last executing test programs: 8.516038109s ago: executing program 4 (id=1717): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000900"], 0x48) syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair(0x18, 0x0, 0x2, &(0x7f0000000000)) socketpair$unix(0x1, 0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffbfff, 0x1, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000810018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)=0x0) timer_settime(r6, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r7, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) 7.050748512s ago: executing program 4 (id=1724): r0 = add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)={0x1, 0x0, @b}, 0x48, 0xfffffffffffffffa) keyctl$assume_authority(0x10, r0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) pipe2$watch_queue(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000001c0)={{{@in6=@loopback, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@mcast2}}, &(0x7f00000002c0)=0xe8) statx(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0, 0x40, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x6000, &(0x7f0000000440)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@dfltuid={'dfltuid', 0x3d, r4}}, {@cache_loose}, {@version_u}, {@noxattr}, {@cache_mmap}, {@posixacl}, {@cache_none}, {@afid={'afid', 0x3d, 0x2}}, {@cache_loose}], [{@flag='nomand'}, {@fsuuid={'fsuuid', 0x3d, {[0x63, 0x34, 0x61, 0x65, 0x32, 0x65, 0x35, 0x30], 0x2d, [0x39, 0x66, 0x37, 0x15], 0x2d, [0x0, 0x39, 0x2, 0x62], 0x2d, [0x66, 0x63, 0x62, 0x30], 0x2d, [0x30, 0x35, 0x0, 0x7, 0x64, 0x30, 0x55, 0x64]}}}, {@fscontext={'fscontext', 0x3d, 'system_u'}}, {@hash}, {@uid_lt={'uid<', r5}}, {@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@permit_directio}, {@appraise}, {@fsuuid={'fsuuid', 0x3d, {[0x64, 0x37, 0x35, 0x33, 0x61, 0x33, 0x61, 0x36], 0x2d, [0x62, 0x62, 0x39, 0x66], 0x2d, [0x0, 0x39, 0x65, 0x63], 0x2d, [0x34, 0x33, 0x30, 0x31], 0x2d, [0x38, 0x65, 0x39, 0x36, 0x66, 0x35, 0x32, 0x35]}}}]}}) read(r1, &(0x7f00000005c0)=""/238, 0xee) r7 = accept4(r3, &(0x7f00000006c0), &(0x7f0000000740)=0x80, 0x0) recvmmsg(r7, &(0x7f000000be00)=[{{&(0x7f0000000780)=@tipc=@name, 0x80, &(0x7f0000001a00)=[{&(0x7f0000000800)=""/199, 0xc7}, {&(0x7f0000000900)=""/49, 0x31}, {&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f0000001940)=""/142, 0x8e}], 0x4, &(0x7f0000001a40)=""/11, 0xb}, 0x6}, {{0x0, 0x0, &(0x7f0000002c80)=[{&(0x7f0000001a80)=""/185, 0xb9}, {&(0x7f0000001b40)=""/4096, 0x1000}, {0x0}, {&(0x7f0000002c00)=""/120, 0x78}], 0x4, &(0x7f0000002cc0)=""/91, 0x5b}, 0x2}, {{&(0x7f0000002d40)=@hci, 0x80, &(0x7f0000003ec0)=[{&(0x7f0000002dc0)=""/4096, 0x1000}, {&(0x7f0000003dc0)=""/255, 0xff}], 0x2, &(0x7f0000003f00)=""/4096, 0x1000}, 0x2}, {{&(0x7f0000004f00)=@qipcrtr, 0x80, &(0x7f00000073c0)=[{&(0x7f0000004f80)=""/148, 0x94}, {&(0x7f0000006040)=""/155, 0x9b}, {&(0x7f0000006100)=""/207, 0xcf}, {&(0x7f0000006200)=""/53, 0x35}, {&(0x7f0000006240)=""/97, 0x61}, {&(0x7f00000062c0)=""/34, 0x22}, {&(0x7f0000006300)=""/4096, 0x1000}, {&(0x7f0000007300)=""/169, 0xa9}], 0x8, &(0x7f0000007480)=""/238, 0xee}, 0x1}, {{&(0x7f0000007580)=@hci, 0x80, &(0x7f0000007740)=[{&(0x7f0000007600)=""/196, 0xc4}, {&(0x7f0000007700)=""/64, 0x40}], 0x2, &(0x7f0000007780)=""/56, 0x38}, 0x9a}, {{0x0, 0x0, &(0x7f00000087c0)=[{&(0x7f00000077c0)=""/4096, 0x1000}], 0x1}, 0x9}, {{&(0x7f0000008800)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f000000ba40)=[{&(0x7f0000008880)=""/204, 0xcc}, {&(0x7f0000008980)=""/182, 0xb6}, {&(0x7f0000008a40)=""/4096, 0x1000}, {&(0x7f0000009a40)=""/4096, 0x1000}, {&(0x7f000000aa40)=""/4096, 0x1000}], 0x5, &(0x7f000000bac0)=""/237, 0xed}, 0x4}, {{&(0x7f000000bbc0)=@qipcrtr, 0x80, &(0x7f000000bd40)=[{&(0x7f000000bc40)=""/195, 0xc3}], 0x1, &(0x7f000000bd80)=""/109, 0x6d}, 0xc}], 0x8, 0x20, &(0x7f000000c000)) r8 = add_key$user(&(0x7f000000c040), &(0x7f000000c080)={'syz', 0x3}, &(0x7f000000c0c0)="a6ae386b34eecee502a25fd37523982145b92a5c4b4a3ba0c58907be8296d9b27c27346a8a9098c30d73fbdf4fd954b673718804440056a616854d4a17a06fc1e45de39338f78ea33d7de1886082b198858e002cf124c5d337c6d23a8ea89f906c7baff1da6a64897c5677fe3085abe3f6ffa7cd4c80f3b15d91dd037c82f77c7ea8822118de67bc32a3899b0eeae6c4b3e8e13b15e07b550a3814f6d5d8b3620883d4ce64fbe7c4d79812a33f66ad65c1a6ff9d5c43be8f26b3800063fa47bf9c8f75703512", 0xc6, 0xfffffffffffffffc) flock(r1, 0x8) mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0, 0x13, r3, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f000000c1c0)={0x2, 0x2, 0xdddd1000, 0x1000, &(0x7f0000fff000/0x1000)=nil}) ioctl$TCSETSW(r1, 0x5403, &(0x7f000000c200)={0x9, 0x3, 0xff, 0x3, 0x2, "8bc15dea5a12f701b55153052dc7d625f8d72c"}) r9 = openat(0xffffffffffffff9c, &(0x7f000000c240)='./file0\x00', 0x400000, 0x90) write$uinput_user_dev(r9, &(0x7f000000c280)={'syz1\x00', {0x4, 0x0, 0x59, 0x6}, 0x55, [0x80000000, 0x100, 0x800, 0x5, 0x3, 0x1, 0x5, 0x40, 0x3ff, 0xc1, 0xfffffffa, 0x0, 0x8, 0x6, 0xb, 0x2, 0x2, 0x4, 0xfffffffe, 0x200, 0x2, 0xd440, 0x5, 0xc5, 0x9, 0x7d94, 0x2, 0x8, 0xffff0000, 0x2, 0xfffff30f, 0x6, 0x4, 0x80, 0x1, 0x9, 0x0, 0x8, 0xfffffff7, 0x1, 0x0, 0x7, 0x5, 0x3, 0xff7, 0x81, 0x4, 0x1, 0x8, 0x3, 0x6, 0x80000001, 0x8, 0x4, 0x7fff, 0x800, 0x10, 0x22, 0x4, 0x9, 0x1000, 0x101, 0x80000000, 0x101], [0x7, 0xa, 0x4d6b, 0x81, 0xfd, 0x922, 0x3, 0x7fff, 0xa, 0x1, 0x0, 0x7f, 0x1, 0x400, 0x5702, 0x0, 0x8, 0xfffffffb, 0x1, 0x401, 0xfffffffa, 0xbf, 0x3, 0x8656, 0x9, 0x1, 0xffff, 0xc, 0x3, 0x8, 0x5, 0x9, 0xf, 0x5, 0x10001, 0x165, 0x9, 0x6, 0x400, 0x7, 0x21f000, 0x3, 0x5, 0x82fd, 0x4, 0x9, 0xf, 0x5, 0xffff, 0x3, 0x6, 0x1, 0xffffffff, 0xb5, 0x2, 0x4, 0x7ff, 0x4, 0x4, 0x147, 0x6, 0x8, 0x7f, 0x800], [0x8001, 0x7ff, 0xeb, 0x2, 0xffffff00, 0x4, 0x7, 0x2, 0x6, 0x401, 0x3, 0x1, 0x704, 0xb203, 0x1a0000, 0x8216, 0x1, 0x7, 0x5, 0x2, 0x9, 0x6, 0x8, 0x9, 0x10001, 0x401, 0x868, 0x2, 0xfffffff5, 0x9, 0x8, 0xddd4, 0xd4a, 0x0, 0xfffffffe, 0x3baf, 0x5, 0xfffffffd, 0xec, 0x200, 0x18, 0x6, 0xd, 0x0, 0x2, 0x4, 0x2, 0x3ff, 0x8, 0x0, 0x2, 0xcf4b, 0x4, 0x2, 0x0, 0x6c55, 0x3, 0xffffffab, 0x0, 0xffffffff, 0x622, 0x149, 0x87, 0x4], [0x80, 0x7ff, 0x3c3, 0x1d03fbd8, 0x1ff, 0x80000001, 0x47, 0x4, 0x0, 0x1, 0x8e23, 0x9, 0x3, 0xdfd8, 0xc, 0x400, 0xfffffff2, 0x6, 0x73, 0x7fffffff, 0x0, 0x3, 0xfffffff7, 0x539d5968, 0x961, 0x3, 0x1ff, 0xa74, 0x4, 0x1, 0x5, 0x7252, 0x400, 0xb, 0x9, 0x485, 0xce000, 0x8, 0x4a6, 0x7, 0x2, 0x6, 0x2, 0xf, 0xfffffff9, 0x7e2, 0x18000000, 0x401, 0x40, 0x0, 0x8a4c, 0x9, 0x4, 0xa29a, 0x10, 0x6, 0xff, 0x8, 0x10, 0x2, 0x8a4d, 0x334d2713, 0x80000000, 0xffff]}, 0x45c) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r8, 0x0, &(0x7f000000c700)) mkdirat(r3, &(0x7f000000c740)='./file0\x00', 0x20) ioctl$TIOCL_GETMOUSEREPORTING(r9, 0x541c, &(0x7f000000c780)) keyctl$KEYCTL_PKEY_QUERY(0x18, r8, 0x0, &(0x7f000000c7c0)='!2*\x00', &(0x7f000000c800)) sendmmsg$sock(r9, &(0x7f000000e2c0)=[{{&(0x7f000000c840)=@in6={0xa, 0x4e21, 0xc7, @rand_addr=' \x01\x00', 0x1}, 0x80, &(0x7f000000cd00)=[{&(0x7f000000c8c0)="1637df73648d064ddac9779f2db955829e3a9c048a3138ccc4bb1f830a64cb146a0c2e49d53cb098e04a832fbcb654b37e742b9aa905b677914721a4148225295a7abc47eeb0b166fe84fef4d9c8a28a6d7390cceb8207391f9b01032317df5bc29a9d8e3a588e729174c007c1d01cebffe1dbda2ded285cfce8bed94ea33c5ba16e61dfa62afb54575562c83e1f75cda9d4b628b269b810f3360cf65ec7c99aafc4314d4273f19b470acd923b4d3177b2", 0xb1}, {&(0x7f000000c980)="1240836dd801d0c802d8a46f7dec620da3e2cd08a40f4f2285b0d4dc951802f0380a447fa51af0399dd7b2f8cbee04d94bc3a7d99c3bdbb7e24e83a0fa25d25a5ab1405923125fe8d9b557872ee373e55dc520388a6678fc7d66840a4116ce4627d30c85aad8dfb6f0e090f15aee60bfc57a629e3feeee93dd0550be1c6adecb19aeef4c0723f1ecc07d77f760afa1a464701d1e8830e2483148d4b9c218036ec3a927c7ab1d5857f42e316d522ea43daf16f80982492e38947225afedf36d18ffb750b1eb61d4fadd6cb9f743e5b3938657ef", 0xd3}, {&(0x7f000000ca80)="ddec3a366cb21b27", 0x8}, {&(0x7f000000cac0)="bbf990cd54c5b9184b897fcee30b88dc6f4d810016375aa5b8eefdd41acfea1192850cc1a6658aa970d45d9fd9ae816a4d07701aedbfeb830fcbadd7d9969b3f5ee695c5717bda45adbf5714a3e7dcee17ed813c0cb2319843f93e077c7f28018b3c24f434b23dae1e237c81893d8452713098048e075982f850b479cfea8c88318d1dea7248bec5109d06e66a1e3072c49bb562", 0x94}, {&(0x7f000000cb80)="e9d72015e8e4a9bdd956e9195724d5b078482f38fc904dd5e567a1069f73529b986c8423213ef3c59e8d087208e511dd6b38faeaf0a18b67fbc9f7019023bc861049b0cfa7ef332f6fe8e2bcc4a1cc399c608690bc1b3c4355b04f31fc6e9191b03120386c6e805d993dcf8031ebadf26f605fc62dd76e45ff4622f714cb499e82bad6f7f35faff70be3a86c1c021a5a718513b09872a90a42a005178181ad275bc65bd43f7bb4dc6f92a90458d8c60e8ec06a6d1c38b93cc63ab23eea283ab9faba7a692ccb", 0xc6}, {&(0x7f000000cc80)="a628e0b8490311f862dda80338c9c29cf226832fc2c6ed8adf95d57dc75d4fc4d6df099ad4570a312768cda0dcdc8e6f5539312c3995cd6e9aed321fe95a563ab64340cf52fb", 0x46}], 0x6, &(0x7f000000cd80)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @mark={{0x14, 0x1, 0x24, 0x80000001}}, @txtime={{0x18, 0x1, 0x3d, 0xffffffffffff0001}}, @mark={{0x14, 0x1, 0x24, 0xfffffffe}}], 0x60}}, {{&(0x7f000000ce00)=@x25, 0x80, &(0x7f000000e200)=[{&(0x7f000000ce80)="24508abec592d981e28e43ef433c01bfe8b33b084ea1da6fdaad66a13b0bbe07aff8aad28622aab235a93fed1ea3fa9be756f145fc5754ed5b510f282980e70d13e5cdb75c57b01333de3b431922df314631ef270dcd146d233ecdb3282925989d5f0e03ec2bb64b3aafcd973500a4058aa9c19351f078567c8b9414be9ebaf20f3a345e7c730d36c50144fb73869473864df8bf", 0x94}, {&(0x7f000000cf40)="b0e252048339494c3854a809932728f7f0a3a8c9e65fb1c3d322db5521ffe82a954c6f5d5f3d35af2c49c89dcc46faf65abfda19fdd53fa636781cec55ebffa3a713da7a2ef201d506c5496e27387f4d8283939698dbd6688315bf80bca524ba077089d722796ab49b533d19b7bec5532158de24a1a46e81f121ac8218dbaf052140a89ee0f629a61fef5b77d6beb1639036c4", 0x93}, {&(0x7f000000d000)="24ef67c5894e93ebde477f63aef26e261a334770cdbd934b9ccba789f3be934b4bbedbd3b272d629653dc2f19e17352e0ac46a9942fbe6289ef1d0f433887d82d01858c70c47f1bfb0cc8284d70f5427f21ce148df5911c44e5f0ae72dbdb44c2a0d3b4fa97803dfae5eba283461a4c1a15d03b986931ab6df4bdc4e640ddb7b2da9fc2f5f8bb200442b114b142edc97f8236cdd647b5a38806ad8bca736b9337db06308b85b47d09ed2bd684e9b846af1775f733e56", 0xb6}, {&(0x7f000000d0c0)="27dd600e95f5981ecda2a00bf09608f1c850947cf57440de0e3146b1b2a640d5e680f5fb696cf8f63211eb1813f9c15999aa2b8a068c6e444b5e809101bc4908e99aeeae428b13151301762a12ba168e035ee4d5605372ba11ae5b450a7e194111223862aadb9984e91deff7f37e57649b27d3dae3b34552e0e22c5d71376802e61f50348d5a722fc9ac1ed44a4988030ecb7e5ad4c38840d8c85172dfcd146a63022cc3c42df7218d04373a245668193bba5bf656e634343721201d60d45b90c1919863787bc6a0d2a435a9ada1e8ca4d6e1a1c17", 0xd5}, {&(0x7f000000d1c0)="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", 0x1000}, {&(0x7f000000e1c0)="a318d981fb681fff993ee25c7d56f1a769b247767e48377ded7011115ffa382a9dd72c1ee1d693807b547d3892c43f45b8c39f0e606040997074ba7280", 0x3d}], 0x6, &(0x7f000000e280)=[@txtime={{0x18}}], 0x18}}], 0x2, 0x4) r10 = add_key$keyring(&(0x7f000000e340), &(0x7f000000e380)={'syz', 0x0}, 0x0, 0x0, r0) keyctl$unlink(0x9, r8, r10) getsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f000000e440)={{{@in=@local, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}}}, &(0x7f000000e540)=0xe8) lstat(&(0x7f000000e580)='./file0/file0\x00', &(0x7f000000e5c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r13 = getegid() getresgid(&(0x7f000000e640)=0x0, &(0x7f000000e680), &(0x7f000000e6c0)) setxattr$system_posix_acl(&(0x7f000000e3c0)='./file0\x00', &(0x7f000000e400)='system.posix_acl_access\x00', &(0x7f000000e700)={{}, {0x1, 0x1}, [{0x2, 0x3, r5}, {0x2, 0x1, r11}], {0x4, 0x6}, [{0x8, 0x3, r6}, {0x8, 0x1, r6}, {0x8, 0x4, r12}, {0x8, 0x5, r6}, {0x8, 0x7, r13}, {0x8, 0x4, r14}], {0x10, 0x1}, {0x20, 0x1}}, 0x64, 0x1) setsockopt$IP_VS_SO_SET_EDIT(r3, 0x0, 0x483, &(0x7f000000e780)={0x2c, @multicast2, 0x4e24, 0x1, 'sed\x00', 0x3ab20daac63a9184, 0xa, 0x54}, 0x2c) 6.134678506s ago: executing program 4 (id=1733): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0b000000080000000c0000000400000001000000", @ANYRES32, @ANYBLOB="000000000000d78099b8d29a7c780000000000008608b7debd45cc5ce41cb9c1d6f97d71261ddda62d668cb0f7070a1d8db588d748d9cc01f3072e3c867b09e457f975dff082fc5da456047e4ae439431a0594950672eb7b96e800fcaca1c7943bfe9559d655d9cacabde4e82a08e6d13e3a43b6ee3f054fb3e14006a42cb14439b13c79be4213ed875b0c3bcb2894fd", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0}) bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x7fffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) capset(&(0x7f00000001c0)={0x20071026, r1}, &(0x7f0000000380)={0x6, 0x7, 0x8, 0xfffffff7, 0xfffffff7, 0x2}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$EXT4_IOC_CHECKPOINT(r5, 0x4004662b, &(0x7f00000003c0)=0x3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x8001000000000000, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x500, 0x3, 0x2a8, 0x0, 0x11, 0x148, 0x0, 0x0, 0x360, 0x2a8, 0x2a8, 0x360, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x110, 0x0, {0x0, 0x100000000000000}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg1\x00', {0x0, 0x0, 0x3f, 0x0, 0x0, 0x3, 0x7}}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x308) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="000000000000000037080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085f79400030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000180)=0x14) 4.256031754s ago: executing program 2 (id=1739): socket$inet6(0xa, 0xa, 0x9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, 0x0, 0x0) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r4, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x6d00) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', 0x0, 0x2000010, &(0x7f0000000080)={[{@mode={'mode', 0x3d, 0x7}}]}) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_mreqsrc(r5, 0x0, 0x26, &(0x7f0000000300)={@dev={0xac, 0x14, 0x14, 0x12}, @private=0xa010100, @remote}, 0xc) socket$nl_route(0x10, 0x3, 0x0) 3.85584456s ago: executing program 3 (id=1743): r0 = add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)={0x1, 0x0, @b}, 0x48, 0xfffffffffffffffa) keyctl$assume_authority(0x10, r0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) pipe2$watch_queue(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000001c0)={{{@in6=@loopback, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@mcast2}}, &(0x7f00000002c0)=0xe8) statx(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0, 0x40, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x6000, &(0x7f0000000440)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@dfltuid={'dfltuid', 0x3d, r4}}, {@cache_loose}, {@version_u}, {@noxattr}, {@cache_mmap}, {@cache_none}, {@afid={'afid', 0x3d, 0x2}}, {@cache_loose}], [{@flag='nomand'}, {@fsuuid={'fsuuid', 0x3d, {[0x63, 0x34, 0x61, 0x65, 0x32, 0x65, 0x35, 0x30], 0x2d, [0x39, 0x66, 0x37, 0x15], 0x2d, [0x0, 0x39, 0x2, 0x62], 0x2d, [0x66, 0x63, 0x62, 0x30], 0x2d, [0x30, 0x35, 0x0, 0x7, 0x64, 0x30, 0x55, 0x64]}}}, {@fscontext={'fscontext', 0x3d, 'system_u'}}, {@hash}, {@uid_lt={'uid<', r5}}, {@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@permit_directio}, {@appraise}, {@fsuuid={'fsuuid', 0x3d, {[0x64, 0x37, 0x35, 0x33, 0x61, 0x33, 0x61, 0x36], 0x2d, [0x62, 0x62, 0x39, 0x66], 0x2d, [0x0, 0x39, 0x65, 0x63], 0x2d, [0x34, 0x33, 0x30, 0x31], 0x2d, [0x38, 0x65, 0x39, 0x36, 0x66, 0x35, 0x32, 0x35]}}}]}}) read(r1, &(0x7f00000005c0)=""/238, 0xee) r6 = accept4(r3, &(0x7f00000006c0), &(0x7f0000000740)=0x80, 0x0) recvmmsg(r6, &(0x7f000000be00)=[{{&(0x7f0000000780)=@tipc=@name, 0x80, &(0x7f0000001a00)=[{&(0x7f0000000800)=""/199, 0xc7}, {&(0x7f0000000900)=""/49, 0x31}, {&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f0000001940)=""/142, 0x8e}], 0x4, &(0x7f0000001a40)=""/11, 0xb}, 0x6}, {{0x0, 0x0, &(0x7f0000002c80)=[{&(0x7f0000001a80)=""/185, 0xb9}, {&(0x7f0000001b40)=""/4096, 0x1000}, {0x0}, {&(0x7f0000002c00)=""/120, 0x78}], 0x4, &(0x7f0000002cc0)=""/91, 0x5b}, 0x2}, {{&(0x7f0000002d40)=@hci, 0x80, &(0x7f0000003ec0)=[{&(0x7f0000002dc0)=""/4096, 0x1000}, {&(0x7f0000003dc0)=""/255, 0xff}], 0x2, &(0x7f0000003f00)=""/4096, 0x1000}, 0x2}, {{&(0x7f0000004f00)=@qipcrtr, 0x80, &(0x7f00000073c0)=[{&(0x7f0000004f80)=""/148, 0x94}, {&(0x7f0000005040)=""/4096, 0x1000}, {&(0x7f0000006040)=""/155, 0x9b}, {&(0x7f0000006100)=""/207, 0xcf}, {&(0x7f0000006200)=""/53, 0x35}, {&(0x7f0000006240)=""/97, 0x61}, {&(0x7f00000062c0)=""/34, 0x22}, {&(0x7f0000006300)=""/4096, 0x1000}, {&(0x7f0000007300)=""/169, 0xa9}], 0x9, &(0x7f0000007480)=""/238, 0xee}, 0x1}, {{&(0x7f0000007580)=@hci, 0x80, &(0x7f0000007740)=[{&(0x7f0000007600)=""/196, 0xc4}, {&(0x7f0000007700)=""/64, 0x40}], 0x2, &(0x7f0000007780)=""/56, 0x38}, 0x9a}, {{&(0x7f0000008800)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f000000ba40)=[{&(0x7f0000008880)=""/204, 0xcc}, {&(0x7f0000008980)=""/182, 0xb6}, {&(0x7f0000008a40)=""/4096, 0x1000}, {&(0x7f0000009a40)=""/4096, 0x1000}, {&(0x7f000000aa40)=""/4096, 0x1000}], 0x5, &(0x7f000000bac0)=""/237, 0xed}, 0x4}, {{&(0x7f000000bbc0)=@qipcrtr, 0x80, &(0x7f000000bd40)=[{&(0x7f000000bc40)=""/195, 0xc3}], 0x1, &(0x7f000000bd80)=""/109, 0x6d}, 0xc}], 0x7, 0x20, &(0x7f000000c000)) add_key$user(&(0x7f000000c040), &(0x7f000000c080)={'syz', 0x3}, &(0x7f000000c0c0)="a6ae386b34eecee502a25fd37523982145b92a5c4b4a3ba0c58907be8296d9b27c27346a8a9098c30d73fbdf4fd954b673718804440056a616854d4a17a06fc1e45de39338f78ea33d7de1886082b198858e002cf124c5d337c6d23a8ea89f906c7baff1da6a64897c5677fe3085abe3f6ffa7cd4c80f3b15d91dd037c82f77c7ea8822118de67bc32a3899b0eeae6c4b3e8e13b15e07b550a3814f6d5d8b3620883d4ce64fbe7c4d79812a33f66ad65c1a6ff9d5c43be8f26b3800063fa47bf9c8f75703512", 0xc6, 0xfffffffffffffffc) mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0, 0x13, r3, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f000000c1c0)={0x2, 0x2, 0xdddd1000, 0x1000, &(0x7f0000fff000/0x1000)=nil}) ioctl$TCSETSW(r1, 0x5403, &(0x7f000000c200)={0x9, 0x3, 0xff, 0x3, 0x2, "8bc15dea5a12f701b55153052dc7d625f8d72c"}) 3.321514238s ago: executing program 2 (id=1744): r0 = add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)={0x1, 0x0, @b}, 0x48, 0xfffffffffffffffa) keyctl$assume_authority(0x10, r0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) pipe2$watch_queue(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000001c0)={{{@in6=@loopback, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@mcast2}}, &(0x7f00000002c0)=0xe8) statx(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0, 0x40, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x6000, &(0x7f0000000440)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@dfltuid={'dfltuid', 0x3d, r4}}, {@cache_loose}, {@version_u}, {@noxattr}, {@cache_mmap}, {@posixacl}, {@cache_none}, {@afid={'afid', 0x3d, 0x2}}, {@cache_loose}], [{@flag='nomand'}, {@fsuuid={'fsuuid', 0x3d, {[0x63, 0x34, 0x61, 0x65, 0x32, 0x65, 0x35, 0x30], 0x2d, [0x39, 0x66, 0x37, 0x15], 0x2d, [0x0, 0x39, 0x2, 0x62], 0x2d, [0x66, 0x63, 0x62, 0x30], 0x2d, [0x30, 0x35, 0x0, 0x7, 0x64, 0x30, 0x55, 0x64]}}}, {@fscontext={'fscontext', 0x3d, 'system_u'}}, {@hash}, {@uid_lt={'uid<', r5}}, {@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@permit_directio}, {@appraise}, {@fsuuid={'fsuuid', 0x3d, {[0x64, 0x37, 0x35, 0x33, 0x61, 0x33, 0x61, 0x36], 0x2d, [0x62, 0x62, 0x39, 0x66], 0x2d, [0x0, 0x39, 0x65, 0x63], 0x2d, [0x34, 0x33, 0x30, 0x31], 0x2d, [0x38, 0x65, 0x39, 0x36, 0x66, 0x35, 0x32, 0x35]}}}]}}) read(r1, &(0x7f00000005c0)=""/238, 0xee) r7 = accept4(r3, &(0x7f00000006c0), &(0x7f0000000740)=0x80, 0x0) recvmmsg(r7, &(0x7f000000be00)=[{{&(0x7f0000000780)=@tipc=@name, 0x80, &(0x7f0000001a00)=[{&(0x7f0000000800)=""/199, 0xc7}, {&(0x7f0000000900)=""/49, 0x31}, {&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f0000001940)=""/142, 0x8e}], 0x4, &(0x7f0000001a40)=""/11, 0xb}, 0x6}, {{0x0, 0x0, &(0x7f0000002c80)=[{&(0x7f0000001a80)=""/185, 0xb9}, {&(0x7f0000001b40)=""/4096, 0x1000}, {0x0}, {&(0x7f0000002c00)=""/120, 0x78}], 0x4, &(0x7f0000002cc0)=""/91, 0x5b}, 0x2}, {{&(0x7f0000002d40)=@hci, 0x80, &(0x7f0000003ec0)=[{&(0x7f0000002dc0)=""/4096, 0x1000}, {&(0x7f0000003dc0)=""/255, 0xff}], 0x2, &(0x7f0000003f00)=""/4096, 0x1000}, 0x2}, {{&(0x7f0000004f00)=@qipcrtr, 0x80, &(0x7f00000073c0)=[{&(0x7f0000004f80)=""/148, 0x94}, {0x0}, {&(0x7f0000006040)=""/155, 0x9b}, {&(0x7f0000006100)=""/207, 0xcf}, {&(0x7f0000006200)=""/53, 0x35}, {&(0x7f0000006240)=""/97, 0x61}, {&(0x7f00000062c0)=""/34, 0x22}, {&(0x7f0000006300)=""/4096, 0x1000}, {&(0x7f0000007300)=""/169, 0xa9}], 0x9, &(0x7f0000007480)=""/238, 0xee}, 0x1}, {{&(0x7f0000007580)=@hci, 0x80, &(0x7f0000007740)=[{&(0x7f0000007600)=""/196, 0xc4}, {&(0x7f0000007700)=""/64, 0x40}], 0x2, &(0x7f0000007780)=""/56, 0x38}, 0x9a}, {{0x0, 0x0, &(0x7f00000087c0)=[{&(0x7f00000077c0)=""/4096, 0x1000}], 0x1}, 0x9}, {{&(0x7f0000008800)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f000000ba40)=[{&(0x7f0000008880)=""/204, 0xcc}, {&(0x7f0000008980)=""/182, 0xb6}, {&(0x7f0000008a40)=""/4096, 0x1000}, {&(0x7f0000009a40)=""/4096, 0x1000}, {&(0x7f000000aa40)=""/4096, 0x1000}], 0x5, &(0x7f000000bac0)=""/237, 0xed}, 0x4}, {{&(0x7f000000bbc0)=@qipcrtr, 0x80, &(0x7f000000bd40)=[{&(0x7f000000bc40)=""/195, 0xc3}], 0x1, &(0x7f000000bd80)=""/109, 0x6d}, 0xc}], 0x8, 0x20, &(0x7f000000c000)) r8 = add_key$user(&(0x7f000000c040), &(0x7f000000c080)={'syz', 0x3}, &(0x7f000000c0c0)="a6ae386b34eecee502a25fd37523982145b92a5c4b4a3ba0c58907be8296d9b27c27346a8a9098c30d73fbdf4fd954b673718804440056a616854d4a17a06fc1e45de39338f78ea33d7de1886082b198858e002cf124c5d337c6d23a8ea89f906c7baff1da6a64897c5677fe3085abe3f6ffa7cd4c80f3b15d91dd037c82f77c7ea8822118de67bc32a3899b0eeae6c4b3e8e13b15e07b550a3814f6d5d8b3620883d4ce64fbe7c4d79812a33f66ad65c1a6ff9d5c43be8f26b3800063fa47bf9c8f75703512", 0xc6, 0xfffffffffffffffc) flock(r1, 0x8) mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0, 0x13, r3, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f000000c1c0)={0x2, 0x2, 0xdddd1000, 0x1000, &(0x7f0000fff000/0x1000)=nil}) ioctl$TCSETSW(r1, 0x5403, &(0x7f000000c200)={0x9, 0x3, 0xff, 0x3, 0x2, "8bc15dea5a12f701b55153052dc7d625f8d72c"}) r9 = openat(0xffffffffffffff9c, &(0x7f000000c240)='./file0\x00', 0x400000, 0x90) write$uinput_user_dev(r9, &(0x7f000000c280)={'syz1\x00', {0x4, 0x0, 0x59, 0x6}, 0x55, [0x80000000, 0x100, 0x800, 0x5, 0x3, 0x1, 0x5, 0x40, 0x3ff, 0xc1, 0xfffffffa, 0x0, 0x8, 0x6, 0xb, 0x2, 0x2, 0x4, 0xfffffffe, 0x200, 0x2, 0xd440, 0x5, 0xc5, 0x9, 0x7d94, 0x2, 0x8, 0xffff0000, 0x2, 0xfffff30f, 0x6, 0x4, 0x80, 0x1, 0x9, 0x0, 0x8, 0xfffffff7, 0x1, 0x0, 0x7, 0x5, 0x3, 0xff7, 0x81, 0x4, 0x1, 0x8, 0x3, 0x6, 0x80000001, 0x8, 0x4, 0x7fff, 0x800, 0x10, 0x22, 0x4, 0x9, 0x1000, 0x101, 0x80000000, 0x101], [0x7, 0xa, 0x4d6b, 0x81, 0xfd, 0x922, 0x3, 0x7fff, 0xa, 0x1, 0x0, 0x7f, 0x1, 0x400, 0x5702, 0x0, 0x8, 0xfffffffb, 0x1, 0x401, 0xfffffffa, 0xbf, 0x3, 0x8656, 0x9, 0x1, 0xffff, 0xc, 0x3, 0x8, 0x5, 0x9, 0xf, 0x5, 0x10001, 0x165, 0x9, 0x6, 0x400, 0x7, 0x21f000, 0x3, 0x5, 0x82fd, 0x4, 0x9, 0xf, 0x5, 0xffff, 0x3, 0x6, 0x1, 0xffffffff, 0xb5, 0x2, 0x4, 0x7ff, 0x4, 0x4, 0x147, 0x6, 0x8, 0x7f, 0x800], [0x8001, 0x7ff, 0xeb, 0x2, 0xffffff00, 0x4, 0x7, 0x2, 0x6, 