last executing test programs: 39m23.506224994s ago: executing program 32 (id=2389): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) write$cgroup_subtree(r2, &(0x7f0000000140)={[{0x2b, 'cpu'}]}, 0x5) 39m21.118495276s ago: executing program 33 (id=2401): r0 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r0, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x8, @loopback}, 0x1c) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x88e, &(0x7f0000000080)={[{@errors_remount}, {@mblk_io_submit}, {@inlinecrypt}, {@test_dummy_encryption_v1}, {@barrier}, {@mblk_io_submit}, {@nogrpid}]}, 0x3, 0x445, &(0x7f0000000800)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000040)=0x1000, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x3d10, 0x4) recvmmsg(r0, &(0x7f0000000080), 0x5e2, 0x2001, 0x0) 38m33.797527101s ago: executing program 34 (id=2660): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x4}}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) chdir(&(0x7f0000000000)='./file0\x00') mount$incfs(0x0, &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x0) unlink(&(0x7f0000000080)='./file0\x00') 26m38.819220699s ago: executing program 2 (id=5687): syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x801, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x18) utime(&(0x7f0000000200)='./file0\x00', 0x0) 26m38.818760299s ago: executing program 2 (id=5688): rt_sigaction(0x40, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f00000002c0)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x4, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000030000008500000086000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x800700, &(0x7f0000000340)={[{@grpjquota}, {@discard}, {@norecovery}, {@noinit_itable}, {@test_dummy_encryption}, {@minixdf}, {@usrjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@jqfmt_vfsold}, {@dioread_lock}, {@noblock_validity}, {@nouid32}]}, 0x3, 0x465, &(0x7f0000000f00)="$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") 26m36.890381064s ago: executing program 2 (id=5696): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) symlink(&(0x7f0000001640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', &(0x7f0000000e40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x44, 0x86}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) syz_mount_image$exfat(&(0x7f0000000180), &(0x7f0000000380)='./cgroup\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYRESOCT, @ANYRESHEX], 0x1, 0x1534, &(0x7f0000002d00)="$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") symlink(&(0x7f0000000340)='.\x00', &(0x7f0000000240)='./file0\x00') chmod(&(0x7f0000000100)='./file0\x00', 0x35b) rmdir(&(0x7f00000002c0)='./file0\x00') timer_create(0x0, 0x0, &(0x7f0000000040)) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000ac0), 0x1, 0x44a, &(0x7f0000000400)="$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") write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) utime(&(0x7f0000000880)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', &(0x7f0000000300)={0x0, 0x2}) 26m34.242002157s ago: executing program 2 (id=5705): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001480)=@base={0x6, 0x4, 0x8, 0x8}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r2, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 26m33.254172417s ago: executing program 2 (id=5710): mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)={[{@subsystem='cpuset'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]}) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, 0x0, 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000140), 0x12) syz_clone(0x140011, 0x0, 0x0, 0x0, 0x0, 0x0) 26m31.707641191s ago: executing program 2 (id=5713): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @empty, 0xfffffffc}, 0x1c) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00'}, 0x80) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) r5 = fsmount(r2, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000380)={r1, r5, 0x1, 0x0, @void}, 0x10) write(r0, &(0x7f0000000180)="b1f6a4e6086771339298ff93c614cda94476d7b3650dace6ffd148ee98b8cb08591ffc2467faa14e", 0x28) 26m16.129625553s ago: executing program 35 (id=5713): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @empty, 0xfffffffc}, 0x1c) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00'}, 0x80) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) r5 = fsmount(r2, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000380)={r1, r5, 0x1, 0x0, @void}, 0x10) write(r0, &(0x7f0000000180)="b1f6a4e6086771339298ff93c614cda94476d7b3650dace6ffd148ee98b8cb08591ffc2467faa14e", 0x28) 10m30.326345395s ago: executing program 8 (id=8532): socket$nl_generic(0x10, 0x3, 0x10) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x1100) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) getpid() bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x824759, &(0x7f00000000c0)={[{@dax_inode}], [{@smackfsfloor={'smackfsfloor', 0x3d, 'journal_checksum'}}, {@flag='posixacl'}], 0x2c}, 0x3, 0x503, &(0x7f0000000c00)="$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") prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = accept$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000280)=0x1c) getsockopt$IP6T_SO_GET_REVISION_MATCH(r1, 0x29, 0x44, &(0x7f0000000300)={'ah\x00'}, &(0x7f0000000340)=0x1e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@delneigh={0x44, 0x1a, 0x1, 0x70bd2b, 0x0, {0xa, 0x0, 0x0, 0x0, 0x80, 0x0, 0x4}, [@NDA_CACHEINFO={0x14, 0x3, {0x7}}, @NDA_DST_IPV6={0x14, 0x1, @private1}]}, 0x44}}, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) mount$cgroup(0x0, &(0x7f0000000600)='.\x00', &(0x7f0000000640), 0x2008000, &(0x7f0000000e00)={[{@none}, {}]}) 10m29.420578258s ago: executing program 8 (id=8539): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x20140, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) io_submit(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8000, 0x20000000019}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000008000000020000000400000005"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r6, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xe, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r9, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3f0, 0x0, 0x0, 0xe8, 0x308, 0x308, 0x308, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x5, 0xff}}}, {{@uncond, 0xc0, 0x110, 0x0, {0x0, 0x1e03}}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local, @multicast2, 0x2}}}, {{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, 0x0, 0x0, 0x0, 0x0, {@mac=@broadcast}, {@empty, {[0x0, 0x0, 0x0, 0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pim6reg0\x00', 'netpci0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@local, @private=0xa010101, @rand_addr=0x64010100, 0x4}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000002c0)='generic_add_lease\x00', r2}, 0x18) 10m28.431627127s ago: executing program 8 (id=8548): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000da06f76992669d5e03eb05c5c54ad02c86ff3a24bbd088ab6f14c89e9f8de9a437b48baa02ec70552b5593f01291682679d176ce89cf6b37f395a8b43cc4634884514c977ca52ec233978c9a763df4d49589b90b269b46e23034eba4379ece9ac76d27bdd8e1888cef6ce1f49d074960c7d533de56275f5a7525d581d4df33aecda36e76fd051d2086e27922749e0512e04765e7b4ab49c20a2e0094fe99174f7e30f3869757844f81b74e56d6164a525bea2c64bb8b45089c50cb647cc88f7b4450378bce9a74362292e0f9a8b464f63538871181"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) process_vm_writev(0x0, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80), 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18010000000000000000000000000000070000006d0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='sys_enter\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) r4 = gettid() timer_create(0x0, &(0x7f00000003c0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000000380)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r7, 0x0, r6, 0x0, 0x3, 0x0) fcntl$setpipe(r5, 0x4, 0xfffffffffffff000) fdatasync(0xffffffffffffffff) ftruncate(0xffffffffffffffff, 0x7d93) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x88e, &(0x7f0000000540)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}, {@mblk_io_submit}, {@bh}, {@auto_da_alloc}, {@barrier}, {@test_dummy_encryption}, {@nogrpid}]}, 0x3, 0x445, &(0x7f0000000800)="$eJzs3M9rHFUcAPDv7CZt06YmlvqjadVoFYM/kiattQcvioIHBUEP9RiTtMRuG2ki2BI0itSjFLyLR8G/wJNeRD0JXvUuhSK5tIqHldmdSXY3u2k2blzNfj4wyXszb3nvuzNv9715mQTQs0bTH0nEYET8EhFD1Wx9gdHqr9uryzN/rC7PJFEuv/57Uil3a3V5Ji+av+5AnumLKHycxNEm9S5euXphulSau5zlJ5YuvjOxeOXq0/MXp8/PnZ+7NHXmzKmTk8+ennqmI3Gmcd0aeX/h2JGX37z+6szZ62/98FWSx98QR4eMbnbwsXK5w9V118GadNLXxYbQlmK1m0Z/pf8PRTHWT95QvPRRVxsH7KhyuVy+t/XhlTKwiyXR7RYA3ZF/0afz33zbfMDQ0eFH1918vjoBSuO+nW3VI31RyMr0N8xvO2k0Is6u/Pl5usXO3IcAAKjzTTr+earZ+K8QtfeF7srWUIYj4u6IOBQRpyPicETcE1Epe19E3N9m/Y2LJBvHP4Ub2wpsi9Lx33PZ2lb9+C8f/cVwMcsdrMTfn5ybL82dyN6Tsejfm+YnN6nj2xd//rTVsdrxX7ql9edjwawdN/r21r9mdnpp+p/EXOvmhxEjfc3iT9ZWApKIOBIRI9usY/6JL4+1Onbn+JurvCUdWGcqfxHxePX8r0RD/Llk8/XJiX1RmjsxkV8VG/3407XXWtW/3fg7JT3/+5te/2vxDye167WL7ddx7ddPWs5ptnv970neqNv33vTS0uXJiD3JK9VG1+6faig3tV4+jX/sePP+fyjW34mjEZFexA9ExIMR8VDW9ocj4pGIOL5J/N+/8OjbdTvGBtuIf2el8c+2df7XE3uicU/zRPHCd1/XVTocbcSfnv9TldRYtmcrn39badf2rmYAAAD4/ylExGAkhfG1dKEwPl79G/7Dsb9QWlhcevLcwruXZqvPCAxHfyG/0zVUcz90MpvW5/mphvzJ7L7xZ8WBSn58ZqE02+3goccdaNH/U78Vu906YMd5Xgt6l/4PvUv/h96l/0PvatL/Bzbu+qvhkUFgN2j2/f9BF9oB/Psa+r9lP+gh5v/Qu/R/6F36P/SkxYG480PyEhIbElH4TzRj5xP7tvhvLnZZotufTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ3xdwAAAP//FX7vJg==") r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) r9 = openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) write$selinux_access(r9, &(0x7f0000000740)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a6c645f736f5f7420704a122f7362696e2f6468636c69656e742030"], 0x41) write$binfmt_script(r8, &(0x7f0000000040), 0x208e24b) r10 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r10, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) 10m27.534667849s ago: executing program 8 (id=8550): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x3, &(0x7f0000000140)={[{@errors_remount}, {@noload}, {@noblock_validity}, {@bsdgroups}, {@nobarrier}]}, 0x1, 0x625, &(0x7f0000000800)="$eJzs3c1vFOUfAPDvbLfvv58txKh4kCbGQKK0tIIhxkS4G4IvN71UWgihUEJrYpHEkuhN48WDiScP4l9hJPHqP+DBiydDQozhIIbImpmdbaftbunb7pT280mGzsvuPN8Bvn2effZ5ZgLYt0bSPyoRhyLiWhIxVDhWjfzgSP119/+6eT5dkqjV3v0ziZufJovFcyX5zwP5m/8diiR9+8GJH9eUO7dw4/LkzMz09WyrN9+7cOPYpSuTF6cvTl+deG3i1MkTJ0+NH9/+9RUvJ+L97799mIz/8NvZJE7Ho676zvS6Vr+3d1slp2WPRK3uQXF/GsipbZ57t/h7aPkvtq4/kmpp4bBJF/L/j90R8WwMRVfhX3MoPn+71OCAtqol0aijgH0n2VL+9+18IECHNdoBjc/2zT4Hr1Vpc6sE6IR7Z+odAPXc746IRv5X876zvqxvYOB+sqKfJ4mI7fXM1aVl/PLz2c/SJVr0wwHtsXirN++3X13/J1luDkdftjVwv7Ii/yuFJd3/zhbLH1m1Lf+hcxZvRcRzef3fE5vK/5FC/n+4xfLlPwAAAAAAAOycO2ci4pVm4/8qS+N/epqM/xmMiNM7UP7jv/+r3M1Xkh0oDii4dybijabjf5fG+A535Vv/z8YDdCcXLs1MH4+IpyLiaHT3ptvjq85bHCF87MuD37Qqvzj+L13S8htjAfMz3a2umog7NTk/ud3rBiLu3Yp4Phv/ezjfs3L8T1r/J03q/zS/r22wjIMv3T7X6tjj8x9ol9p3EUea1v/Lze10bWz+yrWxuab35xjL2gNjjVZBw3IL4IVPvhpsVf46+e8uEtBmaf0/sH7+9ybF+/XMbe78PRHx6kK11ur4Vtv/Pcl7XY3zpz6enJ+/Ph7Rk7y1dv/E5mKGvaqRD418SfP/6Ivr9/8ttf8LedgfEYurT96ih+6ZR4O/t4pH+x/Kk+b/1Pr1//DK+n/zKxO3h39qVf65DdX/J7I6/Wi+R/8fFK29H8eaLByIpglaSrgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8ISrRMT/IqmMLq1XKqOjEYMR8XQMVGZm5+ZfvjD70dWp9Fj2/P9K40m/Q/XtpPH8/+HC9sTK7f60rAMR8XVXf3Z89PzszFTZFw8AAAAAAAAAAAAAAAAAAAC7xGA257/Wu3r+f+qPrrKjA9qumv9czvee0mIBOivP/y8+2PQ7a707Hw3QSdWyAwBKs/H8725rHEDntc7/Bw9rmY6GA3SQ9j/sX1vMf18Pwh6g/of9aoN9en3tjgMog/ofAAAAAAD2lAOH7/yaRMTi6/3ZEoXJvwb7w95WKTsAoDTG8ML+VZ0tOwKgLD7jA8nS2j9NJ/u3Hv2ftCcgAAAAAAAAAAAAAGCNI4fM/4f9av35/8b2w162zvz/LPmzRwM8rG3g5cCTpvWjP9T9sNet8xnfA79gn3hcbW/+PwAAAAAAAAAAAADsAn03Lk/OzExfn1t48lbe3B1hbG5lcXJXhLHdlf6IWNrzqD1ldUdE+Ve6cyvViMrGXty4BUeJMZf8ewkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFjyXwAAAP//CHogwg==") r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x105042, 0x1d3) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) timerfd_gettime(0xffffffffffffffff, 0x0) r5 = syz_clone(0x80400, &(0x7f0000001200), 0x0, &(0x7f0000001240), &(0x7f0000001280), &(0x7f00000012c0)="d2844f1d2c320ad3fd01af7890f10b4bd5f8557859ba3eb53c0fbd9511e2d01a00fd34567d842e3975bee1ce079773d6d1cbe2c74b3b7cd7b8b8ea2e85665052df601eaf24") read$FUSE(r3, &(0x7f0000001340)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000003c00)=@bpf_ext={0x1c, 0x12, &(0x7f0000003a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffff}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @exit, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}]}, &(0x7f0000003ac0)='syzkaller\x00', 0xffffffff, 0x3, &(0x7f0000003b00)=""/3, 0x41000, 0x20, '\x00', 0x0, 0x0, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000003b40)={0x5, 0x8, 0x7fffffff, 0x100}, 0x10, 0x18bf9, r3, 0x4, &(0x7f0000003b80)=[r3, r3], &(0x7f0000003bc0)=[{0x4, 0x2, 0xf, 0xc}, {0x0, 0x2, 0x6, 0x9}, {0x3, 0x5, 0x9, 0x4}, {0x1, 0x1, 0x10, 0xb}], 0x10, 0xffffffc0}, 0x94) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000003cc0)={r1, 0x4, 0xfff, 0x7f}) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r9}, 0x10) ioctl$NS_GET_OWNER_UID(r3, 0xb704, &(0x7f0000003f00)=0x0) r11 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) fstat(r12, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$system_posix_acl(r11, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="02000000010001000000000002000300", @ANYRES32=0xee00, @ANYBLOB="040004000000000008000300", @ANYRES32=r13, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r13, @ANYBLOB="08000600", @ANYRES32=r13, @ANYBLOB="08000100", @ANYRES32=r13, @ANYBLOB="08000500", @ANYRES32=r13, @ANYBLOB="100006000000000020"], 0x54, 0x1) r14 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r14, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) connect$inet(r14, &(0x7f0000000280)={0x2, 0x4, @multicast1}, 0x10) sendmmsg$inet(r14, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x7e1f, 0x0}, 0xee0000b0}, {{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001100)="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", 0xc3}, {&(0x7f0000000d80)="7d68e6de85f9b0cbc9d710267f321ec64eab043ecad9af7e01e9463218ec45924a99867163e468d36a682fadd749caa325e685d75559a87139e02fae7271be8f55671cfd32a09896278d1941370174720838039d0989bc3394b8a4c4f4a30f0496be313d6d60fe47966c634a3ee1f659e8ef310647725bda0130d5de5028220a4cf5fc808a75694738ee26cb21302b4bba4265b845a5d5dce706d9820c6936b122f9658446d74a9016b94424971dd443a6907eb5c73b6b200e92b23f2c36a214729b0bc231511e4c", 0xc8}, {&(0x7f0000000380)="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", 0x9fd}], 0x3}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001700)="a6", 0x1}], 0x300}}], 0x3, 0x0) r15 = socket$inet6_tcp(0xa, 0x1, 0x0) r16 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f00000044c0)) r17 = socket$key(0xf, 0x3, 0x2) recvfrom(r17, 0x0, 0x0, 0x40000140, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000005c80)={0x0, 0x0}) read$FUSE(r3, &(0x7f0000005d00)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r20 = syz_open_dev$rtc(&(0x7f0000007d40), 0x7, 0x788c0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000080c0)=[{{&(0x7f00000002c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000f40)=[{&(0x7f0000000340)="51aadfcf1cb119046e52ce262ca28eaccfb036520cbc6b45fcdfe5ea6b661bebc3b2865394351724386aba80c9813e29cd34a11fa9dc431462522f93d98bce33009a30e6f70ef109e99538c0c23069da988d5b3cc8cd937f56e137cd8af81413a997e1d2c0a8f365a31aa89d208f2033f0d889ba953e3f9726ffba6110124350dd7b482499c4f9f73316bf603c18181e8f6f769b760f5faaf97b9e8da6bc703e698f14e40894386d80e088f61f202deee56fecfff0f94bcc008404b14ea2bf6b0170ccb2ed5504dfdaf1c8c99b26ac16a6abfb342f3bb25f25e87b57562b46ced4e2489959714e49ebccd812", 0xec}, {&(0x7f0000000440)="240877a0a4ea060575f62ad2f56093701f738cd7ab03e5feea855121afebfce9fba8170b1f0d5ec691adca1ed23e947004be1de3aec33558802552aa412667d36523350a519a63718edfec3c7a9f9bc31f95ec9e2ccfcc67fd5fe7787796dccc3abfd8a9b88f5bbbe00c2d45e373eebcb5b832784fd539975701255e77c873303ddd1c1985d203b1d2ebb425068408656a26aff1d7edaddeb259267606f5b11513233e897bab51bd533d4ffbc2a507f46b326ceb44f249ecf640a364eadb9e78f36dea0a45e19306309f29d9a74f3b48d008977deb", 0xd5}, {&(0x7f0000000540)="55469521fb809ecdbd86ea7eb31046140ad06d9c641cb04523ecccc04a7743ab465d4426ca81623dcbd449cecdddc4b5dc5bf714276385aedaf8afd7cf6db0b37aeae7a479d42b", 0x47}, {&(0x7f00000005c0)="774f628c5c8027f4b55edcc4fb62db1a026cb0c3d7404787ed33782243b5d0ab00884e84821af11da48708c420b51fa6beb735d16455740b1f6ec973be68a573ef1ff3122ccd1c23bc809ac5acc91de49ea8c56aa8602a33da547186029b8b65ee85850c407f9337e70fcadee35ef3ef646fadbaea27ea3da635ee87c332329fc8cf9ab430c2400489b95091c4e416ad5324818a9c5ba6e97510bef30fe18df88ea9b31186c943d77870eee3efb1218a4fbdcbedd4f9aa4b48c6f937706f39a99252122a221b6e5401f6320ec4efaa39cf0e1777093e47", 0xd7}, {&(0x7f00000006c0)="d87d34ced4926268365ad7eda4c1fcd2cd87f1a0a75ae92dd661153135bde4ed344890739449e5afc7c8b97db3feee99f31c93968d63a4293db8903c5a19bc7ff9037012088615369ceb7536662f034489a4681289b2f499e1c0d3cc06bdf5b7c5cb9a45bd964663a13bd6da4c9fdd14cf5ce3dedc314a9a23d91017526e446c6c97aea87235f0beb52430390df451ac9306f70759a9499d48ba64c1a5e5e2293531b1498229fab609112c7806d67920d58a4ae2c71f3df49e661c2e22277c01502c5efea3ee570cb4dc467d67", 0xcd}, {&(0x7f0000000e40)="84acafc49abf70dd7eeca8deca6836f03961142c8f3da4d48fcf9ea7e55f704e4a019dda96e99a693fc008d47594cb07ece324d812e9c24ab969355d7b971c5273df72a000407da75a8046cd2e4826e7ad6bffe50d91652e0f", 0x59}, {&(0x7f0000000ec0)="d15f968b3d7090617c2bc6d0934b100ec34920ea1a91e9511c77e1573a83cc9a0cc8b5219ba94893fed54760aedf97bc94aa55cdc5ece134e7d381c177a676af27fdd21d1a4a", 0x46}], 0x7, &(0x7f0000003380)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [r1, r3, r1, r4, r1, r3]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {r5, 0xffffffffffffffff, r6}}}], 0xe8, 0x8}}, {{0x0, 0x0, &(0x7f0000003640)=[{&(0x7f0000003480)="dca2860c47d976c36535f9fcd42f4dc7cd006b6fabaaa6bf1f77896fb72f5ef188c5636a4de541bce01bb586c10f4476c500a9", 0x33}, {&(0x7f00000034c0)="eca57836b20b3df5fe2deff31715bb54af643a1d66bd7b51a550df7f07a8ac32b4110d6b70f632b41f1920cf07d83b9e92d63f86a9abc23ee946a7d3877ce83f159b273b25838029c851c6fc8421b0d548837fd446a2ca9e6dc856a85cf2181c7503a1e47668fe4dbf52749797e579c31ba6e4056df1cd2e784266fe952ead8280187b8ec9e45266f5485b78f7ea1824866ab94bac30cc16", 0x98}, {&(0x7f0000003580)="c06721b7979715bc4c66c3e71e7f74f9c0cc1517e9311f04b290f0af8bfa09f8eda61aa000769cb6d9e249174a22040df1d29780f70f6e5314ac076331da1b4fc80a0c047bc5a8d097bee30fc62b9cf18698c31c892afa601f51e58f47ba91fd56f3c1a317cc0f3d1d4e2645e01bafb60aafa86d9aee0529ded01772c139f0fa0063a1b764180366582cd04ffffb31aad09b3441c6ffed39d65dd483920eaf45841ae281b3c7ae8ac8e2cc83ed7994104085a5ce7e", 0xb5}], 0x3, 0x0, 0x0, 0x40d4}}, {{0x0, 0x0, &(0x7f0000003980)=[{&(0x7f0000003680)="e3acf09f0076cd82650c98d25e8ce2d6066966d397fb72ecdda41d84dd5fd2d4b5760ba5acefe1ebe1f31169ae19594dc2d071cc101801892a438466f1225b45491e51243a2985d3fa6e321d8d08baa2cf9226f3d6e815eae09794a39b3b8583508151a8e4cfdd0f3432c8bbb2641747565b8b7501d1f5b6f13c5aac20dd35fdbce29b0387e4bc34afd755fe0f36ef274a4c15fdf93a1681a12c73529ab833f00c660575608d8c064ec33e5c3bfc5bc8680e72", 0xb3}, {&(0x7f0000003740)="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", 0xfe}, {&(0x7f0000003840)="29bc28", 0x3}, {&(0x7f0000003880)="861e60d659e10a32ad0e25aa9c9cfb3a0c100f45dd9d8d112740d6f815f74464c72a39b750cbd95dcf08e2e63eb5a8d45dbd7480ed686a928094d3acc618669384f6771a4944639f882dbf4ed88b0d8a3d98eb5247c5890980671376f3ebc2fe4eafa0db63fee7da12321819652f501297215b40", 0x74}, {&(0x7f0000003900)="c1c2fd3bd3f3471a4c3494dd29bc0da3560c6d89c1205a829114304f7c50204ff327450210fad0ebf0104273d08c917bba0ad904950db04328ffb1ce767d3ac106de85e161ec6ae2e5449e683ef5f4c26f3752", 0x53}], 0x5, &(0x7f0000003d00)=[@rights={{0x1c, 0x1, 0x1, [r7, r0, r8]}}], 0x20, 0xd4}}, {{&(0x7f0000003d40)=@file={0x1, './file0/file0\x00'}, 0x6e, &(0x7f0000003ec0)=[{&(0x7f0000003dc0)="583fe8fcfb5732f27346ec6f440dd75c083386d23c4b8ec1f4eac5bc4a3c9d9c44eda04beceb67f93330b80f7f9ff864a77faad8fccbbe9376144338c3e7a57729fb48430b3d7397da814f23b868982da86f7b89504c3de872538d778b1b606597450da1fa431aadb3ecd5ccc99dca0115cea37e8f32857fa210689ba43854fcd9af58df6c1d78d570ec8cb31cb6478d840fd07e3fd0c4c3127a78bebe76eeadbd0518add3adc4a96d4dff1c39d66b00f0e1fe03ce0462af4c77303b22953b7f0df5cffaa48dca02e5930a88d7ffe1d48e1bfd7585a885c42ab2f88fccfbd6993f8ef124b351170be5acafc8a4df6b03eab58a5f76046a", 0xfffffffffffffcab}], 0x1, &(0x7f0000003f40)=[@rights={{0x24, 0x1, 0x1, [r2, r3, r3, r9, r4]}}, @rights={{0x14, 0x1, 0x1, [r1]}}, @rights={{0x38, 0x1, 0x1, [r1, r17, r4, r2, r4, r3, r2, r3, r4, r3]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r10, r13}}}, @rights={{0x30, 0x1, 0x1, [r4, r1, r14, r2, r0, r15, r1, r2]}}], 0xc8, 0x10}}, {{&(0x7f0000004040)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f00000042c0)=[{&(0x7f00000040c0)="edf030493f738efe5fbf1d803e716af5d5d1f5f394f4a63d74bc307ef0008609b35b1f14aeab23a898bb10febd44aa6903d5a1386f82d215a8ff2a70ec9b4ae526b18976e8aba78d1d0d4af8dd3f31523b215486d803e73498223df7720d3cdc63aa94e2de0ee61ff70ad23671cd86084a73cd747913c5054046c381e365cca43a8765b2e92d4c80b0141b217be426b5ab5d159e53352cfb19bb3a79b9e7ae33f14c0c087523825a751efd16caf25ba53eae81a763460333fcdb0fe921d5c2bc8ff6b251ba7e5a7086f74e837d91301fe4ffc6f96f5a9988", 0xd8}, {&(0x7f00000041c0)="656e911da9156738c0878d6136ee0fa7a0f7828e23d9d9282ddf7edd7799c038401df14bc7f19bfe6c8c84791e1d464d76157fa1f2aefa6cf0c513be3e83c942723f56186a9db0cbfefb13031eccdde4fe4dd6aba4d9373ed7010592791075f35d5057a43f62248d62bb193b8acbf9d6cb95bd7d38e36d3bfe9600f8457d342fef89", 0x82}, {&(0x7f0000004280)="b7f996628c7fae2025edb6186db2f444f67e774181", 0x15}], 0x3, 0x0, 0x0, 0x48041}}, {{0x0, 0x0, &(0x7f0000004480)=[{&(0x7f0000004300)="c1c23754c793c8fbb609ff2c6edb8f59221e086a68ecfc1d1527f50ea219a669f8a4ffacf6a43214346c27890498cb4186dbaf5a4011d275800697613f49198f1c9e0ce4520e9b1e49d6830e3705ba6a84e7acb8ed153f177a96cf5b6e28f9c6653db4848727b7bad1fc3a48c837b08514caf133549adae9d5455cf2baa519", 0x7f}, {&(0x7f0000004380)="e2213c4e0d3b997e3717ca4c69342d5b77eef1294338fafaccc63485043e90e45896931f65586fde6fb82551613b7319e207378c1333eaec284d61acf0503af7eb154565686a876f1bf91c17ac41457475966a2913b67b7124fe58049ab56e61f38a1be6aded2a5633bc22dd566ba618f4bca89f159226eca5a33280d97af88e015602be0173393f10d63288fbd86c5c0c1d7b781d3ee461b08c4a7b26873662505aa5894082f6180e29a7c5569edc05e1dc0fa03814f3435246800e6a01b25462b8a5b4de47ee94cb9ca2860d9a73826ab01eda744e07762203bf4b", 0xdc}], 0x2, &(0x7f0000004500)=[@rights={{0x28, 0x1, 0x1, [r4, r0, r1, r16, r1, r17]}}], 0x28, 0x4000001}}, {{&(0x7f0000004540)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000008300)=[{&(0x7f00000045c0)="059327fb7becb3ac5fe7ec07028cb5740c53c8a5f9da6a37df4b12d3a21414d179e0a8a186eeeb6e287f4ca3fccdc903f11e31e850b8cfc0d033480b33d1656a19949da338dd72e445b01a019fdb4c86410db7fdae2a017525d8231578c5b78505bc0da8e671e5ce53aa9e7c2249a924368e2bd6904c563a36574898990f35eaa4b18440bd745955d1b949a7ad24", 0x8e}, {&(0x7f0000004680)="055aa914d4623f1d96b18ab0b8e960fed36305aec825b9801edbfe48f17f98db967964a795438810", 0x28}, {&(0x7f00000046c0)="0d4f3812b0cfa5fe4d030069f1f7ca03f0733d0c48bed40b0a1eea960b5fb402184cf3a99fe6995adf30491d472ab6c63c100f8a4afab8b769345679f5c4fcd86095074f98a600cf6f20500911cf5e49c42c0429ce95155aeb5eb13a88eed3df279cdf5821f4557971919d97640aff75371c75f8822cacacab7d0e907269cba2b49eeb61225d94c2e4154c94bab3b476bcb27ecc91d2370b3b98cada4947bbb3c07cdc772bd5f46758f6", 