last executing test programs: 7.647403151s ago: executing program 3 (id=1933): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x202) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xbebf8000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000141, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000003680)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) utime(&(0x7f0000000200)='./file0\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f00000002c0)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}, {@delalloc}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}, {@test_dummy_encryption}, {@nodiscard}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}, {@acl}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}]}, 0x1, 0xbb4, &(0x7f00000017c0)="$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") r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000240)={'syz', 0x1}, &(0x7f00000003c0)='%\x00', 0xfffffffffffffffe) lstat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) keyctl$chown(0x4, r4, r5, r6) 7.560277485s ago: executing program 2 (id=1935): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) r3 = dup(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), r5) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000001900)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=ANY=[@ANYBLOB="e0100000", @ANYRES16=r6, @ANYBLOB="0500000000000000000001000000060006004e240000901008809005008024000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b24000100000000000000000000000000000000000000000000000000000000000000000024000200fcbefe9641719404cc5c9ab2766dd4793e367b0ea55e65e2e3416ac9d4e68841240002001171ee8da334a5099295af229a5d237a7f4102f01f28b34347d6cbbe135d83ec24000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691cb40409807c000080060001000a00000014000200000000000000000000000000000000010500030002000000060001000200000008000200ac1414aa0500030001000000060001000a00000014000200ff0100000000000000000000000000010500030001000000060001000200000008000200e00000010500030000000000f4000080060001000a00000014000200fc0000000000000000000000000000000500030001000000060001000a00000014000200fc0200000000000000000000000000010500030000000000060001000200000008000200e00000020500030003000000060001000200000008000200000000000500030000000000060001000200000008000200ac1414bb0500030001000000060001000200000008000200ac1414bb0500030000000000060001000a00000014000200000000000000000000000000000000010500030002000000060001000a00000014000200fc0200000000000000000000000000000500030003000000340000800600010002000000080002000a0101010500030004000000060001000200000008000200ac1414aa050003000300000064000080060001000a00000014000200200100000000000000000000000000000500030002000000060001000200000008000200ac1414aa0500030001000000060001000a00000014000200ff010000000000000000000000000001050003000200000094000080060001000200000008000200ac1e00010500030002000000060001000200000008000200e00000010500030002000000060001000a00000014000200fc0000000000000000000000000000000500030002000000060001000200000008000200000000000500030003000000060001000a00000014000200fe80000000000000000000000000000e050003000000000040000080060001000a00000014000200fc0200000000000000000000000000000500030002000000060001000200000008000200ac1414aa050003000000000064000080060001000a00000014000200200100000000000000000000000000020500030001000000060001000a00000014000200fc02000000000000000000000000000105000300020000000600010002000000080002000a010100050003000200000070000080060001000a00000014000200ff0200000000000000000000000000010500030000000000060001000a00000014000200000000000000000000000000000000000500030002000000060001000a0000001400020000000000000000000000000000000001050003000000000000010080060001000a00000014000200ff0200000000000000000000000000010500030000000000060001000200000008000200000000000500030003000000060001000200000008000200640101000500030002000000060001000200000008000200640101010500030001000000060001000200000008000200ac1414aa0500030002000000060001000a00000014000200fe8000000000000000000000000000bb05000300020000000600010002000000080002007f0000010500030002000000060001000a00000014000200fc0200000000000000000000000000010500030003000000060001000200000008000200640101010500030001000000240002005da952055e5857d673cddd36909746c80efa3ff95c317de1063db32bc80a0b3e1803008024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b39220600050005000000e802098058000080060001000200000008000200ac1e00010500030001000000060001000a00000014000