0x401, 0x3, 0x1, 0x704, 0xb203, 0x1a0000, 0x8216, 0x1, 0x7, 0x5, 0x2, 0x9, 0x6, 0x8, 0x9, 0x10001, 0x401, 0x868, 0x2, 0xfffffff5, 0x9, 0x8, 0xddd4, 0xd4a, 0x0, 0xfffffffe, 0x3baf, 0x5, 0xfffffffd, 0xec, 0x200, 0x18, 0x6, 0xd, 0x0, 0x2, 0x4, 0x2, 0x3ff, 0x8, 0x0, 0x2, 0xcf4b, 0x4, 0x2, 0x0, 0x6c55, 0x3, 0xffffffab, 0x0, 0xffffffff, 0x622, 0x149, 0x87, 0x4], [0x80, 0x7ff, 0x3c3, 0x1d03fbd8, 0x1ff, 0x80000001, 0x47, 0x4, 0x0, 0x1, 0x8e23, 0x9, 0x3, 0xdfd8, 0xc, 0x400, 0xfffffff2, 0x6, 0x73, 0x7fffffff, 0x0, 0x3, 0xfffffff7, 0x539d5968, 0x961, 0x3, 0x1ff, 0xa74, 0x4, 0x1, 0x5, 0x7252, 0x400, 0xb, 0x9, 0x485, 0xce000, 0x8, 0x4a6, 0x7, 0x2, 0x6, 0x2, 0xf, 0xfffffff9, 0x7e2, 0x18000000, 0x401, 0x40, 0x0, 0x8a4c, 0x9, 0x4, 0xa29a, 0x10, 0x6, 0xff, 0x8, 0x10, 0x2, 0x8a4d, 0x334d2713, 0x80000000, 0xffff]}, 0x45c) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r8, 0x0, &(0x7f000000c700)) mkdirat(r3, &(0x7f000000c740)='./file0\x00', 0x20) ioctl$TIOCL_GETMOUSEREPORTING(r9, 0x541c, &(0x7f000000c780)) keyctl$KEYCTL_PKEY_QUERY(0x18, r8, 0x0, &(0x7f000000c7c0)='!2*\x00', &(0x7f000000c800)) sendmmsg$sock(r9, &(0x7f000000e2c0)=[{{&(0x7f000000c840)=@in6={0xa, 0x4e21, 0xc7, @rand_addr=' \x01\x00', 0x1}, 0x80, &(0x7f000000cd00)=[{&(0x7f000000c8c0)="1637df73648d064ddac9779f2db955829e3a9c048a3138ccc4bb1f830a64cb146a0c2e49d53cb098e04a832fbcb654b37e742b9aa905b677914721a4148225295a7abc47eeb0b166fe84fef4d9c8a28a6d7390cceb8207391f9b01032317df5bc29a9d8e3a588e729174c007c1d01cebffe1dbda2ded285cfce8bed94ea33c5ba16e61dfa62afb54575562c83e1f75cda9d4b628b269b810f3360cf65ec7c99aafc4314d4273f19b470acd923b4d3177b2", 0xb1}, {&(0x7f000000c980)="1240836dd801d0c802d8a46f7dec620da3e2cd08a40f4f2285b0d4dc951802f0380a447fa51af0399dd7b2f8cbee04d94bc3a7d99c3bdbb7e24e83a0fa25d25a5ab1405923125fe8d9b557872ee373e55dc520388a6678fc7d66840a4116ce4627d30c85aad8dfb6f0e090f15aee60bfc57a629e3feeee93dd0550be1c6adecb19aeef4c0723f1ecc07d77f760afa1a464701d1e8830e2483148d4b9c218036ec3a927c7ab1d5857f42e316d522ea43daf16f80982492e38947225afedf36d18ffb750b1eb61d4fadd6cb9f743e5b3938657ef", 0xd3}, {&(0x7f000000ca80)="ddec3a366cb21b27", 0x8}, {&(0x7f000000cac0)="bbf990cd54c5b9184b897fcee30b88dc6f4d810016375aa5b8eefdd41acfea1192850cc1a6658aa970d45d9fd9ae816a4d07701aedbfeb830fcbadd7d9969b3f5ee695c5717bda45adbf5714a3e7dcee17ed813c0cb2319843f93e077c7f28018b3c24f434b23dae1e237c81893d8452713098048e075982f850b479cfea8c88318d1dea7248bec5109d06e66a1e3072c49bb562", 0x94}, {&(0x7f000000cb80)="e9d72015e8e4a9bdd956e9195724d5b078482f38fc904dd5e567a1069f73529b986c8423213ef3c59e8d087208e511dd6b38faeaf0a18b67fbc9f7019023bc861049b0cfa7ef332f6fe8e2bcc4a1cc399c608690bc1b3c4355b04f31fc6e9191b03120386c6e805d993dcf8031ebadf26f605fc62dd76e45ff4622f714cb499e82bad6f7f35faff70be3a86c1c021a5a718513b09872a90a42a005178181ad275bc65bd43f7bb4dc6f92a90458d8c60e8ec06a6d1c38b93cc63ab23eea283ab9faba7a692ccb", 0xc6}, {&(0x7f000000cc80)="a628e0b8490311f862dda80338c9c29cf226832fc2c6ed8adf95d57dc75d4fc4d6df099ad4570a312768cda0dcdc8e6f5539312c3995cd6e9aed321fe95a563ab64340cf52fb", 0x46}], 0x6, &(0x7f000000cd80)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @mark={{0x14, 0x1, 0x24, 0x80000001}}, @txtime={{0x18, 0x1, 0x3d, 0xffffffffffff0001}}, @mark={{0x14, 0x1, 0x24, 0xfffffffe}}], 0x60}}, {{&(0x7f000000ce00)=@x25, 0x80, &(0x7f000000e200)=[{&(0x7f000000ce80)="24508abec592d981e28e43ef433c01bfe8b33b084ea1da6fdaad66a13b0bbe07aff8aad28622aab235a93fed1ea3fa9be756f145fc5754ed5b510f282980e70d13e5cdb75c57b01333de3b431922df314631ef270dcd146d233ecdb3282925989d5f0e03ec2bb64b3aafcd973500a4058aa9c19351f078567c8b9414be9ebaf20f3a345e7c730d36c50144fb73869473864df8bf", 0x94}, {&(0x7f000000cf40)="b0e252048339494c3854a809932728f7f0a3a8c9e65fb1c3d322db5521ffe82a954c6f5d5f3d35af2c49c89dcc46faf65abfda19fdd53fa636781cec55ebffa3a713da7a2ef201d506c5496e27387f4d8283939698dbd6688315bf80bca524ba077089d722796ab49b533d19b7bec5532158de24a1a46e81f121ac8218dbaf052140a89ee0f629a61fef5b77d6beb1639036c4", 0x93}, {&(0x7f000000d000)="24ef67c5894e93ebde477f63aef26e261a334770cdbd934b9ccba789f3be934b4bbedbd3b272d629653dc2f19e17352e0ac46a9942fbe6289ef1d0f433887d82d01858c70c47f1bfb0cc8284d70f5427f21ce148df5911c44e5f0ae72dbdb44c2a0d3b4fa97803dfae5eba283461a4c1a15d03b986931ab6df4bdc4e640ddb7b2da9fc2f5f8bb200442b114b142edc97f8236cdd647b5a38806ad8bca736b9337db06308b85b47d09ed2bd684e9b846af1775f733e56", 0xb6}, {&(0x7f000000d0c0)="27dd600e95f5981ecda2a00bf09608f1c850947cf57440de0e3146b1b2a640d5e680f5fb696cf8f63211eb1813f9c15999aa2b8a068c6e444b5e809101bc4908e99aeeae428b13151301762a12ba168e035ee4d5605372ba11ae5b450a7e194111223862aadb9984e91deff7f37e57649b27d3dae3b34552e0e22c5d71376802e61f50348d5a722fc9ac1ed44a4988030ecb7e5ad4c38840d8c85172dfcd146a63022cc3c42df7218d04373a245668193bba5bf656e634343721201d60d45b90c1919863787bc6a0d2a435a9ada1e8ca4d6e1a1c17", 0xd5}, {&(0x7f000000d1c0)="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", 0x1000}, {&(0x7f000000e1c0)="a318d981fb681fff993ee25c7d56f1a769b247767e48377ded7011115ffa382a9dd72c1ee1d693807b547d3892c43f45b8c39f0e606040997074ba7280", 0x3d}], 0x6, &(0x7f000000e280)=[@txtime={{0x18}}], 0x18}}], 0x2, 0x4) r10 = add_key$keyring(&(0x7f000000e340), &(0x7f000000e380)={'syz', 0x0}, 0x0, 0x0, r0) keyctl$unlink(0x9, r8, r10) getsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f000000e440)={{{@in=@local, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}}}, &(0x7f000000e540)=0xe8) lstat(&(0x7f000000e580)='./file0/file0\x00', &(0x7f000000e5c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r13 = getegid() getresgid(&(0x7f000000e640)=0x0, &(0x7f000000e680), &(0x7f000000e6c0)) setxattr$system_posix_acl(&(0x7f000000e3c0)='./file0\x00', &(0x7f000000e400)='system.posix_acl_access\x00', &(0x7f000000e700)={{}, {0x1, 0x1}, [{0x2, 0x3, r5}, {0x2, 0x1, r11}], {0x4, 0x6}, [{0x8, 0x3, r6}, {0x8, 0x1, r6}, {0x8, 0x4, r12}, {0x8, 0x5, r6}, {0x8, 0x7, r13}, {0x8, 0x4, r14}], {0x10, 0x1}, {0x20, 0x1}}, 0x64, 0x1) setsockopt$IP_VS_SO_SET_EDIT(r3, 0x0, 0x483, &(0x7f000000e780)={0x2c, @multicast2, 0x4e24, 0x1, 'sed\x00', 0x3ab20daac63a9184, 0xa, 0x54}, 0x2c) 2.954330064s ago: executing program 3 (id=1746): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14) 2.941332795s ago: executing program 3 (id=1747): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x18}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x1000000, &(0x7f0000000040)={[{@usrjquota}, {}]}, 0x0, 0x248, &(0x7f0000000940)="$eJzs3T9oFFkcB/DfzO5eLsly5O6ag4O7g+M47gIh1x3YxEYhICGICCpERGyURIgJdomVjYXWKqlsgtgZrdMEG0Ww8k+K2AgaLAwWWqzsTiLRbDBxN7uS+Xxg2JnZee/3hp3v221mNoDc6omIgYgoRERvRJQiIll/wB/Z0rO6OdO5MBJRqRx8ndSOy7Yza+26I2I6Iv6PiPk0idPFiMm5o0tvH+//+9JE6a8bc0c6W3qSq5aXFg+sXB+6eHvwv8kHj14OJTEQ5U/Oq/mSOvuKScRPO1HsG5EU2z0CtmL4/K0n1dz/HBF/1vJfijSyD+/y+Hfzpfj32mZtr7x6+Gsrxwo0X6VSqn4HTleA3EkjohxJ2hcR2Xqa9vVlv+GfFrrSM2Pj53pPjU2Mnmz3TAU0Szlicd/djjvdn+X/RSHLP7B7VfN/aHj2WXV9pdDu0QCtVM1/7/Gpf0L+IXfkH/JL/iG/5B/yS/4hv+Qf8kv+Ydf4frsN5B/yS/4hv+Qf8mt9/gGAfKl0tPsOZKBd2j3/AAAAAAAAAAAAAAAAAAAAG810LoysLa2qee9qxPLeiCjWq1+o/R/x2qNNu94k1cM+SrJmDTn2e4MdNOjmDt59vZVHuv3wfOfqb8X935rZW3nbLaZGI6YvRER/sbjx+ktWr7+v9+MX3i+daLBAg/Ycbm/997Otq1Wqs2+wkmQr/fXmnzR+qb3Wn3/Km/S5HWffNdgBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALfMhAAD//+M2bGo=") ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f0000000580)={@id={0x2, 0x0, @a}, 0x40, 0x0, '\x00', @a}) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="d2ff030060010000009e08f086dd", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$MRT6_INIT(r3, 0x29, 0xc8, &(0x7f0000000180), 0x4) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x40400) read(r4, &(0x7f0000000240)=""/195, 0xc3) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec85"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) 2.902355525s ago: executing program 3 (id=1749): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000800)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$inet(r2, &(0x7f0000001340)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="759892", 0x3}], 0x1}}, {{&(0x7f0000000900)={0x2, 0x4e22, @local}, 0x10, 0x0}}], 0x2, 0x4000014) 2.901356325s ago: executing program 3 (id=1750): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f000054f000/0x4000)=nil, 0x4000, 0x17) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x80, 0x40) sched_setaffinity(0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22}, 0x21) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0xaf4, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000850000007b00000095000000c39adb44aefc1cfc844689b4000000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r3}, 0x10) 2.873080325s ago: executing program 1 (id=1751): pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000580)=ANY=[@ANYBLOB="ff01616265cf92fe155362fca384781a0eec0b63714eff0b90ecfeb0656e2cb80b6c93b11736badd5a5d4309c0", @ANYRESHEX, @ANYRESHEX=r0], 0xec0}}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160080000000000004000000fbdd000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r3) waitid(0x0, 0x0, 0x0, 0x41000004, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r2}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r4}, 0x10) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0x8}, 0x18) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) prlimit64(r5, 0xd, &(0x7f00000001c0)={0xfff}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r8}, 0x10) socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r9, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r1) r11 = syz_open_dev$evdev(&(0x7f0000000200), 0x200, 0x0) ioctl$EVIOCSCLOCKID(r11, 0x40084503, &(0x7f0000000240)=0xfa) 2.872309045s ago: executing program 4 (id=1752): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={0x0, r0}, 0x18) gettid() timer_create(0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x805}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x202, 0x0) mkdir(0x0, 0x0) r1 = syz_io_uring_setup(0x94f, &(0x7f00000016c0), &(0x7f0000000080)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_enter(r1, 0x7, 0x464f, 0x1, &(0x7f0000000000), 0x8) io_uring_enter(r1, 0x1815, 0x0, 0x0, 0x0, 0x0) 2.689599208s ago: executing program 1 (id=1753): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000300000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) pwrite64(r1, &(0x7f0000000080)='3', 0x1, 0x0) 2.669057699s ago: executing program 1 (id=1754): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000000c0)='9', 0x1, 0xfffffffffffffffc) keyctl$chown(0x4, r3, 0xee00, 0xffffffffffffffff) keyctl$chown(0x4, r3, 0x0, 0x0) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc5fffffd) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b7030000000000f785000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) clock_nanosleep(0x9, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x0) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x88, &(0x7f0000000c80)={[{@nogrpid}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@nombcache}, {@noinit_itable}, {@quota}]}, 0x3, 0x438, &(0x7f0000000580)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x17c) pwritev2(r4, 0x0, 0x0, 0xe7b, 0x0, 0x0) munlock(&(0x7f0000cb5000/0x3000)=nil, 0x3000) munlock(&(0x7f0000dba000/0x4000)=nil, 0x4000) socket$xdp(0x2c, 0x3, 0x0) munlockall() 2.319496694s ago: executing program 2 (id=1755): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) eventfd(0x4) ioctl$VHOST_SET_VRING_BASE(r2, 0x4008af12, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="750a00000000000000240000b754fdaa1800000008008a248525c6ce00"], &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000900)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x19e, 0x19e, 0x7, [@datasec={0x2, 0x9, 0x0, 0xf, 0x2, [{0x1, 0xcd, 0xbc}, {0x3, 0x9, 0x8000}, {0x4, 0xb427, 0x101}, {0x4, 0x4669}, {0x1, 0x7d08acfd, 0x2}, {0x1, 0xffffff1b, 0x2}, {0x1, 0x5, 0x6}, {0x80000000, 0x95, 0x3}, {0x2, 0x5, 0x2}], "d162"}, @float={0x6}, @union={0x5, 0xa, 0x0, 0x5, 0x1, 0x48, [{0x1, 0x5, 0x9}, {0x2, 0x3, 0x5}, {0xc, 0x5, 0x9}, {0xc, 0x2, 0x6}, {0x3, 0x5, 0xe748}, {0x4, 0x3, 0x6}, {0xd, 0x5, 0x40}, {0x0, 0x2, 0xfff}, {0xd, 0x5, 0x7}, {0xb, 0x1, 0x1}]}, @restrict={0xa, 0x0, 0x0, 0xb, 0x1}, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{0x8, 0x5}, {0x8, 0x2}, {0x2, 0x3}, {0xa, 0x3}]}, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{0x8, 0x2}, {0x1}, {0xa, 0x2}, {0xa, 0x4}]}, @enum64={0x3, 0x3, 0x0, 0x13, 0x0, 0x8, [{0x6, 0x6, 0x6}, {0x2, 0x9, 0x101}, {0xa, 0x5, 0x9}]}]}, {0x0, [0x2e, 0x5f, 0x5f, 0x0, 0x30]}}, &(0x7f0000000580)=""/130, 0x1bf, 0x82, 0x0, 0x9c5}, 0x28) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2800053, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000010027bd70010000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000021000008001b000000000014001a80100002800c0083ea018008001d000100", @ANYRESHEX, @ANYRES8=r5], 0x3c}, 0x1, 0x0, 0x0, 0x40c5}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1c, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r6}, 0x10) r7 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r8 = fcntl$dupfd(r7, 0x406, r7) ioctl$USBDEVFS_SUBMITURB(r8, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) 1.864426581s ago: executing program 4 (id=1757): r0 = add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)={0x1, 0x0, @b}, 0x48, 0xfffffffffffffffa) keyctl$assume_authority(0x10, r0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) pipe2$watch_queue(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000001c0)={{{@in6=@loopback, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@mcast2}}, &(0x7f00000002c0)=0xe8) statx(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0, 0x40, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x6000, &(0x7f0000000440)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@dfltuid={'dfltuid', 0x3d, r4}}, {@cache_loose}, {@version_u}, {@noxattr}, {@cache_mmap}, {@cache_none}, {@afid={'afid', 0x3d, 0x2}}, {@cache_loose}], [{@flag='nomand'}, {@fsuuid={'fsuuid', 0x3d, {[0x63, 0x34, 0x61, 0x65, 0x32, 0x65, 0x35, 0x30], 0x2d, [0x39, 0x66, 0x37, 0x15], 0x2d, [0x0, 0x39, 0x2, 0x62], 0x2d, [0x66, 0x63, 0x62, 0x30], 0x2d, [0x30, 0x35, 0x0, 0x7, 0x64, 0x30, 0x55, 0x64]}}}, {@fscontext={'fscontext', 0x3d, 'system_u'}}, {@hash}, {@uid_lt={'uid<', r5}}, {@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@permit_directio}, {@appraise}, {@fsuuid={'fsuuid', 0x3d, {[0x64, 0x37, 0x35, 0x33, 0x61, 0x33, 0x61, 0x36], 0x2d, [0x62, 0x62, 0x39, 0x66], 0x2d, [0x0, 0x39, 0x65, 0x63], 0x2d, [0x34, 0x33, 0x30, 0x31], 0x2d, [0x38, 0x65, 0x39, 0x36, 0x66, 0x35, 0x32, 0x35]}}}]}}) read(r1, &(0x7f00000005c0)=""/238, 0xee) r6 = accept4(r3, &(0x7f00000006c0), &(0x7f0000000740)=0x80, 0x0) recvmmsg(r6, &(0x7f000000be00)=[{{&(0x7f0000000780)=@tipc=@name, 0x80, &(0x7f0000001a00)=[{&(0x7f0000000800)=""/199, 0xc7}, {&(0x7f0000000900)=""/49, 0x31}, {&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f0000001940)=""/142, 0x8e}], 0x4, &(0x7f0000001a40)=""/11, 0xb}, 0x6}, {{0x0, 0x0, &(0x7f0000002c80)=[{&(0x7f0000001a80)=""/185, 0xb9}, {&(0x7f0000001b40)=""/4096, 0x1000}, {0x0}, {&(0x7f0000002c00)=""/120, 0x78}], 0x4, &(0x7f0000002cc0)=""/91, 0x5b}, 0x2}, {{&(0x7f0000002d40)=@hci, 0x80, &(0x7f0000003ec0)=[{&(0x7f0000002dc0)=""/4096, 0x1000}, {&(0x7f0000003dc0)=""/255, 0xff}], 0x2, &(0x7f0000003f00)=""/4096, 0x1000}, 0x2}, {{&(0x7f0000004f00)=@qipcrtr, 0x80, &(0x7f00000073c0)=[{&(0x7f0000004f80)=""/148, 0x94}, {&(0x7f0000005040)=""/4096, 0x1000}, {&(0x7f0000006040)=""/155, 0x9b}, {&(0x7f0000006100)=""/207, 0xcf}, {&(0x7f0000006200)=""/53, 0x35}, {&(0x7f0000006240)=""/97, 0x61}, {&(0x7f00000062c0)=""/34, 0x22}, {&(0x7f0000006300)=""/4096, 0x1000}, {&(0x7f0000007300)=""/169, 0xa9}], 0x9, &(0x7f0000007480)=""/238, 0xee}, 0x1}, {{&(0x7f0000007580)=@hci, 0x80, &(0x7f0000007740)=[{&(0x7f0000007600)=""/196, 0xc4}, {&(0x7f0000007700)=""/64, 0x40}], 0x2, &(0x7f0000007780)=""/56, 0x38}, 0x9a}, {{&(0x7f0000008800)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f000000ba40)=[{&(0x7f0000008880)=""/204, 0xcc}, {&(0x7f0000008980)=""/182, 0xb6}, {&(0x7f0000008a40)=""/4096, 0x1000}, {&(0x7f0000009a40)=""/4096, 0x1000}, {&(0x7f000000aa40)=""/4096, 0x1000}], 0x5, &(0x7f000000bac0)=""/237, 0xed}, 0x4}, {{&(0x7f000000bbc0)=@qipcrtr, 0x80, &(0x7f000000bd40)=[{&(0x7f000000bc40)=""/195, 0xc3}], 0x1, &(0x7f000000bd80)=""/109, 0x6d}, 0xc}], 0x7, 0x20, &(0x7f000000c000)) add_key$user(&(0x7f000000c040), &(0x7f000000c080)={'syz', 0x3}, &(0x7f000000c0c0)="a6ae386b34eecee502a25fd37523982145b92a5c4b4a3ba0c58907be8296d9b27c27346a8a9098c30d73fbdf4fd954b673718804440056a616854d4a17a06fc1e45de39338f78ea33d7de1886082b198858e002cf124c5d337c6d23a8ea89f906c7baff1da6a64897c5677fe3085abe3f6ffa7cd4c80f3b15d91dd037c82f77c7ea8822118de67bc32a3899b0eeae6c4b3e8e13b15e07b550a3814f6d5d8b3620883d4ce64fbe7c4d79812a33f66ad65c1a6ff9d5c43be8f26b3800063fa47bf9c8f75703512", 0xc6, 0xfffffffffffffffc) mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0, 0x13, r3, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f000000c1c0)={0x2, 0x2, 0xdddd1000, 0x1000, &(0x7f0000fff000/0x1000)=nil}) ioctl$TCSETSW(r1, 0x5403, &(0x7f000000c200)={0x9, 0x3, 0xff, 0x3, 0x2, "8bc15dea5a12f701b55153052dc7d625f8d72c"}) 1.863418971s ago: executing program 3 (id=1758): syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x21408, 0x0, 0xfd, 0x0, &(0x7f0000006380)) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB, @ANYRESHEX=r2]) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x4}}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) r3 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000000000086a055d0000000000000109022400010000000f0904000004030000000921faff090122070009058103"], 0x0) syz_usb_control_io$hid(r3, &(0x7f00000004c0)={0x24, &(0x7f00000007c0)={0x20, 0x5, 0x94, {0x94, 0x24, "d4ee695d72e9f0d8071a04c444a3a767ed9363f8abdca798a96c6a0cfccaca3465aa9d57414b3f4afbf00c23261c33a424e5725cf0faa7c17a1e67dacb777e63aea8abf842830f46590daf1878c1e7229329547058c4f159248255695ed216c8b38a421de7a59c4c45848ef8e16f7dc31f44eb12718065d3202aef4745761e3e565d3c2f4f79dfd31a2ad20823e8a9f64b98"}}, &(0x7f0000000880)={0x0, 0x3, 0xcd, @string={0xcd, 0x3, "f5856c30b2ecb9991d8bfb1169b86b9bfff0b44b807fe15c95336108274aadb2fbc7b68afbc991d4a7795e82508b7e5ebbb44fc666c2f810bcd9dfca4e77fb982b86599fab3eca937efbc2ee06c2efb51129e84896f760344b480b5270213e665f50f750838d911f9dd8c6dd561278ec985af673ae53153db3be2b13f90b6aec8d753367f1a80e1db4e47c830d72003d9ea5076a862a118c1b9ce08434dd6f441e0413786b28aca2abd1bf733628641881c16ea48e9e4effe146f7b409ed072283b82efcae0ada91242900"}}, &(0x7f0000000300)={0x0, 0x22, 0x16, {[@global=@item_4={0x3, 0x1, 0x4, "794c8da7"}, @main=@item_4={0x3, 0x0, 0x9, "2f7d33bf"}, @global=@item_012={0x0, 0x1, 0x9}, @local=@item_4={0x3, 0x2, 0x8, '?A7\\'}, @local=@item_4={0x3, 0x2, 0x1, "45e60fff"}, @global=@item_012={0x0, 0x1, 0x6}]}}, &(0x7f0000000480)={0x0, 0x21, 0x9, {0x9, 0x21, 0x2, 0xf7, 0x1, {0x22, 0x4d}}}}, &(0x7f0000000980)={0x2c, &(0x7f0000000a00)={0x20, 0x0, 0x6c, "81507bd6cd25f4b588715fbcee303a965113462509146d494522a74716bacec6bc2714de67b9c8f93ecc27ec2740a28a5fc117549d79447bc2243fdb39075c1ba9629c4c317d732d7889cde5d70d379463215c2e02cab2397d071fc09a43c124f21f697df15dc7ed0e09a0c4"}, &(0x7f0000000540)={0x0, 0xa, 0x1, 0x81}, &(0x7f0000000580)={0x0, 0x8, 0x1, 0x7f}, &(0x7f0000000640)={0x20, 0x1, 0x16, "9467aca4599c1053f96e1d5616c4dece64330cbc853a"}, &(0x7f00000006c0)={0x20, 0x3, 0x1, 0x44}}) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000380)={0x0, 0x22, 0x7, {[@global=@item_4={0x3, 0x1, 0x0, "c389d0db"}, @global=@item_012={0x0, 0x1, 0x9}, @global=@item_012={0x0, 0x1, 0x5}]}}, 0x0}, 0x0) r4 = syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000204f045db600070000000109022d00010000600209040010050300010009210000360122050009058103"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f00000005c0)={0x24, 0x0, 0x0, &(0x7f0000000600)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x9, "84802eb8"}]}}, 0x0}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYRESOCT=r3, @ANYRESDEC=r2, @ANYRESDEC, @ANYRESOCT=r4, @ANYBLOB="918693525dde512949", @ANYRES32=r1, @ANYRESDEC=r0], &(0x7f0000000200)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='mm_page_alloc\x00', r5}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) mincore(&(0x7f0000f0c000/0x3000)=nil, 0x0, &(0x7f0000afaf0a)=""/246) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\v\x00\x00\x00\a\x00\x00\x00\b\x00\x00\x00\b'], 0x48) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x8, 0x2, 0x4, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000020006007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r11}, 0x10) sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x8}]}}]}, 0x38}}, 0x0) (fail_nth: 1) 1.777152962s ago: executing program 0 (id=1762): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x18}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x1000000, &(0x7f0000000040)={[{@usrjquota}, {}]}, 0x0, 0x248, &(0x7f0000000940)="$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") ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f0000000580)={@id={0x2, 0x0, @a}, 0x40, 0x0, '\x00', @a}) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="d2ff030060010000009e08f086dd", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$MRT6_INIT(r3, 0x29, 0xc8, &(0x7f0000000180), 0x4) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x40400) read(r4, &(0x7f0000000240)=""/195, 0xc3) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec85"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) 1.681818884s ago: executing program 1 (id=1763): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000900"], 0x48) syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair(0x18, 0x0, 0x2, &(0x7f0000000000)) socketpair$unix(0x1, 0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffbfff, 0x1, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000810018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='sys_enter\x00', r4}, 0x10) ptrace$getenv(0x4201, 0x0, 0x3, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)=0x0) timer_settime(r7, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r8, 0x0) 1.681512993s ago: executing program 0 (id=1764): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000780)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x57) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x702, 0xe, 0xff0f, &(0x7f0000000540)="e460334470b8d480eb00c15286dd", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x35}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x39) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000ac0)=r2, 0x4) syz_emit_ethernet(0x3a, &(0x7f0000000540)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x7, 0x18, 0x0, @wg=@data={0x4, 0xeab, 0x3}}}}}}, 0x0) 1.678404494s ago: executing program 0 (id=1765): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000300000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) pwrite64(r1, &(0x7f0000000080)='3', 0x1, 0x0) 1.632905014s ago: executing program 0 (id=1766): r0 = add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)={0x1, 