0xaa}, {&(0x7f0000004780)="d871e9cb8f0d1d8c697ba386ba6ec4cc67de14e93092f11d94a7aa04d83f0ed338258dedc2745180f1126a4971f71f06c70cab7f9f6a1938a3956c9985cb2febbf232ed0b6c7c1dcfa2f65db3af1cd0b31889e46d49385aac200e8845c83fc05a3b724b037ea2c433b19169e7156f19d928fe02424374bf9e4cd1eaee74fa7438277cdea4fc097214c6144e15cbd6a58b7c92a740a99919f25a36baf596042e936a8ed4de546e66dad116e2640ed8a942e29d1e4969b9bf2d99343b9c5b8ae69e822c3a1f081fe80afc0d595ceb9ee541baf0ddd78ed79cd1d16f22603022a4c8c75168d6f0c26ad00cde2324113d22e859f817fcf41835fb8ceb2f7ef4429c2354fbe4076f0e8cbf37aed42c32ec579c7ac13fee06187fd350a019271299643180bdbe1b233840f4e7cf862d4990f421c44595e522d8ee51e944a48bb553cd021c9ab87cb26ac26f0a144979afaf0070ed59bf4873bcc7ee9a216d7c1084577aaadaae8f0f8c914d5999135da96b9544e3b5033e6228edec87cd68bf7c728aae7393d04f95d5f51538ee2f211276d3df50d2786d4b0be6a8452100d07153d8834b5121bf4a37427198a4a01f3e271c7afe1b53c85f7f6b612ab5f7227a9df825f31194521a3e459c7e59e61a35bc40d1eeb3a0f949921e41a099f06dfeb00180ae2eb1ded02387385d47f277c7df8ef4965d6ab94bea5ccadcf3d02834a25a18cce64ae83f90f197412b911a92acc189615765a1fce12dc206dec7edf5b92d0793ce43074d8e4b3aae1b57fa0029cff0fbbc079cc1456e2a411610eaf6854c3f793000bdc1ebe611d29d0e312969e848cd48928644251811a58fa3a7dc8afc978f8a02b01a5c836fa8d28d14585d4ad56be97db7ae1165dbb809e6975e96af27adb2813a837a27ff033c5478217cef0b793b9dd6f129503e7bf2768be40122c6123dddd4d968cb99aea2d4affd4216e11d2fce7ae794d3727010ea784efe8147ed491ed27b13b31cf2849d0c9184671113f563e7c6d9cc927e59486b04a9f4785ebd589cf2cba6d465eebfcc34944b8e23457f5b77ea15e17f184d987bf662e9836b3bbf17b2b52dd1cf57df00ddf53cb5eb2fa491febe9adb7cc7fca5793b53a59b766dc1d4fc19cf502ba37ceb0ad7f861a5c1deea602ca9c08b981cb4f287525492f86f3c156af8644a2228196d9637812d04c607d772fd021c0273c58d4d44b14ff194c0d45fc089abe68424276758cf6818c89a3fd40fc1f9afbdcc9edb832a0490ffff165dab3e27202842b8737d3397a40361cc1143a7c809cbfe8efb9631a85031b3986a42b57c263af482001fc1865181a14755bb1c1ee53444ccb1cbcbbece0778d23d0b837e93e3e433650cf07780fb58f04aea5b44198f2c22dab4f444f9bdbbeef5709d7a5ad1d889454ac71a93a8e973fc0566cf21101d2786df54f4b982ba5bae861f278bcf986160f4d7338b3e8313efd3c8f1c26cf903e85e4a3d39d2d79b2cf4b196fda8e65b2a075684c00fd026acb3bfbe2a538e6ba906ba4085f56612cd74ac4843779ba988e4bd0deed2bbf6f25ed88c7ed472323a8c72796ca5c79f28ae8e1caebf454efe94aa534ce2b282db2e8877a19fa13bbb35abc6b5a703c4ddff67bbf9d97dcd9a979ac6c5e65e196773bc291db5648221a38df1698fe9739eae51d8e173b4474c3438c7ec7559d54de9f66d48b1278c119a2271a0be0500e038483077428f1a38ab39736cef6d549a36f21acd2a830bd1279e2afafb235803873ed365866e27ac0642cb46131dfa6af7e7295e6bf4ae9b8328abf40c6473129eda06bc7336fe34b6adcfec5e662ccbcf7087767a40d05eaa13b9aeaef1a0167470d59346d40a27edb221f403af6a09863d2caba79d5ea9d76ff3878ba6b48c9b637bf2be9f1c9efe7615b8600b4791d5b234c449da852cf4107c259197d9d8c1b6a79d5cd9aee815ac270b5b54626aa5667ac227fa98f48a1b182521eedc423b5a3bf49caa89342ceb6da59007207eae7b0fc8aecc051fef2a832601fbc911cbbdee4137230ac9b2d092c771675c7090ca545ca6f0f18c0d842a5cbd59a9a5c795dcf17cd89ee4d1023b4a3aede910a231f7fe33e15aad62afda735c05baffd86e12431fe3068914bf322e6cb7449bab4f48af541569bdddbe930d09bb784d20641d5442ee04be5d097a3d9543ba3e3ebdcf3af14fe8c9f0657bc76530a3384f4e146b5abdb5ed4f2194b507af4c8a71b89a64bf79bebf1c22bbefbff294eaa6f0880e7420e2a970f2039c60ffa2b9e35a949c0fe625fbe3e32f9862cbb9dda10d3df45cbb3b7a0437abaaa8b577bda1b379148650b20d2242e609e2e681572c3c6423b88314a04b1edb1805489b9001e9748f7308438fee6d61530bb2c4a51ae6be77645844f9dcfd0965d1f8ee17ea582cb2b3695d874c2c4d388f00900afebd6903a1f5ff962660c11d1f3034d83e4f477c92a893d48097b7d25e0fbbd8785e3bd17c017bf2382975b0c1656d2ebbf18bc7b7a214ba070628c217e055f2ed8430bc539b51ade6a5ab1856def962338dbcce7bdeff9ee0deaa2842a633f2867f3511ba1b8883f373c25b34b9caea2a6a0b4efe669edd7b6a2c8fe85fa2c3b9451e20c2d725b501d768defdaa5d9cd1c05ee3f312bc65c21ce60ff0e4123193fa1717c30e1adc99b3df8e0e9f87895e3873b8452d09e58dbde64aac48cbec2e7746cfe880789fcf5446f9a95cf0179458d80bc1173cec003e9656cec9c527038dec332e9f9731f5f415d16e5344aa575fab0841e975490a5922aafdabc1afce81f5799c624173237337989cf17b3561798f90fe3aea89a14e85e2fbfb7260226a33d4172becb0bffe4d57d98e7e5a438826eaad71216b2cbb4f77ac8a7738ec9a32b2eab26bd78aa9cd9a397450f6bd41e0d7bd55176f2210f258720084c0f8008f29a71ac3c0911c18e5162bb6e6248e6d68f314b8eb33dde72e60ffb9a3484cbd2b3204efa39cbd9889472ceb5e1301f472363c950373a4e4628a75e78df0ef14a1d207d1197f4c5a8b43bb2250ff63250867bbc81b42058b34bea1d7d6d762a3ce75fb0a59072272edf9e8c33da4b8dc0649974f84c27b4406ec4e3797181c575c2cb3b0adde03db07566183b881a819ec19448b8b25259c789d2830f5a79543f7b38d638970b5f3cb506569636347967bda4e6f73b6198d2a8f2e58a771c5ad381412eb25987c668b3b978b845996e9b6dc6aabdb1e2151590aae23993101ff9b32f27afe58261121709aa26191095cf61c4839b803c7d25caac97f5fb4265582cdaceb4dcff33e0188a6d8b3003f8d11d23aef446858fe66e4c2043f44605fd97a7f06e114b98eb883ce2e6594c41464cd46bef6a9b57fa079ad1fd8e243ce481d97da8ba91ecd3b4183d82b0badad9080d196b1f829749d2187bda8c02474ef23f04fcb8f1460bfee898c0240d2b1a23504c885c323a25b3d9cac8c82c2d9aedd6f5c516c2b5a31a149db096767005a7ee91982cac403cbfb78a317a298cfecea3421153f04a3ab1824b18f3e2b5d9924cd72e1475700a0141c5187eaba078efc42ee3ec80d0336777f35ecf049c17e5f50fefb643ed32554f0be9f0235ca184673ac91cf23f2cfac5f487ae8ec0a4174b83b85477ad11ecd424a70e38682e9585dbb6d2b3b606f4e260ed0d933b753cda8369c8c45e63a0d0b06fb1d3413944dbeeb9f42a5a0d7f5632c47c76b4afd5a9bda23ac54213b330b070affd786ff17291e4990775fb914da93dd1ac31b7bad34f70cac9b773f4bc654c02b9ad744ab449237de010e9ab8e86de2273d9d7803dceb83997632c1bfa82cd44efdfde3b714b855336bbcf97828eacf9e77351fdb7262c006409de4a798c7dbe87c18e252500298df254f57871dc9a27ac7a127a8b24f631aca39524ceffb88f1e1f9c3843f267a13ba34fa88e759f640c6b051264bd7b0ba1c03ff74af164e0957a5fe220ffedcff3f462996d8a930372c21e35cc1fed1c76bac8fe7dd54e0102cd3bdded831ac3b4b46217426b5bdb889f25d37c7d17176b855ef9da6cd70a6867bdb66a8ddcf08e2d111c1889f609206faeffee98a09b093febb7618fc6d49b6f68dffc59a3259cd75a1c5e56ca8145ccda33750e1121172c40a82842a47f37055e9288882b6ffdaad0fd62489550fa8aca98f8a990a90cc77f35ccd27a242871707e70acdf03d182eb68fde0dc1a85352bb3a661b621ab30c26969801cd035ccf52a7b5fe0beec38bef687fb3d389960c99b3f901fab253b270ef34c699c6ffb6c527e87dde877b7a27ebd8f24c6bb3842ec85cb4e9adb60572873573ecb92a659db072ad33dc044db5395fb87db519a214e74b92c991030b319249f04bc8f7190c178dd73dd66b06c4a4a96c831b6dc6088b41c988f33beb6a4dd5be9067c018fea015f6a97e89eedd6ec383cdba77f4cb2c559431fddc182602702791966c1f31539b8b593db353ab1abe93d54954087b362b5ad1bd2adc42e41056502ea73625f0f2ce1c5d71d212208165038bbac413915f151f0cd604aa0aed1f9699134cfa687b29dbb031946d568904ef1d8d846193c13e7a546e4361c196e90da92f5279e448afabd97a6c21013a652c902ec86c879eb2aaa755f2c7b5bd4fef6e50eab7de5630effbc0ee7b594d16edc75467baa2036c0744ba3d39c018ad314a69973b4370b1e8455abf8dab71f50263fe3a41101342a38479e8f55e012ba0f9cdfbf464e9d471eed06a825f5bec7b137a2eb1ce66e0f1f80fcd53a4a0226e7505214a37a1bbdd3338267451a7dc0f6728113f4a77d6a0b58279638c75018d15507616db2b3293714405bf0ebbb05ecdc84f6c03427d42c4da334b886faea4022d11d75377c7862d035c507999ce1eea21046dedc26444c4b3616fb8fdf20b89f7862acc6f2e2e01dde7c6329a5db19d83f34bd3f274da6fbefd1a8652e65ea6140b74372e039837ca0019472e3efd5a76c299dad56ac11ead74eea52b82589ce607f0f50a45b2755455d8ec3f124f981afa7a326760c1bc73c44b3880ff5974de6c5ec56003a92f6370cd07cdea55949d24c1a15ee2cc9b51814615ad4ef85f3340d2070e2f21671059517501d4a5370667affd76d496d5a15149c715e5a36aca3f469a3c35787d7227a93c96fc9e120923f996fc8b599338aabda9c5948529dcc5c1b1e7bba2b4f337a2b334f2c696c7755d526df4c3a68c8597f8ff078955d6c456e9da7043bdcb9ee7e4e4f2ca11c8259d191cf0cac2186daa26383a35def32fa483e46bd2ceb390d0334ccbbc738ec2b28060a12bfa1a03fa465a3bf41dacc556e76f4ba29db35a07d91a283fb2ae8f419f820fb0c3041ce4399d8e6da4909cc38c98e1c832f0cfa5600a3f0e035109a9500a1952888a0e60c60bc5bb52d50562e55c33110350e12ad44d601ce6f940002ff3da580772c53263e0db8384f717091a510abc37077282808ac9ef17279fd870b9b8c68769d80f1eb4f1430621be46062e56d067b41cba96de03bd07d274d15a06438a22baabe7c1e9d836f7a944677a48d4d0b452c6563f9ec7f883641dd5e4f48b402cadf885b3eed5ec9492bbda3736efe3a4010ee4f3d56a1af3748892cddadc78437b2f4388074377cf33026d3ec4fa2402f88cbf41f237916df0327a2c5a95215538171d4544d9e11ce9959dddc2f4226fffc902a5f6b909bc6d18c8a954a2008cc0fed27787be2a6cc475d2b967183cb42f54867df7bc689ea8fe8a95e0ddb", 0x1000}, {&(0x7f0000005780)="088936215c905998bc6187e381b207040310b13cd533f5620e9555a36a2cff06b677dca9c1620e26d773e239c1222078c1c60a2ee35fa5780e1ee75122969bbe617be02d356c", 0x46}, {&(0x7f0000005800)="4e2c66c2e1aed42c43e2104896df09bf0bd66e013542c0f553b8637788b74213a416daf62eda387a3b5ac3f7cd41c6ae5c65d15703245a8dbf37e97272bc43624e41415f25085ff6d9798841ce2fc42b9511bcdb584f54ac5fae988c4e522cb22cef34359ea7b245bea84955570e33ca959ca2e9d6cbda63674d687516e23c1e451d80d4a149ceaca4", 0x89}, {&(0x7f00000058c0)="0a88246f80bd286aaaef597c1f1bd800ed070c402a329986fdc1ba8d3c77a41cfe292618effba31da5511c98acea83d8b6bbe4d826f01c39c6a0c74a3c55f1e9947c84c1c36c99a2235346a969b4707db0004bd0848910cc4662a08447195fa4eb4a0340d093dd45f163eebc5b9ef0082c6971b1d8ac04d552a29515621fd00e6b7dec878af0c18f4a8194e08d003dc676e6353714ce077e3643546d392ab931e61cb74413e2bb5a6d5b2e5eb94912fb463eb258536c", 0xb6}, {&(0x7f0000005980)="7a4d82956bd5dbe4ecbaca6de9ceaad5c38851e2288db8a3e913248d7a7ec2579a1afd1a40e9690975a042539027d76048662e635c2bb9d0eb55aa6f23eaad2f02303d5d54cdf0ab58bf9a6d8ed1829f80d129ea928249003546c7e2eebb63aabbdda8b975bc87383691381dd8f91ebdafb6f30eb1ae20102f4ff9043f9ee34c2d1d10b8cf6499b7b9e2879dcf42328c47129c9e89f402b82ed5629df3aec0a220e37108d5440b44818cd565cfaa18995550c8fcc3fc057132a72ed64117a987e7ac569bd6657a", 0xc7}, {&(0x7f0000005a80)="1b10e5886c9099aa1e4b847b6168043a4e0e6d7273964f85a592c9d571bcd8f5cb8db839347e3cfacb49e3eb1b400df42a274da3de7be61df469e82d72a0bf4dd040a58fa73086dcc862c3a1422ed67508", 0x51}, {&(0x7f0000005b00)="af58a9efcc33f2712398ada81efbfc7cb30417906eb67db772204c8944582e8756b199c3a1882653f8fa9799b10f417bedd28990ef7546c73fadefba0edcafedf78aff77aba273d45078c461dbd89ec914b3fe683c5752020ada64e8bd27520d97c56ff4759b5806052e43fae596a72874ae2790855e20457a7bf3d728a51ea4e47b5bf4b7c01f40fe8bdc9d561fc65d59affc9c038ce1d5311350c1b608ff55a7da54e38c3fa0e0fb2f974b", 0xac}, {&(0x7f0000000fc0)="5bf232f948c0bc7d5f346e7e4867bb5572e9d5caa9f9740e8e11cd6583d0a0bc0a4d6be0a16869609a8c9ef627adf5052e5e930a"}, {&(0x7f0000001000)="668402bfbd08d523afd342b5e8a8e614f3cb58bbff1fb8c2a1c0f6b85d78531f82c8d546ec2d2925574c98259bb440154e66283f9336cd567f95cd6eed8403d4802f9eaa0300463d6586d5bd198db0ff5c0a790e21a3d8ab5d1ce574238f6da84c57b4e93869773f695ef16ee8f0f77bf13098288b6920f709f29a9ca75b4d4b5255d7a554a926264ba837c664a944e72bb1fd21bbabb2141fd8065d22a57b64fa127cc273356fa61564e8221addec890dd6e9dc57df4ac26357b2247839e88b7e30b69d28416c882e1a30535a79c3edc61a7bb5fe6d39ea262e6500a41c4f966b98dc232ebc98"}, {&(0x7f00000082c0)="8816044cb4ff24190904b14c463434f81c47d44e0fd3955be14330126e4fd97aef5e2d7d17bf1e6074f3e38bb559b09e7fc5b7a093b107f8a6"}], 0xa, &(0x7f0000007d80)=[@cred={{0x1c, 0x1, 0x2, {r18, 0x0, r19}}}, @rights={{0x20, 0x1, 0x1, [r3, r4, r20, r0]}}, @rights={{0x2c, 0x1, 0x1, [r3, r2, r0, r0, r0, r2, r3]}}], 0x70, 0x80}}, {{&(0x7f0000007e00)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000008080)=[{&(0x7f0000007e80)="4b22ab2c67ba27f7aa59c2ba135059d42f2c783a8ce8ee56576120aecdfc837d41bc0b807aa73c4e4f296ddf2b9e57d1c711d7f084ee6a0980555877de65eed92b10f1d23b8e45b677a144654d84df4942684034d1a48044db2907", 0x5b}, {&(0x7f0000007f00)="567849680d67a488df8e011d13569148f23eeec1f12a7e9150d6c85cacea18b43827a5b766d4185e32474f5fac951ff48170683f263eb35062f06869b3b6aa4f01c49d0e8b08fedd0e49ffb61ed5e6e6bd06e1aff90a0e722306d5ae1a7ceec03e4ff8d3e3162d2e810b05b00b7af3e4e7c363943b11fa686d6d6a2bfb46b7911c47a2e375c1009972762637f9eff124ceac848cefab8302b7eacaf204dbd0d46164180dc3", 0xa5}, {&(0x7f0000007fc0)="2f93adc807c944e86deafd8d5082a26fb1fca35ab26caae0844c4553c525e3aae4ebd20a65383e3cb30035b3dd580abfff6ad6a6db06a2cd277e25bf0b6e8a35feab846e27e107ceda35a06bbde08c496af4a36e2c43dcf926521d93e10595ad7d1e0eefdc067dc9fca97b5443725062b0329c99e2834b06e44b45f4", 0x7c}, {&(0x7f0000008040)="6427f7ff3d0bd37b9d13586d1f335aab410450ec33db078ad6b4a0b166ca02db096f284ec2", 0x25}], 0x4, 0x0, 0x0, 0x4004014}}], 0x8, 0x801) 10m27.334030275s ago: executing program 8 (id=8552): syz_usb_connect$uac1(0x0, 0x0, 0x0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0}) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f00000009c0)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='signal_generate\x00', r1}, 0x18) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000380)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf670000000000001507"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1313f, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000003c0), 0x10, 0xfffffffe}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r2, 0x4010744d, &(0x7f0000000180)) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000280)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @dest_unreach={0x3, 0x5, 0x0, 0x0, 0x0, 0xffff, {0x5, 0x4, 0x0, 0x3c, 0x0, 0x0, 0x4de, 0x0, 0x33, 0x0, @rand_addr=0x64010100, @local}}}}}}, 0x0) write(0xffffffffffffffff, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2f", 0xf) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x89f1, &(0x7f0000000340)={'ip6tnl0\x00', 0x0}) mmap$xdp(&(0x7f0000016000/0x4000)=nil, 0x4000, 0x700000d, 0x811, 0xffffffffffffffff, 0x180000000) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r6, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r7 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r7, &(0x7f00000000c0)={0xa, 0x4, 0xfffffffd, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x3b}, {0x0, 0x0, 0x4}, {0x0, 0x4, 0xfffffffffffffffa, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7, 0x0, 0x1}}, 0xe8) sendmmsg(r7, &(0x7f0000000480), 0x2e9, 0x0) 10m27.288821389s ago: executing program 8 (id=8553): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001004900000001"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) setrlimit(0xe, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x2) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000002c0)) bpf$ITER_CREATE(0x21, &(0x7f0000000340)={r1}, 0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r1, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x0, 0xe1, &(0x7f0000000200)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000240), &(0x7f0000000280), 0x8, 0x39, 0x8, 0x8, &(0x7f0000000380)}}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xd, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x50, '\x00', r2, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) pivot_root(&(0x7f0000000580)='./cgroup.cpu/cpuset.cpus\x00', 0x0) 10m27.263759761s ago: executing program 36 (id=8553): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001004900000001"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) setrlimit(0xe, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x2) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000002c0)) bpf$ITER_CREATE(0x21, &(0x7f0000000340)={r1}, 0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r1, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x0, 0xe1, &(0x7f0000000200)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000240), &(0x7f0000000280), 0x8, 0x39, 0x8, 0x8, &(0x7f0000000380)}}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xd, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x50, '\x00', r2, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) pivot_root(&(0x7f0000000580)='./cgroup.cpu/cpuset.cpus\x00', 0x0) 9m24.626384945s ago: executing program 7 (id=8790): r0 = socket(0x10, 0x3, 0x0) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r0, 0xf505, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x4002}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c0000001600156f00000000000000001a000000", @ANYRES32=0x0, @ANYBLOB="140006"], 0x2c}}, 0x0) setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, &(0x7f0000000000)=0x4, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket(0x10, 0x803, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='sys_enter\x00', r2}, 0x18) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x404, &(0x7f00000000c0)=ANY=[@ANYRES16=0x0, @ANYBLOB="132b0d95dd8786d3856320fa6af87a94c11be7db8ba396dc7186f8a009b572405ea17e077d6f91b83a4adb9fbc4abe1b8d82d9c33a0c82f90e3dfa494170be8a2015c288c29d1152e653f4897c032a50e12cf4945f912897e647dd0c0e2c8b3109fed7647ca9ad6049365d0a3a28d31da4281511ffe2f1fb98e26bfb", @ANYRES8], 0x1, 0x1235, &(0x7f0000000ac0)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x214}, 0x94) syz_usb_connect$cdc_ncm(0x3, 0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) process_mrelease(0xffffffffffffffff, 0x0) truncate(&(0x7f0000000a80)='./file2\x00', 0x6e8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) 9m22.6953875s ago: executing program 7 (id=8793): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000040)={'filter\x00', 0x0, [0x1, 0xffffffff, 0x401]}, &(0x7f0000000100)=0x44) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x77, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x14, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lirc_mode2=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000001140)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) prctl$PR_SCHED_CORE(0x3e, 0xffffffffffffffff, r3, 0x3, 0x0) sched_setscheduler(r3, 0x6, &(0x7f0000000180)=0x5) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000001100)={0x11, 0x3, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) 9m21.846489907s ago: executing program 7 (id=8798): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/13, @ANYRES32=r4, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYRES16], &(0x7f0000000040)='GPL\x00', 0x5, 0xbf, &(0x7f00000020c0)=""/191}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r7, r8}, 0x10) r9 = socket(0x10, 0x3, 0x0) sendto$inet6(r9, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) userfaultfd(0x1) 9m19.049716742s ago: executing program 7 (id=8799): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x2d) syz_open_procfs(0x0, 0x0) 9m18.176493422s ago: executing program 7 (id=8809): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='sched_switch\x00'}, 0x18) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) 9m18.085920299s ago: executing program 7 (id=8810): r0 = socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x9031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r4}, 0x18) sendmsg$nl_route_sched(r0, 0x0, 0x4000) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0180000000000000000001000000000000000b00000000030014"], 0x28}}, 0x40000) r6 = syz_open_procfs(0x0, &(0x7f0000000280)='ns\x00') getdents(r6, 0xffffffffffffffff, 0x5a) r7 = syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x101c088, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x6, 0x2c3, &(0x7f0000000900)="$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") ioctl$PPPIOCSACTIVE(r6, 0x40107446, &(0x7f0000000380)={0x1, &(0x7f0000000340)=[{0x4, 0x2, 0xff, 0x8}]}) mknodat(r7, &(0x7f0000000080)='./file0\x00', 0x80, 0x622b) clock_getres(0xffffffea, 0x0) 9m18.085387999s ago: executing program 37 (id=8810): r0 = socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x9031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r4}, 0x18) sendmsg$nl_route_sched(r0, 0x0, 0x4000) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0180000000000000000001000000000000000b00000000030014"], 0x28}}, 0x40000) r6 = syz_open_procfs(0x0, &(0x7f0000000280)='ns\x00') getdents(r6, 0xffffffffffffffff, 0x5a) r7 = syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x101c088, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x6, 0x2c3, &(0x7f0000000900)="$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") ioctl$PPPIOCSACTIVE(r6, 0x40107446, &(0x7f0000000380)={0x1, &(0x7f0000000340)=[{0x4, 0x2, 0xff, 0x8}]}) mknodat(r7, &(0x7f0000000080)='./file0\x00', 0x80, 0x622b) clock_getres(0xffffffea, 0x0) 7m35.226457439s ago: executing program 9 (id=9220): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'veth1_virt_wifi\x00', 0x0}) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000480)={@multicast1, @multicast2, r1}, 0xc) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x8000000000002) sched_setscheduler(r2, 0x2, &(0x7f0000000240)=0x7) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) madvise(&(0x7f000041c000/0x2000)=nil, 0x2000, 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x8031, 0xffffffffffffffff, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r3, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000700)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x4c880}, 0x20048084) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) ftruncate(0xffffffffffffffff, 0x2007ffb) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r7, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e8, 0x0, 0x0, 0x130, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d000000000000000500ffffffff00"}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 7m34.313900432s ago: executing program 9 (id=9223): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d2000000000f0ff000700000008000300", @ANYRES32, @ANYBLOB="0800051d00000000140006"], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) r3 = socket$inet6(0xa, 0x3, 0x2f) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000140)={{{@in6=@mcast1, @in6=@loopback, 0x4e20, 0x0, 0x4, 0x0, 0x2}, {0x0, 0x802, 0x9141, 0x0, 0x0, 0xf42, 0x5}, {0x0, 0x0, 0x0, 0x8}, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1}, {{@in6=@empty, 0x0, 0x33}, 0x0, @in6=@mcast1, 0x3507, 0x0, 0x2, 0x4, 0x0, 0x0, 0xfffffffd}}, 0xe8) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) 7m34.137649746s ago: executing program 9 (id=9224): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1018e58, &(0x7f0000000200)={[{@usrquota}, {@noblock_validity}, {@bh}, {@max_batch_time={'max_batch_time', 0x3d, 0x1}}, {@nodelalloc}, {@inlinecrypt}]}, 0x6, 0x5fc, &(0x7f0000000600)="$eJzs3c9rHGUfAPDvzCZ5kzavaUXEFsWAhxakaVKLVS+29WAPBQv2IOKhoUlq6PYHTQq2FkzBg4KCiFeRXvwHvEvv3kRQb56FKlJRUOnK7M62m2Q3XdPsTpr5fGCzz/PM7D7PdydP5pmZPDsBlNZ49iON2BVx51QSMdaybDQaC8fz9W7/du109kiiVnv91ySSvKy5fpI/b88zwxHx7dGIRyur6124cvXsdLXW8F7E/sVzF/cvXLm6b/7c9JnZM7Pnpw68cPDQ5ItTB6c2JM7t+fOx4689+fH7bz8/9111XxKH4+TguzOxIo6NMh7jcScPsbV8ICIOZYk2n8vDZguEUGqV/PdxMCIej7Go1HMNYzH/UaGNA3qqVomoASWV6P9QUs1xQPPYvrvj4JM9HpX0z60jjQOg1fEPNM6NxHD92Gjb7aTlyKhxbmPHBtSf1fHPtd2fZ49Ydh7iz7tbZ2AD6ulk6XpEPNEu/qTeth31SLP402XtSCJiMiKG8va98gBtSFrSvTgPs5b1xp9GxOH8OSs/us76x1fk+x0/AOV080i+I1/Kcvf2f9nYozn+iTbjn9E2+671KHr/13n819zfD9fPkacrxmHZmOVE+7ccXFnw04fHPu1Uf+v4L3tk9TfHgv1w63rE7hXxf5AFm49/sviTNts/W+XU4e7qePX7X451WlZ0/LUbEXvaHv/cG5VmqTWuT+6fm6/OTjZ+tq3j62/e+rJT/UXHn23/bR3ib9n+6crXZZ/JxS7r+OrEjXOdlo3eN/7056Gkcbw5lJe8M724eGkqYig5nq/SUn5g7bY012m+Rxb/3mfa9/9lv//Xl7/PSPNPZhcuvnH2dqdl69n+LReT79S6bEMnWfwz99/+q/p/VvZJl3X88eblpzotWyv+kQcJDAAAAAAAAEoorV+DTdKJu+k0nZhozJd9LLal1QsLi8/OXbh8fiZib/3/IQfT5pXusUY+yfJT+f/DNvMHVuSfi4idEfFZZaSenzh9oTpTdPAAAAAAAAAAAAAAAAAAAACwSWzP5/8371P9e6Ux/x8oiV7eYA7Y3PR/KK96/191iyegDOz/obz0fygv/R/KS/+H8tL/obz0fygv/R/KS/8HAAAAgC1p59M3f0wiYumlkfojM5QvMyMItrbBohsAFKZSdAOAwty99G+wD6XT1fj/r/zLAXvfHKAASbvC+uCgtnbnv9n2lQAAAAAAAAAAAABAD+zZ1Xn+v7nBsLWZ9gfl9QDz/311ADzkfPU/lJdjfOB+s/iHOy0w/x8AAAAAAAAAAAAA+ma0/kjSiXwu8Gik6cRExP8jYkcMJnPz1dnJiHgkIn6oDP4vy08V3WgAAAAAAAAAAAAAAAAAAADYYhauXD07Xa3OXmpN/L2qZGsnmndB7UNdL8d/fFUk/f9YRiKi8I3Ss8RAS0kSsZRt+U3RsEsLsTmaUU8U/IcJAAAAAAAAAAAAAAAAAABKqGXucXu7v+hziwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACg/+7d/793iaJjBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeTv8GAAD//7V5QCw=") mount$overlay(0x0, &(0x7f00000004c0)='./file0\x00', 0x0, 0x80000, 0x0) 7m33.723969839s ago: executing program 9 (id=9227): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32, @ANYBLOB="0000000000000000b708"], 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000300), 0x75, r1}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r4}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r2}, 0x10) close(r0) syz_mount_image$ext4(0x0, &(0x7f0000000580)='./file0\x00', 0x19560c0, 0x0, 0x0, 0x0, 0x0) open(&(0x7f00000002c0)='./file0/file0\x00', 0x141840, 0x0) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000080), 0x0, 0x0) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) open(&(0x7f0000000200)='./file0/file0\x00', 0x4000, 0x74) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18baed142be7d602000000000000000000000000000085000000450000008500"/46], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x49) 7m33.46814279s ago: executing program 9 (id=9230): mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r0 = creat(0x0, 0x11c) fadvise64(r0, 0x40, 0x9, 0x7) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000009000000000000000020000018110000", @ANYRES16=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000580)='sched_switch\x00', r2}, 0x18) socket(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008014}, 0x400c5) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r4, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) 7m33.145997796s ago: executing program 9 (id=9233): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e2793b10d10501200006010203010902120008000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000500)={0x34, &(0x7f0000000400)=ANY=[@ANYBLOB='W\aK'], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x1080406, &(0x7f0000000140)={[{@grpjquota}, {@norecovery}, {@orlov}, {@oldalloc}]}, 0x0, 0x5d9, &(0x7f0000000180)="$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") syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000200100000102000028"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bc00551a000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') socket(0x1, 0x803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020696c2500000000002020207b1af8ff00000000bfa1000000f1000007010000f8ffffffb702000008000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32, @ANYBLOB="0000000000000000280012800900010076657468000000001800028014000100"], 0x48}}, 0x0) 7m33.109397728s ago: executing program 38 (id=9233): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e2793b10d10501200006010203010902120008000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000500)={0x34, &(0x7f0000000400)=ANY=[@ANYBLOB='W\aK'], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x1080406, &(0x7f0000000140)={[{@grpjquota}, {@norecovery}, {@orlov}, {@oldalloc}]}, 0x0, 0x5d9, &(0x7f0000000180)="$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") syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000200100000102000028"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bc00551a000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') socket(0x1, 0x803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020696c2500000000002020207b1af8ff00000000bfa1000000f1000007010000f8ffffffb702000008000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32, @ANYBLOB="0000000000000000280012800900010076657468000000001800028014000100"], 0x48}}, 0x0) 4m19.718460339s ago: executing program 5 (id=9986): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="44b0020000000104fc8a34ff8000000002000000", @ANYRES32=0x0, @ANYBLOB="0315000000000000140012800b0001006d616373656300000400028008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x20, 0x0, 0x1, 0x0, 0x0) 4m17.83592287s ago: executing program 5 (id=9989): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="44b0020000000104fc8a34ff8000000002000000", @ANYRES32=0x0, @ANYBLOB="0315000000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r5, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x20, 0x0, 0x1, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYBLOB="010024bd7000fddbaa250300000018000180"], 0x3c}, 0x1, 0x0, 0x0, 0x20009005}, 0x2000c000) socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001900010000000000000000000218"], 0x2c}, 0x1, 0x0, 0x0, 0x6}, 0x30009091) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(r6, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0x1}], 0x1}, 0x0) 4m16.819228032s ago: executing program 5 (id=9993): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x20140, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) io_submit(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000008000000020000000400000005"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r5, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xe, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r8, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3f0, 0x0, 0x0, 0xe8, 0x308, 0x308, 0x308, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x5, 0xff}}}, {{@uncond, 0xc0, 0x110, 0x0, {0x0, 0x1e03}}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local, @multicast2, 0x2}}}, {{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, 0x0, 0x0, 0x0, 0x0, {@mac=@broadcast}, {@empty, {[0x0, 0x0, 0x0, 0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pim6reg0\x00', 'netpci0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@local, @private=0xa010101, @rand_addr=0x64010100, 0x4}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) 4m16.167485914s ago: executing program 5 (id=9998): syz_mount_image$fuse(0x0, &(0x7f0000000040)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x4008, &(0x7f0000000440)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) open(&(0x7f0000000200)='./file0/file0\x00', 0x0, 0x0) 4m16.046077974s ago: executing program 5 (id=9999): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) openat$ashmem(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="44b0020000000104fc8a34ff8000000002000000", @ANYRES32=0x0, @ANYBLOB="0315000000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 4m13.09908004s ago: executing program 5 (id=10008): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="44b0020000000104fc8a34ff8000000002000000", @ANYRES32=0x0, @ANYBLOB="0315000000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYBLOB="010024bd7000fddbaa250300000018000180"], 0x3c}, 0x1, 0x0, 0x0, 0x20009005}, 0x2000c000) r7 = socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001900010000000000000000000218"], 0x2c}, 0x1, 0x0, 0x0, 0x6}, 0x30009091) sendto$inet6(r7, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 4m13.041220795s ago: executing program 39 (id=10008): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="44b0020000000104fc8a34ff8000000002000000", @ANYRES32=0x0, @ANYBLOB="0315000000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYBLOB="010024bd7000fddbaa250300000018000180"], 0x3c}, 0x1, 0x0, 0x0, 0x20009005}, 0x2000c000) r7 = socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001900010000000000000000000218"], 0x2c}, 0x1, 0x0, 0x0, 0x6}, 0x30009091) sendto$inet6(r7, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 6.836655162s ago: executing program 1 (id=10992): bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mount$incfs(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='./bus\x00', &(0x7f00000000c0), 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x400e, &(0x7f0000000300)={[{@i_version}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@block_validity}, {@sysvgroups}]}, 0x1, 0x42f, &(0x7f0000000940)="$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") setxattr$security_ima(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140), &(0x7f0000001f00)=ANY=[], 0xe00f, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) 5.849222831s ago: executing program 0 (id=10995): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x9, 0x18, 0x0, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare(0x62040200) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x7, 0x8000, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r1}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="00220f000000540b4550182195f57584b3"], 0x0}, 0x0) 5.254727889s ago: executing program 1 (id=10998): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.usage_percpu\x00', 0x0, 0x0) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000340)={0x1, &(0x7f0000000300)=[{0x0, 0x8, 0x61, 0x49f657fe}]}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r0, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) sched_setscheduler(0x0, 0x2, 0x0) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000500), r2) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000580)={'wg1\x00', 0x0}) r7 = socket(0x10, 0x803, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000880)=[@window={0x3, 0x81, 0x1e8a}, @timestamp], 0x2) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'veth0_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x0, 0x6}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x48, 0x2c, 0xd27, 0x70bd29, 0x1, {0x0, 0x0, 0x0, r8, {0x4, 0x2}, {}, {0x1, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x14, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xe, 0xfff2}}, @TCA_MATCHALL_FLAGS={0x8}]}}]}, 0x48}}, 0x20040054) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000c07850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r9, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000001140)='ext4_allocate_inode\x00', r9}, 0x10) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000040000000110000007"], 0x48) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000000)='ext4_allocate_inode\x00', r12}, 0x10) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r14 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000400)='ext4_allocate_inode\x00', r13}, 0x10) close(r10) close(r14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000005c0)={'batadv0\x00', 0x0}) sendmsg$TEAM_CMD_NOOP(r3, &(0x7f0000000840)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000800)={&(0x7f0000000a80)=ANY=[@ANYBLOB="d0010000", @ANYRES16=r4, @ANYBLOB="00022d9d0000ffdbdf250000000008000100", @ANYRES32=r5, @ANYBLOB="b40102803c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r6, @ANYBLOB="380001005f696e7490a946538e05e25b0000000000000000050003000300240001006d636173745f72656a6f696e5f696e74f6015c496c000000000000000000ffff3800010024000100616374697665706f7274000000000000000000000000000000000000000020000500030003e60000080600000000000000dfd1f070a13487656693093c542c8a7395220cab63b6da000000000000005c31bcc245a64a1100"/192, @ANYRES32=r8, @ANYBLOB="54000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b000000240004000800046e3d000000100003032700000008000804a509000000000762700e000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000300000008000600", @ANYRES32=r15, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000050003000300000008000400410c0000"], 0x1d0}}, 0x4800) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x2, 0x5505, &(0x7f0000002480)="$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") 4.634059289s ago: executing program 4 (id=11003): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x20, 0x0, 0x1, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYBLOB="010024bd7000fddbaa250300000018000180"], 0x3c}, 0x1, 0x0, 0x0, 0x20009005}, 0x2000c000) r5 = socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001900010000000000000000000218"], 0x2c}, 0x1, 0x0, 0x0, 0x6}, 0x30009091) sendto$inet6(r5, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) 4.327050653s ago: executing program 3 (id=11004): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000180)='encrypted\x00', &(0x7f00000001c0)) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wake_unlock', 0x242, 0x2a1) sendfile(r5, r5, 0x0, 0xa) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) r6 = syz_open_dev$vcsa(&(0x7f0000000080), 0x1, 0x40402) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_submit(0x0, 0x1, &(0x7f0000000080)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x3, r7, 0x0}]) writev(r6, &(0x7f0000000c40)=[{&(0x7f00000005c0)="c2", 0x1}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x7, 0x4, &(0x7f00000005c0)=ANY=[@ANYRESOCT=r0], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x55, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x71}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000013000000850000008600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='afs_flock_op\x00', r9}, 0x18) 3.711567293s ago: executing program 4 (id=11005): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\v\x00\x00\x00\a\x00\x00\x00\b\x00\x00\x00\b\x00\x00\x00'], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000380)=@generic={&(0x7f0000000300)='./file0\x00'}, 0x18) 3.513376508s ago: executing program 4 (id=11006): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/fscaps', 0x800, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r2}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000070000002a000000059da80000000100", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r3}, &(0x7f0000000280), &(0x7f00000002c0)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r4}, 0x18) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, r7, {0x2, 0x4e20, @rand_addr=0x64010101}, 0x2004}}, 0x2e) preadv(r7, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r7, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24008009}, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) 3.419119696s ago: executing program 6 (id=11007): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000003280)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$tipc(r1, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34000841}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) r3 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) setsockopt$IPT_SO_SET_REPLACE(r7, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0xe501, 0x3, 0x2a8, 0x138, 0x6affffff, 0x3403000b, 0x0, 0x7, 0x210, 0x230, 0x230, 0x210, 0x223, 0x3, 0x0, {[{{@ip={@remote, @local, 0x0, 0x0, 'veth1_macvtap\x00', 'veth1_to_team\x00'}, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x28f5c, 0x4, 0x0, 0x0, 0x0, 0x2}}, @common=@unspec=@time={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x308) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r2}, 0x18) recvmsg(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000001a00)=[{&(0x7f0000001600)=""/115, 0x73}], 0x1, &(0x7f00000032c0)=""/4096, 0x1000}, 0x0) 3.285344097s ago: executing program 3 (id=11008): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='sched_switch\x00', r4}, 0x18) listen(0xffffffffffffffff, 0x0) socket$tipc(0x1e, 0x5, 0x0) process_vm_readv(r0, &(0x7f0000000840)=[{&(0x7f0000000300)=""/38, 0x26}, {&(0x7f0000000380)=""/2, 0x2}, {&(0x7f00000004c0)=""/65, 0x41}, {&(0x7f00000003c0)=""/33, 0x21}, {&(0x7f0000000540)=""/148, 0x94}, {&(0x7f0000000680)=""/201, 0xc9}, {&(0x7f0000000a00)=""/4096, 0x1000}, {&(0x7f0000000780)=""/190, 0xbe}], 0x8, &(0x7f0000001f80)=[{&(0x7f00000008c0)=""/249, 0xf9}, {&(0x7f0000001a00)=""/200, 0xc8}, {&(0x7f0000001b00)=""/84, 0x54}, {&(0x7f0000001b80)=""/77, 0x4d}, {&(0x7f0000001c00)=""/225, 0xe1}, {&(0x7f0000001d00)=""/71, 0x47}, {&(0x7f0000001d80)=""/114, 0x72}, {&(0x7f0000001e00)=""/128, 0x80}, {&(0x7f0000001e80)=""/118, 0x76}, {&(0x7f0000001f00)=""/119, 0x77}], 0xa, 0x0) 3.24622443s ago: executing program 1 (id=11009): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="020300090d00"/15], 0x68}, 0x1, 0x7}, 0x4a79a644ae8bc70) 3.052312065s ago: executing program 4 (id=11010): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000080000085000000060000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r0}, 0x10) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) 3.027868237s ago: executing program 1 (id=11011): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="44b0020000000104fc8a34ff8000000002000000", @ANYRES32=0x0, @ANYBLOB="0315000000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x20, 0x0, 0x1, 0x0, 0x0) r5 = socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001900010000000000000000000218"], 0x2c}, 0x1, 0x0, 0x0, 0x6}, 0x30009091) sendto$inet6(r5, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 2.850123171s ago: executing program 4 (id=11012): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x4, &(0x7f00000002c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x6}}, {@i_version}]}, 0x6, 0x5fd, &(0x7f0000000c00)="$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") 2.507977629s ago: executing program 6 (id=11013): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000740)=""/67, 0x0, 0xd000}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74, 0xd000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000a40)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) 2.501722699s ago: executing program 4 (id=11014): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='sched_switch\x00', r4}, 0x18) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) 2.453994303s ago: executing program 0 (id=11015): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x20140, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) io_submit(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b000000080000000200000004000000"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r5, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xe, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r8, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3f0, 0x0, 0x0, 0xe8, 0x308, 0x308, 0x308, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x5, 0xff}}}, {{@uncond, 0xc0, 0x110, 0x0, {0x0, 0x1e03}}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local, @multicast2, 0x2}}}, {{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, 0x0, 0x0, 0x0, 0x0, {@mac=@broadcast}, {@empty, {[0x0, 0x0, 0x0, 0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pim6reg0\x00', 'netpci0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@local, @private=0xa010101, @rand_addr=0x64010100, 0x4}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) 2.453514713s ago: executing program 6 (id=11016): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x20, 0x0, 0x1, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYBLOB="010024bd7000fddbaa250300000018000180"], 0x3c}, 0x1, 0x0, 0x0, 0x20009005}, 0x2000c000) r5 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r5, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) sendmsg$inet(r6, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0x1}], 0x1}, 0x0) 2.314181314s ago: executing program 3 (id=11017): r0 = syz_open_dev$vcsu(&(0x7f0000000040), 0x6, 0x80800) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000300)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000003c0)='mm_page_alloc\x00', r5}, 0x18) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.380126779s ago: executing program 1 (id=11018): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x4028, @ipv4={'\x00', '\xff\xff', @empty}, 0x2}, 0x1c) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x48) prlimit64(0x0, 0x6, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2d0003, &(0x7f00000004c0)={[], [{@appraise_type}]}, 0x41, 0x7c1, &(0x7f0000001180)="$eJzs3c9rXNUeAPDvnUx+tu8lDx6817cKPHivUDoxJbYKghEXIlgo6MqFbZhMQ8wkUzKT0oSgKSK4EVTc6aZrf27ErT8WbvT/EEvVtFh1IZE7mUkmzUyatJkZSz8fuM05c8+dc7733Dn3dO7lTgAPrdH0n0zEsYh4K4kYrr2eRERvNZWNmNwsd3t9NZ8uSWxsPP9TUi1za301Hw3bpI7UMv+OiK9ejziR2V1veXllbqpYLCzW8mOV+Utj5eWVk7PzUzOFmcLC6fGJiVNnHj1z+r7CG2zM/PLdytHrbz/z/48nf3/tX5+8+XUSk3G0tq4xjsMyGqO1fdKb7sIdnj7syrrms1f2UajhCMi2szEcUNoxPbVeORbD0bNX/wx2smUAQLu8GhEbrfS0XAMAPNCSzfP/k91uBwDQKbG2+T3ArfXVfH3p9ncSnXTjqYgYGGiyJlu7ZjdQvQ46dCvZcWUkiYiRQ6h/NCLe//ylD9Ml2nQdEqCZtasRcWFkdPf4n+y6Z+GgHmn+8kxjZvSOlcY/6Jwv0vnPY83mf5mt+U80mf/0N/ns3ou7f/6bzc0OTzr/e6Lh3rbbDfHXjPTUcn+rzvl6k4uzxUI6tv09Io5Hb3+aH9+jjuM3/7jZal3j/O/nd17+IK0//btdIvNDtn/nNtNTlan7ibnRjasR/8k2iz8d//ur+z9pMf89V0v33aWOZx9/471W69L403jry+7422vjWsT/mvZ/slUm2fP+xLGLs+kOqB8UTXw6GUOt6h/Nbvd/uqT11/8v0Alp/w/tHf9I0ni/Znnfb711t9i314a/bFWo8fhvHn/z478veaGarh97V6YqlcXxiL7kud2vn9retp6vl0/jP/7f5p//+vjX5Ph/MX3/C/vcEdnrP3507/G3Vxr/9IH6/8CJGLg919Oq/v31/8SObfYz/u23gfe63wAAAAAAAAAAAAAAAAAAAAAAAADgIDIRcTSSTG4rncnkcpu/4f3PGMoUS+XKiYulpYXpqP5W9kj0ZuqPuhxueB7qeO15+PX8qZ356rMg/xER7/YPVtfn8qXidLeDBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICaIy1+/z/1ff8dhXu60UIAoC0GnNgB4GGTZLPdbgIA0GkDEXd+1b+HwXY2BQDokIFuNwAA6DjnfwB4+Nzl/H+AawMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQ1LmzZ9Nl49f11Xyan768vDRXunxyulCey80v5XP50uKl3EypNFMs5PKl+ZZvtLb5p1gqXZqIhaUrY5VCuTJWXl45P19aWqicn52fmimcL/R2LDIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2L/y8srcVLFYWJToSmLum81++Cu0J1M7Jg6wVfLbRlX3G9+lRKxt7rPO1560uYro2x4lBjs/MAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8IP4MAAD//3CBGNE=") sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) ioprio_set$pid(0x1, r1, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VT_GETMODE(0xffffffffffffffff, 0x5601, 0x0) poll(0x0, 0x0, 0x5) keyctl$search(0xa, 0x0, 0x0, &(0x7f0000000100)={'syz', 0x0}, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$getregset(0x4205, r5, 0x2, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78}) ptrace$getregset(0x4204, r5, 0x2, &(0x7f0000000740)={0x0}) ptrace$getregset(0x4204, r5, 0x2, &(0x7f0000000100)={&(0x7f00000000c0)=""/40, 0x28}) lseek(r4, 0x851, 0x0) 1.377253039s ago: executing program 6 (id=11019): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket(0x2, 0x2, 0x0) fcntl$setlease(r0, 0x400, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x100) mkdirat(0xffffffffffffff9c, 0x0, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x0, 0x12) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002eb0e00000000000000000105000600200000000a00000040010000000500e50000070000001f00001a000000030000a95a6e870200010000e9ff070040000200000000050005000000cc580a"], 0x80}}, 0x0) sendmmsg(r4, &(0x7f0000000180), 0x400008a, 0x0) 1.153318897s ago: executing program 0 (id=11020): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4c0000000202010200000000000000000200000a300002802c00018004000300"], 0x4c}, 0x1, 0x0, 0x0, 0x804}, 0x80) 1.109930731s ago: executing program 3 (id=11021): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x1, 0xa, 0x5, 0x7, 0xc1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000100), 0x3f, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r0, &(0x7f0000000340), &(0x7f00000004c0)=""/192}, 0x20) 658.100117ms ago: executing program 3 (id=11022): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000023000000850000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="5c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800e00010069703665727370616e0000002000028006000200300000001400060000000000000000000000ffff7f00000108000a00", @ANYRES32], 0x5c}}, 0x0) 657.772297ms ago: executing program 0 (id=11023): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r0}, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00'}) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000380)='sys_enter\x00', r4}, 0x10) ioprio_set$pid(0x1, 0x0, 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) 641.758089ms ago: executing program 0 (id=11024): capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000040)={0x200000, 0x200000}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x24c01, 0x0) dup3(r0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x48) 195.580944ms ago: executing program 0 (id=11025): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x20bc, 0x5500, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x7, 0x4, 0x1, {0x22, 0xb}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0xc, {[@main=@item_012={0x1, 0x0, 0x8, "11"}, @local=@item_4={0x3, 0x2, 0x1}, @local=@item_4={0x3, 0x2, 0x2, "243aac8a"}]}}, 0x0}, 0x0) 94.083743ms ago: executing program 1 (id=11026): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000020b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x20000023896) 91.380913ms ago: executing program 6 (id=11027): r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f0000000180)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @broadcast}, 0x0, 0x3, 0x1}}, 0x26) 28.258178ms ago: executing program 3 (id=11028): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000000}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x19, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) socket$tipc(0x1e, 0x2, 0x0) sched_setscheduler(r0, 0x1, &(0x7f00000005c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair(0x1d, 0x2, 0x2, &(0x7f0000000000)={0x0, 0x0}) 0s ago: executing program 6 (id=11029): socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@empty}}, 0xe4) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) close(r0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e0001821501f6"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8}, {0x0, 0xb}}}, 0xb8}}, 0x0) kernel console output (not intermixed with test programs): ysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 3155.744441][ T24] audit: type=1400 audit(1755578001.460:52415): avc: denied { perfmon } for pid=6122 comm="syz.3.10710" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 3155.766769][ T24] audit: type=1400 audit(1755578001.490:52416): avc: denied { mounton } for pid=6122 comm="syz.3.10710" path="/268/file0" dev="tmpfs" ino=1584 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 3155.791354][ T24] audit: type=1400 audit(1755578001.490:52417): avc: denied { mount } for pid=6122 comm="syz.3.10710" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 3155.814701][ T24] audit: type=1400 audit(1755578001.510:52418): avc: denied { unmount } for pid=3625 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 3155.837191][ T24] audit: type=1400 audit(1755578001.520:52419): avc: denied { read write } for pid=3625 comm="syz-executor" name="loop1" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 3155.872093][ T6123] netlink: 12 bytes leftover after parsing attributes in process `syz.6.10711'. [ 3155.954491][ T372] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 3156.287774][ T372] usb 4-1: Using ep0 maxpacket: 16 [ 3156.421907][ T372] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 3156.470643][ T372] usb 4-1: config 0 has an invalid descriptor of length 75, skipping remainder of the config [ 3156.524911][ T372] usb 4-1: config 0 has no interface number 0 [ 3156.709036][ T372] usb 4-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 3156.759075][ T372] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3156.770545][ T372] usb 4-1: Product: syz [ 3156.774782][ T372] usb 4-1: Manufacturer: syz [ 3156.779477][ T372] usb 4-1: SerialNumber: syz [ 3156.789853][ T372] usb 4-1: config 0 descriptor?? [ 3157.110042][ T372] uvcvideo: Found UVC 0.00 device syz (046d:08d3) [ 3157.130135][ T372] uvcvideo: Failed to query (GET_INFO) UVC control 2 on unit 1: -71 (exp. 1). [ 3157.160128][ T372] uvcvideo: Failed to query (GET_INFO) UVC control 3 on unit 1: -71 (exp. 1). [ 3157.169948][T31163] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 3157.190568][ T372] uvcvideo: Failed to query (GET_INFO) UVC control 6 on unit 1: -71 (exp. 1). [ 3157.223907][ T372] uvcvideo: Failed to query (GET_INFO) UVC control 5 on unit 1: -71 (exp. 1). [ 3157.260321][ T372] uvcvideo: Failed to query (GET_INFO) UVC control 13 on unit 1: -71 (exp. 1). [ 3157.350074][ T372] uvcvideo: Failed to query (GET_INFO) UVC control 14 on unit 1: -71 (exp. 1). [ 