200000000000000000000000000000000010500030000000000060001000200000008000200ffffffff05000300010000007c000080060001000a00000014000200000000000000000000000000000000010500030002000000060001000200000008000200ac1414bb0500030002000000060001000a000000140002000000000000000000000000000000000105000300020000000600010002000000080002000a0101010500030003000000f4000080060001000a0000001400020000000000000000000000ffffac1414aa0500030003000000060001000200000008000200ac1414aa05000300000000000600010002000000080002000a01010205000300020000000600010002000000080002007f00000105000300000000000600010002000000080002000a0101010500030003000000060001000200000008000200e00000010500030003000000060001000a00000014000200fc01000000000000000000000000000005000300010000000600010002000000080002000a0101000500030000000000060001000200000008000200ac1e0101050003000200000094000080060001000a00000014000200fc0200000000000000000000000000010500030002000000060001000a00000014000200ff0100000000000000000000000000010500030001000000060001000200000008000200e00000010500030002000000060001000200000008000200ac1414bb0500030001000000060001000200000008000200ffffffff050003000200000088000080060001000a00000014000200fe8000000000000000000000000000aa0500030001000000060001000200000008000200ac1414aa0500030002000000060001000a00000014000200fe8800000000000000000000000001010500030002000000060001000a00000014000200ff02000000000000000000000000000105000300020000007c000080200004000a004e2100000006fc0100000000000000000000000000010400000008000a000100000024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b3922080003000300000024000200379aa288b2244a5b504ba04bea45625d328fb93b62e607a1b2e4da2f7f76a549780000800800030001000000080003000400000024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b3922080003000000000024000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b1400040002004e22000000000000000000000000e4060080dc020980f4000080060001000a00000014000200000000000000000000000000000000000500030002000000060001000a00000014000200fc0000000000000000000000000000000500030001000000060001000200000008000200ffffffff050003000100000006d4e23d7500000008000200ac1e00010500030001000000060001000200000008000200e000000105000300020000000600010002000000080002007f0000010500030002000000060001000a00000014000200000000000000000000000000000000010500030001000000060001000a00000014000200fc010000000000000000000000000001050003000300000034000080060001000200000008000200640101000500030001000000060001000200000008000200ac1414bb050003000200000000010080060001000a00000014000200200100000000000000000000000000010500030000000000060001000200000008000200e000000205000300020000000600010002000000080002006401010005000300020000000600010002000000080002007f00000105000300010000000600010002000000080002007f0000010500030001000000060001000a00000014000200fe8000000000000000000000000000bb0500030000000000060001000200000008000200ffffffff0500030000000000060001000200000008000200e00000010500030003000000060001000a00000014000200fc0100000000000000000000000000010500030000000000940000800600010002000000080002006401010005000300010000000600010002000000080002006401010205000300000000000600010002000000080002007f0000010500030003000000060001000200000008000200e00000020500030003000000060001000200000008000200ac1414120500030002000000060001000200000008000200ac14142d05000300020000001c000080060001000200000008000200ffffffff05000300030000000800030002000000200004000a004e2000000005fc010000000000000000000000000001000000009403098094000080060001000a0000001400020000000000000000000000ffffac1414bb0500030003000000060001000a00000014000200fe8800000000000000000000000000010500030002000000060001000a00000014000200ff0100000000000000000000000000010500030003000000060001000a00000014000200fe880000000000000000000000000101050003000100000064000080060001000a00000014000200fe8000000000000000000000000000bb0500030000000000060001000200000008000200ac1414bb0500030001000000060001000a0000001400020000000000000000000000ffffe00000020500030003000000f4000080060001000200000008000200000000000500030001000000060001000a00000014000200000000000000000000000000000000010500030003000000060001000200000008000200ac1414aa0500030001000000060001000a00000014000200fe80000000000000000000000000003e0500030001000000060001", @ANYRES32=r7], 0x10e0}}, 0x0) 5.985981592s ago: executing program 0 (id=1941): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x202) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xbebf8000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000141, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000003680)='sched_switch\x00', r3}, 