0x0, @b}, 0x48, 0xfffffffffffffffa) keyctl$assume_authority(0x10, r0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) pipe2$watch_queue(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000001c0)={{{@in6=@loopback, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@mcast2}}, &(0x7f00000002c0)=0xe8) statx(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0, 0x40, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x6000, &(0x7f0000000440)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@dfltuid={'dfltuid', 0x3d, r4}}, {@cache_loose}, {@version_u}, {@noxattr}, {@cache_mmap}, {@posixacl}, {@cache_none}, {@afid={'afid', 0x3d, 0x2}}, {@cache_loose}], [{@flag='nomand'}, {@fsuuid={'fsuuid', 0x3d, {[0x63, 0x34, 0x61, 0x65, 0x32, 0x65, 0x35, 0x30], 0x2d, [0x39, 0x66, 0x37, 0x15], 0x2d, [0x0, 0x39, 0x2, 0x62], 0x2d, [0x66, 0x63, 0x62, 0x30], 0x2d, [0x30, 0x35, 0x0, 0x7, 0x64, 0x30, 0x55, 0x64]}}}, {@fscontext={'fscontext', 0x3d, 'system_u'}}, {@hash}, {@uid_lt={'uid<', r5}}, {@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@permit_directio}, {@appraise}, {@fsuuid={'fsuuid', 0x3d, {[0x64, 0x37, 0x35, 0x33, 0x61, 0x33, 0x61, 0x36], 0x2d, [0x62, 0x62, 0x39, 0x66], 0x2d, [0x0, 0x39, 0x65, 0x63], 0x2d, [0x34, 0x33, 0x30, 0x31], 0x2d, [0x38, 0x65, 0x39, 0x36, 0x66, 0x35, 0x32, 0x35]}}}]}}) read(r1, &(0x7f00000005c0)=""/238, 0xee) r7 = accept4(r3, &(0x7f00000006c0), &(0x7f0000000740)=0x80, 0x0) recvmmsg(r7, &(0x7f000000be00)=[{{&(0x7f0000000780)=@tipc=@name, 0x80, &(0x7f0000001a00)=[{&(0x7f0000000800)=""/199, 0xc7}, {&(0x7f0000000900)=""/49, 0x31}, {&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f0000001940)=""/142, 0x8e}], 0x4, &(0x7f0000001a40)=""/11, 0xb}, 0x6}, {{0x0, 0x0, &(0x7f0000002c80)=[{&(0x7f0000001a80)=""/185, 0xb9}, {&(0x7f0000001b40)=""/4096, 0x1000}, {0x0}, {&(0x7f0000002c00)=""/120, 0x78}], 0x4, &(0x7f0000002cc0)=""/91, 0x5b}, 0x2}, {{&(0x7f0000002d40)=@hci, 0x80, &(0x7f0000003ec0)=[{&(0x7f0000002dc0)=""/4096, 0x1000}, {&(0x7f0000003dc0)=""/255, 0xff}], 0x2, &(0x7f0000003f00)=""/4096, 0x1000}, 0x2}, {{&(0x7f0000004f00)=@qipcrtr, 0x80, &(0x7f00000073c0)=[{&(0x7f0000004f80)=""/148, 0x94}, {0x0}, {&(0x7f0000006040)=""/155, 0x9b}, {&(0x7f0000006100)=""/207, 0xcf}, {&(0x7f0000006200)=""/53, 0x35}, {&(0x7f0000006240)=""/97, 0x61}, {&(0x7f00000062c0)=""/34, 0x22}, {&(0x7f0000006300)=""/4096, 0x1000}, {&(0x7f0000007300)=""/169, 0xa9}], 0x9, &(0x7f0000007480)=""/238, 0xee}, 0x1}, {{&(0x7f0000007580)=@hci, 0x80, &(0x7f0000007740)=[{&(0x7f0000007600)=""/196, 0xc4}, {&(0x7f0000007700)=""/64, 0x40}], 0x2, &(0x7f0000007780)=""/56, 0x38}, 0x9a}, {{0x0, 0x0, &(0x7f00000087c0)=[{&(0x7f00000077c0)=""/4096, 0x1000}], 0x1}, 0x9}, {{&(0x7f0000008800)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f000000ba40)=[{&(0x7f0000008880)=""/204, 0xcc}, {&(0x7f0000008980)=""/182, 0xb6}, {&(0x7f0000008a40)=""/4096, 0x1000}, {&(0x7f0000009a40)=""/4096, 0x1000}, {&(0x7f000000aa40)=""/4096, 0x1000}], 0x5, &(0x7f000000bac0)=""/237, 0xed}, 0x4}, {{&(0x7f000000bbc0)=@qipcrtr, 0x80, &(0x7f000000bd40)=[{&(0x7f000000bc40)=""/195, 0xc3}], 0x1, &(0x7f000000bd80)=""/109, 0x6d}, 0xc}], 0x8, 0x20, &(0x7f000000c000)) r8 = add_key$user(&(0x7f000000c040), &(0x7f000000c080)={'syz', 0x3}, &(0x7f000000c0c0)="a6ae386b34eecee502a25fd37523982145b92a5c4b4a3ba0c58907be8296d9b27c27346a8a9098c30d73fbdf4fd954b673718804440056a616854d4a17a06fc1e45de39338f78ea33d7de1886082b198858e002cf124c5d337c6d23a8ea89f906c7baff1da6a64897c5677fe3085abe3f6ffa7cd4c80f3b15d91dd037c82f77c7ea8822118de67bc32a3899b0eeae6c4b3e8e13b15e07b550a3814f6d5d8b3620883d4ce64fbe7c4d79812a33f66ad65c1a6ff9d5c43be8f26b3800063fa47bf9c8f75703512", 0xc6, 0xfffffffffffffffc) flock(r1, 0x8) mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0, 0x13, r3, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f000000c1c0)={0x2, 0x2, 0xdddd1000, 0x1000, &(0x7f0000fff000/0x1000)=nil}) ioctl$TCSETSW(r1, 0x5403, &(0x7f000000c200)={0x9, 0x3, 0xff, 0x3, 0x2, "8bc15dea5a12f701b55153052dc7d625f8d72c"}) r9 = openat(0xffffffffffffff9c, &(0x7f000000c240)='./file0\x00', 0x400000, 0x90) write$uinput_user_dev(r9, &(0x7f000000c280)={'syz1\x00', {0x4, 0x0, 0x59, 0x6}, 0x55, [0x80000000, 0x100, 0x800, 0x5, 0x3, 0x1, 0x5, 0x40, 0x3ff, 0xc1, 0xfffffffa, 0x0, 0x8, 0x6, 0xb, 0x2, 0x2, 0x4, 0xfffffffe, 0x200, 0x2, 0xd440, 0x5, 0xc5, 0x9, 0x7d94, 0x2, 0x8, 0xffff0000, 0x2, 0xfffff30f, 0x6, 0x4, 0x80, 0x1, 0x9, 0x0, 0x8, 0xfffffff7, 0x1, 0x0, 0x7, 0x5, 0x3, 0xff7, 0x81, 0x4, 0x1, 0x8, 0x3, 0x6, 0x80000001, 0x8, 0x4, 0x7fff, 0x800, 0x10, 0x22, 0x4, 0x9, 0x1000, 0x101, 0x80000000, 0x101], [0x7, 0xa, 0x4d6b, 0x81, 0xfd, 0x922, 0x3, 0x7fff, 0xa, 0x1, 0x0, 0x7f, 0x1, 0x400, 0x5702, 0x0, 0x8, 0xfffffffb, 0x1, 0x401, 0xfffffffa, 0xbf, 0x3, 0x8656, 0x9, 0x1, 0xffff, 0xc, 0x3, 0x8, 0x5, 0x9, 0xf, 0x5, 0x10001, 0x165, 0x9, 0x6, 0x400, 0x7, 0x21f000, 0x3, 0x5, 0x82fd, 0x4, 0x9, 0xf, 0x5, 0xffff, 0x3, 0x6, 0x1, 0xffffffff, 0xb5, 0x2, 0x4, 0x7ff, 0x4, 0x4, 0x147, 0x6, 0x8, 0x7f, 0x800], [0x8001, 0x7ff, 0xeb, 0x2, 0xffffff00, 0x4, 0x7, 0x2, 0x6, 0x401, 0x3, 0x1, 0x704, 0xb203, 0x1a0000, 0x8216, 0x1, 0x7, 0x5, 0x2, 0x9, 0x6, 0x8, 0x9, 0x10001, 0x401, 0x868, 0x2, 0xfffffff5, 0x9, 0x8, 0xddd4, 0xd4a, 0x0, 0xfffffffe, 0x3baf, 0x5, 0xfffffffd, 0xec, 0x200, 0x18, 0x6, 0xd, 0x0, 0x2, 0x4, 0x2, 0x3ff, 0x8, 0x0, 0x2, 0xcf4b, 0x4, 0x2, 0x0, 0x6c55, 0x3, 0xffffffab, 0x0, 0xffffffff, 0x622, 0x149, 0x87, 0x4], [0x80, 0x7ff, 0x3c3, 0x1d03fbd8, 0x1ff, 0x80000001, 0x47, 0x4, 0x0, 0x1, 0x8e23, 0x9, 0x3, 0xdfd8, 0xc, 0x400, 0xfffffff2, 0x6, 0x73, 0x7fffffff, 0x0, 0x3, 0xfffffff7, 0x539d5968, 0x961, 0x3, 0x1ff, 0xa74, 0x4, 0x1, 0x5, 0x7252, 0x400, 0xb, 0x9, 0x485, 0xce000, 0x8, 0x4a6, 0x7, 0x2, 0x6, 0x2, 0xf, 0xfffffff9, 0x7e2, 0x18000000, 0x401, 0x40, 0x0, 0x8a4c, 0x9, 0x4, 0xa29a, 0x10, 0x6, 0xff, 0x8, 0x10, 0x2, 0x8a4d, 0x334d2713, 0x80000000, 0xffff]}, 0x45c) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r8, 0x0, &(0x7f000000c700)) mkdirat(r3, &(0x7f000000c740)='./file0\x00', 0x20) ioctl$TIOCL_GETMOUSEREPORTING(r9, 0x541c, &(0x7f000000c780)) keyctl$KEYCTL_PKEY_QUERY(0x18, r8, 0x0, &(0x7f000000c7c0)='!2*\x00', &(0x7f000000c800)) sendmmsg$sock(r9, &(0x7f000000e2c0)=[{{&(0x7f000000c840)=@in6={0xa, 0x4e21, 0xc7, @rand_addr=' \x01\x00', 0x1}, 0x80, &(0x7f000000cd00)=[{&(0x7f000000c8c0)="1637df73648d064ddac9779f2db955829e3a9c048a3138ccc4bb1f830a64cb146a0c2e49d53cb098e04a832fbcb654b37e742b9aa905b677914721a4148225295a7abc47eeb0b166fe84fef4d9c8a28a6d7390cceb8207391f9b01032317df5bc29a9d8e3a588e729174c007c1d01cebffe1dbda2ded285cfce8bed94ea33c5ba16e61dfa62afb54575562c83e1f75cda9d4b628b269b810f3360cf65ec7c99aafc4314d4273f19b470acd923b4d3177b2", 0xb1}, {&(0x7f000000c980)="1240836dd801d0c802d8a46f7dec620da3e2cd08a40f4f2285b0d4dc951802f0380a447fa51af0399dd7b2f8cbee04d94bc3a7d99c3bdbb7e24e83a0fa25d25a5ab1405923125fe8d9b557872ee373e55dc520388a6678fc7d66840a4116ce4627d30c85aad8dfb6f0e090f15aee60bfc57a629e3feeee93dd0550be1c6adecb19aeef4c0723f1ecc07d77f760afa1a464701d1e8830e2483148d4b9c218036ec3a927c7ab1d5857f42e316d522ea43daf16f80982492e38947225afedf36d18ffb750b1eb61d4fadd6cb9f743e5b3938657ef", 0xd3}, {&(0x7f000000ca80)="ddec3a366cb21b27", 0x8}, {&(0x7f000000cac0)="bbf990cd54c5b9184b897fcee30b88dc6f4d810016375aa5b8eefdd41acfea1192850cc1a6658aa970d45d9fd9ae816a4d07701aedbfeb830fcbadd7d9969b3f5ee695c5717bda45adbf5714a3e7dcee17ed813c0cb2319843f93e077c7f28018b3c24f434b23dae1e237c81893d8452713098048e075982f850b479cfea8c88318d1dea7248bec5109d06e66a1e3072c49bb562", 0x94}, {&(0x7f000000cb80)="e9d72015e8e4a9bdd956e9195724d5b078482f38fc904dd5e567a1069f73529b986c8423213ef3c59e8d087208e511dd6b38faeaf0a18b67fbc9f7019023bc861049b0cfa7ef332f6fe8e2bcc4a1cc399c608690bc1b3c4355b04f31fc6e9191b03120386c6e805d993dcf8031ebadf26f605fc62dd76e45ff4622f714cb499e82bad6f7f35faff70be3a86c1c021a5a718513b09872a90a42a005178181ad275bc65bd43f7bb4dc6f92a90458d8c60e8ec06a6d1c38b93cc63ab23eea283ab9faba7a692ccb", 0xc6}, {&(0x7f000000cc80)="a628e0b8490311f862dda80338c9c29cf226832fc2c6ed8adf95d57dc75d4fc4d6df099ad4570a312768cda0dcdc8e6f5539312c3995cd6e9aed321fe95a563ab64340cf52fb", 0x46}], 0x6, &(0x7f000000cd80)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @mark={{0x14, 0x1, 0x24, 0x80000001}}, @txtime={{0x18, 0x1, 0x3d, 0xffffffffffff0001}}, @mark={{0x14, 0x1, 0x24, 0xfffffffe}}], 0x60}}, {{&(0x7f000000ce00)=@x25, 0x80, &(0x7f000000e200)=[{&(0x7f000000ce80)="24508abec592d981e28e43ef433c01bfe8b33b084ea1da6fdaad66a13b0bbe07aff8aad28622aab235a93fed1ea3fa9be756f145fc5754ed5b510f282980e70d13e5cdb75c57b01333de3b431922df314631ef270dcd146d233ecdb3282925989d5f0e03ec2bb64b3aafcd973500a4058aa9c19351f078567c8b9414be9ebaf20f3a345e7c730d36c50144fb73869473864df8bf", 0x94}, {&(0x7f000000cf40)="b0e252048339494c3854a809932728f7f0a3a8c9e65fb1c3d322db5521ffe82a954c6f5d5f3d35af2c49c89dcc46faf65abfda19fdd53fa636781cec55ebffa3a713da7a2ef201d506c5496e27387f4d8283939698dbd6688315bf80bca524ba077089d722796ab49b533d19b7bec5532158de24a1a46e81f121ac8218dbaf052140a89ee0f629a61fef5b77d6beb1639036c4", 0x93}, {&(0x7f000000d000)="24ef67c5894e93ebde477f63aef26e261a334770cdbd934b9ccba789f3be934b4bbedbd3b272d629653dc2f19e17352e0ac46a9942fbe6289ef1d0f433887d82d01858c70c47f1bfb0cc8284d70f5427f21ce148df5911c44e5f0ae72dbdb44c2a0d3b4fa97803dfae5eba283461a4c1a15d03b986931ab6df4bdc4e640ddb7b2da9fc2f5f8bb200442b114b142edc97f8236cdd647b5a38806ad8bca736b9337db06308b85b47d09ed2bd684e9b846af1775f733e56", 0xb6}, {&(0x7f000000d0c0)="27dd600e95f5981ecda2a00bf09608f1c850947cf57440de0e3146b1b2a640d5e680f5fb696cf8f63211eb1813f9c15999aa2b8a068c6e444b5e809101bc4908e99aeeae428b13151301762a12ba168e035ee4d5605372ba11ae5b450a7e194111223862aadb9984e91deff7f37e57649b27d3dae3b34552e0e22c5d71376802e61f50348d5a722fc9ac1ed44a4988030ecb7e5ad4c38840d8c85172dfcd146a63022cc3c42df7218d04373a245668193bba5bf656e634343721201d60d45b90c1919863787bc6a0d2a435a9ada1e8ca4d6e1a1c17", 0xd5}, {&(0x7f000000d1c0)="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", 0x1000}, {&(0x7f000000e1c0)="a318d981fb681fff993ee25c7d56f1a769b247767e48377ded7011115ffa382a9dd72c1ee1d693807b547d3892c43f45b8c39f0e606040997074ba7280", 0x3d}], 0x6, &(0x7f000000e280)=[@txtime={{0x18}}], 0x18}}], 0x2, 0x4) r10 = add_key$keyring(&(0x7f000000e340), &(0x7f000000e380)={'syz', 0x0}, 0x0, 0x0, r0) keyctl$unlink(0x9, r8, r10) getsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f000000e440)={{{@in=@local, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}}}, &(0x7f000000e540)=0xe8) lstat(&(0x7f000000e580)='./file0/file0\x00', &(0x7f000000e5c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r13 = getegid() getresgid(&(0x7f000000e640)=0x0, &(0x7f000000e680), &(0x7f000000e6c0)) setxattr$system_posix_acl(&(0x7f000000e3c0)='./file0\x00', &(0x7f000000e400)='system.posix_acl_access\x00', &(0x7f000000e700)={{}, {0x1, 0x1}, [{0x2, 0x3, r5}, {0x2, 0x1, r11}], {0x4, 0x6}, [{0x8, 0x3, r6}, {0x8, 0x1, r6}, {0x8, 0x4, r12}, {0x8, 0x5, r6}, {0x8, 0x7, r13}, {0x8, 0x4, r14}], {0x10, 0x1}, {0x20, 0x1}}, 0x64, 0x1) setsockopt$IP_VS_SO_SET_EDIT(r3, 0x0, 0x483, &(0x7f000000e780)={0x2c, @multicast2, 0x4e24, 0x1, 'sed\x00', 0x3ab20daac63a9184, 0xa, 0x54}, 0x2c) 373.761214ms ago: executing program 2 (id=1767): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = gettid() rt_sigaction(0x16, &(0x7f0000000080)={&(0x7f0000000440)="c4a23d0643b9f0430fc079fff3460f1ec9f081035c000000f30faed446a900000000660f7ed238c461915492db8876efa1efa12eb22d233333f30fa7d0", 0x90000000, 0x0}, 0x0, 0x8, &(0x7f0000000200)) rt_sigsuspend(&(0x7f0000000000), 0x8) tkill(r0, 0x16) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001b80)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000fdfdfff67a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040000010000400404000001000000b7050000020000006a0a00fe00000000850000000a000000b70000000000000095000000000000009cc6b3fcd62c7d376238975d43a4505f80fc88943c4f0cf08e467b592f868ee30a0e8c1bf176db2a6b2feb4b6fd3d5707bfd2d84aaa3b1d4e984c46ea7e2a447a36f5662403e1b2be4cc7c2683908a0d411a9872971c7c56f0979bd10b97163c1d6d0e196bf02f46c7e81eb72c00000000d0d26b5069f8a98f7dc8f76b74635fde9ca3c00cb9bf4e418d07fa22f0610a70f2bdf4000000000000b0c2940dd8e263aa743f7555193161f45346b1004006000000e1ffff8816326d7d25c32aac1c7d5b5be399f6609876b5887437a172fbc02a74067529194e533583412dff048f000000008b260000b2728a0481e9f0da43bb6cfb851cd364ff19ffcafe3e64be033c9d2f002cc93c1c13caec04a347383420336bec88c24a9fb6a6991ddb737d527d6acb15426415b6e8b14fdfa2c6e94bf1339454c13ad3e328a100000000b515a1000000000000000eb2e9c15b6c8f6198282df27badac8507bc7d202e0990e0"], &(0x7f0000000340)='GPL\x00'}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x8, 0x2, 0x4, 0x5}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r1, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0xce56fe61a68fc369, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x12, 0x8, 0x4, 0x7cb4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) 366.213324ms ago: executing program 4 (id=1768): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={0x0, r0}, 0x18) gettid() timer_create(0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x805}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x202, 0x0) mkdir(0x0, 0x0) r1 = syz_io_uring_setup(0x94f, &(0x7f00000016c0), &(0x7f0000000080)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_enter(r1, 0x7, 0x464f, 0x1, &(0x7f0000000000), 0x8) io_uring_enter(r1, 0x1815, 0x0, 0x0, 0x0, 0x0) 343.353464ms ago: executing program 0 (id=1769): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0900000004000000010000000b000000000000cd45c7a47b9495e77ee725d500", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000006020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b70300000000ecff850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f00000001c0)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300", 0xffffffff}, 0x48, 0xffffffffffffffff) r3 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) r4 = add_key$fscrypt_v1(&(0x7f0000000340), &(0x7f0000000440)={'fscrypt:', @desc1}, &(0x7f0000000480)={0x0, "6035ae1e0fe721441705322225930e6c1e3e2a51a92fd796bc34d7cf6e0236805b4377f7ab1a9b01c103a4c6a7ef54e6763fd7264c39ea00c508ba6062696138"}, 0x48, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x4, r4, r3, r3, 0x0) keyctl$KEYCTL_MOVE(0x4, r2, r2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r5, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r7}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x26080, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 268.846765ms ago: executing program 2 (id=1770): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000001540)='./file1\x00', 0x2000000, &(0x7f0000000800)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c00a37e941910c27d130b55ac2d5f7a61e59ec6d5de00000000924c32eeb367d16409d6d3ec1fb755f9a7989ebc4e96918e268f0b7acebf67c07bc4731200f87d27b5e9e61000ef64637d14e548355376ec821c05008685c055a367ea51b653eff6581710e72f1e7e4d9d1607d004d9ed060000004bc667bd24219163c60803099f985567be0d978e301b4f6611628606afadb04e0158f42f1853f2e8598a5e250e0f4c9a"], 0x1, 0x1506, &(0x7f0000002ac0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b708000002001e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000d00)='sched_switch\x00', r4}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}}) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002b80)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x37, 0x7fffffff}]}) close_range(r6, 0xffffffffffffffff, 0x0) 177.301746ms ago: executing program 1 (id=1771): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f000054f000/0x4000)=nil, 0x4000, 0x17) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x80, 0x40) sched_setaffinity(0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f00000001c0)={0x0, 0x1, 0xffffffffffffffff, 0x0, 0x80000}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0xaf4, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000850000007b00000095000000c39adb44aefc1cfc844689b4000000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r3}, 0x10) 62.900898ms ago: executing program 1 (id=1772): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000001540)='./file1\x00', 0x2000000, &(0x7f0000000800)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c00a37e941910c27d130b55ac2d5f7a61e59ec6d5de00000000924c32eeb367d16409d6d3ec1fb755f9a7989ebc4e96918e268f0b7acebf67c07bc4731200f87d27b5e9e61000ef64637d14e548355376ec821c05008685c055a367ea51b653eff6581710e72f1e7e4d9d1607d004d9ed060000004bc667bd24219163c60803099f985567be0d978e301b4f6611628606afadb04e0158f42f1853f2e8598a5e250e0f4c9a"], 0x1, 0x1506, &(0x7f0000002ac0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b708000002001e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000d00)='sched_switch\x00', r4}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}}) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002b80)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x37, 0x7fffffff}]}) close_range(r6, 0xffffffffffffffff, 0x0) (fail_nth: 1) 62.281708ms ago: executing program 0 (id=1773): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000000c0)='9', 0x1, 0xfffffffffffffffc) keyctl$chown(0x4, r3, 0xee00, 0xffffffffffffffff) keyctl$chown(0x4, r3, 0x0, 0x0) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc5fffffd) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b7030000000000f785000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) clock_nanosleep(0x9, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x0) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x88, &(0x7f0000000c80)={[{@nogrpid}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@nombcache}, {@noinit_itable}, {@quota}]}, 0x3, 0x438, &(0x7f0000000580)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x17c) pwritev2(r4, 0x0, 0x0, 0xe7b, 0x0, 0x0) munlock(&(0x7f0000cb5000/0x3000)=nil, 0x3000) munlock(&(0x7f0000dba000/0x4000)=nil, 0x4000) socket$xdp(0x2c, 0x3, 0x0) munlockall() 0s ago: executing program 2 (id=1774): r0 = syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) (async) wait4(r0, 0x0, 0x0, 0x0) getpid() r1 = getpid() r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000240)='syz1\x00', 0x200002, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000080)=0x0) syz_clone3(&(0x7f0000000280)={0x80000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000300), {0x2b}, &(0x7f00000000c0)=""/16, 0x10, &(0x7f0000000100)=""/218, &(0x7f0000000200)=[r3, r0, r0, r0, r1], 0x5, {r2}}, 0x58) (async, rerun: 64) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) (rerun: 64) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r5}, 0x18) (async) utimes(0x0, 0x0) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r0, 0x6, 0x0) kernel console output (not intermixed with test programs): 6] should_fail_ex+0x3d4/0x520 [ 326.135602][ T4886] ? copy_fs_struct+0x4c/0x220 [ 326.140367][ T4886] __should_failslab+0xac/0xf0 [ 326.145127][ T4886] should_failslab+0x9/0x20 [ 326.149635][ T4886] kmem_cache_alloc+0x3b/0x330 [ 326.154404][ T4886] ? preempt_schedule_irq+0xbb/0x110 [ 326.159692][ T4886] copy_fs_struct+0x4c/0x220 [ 326.164281][ T4886] ksys_unshare+0x365/0x7b0 [ 326.168790][ T4886] ? raw_irqentry_exit_cond_resched+0x29/0x30 [ 326.174852][ T4886] ? __cfi_ksys_unshare+0x10/0x10 [ 326.179886][ T4886] __x64_sys_unshare+0x38/0x40 [ 326.184646][ T4886] x64_sys_call+0x767/0x9a0 [ 326.189159][ T4886] do_syscall_64+0x4c/0xa0 [ 326.193576][ T4886] ? clear_bhb_loop+0x30/0x80 [ 326.198287][ T4886] ? clear_bhb_loop+0x30/0x80 [ 326.202957][ T4886] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 326.208894][ T4886] RIP: 0033:0x7f6e45b8e929 [ 326.213315][ T4886] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 326.232922][ T4886] RSP: 002b:00007f6e46962038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 326.236422][ T28] kauditd_printk_skb: 24 callbacks suppressed [ 326.236438][ T28] audit: type=1400 audit(1751134225.819:1456): avc: denied { write } for pid=4870 comm="syz.0.1340" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 326.241341][ T4886] RAX: ffffffffffffffda RBX: 00007f6e45db6160 RCX: 00007f6e45b8e929 [ 326.241360][ T4886] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000064000600 [ 326.241369][ T4886] RBP: 00007f6e46962090 R08: 0000000000000000 R09: 0000000000000000 [ 326.241379][ T4886] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 326.241389][ T4886] R13: 0000000000000000 R14: 00007f6e45db6160 R15: 00007fff1d675608 [ 326.241403][ T4886] [ 326.358449][ T204] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 327.673577][ T28] audit: type=1400 audit(1751134227.381:1457): avc: denied { read write } for pid=286 comm="syz-executor" name="loop0" dev="devtmpfs" ino=912 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 327.748348][ T4857] udevd[4857]: symlink '../../loop0' '/dev/disk/by-diskseq/141.tmp-b7:0' failed: Read-only file system [ 327.762263][ T28] audit: type=1400 audit(1751134227.381:1458): avc: denied { open } for pid=286 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=912 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 328.064817][ T28] audit: type=1400 audit(1751134227.381:1459): avc: denied { ioctl } for pid=286 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=912 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 329.380731][ T4905] futex_wake_op: syz.0.1345 tries to shift op by -1; fix this program [ 330.189058][ T4909] loop0: detected capacity change from 0 to 512 [ 330.289985][ T4909] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 330.316252][ T28] audit: type=1400 audit(1751134229.561:1460): avc: denied { wake_alarm } for pid=4896 comm="syz.0.1345" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 330.337437][ T28] audit: type=1400 audit(1751134229.748:1461): avc: denied { mounton } for pid=4896 comm="syz.0.1345" path="/270/file2" dev="tmpfs" ino=1448 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 330.348101][ T4857] udevd[4857]: symlink '../../loop0' '/dev/disk/by-diskseq/142.tmp-b7:0' failed: Read-only file system [ 330.375303][ T4857] udevd[4857]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 330.376863][ T28] audit: type=1400 audit(1751134229.916:1462): avc: denied { mounton } for pid=4911 comm="syz.3.1349" path="/265/file0" dev="tmpfs" ino=1425 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 330.392859][ T4902] udevd[4902]: symlink '../../loop0' '/dev/disk/by-diskseq/142.tmp-b7:0' failed: Read-only file system [ 330.421769][ T4902] udevd[4902]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 330.434194][ T4909] EXT4-fs (loop0): 1 truncate cleaned up [ 330.440531][ T4909] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 330.449888][ T28] audit: type=1400 audit(1751134229.982:1463): avc: denied { mount } for pid=4896 comm="syz.0.1345" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 330.519036][ T4902] udevd[4902]: symlink '../../loop0' '/dev/disk/by-diskseq/142.tmp-b7:0' failed: Read-only file system [ 330.536217][ T4902] udevd[4902]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 330.541713][ T28] audit: type=1400 