3157.390204][ T372] uvcvideo: Failed to query (GET_INFO) UVC control 17 on unit 1: -71 (exp. 1). [ 3157.420022][T31163] usb 2-1: Using ep0 maxpacket: 16 [ 3157.453062][ T372] uvcvideo: Failed to query (GET_INFO) UVC control 18 on unit 1: -71 (exp. 1). [ 3157.493930][ T372] uvcvideo: No valid video chain found. [ 3157.568365][ T372] usb 4-1: USB disconnect, device number 54 [ 3157.575004][T31163] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 3157.607814][T31163] usb 2-1: config 0 has an invalid descriptor of length 75, skipping remainder of the config [ 3157.649255][T31163] usb 2-1: config 0 has no interface number 0 [ 3157.850293][T31163] usb 2-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 3157.877053][T31163] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3157.969932][T31163] usb 2-1: Product: syz [ 3157.974192][T31163] usb 2-1: Manufacturer: syz [ 3157.978804][T31163] usb 2-1: SerialNumber: syz [ 3157.993562][T31163] usb 2-1: config 0 descriptor?? [ 3158.092223][ T6160] netlink: 87 bytes leftover after parsing attributes in process `syz.4.10721'. [ 3158.377638][ T6155] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10720'. [ 3158.386951][T31163] uvcvideo: Found UVC 0.00 device syz (046d:08d3) [ 3158.410241][T31163] uvcvideo: Failed to query (GET_INFO) UVC control 2 on unit 1: -71 (exp. 1). [ 3158.440001][T31163] uvcvideo: Failed to query (GET_INFO) UVC control 3 on unit 1: -71 (exp. 1). [ 3158.470453][T31163] uvcvideo: Failed to query (GET_INFO) UVC control 6 on unit 1: -71 (exp. 1). [ 3158.559986][T31163] uvcvideo: Failed to query (GET_INFO) UVC control 5 on unit 1: -71 (exp. 1). [ 3158.589988][T31163] uvcvideo: Failed to query (GET_INFO) UVC control 13 on unit 1: -71 (exp. 1). [ 3158.610183][T31163] uvcvideo: Failed to query (GET_INFO) UVC control 14 on unit 1: -71 (exp. 1). [ 3158.629978][T31163] uvcvideo: Failed to query (GET_INFO) UVC control 17 on unit 1: -71 (exp. 1). [ 3158.650054][T31163] uvcvideo: Failed to query (GET_INFO) UVC control 18 on unit 1: -71 (exp. 1). [ 3158.684861][T31163] uvcvideo: No valid video chain found. [ 3158.832700][ T6164] netlink: 87 bytes leftover after parsing attributes in process `syz.3.10722'. [ 3159.037570][T31163] usb 2-1: USB disconnect, device number 36 [ 3159.136914][T26876] print_req_error: 30 callbacks suppressed [ 3159.136934][T26876] blk_update_request: I/O error, dev loop1, sector 768 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 3159.193591][T26857] blk_update_request: I/O error, dev loop1, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 3159.208503][T26876] blk_update_request: I/O error, dev loop1, sector 768 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3159.252726][T26876] buffer_io_error: 20 callbacks suppressed [ 3159.252738][T26876] Buffer I/O error on dev loop1p4, logical block 0, async page read [ 3159.254892][T26857] blk_update_request: I/O error, dev loop1, sector 8064 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3159.279043][T26876] blk_update_request: I/O error, dev loop1, sector 768 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3159.298510][T26857] Buffer I/O error on dev loop1p3, logical block 1008, async page read [ 3159.309208][T26876] Buffer I/O error on dev loop1p4, logical block 0, async page read [ 3159.341945][T26876] blk_update_request: I/O error, dev loop1, sector 768 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3159.356410][T26876] Buffer I/O error on dev loop1p4, logical block 0, async page read [ 3159.365737][T26876] blk_update_request: I/O error, dev loop1, sector 768 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3159.378325][T26876] Buffer I/O error on dev loop1p4, logical block 0, async page read [ 3159.386901][T26876] blk_update_request: I/O error, dev loop1, sector 768 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3159.420389][T26876] Buffer I/O error on dev loop1p4, logical block 0, async page read [ 3161.894400][T31163] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 3161.902044][ T24] kauditd_printk_skb: 281 callbacks suppressed [ 3161.902059][ T24] audit: type=1400 audit(1755578005.550:52701): avc: denied { execmem } for pid=6183 comm="syz.0.10730" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 3161.948380][ T24] audit: type=1400 audit(1755578005.560:52702): avc: denied { map_create } for pid=6185 comm="syz.3.10731" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 3161.986146][ T24] audit: type=1400 audit(1755578005.560:52703): avc: denied { prog_load } for pid=6185 comm="syz.3.10731" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 3162.009155][ T6189] EXT4-fs error (device loop0): ext4_orphan_get:1395: inode #15: comm syz.0.10730: casefold flag without casefold feature [ 3162.025067][ T6189] EXT4-fs error (device loop0): ext4_orphan_get:1400: comm syz.0.10730: couldn't read orphan inode 15 (err -117) [ 3162.038399][ T6189] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 3162.084180][ T24] audit: type=1400 audit(1755578005.560:52704): avc: denied { bpf } for pid=6185 comm="syz.3.10731" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 3162.105139][ T24] audit: type=1400 audit(1755578005.560:52705): avc: denied { perfmon } for pid=6185 comm="syz.3.10731" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 3162.120995][ T6186] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 3162.250589][ T24] audit: type=1400 audit(1755578005.780:52706): avc: denied { map_create } for pid=6178 comm="syz.4.10729" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 3162.374624][ T6197] netlink: 87 bytes leftover after parsing attributes in process `syz.1.10733'. [ 3162.572311][ T24] audit: type=1400 audit(1755578005.780:52707): avc: denied { perfmon } for pid=6178 comm="syz.4.10729" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 3162.595260][T29833] blk_update_request: I/O error, dev loop1, sector 768 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 3162.633305][T29833] blk_update_request: I/O error, dev loop1, sector 768 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3162.642989][ T6199] audit: audit_backlog=65 > audit_backlog_limit=64 [ 3162.645150][T29833] Buffer I/O error on dev loop1p4, logical block 0, async page read [ 3162.658856][ T6186] audit: audit_backlog=65 > audit_backlog_limit=64 [ 3162.659563][ T24] audit: type=1400 audit(1755578005.780:52708): avc: denied { map_read map_write } for pid=6178 comm="syz.4.10729" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 3162.700923][T27467] Buffer I/O error on dev loop1p3, logical block 1008, async page read [ 3162.711123][T29833] Buffer I/O error on dev loop1p4, logical block 0, async page read [ 3162.741445][T29833] Buffer I/O error on dev loop1p4, logical block 0, async page read [ 3162.817170][T31163] usb 2-1: device not accepting address 37, error -71 [ 3163.110567][T31162] usb 7-1: new high-speed USB device number 99 using dummy_hcd [ 3163.123687][ T6214] EXT4-fs error (device loop3): ext4_orphan_get:1395: inode #15: comm syz.3.10736: casefold flag without casefold feature [ 3163.137412][ T6214] EXT4-fs error (device loop3): ext4_orphan_get:1400: comm syz.3.10736: couldn't read orphan inode 15 (err -117) [ 3163.149940][ T6214] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 3163.171806][ T6214] EXT4-fs error (device loop3): ext4_check_dx_root:2229: inode #2: comm syz.3.10736: Corrupt dir, invalid name_len for '.', running e2fsck is recommended [ 3163.419967][T31162] usb 7-1: Using ep0 maxpacket: 16 [ 3163.540065][T31162] usb 7-1: config 0 has an invalid interface number: 105 but max is 0 [ 3163.571217][T31162] usb 7-1: config 0 has an invalid descriptor of length 75, skipping remainder of the config [ 3163.770635][T31162] usb 7-1: config 0 has no interface number 0 [ 3164.020292][T31162] usb 7-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 3164.037953][T31162] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3164.047433][T31162] usb 7-1: Product: syz [ 3164.053375][T31162] usb 7-1: Manufacturer: syz [ 3164.059336][T31162] usb 7-1: SerialNumber: syz [ 3164.113422][T31162] usb 7-1: config 0 descriptor?? [ 3164.257842][T31163] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 3164.420103][T31162] uvcvideo: Found UVC 0.00 device syz (046d:08d3) [ 3164.440001][T31162] uvcvideo: Failed to query (GET_INFO) UVC control 2 on unit 1: -71 (exp. 1). [ 3164.460011][T31162] uvcvideo: Failed to query (GET_INFO) UVC control 3 on unit 1: -71 (exp. 1). [ 3164.479997][T31162] uvcvideo: Failed to query (GET_INFO) UVC control 6 on unit 1: -71 (exp. 1). [ 3164.499948][T31163] usb 2-1: Using ep0 maxpacket: 16 [ 3164.508336][T31162] uvcvideo: Failed to query (GET_INFO) UVC control 5 on unit 1: -71 (exp. 1). [ 3164.529991][T31162] uvcvideo: Failed to query (GET_INFO) UVC control 13 on unit 1: -71 (exp. 1). [ 3164.539935][ T1698] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 3164.549968][T31162] uvcvideo: Failed to query (GET_INFO) UVC control 14 on unit 1: -71 (exp. 1). [ 3164.579960][T31162] uvcvideo: Failed to query (GET_INFO) UVC control 17 on unit 1: -71 (exp. 1). [ 3164.609973][T31162] uvcvideo: Failed to query (GET_INFO) UVC control 18 on unit 1: -71 (exp. 1). [ 3164.619049][T31162] uvcvideo: No valid video chain found. [ 3164.625235][T31163] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 3164.639923][T31163] usb 2-1: config 0 has an invalid descriptor of length 75, skipping remainder of the config [ 3164.661032][T31162] usb 7-1: USB disconnect, device number 99 [ 3164.667689][T31163] usb 2-1: config 0 has no interface number 0 [ 3164.819931][ T1698] usb 4-1: Using ep0 maxpacket: 16 [ 3164.840001][T31163] usb 2-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 3164.859579][T31163] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3164.872937][T31163] usb 2-1: Product: syz [ 3164.877166][T31163] usb 2-1: Manufacturer: syz [ 3164.886256][T31163] usb 2-1: SerialNumber: syz [ 3164.896054][T31163] usb 2-1: config 0 descriptor?? [ 3164.950081][ T1698] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 3165.321532][ T6276] netlink: 87 bytes leftover after parsing attributes in process `syz.0.10749'. [ 3165.470097][T31163] uvcvideo: Found UVC 0.00 device syz (046d:08d3) [ 3165.472364][ T1698] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 3165.492380][ T1698] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3165.501716][ T1698] usb 4-1: Product: syz [ 3165.509146][ T1698] usb 4-1: Manufacturer: syz [ 3165.525192][ T1698] usb 4-1: SerialNumber: syz [ 3165.553054][ T1698] usb 4-1: config 0 descriptor?? [ 3165.553714][T31163] uvcvideo: Failed to query (GET_INFO) UVC control 2 on unit 1: -71 (exp. 1). [ 3165.601927][T31163] uvcvideo: Failed to query (GET_INFO) UVC control 3 on unit 1: -71 (exp. 1). [ 3165.621100][ T1698] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 3165.630666][ T1698] usb 4-1: Detected FT232RL [ 3165.632198][T31163] uvcvideo: Failed to query (GET_INFO) UVC control 6 on unit 1: -71 (exp. 1). [ 3165.660084][T31163] uvcvideo: Failed to query (GET_INFO) UVC control 5 on unit 1: -71 (exp. 1). [ 3166.730016][ T1698] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 3167.119985][T31163] uvcvideo: Failed to query (GET_INFO) UVC control 13 on unit 1: -71 (exp. 1). [ 3167.129180][ T24] kauditd_printk_skb: 496 callbacks suppressed [ 3167.129195][ T24] audit: type=1400 audit(1755578013.070:53168): avc: denied { prog_load } for pid=6278 comm="syz.6.10752" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 3167.184865][ T24] audit: type=1400 audit(1755578013.070:53169): avc: denied { bpf } for pid=6278 comm="syz.6.10752" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 3167.206151][T31163] uvcvideo: Failed to query (GET_INFO) UVC control 14 on unit 1: -71 (exp. 1). [ 3167.223435][ T24] audit: type=1400 audit(1755578013.070:53170): avc: denied { bpf } for pid=6278 comm="syz.6.10752" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 3167.269948][T31163] uvcvideo: Failed to query (GET_INFO) UVC control 17 on unit 1: -71 (exp. 1). [ 3167.290021][T31163] uvcvideo: Failed to query (GET_INFO) UVC control 18 on unit 1: -71 (exp. 1). [ 3167.300020][T31163] uvcvideo: No valid video chain found. [ 3167.306973][T31163] usb 2-1: USB disconnect, device number 39 [ 3167.314056][ T24] audit: type=1400 audit(1755578013.070:53171): avc: denied { perfmon } for pid=6278 comm="syz.6.10752" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 3167.314576][T26857] udevd[26857]: setting mode of /dev/bus/usb/002/039 to 020664 failed: No such file or directory [ 3167.336078][ T24] audit: type=1400 audit(1755578013.070:53172): avc: denied { prog_run } for pid=6278 comm="syz.6.10752" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 3167.366453][ T24] audit: type=1400 audit(1755578013.070:53173): avc: denied { mounton } for pid=6278 comm="syz.6.10752" path="/503/bus" dev="tmpfs" ino=2948 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 3167.389455][ T24] audit: type=1400 audit(1755578013.080:53174): avc: denied { unlink } for pid=6278 comm="syz.6.10752" name="#57" dev="tmpfs" ino=2953 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 3167.412316][ T24] audit: type=1400 audit(1755578013.080:53175): avc: denied { mount } for pid=6278 comm="syz.6.10752" name="/" dev="overlay" ino=2947 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 3167.445695][ T24] audit: type=1400 audit(1755578013.090:53176): avc: denied { perfmon } for pid=6283 comm="syz.0.10753" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 3167.467086][ T24] audit: type=1400 audit(1755578013.090:53177): avc: denied { map_read map_write } for pid=6283 comm="syz.0.10753" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 3167.489373][T26857] udevd[26857]: setting owner of /dev/bus/usb/002/039 to uid=0, gid=0 failed: No such file or directory [ 3167.530121][ T6234] EXT4-fs (loop3): Ignoring removed orlov option [ 3167.753371][ T6302] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 3167.760934][ T6302] EXT4-fs (loop1): Test dummy encryption mode enabled [ 3167.768092][ T6302] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 3167.775371][ T6302] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 3167.848277][ T6302] EXT4-fs (loop1): 1 truncate cleaned up [ 3167.854119][ T6302] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,mblk_io_submit,inlinecrypt,test_dummy_encryption=v1,barrier,mblk_io_submit,nogrpid, [ 3167.902242][ T6234] EXT4-fs (loop3): mounted filesystem without journal. Opts: orlov,min_batch_time=0x0000000000000004,,errors=continue [ 3167.959979][ T1698] ftdi_sio 4-1:0.0: GPIO initialisation failed: -71 [ 3167.976425][ T1698] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 3167.989475][ T6297] overlayfs: './file1' not a directory [ 3167.998202][ T6294] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10756'. [ 3168.342600][ T1698] usb 4-1: USB disconnect, device number 55 [ 3168.366039][ T1698] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 3168.444676][ T1698] ftdi_sio 4-1:0.0: device disconnected [ 3168.590274][T29833] print_req_error: 22 callbacks suppressed [ 3168.590297][T29833] blk_update_request: I/O error, dev loop1, sector 768 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 3168.653173][T26857] blk_update_request: I/O error, dev loop1, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 3168.658001][T29833] blk_update_request: I/O error, dev loop1, sector 768 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3168.679856][T29833] buffer_io_error: 14 callbacks suppressed [ 3168.685781][T29833] Buffer I/O error on dev loop1p4, logical block 0, async page read [ 3168.694767][T29833] blk_update_request: I/O error, dev loop1, sector 768 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3168.706252][T29833] Buffer I/O error on dev loop1p4, logical block 0, async page read [ 3168.718323][T29833] blk_update_request: I/O error, dev loop1, sector 768 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3168.725876][T26857] blk_update_request: I/O error, dev loop1, sector 8064 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3168.761599][T29833] Buffer I/O error on dev loop1p4, logical block 0, async page read [ 3168.838424][T26857] Buffer I/O error on dev loop1p3, logical block 1008, async page read [ 3168.848525][T29833] blk_update_request: I/O error, dev loop1, sector 768 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3168.867098][T29833] Buffer I/O error on dev loop1p4, logical block 0, async page read [ 3169.027158][T29833] blk_update_request: I/O error, dev loop1, sector 768 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3169.170456][T29833] Buffer I/O error on dev loop1p4, logical block 0, async page read [ 3169.444931][T26857] blk_update_request: I/O error, dev loop1, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 3169.469040][T26870] blk_update_request: I/O error, dev loop1, sector 768 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 3169.470024][T26857] Buffer I/O error on dev loop1p3, logical block 1008, async page read [ 3169.514518][T26870] Buffer I/O error on dev loop1p4, logical block 0, async page read [ 3169.559050][T26870] Buffer I/O error on dev loop1p4, logical block 0, async page read [ 3170.174829][ T6344] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 3170.182410][ T6344] EXT4-fs (loop1): Test dummy encryption mode enabled [ 3170.189407][ T6344] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 3170.196687][ T6344] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 3170.258036][ T6344] EXT4-fs (loop1): 1 truncate cleaned up [ 3170.263936][ T6344] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,mblk_io_submit,inlinecrypt,test_dummy_encryption=v1,barrier,mblk_io_submit,nogrpid, [ 3170.603747][ T6343] overlayfs: './file1' not a directory [ 3170.610028][ T1698] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 3170.859931][ T1698] usb 4-1: Using ep0 maxpacket: 16 [ 3170.877756][ T6355] EXT4-fs (loop0): Ignoring removed oldalloc option [ 3170.890085][ T6355] EXT4-fs (loop0): orphan cleanup on readonly fs [ 3170.897756][ T6355] EXT4-fs error (device loop0): ext4_acquire_dquot:6226: comm syz.0.10770: Failed to acquire dquot type 1 [ 3170.909945][T31163] usb 5-1: new high-speed USB device number 123 using dummy_hcd [ 3170.911408][ T6355] EXT4-fs (loop0): 1 truncate cleaned up [ 3170.923848][ T6355] EXT4-fs (loop0): mounted filesystem without journal. Opts: bsdgroups,nodiscard,oldalloc,grpjquota=,nobarrier,noquota,abort,nodiscard,nodiscard,,errors=continue [ 3170.960360][T31162] usb 7-1: new high-speed USB device number 100 using dummy_hcd [ 3171.010963][ T1698] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 3171.041481][ T1698] usb 4-1: config 0 has an invalid descriptor of length 75, skipping remainder of the config [ 3171.086198][T26876] Buffer I/O error on dev loop1p4, logical block 0, async page read [ 3171.098802][ T1698] usb 4-1: config 0 has no interface number 0 [ 3171.159926][T31163] usb 5-1: Using ep0 maxpacket: 16 [ 3171.200091][T31162] usb 7-1: Using ep0 maxpacket: 16 [ 3171.279987][ T1698] usb 4-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 3171.280032][T31163] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 3171.289535][ T1698] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3171.308065][ T1698] usb 4-1: Product: syz [ 3171.310018][T31163] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3171.312679][ T1698] usb 4-1: Manufacturer: syz [ 3171.328559][ T1698] usb 4-1: SerialNumber: syz [ 3171.330032][T31162] usb 7-1: config 0 has an invalid interface number: 105 but max is 0 [ 3171.337258][ T1698] usb 4-1: config 0 descriptor?? [ 3171.347021][T31160] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 3171.354679][T31163] usb 5-1: config 0 has no interface number 0 [ 3171.361076][T31162] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3171.372269][T31162] usb 7-1: config 0 has no interface number 0 [ 3171.530050][T31163] usb 5-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 3171.539229][T31163] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3171.548511][T31162] usb 7-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 3171.569987][T31162] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3171.578456][T31162] usb 7-1: Product: syz [ 3171.583173][T31163] usb 5-1: Product: syz [ 3171.587367][T31163] usb 5-1: Manufacturer: syz [ 3171.592530][T31162] usb 7-1: Manufacturer: syz [ 3171.597272][T31162] usb 7-1: SerialNumber: syz [ 3171.610297][ T1698] uvcvideo: Found UVC 0.00 device syz (046d:08d3) [ 3171.620305][T31163] usb 5-1: SerialNumber: syz [ 3171.626733][T31162] usb 7-1: config 0 descriptor?? [ 3171.632398][T31163] usb 5-1: config 0 descriptor?? [ 3171.639963][ T1698] uvcvideo: Failed to query (GET_INFO) UVC control 2 on unit 1: -71 (exp. 1). [ 3171.660329][ T1698] uvcvideo: Failed to query (GET_INFO) UVC control 3 on unit 1: -71 (exp. 1). [ 3171.680102][ T1698] uvcvideo: Failed to query (GET_INFO) UVC control 6 on unit 1: -71 (exp. 1). [ 3171.710015][ T1698] uvcvideo: Failed to query (GET_INFO) UVC control 5 on unit 1: -71 (exp. 1). [ 3171.720283][T31160] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3171.731334][T31160] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3171.740001][ T1698] uvcvideo: Failed to query (GET_INFO) UVC control 13 on unit 1: -71 (exp. 1). [ 3171.741232][T31160] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 3171.763206][T31160] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 3171.772490][T31160] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3171.779978][ T1698] uvcvideo: Failed to query (GET_INFO) UVC control 14 on unit 1: -71 (exp. 1). [ 3171.791767][T31160] usb 2-1: config 0 descriptor?? [ 3171.810336][ T1698] uvcvideo: Failed to query (GET_INFO) UVC control 17 on unit 1: -71 (exp. 1). [ 3171.829988][ T1698] uvcvideo: Failed to query (GET_INFO) UVC control 18 on unit 1: -71 (exp. 1). [ 3171.840478][ T1698] uvcvideo: No valid video chain found. [ 3171.848329][ T1698] usb 4-1: USB disconnect, device number 56 [ 3171.909966][T31163] uvcvideo: Found UVC 0.00 device syz (046d:08d3) [ 3171.919982][T31162] uvcvideo: Found UVC 0.00 device syz (046d:08d3) [ 3171.930088][T31163] uvcvideo: Failed to query (GET_INFO) UVC control 2 on unit 1: -71 (exp. 1). [ 3171.940040][T31162] uvcvideo: Failed to query (GET_INFO) UVC control 2 on unit 1: -71 (exp. 1). [ 3171.950048][T31163] uvcvideo: Failed to query (GET_INFO) UVC control 3 on unit 1: -71 (exp. 1). [ 3171.960083][T31162] uvcvideo: Failed to query (GET_INFO) UVC control 3 on unit 1: -71 (exp. 1). [ 3171.972374][T31163] uvcvideo: Failed to query (GET_INFO) UVC control 6 on unit 1: -71 (exp. 1). [ 3171.981675][T31162] uvcvideo: Failed to query (GET_INFO) UVC control 6 on unit 1: -71 (exp. 1). [ 3172.037724][T31163] uvcvideo: Failed to query (GET_INFO) UVC control 5 on unit 1: -71 (exp. 1). [ 3172.060023][T31162] uvcvideo: Failed to query (GET_INFO) UVC control 5 on unit 1: -71 (exp. 1). [ 3172.069345][T31163] uvcvideo: Failed to query (GET_INFO) UVC control 13 on unit 1: -71 (exp. 1). [ 3172.089997][T31162] uvcvideo: Failed to query (GET_INFO) UVC control 13 on unit 1: -71 (exp. 1). [ 3172.104203][T31163] uvcvideo: Failed to query (GET_INFO) UVC control 14 on unit 1: -71 (exp. 1). [ 3172.113400][T31162] uvcvideo: Failed to query (GET_INFO) UVC control 14 on unit 1: -71 (exp. 1). [ 3172.135566][ T24] kauditd_printk_skb: 415 callbacks suppressed [ 3172.135581][ T24] audit: type=1400 audit(1755578018.110:53591): avc: denied { read write } for pid=31961 comm="syz-executor" name="loop0" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 3172.167017][T31162] uvcvideo: Failed to query (GET_INFO) UVC control 17 on unit 1: -71 (exp. 1). [ 3172.176130][T31163] uvcvideo: Failed to query (GET_INFO) UVC control 17 on unit 1: -71 (exp. 1). [ 3172.185564][ T24] audit: type=1400 audit(1755578018.110:53592): avc: denied { open } for pid=31961 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 3172.210781][T31163] uvcvideo: Failed to query (GET_INFO) UVC control 18 on unit 1: -71 (exp. 1). [ 3172.219859][T31163] uvcvideo: No valid video chain found. [ 3172.220147][T31162] uvcvideo: Failed to query (GET_INFO) UVC control 18 on unit 1: -71 (exp. 1). [ 3172.239841][T31163] usb 5-1: USB disconnect, device number 123 [ 3172.247241][T31162] uvcvideo: No valid video chain found. [ 3172.255366][T31162] usb 7-1: USB disconnect, device number 100 [ 3172.263216][ T24] audit: type=1400 audit(1755578018.110:53593): avc: denied { ioctl } for pid=31961 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=115 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 3172.296894][T31160] plantronics 0003:047F:FFFF.0053: No inputs registered, leaving [ 3172.368148][ T24] audit: type=1400 audit(1755578018.150:53594): avc: denied { create } for pid=6366 comm="syz.3.10776" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 3172.389248][ T24] audit: type=1400 audit(1755578018.240:53595): avc: denied { ioctl } for pid=6360 comm="syz.1.10773" path="/dev/raw-gadget" dev="devtmpfs" ino=253 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 3172.415213][T31160] plantronics 0003:047F:FFFF.0053: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 3172.447401][ T24] audit: type=1400 audit(1755578018.240:53596): avc: denied { ioctl } for pid=6360 comm="syz.1.10773" path="/dev/raw-gadget" dev="devtmpfs" ino=253 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 3172.473073][ T24] audit: type=1400 audit(1755578018.290:53597): avc: denied { read } for pid=6368 comm="syz.0.10777" name="ashmem" dev="devtmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 3172.499528][ T6367] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10776'. [ 3172.521281][ T24] audit: type=1400 audit(1755578018.290:53598): avc: denied { open } for pid=6368 comm="syz.0.10777" path="/dev/ashmem" dev="devtmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 3172.545922][ T24] audit: type=1400 audit(1755578018.290:53599): avc: denied { execmem } for pid=6368 comm="syz.0.10777" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 3172.584541][ T24] audit: type=1400 audit(1755578018.310:53600): avc: denied { map_create } for pid=6366 comm="syz.3.10776" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 3172.642352][ T6361] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 3172.674956][T31162] usb 2-1: USB disconnect, device number 40 [ 3172.777617][ T6383] netlink: 87 bytes leftover after parsing attributes in process `syz.4.10778'. [ 3173.068757][ T6382] fido_id[6382]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 3174.430107][ T1698] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 3174.959969][ T1698] usb 2-1: Using ep0 maxpacket: 16 [ 3174.989927][T31162] usb 5-1: new high-speed USB device number 124 using dummy_hcd [ 3175.040092][ T6414] xt_CT: You must specify a L4 protocol and not use inversions on it [ 3175.080023][ T1698] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 3175.088238][ T1698] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3175.098625][ T1698] usb 2-1: config 0 has no interface number 0 [ 3175.229950][T31162] usb 5-1: Using ep0 maxpacket: 16 [ 3175.280019][ T1698] usb 2-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 3175.289113][ T1698] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3175.300945][ T1698] usb 2-1: Product: syz [ 3175.305163][ T1698] usb 2-1: Manufacturer: syz [ 3175.309908][ T1698] usb 2-1: SerialNumber: syz [ 3175.315718][ T1698] usb 2-1: config 0 descriptor?? [ 3175.370023][T31162] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 3175.389918][T31162] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3175.419929][T31162] usb 5-1: config 0 has no interface number 0 [ 3175.589981][ T1698] uvcvideo: Found UVC 0.00 device syz (046d:08d3) [ 3175.590057][T31162] usb 5-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 3175.610099][ T1698] uvcvideo: Failed to query (GET_INFO) UVC control 2 on unit 1: -71 (exp. 1). [ 3175.615911][ T6424] EXT4-fs (loop3): Ignoring removed oldalloc option [ 3175.629364][T31162] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3175.630001][ T1698] uvcvideo: Failed to query (GET_INFO) UVC control 3 on unit 1: -71 (exp. 1). [ 3175.637879][T31162] usb 5-1: Product: syz [ 3175.651826][T31162] usb 5-1: Manufacturer: syz [ 3175.656654][T31162] usb 5-1: SerialNumber: syz [ 3175.669958][T31213] usb 7-1: new high-speed USB device number 101 using dummy_hcd [ 3175.679952][ T1698] uvcvideo: Failed to query (GET_INFO) UVC control 6 on unit 1: -71 (exp. 1). [ 3175.679960][T31162] usb 5-1: config 0 descriptor?? [ 3175.699084][ T6424] EXT4-fs (loop3): orphan cleanup on readonly fs [ 3175.710407][ T1698] uvcvideo: Failed to query (GET_INFO) UVC control 5 on unit 1: -71 (exp. 1). [ 3175.720899][ T6424] EXT4-fs error (device loop3): ext4_acquire_dquot:6226: comm syz.3.10792: Failed to acquire dquot type 1 [ 3175.742371][ T6424] EXT4-fs (loop3): 1 truncate cleaned up [ 3175.748987][ T6424] EXT4-fs (loop3): mounted filesystem without journal. Opts: bsdgroups,nodiscard,oldalloc,grpjquota=,nobarrier,noquota,abort,nodiscard,nodiscard,,errors=continue [ 3175.766060][ T1698] uvcvideo: Failed to query (GET_INFO) UVC control 13 on unit 1: -71 (exp. 1). [ 3175.790261][ T1698] uvcvideo: Failed to query (GET_INFO) UVC control 14 on unit 1: -71 (exp. 1). [ 3175.820052][ T1698] uvcvideo: Failed to query (GET_INFO) UVC control 17 on unit 1: -71 (exp. 1). [ 3175.849969][ T1698] uvcvideo: Failed to query (GET_INFO) UVC control 18 on unit 1: -71 (exp. 1). [ 3175.859995][ T1698] uvcvideo: No valid video chain found. [ 3175.869447][ T1698] usb 2-1: USB disconnect, device number 41 [ 3175.929938][T31213] usb 7-1: Using ep0 maxpacket: 16 [ 3175.960021][T31162] uvcvideo: Found UVC 0.00 device syz (046d:08d3) [ 3175.989973][T31162] uvcvideo: Failed to query (GET_INFO) UVC control 2 on unit 1: -71 (exp. 1). [ 3176.019959][T31162] uvcvideo: Failed to query (GET_INFO) UVC control 3 on unit 1: -71 (exp. 1). [ 3176.039953][T31162] uvcvideo: Failed to query (GET_INFO) UVC control 6 on unit 1: -71 (exp. 1). [ 3176.059948][T31162] uvcvideo: Failed to query (GET_INFO) UVC control 5 on unit 1: -71 (exp. 1). [ 3176.060002][T31213] usb 7-1: config 0 has an invalid interface number: 105 but max is 0 [ 3176.078492][T31213] usb 7-1: config 0 has an invalid descriptor of length 75, skipping remainder of the config [ 3176.079976][T31162] uvcvideo: Failed to query (GET_INFO) UVC control 13 on unit 1: -71 (exp. 1). [ 3176.089180][T31213] usb 7-1: config 0 has no interface number 0 [ 3176.140095][T31162] uvcvideo: Failed to query (GET_INFO) UVC control 14 on unit 1: -71 (exp. 1). [ 3176.159979][T31162] uvcvideo: Failed to query (GET_INFO) UVC control 17 on unit 1: -71 (exp. 1). [ 3176.180474][T31162] uvcvideo: Failed to query (GET_INFO) UVC control 18 on unit 1: -71 (exp. 1). [ 3176.197151][T26870] print_req_error: 11 callbacks suppressed [ 3176.197170][T26870] blk_update_request: I/O error, dev loop1, sector 768 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 3176.216967][T26857] blk_update_request: I/O error, dev loop1, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 3176.239363][T26857] blk_update_request: I/O error, dev loop1, sector 8064 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3176.255031][T26870] blk_update_request: I/O error, dev loop1, sector 768 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3176.267936][T26857] buffer_io_error: 5 callbacks suppressed [ 3176.267948][T26857] Buffer I/O error on dev loop1p3, logical block 1008, async page read [ 3176.279778][T31162] uvcvideo: No valid video chain found. [ 3176.289543][T31213] usb 7-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 3176.302211][T26870] Buffer I/O error on dev loop1p4, logical block 0, async page read [ 3176.310100][T31162] usb 5-1: USB disconnect, device number 124 [ 3176.318597][T31213] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3176.321651][T26870] blk_update_request: I/O error, dev loop1, sector 768 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3176.380041][T31213] usb 7-1: Product: syz [ 3176.393403][ T6433] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=6433 comm=syz.1.10793 [ 3176.425576][T31213] usb 7-1: Manufacturer: syz [ 3176.433921][T26870] Buffer I/O error on dev loop1p4, logical block 0, async page read [ 3176.446015][T31213] usb 7-1: SerialNumber: syz [ 3176.458011][T31213] usb 7-1: config 0 descriptor?? [ 3176.477403][T26870] blk_update_request: I/O error, dev loop1, sector 768 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3176.506598][ T6431] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 3176.544736][T26870] Buffer I/O error on dev loop1p4, logical block 0, async page read [ 3176.558827][T26870] blk_update_request: I/O error, dev loop1, sector 768 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3176.574028][T26870] Buffer I/O error on dev loop1p4, logical block 0, async page read [ 3176.590418][ T6431] EXT4-fs (loop0): 1 truncate cleaned up [ 3176.596730][ T6431] EXT4-fs (loop0): mounted filesystem without journal. Opts: i_version,nombcache,debug_want_extra_isize=0x0000000000000068,lazytime,block_validity,sysvgroups,,errors=continue [ 3176.615109][T26870] blk_update_request: I/O error, dev loop1, sector 768 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3176.627410][T26870] Buffer I/O error on dev loop1p4, logical block 0, async page read [ 3176.760239][T31213] uvcvideo: Found UVC 0.00 device syz (046d:08d3) [ 3176.783776][T31213] uvcvideo: Failed to query (GET_INFO) UVC control 2 on unit 1: -71 (exp. 1). [ 3176.850165][T31213] uvcvideo: Failed to query (GET_INFO) UVC control 3 on unit 1: -71 (exp. 1). [ 3176.920179][T31213] uvcvideo: Failed to query (GET_INFO) UVC control 6 on unit 1: -71 (exp. 1). [ 3176.977747][T31213] uvcvideo: Failed to query (GET_INFO) UVC control 5 on unit 1: -71 (exp. 1). [ 3177.070054][T31213] uvcvideo: Failed to query (GET_INFO) UVC control 13 on unit 1: -71 (exp. 1). [ 3177.099959][T31213] uvcvideo: Failed to query (GET_INFO) UVC control 14 on unit 1: -71 (exp. 1). [ 3177.140453][ T24] kauditd_printk_skb: 333 callbacks suppressed [ 3177.140469][ T24] audit: type=1400 audit(1755578023.100:53932): avc: denied { open } for pid=31961 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 3177.199945][T31213] uvcvideo: Failed to query (GET_INFO) UVC control 17 on unit 1: -71 (exp. 1). [ 3177.229970][T31213] uvcvideo: Failed to query (GET_INFO) UVC control 18 on unit 1: -71 (exp. 1). [ 3177.255381][T31213] uvcvideo: No valid video chain found. [ 3177.275828][T31213] usb 7-1: USB disconnect, device number 101 [ 3177.285866][ T24] audit: type=1400 audit(1755578023.100:53933): avc: denied { ioctl } for pid=31961 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=115 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 3178.500984][ T24] audit: type=1400 audit(1755578023.110:53934): avc: denied { ioctl } for pid=32005 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=119 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 3178.537692][ T6447] netlink: 87 bytes leftover after parsing attributes in process `syz.0.10796'. [ 3178.586882][ T24] audit: type=1400 audit(1755578023.160:53935): avc: denied { read write open } for pid=3625 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 3178.612987][ T24] audit: type=1400 audit(1755578023.160:53936): avc: denied { ioctl } for pid=3625 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=116 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 3178.697387][ T24] audit: type=1400 audit(1755578023.170:53937): avc: denied { execmem } for pid=6439 comm="syz.0.10796" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 3178.722944][T26873] blk_update_request: I/O error, dev loop1, sector 768 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 3178.751892][T26873] blk_update_request: I/O error, dev loop1, sector 768 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3178.770705][T26876] Buffer I/O error on dev loop1p3, logical block 1008, async page read [ 3178.889307][ T6463] xt_CT: You must specify a L4 protocol and not use inversions on it [ 3179.020150][T26873] Buffer I/O error on dev loop1p4, logical block 0, async page read [ 3179.091118][ T24] audit: type=1400 audit(1755578023.170:53938): avc: denied { create } for pid=6440 comm="syz.1.10798" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 3179.104934][T26873] Buffer I/O error on dev loop1p4, logical block 0, async page read [ 3179.151108][ T24] audit: type=1400 audit(1755578023.190:53939): avc: denied { create } for pid=6440 comm="syz.1.10798" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 3179.172899][ T24] audit: type=1400 audit(1755578023.220:53940): avc: denied { unmount } for pid=30271 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 3179.194844][T26873] Buffer I/O error on dev loop1p4, logical block 0, async page read [ 3179.239568][ T24] audit: type=1400 audit(1755578023.250:53941): avc: denied { create } for pid=6441 comm="syz.4.10797" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 3179.623528][ T6470] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 3180.068363][ T6478] EXT4-fs error (device loop3): ext4_orphan_get:1395: inode #15: comm syz.3.10805: casefold flag without casefold feature [ 3180.082731][ T6478] EXT4-fs error (device loop3): ext4_orphan_get:1400: comm syz.3.10805: couldn't read orphan inode 15 (err -117) [ 3180.106185][ T6478] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 3180.196488][ T6478] EXT4-fs error (device loop3): ext4_check_dx_root:2229: inode #2: comm syz.3.10805: Corrupt dir, invalid name_len for '.', running e2fsck is recommended [ 3180.964699][ T6470] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 1046) [ 3181.011101][ T6470] FAT-fs (loop0): Filesystem has been set read-only [ 3181.107171][T31961] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 1046) [ 3181.527014][T26870] print_req_error: 14 callbacks suppressed [ 3181.527034][T26870] blk_update_request: I/O error, dev loop1, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 3181.557210][T26870] blk_update_request: I/O error, dev loop1, sector 8064 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3181.569574][T26870] buffer_io_error: 8 callbacks suppressed [ 3181.569586][T26870] Buffer I/O error on dev loop1p3, logical block 1008, async page read [ 3181.591101][T26876] blk_update_request: I/O error, dev loop1, sector 768 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 3181.604777][T26876] blk_update_request: I/O error, dev loop1, sector 768 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3181.619790][T26876] Buffer I/O error on dev loop1p4, logical block 0, async page read [ 3181.632344][ T6500] netlink: 87 bytes leftover after parsing attributes in process `syz.0.10812'. [ 3181.646349][T26876] blk_update_request: I/O error, dev loop1, sector 768 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3181.657714][T26876] Buffer I/O error on dev loop1p4, logical block 0, async page read [ 3181.666425][T26876] blk_update_request: I/O error, dev loop1, sector 768 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3181.677914][T26876] Buffer I/O error on dev loop1p4, logical block 0, async page read [ 3181.687181][T26876] blk_update_request: I/O error, dev loop1, sector 768 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3182.027525][T26876] Buffer I/O error on dev loop1p4, logical block 0, async page read [ 3182.103782][T26876] blk_update_request: I/O error, dev loop1, sector 768 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3182.145724][T26876] Buffer I/O error on dev loop1p4, logical block 0, async page read [ 3182.188774][ T24] kauditd_printk_skb: 213 callbacks suppressed [ 3182.188786][ T24] audit: type=1400 audit(1755578028.160:54155): avc: denied { map_create } for pid=6506 comm="syz.0.10814" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 3182.233349][T26876] blk_update_request: I/O error, dev loop1, sector 768 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 3182.245169][T26876] blk_update_request: I/O error, dev loop1, sector 768 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3182.256822][T26876] Buffer I/O error on dev loop1p4, logical block 0, async page read [ 3182.265361][T26876] Buffer I/O error on dev loop1p4, logical block 0, async page read [ 3182.273636][T26876] Buffer I/O error on dev loop1p4, logical block 0, async page read [ 3182.290593][ T24] audit: type=1400 audit(1755578028.160:54156): avc: denied { perfmon } for pid=6506 comm="syz.0.10814" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 3182.313113][T26870] Buffer I/O error on dev loop1p3, logical block 1008, async page read [ 3182.369200][ T24] audit: type=1400 audit(1755578028.160:54157): avc: denied { map_read map_write } for pid=6506 comm="syz.0.10814" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 3182.399641][T21547] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 3182.423877][ T24] audit: type=1400 audit(1755578028.190:54158): avc: denied { prog_load } for pid=6506 comm="syz.0.10814" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 3182.444030][ T24] audit: type=1400 audit(1755578028.190:54159): avc: denied { bpf } for pid=6506 comm="syz.0.10814" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 3182.465381][ T24] audit: type=1400 audit(1755578028.190:54160): avc: denied { perfmon } for pid=6506 comm="syz.0.10814" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 3182.489465][ T24] audit: type=1400 audit(1755578028.190:54161): avc: denied { prog_run } for pid=6506 comm="syz.0.10814" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 3182.509994][ T24] audit: type=1400 audit(1755578028.190:54162): avc: denied { mounton } for pid=6495 comm="syz.6.10813" path="/520/bus" dev="tmpfs" ino=3046 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 3182.533631][ T24] audit: type=1400 audit(1755578028.190:54163): avc: denied { unlink } for pid=6495 comm="syz.6.10813" name="#63" dev="tmpfs" ino=3051 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 3182.556620][ T24] audit: type=1400 audit(1755578028.190:54164): avc: denied { mount } for pid=6495 comm="syz.6.10813" name="/" dev="overlay" ino=3045 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 3182.639972][ T53] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 3182.660021][T21547] usb 4-1: Using ep0 maxpacket: 16 [ 3182.780015][T21547] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 3182.788490][T21547] usb 4-1: config 0 has an invalid descriptor of length 75, skipping remainder of the config [ 3182.799271][T21547] usb 4-1: config 0 has no interface number 0 [ 3182.960100][T21547] usb 4-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 3182.969675][T21547] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3182.977761][T21547] usb 4-1: Product: syz [ 3182.982249][T21547] usb 4-1: Manufacturer: syz [ 3182.986926][T21547] usb 4-1: SerialNumber: syz [ 3182.993446][T21547] usb 4-1: config 0 descriptor?? [ 3183.000136][ T53] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3183.012334][ T53] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3183.023029][ T53] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 3183.038238][ T53] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 3183.047760][ T53] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3183.057721][ T53] usb 2-1: config 0 descriptor?? [ 3183.270009][T21547] uvcvideo: Found UVC 0.00 device syz (046d:08d3) [ 3183.289998][T21547] uvcvideo: Failed to query (GET_INFO) UVC control 2 on unit 1: -71 (exp. 1). [ 3183.310189][T21547] uvcvideo: Failed to query (GET_INFO) UVC control 3 on unit 1: -71 (exp. 1). [ 3183.340124][T21547] uvcvideo: Failed to query (GET_INFO) UVC control 6 on unit 1: -71 (exp. 1). [ 3183.359996][T21547] uvcvideo: Failed to query (GET_INFO) UVC control 5 on unit 1: -71 (exp. 1). [ 3183.380002][T21547] uvcvideo: Failed to query (GET_INFO) UVC control 13 on unit 1: -71 (exp. 1). [ 3183.727187][ T53] plantronics 0003:047F:FFFF.0054: No inputs registered, leaving [ 3183.738087][ T53] plantronics 0003:047F:FFFF.0054: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 3183.751406][T21547] uvcvideo: Failed to query (GET_INFO) UVC control 14 on unit 1: -71 (exp. 1). [ 3183.779959][T21547] uvcvideo: Failed to query (GET_INFO) UVC control 17 on unit 1: -71 (exp. 1). [ 3183.806416][T21547] uvcvideo: Failed to query (GET_INFO) UVC control 18 on unit 1: -71 (exp. 1). [ 3183.829751][T21547] uvcvideo: No valid video chain found. [ 3183.846305][T21547] usb 4-1: USB disconnect, device number 57 [ 3183.861146][T31163] usb 2-1: USB disconnect, device number 42 [ 3183.876994][ T6529] fido_id[6529]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 3183.971759][ T6527] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 3183.996828][ T6527] EXT4-fs (loop3): 1 truncate cleaned up [ 3184.003001][ T6527] EXT4-fs (loop3): mounted filesystem without journal. Opts: i_version,nombcache,debug_want_extra_isize=0x0000000000000068,lazytime,block_validity,sysvgroups,,errors=continue [ 3185.750054][ T6541] xt_CT: You must specify a L4 protocol and not use inversions on it [ 3186.258908][ T6548] FAULT_INJECTION: forcing a failure. [ 3186.258908][ T6548] name failslab, interval 1, probability 0, space 0, times 0 [ 3186.272951][ T6548] CPU: 0 PID: 6548 Comm: syz.6.10827 Tainted: G W 5.10.240-syzkaller #0 [ 3186.282628][ T6548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 3186.292716][ T6548] Call Trace: [ 3186.296024][ T6548] __dump_stack+0x21/0x24 [ 3186.300363][ T6548] dump_stack_lvl+0x169/0x1d8 [ 3186.305442][ T6548] ? thaw_kernel_threads+0x220/0x220 [ 3186.310911][ T6548] ? show_regs_print_info+0x18/0x18 [ 3186.316412][ T6548] ? mutex_lock+0x8c/0xe0 [ 3186.320881][ T6548] ? mutex_trylock+0xa0/0xa0 [ 3186.325570][ T6548] ? __fget_files+0x2c4/0x320 [ 3186.330264][ T6548] dump_stack+0x15/0x1c [ 3186.334432][ T6548] should_fail+0x3c1/0x510 [ 3186.338846][ T6548] ? __se_sys_memfd_create+0xf2/0x3a0 [ 3186.344219][ T6548] __should_failslab+0xa4/0xe0 [ 3186.348981][ T6548] should_failslab+0x9/0x20 [ 3186.353688][ T6548] __kmalloc+0x60/0x330 [ 3186.357846][ T6548] ? strnlen_user+0x13b/0x1c0 [ 3186.362534][ T6548] __se_sys_memfd_create+0xf2/0x3a0 [ 3186.367827][ T6548] __x64_sys_memfd_create+0x5b/0x70 [ 3186.373029][ T6548] do_syscall_64+0x31/0x40 [ 3186.377539][ T6548] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 3186.383514][ T6548] RIP: 0033:0x7fe274ea2be9 [ 3186.388029][ T6548] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3186.407720][ T6548] RSP: 002b:00007fe27390ae18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 3186.416145][ T6548] RAX: ffffffffffffffda RBX: 00000000000007db RCX: 00007fe274ea2be9 [ 3186.424118][ T6548] RDX: 00007fe27390aef0 RSI: 0000000000000000 RDI: 00007fe274f267e8 [ 3186.432089][ T6548] RBP: 0000200000001e40 R08: 00007fe27390abb7 R09: 00007fe27390ae40 [ 3186.440060][ T6548] R10: 000000000000000a R11: 0000000000000202 R12: 00002000000000c0 [ 3186.448026][ T6548] R13: 00007fe27390aef0 R14: 00007fe27390aeb0 R15: 0000200000000640 [ 3186.575650][T26876] print_req_error: 14 callbacks suppressed [ 3186.575670][T26876] blk_update_request: I/O error, dev loop1, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 3186.611405][T26873] blk_update_request: I/O error, dev loop1, sector 768 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 3186.623347][T26873] blk_update_request: I/O error, dev loop1, sector 768 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3186.634564][T26873] buffer_io_error: 8 callbacks suppressed [ 3186.634576][T26873] Buffer I/O error on dev loop1p4, logical block 0, async page read [ 3186.651575][T26873] blk_update_request: I/O error, dev loop1, sector 768 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3186.678568][T26873] Buffer I/O error on dev loop1p4, logical block 0, async page read [ 3186.923476][T26876] blk_update_request: I/O error, dev loop1, sector 8064 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3186.940499][T26873] blk_update_request: I/O error, dev loop1, sector 768 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3186.953821][T26876] Buffer I/O error on dev loop1p3, logical block 1008, async page read [ 3186.965853][T26873] Buffer I/O error on dev loop1p4, logical block 0, async page read [ 3186.975458][T26873] blk_update_request: I/O error, dev loop1, sector 768 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3186.992942][T26873] Buffer I/O error on dev loop1p4, logical block 0, async page read [ 3187.001932][T26873] blk_update_request: I/O error, dev loop1, sector 768 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3187.013479][ T6556] netlink: 87 bytes leftover after parsing attributes in process `syz.1.10826'. [ 3187.075458][T26873] Buffer I/O error on dev loop1p4, logical block 0, async page read [ 3187.190876][ T24] kauditd_printk_skb: 300 callbacks suppressed [ 3187.190889][ T24] audit: type=1400 audit(1755578033.170:54465): avc: denied { bpf } for pid=6567 comm="syz.6.10833" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 3187.194600][T26876] blk_update_request: I/O error, dev loop1, sector 768 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 3187.221048][ T24] audit: type=1400 audit(1755578033.170:54466): avc: denied { bpf } for pid=6567 comm="syz.6.10833" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 3187.231184][T31160] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 3187.274897][T26857] blk_update_request: I/O error, dev loop1, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 