0x10) lsetxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sys_enter\x00', r4}, 0x10) getrusage(0xffffffffffffffff, &(0x7f0000001140)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x50) r5 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_ro(r5, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) utime(&(0x7f0000000200)='./file0\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f0000000380)={[{@debug}, {@delalloc}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}, {@test_dummy_encryption}, {@nodiscard}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}, {@acl}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}]}, 0x1, 0xbb4, &(0x7f00000017c0)="$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") sigaltstack(&(0x7f0000000000)={0xffffffffffffffff, 0x1, 0xfffffffffffffe3d}, &(0x7f0000000080)={&(0x7f0000000040)}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0xc, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x74, 0x101301) 5.691389005s ago: executing program 4 (id=1942): openat$tun(0xffffffffffffff9c, 0x0, 0x100, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000100)={0x30, 0x5, 0x0, {0x0, 0x1}}, 0x30) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) read$FUSE(r0, &(0x7f0000004180)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x29, 0x0, 0x440, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x8, 0x80}}, 0x50) 5.667172056s ago: executing program 1 (id=1943): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c00010062726964"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@newqdisc={0x54, 0x24, 0xe0b, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0xfffffffffffffc85, 0x2, {{0x1ff, 0x6, 0xfffffffd, 0x0, 0xa57, 0x32d}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}]}}}]}, 0x54}}, 0x0) 5.086957681s ago: executing program 1 (id=1944): syz_emit_ethernet(0x42, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffff9078ac141400ac1e0001440c0a010000000000000000000000000000000000000000000000800000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000590780000"], 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000180)='./bus\x00', 0x2000804, &(0x7f0000000480)={[{@numtail}, {@iocharset={'iocharset', 0x3d, 'cp1255'}}, {@shortname_win95}, {@shortname_win95}, {@rodir}, {@utf8no}, {@shortname_winnt}, {@shortname_win95}, {@fat=@check_normal}, {@fat=@codepage={'codepage', 0x3d, '860'}}, {@utf8}, {@numtail}, {@rodir}, {@shortname_lower}, {@utf8no}, {@rodir}]}, 0x1, 0x289, &(0x7f00000001c0)="$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") sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) bpf$MAP_CREATE(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r6 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) r7 = fcntl$dupfd(r5, 0x406, r5) ioctl$MON_IOCX_GETX(r6, 0x4018920a, &(0x7f00000000c0)={&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000001ec0)=""/4111, 0x100f}) ioctl$USBDEVFS_SUBMITURB(r7, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000540)=ANY=[@ANYRESOCT=r0, @ANYRES32, @ANYBLOB="0000000000000000b703000000030000850000001b00"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0xa, [@struct={0x8, 0x1, 0x0, 0xf, 0x0, 0x20008, [{0xe, 0x0, 0x3}]}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e]}}, 0x0, 0x3a}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) request_key(&(0x7f0000002740)='asymmetric\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000000)=',*[\\/&)\x00', 0xffffffffffffffff) 5.060371902s ago: executing program 4 (id=1945): openat$tun(0xffffffffffffff9c, 0x0, 0x100, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000100)={0x30, 0x5, 0x0, {0x0, 0x1}}, 0x30) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) dup(0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) read$FUSE(r0, &(0x7f0000004180)={0x2020, 0x0, 0x0}, 0x2020) umount2(&(0x7f00000001c0)='./file0\x00', 0x0) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x440, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x8, 0x80}}, 0x50) 4.430294269s ago: executing program 2 (id=1946): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) syz_socket_connect_nvme_tcp() 4.356924673s ago: executing program 0 (id=1947): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@getnexthop={0x17, 0x76, 0x401, 0x0, 0x0, {}, [@NHA_ID={0x8}]}, 0x20}}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x10) r2 = socket$key(0xf, 0x3, 0x2) recvmmsg(r2, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400}) setsockopt$sock_int(r2, 0x1, 0x4b, &(0x7f0000000040)=0xfd87, 0x4) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB], 0x10}}, 0x0) write(r1, &(0x7f0000000240)="aefc00001a0025f01d85bc04fef7681d020b49ff708800008003280008021000ac0a1410bc71176a36ede498534108e58342fa94a235a2a441f9", 0xfcae) 4.345802493s ago: executing program 4 (id=1948): syz_emit_ethernet(0x3e, &(0x7f00000005c0)={@local, @broadcast, @val={@void, {0x8100, 0x5, 0x1, 0x2}}, {@ipv4={0x800, @icmp={{0x9, 0x4, 0x0, 0x34, 0x2c, 0x66, 0x0, 0x4, 0x1, 0x0, @multicast1, @broadcast, {[@timestamp={0x44, 0xc, 0xda, 0x0, 0x1, [0x4, 0xff]}, @end]}}, @address_reply={0x12, 0x0, 0x0, 0x7}}}}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000600)={&(0x7f00000007c0)={0x16c, r1, 0x2, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x58, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xc}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macvlan1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x2}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x858f}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x5}]}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_hsr\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x401}]}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x4c}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x100}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x5}]}, @IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xfd}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x2}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x85}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x56}]}]}, 0x16c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000840) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000180)='./bus\x00', 0x2000804, &(0x7f0000000480)={[{@numtail}, {@iocharset={'iocharset', 0x3d, 'cp1255'}}, {@shortname_win95}, {@shortname_win95}, {@rodir}, {@utf8no}, {@shortname_winnt}, {@shortname_win95}, {@fat=@check_normal}, {@fat=@codepage={'codepage', 0x3d, '860'}}, {@utf8}, {@numtail}, {@rodir}, {@shortname_lower}, {@utf8no}, {@rodir}]}, 0x1, 0x289, &(0x7f00000001c0)="$eJzs3c1qA1UUAOAzzaRJdJEsXInQAV24Kq1P0CIVxIKgZKEutNgUpAmFFgJVMXblE7hx6/O4EV/AB1Dc2YU4ks7kTyctkbQp+n2bHs69J/fM3KHtZm4+eWVwfnpxdXbz5c/RbCaxdRAHcZtEJ7Zi4uuo9NOv1XkA4Jm7zfP4LS80itT14oz6ksp069GbAwAexfzf/033AgA8jfc/+PCdw+Pjo/eyrBkx+GbYTaL4WYwfnsVn0Y9e7EU7/ojIp4r4rbePjyLNxjrx2mA07I4rBx//UH7+4S8Rd/X70Y5Odf1+VpirHw279XihXP+gH713v492vFRd/8as/jYv66O7Ha+/Otf/brTjx0/jIvpxGsX/OpP6r/az7M3829+/+GicHdcno2G3EacLdyqvPfXeAAAAAAAAAAAAAAAAAAAAAADw37WbTXUWz9+ZHPx/z/g95wON5s7n2cuyLE+K+bP6NF5OI93ktQMAAAAAAAAAAAAAAAAAAMBzcXX9+flJv9+7XGswea2/Yij+XMw0ImLJ56QPr7WzaodRK1vrJxGrXVc9GneVD0+urXjHWuN+epdJGuvbgmSaac0P7USx1jjTKoK5zGpLfPfPjWvGXTB5us5PkmWbOwmaVQ/JGoK84vGrLa3a/numVV5BxeTWPatvv/ives7bS4aSiKhPb2Y51KqeXF/vPXy630EAAAAAAAAAAAAAAAAAAEBh9tJvxeDNBhoCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgA2Yff//CsGoLF42J6+NgzTKzIYvEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgP+BvwIAAP//XAxp4w==") pipe(&(0x7f0000000940)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet6_buf(r2, 0x29, 0x21, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) syz_pidfd_open(r5, 0x0) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x18) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r8 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, 0x453, 0x200, 0x70bd25, 0x25dfdbfe, "7f"}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) request_key(&(0x7f0000002740)='asymmetric\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000000)=',*[\\/&)\x00', 0xffffffffffffffff) 3.48603045s ago: executing program 3 (id=1949): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xa, 0x4, 0xfff, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000020b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000080)={r2}, 0xc) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r3}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x1c}}, 0x0) r4 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r4, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31) sendmmsg$inet6(r4, &(0x7f0000002940), 0x40000000000017d, 0x811) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r5}, 0x10) syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000740)='./file0\x00', 0x10040, &(0x7f0000000100)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@barrier_val={'barrier', 