audit(1751134230.019:1464): avc: denied { write } for pid=4896 comm="syz.0.1345" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 330.554163][ T4920] FAULT_INJECTION: forcing a failure. [ 330.554163][ T4920] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 330.569648][ T28] audit: type=1400 audit(1751134230.019:1465): avc: denied { add_name } for pid=4896 comm="syz.0.1345" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 330.585738][ T4920] CPU: 0 PID: 4920 Comm: syz.2.1351 Not tainted 6.1.141-syzkaller-00033-g36d69f6a49eb #0 [ 330.612846][ T4920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 330.622882][ T4920] Call Trace: [ 330.626143][ T4920] [ 330.629053][ T4920] __dump_stack+0x21/0x24 [ 330.633365][ T4920] dump_stack_lvl+0xee/0x150 [ 330.637934][ T4920] ? __cfi_dump_stack_lvl+0x8/0x8 [ 330.642945][ T4920] ? _parse_integer+0x2a/0x40 [ 330.647602][ T4920] dump_stack+0x15/0x24 [ 330.651735][ T4920] should_fail_ex+0x3d4/0x520 [ 330.656393][ T4920] should_fail+0xb/0x10 [ 330.660532][ T4920] should_fail_usercopy+0x1a/0x20 [ 330.665532][ T4920] _copy_from_user+0x1e/0xc0 [ 330.670100][ T4920] ___sys_sendmsg+0x155/0x290 [ 330.674757][ T4920] ? __sys_sendmsg+0x270/0x270 [ 330.679502][ T4920] ? __kasan_check_write+0x14/0x20 [ 330.684593][ T4920] ? proc_fail_nth_write+0x17a/0x1f0 [ 330.689869][ T4920] ? vfs_write+0x9d6/0xca0 [ 330.694292][ T4920] ? __fdget+0x19c/0x220 [ 330.698525][ T4920] __x64_sys_sendmsg+0x1f0/0x2c0 [ 330.703451][ T4920] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 330.708908][ T4920] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 330.714967][ T4920] x64_sys_call+0x171/0x9a0 [ 330.719458][ T4920] do_syscall_64+0x4c/0xa0 [ 330.723851][ T4920] ? clear_bhb_loop+0x30/0x80 [ 330.728601][ T4920] ? clear_bhb_loop+0x30/0x80 [ 330.733282][ T4920] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 330.739162][ T4920] RIP: 0033:0x7f1ef1b8e929 [ 330.743985][ T4920] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 330.763573][ T4920] RSP: 002b:00007f1ef2ab7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 330.771968][ T4920] RAX: ffffffffffffffda RBX: 00007f1ef1db5fa0 RCX: 00007f1ef1b8e929 [ 330.779935][ T4920] RDX: 0000000004008800 RSI: 0000200000000840 RDI: 0000000000000006 [ 330.787897][ T4920] RBP: 00007f1ef2ab7090 R08: 0000000000000000 R09: 0000000000000000 [ 330.795862][ T4920] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 330.803820][ T4920] R13: 0000000000000000 R14: 00007f1ef1db5fa0 R15: 00007ffe096976d8 [ 330.811781][ T4920] [ 330.917056][ T286] EXT4-fs (loop0): unmounting filesystem. [ 331.275573][ T4902] udevd[4902]: symlink '../../loop0' '/dev/disk/by-diskseq/142.tmp-b7:0' failed: Read-only file system [ 331.293103][ T4902] udevd[4902]: symlink '../../loop0' '/dev/disk/by-diskseq/142.tmp-b7:0' failed: Read-only file system [ 331.336964][ T6] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 331.539990][ T6] usb 2-1: Using ep0 maxpacket: 16 [ 331.546659][ T6] usb 2-1: unable to get BOS descriptor or descriptor too short [ 331.555083][ T6] usb 2-1: config 1 has an invalid interface number: 206 but max is 0 [ 331.563399][ T6] usb 2-1: config 1 has no interface number 0 [ 331.571717][ T6] usb 2-1: string descriptor 0 read error: -22 [ 331.577977][ T6] usb 2-1: New USB device found, idVendor=152d, idProduct=0310, bcdDevice=3b.0a [ 331.587066][ T6] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.595122][ T2700] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 331.785866][ T2700] usb 1-1: Using ep0 maxpacket: 16 [ 331.792747][ T2700] usb 1-1: unable to get BOS descriptor or descriptor too short [ 331.805457][ T2700] usb 1-1: config 1 has an invalid interface number: 206 but max is 0 [ 331.813697][ T2700] usb 1-1: config 1 has no interface number 0 [ 331.826017][ T2700] usb 1-1: string descriptor 0 read error: -22 [ 331.832484][ T2700] usb 1-1: New USB device found, idVendor=152d, idProduct=0310, bcdDevice=3b.0a [ 331.841725][ T2700] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.468264][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 332.468280][ T28] audit: type=1400 audit(1751134231.497:1477): avc: denied { write } for pid=4937 comm="syz.2.1357" name="001" dev="devtmpfs" ino=185 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 334.169548][ T204] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 334.233714][ T1895] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 334.361946][ T204] usb 4-1: Using ep0 maxpacket: 16 [ 334.369655][ T204] usb 4-1: unable to get BOS descriptor or descriptor too short [ 334.381782][ T204] usb 4-1: config 1 has an invalid interface number: 206 but max is 0 [ 334.390155][ T204] usb 4-1: config 1 has an invalid interface association descriptor of length 2, skipping [ 334.400233][ T204] usb 4-1: config 1 has no interface number 0 [ 334.408019][ T204] usb 4-1: New USB device found, idVendor=152d, idProduct=0310, bcdDevice=3b.0a [ 334.417273][ T204] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.425312][ T204] usb 4-1: Product: syz [ 334.429723][ T204] usb 4-1: Manufacturer: syz [ 334.434353][ T204] usb 4-1: SerialNumber: syz [ 334.437017][ T1895] usb 3-1: Using ep0 maxpacket: 16 [ 334.913208][ T39] usb 2-1: USB disconnect, device number 19 [ 335.250666][ T4961] udevd[4961]: symlink '../../loop0' '/dev/disk/by-diskseq/143.tmp-b7:0' failed: Read-only file system [ 335.252469][ T414] usb 1-1: USB disconnect, device number 24 [ 335.285813][ T4961] udevd[4961]: symlink '../../loop0' '/dev/disk/by-diskseq/143.tmp-b7:0' failed: Read-only file system [ 335.343598][ T28] audit: type=1400 audit(1751134234.556:1478): avc: denied { create } for pid=4973 comm="syz.4.1365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 335.404269][ T28] audit: type=1400 audit(1751134234.584:1479): avc: denied { read } for pid=4973 comm="syz.4.1365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 335.429875][ T28] audit: type=1400 audit(1751134234.594:1480): avc: denied { create } for pid=4962 comm="syz.1.1362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 335.451433][ T28] audit: type=1326 audit(1751134234.613:1481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4962 comm="syz.1.1362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e45b8e929 code=0x7ffc0000 [ 335.475718][ T28] audit: type=1326 audit(1751134234.613:1482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4962 comm="syz.1.1362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6e45b8e929 code=0x7ffc0000 [ 335.499225][ T28] audit: type=1326 audit(1751134234.613:1483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4962 comm="syz.1.1362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e45b8e929 code=0x7ffc0000 [ 335.523479][ T28] audit: type=1326 audit(1751134234.613:1484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4962 comm="syz.1.1362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f6e45b8e929 code=0x7ffc0000 [ 335.762416][ T28] audit: type=1326 audit(1751134234.613:1485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4962 comm="syz.1.1362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f6e45b8e963 code=0x7ffc0000 [ 335.817672][ T28] audit: type=1400 audit(1751134234.613:1486): avc: denied { read } for pid=4973 comm="syz.4.1365" name="usbmon7" dev="devtmpfs" ino=180 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 336.338868][ T204] usb 4-1: Found UVC 0.00 device syz (152d:0310) [ 336.407924][ T4989] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 336.523976][ T204] usb 4-1: No valid video chain found. [ 336.527294][ T4857] udevd[4857]: symlink '../../loop0' '/dev/disk/by-diskseq/143.tmp-b7:0' failed: Read-only file system [ 336.579492][ T204] usb 4-1: USB disconnect, device number 29 [ 336.828986][ T4998] loop0: detected capacity change from 0 to 512 [ 336.857252][ T4998] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 336.860187][ T4902] udevd[4902]: symlink '../../loop0' '/dev/disk/by-diskseq/144.tmp-b7:0' failed: Read-only file system [ 336.900894][ T4902] udevd[4902]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 336.932846][ T4998] EXT4-fs (loop0): 1 truncate cleaned up [ 336.938765][ T4998] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 337.020644][ T1895] usb 3-1: unable to get BOS descriptor or descriptor too short [ 337.038313][ T4902] udevd[4902]: symlink '../../loop0' '/dev/disk/by-diskseq/144.tmp-b7:0' failed: Read-only file system [ 337.256735][ T4902] udevd[4902]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 337.555317][ T5004] futex_wake_op: syz.2.1371 tries to shift op by -1; fix this program [ 339.266547][ T1895] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 339.553169][ T1895] usb 3-1: can't read configurations, error -71 [ 340.700405][ T5023] futex_wake_op: syz.4.1372 tries to shift op by -1; fix this program [ 342.850553][ T28] kauditd_printk_skb: 45 callbacks suppressed [ 342.850568][ T28] audit: type=1326 audit(1751134241.582:1532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5021 comm="syz.3.1379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc2e18e929 code=0x7ffc0000 [ 342.907042][ T28] audit: type=1326 audit(1751134241.610:1533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5021 comm="syz.3.1379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fdc2e18e929 code=0x7ffc0000 [ 342.934840][ T305] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 342.962795][ T28] audit: type=1326 audit(1751134241.610:1534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5021 comm="syz.3.1379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc2e18e929 code=0x7ffc0000 [ 343.001159][ T28] audit: type=1326 audit(1751134241.610:1535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5021 comm="syz.3.1379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fdc2e18e929 code=0x7ffc0000 [ 343.025016][ T28] audit: type=1326 audit(1751134241.610:1536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5021 comm="syz.3.1379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fdc2e18e963 code=0x7ffc0000 [ 343.051362][ T28] audit: type=1326 audit(1751134241.610:1537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5021 comm="syz.3.1379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fdc2e18d3df code=0x7ffc0000 [ 343.075243][ T28] audit: type=1326 audit(1751134241.610:1538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5021 comm="syz.3.1379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fdc2e18e9b7 code=0x7ffc0000 [ 343.134099][ T5042] futex_wake_op: syz.1.1382 tries to shift op by -1; fix this program [ 343.214100][ T286] EXT4-fs (loop0): unmounting filesystem. [ 343.238450][ T28] audit: type=1326 audit(1751134241.610:1539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5021 comm="syz.3.1379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fdc2e18d290 code=0x7ffc0000 [ 343.301046][ T28] audit: type=1326 audit(1751134241.610:1540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5021 comm="syz.3.1379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fdc2e18d58a code=0x7ffc0000 [ 343.364581][ T28] audit: type=1326 audit(1751134241.610:1541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5021 comm="syz.3.1379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc2e18e929 code=0x7ffc0000 [ 343.552287][ T4902] udevd[4902]: symlink '../../loop0' '/dev/disk/by-diskseq/144.tmp-b7:0' failed: Read-only file system [ 343.565459][ T305] usb 5-1: Using ep0 maxpacket: 16 [ 343.571995][ T305] usb 5-1: unable to get BOS descriptor or descriptor too short [ 343.584447][ T4902] udevd[4902]: symlink '../../loop0' '/dev/disk/by-diskseq/144.tmp-b7:0' failed: Read-only file system [ 343.633105][ T305] usb 5-1: config 1 has an invalid interface number: 206 but max is 0 [ 343.644660][ T305] usb 5-1: config 1 has an invalid interface association descriptor of length 2, skipping [ 343.660118][ T305] usb 5-1: config 1 has no interface number 0 [ 343.695223][ T305] usb 5-1: New USB device found, idVendor=152d, idProduct=0310, bcdDevice=3b.0a [ 343.704309][ T305] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.731875][ T305] usb 5-1: Product: syz [ 343.752078][ T305] usb 5-1: Manufacturer: syz [ 343.826931][ T305] usb 5-1: SerialNumber: syz [ 344.656732][ T4961] udevd[4961]: symlink '../../loop0' '/dev/disk/by-diskseq/145.tmp-b7:0' failed: Read-only file system [ 344.952594][ T5065] futex_wake_op: syz.1.1388 tries to shift op by 32; fix this program [ 345.371968][ T204] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 345.576149][ T204] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 345.592875][ T4961] udevd[4961]: symlink '../../loop0' '/dev/disk/by-diskseq/145.tmp-b7:0' failed: Read-only file system [ 345.597007][ T204] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 345.614017][ T204] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 345.623280][ T204] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.633230][ T204] usb 2-1: config 0 descriptor?? [ 345.763461][ T5079] futex_wake_op: syz.0.1392 tries to shift op by -1; fix this program [ 345.825529][ T305] usb 5-1: Found UVC 0.00 device syz (152d:0310) [ 345.834497][ T5082] loop0: detected capacity change from 0 to 512 [ 345.843438][ T305] usb 5-1: No valid video chain found. [ 345.848979][ T5082] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 345.858109][ T4857] udevd[4857]: symlink '../../loop0' '/dev/disk/by-diskseq/146.tmp-b7:0' failed: Read-only file system [ 345.868297][ T305] usb 5-1: USB disconnect, device number 25 [ 346.107015][ T204] usbhid 2-1:0.0: can't add hid device: -71 [ 346.114376][ T204] usbhid: probe of 2-1:0.0 failed with error -71 [ 346.128284][ T4857] udevd[4857]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 346.130504][ T204] usb 2-1: USB disconnect, device number 20 [ 346.148071][ T5082] EXT4-fs (loop0): 1 truncate cleaned up [ 346.153878][ T5082] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 346.154437][ T4902] udevd[4902]: symlink '../../loop0' '/dev/disk/by-diskseq/146.tmp-b7:0' failed: Read-only file system [ 346.174929][ T4902] udevd[4902]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 346.515996][ T286] EXT4-fs (loop0): unmounting filesystem. [ 346.528150][ T4902] udevd[4902]: symlink '../../loop0' '/dev/disk/by-diskseq/146.tmp-b7:0' failed: Read-only file system [ 346.541603][ T4902] udevd[4902]: symlink '../../loop0' '/dev/disk/by-diskseq/146.tmp-b7:0' failed: Read-only file system [ 347.440209][ T286] block device autoloading is deprecated and will be removed. [ 348.083157][ T5143] netlink: 'syz.4.1411': attribute type 27 has an invalid length. [ 348.461665][ T5143] bridge0: port 2(bridge_slave_1) entered disabled state [ 348.468897][ T5143] bridge0: port 1(bridge_slave_0) entered disabled state [ 348.654837][ T5153] FAULT_INJECTION: forcing a failure. [ 348.654837][ T5153] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 348.667974][ T5153] CPU: 1 PID: 5153 Comm: syz.2.1412 Not tainted 6.1.141-syzkaller-00033-g36d69f6a49eb #0 [ 348.672844][ T28] kauditd_printk_skb: 66 callbacks suppressed [ 348.672859][ T28] audit: type=1400 audit(1751134247.008:1608): avc: denied { create } for pid=5144 comm="syz.2.1412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 348.677784][ T5153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 348.677795][ T5153] Call Trace: [ 348.677801][ T5153] [ 348.677807][ T5153] __dump_stack+0x21/0x24 [ 348.677835][ T5153] dump_stack_lvl+0xee/0x150 [ 348.683934][ T28] audit: type=1400 audit(1751134247.008:1609): avc: denied { bind } for pid=5144 comm="syz.2.1412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 348.704415][ T5153] ? __cfi_dump_stack_lvl+0x8/0x8 [ 348.704440][ T5153] ? __kasan_check_read+0x11/0x20 [ 348.704463][ T5153] dump_stack+0x15/0x24 [ 348.714559][ T28] audit: type=1400 audit(1751134247.008:1610): avc: denied { write } for pid=5144 comm="syz.2.1412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 348.717747][ T5153] should_fail_ex+0x3d4/0x520 [ 348.717769][ T5153] should_fail+0xb/0x10 [ 348.717783][ T5153] should_fail_usercopy+0x1a/0x20 [ 348.717800][ T5153] _copy_from_user+0x1e/0xc0 [ 348.717816][ T5153] vt_resizex+0x95/0x570 [ 348.717838][ T5153] ? vt_disallocate+0xa0/0xa0 [ 348.811679][ T5153] vt_ioctl+0xdfe/0x19a0 [ 348.816350][ T5153] ? __cfi_vt_ioctl+0x10/0x10 [ 348.821011][ T5153] ? selinux_file_ioctl+0x377/0x480 [ 348.826198][ T5153] ? raw_irqentry_exit_cond_resched+0x29/0x30 [ 348.832247][ T5153] ? irqentry_exit+0x37/0x40 [ 348.836829][ T5153] ? sysvec_reschedule_ipi+0x78/0x80 [ 348.842098][ T5153] ? asm_sysvec_reschedule_ipi+0x1b/0x20 [ 348.847717][ T5153] tty_ioctl+0x849/0xc60 [ 348.851942][ T5153] ? __cfi_tty_ioctl+0x10/0x10 [ 348.856683][ T5153] __se_sys_ioctl+0x12f/0x1b0 [ 348.861441][ T5153] __x64_sys_ioctl+0x7b/0x90 [ 348.866018][ T5153] x64_sys_call+0x58b/0x9a0 [ 348.870505][ T5153] do_syscall_64+0x4c/0xa0 [ 348.874902][ T5153] ? clear_bhb_loop+0x30/0x80 [ 348.879563][ T5153] ? clear_bhb_loop+0x30/0x80 [ 348.884228][ T5153] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 348.890104][ T5153] RIP: 0033:0x7f1ef1b8e929 [ 348.894510][ T5153] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 348.914109][ T5153] RSP: 002b:00007f1ef2a75038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 348.922614][ T5153] RAX: ffffffffffffffda RBX: 00007f1ef1db6160 RCX: 00007f1ef1b8e929 [ 348.930587][ T5153] RDX: 0000200000000300 RSI: 000000000000560a RDI: 000000000000000b [ 348.938550][ T5153] RBP: 00007f1ef2a75090 R08: 0000000000000000 R09: 0000000000000000 [ 348.946510][ T5153] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 348.954469][ T5153] R13: 0000000000000000 R14: 00007f1ef1db6160 R15: 00007ffe096976d8 [ 348.962439][ T5153] [ 349.204617][ T4961] udevd[4961]: inotify_add_watch(7, /dev/loop1, 10) failed: No such file or directory [ 349.237154][ T286] block device autoloading is deprecated and will be removed. [ 349.239180][ T4961] udevd[4961]: setting mode of /dev/loop0 to 060660 failed: Read-only file system [ 349.256353][ T28] audit: type=1400 audit(1751134247.579:1611): avc: denied { load_policy } for pid=5145 comm="syz.1.1413" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 349.256411][ T5155] SELinux: policydb version -845211227 does not match my version range 15-33 [ 349.285257][ T4961] udevd[4961]: setting owner of /dev/loop0 to uid=0, gid=6 failed: Read-only file system [ 349.286319][ T5155] SELinux: failed to load policy [ 349.322099][ T5148] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 349.336606][ T5148] bridge0: port 1(bridge_slave_0) entered blocking state [ 349.343737][ T5148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 349.352008][ T5148] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.359106][ T5148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 349.371099][ T5148] device veth0_vlan left promiscuous mode [ 349.377203][ T5148] device veth0_vlan entered promiscuous mode [ 349.384457][ T5148] device veth1_macvtap left promiscuous mode [ 349.391238][ T5148] device veth1_macvtap entered promiscuous mode [ 349.443415][ T567] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 349.466318][ T28] audit: type=1400 audit(1751134247.775:1612): avc: denied { setopt } for pid=5158 comm="syz.2.1414" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 349.466588][ T567] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 349.519998][ T567] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 349.541601][ T567] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 349.550229][ T567] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 349.566093][ T567] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 349.574619][ T567] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 349.582687][ T567] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 349.590992][ T567] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 349.599448][ T567] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 349.607660][ T567] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 349.615916][ T567] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 349.624096][ T567] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 349.632389][ T567] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 349.640574][ T567] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 349.648900][ T567] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 349.657052][ T567] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 349.665304][ T567] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 349.673607][ T567] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 349.716732][ T28] audit: type=1326 audit(1751134248.009:1613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5164 comm="syz.1.1416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e45b8e929 code=0x7ffc0000 [ 349.740853][ T28] audit: type=1326 audit(1751134248.009:1614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5164 comm="syz.1.1416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e45b8e929 code=0x7ffc0000 [ 349.764467][ T6] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 349.772692][ T28] audit: type=1326 audit(1751134248.009:1615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5164 comm="syz.1.1416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6e45b8e929 code=0x7ffc0000 [ 349.796767][ T28] audit: type=1326 audit(1751134248.009:1616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5164 comm="syz.1.1416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e45b8e929 code=0x7ffc0000 [ 349.820494][ T28] audit: type=1326 audit(1751134248.009:1617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5164 comm="syz.1.1416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e45b8e929 code=0x7ffc0000 [ 349.983388][ T6] usb 4-1: Using ep0 maxpacket: 16 [ 350.184117][ T4902] udevd[4902]: symlink '../../loop0' '/dev/disk/by-diskseq/150.tmp-b7:0' failed: Read-only file system [ 350.267498][ T4902] udevd[4902]: symlink '../../loop0' '/dev/disk/by-diskseq/150.tmp-b7:0' failed: Read-only file system [ 350.545568][ T39] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 350.748656][ T39] usb 3-1: Using ep0 maxpacket: 16 [ 350.758256][ T39] usb 3-1: unable to get BOS descriptor or descriptor too short [ 350.779055][ T39] usb 3-1: config 1 has an invalid interface number: 206 but max is 0 [ 350.802648][ T39] usb 3-1: config 1 has no interface number 0 [ 350.826604][ T39] usb 3-1: string descriptor 0 read error: -22 [ 350.841733][ T39] usb 3-1: New USB device found, idVendor=152d, idProduct=0310, bcdDevice=3b.0a [ 350.870622][ T39] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.212603][ T4902] udevd[4902]: setting mode of /dev/loop0 to 060660 failed: Read-only file system [ 351.222178][ T286] block device autoloading is deprecated and will be removed. [ 351.426897][ T4902] udevd[4902]: setting owner of /dev/loop0 to uid=0, gid=6 failed: Read-only file system [ 352.674726][ T6] usb 4-1: unable to get BOS descriptor or descriptor