3187.312839][T26857] Buffer I/O error on dev loop1p3, logical block 1008, async page read [ 3187.321489][T26876] Buffer I/O error on dev loop1p4, logical block 0, async page read [ 3187.330491][T26876] Buffer I/O error on dev loop1p4, logical block 0, async page read [ 3187.339358][T26876] Buffer I/O error on dev loop1p4, logical block 0, async page read [ 3187.401699][ T6576] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 3187.529713][ T24] audit: type=1400 audit(1755578033.170:54467): avc: denied { perfmon } for pid=6567 comm="syz.6.10833" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 3187.551757][ T24] audit: type=1400 audit(1755578033.230:54468): avc: denied { execmem } for pid=6564 comm="syz.4.10831" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 3187.576263][ T24] audit: type=1400 audit(1755578033.310:54469): avc: denied { ioctl } for pid=6544 comm="syz.3.10825" path="/dev/raw-gadget" dev="devtmpfs" ino=253 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 3187.603386][ T24] audit: type=1400 audit(1755578033.330:54470): avc: denied { ioctl } for pid=6544 comm="syz.3.10825" path="/dev/raw-gadget" dev="devtmpfs" ino=253 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 3187.629841][ T24] audit: type=1400 audit(1755578033.330:54471): avc: denied { read write } for pid=6567 comm="syz.6.10833" name="loop6" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 3187.629960][T31160] usb 4-1: Using ep0 maxpacket: 16 [ 3187.661472][ T24] audit: type=1400 audit(1755578033.330:54472): avc: denied { open } for pid=6567 comm="syz.6.10833" path="/dev/loop6" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 3187.703656][ T24] audit: type=1400 audit(1755578033.330:54473): avc: denied { ioctl } for pid=6567 comm="syz.6.10833" path="/dev/loop6" dev="devtmpfs" ino=121 ioctlcmd=0x4c00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 3187.782195][ T24] audit: type=1400 audit(1755578033.370:54474): avc: denied { name_bind } for pid=6564 comm="syz.4.10831" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 3187.807644][ T6579] EXT4-fs error (device loop1): ext4_orphan_get:1395: inode #15: comm syz.1.10835: casefold flag without casefold feature [ 3187.822534][T31160] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 3187.831004][ T6579] EXT4-fs error (device loop1): ext4_orphan_get:1400: comm syz.1.10835: couldn't read orphan inode 15 (err -117) [ 3187.843489][ T6579] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 3187.858144][T31160] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3187.872901][T31160] usb 4-1: config 0 has no interface number 0 [ 3187.886106][ T6579] EXT4-fs error (device loop1): ext4_check_dx_root:2229: inode #2: comm syz.1.10835: Corrupt dir, invalid name_len for '.', running e2fsck is recommended [ 3188.104438][T31160] usb 4-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 3188.123678][T31160] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3188.156249][T31160] usb 4-1: Product: syz [ 3188.171633][T31160] usb 4-1: Manufacturer: syz [ 3188.185200][T31160] usb 4-1: SerialNumber: syz [ 3188.237487][T31160] usb 4-1: config 0 descriptor?? [ 3188.460017][T31165] usb 7-1: new high-speed USB device number 102 using dummy_hcd [ 3188.629981][T31160] uvcvideo: Found UVC 0.00 device syz (046d:08d3) [ 3188.649973][T31160] uvcvideo: Failed to query (GET_INFO) UVC control 2 on unit 1: -71 (exp. 1). [ 3188.669959][T31160] uvcvideo: Failed to query (GET_INFO) UVC control 3 on unit 1: -71 (exp. 1). [ 3188.689946][T31160] uvcvideo: Failed to query (GET_INFO) UVC control 6 on unit 1: -71 (exp. 1). [ 3188.709950][T31160] uvcvideo: Failed to query (GET_INFO) UVC control 5 on unit 1: -71 (exp. 1). [ 3188.739994][T31165] usb 7-1: Using ep0 maxpacket: 16 [ 3188.745338][T31160] uvcvideo: Failed to query (GET_INFO) UVC control 13 on unit 1: -71 (exp. 1). [ 3188.770042][T31160] uvcvideo: Failed to query (GET_INFO) UVC control 14 on unit 1: -71 (exp. 1). [ 3188.789971][T31160] uvcvideo: Failed to query (GET_INFO) UVC control 17 on unit 1: -71 (exp. 1). [ 3188.809951][T31160] uvcvideo: Failed to query (GET_INFO) UVC control 18 on unit 1: -71 (exp. 1). [ 3188.819297][T31160] uvcvideo: No valid video chain found. [ 3188.836629][T31160] usb 4-1: USB disconnect, device number 58 [ 3188.870417][T31165] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 3189.045930][ T6589] FAULT_INJECTION: forcing a failure. [ 3189.045930][ T6589] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 3189.060194][T31165] usb 7-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 3189.064184][ T6589] CPU: 0 PID: 6589 Comm: syz.4.10838 Tainted: G W 5.10.240-syzkaller #0 [ 3189.078904][ T6589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 3189.089215][ T6589] Call Trace: [ 3189.092524][ T6589] __dump_stack+0x21/0x24 [ 3189.097034][ T6589] dump_stack_lvl+0x169/0x1d8 [ 3189.101807][ T6589] ? show_regs_print_info+0x18/0x18 [ 3189.107129][ T6589] ? kasan_set_track+0x5b/0x70 [ 3189.111888][ T6589] ? kasan_set_free_info+0x23/0x40 [ 3189.117003][ T6589] dump_stack+0x15/0x1c [ 3189.121491][ T6589] should_fail+0x3c1/0x510 [ 3189.126023][ T6589] should_fail_alloc_page+0x4f/0x60 [ 3189.131228][ T6589] __alloc_pages_nodemask+0x109/0x5f0 [ 3189.136603][ T6589] ? kstrtouint_from_user+0x1a0/0x200 [ 3189.141972][ T6589] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 3189.147611][ T6589] ? memset+0x35/0x40 [ 3189.151803][ T6589] ? fsnotify_set_children_dentry_flags+0x210/0x210 [ 3189.158403][ T6589] new_slab+0x84/0x3f0 [ 3189.162473][ T6589] ___slab_alloc+0x2a6/0x450 [ 3189.167172][ T6589] ? getname_flags+0xb9/0x500 [ 3189.171848][ T6589] ? vfs_write+0xac8/0xd60 [ 3189.176364][ T6589] __slab_alloc+0x63/0xa0 [ 3189.180951][ T6589] ? getname_flags+0xb9/0x500 [ 3189.185624][ T6589] ? getname_flags+0xb9/0x500 [ 3189.190386][ T6589] kmem_cache_alloc+0x1af/0x2e0 [ 3189.195237][ T6589] ? mutex_lock+0x8c/0xe0 [ 3189.199567][ T6589] ? getname_flags+0xb9/0x500 [ 3189.204248][ T6589] getname_flags+0xb9/0x500 [ 3189.209096][ T6589] user_path_at_empty+0x2f/0x50 [ 3189.213982][ T6589] path_getxattr+0xa4/0x1b0 [ 3189.218589][ T6589] ? setxattr+0x370/0x370 [ 3189.223004][ T6589] ? fpu__clear_all+0x20/0x20 [ 3189.227679][ T6589] __x64_sys_getxattr+0xa1/0xb0 [ 3189.232722][ T6589] do_syscall_64+0x31/0x40 [ 3189.237154][ T6589] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 3189.243134][ T6589] RIP: 0033:0x7f6024d28be9 [ 3189.247548][ T6589] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3189.267157][ T6589] RSP: 002b:00007f6023791038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bf [ 3189.275836][ T6589] RAX: ffffffffffffffda RBX: 00007f6024f4ffa0 RCX: 00007f6024d28be9 [ 3189.284004][ T6589] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000200000000000 [ 3189.291972][ T6589] RBP: 00007f6023791090 R08: 0000000000000000 R09: 0000000000000000 [ 3189.300201][ T6589] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3189.308302][ T6589] R13: 00007f6024f50038 R14: 00007f6024f4ffa0 R15: 00007ffcb0ff3e18 [ 3189.329199][T31165] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3189.338389][T31165] usb 7-1: Product: syz [ 3189.343094][T31165] usb 7-1: Manufacturer: syz [ 3189.381236][T31165] usb 7-1: SerialNumber: syz [ 3189.387302][T31165] usb 7-1: config 0 descriptor?? [ 3189.450701][T31165] ftdi_sio 7-1:0.0: FTDI USB Serial Device converter detected [ 3189.469630][T31165] usb 7-1: Detected FT232RL [ 3189.520894][ T6598] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 3189.538241][ T6598] EXT4-fs (loop1): 1 truncate cleaned up [ 3189.544818][ T6598] EXT4-fs (loop1): mounted filesystem without journal. Opts: i_version,nombcache,debug_want_extra_isize=0x0000000000000068,lazytime,block_validity,sysvgroups,,errors=continue [ 3189.660087][T31165] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 3189.853032][ T6612] netlink: 87 bytes leftover after parsing attributes in process `syz.4.10845'. [ 3190.391771][T31165] ftdi_sio 7-1:0.0: GPIO initialisation failed: -71 [ 3190.431118][T31165] usb 7-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 3190.447887][T31165] usb 7-1: USB disconnect, device number 102 [ 3190.457549][T31165] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 3190.468235][T31165] ftdi_sio 7-1:0.0: device disconnected [ 3190.759542][ T6618] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 3190.810324][ T6617] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 3190.928333][ T6617] EXT4-fs (loop3): 1 truncate cleaned up [ 3190.934216][ T6617] EXT4-fs (loop3): mounted filesystem without journal. Opts: i_version,nombcache,debug_want_extra_isize=0x0000000000000068,lazytime,block_validity,sysvgroups,,errors=continue [ 3191.060309][ T6629] FAULT_INJECTION: forcing a failure. [ 3191.060309][ T6629] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3191.073696][ T6629] CPU: 1 PID: 6629 Comm: syz.4.10849 Tainted: G W 5.10.240-syzkaller #0 [ 3191.083423][ T6629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 3191.093488][ T6629] Call Trace: [ 3191.096800][ T6629] __dump_stack+0x21/0x24 [ 3191.101202][ T6629] dump_stack_lvl+0x169/0x1d8 [ 3191.105900][ T6629] ? show_regs_print_info+0x18/0x18 [ 3191.111119][ T6629] dump_stack+0x15/0x1c [ 3191.115481][ T6629] should_fail+0x3c1/0x510 [ 3191.119959][ T6629] should_fail_usercopy+0x1a/0x20 [ 3191.125260][ T6629] _copy_from_user+0x20/0xd0 [ 3191.129863][ T6629] iovec_from_user+0x1bc/0x2f0 [ 3191.134764][ T6629] __import_iovec+0x71/0x390 [ 3191.139381][ T6629] import_iovec+0x7c/0xb0 [ 3191.143819][ T6629] ___sys_sendmsg+0x1b9/0x260 [ 3191.148600][ T6629] ? __sys_sendmsg+0x250/0x250 [ 3191.153378][ T6629] ? rcu_read_unlock_special+0x170/0x420 [ 3191.159120][ T6629] ? __fdget+0x1a1/0x230 [ 3191.163415][ T6629] __x64_sys_sendmsg+0x1e2/0x2a0 [ 3191.168389][ T6629] ? __kasan_check_write+0x14/0x20 [ 3191.173968][ T6629] ? ___sys_sendmsg+0x260/0x260 [ 3191.178853][ T6629] ? switch_fpu_return+0x197/0x340 [ 3191.184093][ T6629] ? __kasan_check_read+0x11/0x20 [ 3191.189147][ T6629] ? asm_sysvec_reschedule_ipi+0xa/0x20 [ 3191.194713][ T6629] ? irqentry_exit_to_user_mode+0x41/0x80 [ 3191.200469][ T6629] do_syscall_64+0x31/0x40 [ 3191.204919][ T6629] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 3191.210836][ T6629] RIP: 0033:0x7f6024d28be9 [ 3191.215355][ T6629] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3191.235481][ T6629] RSP: 002b:00007f602374f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3191.243915][ T6629] RAX: ffffffffffffffda RBX: 00007f6024f50180 RCX: 00007f6024d28be9 [ 3191.252150][ T6629] RDX: 0000000000040000 RSI: 0000200000000000 RDI: 0000000000000008 [ 3191.260120][ T6629] RBP: 00007f602374f090 R08: 0000000000000000 R09: 0000000000000000 [ 3191.268271][ T6629] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3191.276630][ T6629] R13: 00007f6024f50218 R14: 00007f6024f50180 R15: 00007ffcb0ff3e18 [ 3192.123910][ T6644] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 3192.131210][ T6644] EXT4-fs (loop0): Test dummy encryption mode enabled [ 3192.200754][ T6644] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 3192.207954][ T6644] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 3192.240183][ T24] kauditd_printk_skb: 352 callbacks suppressed [ 3192.240198][ T24] audit: type=1400 audit(1755578038.210:54827): avc: denied { read } for pid=6650 comm="syz.1.10858" name="ashmem" dev="devtmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 3192.302756][T26876] print_req_error: 62 callbacks suppressed [ 3192.302775][T26876] blk_update_request: I/O error, dev loop1, sector 768 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 3192.304511][ T24] audit: type=1400 audit(1755578038.210:54828): avc: denied { read open } for pid=6650 comm="syz.1.10858" path="/dev/ashmem" dev="devtmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 3192.316091][T26870] blk_update_request: I/O error, dev loop1, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 3192.321126][ T6644] EXT4-fs (loop0): 1 truncate cleaned up [ 3192.353711][ T24] audit: type=1400 audit(1755578038.210:54829): avc: denied { execmem } for pid=6650 comm="syz.1.10858" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 3192.355832][ T6644] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,mblk_io_submit,inlinecrypt,test_dummy_encryption=v1,barrier,mblk_io_submit,nogrpid, [ 3192.397463][T31213] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 3192.407269][T26870] blk_update_request: I/O error, dev loop1, sector 8064 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3192.418745][T26870] buffer_io_error: 44 callbacks suppressed [ 3192.418758][T26870] Buffer I/O error on dev loop1p3, logical block 1008, async page read [ 3192.458876][T26876] blk_update_request: I/O error, dev loop1, sector 768 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3192.466549][ T24] audit: type=1400 audit(1755578038.250:54830): avc: denied { read write } for pid=30271 comm="syz-executor" name="loop6" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 3192.486880][T26876] Buffer I/O error on dev loop1p4, logical block 0, async page read [ 3192.530364][ T24] audit: type=1400 audit(1755578038.250:54831): avc: denied { open } for pid=30271 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 3192.555703][ T24] audit: type=1400 audit(1755578038.250:54832): avc: denied { ioctl } for pid=30271 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=121 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 3192.582598][ T24] audit: type=1400 audit(1755578038.340:54833): avc: denied { prog_load } for pid=6646 comm="syz.4.10857" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 3192.615385][ T6643] overlayfs: './file1' not a directory [ 3192.625849][ T24] audit: type=1400 audit(1755578038.340:54834): avc: denied { bpf } for pid=6646 comm="syz.4.10857" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 3192.649029][ T24] audit: type=1400 audit(1755578038.340:54835): avc: denied { perfmon } for pid=6646 comm="syz.4.10857" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 3192.661265][T26876] blk_update_request: I/O error, dev loop1, sector 768 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3192.671824][ T24] audit: type=1400 audit(1755578038.390:54836): avc: denied { mount } for pid=6633 comm="syz.0.10854" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 3192.704418][T31213] usb 4-1: Using ep0 maxpacket: 16 [ 3192.709948][T26876] Buffer I/O error on dev loop1p4, logical block 0, async page read [ 3192.719338][T26876] blk_update_request: I/O error, dev loop1, sector 768 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3192.731436][T26876] Buffer I/O error on dev loop1p4, logical block 0, async page read [ 3192.741294][T26876] blk_update_request: I/O error, dev loop1, sector 768 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3192.752779][T26876] Buffer I/O error on dev loop1p4, logical block 0, async page read [ 3192.762442][T26876] blk_update_request: I/O error, dev loop1, sector 768 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3192.774018][ T53] usb 7-1: new high-speed USB device number 103 using dummy_hcd [ 3192.782082][T26876] Buffer I/O error on dev loop1p4, logical block 0, async page read [ 3192.826417][T26876] blk_update_request: I/O error, dev loop1, sector 768 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 3192.838621][T31213] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 3192.854267][T31213] usb 4-1: config 0 has an invalid descriptor of length 75, skipping remainder of the config [ 3192.857156][T26870] blk_update_request: I/O error, dev loop1, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 3192.864926][T31213] usb 4-1: config 0 has no interface number 0 [ 3192.882978][T26870] Buffer I/O error on dev loop1p3, logical block 1008, async page read [ 3192.897445][T26876] Buffer I/O error on dev loop1p4, logical block 0, async page read [ 3192.952641][T26876] Buffer I/O error on dev loop1p4, logical block 0, async page read [ 3192.964394][T26876] Buffer I/O error on dev loop1p4, logical block 0, async page read [ 3193.040024][T31213] usb 4-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 3193.049375][ T53] usb 7-1: Using ep0 maxpacket: 16 [ 3193.058166][T31213] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3193.129175][T31213] usb 4-1: Product: syz [ 3193.136043][T31213] usb 4-1: Manufacturer: syz [ 3193.141299][T31213] usb 4-1: SerialNumber: syz [ 3193.147466][T31213] usb 4-1: config 0 descriptor?? [ 3193.531507][ T6664] EXT4-fs error (device loop0): ext4_orphan_get:1395: inode #15: comm syz.0.10860: casefold flag without casefold feature [ 3193.545516][ T6664] EXT4-fs error (device loop0): ext4_orphan_get:1400: comm syz.0.10860: couldn't read orphan inode 15 (err -117) [ 3193.563457][ T6664] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 3194.337294][ T53] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 3194.353588][ T6670] netlink: 'syz.1.10862': attribute type 16 has an invalid length. [ 3194.361718][ T6670] netlink: 'syz.1.10862': attribute type 17 has an invalid length. [ 3194.370070][T31213] uvcvideo: Found UVC 0.00 device syz (046d:08d3) [ 3194.400265][T31213] uvcvideo: Failed to query (GET_INFO) UVC control 2 on unit 1: -71 (exp. 1). [ 3194.417233][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 3194.425722][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 3194.433936][T31213] uvcvideo: Failed to query (GET_INFO) UVC control 3 on unit 1: -71 (exp. 1). [ 3194.444995][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 3194.453899][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 3194.462063][T31213] uvcvideo: Failed to query (GET_INFO) UVC control 6 on unit 1: -71 (exp. 1). [ 3194.472477][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 3194.482278][ T6673] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 3194.498836][ T6673] EXT4-fs (loop0): 1 truncate cleaned up [ 3194.510064][T31213] uvcvideo: Failed to query (GET_INFO) UVC control 5 on unit 1: -71 (exp. 1). [ 3194.519309][ T53] usb 7-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 3194.519706][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 3194.529345][ T53] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3194.544730][T31213] uvcvideo: Failed to query (GET_INFO) UVC control 13 on unit 1: -71 (exp. 1). [ 3194.554361][ T53] usb 7-1: Product: syz [ 3194.558840][ T53] usb 7-1: Manufacturer: syz [ 3194.560465][ T6673] EXT4-fs (loop0): mounted filesystem without journal. Opts: i_version,nombcache,debug_want_extra_isize=0x0000000000000068,lazytime,block_validity,sysvgroups,,errors=continue [ 3194.563497][ T53] usb 7-1: SerialNumber: syz [ 3194.585818][T31213] uvcvideo: Failed to query (GET_INFO) UVC control 14 on unit 1: -71 (exp. 1). [ 3194.596224][ T53] usb 7-1: config 0 descriptor?? [ 3194.602219][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 3194.610606][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 3194.619973][T31213] uvcvideo: Failed to query (GET_INFO) UVC control 17 on unit 1: -71 (exp. 1). [ 3194.640372][T31213] uvcvideo: Failed to query (GET_INFO) UVC control 18 on unit 1: -71 (exp. 1). [ 3194.649560][T31213] uvcvideo: No valid video chain found. [ 3194.656399][ T53] ftdi_sio 7-1:0.0: FTDI USB Serial Device converter detected [ 3194.669621][ T53] usb 7-1: Detected FT232RL [ 3194.718175][T31213] usb 4-1: USB disconnect, device number 59 [ 3194.920320][ T53] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 3194.944688][ T6681] netlink: 87 bytes leftover after parsing attributes in process `syz.4.10863'. [ 3195.830351][ T6685] xt_CT: You must specify a L4 protocol and not use inversions on it [ 3196.060018][ T53] ftdi_sio 7-1:0.0: GPIO initialisation failed: -71 [ 3196.068876][ T53] usb 7-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 3196.120703][ T53] usb 7-1: USB disconnect, device number 103 [ 3196.134273][ T53] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 3196.164522][ T53] ftdi_sio 7-1:0.0: device disconnected [ 3196.399959][ T372] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 3196.783512][ T372] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3196.801887][ T372] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3196.817224][ T372] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 3196.834715][ T372] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 3196.843971][ T372] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3196.864223][ T372] usb 4-1: config 0 descriptor?? [ 3197.018651][ T6709] netlink: 87 bytes leftover after parsing attributes in process `syz.6.10873'. [ 3197.250776][ T24] kauditd_printk_skb: 309 callbacks suppressed [ 3197.250791][ T24] audit: type=1400 audit(1755578043.230:55146): avc: denied { prog_load } for pid=6710 comm="syz.4.10875" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 3197.309978][ T24] audit: type=1400 audit(1755578043.230:55147): avc: denied { bpf } for pid=6710 comm="syz.4.10875" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 3197.340973][ T24] audit: type=1400 audit(1755578043.230:55148): avc: denied { bpf } for pid=6710 comm="syz.4.10875" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 3197.362563][ T24] audit: type=1400 audit(1755578043.230:55149): avc: denied { perfmon } for pid=6710 comm="syz.4.10875" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 3197.384403][ T24] audit: type=1400 audit(1755578043.260:55150): avc: denied { read write } for pid=6710 comm="syz.4.10875" name="kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 3197.408821][ T24] audit: type=1400 audit(1755578043.260:55151): avc: denied { open } for pid=6710 comm="syz.4.10875" path="/dev/kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 3197.463305][ T24] audit: type=1400 audit(1755578043.260:55152): avc: denied { ioctl } for pid=6710 comm="syz.4.10875" path="/dev/kvm" dev="devtmpfs" ino=82 ioctlcmd=0xae05 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 3197.471660][ T372] plantronics 0003:047F:FFFF.0055: No inputs registered, leaving [ 3197.518159][ T372] plantronics 0003:047F:FFFF.0055: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 3197.543432][ T24] audit: type=1400 audit(1755578043.410:55153): avc: denied { read write } for pid=32005 comm="syz-executor" name="loop4" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 3197.714235][ T24] audit: type=1400 audit(1755578043.410:55154): avc: denied { open } for pid=32005 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 3197.739915][ T24] audit: type=1400 audit(1755578043.410:55155): avc: denied { ioctl } for pid=32005 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=119 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 3197.797990][ T53] usb 4-1: USB disconnect, device number 60 [ 3197.878123][ T6721] fido_id[6721]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 3197.957100][T26876] print_req_error: 46 callbacks suppressed [ 3197.957118][T26876] blk_update_request: I/O error, dev loop1, sector 768 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 3198.270391][T26876] blk_update_request: I/O error, dev loop1, sector 768 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3198.282447][T26876] buffer_io_error: 32 callbacks suppressed [ 3198.282459][T26876] Buffer I/O error on dev loop1p4, logical block 0, async page read [ 3198.291999][T26870] blk_update_request: I/O error, dev loop1, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 3198.297429][T26876] blk_update_request: I/O error, dev loop1, sector 768 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3198.328448][T26876] Buffer I/O error on dev loop1p4, logical block 0, async page read [ 3198.337289][T26870] blk_update_request: I/O error, dev loop1, sector 8064 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3198.356645][T26876] blk_update_request: I/O error, dev loop1, sector 768 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3198.368366][T26870] Buffer I/O error on dev loop1p3, logical block 1008, async page read [ 3198.376965][T26876] Buffer I/O error on dev loop1p4, logical block 0, async page read [ 3198.476162][T26876] blk_update_request: I/O error, dev loop1, sector 768 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3198.487961][T26876] Buffer I/O error on dev loop1p4, logical block 0, async page read [ 3198.497916][T26876] blk_update_request: I/O error, dev loop1, sector 768 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3198.509852][T26876] Buffer I/O error on dev loop1p4, logical block 0, async page read [ 3198.537858][T26870] blk_update_request: I/O error, dev loop1, sector 768 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 3198.570025][T26870] blk_update_request: I/O error, dev loop1, sector 768 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3198.584354][T26870] Buffer I/O