0x3d, 0xde2}}]}, 0xfd, 0x269, &(0x7f0000000a00)="$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") r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) getdents64(r6, &(0x7f0000001f80)=""/4097, 0x1001) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0a00000007000000fc7f0000cc"], 0x50) 3.445084122s ago: executing program 3 (id=1950): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='reno', 0x4) socket$inet(0x2, 0x80000, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x0) syz_usb_connect(0x2, 0xfffffffffffffe86, 0x0, 0x0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) (fail_nth: 6) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, &(0x7f0000000080)=0x1) 3.419606763s ago: executing program 2 (id=1951): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x8c25000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r1 = syz_io_uring_setup(0x5b31, &(0x7f00000002c0)={0x0, 0xf59b, 0x4, 0x10006, 0x0, 0x0, r0}, &(0x7f0000000140), &(0x7f0000000280)) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000480), 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='trans=fd', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="6c00368f291b82d2c491306dc0a993fa4d7d14906f74a26600698d09725aa16580f7cdc2b5eac4fc0f6aeeea6bceb3b386687e9f5d9d836c27f044555560a2377b049d9c3d00a9e92862c44842ff548259cb73fd4495816ebe377ae3a9f105fad695c871ed5a17e99508b9dbc2b14ac401f50e57b0ca123d4bfe00"/135]) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000140000711029000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000080)={0x80002000}) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000f2ffffff0000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000900)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r4}, 0x10) timer_create(0x3, 0x0, &(0x7f0000044000)) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r2, 0x4000000, 0x2000, 0x2000, &(0x7f0000000040)="976d9023d56482cd284a63da539706d7009be646625bd75b025352ebe557df463106baeed6c2d75549b140f143fb8bb67bfe5b308b8d05758115c7ad", &(0x7f0000000180)=""/114, 0x0, 0x0, 0xd8, 0xc4, &(0x7f0000000400)="cf2240e6919817e49555d221b4e6c6ba11c4d974ddab2318db7b52cee499399a00be4b71119246d7bca28cc8346eb84414e45f3f4633f4acb77bf8cc38c4c16fe035905db79cdc0be634a915662c4cac58ae94706f86ea320f339c21399b5bb7607044916c63c528ab4149718d6215a9a3749113c268e49b2b9dae91ed804e5ac5d4ec7ac9c5fd67a76f9a2b06f7304f6e81221a751008e786e1edde82cf1ecb76cb4cd71cf781ea3a19b917a1e215b1a6c7ee605b32b91eaae38517fde4303d5f2b1e63e9e52ae4b197fd72de1f71801e1f9f1369d1f530", &(0x7f0000000280)="bf049fd184f7b03c21d9bcddc4eef9ebb6a0da3eb91c56454e873dd7336ccf21a1eeb8da7adf80d6e06ef46c7f36222fadaed2103c286468b3f44adee51445bd1bedf8fcc1c0b9fdc8b3829b1bf0c9d2d409cdecb12ad033e299c029331993ae9760345bf7feb91ee96b0eee19454ad3dbce5019b68c114ff1921a9b4665744c7784ac6736101a70592d83c448a84c31ec60bb901d96ea99471d823ee523318878ee704a8d9502b566cad45587cb74ea8259c1c0a926fc09499395b2db5af40bb6f4c526", 0x0, 0x8000}, 0x24) 3.376961444s ago: executing program 0 (id=1952): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x5, 0xc, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000460000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000400000d67bf82cf3bee197457c324b4f2675413a2abaff9b1f00a5fcf373a74bda18657fb7adab1e0ffa0a17034f9602c192c0c0bb30692481dafb5e90f485c263dfb539e8008727360677a05e3755c242"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) write$bt_hci(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r2}, 0x18) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffcfffffa, 0x4031, 0xffffffffffffffff, 0x41d1000) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f00000017c0)='./file1\x00', 0x0, &(0x7f0000000000), 0x1, 0xb80, &(0x7f0000000c40)="$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") r3 = open(&(0x7f0000000140)='./file1\x00', 0x64042, 0x1e9) pwritev2(r3, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x2000, 0x0, 0x3) times(0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) timer_settime(0x0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) pipe2$9p(0x0, 0x80800) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_mount_image$erofs(&(0x7f00000000c0), &(0x7f0000000000)='./file2\x00', 0x20404a, &(0x7f00000003c0)=ANY=[], 0xfd, 0x1dc, &(0x7f0000000440)="$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") r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x80000, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r6, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000380)) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r8}, 