too short [ 352.687019][ T6] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 352.702003][ T6] usb 4-1: can't read configurations, error -71 [ 353.484011][ T414] usb 3-1: USB disconnect, device number 18 [ 353.491485][ T5217] sch_fq: defrate 6 ignored. [ 353.497289][ T5217] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1430'. [ 354.000196][ T5233] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 354.673917][ T4902] udevd[4902]: symlink '../../loop0' '/dev/disk/by-diskseq/151.tmp-b7:0' failed: Read-only file system [ 354.872172][ T28] kauditd_printk_skb: 61 callbacks suppressed [ 354.872188][ T28] audit: type=1400 audit(1751134252.827:1679): avc: denied { getopt } for pid=5248 comm="syz.1.1439" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 354.976765][ T28] audit: type=1400 audit(1751134252.921:1680): avc: denied { getopt } for pid=5248 comm="syz.1.1439" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 355.035154][ T204] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 355.227637][ T204] usb 1-1: Using ep0 maxpacket: 16 [ 355.313010][ T319] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 355.751296][ T319] usb 2-1: Using ep0 maxpacket: 16 [ 355.758052][ T319] usb 2-1: unable to get BOS descriptor or descriptor too short [ 355.766598][ T319] usb 2-1: config 1 has an invalid interface number: 206 but max is 0 [ 355.774864][ T319] usb 2-1: config 1 has no interface number 0 [ 355.783015][ T319] usb 2-1: string descriptor 0 read error: -22 [ 355.789301][ T319] usb 2-1: New USB device found, idVendor=152d, idProduct=0310, bcdDevice=3b.0a [ 355.798398][ T319] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.637660][ T5273] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 356.756661][ T28] audit: type=1400 audit(1751134254.586:1681): avc: denied { create } for pid=5268 comm="syz.2.1445" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 357.617943][ T5283] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 357.921772][ T204] usb 1-1: unable to get BOS descriptor or descriptor too short [ 357.928615][ T4902] udevd[4902]: symlink '../../loop0' '/dev/disk/by-diskseq/151.tmp-b7:0' failed: Read-only file system [ 357.932499][ T204] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 357.944280][ T28] audit: type=1400 audit(1751134255.708:1682): avc: denied { name_bind } for pid=5288 comm="syz.0.1450" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 357.948266][ T204] usb 1-1: can't read configurations, error -71 [ 357.999252][ T28] audit: type=1326 audit(1751134255.755:1683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5288 comm="syz.0.1450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f204858e929 code=0x7ffc0000 [ 358.022926][ T28] audit: type=1326 audit(1751134255.755:1684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5288 comm="syz.0.1450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f204858e929 code=0x7ffc0000 [ 358.046804][ T28] audit: type=1326 audit(1751134255.755:1686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5288 comm="syz.0.1450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f204858e929 code=0x7ffc0000 [ 358.050939][ T4902] udevd[4902]: symlink '../../loop0' '/dev/disk/by-diskseq/151.tmp-b7:0' failed: Read-only file system [ 358.073618][ T28] audit: type=1326 audit(1751134255.755:1687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5288 comm="syz.0.1450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f204858e929 code=0x7ffc0000 [ 358.104822][ T28] audit: type=1326 audit(1751134255.755:1685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5288 comm="syz.0.1450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f204858e929 code=0x7ffc0000 [ 358.128387][ T28] audit: type=1326 audit(1751134255.755:1688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5288 comm="syz.0.1450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f204858e929 code=0x7ffc0000 [ 358.264403][ T39] usb 2-1: USB disconnect, device number 21 [ 358.289399][ T5293] loop0: detected capacity change from 0 to 40427 [ 358.300871][ T5293] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 358.309860][ T5293] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 358.326962][ T4902] udevd[4902]: symlink '../../loop0' '/dev/disk/by-diskseq/152.tmp-b7:0' failed: Read-only file system [ 358.339470][ T5293] F2FS-fs (loop0): invalid crc value [ 358.340876][ T4902] udevd[4902]: symlink '../../loop0' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:0' failed: Read-only file system [ 358.346334][ T5293] F2FS-fs (loop0): Found nat_bits in checkpoint [ 358.394545][ T5293] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 358.415009][ T5293] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 358.555052][ T5293] syz.0.1451: attempt to access beyond end of device [ 358.555052][ T5293] loop0: rw=2049, sector=77824, nr_sectors = 136 limit=40427 [ 358.912965][ T4902] udevd[4902]: symlink '../../loop0' '/dev/disk/by-diskseq/152.tmp-b7:0' failed: Read-only file system [ 358.941367][ T4902] udevd[4902]: symlink '../../loop0' '/dev/disk/by-diskseq/152.tmp-b7:0' failed: Read-only file system [ 359.190633][ T5317] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1457'. [ 359.615789][ T5332] futex_wake_op: syz.2.1461 tries to shift op by -1; fix this program [ 360.113347][ T4902] udevd[4902]: symlink '../../loop0' '/dev/disk/by-diskseq/153.tmp-b7:0' failed: Read-only file system [ 360.165549][ T5335] loop0: detected capacity change from 0 to 256 [ 360.240558][ T5335] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x89cb6648, utbl_chksum : 0xe619d30d) [ 360.373002][ T4902] udevd[4902]: symlink '../../loop0' '/dev/disk/by-diskseq/154.tmp-b7:0' failed: Read-only file system [ 360.421077][ T4902] udevd[4902]: symlink '../../loop0' '/dev/disk/by-uuid/1234-1234.tmp-b7:0' failed: Read-only file system [ 360.481597][ T28] kauditd_printk_skb: 24 callbacks suppressed [ 360.481617][ T28] audit: type=1400 audit(1751134258.066:1713): avc: denied { write } for pid=5336 comm="syz.4.1463" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 360.816658][ T28] audit: type=1400 audit(1751134258.216:1714): avc: denied { write } for pid=5334 comm="syz.0.1462" name="/" dev="loop0" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 360.872665][ T5348] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 361.001144][ T28] audit: type=1400 audit(1751134258.216:1715): avc: denied { remove_name } for pid=5334 comm="syz.0.1462" name="file0" dev="loop0" ino=1048604 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 361.051135][ T28] audit: type=1400 audit(1751134258.216:1716): avc: denied { rmdir } for pid=5334 comm="syz.0.1462" name="file0" dev="loop0" ino=1048604 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 361.079996][ T4902] udevd[4902]: symlink '../../loop0' '/dev/disk/by-diskseq/154.tmp-b7:0' failed: Read-only file system [ 361.098621][ T4902] udevd[4902]: symlink '../../loop0' '/dev/disk/by-diskseq/154.tmp-b7:0' failed: Read-only file system [ 361.109142][ T5360] loop0: detected capacity change from 0 to 256 [ 361.121204][ T5360] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x89cb6648, utbl_chksum : 0xe619d30d) [ 361.142614][ T4902] udevd[4902]: symlink '../../loop0' '/dev/disk/by-diskseq/155.tmp-b7:0' failed: Read-only file system [ 361.205540][ T4902] udevd[4902]: symlink '../../loop0' '/dev/disk/by-uuid/1234-1234.tmp-b7:0' failed: Read-only file system [ 361.234919][ T4902] udevd[4902]: symlink '../../loop0' '/dev/disk/by-diskseq/156.tmp-b7:0' failed: Read-only file system [ 361.246939][ T4902] udevd[4902]: symlink '../../loop0' '/dev/disk/by-uuid/1234-1234.tmp-b7:0' failed: Read-only file system [ 361.854869][ T204] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 362.036297][ T4902] udevd[4902]: symlink '../../loop0' '/dev/disk/by-diskseq/156.tmp-b7:0' failed: Read-only file system [ 362.047311][ T204] usb 5-1: Using ep0 maxpacket: 16 [ 362.482488][ T5382] futex_wake_op: syz.0.1475 tries to shift op by -1; fix this program [ 362.564398][ T5384] loop0: detected capacity change from 0 to 512 [ 362.586997][ T5384] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 362.665422][ T5384] EXT4-fs (loop0): 1 truncate cleaned up [ 362.671317][ T5384] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 362.805940][ T5388] usb usb8: usbfs: process 5388 (syz.2.1477) did not claim interface 0 before use [ 362.998671][ T5390] device syzkaller0 entered promiscuous mode [ 364.319525][ T286] EXT4-fs (loop0): unmounting filesystem. [ 364.322560][ T28] audit: type=1400 audit(1751134261.668:1717): avc: denied { read write } for pid=5389 comm="syz.2.1478" name="fuse" dev="devtmpfs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 364.349487][ T28] audit: type=1400 audit(1751134261.677:1718): avc: denied { open } for pid=5389 comm="syz.2.1478" path="/dev/fuse" dev="devtmpfs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 364.383925][ T28] audit: type=1400 audit(1751134261.677:1719): avc: denied { mounton } for pid=5389 comm="syz.2.1478" path="/316/file0" dev="tmpfs" ino=1695 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 364.441742][ T28] audit: type=1400 audit(1751134261.677:1720): avc: denied { mount } for pid=5389 comm="syz.2.1478" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 364.484459][ T969] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 364.596099][ T5413] can0: slcan on ttyS3. [ 364.693578][ T28] audit: type=1400 audit(1751134262.014:1721): avc: denied { read } for pid=142 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 364.747207][ T5415] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 364.785657][ T28] audit: type=1400 audit(1751134262.051:1722): avc: denied { search } for pid=142 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 364.808259][ T204] usb 5-1: unable to get BOS descriptor or descriptor too short [ 364.820147][ T204] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 364.834370][ T204] usb 5-1: can't read configurations, error -71 [ 364.890622][ T969] usb 4-1: Using ep0 maxpacket: 16 [ 364.898754][ T969] usb 4-1: config 130 has an invalid interface number: 157 but max is 1 [ 364.908145][ T969] usb 4-1: config 130 has no interface number 0 [ 364.914634][ T969] usb 4-1: config 130 interface 1 altsetting 10 endpoint 0x7 has invalid wMaxPacketSize 0 [ 364.924842][ T969] usb 4-1: config 130 interface 157 altsetting 3 has a duplicate endpoint with address 0xF, skipping [ 364.935915][ T969] usb 4-1: config 130 interface 157 altsetting 3 bulk endpoint 0x9 has invalid maxpacket 1023 [ 364.946418][ T969] usb 4-1: config 130 interface 157 altsetting 3 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 364.957895][ T969] usb 4-1: config 130 interface 157 altsetting 3 has a duplicate endpoint with address 0x7, skipping [ 364.983011][ T969] usb 4-1: config 130 interface 157 altsetting 3 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 365.005973][ T969] usb 4-1: config 130 interface 1 has no altsetting 0 [ 365.013082][ T969] usb 4-1: config 130 interface 157 has no altsetting 0 [ 365.025735][ T969] usb 4-1: New USB device found, idVendor=1b80, idProduct=e34c, bcdDevice=fd.4f [ 365.035578][ T969] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.043845][ T969] usb 4-1: Product: syz [ 365.048083][ T969] usb 4-1: Manufacturer: 縹퍤෡ꪬ㏧女蹳਀鏂䒏␄䚓▎ᾆ৯賂샱婖⍚摖봇팹뻓ୂꖙ등賈䪐뭫阱鳕뭰Ÿᆝ̹ｭ啼澰敧鹴﹠㖼潝⭶씒䞭앀룒吊䔝䧋ᫎ庵櫟䆥샱勒ᝨ舕䲖⭵泍ය侠ḛ虨ꝋ쯥鿶℧駆귴亓틵 [ 365.073832][ T969] usb 4-1: SerialNumber: syz [ 365.296907][ T969] rndis_host 4-1:130.157: skipping garbage [ 365.308162][ T969] usb 4-1: bad CDC descriptors [ 365.331773][ T969] usb 4-1: USB disconnect, device number 32 [ 365.336085][ T5441] loop0: detected capacity change from 0 to 128 [ 365.344361][ T5405] can0 (unregistered): slcan off ttyS3. [ 365.908897][ T28] kauditd_printk_skb: 17 callbacks suppressed [ 365.909790][ T28] audit: type=1400 audit(1751134263.146:1740): avc: denied { name_bind } for pid=5470 comm="syz.4.1489" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 366.027674][ T28] audit: type=1400 audit(1751134263.155:1741): avc: denied { node_bind } for pid=5470 comm="syz.4.1489" saddr=::1 src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 366.195132][ T28] audit: type=1326 audit(1751134263.426:1742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5476 comm="syz.3.1492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc2e18e929 code=0x7ffc0000 [ 366.218632][ T969] usb 3-1: new full-speed USB device number 19 using dummy_hcd [ 366.226246][ T28] audit: type=1326 audit(1751134263.426:1743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5476 comm="syz.3.1492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fdc2e18e929 code=0x7ffc0000 [ 366.249885][ T28] audit: type=1326 audit(1751134263.426:1744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5476 comm="syz.3.1492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc2e18e929 code=0x7ffc0000 [ 366.273549][ T28] audit: type=1326 audit(1751134263.426:1745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5476 comm="syz.3.1492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fdc2e18e929 code=0x7ffc0000 [ 366.303277][ T4902] udevd[4902]: symlink '../../loop0' '/dev/disk/by-diskseq/161.tmp-b7:0' failed: Read-only file system [ 366.317462][ T28] audit: type=1326 audit(1751134263.426:1746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5476 comm="syz.3.1492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fdc2e18e963 code=0x7ffc0000 [ 366.358651][ T28] audit: type=1326 audit(1751134263.426:1747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5476 comm="syz.3.1492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fdc2e18d3df code=0x7ffc0000 [ 366.358680][ T28] audit: type=1326 audit(1751134263.426:1748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5476 comm="syz.3.1492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fdc2e18e9b7 code=0x7ffc0000 [ 366.358702][ T28] audit: type=1326 audit(1751134263.426:1749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5476 comm="syz.3.1492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fdc2e18d290 code=0x7ffc0000 [ 366.475707][ T969] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 366.492636][ T969] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 366.510921][ T969] usb 3-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00 [ 366.529958][ T969] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.549607][ T969] usb 3-1: config 0 descriptor?? [ 366.570566][ T4902] udevd[4902]: symlink '../../loop0' '/dev/disk/by-diskseq/161.tmp-b7:0' failed: Read-only file system [ 366.600534][ T4902] udevd[4902]: symlink '../../loop0' '/dev/disk/by-diskseq/161.tmp-b7:0' failed: Read-only file system [ 366.911218][ T39] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 367.124704][ T39] usb 1-1: Using ep0 maxpacket: 16 [ 367.193328][ T969] samsung 0003:0419:0001.0007: unbalanced collection at end of report description [ 367.203147][ T969] samsung 0003:0419:0001.0007: parse failed [ 367.209074][ T969] samsung: probe of 0003:0419:0001.0007 failed with error -22 [ 367.223574][ T969] usb 3-1: USB disconnect, device number 19 [ 368.840909][ T5514] FAULT_INJECTION: forcing a failure. [ 368.840909][ T5514] name failslab, interval 1, probability 0, space 0, times 0 [ 368.885889][ T5514] CPU: 0 PID: 5514 Comm: syz.4.1503 Not tainted 6.1.141-syzkaller-00033-g36d69f6a49eb #0 [ 368.895742][ T5514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 368.905807][ T5514] Call Trace: [ 368.909087][ T5514] [ 368.912020][ T5514] __dump_stack+0x21/0x24 [ 368.916450][ T5514] dump_stack_lvl+0xee/0x150 [ 368.921051][ T5514] ? __cfi_dump_stack_lvl+0x8/0x8 [ 368.926085][ T5514] ? avc_has_perm+0x158/0x240 [ 368.930778][ T5514] dump_stack+0x15/0x24 [ 368.934940][ T5514] should_fail_ex+0x3d4/0x520 [ 368.939630][ T5514] __should_failslab+0xac/0xf0 [ 368.944401][ T5514] ? __get_vm_area_node+0x12c/0x360 [ 368.949608][ T5514] should_failslab+0x9/0x20 [ 368.954129][ T5514] __kmem_cache_alloc_node+0x3d/0x2c0 [ 368.959516][ T5514] ? __get_vm_area_node+0x12c/0x360 [ 368.964733][ T5514] kmalloc_node_trace+0x26/0xb0 [ 368.969600][ T5514] __get_vm_area_node+0x12c/0x360 [ 368.974636][ T5514] __vmalloc_node_range+0x326/0x13d0 [ 368.980019][ T5514] ? bpf_prog_alloc_no_stats+0x3e/0x3f0 [ 368.985573][ T5514] ? arch_stack_walk+0xfc/0x150 [ 368.990454][ T5514] ? __cfi_avc_has_perm_noaudit+0x10/0x10 [ 368.996196][ T5514] ? stack_trace_save+0x98/0xe0 [ 369.001065][ T5514] ? __cfi___vmalloc_node_range+0x10/0x10 [ 369.006800][ T5514] ? __cfi_selinux_capable+0x10/0x10 [ 369.012097][ T5514] ? bpf_prog_alloc_no_stats+0x3e/0x3f0 [ 369.017677][ T5514] __vmalloc+0x79/0x90 [ 369.021759][ T5514] ? bpf_prog_alloc_no_stats+0x3e/0x3f0 [ 369.027317][ T5514] bpf_prog_alloc_no_stats+0x3e/0x3f0 [ 369.032699][ T5514] ? security_capable+0x99/0xc0 [ 369.037564][ T5514] bpf_prog_alloc+0x22/0x1c0 [ 369.042166][ T5514] bpf_prog_load+0x7c6/0x15a0 [ 369.046928][ T5514] ? map_freeze+0x390/0x390 [ 369.051438][ T5514] ? selinux_bpf+0xc7/0xf0 [ 369.055865][ T5514] ? security_bpf+0x93/0xb0 [ 369.060408][ T5514] __sys_bpf+0x504/0x780 [ 369.064647][ T5514] ? bpf_link_show_fdinfo+0x320/0x320 [ 369.070017][ T5514] ? __cfi_ksys_write+0x10/0x10 [ 369.074860][ T5514] ? do_user_addr_fault+0x9ac/0x1050 [ 369.080149][ T5514] ? debug_smp_processor_id+0x17/0x20 [ 369.085518][ T5514] __x64_sys_bpf+0x7c/0x90 [ 369.089935][ T5514] x64_sys_call+0x488/0x9a0 [ 369.094429][ T5514] do_syscall_64+0x4c/0xa0 [ 369.098851][ T5514] ? clear_bhb_loop+0x30/0x80 [ 369.103514][ T5514] ? clear_bhb_loop+0x30/0x80 [ 369.109826][ T5514] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 369.115705][ T5514] RIP: 0033:0x7f8ef378e929 [ 369.120188][ T5514] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 369.139778][ T5514] RSP: 002b:00007f8ef4532038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 369.148176][ T5514] RAX: ffffffffffffffda RBX: 00007f8ef39b5fa0 RCX: 00007f8ef378e929 [ 369.156135][ T5514] RDX: 000000000000007f RSI: 0000200000002ac0 RDI: 0000000000000005 [ 369.164091][ T5514] RBP: 00007f8ef4532090 R08: 0000000000000000 R09: 0000000000000000 [ 369.172142][ T5514] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 369.180098][ T5514] R13: 0000000000000001 R14: 00007f8ef39b5fa0 R15: 00007ffc6403ff88 [ 369.188058][ T5514] [ 369.211601][ T5514] syz.4.1503: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz4,mems_allowed=0 [ 369.262138][ T5514] CPU: 0 PID: 5514 Comm: syz.4.1503 Not tainted 6.1.141-syzkaller-00033-g36d69f6a49eb #0 [ 369.271995][ T5514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 369.282056][ T5514] Call Trace: [ 369.285340][ T5514] [ 369.288276][ T5514] __dump_stack+0x21/0x24 [ 369.292627][ T5514] dump_stack_lvl+0xee/0x150 [ 369.297229][ T5514] ? __cfi_dump_stack_lvl+0x8/0x8 [ 369.302261][ T5514] ? pr_cont_kernfs_name+0x133/0x160 [ 369.307559][ T5514] dump_stack+0x15/0x24 [ 369.311722][ T5514] warn_alloc+0x1b0/0x1d0 [ 369.316053][ T5514] ? kasan_quarantine_reduce+0x15d/0x170 [ 369.321692][ T5514] ? __cfi_warn_alloc+0x10/0x10 [ 369.326554][ T5514] ? kmalloc_node_trace+0x3d/0xb0 [ 369.331592][ T5514] ? __get_vm_area_node+0x353/0x360 [ 369.336811][ T5514] __vmalloc_node_range+0x34b/0x13d0 [ 369.342111][ T5514] ? arch_stack_walk+0xfc/0x150 [ 369.346970][ T5514] ? __cfi_avc_has_perm_noaudit+0x10/0x10 [ 369.352701][ T5514] ? stack_trace_save+0x98/0xe0 [ 369.357565][ T5514] ? __cfi___vmalloc_node_range+0x10/0x10 [ 369.363298][ T5514] ? __cfi_selinux_capable+0x10/0x10 [ 369.368615][ T5514] ? bpf_prog_alloc_no_stats+0x3e/0x3f0 [ 369.374164][ T5514] __vmalloc+0x79/0x90 [ 369.378247][ T5514] ? bpf_prog_alloc_no_stats+0x3e/0x3f0 [ 369.383800][ T5514] bpf_prog_alloc_no_stats+0x3e/0x3f0 [ 369.389185][ T5514] ? security_capable+0x99/0xc0 [ 369.394045][ T5514] bpf_prog_alloc+0x22/0x1c0 [ 369.398642][ T5514] bpf_prog_load+0x7c6/0x15a0 [ 369.403320][ T5514] ? map_freeze+0x390/0x390 [ 369.407837][ T5514] ? selinux_bpf+0xc7/0xf0 [ 369.412258][ T5514] ? security_bpf+0x93/0xb0 [ 369.416763][ T5514] __sys_bpf+0x504/0x780 [ 369.421010][ T5514] ? bpf_link_show_fdinfo+0x320/0x320 [ 369.426395][ T5514] ? __cfi_ksys_write+0x10/0x10 [ 369.431251][ T5514] ? do_user_addr_fault+0x9ac/0x1050 [ 369.436544][ T5514] ? debug_smp_processor_id+0x17/0x20 [ 369.441927][ T5514] __x64_sys_bpf+0x7c/0x90 [ 369.446350][ T5514] x64_sys_call+0x488/0x9a0 [ 369.451118][ T5514] do_syscall_64+0x4c/0xa0 [ 369.455538][ T5514] ? clear_bhb_loop+0x30/0x80 [ 369.460218][ T5514] ? clear_bhb_loop+0x30/0x80 [ 369.464900][ T5514] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 369.470796][ T5514] RIP: 0033:0x7f8ef378e929 [ 369.475388][ T5514] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 369.495000][ T5514] RSP: 002b:00007f8ef4532038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 369.503423][ T5514] RAX: ffffffffffffffda RBX: 00007f8ef39b5fa0 RCX: 00007f8ef378e929 [ 369.511403][ T5514] RDX: 000000000000007f RSI: 0000200000002ac0 RDI: 0000000000000005 [ 369.519379][ T5514] RBP: 00007f8ef4532090 R08: 0000000000000000 R09: 0000000000000000 [ 369.527357][ T5514] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 369.535336][ T5514] R13: 0000000000000001 R14: 00007f8ef39b5fa0 R15: 00007ffc6403ff88 [ 369.543323][ T5514] [ 369.547296][ T5514] Mem-Info: [ 369.550427][ T5514] active_anon:25648 inactive_anon:160 isolated_anon:0 [ 369.550427][ T5514] active_file:21783 inactive_file:2730 isolated_file:0 [ 369.550427][ T5514] unevictable:0 dirty:87 writeback:0 [ 369.550427][ T5514] slab_reclaimable:9399 slab_unreclaimable:74215 [ 369.550427][ T5514] mapped:40986 shmem:8207 pagetables:713 [ 369.550427][ T5514] sec_pagetables:0 bounce:0 [ 369.550427][ T5514] kernel_misc_reclaimable:0 [ 369.550427][ T5514] free:1485848 free_pcp:12836 free_cma:0 [ 369.595748][ T5514] Node 0 active_anon:103492kB inactive_anon:640kB active_file:87132kB inactive_file:10920kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:163944kB dirty:348kB writeback:0kB shmem:32828kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:4988kB pagetables:2852kB sec_pagetables:0kB all_unreclaimable? no [ 369.628704][ T5514] DMA32 free:2968532kB boost:0kB min:31288kB low:39108kB high:46928kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2974260kB mlocked:0kB bounce:0kB free_pcp:5728kB local_pcp:60kB free_cma:0kB [ 369.785857][ T5514] lowmem_reserve[]: 0 3932 3932 3932 [ 369.792719][ T5514] Normal free:2990760kB boost:0kB min:42436kB low:53044kB high:63652kB reserved_highatomic:0KB active_anon:93792kB inactive_anon:640kB active_file:87132kB inactive_file:10920kB unevictable:0kB writepending:348kB present:5242880kB managed:4026656kB mlocked:0kB bounce:0kB free_pcp:38696kB local_pcp:20040kB free_cma:0kB [ 369.822834][ T5514] lowmem_reserve[]: 0 0 0 0 [ 369.827374][ T5514] DMA32: 3*4kB (M) 1*8kB (M) 2*16kB (M) 3*32kB (M) 3*64kB (M) 3*128kB (M) 3*256kB (M) 3*512kB (M) 4*1024kB (UM) 2*2048kB (M) 722*4096kB (M) = 2968532kB [ 369.844309][ T5514] Normal: 40*4kB (ME) 483*8kB (ME) 395*16kB (UME) 219*32kB (ME) 20*64kB (ME) 34*128kB (UME) 49*256kB (UME) 32*512kB (UME) 2*1024kB (UM) 4*2048kB (UME) 715*4096kB (UM) = 2990792kB [ 369.862442][ T5514] 30004 total pagecache pages [ 369.867203][ T5514] 159 pages in swap cache [ 369.879727][ T39] usb 1-1: unable to get BOS descriptor or descriptor too short [ 369.895672][ T39] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 369.899842][ T5514] Free swap = 124144kB [ 369.912206][ T4902] udevd[4902]: symlink '../../loop0' '/dev/disk/by-diskseq/161.tmp-b7:0' failed: Read-only file system [ 369.923748][ T5514] Total swap = 124996kB [ 369.927991][ T5514] 2097051 pages RAM [ 369.928000][ T5514] 0 pages HighMem/MovableOnly [ 369.928005][ T5514] 346822 pages reserved [ 369.928009][ T5514] 0 pages cma reserved [ 369.936276][ T39] usb 1-1: can't read configurations, error -71 [ 370.790396][ T5547] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 370.814976][ T4902] udevd[4902]: symlink '../../loop0' '/dev/disk/by-diskseq/161.tmp-b7:0' failed: Read-only file system [ 371.061357][ T5557] loop0: detected capacity change from 0 to 512 [ 371.180822][ T4902] udevd[4902]: symlink '../../loop0' '/dev/disk/by-diskseq/162.tmp-b7:0' failed: Read-only file system [ 371.199259][ T5557] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 371.269504][ T4902] udevd[4902]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 371.281442][ T5558] FAULT_INJECTION: forcing a failure. [ 371.281442][ T5558] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 371.294717][ T5558] CPU: 0 PID: 5558 Comm: syz.4.1516 Not tainted 6.1.141-syzkaller-00033-g36d69f6a49eb #0 [ 371.297392][ T28] kauditd_printk_skb: 48 callbacks suppressed [ 371.297405][ T28] audit: type=1400 audit(1751134268.197:1798): avc: denied { read write } for pid=5562 comm="syz.1.1518" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 371.304518][ T5558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 371.304529][ T5558] Call Trace: [ 371.304535][ T5558] [ 371.304542][ T5558] __dump_stack+0x21/0x24 [ 371.304567][ T5558] dump_stack_lvl+0xee/0x150 [ 371.304587][ T5558] ? __cfi_dump_stack_lvl+0x8/0x8 [ 371.304608][ T5558] dump_stack+0x15/0x24 [ 371.304628][ T5558] should_fail_ex+0x3d4/0x520 [ 371.304650][ T5558] should_fail+0xb/0x10 [ 371.304666][ T5558] should_fail_usercopy+0x1a/0x20 [ 371.321159][ T28] audit: type=1400 audit(1751134268.197:1799): avc: denied { open } for pid=5562 comm="syz.1.1518" path="/dev/raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 371.334124][ T5558] _copy_from_user+0x1e/0xc0 [ 371.334151][ T5558] strndup_user+0xb6/0x150 [ 371.334172][ T5558] __se_sys_mount+0x9c/0x380 [ 371.334189][ T5558] ? fput+0x154/0x1a0 [ 371.334204][ T5558] ? __x64_sys_mount+0xd0/0xd0 [ 371.334220][ T5558] ? __cfi_ksys_write+0x10/0x10 [ 371.334242][ T5558] __x64_sys_mount+0xbf/0xd0 [ 371.334260][ T5558] x64_sys_call+0x65d/0x9a0 [ 371.334277][ T5558] do_syscall_64+0x4c/0xa0 [ 371.334291][ T5558] ? clear_bhb_loop+0x30/0x80 [ 371.334307][ T5558] ? clear_bhb_loop+0x30/0x80 [ 371.334323][ T5558] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 371.367557][ T28] audit: type=1400 audit(1751134268.197:1800): avc: denied { ioctl } for pid=5562 comm="syz.1.1518" path="/dev/raw-gadget" dev="devtmpfs" ino=258 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 371.368620][ T5558] RIP: 0033:0x7f8ef378e929 [ 371.368638][ T5558] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 371.368652][ T5558] RSP: 002b:00007f8ef4511038 EFLAGS: 00000246 [ 371.379945][ T28] audit: type=1400 audit(1751134268.197:1801): avc: denied { mount } for pid=5552 comm="syz.4.1516" name="/" dev="incremental-fs" ino=1488 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 371.382473][ T5558] ORIG_RAX: 00000000000000a5 [ 371.382483][ T5558] RAX: ffffffffffffffda RBX: 00007f8ef39b6080 RCX: 00007f8ef378e929 [ 371.382496][ T5558] RDX: 0000200000000280 RSI: 0000200000000300 RDI: 0000000000000000 [ 371.476695][ T5557] EXT4-fs (loop0): 1 truncate cleaned up [ 371.486464][ T5558] RBP: 00007f8ef4511090 R08: 0000200000000600 R09: 0000000000000000 [ 371.486485][ T5558] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 371.486495][ T5558] R13: 0000000000000000 R14: 00007f8ef39b6080 R15: 00007ffc6403ff88 [ 371.486517][ T5558] [ 371.594611][ T5557] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 371.604541][ T28] audit: type=1400 audit(1751134268.488:1802): avc: denied { mount } for pid=5549 comm="syz.0.1514" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 371.630478][ T28] audit: type=1400 audit(1751134268.497:1803): avc: denied { write } for pid=5549 comm="syz.0.1514" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 371.656397][ T4902] udevd[4902]: symlink '../../loop0' '/dev/disk/by-diskseq/162.tmp-b7:0' failed: Read-only file system [ 371.659140][ T28] audit: type=1400 audit(1751134268.497:1804): avc: denied { add_name } for pid=5549 comm="syz.0.1514" name="blkio.bfq.io_merged_recursive" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 371.675025][ T4902] udevd[4902]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 371.690477][ T39] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 371.709504][ T28] audit: type=1400 audit(1751134268.497:1805): avc: denied { create } for pid=5549 comm="syz.0.1514" name="blkio.bfq.io_merged_recursive" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 371.733568][ T28] audit: type=1400 audit(1751134268.497:1806): avc: denied { read append open } for pid=5549 comm="syz.0.1514" path="/301/bus/blkio.bfq.io_merged_recursive" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 371.759500][ T28] audit: type=1326 audit(1751134268.497:1807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5549 comm="syz.0.1514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f204858e929 code=0x7ffc0000 [ 371.934874][ T39] usb 2-1: Using ep0 maxpacket: 16 [ 371.956334][ T969] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 372.031442][ T286] EXT4-fs (loop0): unmounting filesystem. [ 372.040282][ T4902] udevd[4902]: symlink '../../loop0' '/dev/disk/by-diskseq/162.tmp-b7:0' failed: Read-only file system [ 372.054813][ T4902] udevd[4902]: symlink '../../loop0' '/dev/disk/by-diskseq/162.tmp-b7:0' failed: Read-only file system [ 372.237909][ T969] usb 3-1: config 0 has no interfaces? [ 372.246019][ T969] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 372.258924][ T969] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 372.268316][ T969] usb 3-1: Product: syz [ 372.277047][ T319] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 372.290417][ T969] usb 3-1: Manufacturer: syz [ 372.346101][ T969] usb 3-1: config 0 descriptor?? [ 372.492853][ T319] usb 5-1: config 0 has no interfaces? [ 372.504783][ T319] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 372.519302][ T319] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 372.529867][ T319] usb 5-1: Product: syz [ 372.545880][ T319] usb 5-1: Manufacturer: syz [ 372.572573][ T414] usb 3-1: USB disconnect, device number 20 [ 372.622550][ T319] usb 5-1: config 0 descriptor?? [ 372.893193][ T414] usb 5-1: USB disconnect, device number 28 [ 373.324823][ T331] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 373.533658][ T331] usb 3-1: config 0 has no interfaces? [ 373.544285][ T331] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 373.553664][ T331] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 373.561845][ T331] usb 3-1: Product: syz [ 373.566254][ T331] usb 3-1: Manufacturer: syz [ 373.586716][ T331] usb 3-1: config 0 descriptor?? [ 373.688306][ T63] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 373.810377][ T5567] FAULT_INJECTION: forcing a failure. [ 373.810377][ T5567] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 373.823745][ T5567] CPU: 0 PID: 5567 Comm: syz.2.1519 Not tainted 6.1.141-syzkaller-00033-g36d69f6a49eb #0 [ 373.833572][ T5567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 373.843631][ T5567] Call Trace: [ 373.846906][ T5567] [ 373.849876][ T5567] __dump_stack+0x21/0x24 [ 373.854208][ T5567] dump_stack_lvl+0xee/0x150 [ 373.858810][ T5567] ? __cfi_dump_stack_lvl+0x8/0x8 [ 373.863956][ T5567] dump_stack+0x15/0x24 [ 373.868127][ T5567] should_fail_ex+0x3d4/0x520 [ 373.872806][ T5567] should_fail+0xb/0x10 [ 373.876980][ T5567] should_fail_usercopy+0x1a/0x20 [ 373.881508][ T63] usb 5-1: config 0 has no interfaces? [ 373.882014][ T5567] _copy_to_user+0x1e/0x90 [ 373.882042][ T5567] simple_read_from_buffer+0xe9/0x160 [ 373.888726][ T63] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 373.891889][ T5567] proc_fail_nth_read+0x19a/0x210 [ 373.891924][ T5567] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 373.891946][ T5567] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 373.891966][ T5567] vfs_read+0x26e/0x8c0 [ 373.898343][ T63] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 373.906315][ T5567] ? __cfi_vfs_read+0x10/0x10 [ 373.906346][ T5567] ? __kasan_check_write+0x14/0x20 [ 373.906365][ T5567] ? mutex_lock+0x8d/0x1a0 [ 373.906381][ T5567] ? __cfi_mutex_lock+0x10/0x10 [ 373.906398][ T5567] ? __fdget_pos+0x2cd/0x380 [ 373.911863][ T63] usb 5-1: Product: syz [ 373.917002][ T5567] ? ksys_read+0x71/0x240 [ 373.917033][ T5567] ksys_read+0x140/0x240 [ 373.917051][ T5567] ? __cfi_ksys_read+0x10/0x10 [ 373.917069][ T5567] ? fpregs_restore_userregs+0x128/0x260 [ 373.917087][ T5567] __x64_sys_read+0x7b/0x90 [ 373.923084][ T63] usb 5-1: Manufacturer: syz [ 373.926756][ T5567] x64_sys_call+0x2f/0x9a0 [ 373.926783][ T5567] do_syscall_64+0x4c/0xa0 [ 373.926799][ T5567] ? clear_bhb_loop+0x30/0x80 [ 373.936052][ T63] usb 5-1: config 0 descriptor?? [ 373.939402][ T5567] ? clear_bhb_loop+0x30/0x80 [ 373.939430][ T5567] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 374.019651][ T5567] RIP: 0033:0x7f1ef1b8d33c [ 374.024054][ T5567] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 374.043673][ T5567] RSP: 002b:00007f1ef2ab7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 374.052169][ T5567] RAX: ffffffffffffffda RBX: 00007f1ef1db5fa0 RCX: 00007f1ef1b8d33c [ 374.060136][ T5567] RDX: 000000000000000f RSI: 00007f1ef2ab70a0 RDI: 0000000000000004 [ 374.068090][ T5567] RBP: 00007f1ef2ab7090 R08: 0000000000000000 R09: 0000000000000000 [ 374.076052][ T5567] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 374.084098][ T5567] R13: 0000000000000000 R14: 00007f1ef1db5fa0 R15: 00007ffe096976d8 [ 374.092084][ T5567] [ 374.121204][ T63] usb 3-1: USB disconnect, device number 21 [ 374.275692][ T5573] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1522'. [ 374.281914][ T4902] udevd[4902]: symlink '../../loop0' '/dev/disk/by-diskseq/163.tmp-b7:0' failed: Read-only file system [ 374.297025][ T2700] usb 5-1: USB disconnect, device number 29 [ 374.710391][ T5596] futex_wake_op: syz.0.1528 tries to shift op by -1; fix this program [ 375.312037][ T5597] loop0: detected capacity change from 0 to 512 [ 375.334098][ T5597] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 375.383058][ T39] usb 2-1: unable to get BOS descriptor or descriptor too short [ 375.725739][ T39] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 375.795295][ T4902] udevd[4902]: symlink '../../loop0' '/dev/disk/by-diskseq/164.tmp-b7:0' failed: Read-only file system [ 375.811717][ T5597] EXT4-fs (loop0): 1 truncate cleaned up [ 375.817467][ T5597] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 375.995321][ T4902] udevd[4902]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 376.007519][ T39] usb 2-1: can't read configurations, error -71 [ 376.019650][ T5604] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 376.037365][ T4902] udevd[4902]: symlink '../../loop0' '/dev/disk/by-diskseq/164.tmp-b7:0' failed: Read-only file system [ 376.060452][ T4902] udevd[4902]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 376.152080][ T286] EXT4-fs (loop0): unmounting filesystem. [ 376.189721][ T5613] futex_wake_op: syz.3.1530 tries to shift op by -1; fix this program [ 376.327953][ T4902] udevd[4902]: symlink '../../loop0' '/dev/disk/by-diskseq/164.tmp-b7:0' failed: Read-only file system [ 376.536380][ T4902] udevd[4902]: symlink '../../loop0' '/dev/disk/by-diskseq/164.tmp-b7:0' failed: Read-only file system [ 376.853805][ T28] kauditd_printk_skb: 55 callbacks suppressed [ 376.853837][ T28] audit: type=1400 audit(1751134273.380:1863): avc: denied { ioctl } for pid=5608 comm="syz.4.1532" path="/dev/kvm" dev="devtmpfs" ino=83 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 377.058987][ T4902] udevd[4902]: symlink '../../loop0' '/dev/disk/by-diskseq/165.tmp-b7:0' failed: Read-only file system [ 377.078779][ T28] audit: type=1400 audit(1751134273.605:1864): avc: denied { write } for pid=5626 comm="syz.3.1536" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 377.098953][ T28] audit: type=1400 audit(1751134273.605:1865): avc: denied { create } for pid=5626 comm="syz.3.1536" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 377.335734][ T28] audit: type=1400 audit(1751134273.848:1866): avc: denied { create } for pid=5630 comm="syz.3.1537" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 377.380053][ T28] audit: type=1326 audit(1751134273.885:1867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5623 comm="syz.1.1534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e45b8e929 code=0x7ffc0000 [ 377.419962][ T28] audit: type=1326 audit(1751134273.904:1868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5623 comm="syz.1.1534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6e45b8e929 code=0x7ffc0000 [ 377.475967][ T28] audit: type=1326 audit(1751134273.904:1869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5623 comm="syz.1.1534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e45b8e929 code=0x7ffc0000 [ 377.499584][ T28] audit: type=1326 audit(1751134273.904:1870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5623 comm="syz.1.1534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f6e45b8e929 code=0x7ffc0000 [ 377.523232][ T28] audit: type=1326 audit(1751134273.904:1871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5623 comm="syz.1.1534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f6e45b8e963 code=0x7ffc0000 [ 377.579492][ T28] audit: type=1326 audit(1751134273.904:1872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5623 comm="syz.1.1534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f6e45b8d3df code=0x7ffc0000 [ 378.022652][ T4902] udevd[4902]: symlink '../../loop0' '/dev/disk/by-diskseq/165.tmp-b7:0' failed: Read-only file system [ 378.961573][ T5659] futex_wake_op: syz.1.1543 tries to shift op by -1; fix this program [ 379.297649][ T4902] udevd[4902]: symlink '../../loop0' '/dev/disk/by-diskseq/165.tmp-b7:0' failed: Read-only file system [ 379.866987][ T5668] futex_wake_op: syz.0.1546 tries to shift op by -1; fix this program [ 380.011819][ T5669] loop0: detected capacity change from 0 to 512 [ 380.030772][ T5669] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 380.135539][ T5669] EXT4-fs (loop0): 1 truncate cleaned up [ 380.141328][ T5669] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 380.424306][ T4902] udevd[4902]: symlink '../../loop0' '/dev/disk/by-diskseq/166.tmp-b7:0' failed: Read-only file system [ 380.448394][ T4902] udevd[4902]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 380.703027][ T286] EXT4-fs (loop0): unmounting filesystem. [ 380.716173][ T4902] udevd[4902]: symlink '../../loop0' '/dev/disk/by-diskseq/166.tmp-b7:0' failed: Read-only file system [ 380.749488][ T4902] udevd[4902]: symlink '../../loop0' '/dev/disk/by-diskseq/166.tmp-b7:0' failed: Read-only file system [ 380.798699][ T4902] udevd[4902]: symlink '../../loop0' '/dev/disk/by-diskseq/167.tmp-b7:0' failed: Read-only file system [ 381.006962][ T5699] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 382.255889][ T5713] futex_wake_op: syz.2.1558 tries to shift op by -1; fix this program [ 383.941555][ T5731] futex_wake_op: syz.3.1562 tries to shift op by -1; fix this program [ 384.130211][ T5734] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 384.418705][ T28] kauditd_printk_skb: 28 callbacks suppressed [ 384.426613][ T28] audit: type=1400 audit(1751134280.462:1901): avc: denied { setopt } for pid=5733 comm="syz.2.1564" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 384.477123][ T28] audit: type=1400 audit(1751134280.471:1902): avc: denied { ioctl } for pid=5733 comm="syz.2.1564" path="socket:[33991]" dev="sockfs" ino=33991 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 384.869866][ T4902] udevd[4902]: symlink '../../loop0' '/dev/disk/by-diskseq/167.tmp-b7:0' failed: Read-only file system [ 385.028846][ T5749] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 385.812393][ T4902] udevd[4902]: symlink '../../loop0' '/dev/disk/by-diskseq/167.tmp-b7:0' failed: Read-only file system [ 385.993434][ T5773] futex_wake_op: syz.0.1573 tries to shift op by -1; fix this program [ 386.064056][ T5776] loop0: detected capacity change from 0 to 512 [ 386.152606][ T5776] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 386.271133][ T4902] udevd[4902]: symlink '../../loop0' '/dev/disk/by-diskseq/168.tmp-b7:0' failed: Read-only file system [ 386.433175][ T5776] EXT4-fs (loop0): 1 truncate cleaned up [ 386.438944][ T5776] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 386.803493][ T5786] futex_wake_op: syz.2.1576 tries to shift op by -1; fix this program [ 387.868333][ T286] EXT4-fs (loop0): unmounting filesystem. [ 387.900211][ T4902] udevd[4902]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 387.950566][ T4902] udevd[4902]: symlink '../../loop0' '/dev/disk/by-diskseq/168.tmp-b7:0' failed: Read-only file system [ 387.987354][ T4902] udevd[4902]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 388.022885][ T4902] udevd[4902]: symlink '../../loop0' '/dev/disk/by-diskseq/168.tmp-b7:0' failed: Read-only file system [ 388.091877][ T4902] udevd[4902]: symlink '../../loop0' '/dev/disk/by-diskseq/168.tmp-b7:0' failed: Read-only file system [ 388.231243][ T5795] kvm: MONITOR instruction emulated as NOP! [ 388.654199][ T28] audit: type=1400 audit(1751134284.429:1903): avc: denied { create } for pid=5799 comm="syz.4.1580" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 388.674473][ T28] audit: type=1400 audit(1751134284.438:1904): avc: denied { setopt } for pid=5799 comm="syz.4.1580" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 388.694676][ T28] audit: type=1400 audit(1751134284.438:1905): avc: denied { bind } for pid=5799 comm="syz.4.1580" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 388.714931][ T28] audit: type=1400 audit(1751134284.438:1906): avc: denied { read } for pid=5799 comm="syz.4.1580" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 388.738194][ T28] audit: type=1400 audit(1751134284.513:1907): avc: denied { read } for pid=5799 comm="syz.4.1580" name="usbmon7" dev="devtmpfs" ino=180 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 388.763939][ T28] audit: type=1400 audit(1751134284.513:1908): avc: denied { open } for pid=5799 comm="syz.4.1580" path="/dev/usbmon7" dev="devtmpfs" ino=180 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 388.809746][ T28] audit: type=1400 audit(1751134284.513:1909): avc: denied { ioctl } for pid=5799 comm="syz.4.1580" path="/dev/usbmon7" dev="devtmpfs" ino=180 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 389.072328][ T4902] udevd[4902]: symlink '../../loop0' '/dev/disk/by-diskseq/169.tmp-b7:0' failed: Read-only file system [ 389.166521][ T5815] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 390.219730][ T4902] udevd[4902]: symlink '../../loop0' '/dev/disk/by-diskseq/169.tmp-b7:0' failed: Read-only file system [ 390.545364][ T28] audit: type=1400 audit(1751134286.103:1910): avc: denied { create } for pid=5830 comm="syz.2.1589" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 390.753820][ T5840] FAULT_INJECTION: forcing a failure. [ 390.753820][ T5840] name failslab, interval 1, probability 0, space 0, times 0 [ 390.766491][ T5840] CPU: 1 PID: 5840 Comm: syz.3.1592 Not tainted 6.1.141-syzkaller-00033-g36d69f6a49eb #0 [ 390.776388][ T5840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 390.786429][ T5840] Call Trace: [ 390.789690][ T5840] [ 390.792598][ T5840] __dump_stack+0x21/0x24 [ 390.796909][ T5840] dump_stack_lvl+0xee/0x150 [ 390.801474][ T5840] ? __cfi_dump_stack_lvl+0x8/0x8 [ 390.806488][ T5840] ? 