error on dev loop1p4, logical block 0, async page read [ 3198.597153][T26870] Buffer I/O error on dev loop1p4, logical block 0, async page read [ 3198.607178][T26870] Buffer I/O error on dev loop1p4, logical block 0, async page read [ 3198.679938][T26857] Buffer I/O error on dev loop1p3, logical block 1008, async page read [ 3199.680206][ T6754] netlink: 87 bytes leftover after parsing attributes in process `syz.3.10886'. [ 3200.281730][ T6763] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6763 comm=syz.0.10888 [ 3201.530985][ T6767] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 3201.620377][ T6767] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 1046) [ 3201.646355][ T6767] FAT-fs (loop3): Filesystem has been set read-only [ 3201.767858][ T950] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 1046) [ 3202.292858][ T24] kauditd_printk_skb: 301 callbacks suppressed [ 3202.292877][ T24] audit: type=1400 audit(1755578048.270:55457): avc: denied { prog_load } for pid=6783 comm="syz.3.10897" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 3202.321328][ T6784] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10897'. [ 3202.484923][ T24] audit: type=1400 audit(1755578048.270:55458): avc: denied { bpf } for pid=6783 comm="syz.3.10897" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 3202.671137][ T24] audit: type=1400 audit(1755578048.270:55459): avc: denied { perfmon } for pid=6783 comm="syz.3.10897" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 3202.694051][ T24] audit: type=1400 audit(1755578048.370:55460): avc: denied { map_create } for pid=6787 comm="syz.6.10898" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 3202.717718][ T24] audit: type=1400 audit(1755578048.370:55461): avc: denied { map_read map_write } for pid=6787 comm="syz.6.10898" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 3202.741679][ T24] audit: type=1400 audit(1755578048.380:55462): avc: denied { prog_load } for pid=6787 comm="syz.6.10898" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 3202.882403][ T24] audit: type=1400 audit(1755578048.380:55463): avc: denied { map_create } for pid=6787 comm="syz.6.10898" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 3202.915388][ T24] audit: type=1400 audit(1755578048.380:55464): avc: denied { bpf } for pid=6787 comm="syz.6.10898" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 3202.937154][ T24] audit: type=1400 audit(1755578048.390:55465): avc: denied { prog_load } for pid=6787 comm="syz.6.10898" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 3202.959939][ T24] audit: type=1400 audit(1755578048.390:55466): avc: denied { write } for pid=6787 comm="syz.6.10898" name="001" dev="devtmpfs" ino=183 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 3202.996719][T26870] print_req_error: 12 callbacks suppressed [ 3202.996739][T26870] blk_update_request: I/O error, dev loop1, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 3203.017151][T26870] blk_update_request: I/O error, dev loop1, sector 8064 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3203.068122][T26857] blk_update_request: I/O error, dev loop1, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 3203.080085][T26857] blk_update_request: I/O error, dev loop1, sector 8064 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3203.104828][T26870] blk_update_request: I/O error, dev loop1, sector 768 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 3203.131375][T26870] blk_update_request: I/O error, dev loop1, sector 768 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3203.286111][ T6814] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6814 comm=syz.3.10904 [ 3204.574983][T26870] blk_update_request: I/O error, dev loop1, sector 768 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3205.113060][T26870] buffer_io_error: 10 callbacks suppressed [ 3205.113097][T26870] Buffer I/O error on dev loop1p4, logical block 0, async page read [ 3205.875539][ T6831] netlink: 87 bytes leftover after parsing attributes in process `syz.0.10909'. [ 3206.040851][ T6836] netlink: 96 bytes leftover after parsing attributes in process `syz.6.10910'. [ 3206.064857][T26873] blk_update_request: I/O error, dev loop1, sector 768 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 3206.079732][T26876] blk_update_request: I/O error, dev loop1, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 3206.141022][T26876] blk_update_request: I/O error, dev loop1, sector 8064 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3206.146764][T26873] Buffer I/O error on dev loop1p4, logical block 0, async page read [ 3206.200525][T26873] Buffer I/O error on dev loop1p4, logical block 0, async page read [ 3206.214263][T26876] Buffer I/O error on dev loop1p3, logical block 1008, async page read [ 3206.228732][T26873] Buffer I/O error on dev loop1p4, logical block 0, async page read [ 3206.239645][T26873] Buffer I/O error on dev loop1p4, logical block 0, async page read [ 3206.271322][T26873] Buffer I/O error on dev loop1p4, logical block 0, async page read [ 3206.530013][ T6856] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6856 comm=syz.6.10918 [ 3207.314669][ T24] kauditd_printk_skb: 301 callbacks suppressed [ 3207.314683][ T24] audit: type=1400 audit(1755578053.290:55768): avc: denied { read write } for pid=3625 comm="syz-executor" name="loop1" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 3207.379152][T26876] Buffer I/O error on dev loop1p4, logical block 0, async page read [ 3207.416472][T26870] Buffer I/O error on dev loop1p3, logical block 1008, async page read [ 3207.453289][T26876] Buffer I/O error on dev loop1p4, logical block 0, async page read [ 3207.533435][ T24] audit: type=1400 audit(1755578053.330:55769): avc: denied { read write open } for pid=3625 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 3207.562172][ T24] audit: type=1400 audit(1755578053.330:55770): avc: denied { ioctl } for pid=3625 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=116 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 3207.589408][ T24] audit: type=1400 audit(1755578053.370:55771): avc: denied { read write } for pid=30271 comm="syz-executor" name="loop6" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 3207.614719][ T24] audit: type=1400 audit(1755578053.370:55772): avc: denied { open } for pid=30271 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 3207.640752][ T24] audit: type=1400 audit(1755578053.370:55773): avc: denied { ioctl } for pid=30271 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=121 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 3207.667217][ T24] audit: type=1400 audit(1755578053.410:55774): avc: denied { create } for pid=6857 comm="syz.1.10919" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 3207.688577][ T24] audit: type=1400 audit(1755578053.430:55775): avc: denied { create } for pid=6857 comm="syz.1.10919" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 3207.709385][ T24] audit: type=1400 audit(1755578053.460:55776): avc: denied { prog_load } for pid=6859 comm="syz.6.10920" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 3207.729430][ T24] audit: type=1400 audit(1755578053.460:55777): avc: denied { bpf } for pid=6859 comm="syz.6.10920" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 3207.789953][T21547] usb 7-1: new high-speed USB device number 104 using dummy_hcd [ 3207.960664][ T6868] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 3208.000740][T26876] print_req_error: 13 callbacks suppressed [ 3208.000759][T26876] blk_update_request: I/O error, dev loop1, sector 768 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 3208.045320][T26876] blk_update_request: I/O error, dev loop1, sector 768 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3208.054496][T26870] blk_update_request: I/O error, dev loop1, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 3208.059466][T26876] blk_update_request: I/O error, dev loop1, sector 768 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3208.077598][T26870] blk_update_request: I/O error, dev loop1, sector 8064 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3208.134285][ T6868] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 1046) [ 3208.258880][ T6868] FAT-fs (loop3): Filesystem has been set read-only [ 3208.285452][T26876] blk_update_request: I/O error, dev loop1, sector 768 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3208.428484][T21547] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3208.439751][T21547] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3208.447802][T26876] blk_update_request: I/O error, dev loop1, sector 768 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3208.449641][T21547] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 3208.494557][T21547] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 3208.496480][T26876] blk_update_request: I/O error, dev loop1, sector 768 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3208.514748][T21547] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3208.516476][T21547] usb 7-1: config 0 descriptor?? [ 3208.542007][ T950] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 1046) [ 3208.913269][T26873] blk_update_request: I/O error, dev loop1, sector 768 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 3209.003186][ T6889] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=6889 comm=syz.0.10926 [ 3209.146720][T26873] blk_update_request: I/O error, dev loop1, sector 768 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3209.831572][T21547] plantronics 0003:047F:FFFF.0056: No inputs registered, leaving [ 3209.849647][T21547] plantronics 0003:047F:FFFF.0056: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 3210.091578][T31165] usb 7-1: USB disconnect, device number 104 [ 3210.156839][ T6901] fido_id[6901]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 3210.260791][ T6908] EXT4-fs error (device loop0): ext4_orphan_get:1395: inode #15: comm syz.0.10930: casefold flag without casefold feature [ 3210.365042][ T6908] EXT4-fs error (device loop0): ext4_orphan_get:1400: comm syz.0.10930: couldn't read orphan inode 15 (err -117) [ 3210.394650][ T6908] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 3210.439503][T27529] usb 5-1: new high-speed USB device number 125 using dummy_hcd [ 3210.629341][T26870] buffer_io_error: 15 callbacks suppressed [ 3210.629355][T26870] Buffer I/O error on dev loop1p4, logical block 0, async page read [ 3210.643867][T26870] Buffer I/O error on dev loop1p4, logical block 0, async page read [ 3210.655721][T26857] Buffer I/O error on dev loop1p3, logical block 1008, async page read [ 3210.659581][T26870] Buffer I/O error on dev loop1p4, logical block 0, async page read [ 3210.681655][T26870] Buffer I/O error on dev loop1p4, logical block 0, async page read [ 3210.690570][T26870] Buffer I/O error on dev loop1p4, logical block 0, async page read [ 3210.720005][T27529] usb 5-1: Using ep0 maxpacket: 16 [ 3210.767324][T26857] Buffer I/O error on dev loop1p3, logical block 1008, async page read [ 3210.790925][T26870] Buffer I/O error on dev loop1p4, logical block 0, async page read [ 3210.824427][T26870] Buffer I/O error on dev loop1p4, logical block 0, async page read [ 3210.840303][T27529] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 3210.859983][T27529] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3210.878096][T26870] Buffer I/O error on dev loop1p4, logical block 0, async page read [ 3210.898623][T27529] usb 5-1: config 0 has no interface number 0 [ 3211.360028][T27529] usb 5-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 3211.369628][T27529] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3211.394259][T27529] usb 5-1: Product: syz [ 3211.404276][T27529] usb 5-1: Manufacturer: syz [ 3211.414309][T27529] usb 5-1: SerialNumber: syz [ 3211.426754][T27529] usb 5-1: config 0 descriptor?? [ 3211.899953][T27529] uvcvideo: Found UVC 0.00 device syz (046d:08d3) [ 3211.919935][T27529] uvcvideo: Failed to query (GET_INFO) UVC control 2 on unit 1: -71 (exp. 1). [ 3211.949931][T27529] uvcvideo: Failed to query (GET_INFO) UVC control 3 on unit 1: -71 (exp. 1). [ 3211.980270][T27529] uvcvideo: Failed to query (GET_INFO) UVC control 6 on unit 1: -71 (exp. 1). [ 3212.009944][T27529] uvcvideo: Failed to query (GET_INFO) UVC control 5 on unit 1: -71 (exp. 1). [ 3212.039970][T27529] uvcvideo: Failed to query (GET_INFO) UVC control 13 on unit 1: -71 (exp. 1). [ 3212.537282][ T24] kauditd_printk_skb: 368 callbacks suppressed [ 3212.537306][ T24] audit: type=1400 audit(1755578058.510:56146): avc: denied { read write } for pid=32005 comm="syz-executor" name="loop4" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 3212.959768][ T24] audit: type=1400 audit(1755578058.550:56147): avc: denied { open } for pid=32005 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 3213.027877][T27529] uvcvideo: Failed to query (GET_INFO) UVC control 14 on unit 1: -71 (exp. 1). [ 3213.090252][ T6944] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10943'. [ 3213.100401][ T24] audit: type=1400 audit(1755578058.550:56148): avc: denied { ioctl } for pid=32005 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=119 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 3213.152755][T27529] uvcvideo: Failed to query (GET_INFO) UVC control 17 on unit 1: -71 (exp. 1). [ 3213.162953][ T24] audit: type=1400 audit(1755578058.820:56149): avc: denied { execmem } for pid=6940 comm="syz.4.10942" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 3213.182980][T27529] uvcvideo: Failed to query (GET_INFO) UVC control 18 on unit 1: -71 (exp. 1). [ 3213.192833][T27529] uvcvideo: No valid video chain found. [ 3213.200108][T27529] usb 5-1: USB disconnect, device number 125 [ 3213.235258][ T24] audit: type=1400 audit(1755578058.960:56150): avc: denied { map_create } for pid=6940 comm="syz.4.10942" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 3213.255267][ T24] audit: type=1400 audit(1755578058.960:56151): avc: denied { perfmon } for pid=6940 comm="syz.4.10942" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 3213.276946][ T24] audit: type=1400 audit(1755578058.960:56152): avc: denied { map_read map_write } for pid=6940 comm="syz.4.10942" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 3213.297230][ T24] audit: type=1400 audit(1755578058.960:56153): avc: denied { prog_load } for pid=6940 comm="syz.4.10942" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 3213.318434][ T24] audit: type=1400 audit(1755578058.960:56154): avc: denied { bpf } for pid=6940 comm="syz.4.10942" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 3213.436240][ T24] audit: type=1400 audit(1755578058.960:56155): avc: denied { perfmon } for pid=6940 comm="syz.4.10942" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 3213.526187][T26857] print_req_error: 22 callbacks suppressed [ 3213.526205][T26857] blk_update_request: I/O error, dev loop1, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 3213.618712][ T6955] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6955 comm=syz.1.10945 [ 3213.810025][T31163] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 3213.856443][T26870] blk_update_request: I/O error, dev loop1, sector 768 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 3214.146055][T26857] blk_update_request: I/O error, dev loop1, sector 8064 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3214.199782][T26870] blk_update_request: I/O error, dev loop1, sector 768 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3214.330423][T31163] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3214.380358][T31163] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3214.403459][T26870] blk_update_request: I/O error, dev loop1, sector 768 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3214.460254][T31163] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 3214.510614][T26870] blk_update_request: I/O error, dev loop1, sector 768 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3214.556061][T31163] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 3214.572301][T26870] blk_update_request: I/O error, dev loop1, sector 768 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3214.584699][T26870] blk_update_request: I/O error, dev loop1, sector 768 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3214.634373][T26870] blk_update_request: I/O error, dev loop1, sector 768 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 3214.641264][T26857] blk_update_request: I/O error, dev loop1, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 3214.659298][T31163] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3214.705000][T31163] usb 4-1: config 0 descriptor?? [ 3215.362367][ T6974] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 3215.369836][ T6974] EXT4-fs (loop0): Test dummy encryption mode enabled [ 3215.376664][ T6974] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 3215.383826][ T6974] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 3215.406865][ T6974] EXT4-fs (loop0): 1 truncate cleaned up [ 3215.412674][ T6974] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,mblk_io_submit,inlinecrypt,test_dummy_encryption=v1,barrier,mblk_io_submit,nogrpid, [ 3215.654595][ T6974] overlayfs: './file1' not a directory [ 3215.663488][T31163] plantronics 0003:047F:FFFF.0057: No inputs registered, leaving [ 3215.703311][T31163] plantronics 0003:047F:FFFF.0057: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 3216.216828][ T6981] EXT4-fs error (device loop1): ext4_orphan_get:1395: inode #15: comm syz.1.10954: casefold flag without casefold feature [ 3216.233797][ T6981] EXT4-fs error (device loop1): ext4_orphan_get:1400: comm syz.1.10954: couldn't read orphan inode 15 (err -117) [ 3216.252050][ T6981] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 3216.303500][ T6981] EXT4-fs error (device loop1): ext4_check_dx_root:2229: inode #2: comm syz.1.10954: Corrupt dir, invalid name_len for '.', running e2fsck is recommended [ 3216.715896][T31163] usb 4-1: USB disconnect, device number 61 [ 3216.860856][ T6980] fido_id[6980]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 3216.906104][ T6987] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10956'. [ 3217.153681][T26876] buffer_io_error: 26 callbacks suppressed [ 3217.153696][T26876] Buffer I/O error on dev loop1p4, logical block 0, async page read [ 3217.179079][ T6994] xt_CT: You must specify a L4 protocol and not use inversions on it [ 3217.184036][T26870] Buffer I/O error on dev loop1p3, logical block 1008, async page read [ 3217.206640][ T6996] devtmpfs: Unknown parameter 'dirsyncâ' [ 3217.222894][T26876] Buffer I/O error on dev loop1p4, logical block 0, async page read [ 3217.269843][T26876] Buffer I/O error on dev loop1p4, logical block 0, async page read [ 3217.285931][T26876] Buffer I/O error on dev loop1p4, logical block 0, async page read [ 3217.313877][T26876] Buffer I/O error on dev loop1p4, logical block 0, async page read [ 3217.366363][T26876] Buffer I/O error on dev loop1p4, logical block 0, async page read [ 3217.386602][T26870] Buffer I/O error on dev loop1p3, logical block 1008, async page read [ 3217.453042][T26876] Buffer I/O error on dev loop1p4, logical block 0, async page read [ 3217.468351][T26876] Buffer I/O error on dev loop1p4, logical block 0, async page read [ 3217.595611][ T24] kauditd_printk_skb: 315 callbacks suppressed [ 3217.595708][ T24] audit: type=1400 audit(1755578063.540:56471): avc: denied { map_create } for pid=7004 comm="syz.6.10964" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 3217.775283][ T24] audit: type=1400 audit(1755578063.540:56472): avc: denied { perfmon } for pid=7004 comm="syz.6.10964" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 3217.797021][ T24] audit: type=1400 audit(1755578063.540:56473): avc: denied { map_read map_write } for pid=7004 comm="syz.6.10964" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 3217.817215][ T24] audit: type=1400 audit(1755578063.550:56474): avc: denied { prog_load } for pid=7004 comm="syz.6.10964" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 3217.836575][ T24] audit: type=1400 audit(1755578063.550:56475): avc: denied { bpf } for pid=7004 comm="syz.6.10964" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 3217.874826][ T24] audit: type=1400 audit(1755578063.550:56476): avc: denied { create } for pid=7004 comm="syz.6.10964" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 3217.895568][ T24] audit: type=1400 audit(1755578063.560:56477): avc: denied { listen } for pid=7004 comm="syz.6.10964" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 3217.917149][ T24] audit: type=1400 audit(1755578063.560:56478): avc: denied { prog_run } for pid=7004 comm="syz.6.10964" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 3217.941220][T31213] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 3217.946838][ T24] audit: type=1400 audit(1755578063.920:56479): avc: denied { read write } for pid=32005 comm="syz-executor" name="loop4" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 3218.070077][ T24] audit: type=1400 audit(1755578063.920:56480): avc: denied { read write open } for pid=32005 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 3218.159491][ T7016] netlink: 87 bytes leftover after parsing attributes in process `syz.4.10965'. [ 3218.340275][T31213] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3218.356468][T31213] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3218.378979][T31213] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 3218.406095][T31213] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 3218.422318][T31213] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3218.440907][T31213] usb 4-1: config 0 descriptor?? [ 3219.602345][T31213] plantronics 0003:047F:FFFF.0058: No inputs registered, leaving [ 3219.621348][T31213] plantronics 0003:047F:FFFF.0058: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 3219.645585][T26870] print_req_error: 46 callbacks suppressed [ 3219.645605][T26870] blk_update_request: I/O error, dev loop1, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 3219.705391][T26870] blk_update_request: I/O error, dev loop1, sector 8064 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3219.736742][T26873] blk_update_request: I/O error, dev loop1, sector 768 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 3219.778168][T26873] blk_update_request: I/O error, dev loop1, sector 768 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3220.016645][T26873] blk_update_request: I/O error, dev loop1, sector 768 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3220.040013][T31165] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 3220.089658][T26873] blk_update_request: I/O error, dev loop1, sector 768 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3220.101526][T26873] blk_update_request: I/O error, dev loop1, sector 768 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3220.112969][T26873] blk_update_request: I/O error, dev loop1, sector 768 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3220.134683][ T15] usb 4-1: USB disconnect, device number 62 [ 3220.369901][T31165] usb 2-1: Using ep0 maxpacket: 16 [ 3220.579951][T31165] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 3220.588334][T31165] usb 2-1: config 0 has an invalid descriptor of length 75, skipping remainder of the config [ 3220.598767][T31165] usb 2-1: config 0 has no interface number 0 [ 3220.641335][ T7046] xt_CT: You must specify a L4 protocol and not use inversions on it [ 3220.770365][T31165] usb 2-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 3220.780078][T31165] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3220.791948][T31165] usb 2-1: Product: syz [ 3220.796328][T31165] usb 2-1: Manufacturer: syz [ 3220.855785][ T7050] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 3220.881010][T31165] usb 2-1: SerialNumber: syz [ 3220.913961][ T7050] EXT4-fs (loop3): Test dummy encryption mode enabled [ 3220.937975][T31165] usb 2-1: config 0 descriptor?? [ 3220.971617][ T7050] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 3220.994578][ T7050] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 3221.046290][ T7050] EXT4-fs (loop3): 1 truncate cleaned up [ 3221.055262][ T7050] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,mblk_io_submit,inlinecrypt,test_dummy_encryption=v1,barrier,mblk_io_submit,nogrpid, [ 3221.229208][ T7049] overlayfs: './file1' not a directory [ 3221.318608][T31165] uvcvideo: Found UVC 0.00 device syz (046d:08d3) [ 3221.340034][T31165] uvcvideo: Failed to query (GET_INFO) UVC control 2 on unit 1: -71 (exp. 1). [ 3221.942972][T31165] uvcvideo: Failed to query (GET_INFO) UVC control 3 on unit 1: -71 (exp. 1). [ 3222.189990][T31165] uvcvideo: Failed to query (GET_INFO) UVC control 6 on unit 1: -71 (exp. 1). [ 3222.409699][ T7070] netlink: 87 bytes leftover after parsing attributes in process `syz.4.10979'. [ 3222.464627][T31165] uvcvideo: Failed to query (GET_INFO) UVC control 5 on unit 1: -71 (exp. 1). [ 3222.615703][ T24] kauditd_printk_skb: 267 callbacks suppressed [ 3222.615761][ T24] audit: type=1400 audit(1755578068.570:56748): avc: denied { map_create } for pid=7063 comm="syz.6.10981" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 3222.649942][ T24] audit: type=1400 audit(1755578068.570:56749): avc: denied { perfmon } for pid=7063 comm="syz.6.10981" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 3222.941522][ T7066] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 3222.995530][ T24] audit: type=1400 audit(1755578068.570:56750): avc: denied { map_read map_write } for pid=7063 comm="syz.6.10981" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 3223.004799][T31165] uvcvideo: Failed to query (GET_INFO) UVC control 13 on unit 1: -71 (exp. 1). [ 3223.170081][T31165] uvcvideo: Failed to query (GET_INFO) UVC control 14 on unit 1: -71 (exp. 1). [ 3223.220992][T31165] uvcvideo: Failed to query (GET_INFO) UVC control 17 on unit 1: -71 (exp. 1). [ 3223.280366][T31165] uvcvideo: Failed to query (GET_INFO) UVC control 18 on unit 1: -71 (exp. 1). [ 3223.313079][ T7066] EXT4-fs (loop0): mounted filesystem without journal. Opts: dioread_nolock,norecovery,min_batch_time=0x0000000000000001,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,nodelalloc,errors=remount-ro,acl,auto_da_alloc=0x0000000000000343,jqfmt=vfsold,barrier=0x00000000000000 [ 3223.344154][ T24] audit: type=1400 audit(1755578068.570:56751): avc: denied { prog_load } for pid=7063 comm="syz.6.10981" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 3223.365072][ T24] audit: type=1400 audit(1755578068.570:56752): avc: denied { bpf } for pid=7063 comm="syz.6.10981" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 3223.402049][ T24] audit: type=1400 audit(1755578068.590:56753): avc: denied { read write } for pid=7063 comm="syz.6.10981" name="loop6" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 3223.429419][ T24] audit: type=1400 audit(1755578068.590:56754): avc: denied { open } for pid=7063 comm="syz.6.10981" path="/dev/loop6" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 3223.614165][T31165] uvcvideo: No valid video chain found. [ 3223.654966][ T24] audit: type=1400 audit(1755578068.650:56755): avc: denied { ioctl } for pid=7063 comm="syz.6.10981" path="/dev/loop6" dev="devtmpfs" ino=121 ioctlcmd=0x4c00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 3223.918664][ T7066] audit: audit_backlog=65 > audit_backlog_limit=64 [ 3223.918760][T30271] audit: audit_backlog=65 > audit_backlog_limit=64 [ 3224.518247][T26857] blk_update_request: I/O error, dev loop1, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 3224.563906][T26876] blk_update_request: I/O error, dev loop1, sector 768 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 3224.612602][T31165] usb 2-1: USB disconnect, device number 43 [ 3224.622155][T26857] buffer_io_error: 14 callbacks suppressed [ 3224.622167][T26857] Buffer I/O error on dev loop1p3, logical block 1008, async page read [ 3224.636566][T26876] Buffer I/O error on dev loop1p4, logical block 0, async page read [ 3224.779501][ T7079] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 3224.803457][ T7079] EXT4-fs (loop1): 1 truncate cleaned up [ 3224.809438][ T7079] EXT4-fs (loop1): mounted filesystem without journal. Opts: i_version,nombcache,debug_want_extra_isize=0x0000000000000068,lazytime,block_validity,sysvgroups,,errors=continue [ 3224.944275][ T7096] netlink: 87 bytes leftover after parsing attributes in process `syz.3.10983'. [ 3225.093679][ T7086] FAULT_INJECTION: forcing a failure. [ 3225.093679][ T7086] name failslab, interval 1, probability 0, space 0, times 0 [ 3225.219167][ T7086] CPU: 1 PID: 7086 Comm: syz.0.10980 Tainted: G W 5.10.240-syzkaller #0 [ 3225.229033][ T7086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 3225.239114][ T7086] Call Trace: [ 3225.242434][ T7086] __dump_stack+0x21/0x24 [ 3225.246915][ T7086] dump_stack_lvl+0x169/0x1d8 [ 3225.251866][ T7086] ? show_regs_print_info+0x18/0x18 [ 3225.257313][ T7086] dump_stack+0x15/0x1c [ 3225.262115][ T7086] should_fail+0x3c1/0x510 [ 3225.266527][ T7086] ? avc_alloc_node+0x7e/0x320 [ 3225.271428][ T7086] __should_failslab+0xa4/0xe0 [ 3225.276205][ T7086] should_failslab+0x9/0x20 [ 3225.280981][ T7086] kmem_cache_alloc+0x3d/0x2e0 [ 3225.285752][ T7086] avc_alloc_node+0x7e/0x320 [ 3225.290529][ T7086] ? __kasan_check_write+0x14/0x20 [ 3225.295661][ T7086] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 3225.301570][ T7086] ? _raw_spin_lock+0xe0/0xe0 [ 3225.306279][ T7086] ? avc_xperms_free+0x270/0x270 [ 3225.311217][ T7086] avc_compute_av+0x147/0x6b0 [ 3225.316459][ T7086] avc_has_perm+0x2c5/0x360 [ 3225.320970][ T7086] ? avc_has_perm_noaudit+0x240/0x240 [ 3225.326519][ T7086] ? kernel_write+0x3c0/0x3c0 [ 3225.331277][ T7086] selinux_bpf+0xc7/0xf0 [ 3225.335606][ T7086] security_bpf+0x72/0xa0 [ 3225.339941][ T7086] __se_sys_bpf+0x1c1/0x680 [ 3225.344472][ T7086] ? __x64_sys_bpf+0x90/0x90 [ 3225.349065][ T7086] ? fpu__clear_all+0x20/0x20 [ 3225.353827][ T7086] __x64_sys_bpf+0x7b/0x90 [ 3225.358416][ T7086] do_syscall_64+0x31/0x40 [ 3225.362928][ T7086] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 3225.368814][ T7086] RIP: 0033:0x7fefaf507be9 [ 3225.373244][ T7086] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3225.393054][ T7086] RSP: 002b:00007fefadf4f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 3225.401749][ T7086] RAX: ffffffffffffffda RBX: 00007fefaf72f090 RCX: 00007fefaf507be9 [ 3225.409885][ T7086] RDX: 0000000000000080 RSI: 0000200000002ac0 RDI: 0000000000000005 [ 3225.418051][ T7086] RBP: 00007fefadf4f090 R08: 0000000000000000 R09: 0000000000000000 [ 3225.426387][ T7086] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3225.434524][ T7086] R13: 00007fefaf72f128 R14: 00007fefaf72f090 R15: 00007ffcbc318808 [ 3227.126696][ T7104] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 3227.225306][ T7104] EXT4-fs (loop3): 1 truncate cleaned up [ 3227.245388][ T7104] EXT4-fs (loop3): mounted filesystem without journal. Opts: i_version,nombcache,debug_want_extra_isize=0x0000000000000068,lazytime,block_validity,sysvgroups,,errors=continue [ 3227.299694][ T7121] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 3227.369465][ T7126] netlink: 87 bytes leftover after parsing attributes in process `syz.6.10994'. [ 3227.608346][ T7121] EXT4-fs (loop1): 1 truncate cleaned up [ 3227.619566][ T7121] EXT4-fs (loop1): mounted filesystem without journal. Opts: i_version,nombcache,debug_want_extra_isize=0x0000000000000068,lazytime,block_validity,sysvgroups,,errors=continue [ 3227.645688][ T24] kauditd_printk_skb: 278 callbacks suppressed [ 3227.645703][ T24] audit: type=1400 audit(1755578073.620:56976): avc: denied { mount } for pid=7116 comm="syz.1.10992" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 3227.698524][ T24] audit: type=1400 audit(1755578073.620:56977): avc: denied { read write } for pid=7116 comm="syz.1.10992" name="loop1" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 3227.734334][ T24] audit: type=1400 audit(1755578073.620:56978): avc: denied { open } for pid=7116 comm="syz.1.10992" path="/dev/loop1" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 3227.760471][ T24] audit: type=1400 audit(1755578073.620:56979): avc: denied { ioctl } for pid=7116 comm="syz.1.10992" path="/dev/loop1" dev="devtmpfs" ino=116 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 3227.786855][ T24] audit: type=1400 audit(1755578073.660:56980): avc: denied { unmount } for pid=950 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 3227.808377][ T24] audit: type=1400 audit(1755578073.660:56981): avc: denied { setattr } for pid=7116 comm="syz.1.10992" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 3227.832067][ T24] audit: type=1400 audit(1755578073.670:56982): avc: denied { unmount } for pid=3625 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 3227.867541][ T24] audit: type=1400 audit(1755578073.690:56983): avc: denied { map_create } for pid=7128 comm="syz.4.10996" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 3227.888406][ T24] audit: type=1400 audit(1755578073.690:56984): avc: denied { perfmon } for pid=7128 comm="syz.4.10996" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 3227.910126][ T24] audit: type=1400 audit(1755578073.690:56985): avc: denied { map_read map_write } for pid=7128 comm="syz.4.10996" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 3228.053210][ T7136] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11000'. [ 3228.079494][T26876] print_req_error: 2 callbacks suppressed [ 3228.079513][T26876] blk_update_request: I/O error, dev loop1, sector 768 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 3228.109784][T26870] blk_update_request: I/O error, dev loop1, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 3228.182183][T26876] blk_update_request: I/O error, dev loop1, sector 768 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3228.221021][T26870] blk_update_request: I/O error, dev loop1, sector 8064 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3228.236654][T26876] Buffer I/O error on dev loop1p4, logical block 0, async page read [ 3228.276043][T26876] blk_update_request: I/O error, dev loop1, sector 768 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3228.288457][T26870] Buffer I/O error on dev loop1p3, logical block 1008, async page read [ 3228.323940][T26876] Buffer I/O error on dev loop1p4, logical block 0, async page read [ 3228.350274][T26876] blk_update_request: I/O error, dev loop1, sector 768 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3228.383585][T26876] Buffer I/O error on dev loop1p4, logical block 0, async page read [ 3228.514915][ T7154] netlink: 87 bytes leftover after parsing attributes in process `syz.4.11003'. [ 3228.676983][T26876] blk_update_request: I/O error, dev loop1, sector 768 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3228.745733][T26876] Buffer I/O error on dev loop1p4, logical block 0, async page read [ 3228.754702][T26876] blk_update_request: I/O error, dev loop1, sector 768 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3228.769496][T26876] Buffer I/O error on dev loop1p4, logical block 0, async page read [ 3229.353684][ T7137] F2FS-fs (loop1): invalid crc value [ 3229.391823][ T7137] F2FS-fs (loop1): Found nat_bits in checkpoint [ 3229.523821][ T7137] F2FS-fs (loop1): Start checkpoint disabled! [ 3229.541166][ T7137] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 3229.721637][ T7169] xt_CT: You must specify a L4 protocol and not use inversions on it [ 3229.812018][T26870] blk_update_request: I/O error, dev loop1, sector 768 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 3229.843880][T26857] blk_update_request: I/O error, dev loop1, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 3229.859368][T26870] Buffer I/O error on dev loop1p4, logical block 0, async page read [ 3229.871762][T26857] Buffer I/O error on dev loop1p3, logical block 1008, async page read [ 3229.882369][T26870] Buffer I/O error on dev loop1p4, logical block 0, async page read [ 3229.908356][T26870] Buffer I/O error on dev loop1p4, logical block 0, async page read [ 3229.932681][T26870] Buffer I/O error on dev loop1p4, logical block 0, async page read [ 3229.941362][T26870] Buffer I/O error on dev loop1p4, logical block 0, async page read [ 3230.036362][T26857] Buffer I/O error on dev loop1p3, logical block 1008, async page read [ 3230.043327][T26870] Buffer I/O error on dev loop1p4, logical block 0, async page read [ 3230.054322][T26870] Buffer I/O error on dev loop1p4, logical block 0, async page read [ 3230.073589][T26870] Buffer I/O error on dev loop1p4, logical block 0, async page read [ 3230.188827][ T7184] netlink: 87 bytes leftover after parsing attributes in process `syz.1.11011'. [ 3230.708821][ T7197] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=7197 comm=syz.6.11016 [ 3231.831287][ T7207] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11020'. [ 3231.850165][ T7207] netlink: 36 bytes leftover after parsing attributes in process `syz.0.11020'. [ 3232.772540][ T24] kauditd_printk_skb: 475 callbacks suppressed [ 3232.772554][ T24] audit: type=1400 audit(1755578078.750:57461): avc: denied { read write } for pid=3625 comm="syz-executor" name="loop1" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 3232.823775][ T24] audit: type=1400 audit(1755578078.760:57462): avc: denied { read write open } for pid=3625 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 3232.849331][ T24] audit: type=1400 audit(1755578078.760:57463): avc: denied { ioctl } for pid=3625 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=116 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 3232.893115][ T24] audit: type=1400 audit(1755578078.770:57464): avc: denied { prog_load } for pid=7223 comm="syz.0.11025" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 3232.987666][ T24] audit: type=1400 audit(1755578078.770:57465): avc: denied { bpf } for pid=7223 comm="syz.0.11025" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 3233.180440][ T7234] ================================================================== [ 3233.188747][ T7234] BUG: KASAN: slab-out-of-bounds in xfrm_policy_inexact_list_reinsert+0x620/0x6d0 [ 3233.198056][ T7234] Read of size 1 at addr ffff888114e833d8 by task syz.6.11029/7234 [ 3233.206068][ T7234] [ 3233.208404][ T7234] CPU: 1 PID: 7234 Comm: syz.6.11029 Tainted: G W 5.10.240-syzkaller #0 [ 3233.218246][ T7234] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 3233.228950][ T7234] Call Trace: [ 3233.232308][ T7234] __dump_stack+0x21/0x24 [ 3233.236733][ T7234] dump_stack_lvl+0x169/0x1d8 [ 3233.241421][ T7234] ? show_regs_print_info+0x18/0x18 [ 3233.246652][ T7234] ? thaw_kernel_threads+0x220/0x220 [ 3233.251939][ T7234] ? __irq_exit_rcu+0x40/0x150 [ 3233.256704][ T7234] print_address_description+0x7f/0x2c0 [ 3233.262283][ T7234] ? xfrm_policy_inexact_list_reinsert+0x620/0x6d0 [ 3233.269055][ T7234] kasan_report+0xe2/0x130 [ 3233.273615][ T7234] ? xfrm_policy_inexact_list_reinsert+0x620/0x6d0 [ 3233.280149][ T7234] __asan_report_load1_noabort+0x14/0x20 [ 3233.286147][ T7234] xfrm_policy_inexact_list_reinsert+0x620/0x6d0 [ 3233.292491][ T7234] xfrm_policy_inexact_insert_node+0x938/0xb50 [ 3233.298748][ T7234] ? xfrm_netlink_rcv+0x72/0x90 [ 3233.303800][ T7234] ? netlink_unicast+0x876/0xa40 [ 3233.308808][ T7234] ? netlink_sendmsg+0x88d/0xb30 [ 3233.313891][ T7234] ? ____sys_sendmsg+0x5a2/0x8c0 [ 3233.319856][ T7234] ? ___sys_sendmsg+0x1f0/0x260 [ 3233.324987][ T7234] ? do_syscall_64+0x31/0x40 [ 3233.329630][ T7234] xfrm_policy_inexact_alloc_chain+0x53a/0xb30 [ 3233.335909][ T7234] xfrm_policy_inexact_insert+0x70/0x1130 [ 3233.341882][ T7234] ? __get_hash_thresh+0x10c/0x420 [ 3233.347042][ T7234] ? policy_hash_bysel+0x110/0x4f0 [ 3233.352278][ T7234] xfrm_policy_insert+0x126/0x9a0 [ 3233.357624][ T7234] ? xfrm_policy_construct+0x54f/0x1f00 [ 3233.363358][ T7234] xfrm_add_policy+0x4d1/0x830 [ 3233.368308][ T7234] ? xfrm_dump_sa_done+0xc0/0xc0 [ 3233.373354][ T7234] xfrm_user_rcv_msg+0x450/0x6d0 [ 3233.378521][ T7234] ? xfrm_netlink_rcv+0x90/0x90 [ 3233.383395][ T7234] ? selinux_nlmsg_lookup+0x219/0x4a0 [ 3233.388785][ T7234] netlink_rcv_skb+0x1e0/0x430 [ 3233.393643][ T7234] ? xfrm_netlink_rcv+0x90/0x90 [ 3233.398511][ T7234] ? netlink_ack+0xb80/0xb80 [ 3233.403421][ T7234] ? mutex_trylock+0xa0/0xa0 [ 3233.408013][ T7234] ? __netlink_lookup+0x387/0x3b0 [ 3233.413124][ T7234] xfrm_netlink_rcv+0x72/0x90 [ 3233.417890][ T7234] netlink_unicast+0x876/0xa40 [ 3233.422745][ T7234] netlink_sendmsg+0x88d/0xb30 [ 3233.427526][ T7234] ? schedule_preempt_disabled+0x20/0x20 [ 3233.433182][ T7234] ? netlink_getsockopt+0x530/0x530 [ 3233.438391][ T7234] ? security_socket_sendmsg+0x82/0xa0 [ 3233.443972][ T7234] ? netlink_getsockopt+0x530/0x530 [ 3233.449177][ T7234] ____sys_sendmsg+0x5a2/0x8c0 [ 3233.453946][ T7234] ? __sys_sendmsg_sock+0x40/0x40 [ 3233.459492][ T7234] ? import_iovec+0x7c/0xb0 [ 3233.464120][ T7234] ___sys_sendmsg+0x1f0/0x260 [ 3233.468897][ T7234] ? __sys_sendmsg+0x250/0x250 [ 3233.473699][ T7234] ? __fdget+0x1a1/0x230 [ 3233.477981][ T7234] __x64_sys_sendmsg+0x1e2/0x2a0 [ 3233.482933][ T7234] ? ___sys_sendmsg+0x260/0x260 [ 3233.487798][ T7234] ? switch_fpu_return+0x197/0x340 [ 3233.492931][ T7234] do_syscall_64+0x31/0x40 [ 3233.497374][ T7234] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 3233.503375][ T7234] RIP: 0033:0x7fe274ea2be9 [ 3233.507886][ T7234] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3233.527814][ T7234] RSP: 002b:00007fe27390b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3233.536331][ T7234] RAX: ffffffffffffffda RBX: 00007fe2750c9fa0 RCX: 00007fe274ea2be9 [ 3233.544408][ T7234] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000005 [ 3233.552492][ T7234] RBP: 00007fe274f25e19 R08: 0000000000000000 R09: 0000000000000000 [ 3233.560706][ T7234] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3233.568776][ T7234] R13: 00007fe2750ca038 R14: 00007fe2750c9fa0 R15: 00007ffc4b08c4e8 [ 3233.577023][ T7234] [ 3233.579506][ T7234] Allocated by task 7234: [ 3233.583853][ T7234] __kasan_kmalloc+0xda/0x110 [ 3233.588533][ T7234] __kmalloc+0x1a7/0x330 [ 3233.592774][ T7234] sk_prot_alloc+0xb2/0x340 [ 3233.597274][ T7234] sk_alloc+0x38/0x4e0 [ 3233.601446][ T7234] pfkey_create+0x12a/0x660 [ 3233.606172][ T7234] __sock_create+0x38d/0x770 [ 3233.610975][ T7234] __sys_socket+0xec/0x190 [ 3233.615477][ T7234] __x64_sys_socket+0x7a/0x90 [ 3233.620159][ T7234] do_syscall_64+0x31/0x40 [ 3233.624575][ T7234] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 3233.630549][ T7234] [ 3233.633032][ T7234] Last potentially related work creation: [ 3233.638945][ T7234] kasan_save_stack+0x3a/0x60 [ 3233.643633][ T7234] __kasan_record_aux_stack+0xd2/0x100 [ 3233.649103][ T7234] kasan_record_aux_stack_noalloc+0xb/0x10 [ 3233.655004][ T7234] insert_work+0x52/0x310 [ 3233.659332][ T7234] __queue_work+0x923/0xca0 [ 3233.663875][ T7234] queue_work_on+0xd5/0x130 [ 3233.668549][ T7234] bpf_prog_free+0x139/0x150 [ 3233.673139][ T7234] __bpf_prog_put_rcu+0x14b/0x170 [ 3233.678158][ T7234] rcu_do_batch+0x4df/0xa80 [ 3233.682662][ T7234] rcu_core+0x55f/0xd60 [ 3233.686823][ T7234] rcu_core_si+0x9/0x10 [ 3233.691077][ T7234] __do_softirq+0x255/0x563 [ 3233.695730][ T7234] [ 3233.698065][ T7234] Second to last potentially related work creation: [ 3233.704659][ T7234] kasan_save_stack+0x3a/0x60 [ 3233.709446][ T7234] __kasan_record_aux_stack+0xd2/0x100 [ 3233.714904][ T7234] kasan_record_aux_stack_noalloc+0xb/0x10 [ 3233.720710][ T7234] call_rcu+0x10e/0x1050 [ 3233.724971][ T7234] bpf_prog_put+0x2c8/0x3a0 [ 3233.729475][ T7234] bpf_prog_release+0x3b/0x40 [ 3233.734271][ T7234] __fput+0x2fb/0x770 [ 3233.738282][ T7234] ____fput+0x15/0x20 [ 3233.742573][ T7234] task_work_run+0x127/0x190 [ 3233.747435][ T7234] exit_to_user_mode_loop+0xcb/0xe0 [ 3233.752641][ T7234] syscall_exit_to_user_mode+0x68/0x90 [ 3233.758574][ T7234] do_syscall_64+0x3d/0x40 [ 3233.763013][ T7234] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 3233.769082][ T7234] [ 3233.771499][ T7234] The buggy address belongs to the object at ffff888114e83000 [ 3233.771499][ T7234] which belongs to the cache kmalloc-1k of size 1024 [ 3233.785568][ T7234] The buggy address is located 984 bytes inside of [ 3233.785568][ T7234] 1024-byte region [ffff888114e83000, ffff888114e83400) [ 3233.800245][ T7234] The buggy address belongs to the page: [ 3233.805915][ T7234] page:ffffea000453a000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x114e80 [ 3233.816349][ T7234] head:ffffea000453a000 order:3 compound_mapcount:0 compound_pincount:0 [ 3233.824706][ T7234] flags: 0x4000000000010200(slab|head) [ 3233.830450][ T7234] raw: 4000000000010200 ffffea000452d400 0000000600000006 ffff888100042f00 [ 3233.839066][ T7234] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 3233.847746][ T7234] page dumped because: kasan: bad access detected [ 3233.854519][ T7234] page_owner tracks the page as allocated [ 3233.860349][ T7234] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 30271, ts 2547957213024, free_ts 2547912303092 [ 3233.881454][ T7234] prep_new_page+0x179/0x180 [ 3233.886064][ T7234] get_page_from_freelist+0x2235/0x23d0 [ 3233.891630][ T7234] __alloc_pages_nodemask+0x268/0x5f0 [ 3233.897001][ T7234] new_slab+0x84/0x3f0 [ 3233.901088][ T7234] ___slab_alloc+0x2a6/0x450 [ 3233.905905][ T7234] __slab_alloc+0x63/0xa0 [ 3233.910241][ T7234] __kmalloc_track_caller+0x1ef/0x320 [ 3233.915668][ T7234] __alloc_skb+0xdc/0x520 [ 3233.920087][ T7234] rtmsg_fib+0x60a/0xd90 [ 3233.924413][ T7234] fib_table_insert+0xac2/0x1bb0 [ 3233.929344][ T7234] fib_add_ifaddr+0x808/0xed0 [ 3233.934016][ T7234] fib_netdev_event+0x231/0x5d0 [ 3233.938861][ T7234] raw_notifier_call_chain+0x90/0x100 [ 3233.944234][ T7234] __dev_notify_flags+0x28f/0x500 [ 3233.949339][ T7234] dev_change_flags+0xe8/0x1a0 [ 3233.954339][ T7234] do_setlink+0xbb4/0x3ab0 [ 3233.958943][ T7234] page last free stack trace: [ 3233.963728][ T7234] __free_pages_ok+0x7fc/0x820 [ 3233.968517][ T7234] __free_pages+0xdd/0x380 [ 3233.973073][ T7234] __free_slab+0xcf/0x190 [ 3233.977575][ T7234] unfreeze_partials+0x15f/0x190 [ 3233.982761][ T7234] put_cpu_partial+0xc1/0x180 [ 3233.987679][ T7234] __slab_free+0x2c9/0x3a0 [ 3233.992109][ T7234] ___cache_free+0x111/0x130 [ 3233.996854][ T7234] qlink_free+0x50/0x90 [ 3234.001046][ T7234] qlist_free_all+0x5f/0xb0 [ 3234.005587][ T7234] kasan_quarantine_reduce+0x14a/0x160 [ 3234.011183][ T7234] __kasan_slab_alloc+0x2f/0xf0 [ 3234.016046][ T7234] slab_post_alloc_hook+0x5d/0x2f0 [ 3234.021424][ T7234] kmem_cache_alloc_trace+0x160/0x2e0 [ 3234.027015][ T7234] inetdev_init+0x84/0x480 [ 3234.031551][ T7234] inetdev_event+0x1f8/0x1030 [ 3234.036401][ T7234] raw_notifier_call_chain+0x90/0x100 [ 3234.041934][ T7234] [ 3234.044255][ T7234] Memory state around the buggy address: [ 3234.049910][ T7234] ffff888114e83280: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3234.058060][ T7234] ffff888114e83300: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3234.066313][ T7234] >ffff888114e83380: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 3234.074578][ T7234] ^ [ 3234.082066][ T7234] ffff888114e83400: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 3234.090285][ T7234] ffff888114e83480: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 3234.098432][ T7234] ================================================================== [ 3234.106622][ T7234] Disabling lock debugging due to kernel taint [ 3234.467725][ T24] audit: type=1400 audit(1755578078.770:57466): avc: denied { perfmon } for pid=7223 comm="syz.0.11025" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 3234.489583][ T24] audit: type=1400 audit(1755578078.780:57467): avc: denied { prog_run } for pid=7223 comm="syz.0.11025" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 3234.514672][T26857] print_req_error: 30 callbacks suppressed [ 3234.514692][T26857] blk_update_request: I/O error, dev loop1, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 3234.530500][ T24] audit: type=1400 audit(1755578078.830:57468): avc: denied { read write } for pid=30271 comm="syz-executor" name="loop6" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 3234.533197][T26857] blk_update_request: I/O error, dev loop1, sector 8064 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3234.573350][T26870] blk_update_request: I/O error, dev loop1, sector 768 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 3234.587793][T26870] blk_update_request: I/O error, dev loop1, sector 768 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3234.601933][T26870] blk_update_request: I/O error, dev loop1, sector 768 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3234.614234][ T24] audit: type=1400 audit(1755578078.830:57469): avc: denied { open } for pid=30271 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 3234.618593][T26870] blk_update_request: I/O error, dev loop1, sector 768 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3234.651724][T26870] blk_update_request: I/O error, dev loop1, sector 768 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3234.663071][T26870] blk_update_request: I/O error, dev loop1, sector 768 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3234.679734][ T24] audit: type=1400 audit(1755578078.830:57470): avc: denied { ioctl } for pid=30271 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=121 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1