0x10) r9 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) write$cgroup_type(r9, &(0x7f0000000180), 0x40010) r10 = fcntl$getown(r9, 0x9) ptrace$pokeuser(0x6, r10, 0x0, 0x2) 3.302597508s ago: executing program 0 (id=1953): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x200000000000002f, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) setgroups(0xefff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) close(0xffffffffffffffff) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) 3.287260329s ago: executing program 1 (id=1954): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c00010062726964"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@newqdisc={0x54, 0x24, 0xe0b, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0xfffffffffffffc85, 0x2, {{0x1ff, 0x6, 0xfffffffd, 0x0, 0xa57, 0x32d}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}]}}}]}, 0x54}}, 0x0) 3.264442909s ago: executing program 4 (id=1955): openat$tun(0xffffffffffffff9c, 0x0, 0x100, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000100)={0x30, 0x5, 0x0, {0x0, 0x1}}, 0x30) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) read$FUSE(r0, &(0x7f0000004180)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x29, 0x0, 0x440, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x8, 0x80}}, 0x50) 3.224149231s ago: executing program 1 (id=1956): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) r3 = dup(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), r5) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000001900)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=ANY=[@ANYBLOB="e0100000", @ANYRES16=r6, @ANYBLOB="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", @ANYRES32=r7], 0x10e0}}, 0x0) 3.182402993s ago: executing program 4 (id=1957): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x202) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xbebf8000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000141, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sys_enter\x00', r3}, 0x10) getrusage(0xffffffffffffffff, &(0x7f0000001140)) 3.099421096s ago: executing program 2 (id=1958): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat(0xffffffffffffff9c, 0x0, 0x143042, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) writev(r5, &(0x7f0000000180)=[{&(0x7f0000000380)="a43b2eaab401ab0000000043dcf46b", 0xf}], 0x1) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x2d) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), r9) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000001900)={'wg2\x00', 0x0}) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) sendmsg$WG_CMD_SET_DEVICE(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=ANY=[@ANYBLOB="e0100000", @ANYRES16=r10, @ANYBLOB="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"/2137, @ANYRES32=r11, @ANYBLOB="240003"], 0x10e0}}, 0x0) 1.827661342s ago: executing program 0 (id=1959): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x202) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xbebf8000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000141, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000003680)='sched_switch\x00'}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sys_enter\x00', r3}, 0x10) getrusage(0xffffffffffffffff, &(0x7f0000001140)) 1.559962182s ago: executing program 1 (id=1960): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) prlimit64(0x0, 0xe, 0x0, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x3c, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x1}, @TCA_FQ_CODEL_LIMIT={0x8, 0x2, 0x2}, @TCA_FQ_CODEL_INTERVAL={0x8, 0x3, 0xfffffffd}, @TCA_FQ_CODEL_FLOWS={0x29, 0x5, 0xffffffff}, @TCA_FQ_CODEL_FLOWS={0x8}, @TCA_FQ_CODEL_DROP_BATCH_SIZE={0x8}, @TCA_FQ_CODEL_ECN={0x8}]}}, @TCA_RATE={0x6, 0x5, {0x5}}]}, 0x78}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r10 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r10, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32, @ANYBLOB="00000000100000001c001a80080002"], 0x44}}, 0x0) 1.553087753s ago: executing program 4 (id=1961): getpid() sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000001540)='./file0\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00f29430fb547343b87c788b837aea070f1e124f4e3813872c2b72026866bc723315089dc69c7b79aca5d661079cf989f4b528b55ccd82bf6ab83a4a1ac066512e120b99fe84d291e1aca6c39086fba18f1fadbdcbaf"], 