0xffffffffa00009e0 [ 390.810618][ T5840] dump_stack+0x15/0x24 [ 390.814753][ T5840] should_fail_ex+0x3d4/0x520 [ 390.819410][ T5840] __should_failslab+0xac/0xf0 [ 390.824153][ T5840] ? qdisc_alloc+0x79/0x780 [ 390.828764][ T5840] should_failslab+0x9/0x20 [ 390.833263][ T5840] __kmem_cache_alloc_node+0x3d/0x2c0 [ 390.838634][ T5840] ? qdisc_alloc+0x79/0x780 [ 390.843117][ T5840] __kmalloc_node+0xa1/0x1e0 [ 390.847690][ T5840] qdisc_alloc+0x79/0x780 [ 390.851997][ T5840] qdisc_create+0x170/0x1040 [ 390.856574][ T5840] ? qdisc_notify+0x360/0x360 [ 390.861257][ T5840] ? qdisc_lookup+0x319/0x4e0 [ 390.865918][ T5840] tc_modify_qdisc+0x8ea/0x1900 [ 390.870752][ T5840] ? __cfi_tc_modify_qdisc+0x10/0x10 [ 390.876113][ T5840] ? __kasan_check_write+0x14/0x20 [ 390.881205][ T5840] ? mutex_lock+0x8d/0x1a0 [ 390.885597][ T5840] ? __cfi_mutex_lock+0x10/0x10 [ 390.890433][ T5840] ? ns_capable+0x8c/0xf0 [ 390.894752][ T5840] ? netlink_net_capable+0x125/0x160 [ 390.900024][ T5840] ? __cfi_tc_modify_qdisc+0x10/0x10 [ 390.905316][ T5840] rtnetlink_rcv_msg+0x9f4/0xcf0 [ 390.910237][ T5840] ? __cfi_rtnetlink_rcv_msg+0x10/0x10 [ 390.915692][ T5840] ? kernel_text_address+0xa0/0xd0 [ 390.920783][ T5840] ? __kernel_text_address+0xd/0x30 [ 390.925995][ T5840] ? unwind_get_return_address+0x4d/0x90 [ 390.931602][ T5840] ? memcpy+0x56/0x70 [ 390.935565][ T5840] ? avc_has_perm_noaudit+0x2f4/0x460 [ 390.940938][ T5840] ? __cfi_avc_has_perm_noaudit+0x10/0x10 [ 390.946656][ T5840] ? slab_post_alloc_hook+0x4f/0x2d0 [ 390.951918][ T5840] ? kmem_cache_alloc_node+0x181/0x340 [ 390.957352][ T5840] ? __alloc_skb+0xea/0x4b0 [ 390.961856][ T5840] ? avc_has_perm+0x158/0x240 [ 390.966512][ T5840] ? __alloc_skb+0x236/0x4b0 [ 390.971079][ T5840] ? netlink_sendmsg+0x626/0xbc0 [ 390.975998][ T5840] ? __cfi_avc_has_perm+0x10/0x10 [ 390.981005][ T5840] ? selinux_nlmsg_lookup+0x400/0x4c0 [ 390.986358][ T5840] netlink_rcv_skb+0x1f2/0x440 [ 390.991102][ T5840] ? __cfi_rtnetlink_rcv_msg+0x10/0x10 [ 390.996537][ T5840] ? __cfi_netlink_rcv_skb+0x10/0x10 [ 391.001803][ T5840] ? __netlink_lookup+0x387/0x3b0 [ 391.006812][ T5840] rtnetlink_rcv+0x1c/0x20 [ 391.011213][ T5840] netlink_unicast+0x8b1/0xa30 [ 391.015955][ T5840] netlink_sendmsg+0x8aa/0xbc0 [ 391.020704][ T5840] ? __cfi_netlink_sendmsg+0x10/0x10 [ 391.025975][ T5840] ? security_socket_sendmsg+0x93/0xb0 [ 391.031425][ T5840] ? __cfi_netlink_sendmsg+0x10/0x10 [ 391.036691][ T5840] ____sys_sendmsg+0x5a9/0x990 [ 391.041431][ T5840] ? __sys_sendmsg_sock+0x40/0x40 [ 391.046431][ T5840] ? import_iovec+0x7c/0xb0 [ 391.050923][ T5840] ___sys_sendmsg+0x21c/0x290 [ 391.055574][ T5840] ? __sys_sendmsg+0x270/0x270 [ 391.060339][ T5840] ? __kasan_check_write+0x14/0x20 [ 391.065443][ T5840] ? proc_fail_nth_write+0x17a/0x1f0 [ 391.070715][ T5840] ? vfs_write+0x9d6/0xca0 [ 391.075127][ T5840] ? __fdget+0x19c/0x220 [ 391.079362][ T5840] __x64_sys_sendmsg+0x1f0/0x2c0 [ 391.084300][ T5840] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 391.089738][ T5840] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 391.095783][ T5840] x64_sys_call+0x171/0x9a0 [ 391.100286][ T5840] do_syscall_64+0x4c/0xa0 [ 391.104678][ T5840] ? clear_bhb_loop+0x30/0x80 [ 391.109333][ T5840] ? clear_bhb_loop+0x30/0x80 [ 391.113993][ T5840] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 391.119865][ T5840] RIP: 0033:0x7fdc2e18e929 [ 391.124252][ T5840] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 391.143833][ T5840] RSP: 002b:00007fdc2f0ce038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 391.152222][ T5840] RAX: ffffffffffffffda RBX: 00007fdc2e3b5fa0 RCX: 00007fdc2e18e929 [ 391.160174][ T5840] RDX: 0000000000044080 RSI: 0000200000000040 RDI: 0000000000000006 [ 391.168129][ T5840] RBP: 00007fdc2f0ce090 R08: 0000000000000000 R09: 0000000000000000 [ 391.176091][ T5840] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 391.184044][ T5840] R13: 0000000000000000 R14: 00007fdc2e3b5fa0 R15: 00007ffed752ba28 [ 391.192012][ T5840] [ 391.944743][ T4902] udevd[4902]: symlink '../../loop0' '/dev/disk/by-diskseq/169.tmp-b7:0' failed: Read-only file system [ 391.979953][ T28] audit: type=1400 audit(1751134287.544:1911): avc: denied { unlink } for pid=5848 comm="syz.0.1594" name="#9" dev="tmpfs" ino=1702 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 392.009618][ T4902] udevd[4902]: symlink '../../loop0' '/dev/disk/by-diskseq/169.tmp-b7:0' failed: Read-only file system [ 392.558439][ T5867] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1600'. [ 392.566481][ T28] audit: type=1400 audit(1751134287.965:1912): avc: denied { connect } for pid=5864 comm="syz.1.1600" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 392.588622][ T28] audit: type=1400 audit(1751134287.974:1913): avc: denied { shutdown } for pid=5864 comm="syz.1.1600" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 392.863412][ T28] audit: type=1400 audit(1751134288.367:1914): avc: denied { read } for pid=5868 comm="syz.2.1601" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 392.864624][ T5869] binder: 5868:5869 ioctl c0306201 200000000080 returned -14 [ 392.889081][ T28] audit: type=1400 audit(1751134288.367:1915): avc: denied { open } for pid=5868 comm="syz.2.1601" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 392.917930][ T28] audit: type=1400 audit(1751134288.367:1916): avc: denied { ioctl } for pid=5868 comm="syz.2.1601" path="/dev/binderfs/binder0" dev="binder" ino=4 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 392.946978][ T28] audit: type=1400 audit(1751134288.367:1917): avc: denied { set_context_mgr } for pid=5868 comm="syz.2.1601" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 392.972745][ T28] audit: type=1400 audit(1751134288.395:1918): avc: denied { write } for pid=5868 comm="syz.2.1601" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 393.000155][ T28] audit: type=1400 audit(1751134288.395:1919): avc: denied { map } for pid=5868 comm="syz.2.1601" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 393.006193][ T4902] udevd[4902]: symlink '../../loop0' '/dev/disk/by-diskseq/169.tmp-b7:0' failed: Read-only file system [ 393.032215][ T5875] loop0: detected capacity change from 0 to 256 [ 393.119349][ T5875] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d) [ 393.316907][ T4902] udevd[4902]: symlink '../../loop0' '/dev/disk/by-diskseq/170.tmp-b7:0' failed: Read-only file system [ 393.336564][ T4902] udevd[4902]: symlink '../../loop0' '/dev/disk/by-uuid/1234-1234.tmp-b7:0' failed: Read-only file system [ 393.355053][ T4902] udevd[4902]: symlink '../../loop0' '/dev/disk/by-diskseq/170.tmp-b7:0' failed: Read-only file system [ 393.367345][ T4902] udevd[4902]: symlink '../../loop0' '/dev/disk/by-uuid/1234-1234.tmp-b7:0' failed: Read-only file system [ 393.506216][ T5885] xt_hashlimit: max too large, truncated to 1048576 [ 393.751371][ T5889] FAULT_INJECTION: forcing a failure. [ 393.751371][ T5889] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 393.771134][ T5889] CPU: 0 PID: 5889 Comm: syz.0.1604 Not tainted 6.1.141-syzkaller-00033-g36d69f6a49eb #0 [ 393.780979][ T5889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 393.791310][ T5889] Call Trace: [ 393.794595][ T5889] [ 393.797526][ T5889] __dump_stack+0x21/0x24 [ 393.801869][ T5889] dump_stack_lvl+0xee/0x150 [ 393.806464][ T5889] ? __cfi_dump_stack_lvl+0x8/0x8 [ 393.811503][ T5889] ? __switch_to+0x51f/0xe30 [ 393.816159][ T5889] dump_stack+0x15/0x24 [ 393.820330][ T5889] should_fail_ex+0x3d4/0x520 [ 393.825022][ T5889] should_fail+0xb/0x10 [ 393.829190][ T5889] should_fail_usercopy+0x1a/0x20 [ 393.834232][ T5889] _copy_from_user+0x1e/0xc0 [ 393.838836][ T5889] get_user_ifreq+0x6c/0x180 [ 393.843442][ T5889] inet_ioctl+0x2a4/0x410 [ 393.847780][ T5889] ? __cfi_inet_ioctl+0x10/0x10 [ 393.852642][ T5889] ? __kasan_check_read+0x11/0x20 [ 393.857676][ T5889] ? preempt_schedule_irq+0xbb/0x110 [ 393.862978][ T5889] ? __cfi_preempt_schedule_irq+0x10/0x10 [ 393.868708][ T5889] sock_do_ioctl+0x101/0x310 [ 393.873323][ T5889] ? sock_show_fdinfo+0xb0/0xb0 [ 393.878228][ T5889] sock_ioctl+0x4d8/0x6e0 [ 393.882596][ T5889] ? preempt_schedule_irq+0xbb/0x110 [ 393.887892][ T5889] ? __cfi_sock_ioctl+0x10/0x10 [ 393.892763][ T5889] ? __fget_files+0x2d5/0x330 [ 393.897458][ T5889] ? security_file_ioctl+0x95/0xc0 [ 393.902575][ T5889] ? __cfi_sock_ioctl+0x10/0x10 [ 393.907433][ T5889] __se_sys_ioctl+0x12f/0x1b0 [ 393.912125][ T5889] __x64_sys_ioctl+0x7b/0x90 [ 393.916734][ T5889] x64_sys_call+0x58b/0x9a0 [ 393.921272][ T5889] do_syscall_64+0x4c/0xa0 [ 393.925692][ T5889] ? clear_bhb_loop+0x30/0x80 [ 393.930382][ T5889] ? clear_bhb_loop+0x30/0x80 [ 393.935078][ T5889] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 393.940987][ T5889] RIP: 0033:0x7f204858e929 [ 393.945461][ T5889] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 393.965080][ T5889] RSP: 002b:00007f20493d3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 393.973507][ T5889] RAX: ffffffffffffffda RBX: 00007f20487b6160 RCX: 00007f204858e929 [ 393.981490][ T5889] RDX: 0000200000000180 RSI: 0000000000008916 RDI: 000000000000000a [ 393.989471][ T5889] RBP: 00007f20493d3090 R08: 0000000000000000 R09: 0000000000000000 [ 393.997451][ T5889] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 394.005433][ T5889] R13: 0000000000000000 R14: 00007f20487b6160 R15: 00007ffc6cfb1d18 [ 394.013420][ T5889] [ 394.633325][ T4902] udevd[4902]: symlink '../../loop0' '/dev/disk/by-diskseq/170.tmp-b7:0' failed: Read-only file system [ 394.659968][ T5900] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1610'. [ 394.672857][ T4902] udevd[4902]: symlink '../../loop0' '/dev/disk/by-diskseq/170.tmp-b7:0' failed: Read-only file system [ 395.077276][ T415] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 395.237599][ T415] usb 2-1: device descriptor read/64, error -71 [ 395.526260][ T415] usb 2-1: device descriptor read/64, error -71 [ 395.573411][ T4902] udevd[4902]: symlink '../../loop0' '/dev/disk/by-diskseq/171.tmp-b7:0' failed: Read-only file system [ 395.683266][ T5924] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 395.695576][ T5924] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 395.919380][ T415] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 396.082137][ T415] usb 2-1: device descriptor read/64, error -71 [ 396.381373][ T415] usb 2-1: device descriptor read/64, error -71 [ 396.566021][ T415] usb usb2-port1: attempt power cycle [ 396.597580][ T5943] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 396.610107][ T5943] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 396.660537][ T5942] loop0: detected capacity change from 0 to 128 [ 396.669187][ T28] kauditd_printk_skb: 37 callbacks suppressed [ 396.669201][ T28] audit: type=1400 audit(1751134291.922:1957): avc: denied { mount } for pid=5941 comm="syz.0.1623" name="/" dev="loop0" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 396.910444][ T5946] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 397.133938][ T28] audit: type=1400 audit(1751134292.362:1958): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 397.418294][ T415] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 397.457522][ T415] usb 2-1: device descriptor read/8, error -71 [ 397.781759][ T28] audit: type=1326 audit(1751134292.961:1959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5954 comm="syz.2.1627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ef1b8e929 code=0x7ffc0000 [ 397.814387][ T415] usb 2-1: device descriptor read/8, error -71 [ 397.823252][ T28] audit: type=1326 audit(1751134292.961:1960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5954 comm="syz.2.1627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1ef1b8e929 code=0x7ffc0000 [ 397.847651][ T28] audit: type=1326 audit(1751134292.961:1961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5954 comm="syz.2.1627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ef1b8e929 code=0x7ffc0000 [ 397.871952][ T28] audit: type=1326 audit(1751134292.961:1962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5954 comm="syz.2.1627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f1ef1b8e929 code=0x7ffc0000 [ 397.897450][ T28] audit: type=1326 audit(1751134292.979:1963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5954 comm="syz.2.1627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f1ef1b8e963 code=0x7ffc0000 [ 397.921062][ T28] audit: type=1326 audit(1751134292.979:1964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5954 comm="syz.2.1627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f1ef1b8d3df code=0x7ffc0000 [ 397.944801][ T28] audit: type=1326 audit(1751134292.979:1965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5954 comm="syz.2.1627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f1ef1b8e9b7 code=0x7ffc0000 [ 397.968692][ T28] audit: type=1326 audit(1751134292.979:1966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5954 comm="syz.2.1627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1ef1b8d290 code=0x7ffc0000 [ 398.092691][ T5968] SELinux: Context system_u:object_r:load_policy_exec_t:s0 is not valid (left unmapped). [ 398.131518][ T4902] udevd[4902]: symlink '../../loop0' '/dev/disk/by-diskseq/173.tmp-b7:0' failed: Read-only file system [ 398.233945][ T4902] udevd[4902]: symlink '../../loop0' '/dev/disk/by-diskseq/173.tmp-b7:0' failed: Read-only file system [ 399.320976][ T414] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 399.475687][ T415] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 399.513856][ T415] usb 2-1: Using ep0 maxpacket: 32 [ 399.521651][ T415] usb 2-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice= 0.02 [ 399.552211][ T415] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.580030][ T4902] udevd[4902]: symlink '../../loop0' '/dev/disk/by-diskseq/173.tmp-b7:0' failed: Read-only file system [ 399.582153][ T415] usb 2-1: Product: syz [ 399.597717][ T415] usb 2-1: Manufacturer: syz [ 399.616931][ T415] usb 2-1: SerialNumber: syz [ 399.622886][ T415] usb 2-1: config 0 descriptor?? [ 399.638861][ T415] usb-storage 2-1:0.0: USB Mass Storage device detected [ 399.644388][ T5997] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1638'. [ 399.655515][ T5997] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1638'. [ 399.665081][ T5996] futex_wake_op: syz.0.1639 tries to shift op by -1; fix this program [ 399.675183][ T5994] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1638'. [ 399.687634][ T5994] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1638'. [ 399.698000][ T5994] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5994 comm=syz.4.1638 [ 399.710430][ T414] usb 4-1: Using ep0 maxpacket: 16 [ 399.710749][ T5994] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=31276 sclass=netlink_route_socket pid=5994 comm=syz.4.1638 [ 399.717205][ T414] usb 4-1: unable to get BOS descriptor or descriptor too short [ 399.738397][ T6002] loop0: detected capacity change from 0 to 512 [ 399.746686][ T414] usb 4-1: config 1 has an invalid interface number: 206 but max is 0 [ 399.755012][ T6002] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 399.765697][ T414] usb 4-1: config 1 has an invalid interface association descriptor of length 2, skipping [ 399.766034][ T415] ftdi_sio 2-1:0.0: Ignoring interface reserved for JTAG [ 399.775657][ T414] usb 4-1: config 1 has no interface number 0 [ 399.787008][ T414] usb 4-1: New USB device found, idVendor=152d, idProduct=0310, bcdDevice=3b.0a [ 399.803435][ T6002] EXT4-fs (loop0): 1 truncate cleaned up [ 399.803938][ T4961] udevd[4961]: symlink '../../loop0' '/dev/disk/by-diskseq/174.tmp-b7:0' failed: Read-only file system [ 399.809126][ T6002] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 399.822933][ T414] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.831062][ T4961] udevd[4961]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 399.843828][ T414] usb 4-1: Product: syz [ 399.858088][ T414] usb 4-1: Manufacturer: syz [ 399.862719][ T414] usb 4-1: SerialNumber: syz [ 399.888876][ T286] EXT4-fs (loop0): unmounting filesystem. [ 399.888913][ T4902] udevd[4902]: symlink '../../loop0' '/dev/disk/by-diskseq/174.tmp-b7:0' failed: Read-only file system [ 399.889544][ T4902] udevd[4902]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 399.923212][ T4902] udevd[4902]: symlink '../../loop0' '/dev/disk/by-diskseq/174.tmp-b7:0' failed: Read-only file system [ 399.938263][ T4902] udevd[4902]: symlink '../../loop0' '/dev/disk/by-diskseq/174.tmp-b7:0' failed: Read-only file system [ 400.762665][ T6022] input: syz1 as /devices/virtual/input/input16 [ 400.991947][ T5086] udevd[5086]: symlink '../../loop0' '/dev/disk/by-diskseq/175.tmp-b7:0' failed: Read-only file system [ 401.110428][ T656] usb 2-1: USB disconnect, device number 27 [ 401.729296][ T415] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 401.930225][ T415] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 401.950491][ T415] usb 5-1: New USB device found, idVendor=056e, idProduct=00ff, bcdDevice= 0.00 [ 401.959563][ T415] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 401.983695][ T415] usb 5-1: config 0 descriptor?? [ 402.142901][ T656] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 402.213423][ T414] usb 4-1: Found UVC 0.00 device syz (152d:0310) [ 402.223834][ T414] usb 4-1: No valid video chain found. [ 402.240326][ T414] usb 4-1: USB disconnect, device number 33 [ 402.346030][ T656] usb 3-1: Using ep0 maxpacket: 16 [ 402.352668][ T656] usb 3-1: unable to get BOS descriptor or descriptor too short [ 402.373523][ T656] usb 3-1: config 1 has an invalid interface number: 206 but max is 0 [ 402.394304][ T656] usb 3-1: config 1 has no interface number 0 [ 402.402713][ T656] usb 3-1: string descriptor 0 read error: -22 [ 402.418105][ T28] kauditd_printk_skb: 122 callbacks suppressed [ 402.418120][ T28] audit: type=1400 audit(1751134297.301:2089): avc: denied { create } for pid=6027 comm="syz.4.1648" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 402.420861][ T656] usb 3-1: New USB device found, idVendor=152d, idProduct=0310, bcdDevice=3b.0a [ 402.455074][ T656] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.464447][ T415] usbhid 5-1:0.0: can't add hid device: -71 [ 402.470409][ T415] usbhid: probe of 5-1:0.0 failed with error -71 [ 402.480085][ T415] usb 5-1: USB disconnect, device number 30 [ 402.777235][ T28] audit: type=1400 audit(1751134297.647:2090): avc: denied { create } for pid=6048 comm="syz.0.1655" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 402.860695][ T28] audit: type=1400 audit(1751134297.666:2091): avc: denied { ioctl } for pid=6048 comm="syz.0.1655" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=35098 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 403.339194][ T28] audit: type=1400 audit(1751134297.797:2092): avc: denied { module_request } for pid=6036 comm="syz.2.1651" kmod="ipt_rpfilter" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 403.483743][ T4902] udevd[4902]: symlink '../../loop0' '/dev/disk/by-diskseq/175.tmp-b7:0' failed: Read-only file system [ 403.596841][ T28] audit: type=1400 audit(1751134298.415:2093): avc: denied { setopt } for pid=6057 comm="syz.0.1657" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 403.632131][ T4902] udevd[4902]: symlink '../../loop0' '/dev/disk/by-diskseq/175.tmp-b7:0' failed: Read-only file system [ 403.718064][ T28] audit: type=1400 audit(1751134298.527:2094): avc: denied { write } for pid=6059 comm="syz.0.1658" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 403.768163][ T414] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 403.812387][ T28] audit: type=1400 audit(1751134298.611:2095): avc: denied { execmem } for pid=6066 comm="syz.4.1661" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 403.863456][ T28] audit: type=1400 audit(1751134298.658:2096): avc: denied { unlink } for pid=285 comm="syz-executor" name="file0" dev="tmpfs" ino=1812 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 404.002951][ T414] usb 4-1: Using ep0 maxpacket: 16 [ 404.070622][ T28] audit: type=1400 audit(1751134298.798:2097): avc: denied { bpf } for pid=6066 comm="syz.4.1661" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 404.092855][ T414] usb 4-1: unable to get BOS descriptor or descriptor too short [ 404.109373][ T414] usb 4-1: config 1 has an invalid interface number: 206 but max is 0 [ 404.122016][ T28] audit: type=1400 audit(1751134298.807:2098): avc: denied { prog_load } for pid=6066 comm="syz.4.1661" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 404.134518][ T414] usb 4-1: config 1 has no interface number 0 [ 404.149423][ T414] usb 4-1: string descriptor 0 read error: -22 [ 404.155765][ T414] usb 4-1: New USB device found, idVendor=152d, idProduct=0310, bcdDevice=3b.0a [ 404.164914][ T414] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 404.867786][ T4902] udevd[4902]: symlink '../../loop0' '/dev/disk/by-diskseq/175.tmp-b7:0' failed: Read-only file system [ 405.004713][ T6086] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 405.262727][ T414] usb 3-1: USB disconnect, device number 22 [ 405.325301][ T6095] FAULT_INJECTION: forcing a failure. [ 405.325301][ T6095] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 405.338600][ T6095] CPU: 0 PID: 6095 Comm: syz.2.1669 Not tainted 6.1.141-syzkaller-00033-g36d69f6a49eb #0 [ 405.348516][ T6095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 405.358590][ T6095] Call Trace: [ 405.361854][ T6095] [ 405.364771][ T6095] __dump_stack+0x21/0x24 [ 405.369274][ T6095] dump_stack_lvl+0xee/0x150 [ 405.373855][ T6095] ? __cfi_dump_stack_lvl+0x8/0x8 [ 405.378880][ T6095] ? __kasan_kmalloc+0x95/0xb0 [ 405.383652][ T6095] ? kvmalloc_node+0x294/0x480 [ 405.388408][ T6095] ? __kmalloc_node+0xb2/0x1e0 [ 405.393163][ T6095] dump_stack+0x15/0x24 [ 405.397345][ T6095] should_fail_ex+0x3d4/0x520 [ 405.402012][ T6095] should_fail+0xb/0x10 [ 405.406191][ T6095] should_fail_usercopy+0x1a/0x20 [ 405.411217][ T6095] _copy_from_user+0x1e/0xc0 [ 405.415813][ T6095] vmemdup_user+0x63/0xe0 [ 405.420139][ T6095] setxattr+0x1e6/0x2d0 [ 405.424281][ T6095] ? path_setxattr+0x280/0x280 [ 405.429059][ T6095] ? __mnt_want_write+0x1e6/0x260 [ 405.434081][ T6095] ? mnt_want_write_file+0x269/0x470 [ 405.439356][ T6095] __se_sys_fsetxattr+0x168/0x1e0 [ 405.444372][ T6095] __x64_sys_fsetxattr+0xbf/0xd0 [ 405.449307][ T6095] x64_sys_call+0x1c5/0x9a0 [ 405.453792][ T6095] do_syscall_64+0x4c/0xa0 [ 405.458245][ T6095] ? clear_bhb_loop+0x30/0x80 [ 405.462924][ T6095] ? clear_bhb_loop+0x30/0x80 [ 405.467588][ T6095] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 405.473473][ T6095] RIP: 0033:0x7f1ef1b8e929 [ 405.477962][ T6095] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 405.497579][ T6095] RSP: 002b:00007f1ef2ab7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000be [ 405.505978][ T6095] RAX: ffffffffffffffda RBX: 00007f1ef1db5fa0 RCX: 00007f1ef1b8e929 [ 405.513941][ T6095] RDX: 00002000000000c0 RSI: 0000200000000000 RDI: 0000000000000000 [ 405.521907][ T6095] RBP: 00007f1ef2ab7090 R08: 0000000000000000 R09: 0000000000000000 [ 405.529868][ T6095] R10: 0000000000000025 R11: 0000000000000246 R12: 0000000000000001 [ 405.537844][ T6095] R13: 0000000000000000 R14: 00007f1ef1db5fa0 R15: 00007ffe096976d8 [ 405.545911][ T6095] [ 405.801189][ T4902] udevd[4902]: symlink '../../loop0' '/dev/disk/by-diskseq/175.tmp-b7:0' failed: Read-only file system [ 406.013661][ T63] usb 4-1: USB disconnect, device number 34 [ 406.219797][ T414] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 406.418658][ T414] usb 5-1: Using ep0 maxpacket: 16 [ 406.426552][ T414] usb 5-1: unable to get BOS descriptor or descriptor too short [ 406.465730][ T414] usb 5-1: config 1 has an invalid interface number: 206 but max is 0 [ 406.483760][ T414] usb 5-1: config 1 has no interface number 0 [ 406.494043][ T414] usb 5-1: string descriptor 0 read error: -22 [ 406.531549][ T414] usb 5-1: New USB device found, idVendor=152d, idProduct=0310, bcdDevice=3b.0a [ 406.541188][ T414] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 406.863423][ T4902] udevd[4902]: symlink '../../loop0' '/dev/disk/by-diskseq/175.tmp-b7:0' failed: Read-only file system [ 407.693914][ T6153] xt_hashlimit: max too large, truncated to 1048576 [ 408.278734][ T28] kauditd_printk_skb: 112 callbacks suppressed [ 408.278751][ T28] audit: type=1400 audit(1751134302.783:2211): avc: denied { create } for pid=6158 comm="syz.2.1692" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 408.365827][ T28] audit: type=1400 audit(1751134302.783:2212): avc: denied { write } for pid=6158 comm="syz.2.1692" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 408.386461][ T28] audit: type=1400 audit(1751134302.783:2213): avc: denied { read } for pid=6158 comm="syz.2.1692" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 408.620813][ T4902] udevd[4902]: symlink '../../loop0' '/dev/disk/by-diskseq/175.tmp-b7:0' failed: Read-only file system [ 408.671940][ T28] audit: type=1400 audit(1751134303.158:2214): avc: denied { create } for pid=6164 comm="syz.0.1694" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 408.692406][ T6168] FAULT_INJECTION: forcing a failure. [ 408.692406][ T6168] name fail_futex, interval 1, probability 0, space 0, times 0 [ 408.705340][ T6168] CPU: 1 PID: 6168 Comm: syz.0.1694 Not tainted 6.1.141-syzkaller-00033-g36d69f6a49eb #0 [ 408.715156][ T6168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 408.725390][ T6168] Call Trace: [ 408.728673][ T6168] [ 