge0: port 2(bridge_slave_1) entered forwarding state [ 255.577453][ T907] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 255.593832][ T907] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 255.621785][ T907] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 255.633394][ T907] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 255.655523][ T907] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 255.670053][ T907] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 255.691938][ T3622] device veth0_vlan entered promiscuous mode [ 255.698914][ T907] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 255.706543][ T907] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 255.727813][ T907] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 255.736615][ T907] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 255.746331][ T3622] device veth1_macvtap entered promiscuous mode [ 255.758379][ T907] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 255.766460][ T907] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 255.775041][ T907] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 255.821338][ T907] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 255.832668][ T28] audit: type=1400 audit(1760877806.309:537): avc: denied { mounton } for pid=3622 comm="syz-executor" path="/root/syzkaller.2KKlA2/syz-tmp" dev="sda1" ino=2051 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 255.867918][ T907] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 255.984442][ T3660] loop1: detected capacity change from 0 to 512 [ 257.099291][ T3668] netlink: 12 bytes leftover after parsing attributes in process `syz.7.853'. [ 257.121819][ T28] audit: type=1400 audit(1760877806.339:538): avc: denied { mount } for pid=3622 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 257.155361][ T3660] EXT4-fs (loop1): 1 orphan inode deleted [ 257.161202][ T3660] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 257.257893][ T3660] ext4 filesystem being mounted at /168/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 257.291864][ T10] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 257.295138][ T28] audit: type=1400 audit(1760877806.359:539): avc: denied { mounton } for pid=3622 comm="syz-executor" path="/root/syzkaller.2KKlA2/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 257.302433][ T10] EXT4-fs error (device loop1): ext4_release_dquot:6839: comm kworker/u4:1: Failed to release dquot type 1 [ 257.396197][ T3676] loop7: detected capacity change from 0 to 512 [ 257.427457][ T284] EXT4-fs (loop1): unmounting filesystem. [ 257.459554][ T28] audit: type=1400 audit(1760877806.359:540): avc: denied { mounton } for pid=3622 comm="syz-executor" path="/root/syzkaller.2KKlA2/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=28544 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 257.511488][ T3676] EXT4-fs (loop7): 1 orphan inode deleted [ 257.517307][ T3676] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 257.526506][ T3676] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 257.541142][ T383] EXT4-fs error (device loop7): ext4_release_dquot:6839: comm kworker/u4:6: Failed to release dquot type 1 [ 258.349025][ T3702] loop5: detected capacity change from 0 to 8192 [ 258.460906][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 258.460922][ T28] audit: type=1400 audit(1760877808.949:547): avc: denied { write } for pid=3705 comm="syz.1.861" name="ptp0" dev="devtmpfs" ino=264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 258.854332][ T3710] loop2: detected capacity change from 0 to 4096 [ 258.885094][ T3710] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 258.903109][ T3710] FAULT_INJECTION: forcing a failure. [ 258.903109][ T3710] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 258.916338][ T3710] CPU: 0 PID: 3710 Comm: syz.2.862 Not tainted syzkaller #0 [ 258.923654][ T3710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 258.933733][ T3710] Call Trace: [ 258.937035][ T3710] [ 258.939981][ T3710] __dump_stack+0x21/0x24 [ 258.944333][ T3710] dump_stack_lvl+0xee/0x150 [ 258.948948][ T3710] ? __cfi_dump_stack_lvl+0x8/0x8 [ 258.953987][ T3710] ? debug_smp_processor_id+0x17/0x20 [ 258.959387][ T3710] ? hrtimer_reprogram+0x396/0x430 [ 258.964533][ T3710] dump_stack+0x15/0x24 [ 258.968715][ T3710] should_fail_ex+0x3d4/0x520 [ 258.973423][ T3710] should_fail+0xb/0x10 [ 258.977615][ T3710] should_fail_usercopy+0x1a/0x20 [ 258.982678][ T3710] copy_fpstate_to_sigframe+0x849/0xaa0 [ 258.988257][ T3710] ? copy_fpstate_to_sigframe+0x17c/0xaa0 [ 258.994004][ T3710] ? __cfi_copy_fpstate_to_sigframe+0x10/0x10 [ 259.000102][ T3710] ? get_signal+0x124b/0x1520 [ 259.004828][ T3710] ? fpu__alloc_mathframe+0xb3/0x130 [ 259.010144][ T3710] arch_do_signal_or_restart+0x5bd/0x1030 [ 259.015912][ T3710] ? __se_sys_flock+0x4ce/0x580 [ 259.020793][ T3710] ? __x64_sys_flock+0x70/0x70 [ 259.025571][ T3710] ? mutex_unlock+0x89/0x220 [ 259.030342][ T3710] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 259.036513][ T3710] ? __cfi_ksys_write+0x10/0x10 [ 259.041377][ T3710] exit_to_user_mode_loop+0x7a/0xb0 [ 259.046790][ T3710] exit_to_user_mode_prepare+0x5a/0xa0 [ 259.052716][ T3710] syscall_exit_to_user_mode+0x1a/0x30 [ 259.058197][ T3710] do_syscall_64+0x58/0xa0 [ 259.062641][ T3710] ? clear_bhb_loop+0x30/0x80 [ 259.067416][ T3710] ? clear_bhb_loop+0x30/0x80 [ 259.072188][ T3710] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 259.078087][ T3710] RIP: 0033:0x7f7c8f78efc7 [ 259.082518][ T3710] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 [ 259.102685][ T3710] RSP: 002b:00007f7c8e1f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000049 [ 259.111133][ T3710] RAX: 0000000000000049 RBX: 00007f7c8f9e5fa0 RCX: 00007f7c8f78efc9 [ 259.119113][ T3710] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000007 [ 259.127086][ T3710] RBP: 00007f7c8e1f7090 R08: 0000000000000000 R09: 0000000000000000 [ 259.135078][ T3710] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 259.143111][ T3710] R13: 00007f7c8f9e6038 R14: 00007f7c8f9e5fa0 R15: 00007ffd6c877be8 [ 259.151115][ T3710] [ 259.619533][ T1801] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 259.703375][ T3733] loop5: detected capacity change from 0 to 512 [ 259.720899][ T3733] EXT4-fs: Ignoring removed mblk_io_submit option [ 259.761897][ T3733] ext2: Unknown parameter 'noacl' [ 259.792980][ T3735] netlink: 28 bytes leftover after parsing attributes in process `syz.6.870'. [ 259.815981][ T1801] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 259.900997][ T1801] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2c24, bcdDevice= 0.00 [ 259.910409][ T1801] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.919306][ T1801] usb 2-1: config 0 descriptor?? [ 260.249035][ T286] EXT4-fs (loop2): unmounting filesystem. [ 260.276986][ T3622] EXT4-fs (loop7): unmounting filesystem. [ 260.395602][ T1801] pyra 0003:1E7D:2C24.000A: unknown main item tag 0x0 [ 260.402723][ T1801] pyra 0003:1E7D:2C24.000A: unknown main item tag 0x0 [ 260.409590][ T1801] pyra 0003:1E7D:2C24.000A: item fetching failed at offset 2/7 [ 260.417378][ T1801] pyra 0003:1E7D:2C24.000A: parse failed [ 260.423100][ T1801] pyra: probe of 0003:1E7D:2C24.000A failed with error -22 [ 260.762398][ T350] usb 2-1: USB disconnect, device number 10 [ 260.807219][ T3748] loop5: detected capacity change from 0 to 2048 [ 260.833689][ T3748] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 260.842701][ T3748] ext4 filesystem being mounted at /160/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 260.928023][ T3754] loop2: detected capacity change from 0 to 4096 [ 260.934878][ T3754] EXT4-fs: Ignoring removed mblk_io_submit option [ 260.950003][ T3754] EXT4-fs (loop2): Test dummy encryption mode enabled [ 261.033179][ T28] audit: type=1400 audit(1760877811.509:548): avc: denied { create } for pid=3747 comm="syz.5.873" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 261.086095][ T3754] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 261.682568][ T952] EXT4-fs (loop5): unmounting filesystem. [ 262.104731][ T28] audit: type=1400 audit(1760877812.589:549): avc: denied { write } for pid=3760 comm="syz.1.877" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 262.130856][ T286] EXT4-fs (loop2): unmounting filesystem. [ 262.647911][ T3777] loop1: detected capacity change from 0 to 512 [ 262.709582][ T3777] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 262.730006][ T3777] ext4 filesystem being mounted at /173/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 263.255314][ T3786] loop7: detected capacity change from 0 to 512 [ 263.389832][ T3786] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 264.047417][ T284] EXT4-fs (loop1): unmounting filesystem. [ 264.054339][ T3622] EXT4-fs (loop7): unmounting filesystem. [ 264.534060][ T3804] loop6: detected capacity change from 0 to 40427 [ 264.570419][ T28] audit: type=1400 audit(1760877815.059:550): avc: denied { getopt } for pid=3815 comm="syz.1.889" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 264.572368][ T3804] F2FS-fs (loop6): Found nat_bits in checkpoint [ 264.598039][ T28] audit: type=1400 audit(1760877815.059:551): avc: denied { ioctl } for pid=3815 comm="syz.1.889" path="socket:[29615]" dev="sockfs" ino=29615 ioctlcmd=0xf509 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 264.660003][ T3825] netlink: 12 bytes leftover after parsing attributes in process `syz.1.891'. [ 264.672586][ T3804] F2FS-fs (loop6): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 264.685574][ T3825] netlink: 4 bytes leftover after parsing attributes in process `syz.1.891'. [ 264.686127][ T3804] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 264.709604][ T3584] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 264.715930][ T3825] netlink: 20 bytes leftover after parsing attributes in process `syz.1.891'. [ 264.822466][ T28] audit: type=1400 audit(1760877815.309:552): avc: denied { quotaon } for pid=3803 comm="syz.6.886" name="file0" dev="loop6" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 264.852292][ T3804] netlink: 224 bytes leftover after parsing attributes in process `syz.6.886'. [ 264.861363][ T3804] netlink: 224 bytes leftover after parsing attributes in process `syz.6.886'. [ 264.870455][ T3804] netlink: 38 bytes leftover after parsing attributes in process `syz.6.886'. [ 264.880294][ T3830] fuse: Unknown parameter '' [ 264.885953][ T28] audit: type=1400 audit(1760877815.369:553): avc: denied { mounton } for pid=3829 comm="syz.2.893" path="/174/file0" dev="configfs" ino=13670 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 264.915866][ T3584] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 264.919205][ T3830] overlayfs: unrecognized mount option "/" or missing value [ 264.944737][ T3584] usb 8-1: New USB device found, idVendor=1e7d, idProduct=2c24, bcdDevice= 0.00 [ 264.964135][ T3584] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.978234][ T3584] usb 8-1: config 0 descriptor?? [ 265.024148][ T2583] syz-executor: attempt to access beyond end of device [ 265.024148][ T2583] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 265.357977][ T28] audit: type=1400 audit(1760877815.839:554): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 265.387015][ T1529] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 265.497370][ T3584] pyra 0003:1E7D:2C24.000B: unknown main item tag 0x0 [ 265.504573][ T3584] pyra 0003:1E7D:2C24.000B: unknown main item tag 0x0 [ 265.511620][ T3584] pyra 0003:1E7D:2C24.000B: item fetching failed at offset 2/7 [ 265.519436][ T3584] pyra 0003:1E7D:2C24.000B: parse failed [ 265.525127][ T3584] pyra: probe of 0003:1E7D:2C24.000B failed with error -22 [ 265.708784][ T39] usb 8-1: USB disconnect, device number 2 [ 265.830589][ T1529] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 265.841707][ T1529] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2c24, bcdDevice= 0.00 [ 265.851211][ T1529] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.860460][ T1529] usb 2-1: config 0 descriptor?? [ 266.410534][ T1529] pyra 0003:1E7D:2C24.000C: unknown main item tag 0x0 [ 266.417387][ T1529] pyra 0003:1E7D:2C24.000C: unknown main item tag 0x0 [ 266.426047][ T1529] pyra 0003:1E7D:2C24.000C: item fetching failed at offset 2/7 [ 266.433846][ T1529] pyra 0003:1E7D:2C24.000C: parse failed [ 266.439563][ T1529] pyra: probe of 0003:1E7D:2C24.000C failed with error -22 [ 266.487619][ T3856] netlink: 12 bytes leftover after parsing attributes in process `syz.6.902'. [ 266.506310][ T39] usb 2-1: USB disconnect, device number 11 [ 266.522009][ T3856] netlink: 4 bytes leftover after parsing attributes in process `syz.6.902'. [ 266.549317][ T3856] netlink: 20 bytes leftover after parsing attributes in process `syz.6.902'. [ 266.588298][ T3860] loop6: detected capacity change from 0 to 4096 [ 266.595710][ T3860] EXT4-fs: Ignoring removed mblk_io_submit option [ 266.602310][ T3860] EXT4-fs: Ignoring removed orlov option [ 266.608729][ T3860] EXT4-fs (loop6): Test dummy encryption mode enabled [ 266.625608][ T3860] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 266.711863][ T3854] loop7: detected capacity change from 0 to 40427 [ 266.727562][ T3854] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12 [ 266.739536][ T3854] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 266.750746][ T3854] F2FS-fs (loop7): invalid crc value [ 266.757677][ T3854] F2FS-fs (loop7): Found nat_bits in checkpoint [ 266.798333][ T3854] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 266.805574][ T3854] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 266.948336][ T28] audit: type=1400 audit(1760877817.429:555): avc: denied { mounton } for pid=3852 comm="syz.7.900" path="/6/bus/bus" dev="loop7" ino=456 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 266.971563][ T28] audit: type=1400 audit(1760877817.429:556): avc: denied { ioctl } for pid=3871 comm="syz.2.906" path="/dev/binderfs/binder1" dev="binder" ino=8 ioctlcmd=0x6210 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 267.005422][ T3875] syz.7.900: attempt to access beyond end of device [ 267.005422][ T3875] loop7: rw=2049, sector=77824, nr_sectors = 136 limit=40427 [ 267.019336][ T28] audit: type=1400 audit(1760877817.489:557): avc: denied { ioctl } for pid=3871 comm="syz.2.906" path="socket:[30785]" dev="sockfs" ino=30785 ioctlcmd=0xf514 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 267.019587][ T3854] loop7: detected capacity change from 40427 to 64 [ 267.394786][ T28] audit: type=1400 audit(1760877817.879:558): avc: denied { getopt } for pid=3879 comm="syz.1.908" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 267.444495][ T2583] EXT4-fs (loop6): unmounting filesystem. [ 267.543529][ T3622] syz-executor: attempt to access beyond end of device [ 267.543529][ T3622] loop7: rw=2049, sector=32808, nr_sectors = 8 limit=64 [ 267.557698][ T3622] syz-executor: attempt to access beyond end of device [ 267.557698][ T3622] loop7: rw=2049, sector=36928, nr_sectors = 8 limit=64 [ 267.573137][ T28] audit: type=1400 audit(1760877818.059:559): avc: denied { unmount } for pid=3622 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 267.596197][ T3885] loop6: detected capacity change from 0 to 512 [ 267.617393][ T3885] EXT4-fs (loop6): 1 orphan inode deleted [ 267.623195][ T3885] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 267.632508][ T3885] ext4 filesystem being mounted at /57/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 267.632567][ T383] EXT4-fs error (device loop6): ext4_release_dquot:6839: comm kworker/u4:6: Failed to release dquot type 1 [ 267.657344][ T10] F2FS-fs (loop7): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 267.669346][ T10] F2FS-fs (loop7): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 267.886792][ T3893] loop5: detected capacity change from 0 to 1024 [ 267.906969][ T3893] ext4: Unknown parameter 'hash' [ 268.064631][ T3898] loop1: detected capacity change from 0 to 512 [ 268.103507][ T3898] EXT4-fs: Ignoring removed i_version option [ 268.126486][ T3898] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 268.154209][ T3895] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.162084][ T3895] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.170143][ T3895] device bridge_slave_0 entered promiscuous mode [ 268.177864][ T3895] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.185081][ T3895] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.192928][ T3895] device bridge_slave_1 entered promiscuous mode [ 268.564122][ T2583] EXT4-fs (loop6): unmounting filesystem. [ 268.570366][ T907] device bridge_slave_1 left promiscuous mode [ 268.584394][ T907] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.658265][ T907] device bridge_slave_0 left promiscuous mode [ 268.668734][ T907] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.678990][ T907] device veth1_macvtap left promiscuous mode [ 268.685553][ T907] device veth0_vlan left promiscuous mode [ 268.792770][ T3912] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 268.800057][ T3912] IPv6: NLM_F_CREATE should be set when creating new route [ 268.818674][ T3914] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.825870][ T3914] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.859577][ T1529] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 268.897200][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 268.908728][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 268.937009][ T284] EXT4-fs (loop1): unmounting filesystem. [ 268.943334][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 268.955297][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 268.970166][ T373] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.977267][ T373] bridge0: port 1(bridge_slave_0) entered forwarding state [ 268.987602][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 268.996338][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 269.000467][ T3918] FAULT_INJECTION: forcing a failure. [ 269.000467][ T3918] name failslab, interval 1, probability 0, space 0, times 0 [ 269.005133][ T373] bridge0: port 2(bridge_slave_1) entered blocking state [ 269.019700][ T3918] CPU: 1 PID: 3918 Comm: syz.1.918 Not tainted syzkaller #0 [ 269.024116][ T373] bridge0: port 2(bridge_slave_1) entered forwarding state [ 269.031371][ T3918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 269.031386][ T3918] Call Trace: [ 269.031394][ T3918] [ 269.031404][ T3918] __dump_stack+0x21/0x24 [ 269.049090][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 269.051944][ T3918] dump_stack_lvl+0xee/0x150 [ 269.051974][ T3918] ? __cfi_dump_stack_lvl+0x8/0x8 [ 269.055558][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 269.059262][ T3918] ? ____fput+0x15/0x20 [ 269.059293][ T3918] ? exit_to_user_mode_loop+0x9b/0xb0 [ 269.067645][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 269.071261][ T3918] ? exit_to_user_mode_prepare+0x5a/0xa0 [ 269.071288][ T3918] ? syscall_exit_to_user_mode+0x1a/0x30 [ 269.071318][ T3918] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 269.071345][ T3918] dump_stack+0x15/0x24 [ 269.071364][ T3918] should_fail_ex+0x3d4/0x520 [ 269.077017][ T1529] usb 6-1: Using ep0 maxpacket: 8 [ 269.084194][ T3918] __should_failslab+0xac/0xf0 [ 269.084225][ T3918] ? tracepoint_probe_unregister+0x1e6/0x8b0 [ 269.089046][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 269.093763][ T3918] should_failslab+0x9/0x20 [ 269.093788][ T3918] __kmem_cache_alloc_node+0x3d/0x2c0 [ 269.093816][ T3918] ? __cfi_mutex_lock+0x10/0x10 [ 269.102914][ T373] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 269.107177][ T3918] ? delete_node+0x2f4/0xa60 [ 269.107212][ T3918] ? tracepoint_probe_unregister+0x1e6/0x8b0 [ 269.113340][ T1529] usb 6-1: config index 0 descriptor too short (expected 36, got 26) [ 269.119109][ T3918] __kmalloc+0xa1/0x1e0 [ 269.123625][ T1529] usb 6-1: config 0 has an invalid descriptor of length 9, skipping remainder of the config [ 269.128047][ T3918] ? __cfi___bpf_trace_kfree+0x10/0x10 [ 269.212349][ T3918] tracepoint_probe_unregister+0x1e6/0x8b0 [ 269.218172][ T3918] bpf_probe_unregister+0x61/0x70 [ 269.223204][ T3918] bpf_raw_tp_link_release+0x63/0x90 [ 269.228589][ T3918] bpf_link_free+0x13a/0x390 [ 269.233203][ T3918] ? bpf_link_put_deferred+0x20/0x20 [ 269.238510][ T3918] ? security_file_free+0xd8/0xf0 [ 269.248512][ T3918] bpf_link_release+0x15f/0x170 [ 269.253390][ T3918] ? __cfi_bpf_link_release+0x10/0x10 [ 269.258777][ T3918] __fput+0x1fc/0x8f0 [ 269.262790][ T3918] ? _raw_spin_unlock+0x4c/0x70 [ 269.267733][ T3918] ____fput+0x15/0x20 [ 269.271834][ T3918] task_work_run+0x1db/0x240 [ 269.276468][ T3918] ? __cfi_task_work_run+0x10/0x10 [ 269.281595][ T3918] ? __cfi___close_range+0x10/0x10 [ 269.286724][ T3918] exit_to_user_mode_loop+0x9b/0xb0 [ 269.291950][ T3918] exit_to_user_mode_prepare+0x5a/0xa0 [ 269.297513][ T3918] syscall_exit_to_user_mode+0x1a/0x30 [ 269.302988][ T3918] do_syscall_64+0x58/0xa0 [ 269.307418][ T3918] ? clear_bhb_loop+0x30/0x80 [ 269.312104][ T3918] ? clear_bhb_loop+0x30/0x80 [ 269.316818][ T3918] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 269.322729][ T3918] RIP: 0033:0x7f107e58efc9 [ 269.327149][ T3918] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 269.346844][ T3918] RSP: 002b:00007f107f393038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 269.355271][ T3918] RAX: 0000000000000000 RBX: 00007f107e7e5fa0 RCX: 00007f107e58efc9 [ 269.363253][ T3918] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000003 [ 269.371226][ T3918] RBP: 00007f107f393090 R08: 0000000000000000 R09: 0000000000000000 [ 269.379199][ T3918] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 269.387197][ T3918] R13: 00007f107e7e6038 R14: 00007f107e7e5fa0 R15: 00007ffdb36f56f8 [ 269.395174][ T3918] [ 269.399622][ T3895] CFI failure at __traceiter_kfree+0x34/0x50 (target: tp_stub_func+0x0/0x10; expected type: 0x8682d211) [ 269.399719][ C1] CFI failure at __traceiter_kfree+0x34/0x50 (target: tp_stub_func+0x0/0x10; expected type: 0x8682d211) [ 269.410872][ T3895] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 269.428016][ T3895] CPU: 0 PID: 3895 Comm: syz-executor Not tainted syzkaller #0 [ 269.435562][ T3895] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 269.445801][ T3895] RIP: 0010:__traceiter_kfree+0x34/0x50 [ 269.451357][ T3895] Code: 8b 3d 10 5c ca 05 4d 85 ff 74 2e 48 89 d3 49 89 f6 49 8b 07 49 8b 7f 08 4c 89 f6 48 89 da 41 ba ef 2d 7d 79 44 03 50 fc 74 02 <0f> 0b ff d0 49 83 7f 18 00 4d 8d 7f 18 75 d8 31 c0 5b 41 5e 41 5f [ 269.470959][ T3895] RSP: 0018:ffffc900017d79d8 EFLAGS: 00010213 [ 269.477018][ T3895] RAX: ffffffff81713a70 RBX: 0000000000000000 RCX: ffff88811a2c9440 [ 269.485069][ T3895] RDX: 0000000000000000 RSI: ffffffff823bc169 RDI: ffffc900023eb000 [ 269.493030][ T3895] RBP: ffffc900017d79f0 R08: dffffc0000000000 R09: ffffc900017d7ba0 [ 269.500996][ T3895] R10: 000000001ebd94fb R11: 0000000000000000 R12: ffffc900017d7d60 [ 269.509044][ T3895] R13: ffffc900017d7ba0 R14: ffffffff823bc169 R15: ffff88810ff46ea8 [ 269.517006][ T3895] FS: 0000555591301500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 269.525923][ T3895] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 269.532758][ T3895] CR2: 00002000000012c0 CR3: 0000000116cd4000 CR4: 00000000003506b0 [ 269.540735][ T3895] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083 [ 269.548925][ T3895] DR3: ffffffffefffff15 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 269.556925][ T3895] Call Trace: [ 269.560217][ T3895] [ 269.563198][ T3895] ? security_compute_sid+0x1339/0x1440 [ 269.568757][ T3895] kfree+0xc9/0xf0 [ 269.572498][ T3895] security_compute_sid+0x1339/0x1440 [ 269.577877][ T3895] ? netlink_recvmsg+0xa86/0xd90 [ 269.582812][ T3895] ? security_transition_sid+0x90/0x90 [ 269.588301][ T3895] ? __cfi_netlink_recvmsg+0x10/0x10 [ 269.593605][ T3895] ? security_socket_recvmsg+0x99/0xc0 [ 269.599143][ T3895] security_transition_sid+0x7d/0x90 [ 269.604436][ T3895] selinux_socket_create+0x1c6/0x290 [ 269.609745][ T3895] ? __cfi_selinux_socket_create+0x10/0x10 [ 269.615567][ T3895] ? bpf_get_current_ancestor_cgroup_id+0x12c/0x160 [ 269.622166][ T3895] security_socket_create+0x89/0xc0 [ 269.627424][ T3895] __sock_create+0xd4/0x7c0 [ 269.631956][ T3895] ? filp_close+0x111/0x160 [ 269.636474][ T3895] __sys_socket+0xcd/0x1a0 [ 269.640896][ T3895] __x64_sys_socket+0x7a/0x90 [ 269.645593][ T3895] x64_sys_call+0x449/0x9a0 [ 269.650100][ T3895] do_syscall_64+0x4c/0xa0 [ 269.654514][ T3895] ? clear_bhb_loop+0x30/0x80 [ 269.659201][ T3895] ? clear_bhb_loop+0x30/0x80 [ 269.663896][ T3895] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 269.669794][ T3895] RIP: 0033:0x7f97c0390ee7 [ 269.674229][ T3895] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 269.693921][ T3895] RSP: 002b:00007ffe3fca5118 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 269.702429][ T3895] RAX: ffffffffffffffda RBX: 00007f97c0412ff6 RCX: 00007f97c0390ee7 [ 269.710416][ T3895] RDX: 0000000000000000 RSI: 0000000000080002 RDI: 0000000000000001 [ 269.718381][ T3895] RBP: 00007ffe3fca5130 R08: 0000000000000009 R09: 0000000000000004 [ 269.726344][ T3895] R10: 000000000000000b R11: 0000000000000246 R12: 00007ffe3fca51bc [ 269.734353][ T3895] R13: 00007f97c0412ff6 R14: 00007f97c1114620 R15: 00007f97c0412ff6 [ 269.742326][ T3895] [ 269.745338][ T3895] Modules linked in: [ 269.749280][ C1] invalid opcode: 0000 [#2] PREEMPT SMP KASAN [ 269.749326][ T3895] ---[ end trace 0000000000000000 ]--- [ 269.755379][ C1] CPU: 1 PID: 3918 Comm: syz.1.918 Tainted: G D syzkaller #0 [ 269.755401][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 269.760882][ T3895] RIP: 0010:__traceiter_kfree+0x34/0x50 [ 269.769623][ C1] RIP: 0010:__traceiter_kfree+0x34/0x50 [ 269.769656][ C1] Code: 8b 3d 10 5c ca 05 4d 85 ff 74 2e 48 89 d3 49 89 f6 49 8b 07 49 8b 7f 08 4c 89 f6 48 89 da 41 ba ef 2d 7d 79 44 03 50 fc 74 02 <0f> 0b ff d0 49 83 7f 18 00 4d 8d 7f 18 75 d8 31 c0 5b 41 5e 41 5f [ 269.769672][ C1] RSP: 0018:ffffc900001b0b40 EFLAGS: 00010213 [ 269.769690][ C1] RAX: ffffffff81713a70 RBX: 0000000000000000 RCX: ffff88811d466540 [ 269.769707][ C1] RDX: 0000000000000000 RSI: ffffffff8234728c RDI: ffffc900023eb000 [ 269.779787][ T3895] Code: 8b 3d 10 5c ca 05 4d 85 ff 74 2e 48 89 d3 49 89 f6 49 8b 07 49 8b 7f 08 4c 89 f6 48 89 da 41 ba ef 2d 7d 79 44 03 50 fc 74 02 <0f> 0b ff d0 49 83 7f 18 00 4d 8d 7f 18 75 d8 31 c0 5b 41 5e 41 5f [ 269.785315][ C1] RBP: ffffc900001b0b58 R08: 0000000000000004 R09: 0000000000000003 [ 269.791222][ T3895] RSP: 0018:ffffc900017d79d8 EFLAGS: 00010213 [ 269.810566][ C1] R10: 000000001ebd94fb R11: 1ffff92000036160 R12: dffffc0000000000 [ 269.810590][ C1] R13: ffff888109e00ae8 R14: ffffffff8234728c R15: ffff88810ff46ea8 [ 269.810605][ C1] FS: 00007f107f3936c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 269.810624][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 269.810638][ C1] CR2: 00007f3a72acafd7 CR3: 0000000124ced000 CR4: 00000000003506a0 [ 269.810657][ C1] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083 [ 269.810671][ C1] DR3: ffffffffefffff15 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 269.810686][ C1] Call Trace: [ 269.810692][ C1] [ 269.810700][ C1] ? security_task_free+0xac/0xd0 [ 269.810734][ C1] kfree+0xc9/0xf0 [ 269.810766][ C1] security_task_free+0xac/0xd0 [ 269.810793][ C1] __put_task_struct+0xfb/0x3c0 [ 269.810828][ C1] ? delayed_put_task_struct+0x64/0x1c0 [ 269.810861][ C1] delayed_put_task_struct+0x6c/0x1c0 [ 269.810889][ C1] ? __cfi_delayed_put_task_struct+0x10/0x10 [ 269.810920][ C1] rcu_do_batch+0x515/0xb90 [ 269.810945][ C1] ? rcu_core+0xe70/0xe70 [ 269.810930][ C0] CFI failure at __traceiter_kfree+0x34/0x50 (target: tp_stub_func+0x0/0x10; expected type: 0x8682d211) [ 269.810963][ C1] ? _raw_spin_unlock_irqrestore+0x5a/0x80 [ 269.810986][ C1] ? note_gp_changes+0x129/0x220 [ 269.811011][ C1] rcu_core+0x5a5/0xe70 [ 269.811026][ C1] ? rcu_cpu_kthread_park+0x90/0x90 [ 269.811040][ C1] ? tick_program_event+0xa3/0x120 [ 269.811059][ C1] ? kvm_sched_clock_read+0x18/0x40 [ 269.811082][ C1] ? irqtime_account_irq+0x75/0x240 [ 269.811104][ C1] rcu_core_si+0x9/0x10 [ 269.811122][ C1] handle_softirqs+0x1d7/0x600 [ 269.811138][ C1] ? irqtime_account_irq+0xc4/0x240 [ 269.811159][ C1] __irq_exit_rcu+0x52/0xf0 [ 269.811174][ C1] irq_exit_rcu+0x9/0x10 [ 269.811188][ C1] sysvec_apic_timer_interrupt+0xa9/0xc0 [ 269.811209][ C1] [ 269.811213][ C1] [ 269.811218][ C1] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 269.811238][ C1] RIP: 0010:__sanitizer_cov_trace_cmp8+0x1/0x80 [ 269.811260][ C1] Code: 10 48 89 74 11 18 48 89 44 11 20 5d c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 90 90 90 90 90 90 b8 80 f8 fd 6f 55 <48> 89 e5 48 8b 45 08 65 48 8b 0d 40 4d 92 7e 65 8b 15 41 4d 92 7e [ 269.811274][ C1] RSP: 0018:ffffc900023bfaa8 EFLAGS: 00000293 [ 269.811288][ C1] RAX: 0000000000000000 RBX: 000000007e5a9e3c RCX: ffff88811d466540 [ 269.811299][ C1] RDX: 0000000000000000 RSI: ffffffff830bd3d5 RDI: ffffffff81a561c4 [ 269.811309][ C1] RBP: ffffc900023bfb10 R08: 0000000000000000 R09: 0000000000000000 [ 269.811319][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: ffffffff830bd3d5 [ 269.811329][ C1] R13: dffffc0000000000 R14: ffffffff8775364c R15: ffffffff8775364c [ 269.811341][ C1] ? gve_tx_dqo+0x2ed5/0x42f0 [ 269.811358][ C1] ? gve_tx_dqo+0x2ed5/0x42f0 [ 269.811372][ C1] ? __traceiter_kfree+0x34/0x50 [ 269.811390][ C1] ? report_bug+0x160/0x770 [ 269.811418][ C1] ? __traceiter_kfree+0x34/0x50 [ 269.811434][ C1] handle_bug+0x3e/0x80 [ 269.811450][ C1] exc_invalid_op+0x1b/0x50 [ 269.811473][ C1] asm_exc_invalid_op+0x1b/0x20 [ 269.811490][ C1] RIP: 0010:__traceiter_kfree+0x34/0x50 [ 269.811507][ C1] Code: 8b 3d 10 5c ca 05 4d 85 ff 74 2e 48 89 d3 49 89 f6 49 8b 07 49 8b 7f 08 4c 89 f6 48 89 da 41 ba ef 2d 7d 79 44 03 50 fc 74 02 <0f> 0b ff d0 49 83 7f 18 00 4d 8d 7f 18 75 d8 31 c0 5b 41 5e 41 5f [ 269.811519][ C1] RSP: 0018:ffffc900023bfc00 EFLAGS: 00010213 [ 269.811531][ C1] RAX: ffffffff81713a70 RBX: ffff88810ff46180 RCX: ffff88811d466540 [ 269.811542][ C1] RDX: ffff88810ff46180 RSI: ffffffff81811435 RDI: ffffc900023eb000 [ 269.811553][ C1] RBP: ffffc900023bfc18 R08: dffffc0000000000 R09: ffffed10223d0401 [ 269.811564][ C1] R10: 000000001ebd94fb R11: ffffffff81811420 R12: 1ffff11021fe8c33 [ 269.811576][ C1] R13: dffffc0000000000 R14: ffffffff81811435 R15: ffff88810ff46ea8 [ 269.811591][ C1] ? bpf_raw_tp_link_dealloc+0x15/0x20 [ 269.811608][ C1] ? __cfi_bpf_raw_tp_link_dealloc+0x10/0x10 [ 269.811625][ C1] ? __cfi_tp_stub_func+0x10/0x10 [ 269.811644][ C1] ? bpf_raw_tp_link_dealloc+0x15/0x20 [ 269.811663][ C1] ? bpf_raw_tp_link_dealloc+0x15/0x20 [ 269.811678][ C1] kfree+0xc9/0xf0 [ 269.811699][ C1] bpf_raw_tp_link_dealloc+0x15/0x20 [ 269.811714][ C1] bpf_link_free+0x321/0x390 [ 269.811736][ C1] ? bpf_link_put_deferred+0x20/0x20 [ 269.811757][ C1] ? security_file_free+0xd8/0xf0 [ 269.811776][ C1] bpf_link_release+0x15f/0x170 [ 269.811789][ C1] ? __cfi_bpf_link_release+0x10/0x10 [ 269.811803][ C1] __fput+0x1fc/0x8f0 [ 269.811827][ C1] ? _raw_spin_unlock+0x4c/0x70 [ 269.811843][ C1] ____fput+0x15/0x20 [ 269.811859][ C1] task_work_run+0x1db/0x240 [ 269.811878][ C1] ? __cfi_task_work_run+0x10/0x10 [ 269.811896][ C1] ? __cfi___close_range+0x10/0x10 [ 269.811911][ C1] exit_to_user_mode_loop+0x9b/0xb0 [ 269.811928][ C1] exit_to_user_mode_prepare+0x5a/0xa0 [ 269.811943][ C1] syscall_exit_to_user_mode+0x1a/0x30 [ 269.811965][ C1] do_syscall_64+0x58/0xa0 [ 269.811979][ C1] ? clear_bhb_loop+0x30/0x80 [ 269.811998][ C1] ? clear_bhb_loop+0x30/0x80 [ 269.812018][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 269.812036][ C1] RIP: 0033:0x7f107e58efc9 [ 269.812049][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 269.812061][ C1] RSP: 002b:00007f107f393038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 269.812076][ C1] RAX: 0000000000000000 RBX: 00007f107e7e5fa0 RCX: 00007f107e58efc9 [ 269.812086][ C1] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000003 [ 269.812096][ C1] RBP: 00007f107f393090 R08: 0000000000000000 R09: 0000000000000000 [ 269.812105][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 269.812115][ C1] R13: 00007f107e7e6038 R14: 00007f107e7e5fa0 R15: 00007ffdb36f56f8 [ 269.812129][ C1] [ 269.812134][ C1] Modules linked in: [ 269.812142][ C0] invalid opcode: 0000 [#3] PREEMPT SMP KASAN [ 269.812160][ C0] CPU: 0 PID: 3895 Comm: syz-executor Tainted: G D syzkaller #0 [ 269.812181][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 269.812192][ C1] ---[ end trace 0000000000000000 ]--- [ 269.812191][ C0] RIP: 0010:__traceiter_kfree+0x34/0x50 [ 269.812201][ C1] RIP: 0010:__traceiter_kfree+0x34/0x50 [ 269.812216][ C0] Code: 8b 3d 10 5c ca 05 4d 85 ff 74 2e 48 89 d3 49 89 f6 49 8b 07 49 8b 7f 08 4c 89 f6 48 89 da 41 ba ef 2d 7d 79 44 03 50 fc 74 02 <0f> 0b ff d0 49 83 7f 18 00 4d 8d 7f 18 75 d8 31 c0 5b 41 5e 41 5f [ 269.812225][ C1] Code: 8b 3d 10 5c ca 05 4d 85 ff 74 2e 48 89 d3 49 89 f6 49 8b 07 49 8b 7f 08 4c 89 f6 48 89 da 41 ba ef 2d 7d 79 44 03 50 fc 74 02 <0f> 0b ff d0 49 83 7f 18 00 4d 8d 7f 18 75 d8 31 c0 5b 41 5e 41 5f [ 269.812234][ C0] RSP: 0018:ffffc900000079c8 EFLAGS: 00010213 [ 269.812242][ C1] RSP: 0018:ffffc900017d79d8 EFLAGS: 00010213 [ 269.812248][ C0] [ 269.812256][ C1] [ 269.812252][ C0] RAX: ffffffff81713a70 RBX: ffff888112713000 RCX: ffff88811a2c9440 [ 269.812260][ C1] RAX: ffffffff81713a70 RBX: 0000000000000000 RCX: ffff88811a2c9440 [ 269.812268][ C0] RDX: ffff888112713000 RSI: ffffffff83e2f25f RDI: ffffc900023eb000 [ 269.812276][ C1] RDX: 0000000000000000 RSI: ffffffff823bc169 RDI: ffffc900023eb000 [ 269.812284][ C0] RBP: ffffc900000079e0 R08: dffffc0000000000 R09: ffffed10224e26d5 [ 269.812290][ C1] RBP: ffffc900017d79f0 R08: dffffc0000000000 R09: ffffc900017d7ba0 [ 269.812301][ C0] R10: 000000001ebd94fb R11: 1ffff110224e26d4 R12: ffff8881327e34a0 [ 269.812307][ C1] R10: 000000001ebd94fb R11: 0000000000000000 R12: ffffc900017d7d60 [ 269.812317][ C0] R13: ffff888112713688 R14: ffffffff83e2f25f R15: ffff88810ff46ea8 [ 269.812323][ C1] R13: ffffc900017d7ba0 R14: ffffffff823bc169 R15: ffff88810ff46ea8 [ 269.812333][ C0] FS: 0000555591301500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 269.812339][ C1] FS: 00007f107f3936c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 269.812353][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 269.812359][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 269.812369][ C0] CR2: 00002000000012c0 CR3: 0000000116cd4000 CR4: 00000000003506b0 [ 269.812375][ C1] CR2: 00007f3a72acafd7 CR3: 0000000124ced000 CR4: 00000000003506a0 [ 269.812388][ C0] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083 [ 269.812398][ C1] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083 [ 269.812403][ C0] DR3: ffffffffefffff15 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 269.812413][ C1] DR3: ffffffffefffff15 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 269.812418][ C0] Call Trace: [ 269.812424][ C0] [ 269.812431][ C1] Kernel panic - not syncing: Fatal exception in interrupt [ 269.812430][ C0] ? skb_release_data+0x63f/0x890 [ 269.812451][ C0] kfree+0xc9/0xf0 [ 269.812476][ C0] skb_release_data+0x63f/0x890 [ 269.812495][ C0] ? ip_rcv_finish_core+0xc58/0x1490 [ 269.812522][ C0] kfree_skb_reason+0xd4/0x230 [ 269.812539][ C0] ip_rcv_finish_core+0xc58/0x1490 [ 269.812567][ C0] ip_rcv+0xe0/0x270 [ 269.812591][ C0] ? __cfi_ip_rcv+0x10/0x10 [ 269.812614][ C0] ? trigger_load_balance+0x1de/0x910 [ 269.812650][ C0] ? __kasan_check_write+0x14/0x20 [ 269.812666][ C0] ? _raw_spin_lock_irq+0x8f/0xe0 [ 269.812684][ C0] ? __cfi_ip_rcv+0x10/0x10 [ 269.812708][ C0] __netif_receive_skb+0xd7/0x2a0 [ 269.812734][ C0] process_backlog+0x351/0x600 [ 269.812764][ C0] __napi_poll+0xd0/0x5e0 [ 269.812790][ C0] net_rx_action+0x49b/0xaa0 [ 269.812818][ C0] ? __cfi_net_rx_action+0x10/0x10 [ 269.812845][ C0] ? kvm_sched_clock_read+0x18/0x40 [ 269.812871][ C0] ? irqtime_account_irq+0x75/0x240 [ 269.812897][ C0] handle_softirqs+0x1d7/0x600 [ 269.812916][ C0] ? irqtime_account_irq+0xc4/0x240 [ 269.812941][ C0] __irq_exit_rcu+0x52/0xf0 [ 269.812958][ C0] irq_exit_rcu+0x9/0x10 [ 269.812975][ C0] sysvec_apic_timer_interrupt+0xa9/0xc0 [ 269.812999][ C0] [ 269.813003][ C0] [ 269.813009][ C0] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 269.813032][ C0] RIP: 0010:vprintk_emit+0x148/0x410 [ 269.813052][ C0] Code: 00 00 00 bf 01 00 00 00 e8 75 33 f5 ff e8 50 14 00 00 89 c3 31 ff 89 c6 e8 85 a3 19 00 85 db 4c 8b 2c 24 74 0c e8 58 9f 19 00 d3 02 00 00 eb 45 48 c7 c3 40 ab ee 86 48 c7 c7 40 ab ee 86 be [ 269.813066][ C0] RSP: 0018:ffffc900017d75a0 EFLAGS: 00000293 [ 269.813080][ C0] RAX: ffffffff81568080 RBX: 0000000000000200 RCX: ffff88811a2c9440 [ 269.813093][ C0] RDX: 0000000000000000 RSI: 0000000000000200 RDI: 0000000000000000 [ 269.813104][ C0] RBP: ffffc900017d7648 R08: 0000000000000004 R09: 0000000000000003 [ 269.813115][ C0] R10: fffff520002faea4 R11: 1ffff920002faea4 R12: dffffc0000000000 [ 269.813128][ C0] R13: 1ffff920002faeb8 R14: 00000000ffffffff R15: 000000000000002b [ 269.813143][ C0] ? vprintk_emit+0x300/0x410 [ 269.813165][ C0] ? __cfi_vprintk_emit+0x10/0x10 [ 269.813184][ C0] ? _printk+0xcc/0x118 [ 269.813210][ C0] vprintk_default+0x26/0x30 [ 269.813229][ C0] vprintk+0x7a/0x80 [ 269.813250][ C0] _printk+0xcc/0x118 [ 269.813273][ C0] ? copy_from_kernel_nofault+0x211/0x360 [ 269.813302][ C0] ? __cfi__printk+0x8/0x8 [ 269.813324][ C0] ? show_opcodes+0xf6/0x120 [ 269.813347][ C0] show_iret_regs+0x36/0x40 [ 269.813367][ C0] __show_regs+0x2c/0x500 [ 269.813389][ C0] oops_end+0x5e/0xd0 [ 269.813408][ C0] die+0x41/0x50 [ 269.813429][ C0] do_trap+0xf0/0x2f0 [ 269.813450][ C0] ? __traceiter_kfree+0x34/0x50 [ 269.813469][ C0] handle_invalid_op+0x95/0xc0 [ 269.813488][ C0] ? __traceiter_kfree+0x34/0x50 [ 269.813507][ C0] exc_invalid_op+0x32/0x50 [ 269.813526][ C0] asm_exc_invalid_op+0x1b/0x20 [ 269.813547][ C0] RIP: 0010:__traceiter_kfree+0x34/0x50 [ 269.813567][ C0] Code: 8b 3d 10 5c ca 05 4d 85 ff 74 2e 48 89 d3 49 89 f6 49 8b 07 49 8b 7f 08 4c 89 f6 48 89 da 41 ba ef 2d 7d 79 44 03 50 fc 74 02 <0f> 0b ff d0 49 83 7f 18 00 4d 8d 7f 18 75 d8 31 c0 5b 41 5e 41 5f [ 269.813581][ C0] RSP: 0018:ffffc900017d79d8 EFLAGS: 00010213 [ 269.813595][ C0] RAX: ffffffff81713a70 RBX: 0000000000000000 RCX: ffff88811a2c9440 [ 269.813607][ C0] RDX: 0000000000000000 RSI: ffffffff823bc169 RDI: ffffc900023eb000 [ 269.813619][ C0] RBP: ffffc900017d79f0 R08: dffffc0000000000 R09: ffffc900017d7ba0 [ 269.813633][ C0] R10: 000000001ebd94fb R11: 0000000000000000 R12: ffffc900017d7d60 [ 269.813655][ C0] R13: ffffc900017d7ba0 R14: ffffffff823bc169 R15: ffff88810ff46ea8 [ 269.813669][ C0] ? security_compute_sid+0x1339/0x1440 [ 269.813688][ C0] ? __cfi_tp_stub_func+0x10/0x10 [ 269.813709][ C0] ? security_compute_sid+0x1339/0x1440 [ 269.813727][ C0] ? __traceiter_kfree+0x38/0x50 [ 269.813745][ C0] ? security_compute_sid+0x1339/0x1440 [ 269.813762][ C0] kfree+0xc9/0xf0 [ 269.813786][ C0] security_compute_sid+0x1339/0x1440 [ 269.813808][ C0] ? netlink_recvmsg+0xa86/0xd90 [ 269.813825][ C0] ? security_transition_sid+0x90/0x90 [ 269.813843][ C0] ? __cfi_netlink_recvmsg+0x10/0x10 [ 269.813866][ C0] ? security_socket_recvmsg+0x99/0xc0 [ 269.813886][ C0] security_transition_sid+0x7d/0x90 [ 269.813903][ C0] selinux_socket_create+0x1c6/0x290 [ 269.813930][ C0] ? __cfi_selinux_socket_create+0x10/0x10 [ 269.813957][ C0] ? bpf_get_current_ancestor_cgroup_id+0x12c/0x160 [ 269.813981][ C0] security_socket_create+0x89/0xc0 [ 269.813999][ C0] __sock_create+0xd4/0x7c0 [ 269.814026][ C0] ? filp_close+0x111/0x160 [ 269.814048][ C0] __sys_socket+0xcd/0x1a0 [ 269.814065][ C0] __x64_sys_socket+0x7a/0x90 [ 269.814081][ C0] x64_sys_call+0x449/0x9a0 [ 269.814101][ C0] do_syscall_64+0x4c/0xa0 [ 269.814119][ C0] ? clear_bhb_loop+0x30/0x80 [ 269.814142][ C0] ? clear_bhb_loop+0x30/0x80 [ 269.814165][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 269.814187][ C0] RIP: 0033:0x7f97c0390ee7 [ 269.814200][ C0] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 269.814214][ C0] RSP: 002b:00007ffe3fca5118 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 269.814231][ C0] RAX: ffffffffffffffda RBX: 00007f97c0412ff6 RCX: 00007f97c0390ee7 [ 269.814244][ C0] RDX: 0000000000000000 RSI: 0000000000080002 RDI: 0000000000000001 [ 269.814255][ C0] RBP: 00007ffe3fca5130 R08: 0000000000000009 R09: 0000000000000004 [ 269.814267][ C0] R10: 000000000000000b R11: 0000000000000246 R12: 00007ffe3fca51bc [ 269.814278][ C0] R13: 00007f97c0412ff6 R14: 00007f97c1114620 R15: 00007f97c0412ff6 [ 269.814296][ C0] [ 269.814301][ C0] Modules linked in: [ 269.814589][ C1] Kernel Offset: disabled [ 271.284530][ C1] Rebooting in 86400 seconds..