0x1, 0x14d3, &(0x7f00000015c0)="$eJzs3HuYz9XaMPB1r7W+jGnSr0kOw7rX/eWXBsskSQ5JckiSJElySkiaJElIDDklIQk5TpLDEJLDYDDO5/P50GRLkiSnnMJ6L+39PJ6928/led+938cfc3+ua12z7vn+7vu31twz8z1c18zPnYZUb1ijSn0iEv8S+OuHFCFEjBCivxDiDiFEIIQoE18m/vrxXApS/rU3Yf9ez6Xd6hWwW4n7n71x/7M37n/2xv3P3rj/2Rv3P3vj/mdv3H/GsrOt0wrcySP7Dn7+n53x+T974/5nb9z/7I37n71x/7M37n/2xv3P3rj/2Rv3n7Hs7FY/f+Zxa8et/v5jjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMZY9XPQ3aCHEf8xv9boYY4wxxhhjjDH27+Nz3uoVMMYYY4wxxhhj7P8/EFIooUUgcoicIkbkErHiNhEnbhe5xR0iIu4U8eIukUfcLfKKfCK/KCASREFRSBiBwgoSoSgsioiouEcUFfeKRFFMFBclhBMlRZK4T5QS94vS4gFRRjwoyoqHRDlRXlQQFcXDopJ4RFQWj4oq4jFRVVQT1UUN8bioKZ4QtcSTorZ4StQRT4u64hlRTzwr6ovnRAPxvGgoXhCNxIuisWgimopmovn/U/67opt4T3QXPUSK6Cl6ifdFb9FH9BX9RH/xgRggPhQDxUdikBgshoiPxVDxiRgmPhXDxQgxUnwmRonRYowYK8aJ8SJVfC4miC/ERPGlmCQmiyliqkgT08R08ZWYIWaKWeJrMVt8I+aIuWKemC/SxQKxUCwSGWKxWCKWikyxTCwXK8RKsUqsFmvEWrFOrBcbxEaxSWwWW8RWsU1sFzvETrFL7BZ7xF6xT+wXB8RB8a3IEt/9X+Zf+If8ziBAgAQJGjTkgBwQAzEQC7EQB3GQG3JDBCIQD/GQB/JAXsgL+SE/JEACFIJCgIBAQFAYCkMUolAUikIiJEJxKA4OHCRBEpSC+6E0lIYyUAbKQlkoB+WhPFSEilAJKkFlqAxVoApUhapQHarD4/A4PAG1oBbUhtpQB+pAXagL9aAe1If60AAaQENoCI2gETSGxtAUmkJzaA4toAW0hJbQGlpDG2gDbaEtJEMytIN20B7aQwfoAB2hI3SCTtAZukAXeBfehffgPegBVWVP6AW9oDf0hr7QD/rBBzAAPoQP4SMYBINhCHwMH8MnMAzOw3AYASNhJFSSo2EMjAWS4yEVUmECTICJMBEmwWSYDFMhDabBdJgOM2AmzISvYTZ8A9/AXJgL8yEd0mEhLIIMyIAlcAEyYRkshxWwElbBSlgDa2ENrIcNsB42wSbYAltgG2yDHbADdsEu2AN7YB/sgwNwAAZBFmTBITgEh+EwHIEjcBSOwjE4BsfhOJyAE3ASTsIpOA1n4DScg3NwHi7ARbgIl+EyXIErcA2uXf/hl9dpqWUOmUPGyBgZK2NlnIyTuWVuGZERGS/jZR6ZR+aVeWV+mV8myARZSBaSKFGSDGVhWVhGZVQWlUVlokyUxWVx6aSTSTJJlpKlZGlZWpaRD8qy8iFZTpaXrVxFWVFWkq1dZfmorCKryKqymqwua8gasqasKWvJWrK2rC3ryDqyrnxG1pM9oS88J693pqEcDI3kEGgsm8imspn8BF6SLeQwaClbydbyFTkChkNb2cIly9dlOzkG2ss35Vh4S3aU46GTfEd2ll1kV/mu7CZbuu6yh5wEPWUvORV6yz6yr+wnZ0A1eb1j1eVHcpAcLIfIj+V8+EQOk5/K4XKEHCk/k6PkaDlGjpXj5HiZKj+XE+QXcqL8Uk6Sk+UUOVWmyWlyuvxKzpAz5Sz5tZwtv5Fz5Fw5T86X6XKBXCgXyQy5WC6RS2WmXCaXyxVypVwlV8s1cq1cJ9fLDXKj3CQ3yy1yq9wmt8sdcqfcJXfLPXKv3Cf3ywPyoPxWZsnv5CH5F3lYfi+PyB/kUfmjPCZ/ksflz/KE/EWelL/KU/K0PCPPynPyN3leXpAX5SV5Wf4ur8ir8pr0UihQUimlVaByqJwqRuVSseo2FaduV7nVHSqi7lTx6i6VR92t8qp8Kr8qoBJUQVVIGYXKKlKhKqyKqKi6RxVV96pEVUwVVyWUUyVVkrpPlVL3q9LqAVVGPajKqodUOVVeVVAV1cOqknpEVVaPqirqMVVVVVPVVQ31uKqpnlC11JOqtnpK1VFPq7rqGVVPPavqq+dUA/W8aqheUI3Ui6qxaqKaqmaquXpJtVAvq5aqlWqtXlFt1KuqrXpNJavXVTv1hmqv3lQd1Fuqo3pbdVLvqM6qi+qqrqpryqvuqodKUT1VL/W+6q36qL6qn+qvPlAD1IdqoPpIDVKD1RD1sRqqPlHD1KdquBqhRqrP1Cg1Wo1RY9U4NV6lqs/VBPWFmqi+VJPUZDVFTVVpaprq+7dKs/4H+V/8k/yBf7z7FrVVbVPb1Q61U+1Su9UetVftVfvVfnVQHVRZKksdUofUYXVYHVFH1FF1VB1Tx9RxdVydUCfUSXVSnVKn1SV1Vp1Tv6nz6oK6oC6py+qyuvK3r4HQoKVWWutA59A5dYzOpWP1bTpO365z6zt0RN+p4/VdOo++W+fV+XR+XUAn6IK6kDYatdWkQ11YF9FRfY8uqu/VibqYLq5LaKdL6iR937+cf7P1NdfNdQvdQrfULXVr3Vq30W10W91WJ+tk3U630+11e91Bd9AddUfdSXfSnXVn3VV31d10N91dd9cpOkX30u/r3rqP7qv76f76Az1AD9AD9UA9SA/SQ/QQPVQP1cP0MD1cD9cj9Ug9So/SY/QYPU6P06k6VU/QE/REPVFP0pP0FD1Fp+k0PV1P1zP0DD1Lz9Kz9Ww9R8/R8/Q8na7T9UK9UGfoDL1EL9GZepleplfoFXqVXqXX6DV6nV6nN+gNepPepDP1Vr1Vb9fb9U69U+/Wu/VevVfv1/v1QX1QZ+ksfUgf0of1YX1EH9FH9VF9TB/Tx/VxfUKf0Cf1SX1Kn9Jn9Bl9Tp/T5/V5fVFf1Jf1ZX1FX9HX9LXrl32BDGSgAx3kCHIEMUFMEBvEBnFBXJA7yB1EgkgQH8QHeYK7g7xBviB/UCBICAoGhQITYGADCsKgcFAkiAb3BEWDe4PEoFhQPCgRuKBkkBTcF5QK7g9KBw8EZYIHg7LBQ0G5oHxQIagYPBxUCh4JKgePBlWCx4KqQbWgelAjeDyoGTwR1AqeDGoHTwV1gqeDusEzQb3g2aB+8FzQIHg+aBi8EDQKXgwaB02CpkGzoPm/tb735/O97LqbHibF9DS9zPumt+lj+pp+pr/5wAwwH5qB5iMzyAw2Q8zHZqj5xAwzn5rhZoQZaT4zo8xoM8aMNePMeJNqPjcTzBdmovnSTDKTzRQz1aSZaWa6+crMMDPNLPO1mW2+MXPMXDPPzDfpZoFZaBaZDLPYLDFLTaZZZpabFWalWWVWmzVmrVln1psNZqPZZDabLWar2Wa2mx1mp9lldps9Zq/ZZ/abA+ag+dZkme/MIfMXc9h8b46YH8xR86M5Zn4yx83P5oT5xZw0v5pT5rQ5Y86ac+Y3c95cMBfNJXPZ/G6umKvmmvHXL+6vn95Ro8YcmANjMAZjMRbjMA5zY26MYATjMR7zYB7Mi3kxP+bHBEzAQlgIryMkLIyFMYpRLIpFMRETsTgWR4cOkzAJS2EpLI2lsQyWwbJYFsthOayAFfBhfBgfwUfwUXwUH8PHsBpWwxpYA2tiTayFtbA21sY6WAfrYl2sh/WwPtbHBtgAG2JDbISNsDE2xqbYFJtjc2yBLbAltsTW2BrbYBtsi20xGZOxHbbD9tgeO2AH7IgdsRN2ws7YGbtiV+yG3bA7dscUTMFe2At7Y2/si32xP/bHATgAB+JAHISDcAgOwaE4FIfhMByOI3AkfoajcDSOwbE4DsdjKqbiBJyAE3EiTsJJOAWnYBqm4XScjjNwBs7CWTgbZ+McnIPzcB6mYzouxIWYgRm4BJdgJmbiclyOK3ElrsbVuBbX4npcjxtxI27GzbgVt+J23I47cSfuxt24F/fiftyPB/EgZmEWHsJDeBgP4xE8gkfxKB7DY3gcj+MJPIEn8SSewlN4Bs/gOTyH5/E8XsSLeBl/xyt4Fa+hxxiby8ba22ycvd3mtnfYf4zz2wI2wRa0hayxeW2+v4vRWptoi9nitoR1tqRNsvf9KS5ny9sKtqJ92Fayj9jKf4pr2idsLfukrW2fsjXs438X17FP27r2BVvPvmjr2ya2gW1mG9oXbCP