408.731605][ T6168] __dump_stack+0x21/0x24 [ 408.735943][ T6168] dump_stack_lvl+0xee/0x150 [ 408.740536][ T6168] ? __cfi_dump_stack_lvl+0x8/0x8 [ 408.745569][ T6168] dump_stack+0x15/0x24 [ 408.749727][ T6168] should_fail_ex+0x3d4/0x520 [ 408.754414][ T6168] should_fail+0xb/0x10 [ 408.758585][ T6168] should_fail_futex+0x38/0x40 [ 408.763365][ T6168] futex_lock_pi_atomic+0xfc/0xc60 [ 408.763483][ T6165] mmap: syz.1.1693 (6165) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 408.768482][ T6168] ? __cfi_futex_lock_pi_atomic+0x10/0x10 [ 408.768506][ T6168] ? __cfi_get_futex_key+0x10/0x10 [ 408.768528][ T6168] futex_lock_pi+0x1b2/0x820 [ 408.768544][ T6168] ? __cfi_futex_lock_pi+0x10/0x10 [ 408.800819][ T6168] ? kstrtouint_from_user+0xf7/0x150 [ 408.806092][ T6168] ? __kasan_check_write+0x14/0x20 [ 408.811191][ T6168] ? security_file_permission+0x94/0xb0 [ 408.816831][ T6168] ? vfs_write+0x9d6/0xca0 [ 408.821246][ T6168] ? slab_free_freelist_hook+0xc2/0x190 [ 408.826779][ T6168] do_futex+0x1d8/0x420 [ 408.830920][ T6168] ? __cfi_do_futex+0x10/0x10 [ 408.835582][ T6168] ? __kasan_check_write+0x14/0x20 [ 408.840678][ T6168] ? mutex_unlock+0x89/0x220 [ 408.845254][ T6168] __se_sys_futex+0x273/0x2e0 [ 408.849920][ T6168] ? __kasan_check_write+0x14/0x20 [ 408.855021][ T6168] ? __x64_sys_futex+0x100/0x100 [ 408.859947][ T6168] ? ksys_write+0x1eb/0x240 [ 408.864435][ T6168] ? __cfi_ksys_write+0x10/0x10 [ 408.869276][ T6168] __x64_sys_futex+0xe5/0x100 [ 408.873942][ T6168] x64_sys_call+0x7ec/0x9a0 [ 408.878429][ T6168] do_syscall_64+0x4c/0xa0 [ 408.882837][ T6168] ? clear_bhb_loop+0x30/0x80 [ 408.887492][ T6168] ? clear_bhb_loop+0x30/0x80 [ 408.892345][ T6168] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 408.898221][ T6168] RIP: 0033:0x7f204858e929 [ 408.902617][ T6168] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 408.922209][ T6168] RSP: 002b:00007f20493f4038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 408.930617][ T6168] RAX: ffffffffffffffda RBX: 00007f20487b6080 RCX: 00007f204858e929 [ 408.938577][ T6168] RDX: 0000000000000002 RSI: 0000000000000086 RDI: 000020000000cffc [ 408.947355][ T6168] RBP: 00007f20493f4090 R08: 0000000000000000 R09: 00000000fffffffc [ 408.955329][ T6168] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 408.963296][ T6168] R13: 0000000000000000 R14: 00007f20487b6080 R15: 00007ffc6cfb1d18 [ 408.971278][ T6168] [ 409.048241][ T414] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 409.142239][ T331] usb 5-1: USB disconnect, device number 31 [ 409.251307][ T414] usb 3-1: Using ep0 maxpacket: 8 [ 410.051444][ T6184] Illegal XDP return value 544924992 on prog (id 971) dev N/A, expect packet loss! [ 410.083818][ T4902] udevd[4902]: symlink '../../loop0' '/dev/disk/by-diskseq/175.tmp-b7:0' failed: Read-only file system [ 410.102130][ T28] audit: type=1400 audit(1751134304.495:2215): avc: denied { name_bind } for pid=6187 comm="syz.0.1701" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 410.124233][ T28] audit: type=1400 audit(1751134304.495:2216): avc: denied { node_bind } for pid=6187 comm="syz.0.1701" saddr=172.20.20.170 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 410.151669][ T6189] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 410.296898][ T28] audit: type=1400 audit(1751134304.673:2217): avc: denied { create } for pid=6187 comm="syz.0.1701" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 411.091128][ T4902] udevd[4902]: symlink '../../loop0' '/dev/disk/by-diskseq/175.tmp-b7:0' failed: Read-only file system [ 411.500920][ T414] usb 3-1: unable to get BOS descriptor or descriptor too short [ 411.509345][ T414] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 411.516920][ T414] usb 3-1: can't read configurations, error -71 [ 411.688506][ T331] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 411.880909][ T331] usb 2-1: Using ep0 maxpacket: 16 [ 411.887437][ T331] usb 2-1: unable to get BOS descriptor or descriptor too short [ 411.895881][ T331] usb 2-1: config 1 has an invalid interface number: 206 but max is 0 [ 411.904117][ T331] usb 2-1: config 1 has no interface number 0 [ 411.912500][ T331] usb 2-1: string descriptor 0 read error: -22 [ 411.918772][ T331] usb 2-1: New USB device found, idVendor=152d, idProduct=0310, bcdDevice=3b.0a [ 411.927920][ T331] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 412.081942][ T4902] udevd[4902]: symlink '../../loop0' '/dev/disk/by-diskseq/175.tmp-b7:0' failed: Read-only file system [ 412.084057][ T28] audit: type=1400 audit(1751134306.357:2218): avc: denied { create } for pid=6218 comm="syz.0.1711" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 412.150837][ T28] audit: type=1400 audit(1751134306.413:2219): avc: denied { write } for pid=6218 comm="syz.0.1711" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 412.172220][ T28] audit: type=1400 audit(1751134306.413:2220): avc: denied { listen } for pid=6218 comm="syz.0.1711" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 413.167610][ T4902] udevd[4902]: symlink '../../loop0' '/dev/disk/by-diskseq/175.tmp-b7:0' failed: Read-only file system [ 413.954681][ T656] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 414.097347][ T4902] udevd[4902]: setting mode of /dev/loop0 to 060660 failed: Read-only file system [ 414.106723][ T286] block device autoloading is deprecated and will be removed. [ 414.117565][ T4902] udevd[4902]: setting owner of /dev/loop0 to uid=0, gid=6 failed: Read-only file system [ 414.147067][ T656] usb 4-1: Using ep0 maxpacket: 32 [ 414.153547][ T656] usb 4-1: config 24 has an invalid interface number: 167 but max is 1 [ 414.161919][ T656] usb 4-1: config 24 has an invalid descriptor of length 0, skipping remainder of the config [ 414.172464][ T656] usb 4-1: config 24 has 1 interface, different from the descriptor's value: 2 [ 414.181518][ T656] usb 4-1: config 24 has no interface number 0 [ 414.188066][ T656] usb 4-1: config 24 interface 167 altsetting 1 endpoint 0x6 has invalid wMaxPacketSize 0 [ 414.188307][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 414.188319][ T28] audit: type=1400 audit(1751134308.312:2223): avc: denied { read write } for pid=6250 comm="syz.0.1719" name="rtc0" dev="devtmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 414.198224][ T656] usb 4-1: config 24 interface 167 has no altsetting 0 [ 414.205213][ T28] audit: type=1400 audit(1751134308.340:2224): avc: denied { open } for pid=6250 comm="syz.0.1719" path="/dev/rtc0" dev="devtmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 414.230606][ T656] usb 4-1: New USB device found, idVendor=0582, idProduct=f5c3, bcdDevice=bd.b3 [ 414.267029][ T656] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 414.275060][ T656] usb 4-1: Product: syz [ 414.279332][ T656] usb 4-1: Manufacturer: syz [ 414.284361][ T656] usb 4-1: SerialNumber: syz [ 414.511350][ T656] usb 4-1: USB disconnect, device number 35 [ 414.609966][ T1895] usb 2-1: USB disconnect, device number 28 [ 414.724660][ T4902] udevd[4902]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:24.167/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 415.036343][ T4902] udevd[4902]: symlink '../../loop0' '/dev/disk/by-diskseq/176.tmp-b7:0' failed: Read-only file system [ 415.079252][ T6273] device syz_tun entered promiscuous mode [ 415.099545][ T28] audit: type=1400 audit(1751134309.154:2225): avc: denied { ioctl } for pid=6272 comm="syz.2.1728" path="socket:[35575]" dev="sockfs" ino=35575 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 415.697104][ T28] audit: type=1400 audit(1751134309.295:2226): avc: denied { bpf } for pid=6274 comm="syz.2.1730" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 415.720568][ T28] audit: type=1400 audit(1751134309.295:2227): avc: denied { map_create } for pid=6274 comm="syz.2.1730" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 415.741632][ T28] audit: type=1400 audit(1751134309.295:2228): avc: denied { map_read map_write } for pid=6274 comm="syz.2.1730" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 415.763033][ T28] audit: type=1400 audit(1751134309.313:2229): avc: denied { read } for pid=6274 comm="syz.2.1730" dev="nsfs" ino=4026532632 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 415.785458][ T28] audit: type=1400 audit(1751134309.313:2230): avc: denied { open } for pid=6274 comm="syz.2.1730" path="net:[4026532632]" dev="nsfs" ino=4026532632 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 415.808969][ T28] audit: type=1400 audit(1751134309.323:2231): avc: denied { create } for pid=6274 comm="syz.2.1730" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 415.828940][ T28] audit: type=1400 audit(1751134309.360:2232): avc: denied { getopt } for pid=6274 comm="syz.2.1730" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 416.795916][ T286] block device autoloading is deprecated and will be removed. [ 416.823602][ T4961] udevd[4961]: setting mode of /dev/loop0 to 060660 failed: Read-only file system [ 416.837329][ T4961] udevd[4961]: setting owner of /dev/loop0 to uid=0, gid=6 failed: Read-only file system [ 417.834449][ T4902] udevd[4902]: symlink '../../loop0' '/dev/disk/by-diskseq/177.tmp-b7:0' failed: Read-only file system [ 417.861194][ T6309] loop0: detected capacity change from 0 to 2048 [ 418.177693][ T4902] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 418.194550][ T4902] udevd[4902]: symlink '../../loop0' '/dev/disk/by-diskseq/178.tmp-b7:0' failed: Read-only file system [ 418.234990][ T4902] udevd[4902]: symlink '../../loop0' '/dev/disk/by-diskseq/178.tmp-b7:0' failed: Read-only file system [ 418.249746][ T4902] udevd[4902]: symlink '../../loop0' '/dev/disk/by-diskseq/178.tmp-b7:0' failed: Read-only file system [ 418.264486][ T4902] udevd[4902]: symlink '../../loop0' '/dev/disk/by-diskseq/178.tmp-b7:0' failed: Read-only file system [ 418.349937][ T6323] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1740'. [ 418.400099][ T6323] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6323 comm=syz.0.1740 [ 418.783991][ T4902] udevd[4902]: symlink '../../loop0' '/dev/disk/by-diskseq/179.tmp-b7:0' failed: Read-only file system [ 418.802840][ T6328] loop0: detected capacity change from 0 to 128 [ 418.817221][ T4902] udevd[4902]: symlink '../../loop0' '/dev/disk/by-diskseq/180.tmp-b7:0' failed: Read-only file system [ 418.828786][ T6328] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 418.838886][ T4902] udevd[4902]: symlink '../../loop0' '/dev/disk/by-uuid/76b65be2-f6da-4727-8c75-0525a5b65a09.tmp-b7:0' failed: Read-only file system [ 418.853229][ T6328] ext4 filesystem being mounted at /349/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 419.493141][ T6358] futex_wake_op: syz.1.1754 tries to shift op by -1; fix this program [ 419.607621][ T28] kauditd_printk_skb: 63 callbacks suppressed [ 419.607644][ T28] audit: type=1400 audit(1751134313.383:2296): avc: denied { create } for pid=6355 comm="syz.1.1754" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 419.776627][ T286] EXT4-fs (loop0): unmounting filesystem. [ 419.809770][ T28] audit: type=1400 audit(1751134313.542:2297): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 419.849640][ T28] audit: type=1400 audit(1751134313.617:2298): avc: denied { read write } for pid=6360 comm="syz.2.1755" name="vhost-vsock" dev="devtmpfs" ino=268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 419.877075][ T28] audit: type=1400 audit(1751134313.617:2299): avc: denied { open } for pid=6360 comm="syz.2.1755" path="/dev/vhost-vsock" dev="devtmpfs" ino=268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 419.921362][ T6362] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 419.929209][ T28] audit: type=1400 audit(1751134313.617:2300): avc: denied { ioctl } for pid=6360 comm="syz.2.1755" path="/dev/vhost-vsock" dev="devtmpfs" ino=268 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 419.988489][ T6362] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 419.999369][ T28] audit: type=1400 audit(1751134313.673:2301): avc: denied { map_read map_write } for pid=6360 comm="syz.2.1755" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 420.092720][ T28] audit: type=1400 audit(1751134313.729:2302): avc: denied { append } for pid=6360 comm="syz.2.1755" name="001" dev="devtmpfs" ino=182 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 420.129526][ T28] audit: type=1400 audit(1751134313.869:2303): avc: denied { read write } for pid=286 comm="syz-executor" name="loop0" dev="devtmpfs" ino=912 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 420.149486][ T6369] 9pnet_fd: Insufficient options for proto=fd [ 420.160184][ T28] audit: type=1400 audit(1751134313.869:2304): avc: denied { open } for pid=286 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=912 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 420.184969][ T28] audit: type=1400 audit(1751134313.869:2305): avc: denied { ioctl } for pid=286 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=912 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 420.232372][ T6376] loop0: detected capacity change from 0 to 128 [ 420.245420][ T6376] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 420.254402][ T6376] ext4 filesystem being mounted at /353/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 420.293034][ T286] EXT4-fs (loop0): unmounting filesystem. [ 420.700255][ T1895] usb 4-1: new full-speed USB device number 36 using dummy_hcd [ 421.844423][ T1895] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 421.871457][ T1895] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 421.881665][ T1895] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 421.940742][ T1895] usb 4-1: New USB device found, idVendor=056a, idProduct=005d, bcdDevice= 0.00 [ 421.999471][ T1895] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 422.011527][ T1895] usb 4-1: config 0 descriptor?? [ 422.049533][ T6415] futex_wake_op: syz.0.1773 tries to shift op by -1; fix this program [ 422.112716][ T6417] FAULT_INJECTION: forcing a failure. [ 422.112716][ T6417] name failslab, interval 1, probability 0, space 0, times 0 [ 422.116792][ T6418] loop0: detected capacity change from 0 to 512 [ 422.125397][ T6417] CPU: 0 PID: 6417 Comm: syz.1.1772 Not tainted 6.1.141-syzkaller-00033-g36d69f6a49eb #0 [ 422.125425][ T6417] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 422.125436][ T6417] Call Trace: [ 422.125443][ T6417] [ 422.125450][ T6417] __dump_stack+0x21/0x24 [ 422.162000][ T6417] dump_stack_lvl+0xee/0x150 [ 422.166608][ T6417] ? __cfi_dump_stack_lvl+0x8/0x8 [ 422.171661][ T6417] ? call_rcu+0xb83/0xf90 [ 422.176013][ T6417] ? exit_to_user_mode_loop+0x9b/0xb0 [ 422.181404][ T6417] dump_stack+0x15/0x24 [ 422.185574][ T6417] should_fail_ex+0x3d4/0x520 [ 422.186100][ T6418] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 422.190256][ T6417] __should_failslab+0xac/0xf0 [ 422.190282][ T6417] ? tracepoint_probe_unregister+0x1e6/0x8b0 [ 422.190301][ T6417] should_failslab+0x9/0x20 [ 422.215285][ T6417] __kmem_cache_alloc_node+0x3d/0x2c0 [ 422.220672][ T6417] ? __cfi_mutex_lock+0x10/0x10 [ 422.225531][ T6417] ? delete_node+0x2b3/0xa60 [ 422.230141][ T6417] ? tracepoint_probe_unregister+0x1e6/0x8b0 [ 422.236139][ T6417] __kmalloc+0xa1/0x1e0 [ 422.240312][ T6417] ? __cfi___bpf_trace_sched_switch+0x10/0x10 [ 422.246396][ T6417] tracepoint_probe_unregister+0x1e6/0x8b0 [ 422.252221][ T6417] bpf_probe_unregister+0x61/0x70 [ 422.257263][ T6417] bpf_raw_tp_link_release+0x63/0x90 [ 422.262559][ T6417] bpf_link_free+0x13a/0x390 [ 422.267171][ T6417] ? bpf_link_put_deferred+0x20/0x20 [ 422.272480][ T6417] ? security_file_free+0xd8/0xf0 [ 422.277536][ T6417] bpf_link_release+0x15f/0x170 [ 422.282401][ T6417] ? __cfi_bpf_link_release+0x10/0x10 [ 422.287797][ T6417] __fput+0x1fc/0x8f0 [ 422.291803][ T6417] ____fput+0x15/0x20 [ 422.295797][ T6417] task_work_run+0x1db/0x240 [ 422.300396][ T6417] ? __cfi_task_work_run+0x10/0x10 [ 422.305500][ T6417] ? __cfi___close_range+0x10/0x10 [ 422.310614][ T6417] exit_to_user_mode_loop+0x9b/0xb0 [ 422.315816][ T6417] exit_to_user_mode_prepare+0x5a/0xa0 [ 422.321257][ T6417] syscall_exit_to_user_mode+0x1a/0x30 [ 422.326703][ T6417] do_syscall_64+0x58/0xa0 [ 422.331106][ T6417] ? clear_bhb_loop+0x30/0x80 [ 422.335774][ T6417] ? clear_bhb_loop+0x30/0x80 [ 422.340525][ T6417] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 422.346398][ T6417] RIP: 0033:0x7f6e45b8e929 [ 422.350798][ T6417] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 422.370394][ T6417] RSP: 002b:00007f6e46962038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 422.378804][ T6417] RAX: 0000000000000000 RBX: 00007f6e45db6160 RCX: 00007f6e45b8e929 [ 422.386763][ T6417] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000000 [ 422.394725][ T6417] RBP: 00007f6e46962090 R08: 0000000000000000 R09: 0000000000000000 [ 422.402765][ T6417] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 422.410719][ T6417] R13: 0000000000000000 R14: 00007f6e45db6160 R15: 00007fff1d675608 [ 422.418677][ T6417] [ 422.422318][ T6414] CFI failure at __traceiter_sched_switch+0x9b/0xd0 (target: tp_stub_func+0x0/0x10; expected type: 0xee1f7a69) [ 422.434079][ T6414] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 422.440123][ T6414] CPU: 1 PID: 6414 Comm: syz.0.1773 Not tainted 6.1.141-syzkaller-00033-g36d69f6a49eb #0 [ 422.449897][ T6414] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 422.459926][ T6414] RIP: 0010:__traceiter_sched_switch+0x9b/0xd0 [ 422.466144][ T6414] Code: 80 3c 30 00 74 05 e8 b4 56 69 00 49 8b 7d 08 44 89 e6 48 8b 55 c8 48 8b 4d c0 44 8b 45 d4 41 ba 97 85 e0 11 45 03 57 fc 74 02 <0f> 0b 41 ff d7 48 83 c3 18 48 89 d8 48 c1 e8 03 42 80 3c 30 00 74 [ 422.485756][ T6414] RSP: 0018:ffffc90010ca7330 EFLAGS: 00010096 [ 422.491809][ T6414] RAX: 1ffff11022f72866 RBX: ffff888117b94328 RCX: ffff888110763cc0 [ 422.499779][ T6414] RDX: ffff88811d006540 RSI: 0000000000000001 RDI: ffffc90010cb1000 [ 422.507818][ T6414] RBP: ffffc90010ca7370 R08: 0000000000000000 R09: fffffbfff0ee43ee [ 422.515852][ T6414] R10: 00000000b720eca3 R11: 1ffffffff0ee43ed R12: 0000000000000001 [ 422.523798][ T6414] R13: ffff888117b94328 R14: dffffc0000000000 R15: ffffffff81711370 [ 422.531747][ T6414] FS: 00007f20493f46c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 422.540663][ T6414] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 422.547238][ T6414] CR2: 00007ffe09697838 CR3: 00000001130d7000 CR4: 00000000003506a0 [ 422.555194][ T6414] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 422.563152][ T6414] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 422.571113][ T6414] Call Trace: [ 422.574380][ T6414] [ 422.577293][ T6414] __schedule+0x1263/0x14e0 [ 422.581780][ T6414] ? release_firmware_map_entry+0x194/0x194 [ 422.587668][ T6414] ? ttwu_do_activate+0x174/0x280 [ 422.592674][ T6414] ? preempt_schedule+0xa7/0xb0 [ 422.597500][ T6414] preempt_schedule_common+0x9b/0xf0 [ 422.602789][ T6414] preempt_schedule+0xa7/0xb0 [ 422.607441][ T6414] ? __cfi_preempt_schedule+0x10/0x10 [ 422.612788][ T6414] ? autoremove_wake_function+0x37/0x110 [ 422.618397][ T6414] preempt_schedule_thunk+0x16/0x18 [ 422.623573][ T6414] _raw_spin_unlock_irqrestore+0x6f/0x80 [ 422.629187][ T6414] __wake_up_sync_key+0x166/0x280 [ 422.634353][ T6414] ? __cfi___wake_up_sync_key+0x10/0x10 [ 422.639891][ T6414] ? __skb_try_recv_datagram+0x3da/0x4d0 [ 422.645512][ T6414] ? __cfi_sk_busy_loop_end+0x10/0x10 [ 422.650869][ T6414] __unix_dgram_recvmsg+0x496/0xd70 [ 422.656055][ T6414] ? _raw_spin_unlock+0x4c/0x70 [ 422.660886][ T6414] ? __cfi___unix_dgram_recvmsg+0x10/0x10 [ 422.666585][ T6414] ? release_firmware_map_entry+0x194/0x194 [ 422.672468][ T6414] ? __sys_recvmsg_sock+0x11/0x50 [ 422.677472][ T6414] unix_dgram_recvmsg+0xc7/0xe0 [ 422.682303][ T6414] ? __cfi_unix_dgram_recvmsg+0x10/0x10 [ 422.687824][ T6414] ____sys_recvmsg+0x2a0/0x590 [ 422.692563][ T6414] ? __sys_recvmsg_sock+0x50/0x50 [ 422.697563][ T6414] ? import_iovec+0x7c/0xb0 [ 422.702047][ T6414] ___sys_recvmsg+0x1b2/0x510 [ 422.706701][ T6414] ? __sys_recvmsg+0x270/0x270 [ 422.711452][ T6414] ? cgroup_rstat_updated+0xf5/0x370 [ 422.716714][ T6414] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 422.722847][ T6414] ? do_recvmmsg+0x371/0x7a0 [ 422.727779][ T6414] do_recvmmsg+0x359/0x7a0 [ 422.732190][ T6414] ? __sys_recvmmsg+0x280/0x280 [ 422.737028][ T6414] __x64_sys_recvmmsg+0x18d/0x240 [ 422.742060][ T6414] ? __cfi___x64_sys_recvmmsg+0x10/0x10 [ 422.747577][ T6414] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 422.753724][ T6414] x64_sys_call+0x3e7/0x9a0 [ 422.758207][ T6414] do_syscall_64+0x4c/0xa0 [ 422.762614][ T6414] ? clear_bhb_loop+0x30/0x80 [ 422.767267][ T6414] ? clear_bhb_loop+0x30/0x80 [ 422.771920][ T6414] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 422.777786][ T6414] RIP: 0033:0x7f204858e929 [ 422.782214][ T6414] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 422.801795][ T6414] RSP: 002b:00007f20493f4038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 422.810271][ T6414] RAX: ffffffffffffffda RBX: 00007f20487b6080 RCX: 00007f204858e929 [ 422.818218][ T6414] RDX: 03fffffffffffeda RSI: 00002000000000c0 RDI: 0000000000000003 [ 422.826164][ T6414] RBP: 00007f2048610b39 R08: 0000000000000000 R09: 0000000000000000 [ 422.834110][ T6414] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 422.842056][ T6414] R13: 0000000000000001 R14: 00007f20487b6080 R15: 00007ffc6cfb1d18 [ 422.850005][ T6414] [ 422.853002][ T6414] Modules linked in: [ 422.856895][ T6414] ---[ end trace 0000000000000000 ]--- [ 422.862416][ T6414] RIP: 0010:__traceiter_sched_switch+0x9b/0xd0 [ 422.868580][ T6414] Code: 80 3c 30 00 74 05 e8 b4 56 69 00 49 8b 7d 08 44 89 e6 48 8b 55 c8 48 8b 4d c0 44 8b 45 d4 41 ba 97 85 e0 11 45 03 57 fc 74 02 <0f> 0b 41 ff d7 48 83 c3 18 48 89 d8 48 c1 e8 03 42 80 3c 30 00 74 [ 422.888254][ T6414] RSP: 0018:ffffc90010ca7330 EFLAGS: 00010096 [ 422.894302][ T6414] RAX: 1ffff11022f72866 RBX: ffff888117b94328 RCX: ffff888110763cc0 [ 422.902249][ T6414] RDX: ffff88811d006540 RSI: 0000000000000001 RDI: ffffc90010cb1000 [ 422.910196][ T6414] RBP: ffffc90010ca7370 R08: 0000000000000000 R09: fffffbfff0ee43ee [ 422.918169][ T6414] R10: 00000000b720eca3 R11: 1ffffffff0ee43ed R12: 0000000000000001 [ 422.926121][ T6414] R13: ffff888117b94328 R14: dffffc0000000000 R15: ffffffff81711370 [ 422.934066][ T6414] FS: 00007f20493f46c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 422.942979][ T6414] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 422.949554][ T6414] CR2: 00007ffe09697838 CR3: 00000001130d7000 CR4: 00000000003506a0 [ 422.957516][ T6414] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 422.965474][ T6414] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 422.973430][ T6414] Kernel panic - not syncing: Fatal exception [ 424.083337][ T6414] Shutting down cpus with NMI [ 424.088378][ T6414] Kernel Offset: disabled [ 424.092693][ T6414] Rebooting in 86400 seconds..