7om1sm9imtpltY1+1be1rNtm+btvZN/4UL7SL7Fq7zq63G+x+e8BetJfscfuzvWx/t91tD9vffmAH2A/tQPuRHWQH/ykeaT+zo+xoO8aOtePs+D/FU+xUm2an2en2KzvDzvxTnG4X2Nk2w86xc+08O/+P+PqaMuxiu8QutZl2mV1uV9iVdpVdbdf851pX2E12s91i99p9drvdYXfaXXa33fNHfH0fB+23Nst+Z4/Zn+xh+709Yk/Yo/bHP+Lr+zthf7En7a/2lD1tz9iz9pz9zZ63F/7Y//W9n7VX7TXrrSAgSYo0BZSDclIM5aJYuo3i6HbKTXdQhO6keLqL8tDdlJfyUX4qQAlUkAqRISRLRCEVpiIUpXuoKN1LiVSMilMJclSSkug+KkX3U2l6gMrQg1SWHqJyVJ4qUEV6mCrRI1SZHqUq9BhVpWpUnWrQ41STnqBa9CTVpqeoDj1NdekZqkfPUn16jhrQ89SQXqBG9CI1pibUlJpRc3qJWtDL1JJaUWt6hdrQq9SWXqNkep3a0RvUnt6kDvQWdaS3qRO9Q52pC3Wld6kbvUfdqQelUE/qRe9Tb+pDfakf9acPaAB9SAPpIxpEg2kIfUxD6RMaRp/ScBpBI+kzGkWjaQyNpXE0nlLpc5pAX9BE+pIm0WSaQlMpjabRdPqKZtBMmkVf02z6hubQXJpH8ymdFtBCWkQZtJiW0FLKpGW0nFbQSlpFq2kNraV1tJ420EbaRJtpC22lbbSddtBO2kW7aQ/tpX20nw7QQfqWsug7OkR/ocP0PR2hH+go/UjH6Cc6Tj/TCfqFTtKvdIpO0xk6S+foNzpPF+giXaLL9Dtdoat0jTyJEEIZqlCHQZgjzBnGhLnC2PC2MC68Pcwd3hFGwjvD+PCuME94d5g3zBfmDwuECWHBsFBoQgxtSGEYFg6LhNHwnrBoeG+YGBYLi4clQheWDJPC+8JS4f1h6fCBsEz4YFg2fCgsF5YPK4QVw4fDSuEjYeXw0bBK+FhYNawWVg9rhI+HNcMnwlrhk2Ht8KmwdPh0WDd8JqwXPhvWD58LG4TPhw3DF8JG4Yth47BJ2DRsFjYPXwpbhC+HLcNWYevwlbBN+GrYNnwtTA5fD9uFb9z0eErYM+wVvh++H3r/pJoXnR9Njy6ILowuimZEF0eXRJdGM6PLosujK6Iro6uiq6Nromuj66LroxuiG6ObopujW6Le18gpHDjplNMucDlcThfjcrlYd5uLc7e73O4OF3F3unh3l8vj7nZ5XT6X3xVwCa6gK+SMQ2cdudAVdkVc1N3jirp7XaIr5oq7Es65ki7JNXPNXXPXwr3sWrpWrrV7xb3iXnWvutfca+5118694dq7N10H95br6N52b7t3XGfXxXV177pu7j3X3fVwKS7F9XK9XG/X2/V1fV1/198NcAPcQDfQDXKD3BA3xA11Q90wN8wNd8PdSDfSjXKj3Bg3xo1z41yqS3UT3AQ30U10k9wkN8VNcWkuzU13090MN8PNcrPcbDfbzXFz3Dw3z6W7dLfQLXQZLsMtcUtcpst0y91yt9KtdKvdarfWrXXr3Xq30W10m91mt9VtddvddrfT7XS73W631+11+91+d9AddFkuyx1yh9xhd9gdcT+4o+5Hd8z95I67n90J94s76X51p9xpd8addefcb+68u+AuukvusvvdXXFX3TXnXWrk88iEyBeRiZEvI5MikyNTIlMjaZFpkemRryIzIjMjsyJfR2ZHvonMicyNzIvMj6RHFkQWRhZFMiKLI0siSyOZkWWR5ZEVkZWRVRHvC24PfWFfxEf9Pb6ov9cn+mK+uC/hnS/pk/x9vpS/35f2D/gy/kFf1j/ky/nyvoJ/0Tf2TXxT38w39y/5Fv5l39K38q39K76Nf9W39a/5ZP+6b+ff8O39m76Df8t39G/7Tv4d39l38V39u76bf8939z18iu/pe/n3fW/fx/f1/Xx//4Ef4D/0A/1HfpAf7If4j/1Q/4kf5j/1w/0IP9J/5kf50X6MH+vH+fE+1X/uJ/gv/ET/pZ/kJ/spfqpP89P8dP+Vn+Fn+ln+az/bf+Pn+Ll+np/v0/0Cv9Av8hl+sV/il/pMv8wv9yv8Sr/Kr/Zr/Fq/zq/3G/xGv8lv9lv8Vr/Nb/c7/E6/y+/2e/xev8/v9wf8Qf+tz/Lf+UP+L/6w/94f8T/4o/5Hf8z/5I/7n/0J/4s/6X/1p/xpf8af9ef8b/68v+Av+kv+sv/dX/FX/TX+mzXGGGOMsf8RdZPjPf/J5+TfxnW9hBC37yhw9B9rbsz713kfmdAmIoR4vUen5/5jVK2akpLyt9dmKhEUmSuEiNzIzyFuxMtEa/GqSBatRKl/ur4+sstlukn96INCxP6XnBhxI75R//7/pv7o2TetP1eIxCI3cnKJG/GN+qX/m/r5Wtykfq7vU4Vo+V9y4sSN+Eb9JPGyeEMk/90rGWOMMcYYY4yxv+ojK3S42f3t9fvzBH0jJ6e4Ed/s/pwxxhhjjDHGGGO33ltdur72UnJyqw484QlPePKfk1v9m4kxxhhjjDH273bjov9Wr4QxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGMu+/jf+ndit3iNjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDF2q/2fAAAA//+uBTVz") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001f40)) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000900)={0x1, &(0x7f00000008c0)=[{0x6, 0x0, 0x0, 0x6}]}) socket$inet6(0x10, 0x3, 0x2800000) close_range(r4, 0xffffffffffffffff, 0x0) (fail_nth: 1) 1.468805737s ago: executing program 3 (id=1962): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@getnexthop={0x17, 0x76, 0x401, 0x0, 0x0, {}, [@NHA_ID={0x8}]}, 0x20}}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x10) r2 = socket$key(0xf, 0x3, 0x2) recvmmsg(r2, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400}) setsockopt$sock_int(r2, 0x1, 0x4b, &(0x7f0000000040)=0xfd87, 0x4) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB], 0x10}}, 0x0) write(r1, &(0x7f0000000240)="aefc00001a0025f01d85bc04fef7681d020b49ff708800008003280008021000ac0a1410bc71176a36ede498534108e58342fa94a235a2a441f9", 0xfcae) 1.452669057s ago: executing program 2 (id=1963): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x5, 0xc, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000460000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000400000d67bf82cf3bee197457c324b4f2675413a2abaff9b1f00a5fcf373a74bda18657fb7adab1e0ffa0a17034f9602c192c0c0bb30692481dafb5e90f485c263dfb539e8008727360677a05e3755c242"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) write$bt_hci(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r2}, 0x18) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffcfffffa, 0x4031, 0xffffffffffffffff, 0x41d1000) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f00000017c0)='./file1\x00', 0x0, &(0x7f0000000000), 0x1, 0xb80, &(0x7f0000000c40)="$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") r3 = open(&(0x7f0000000140)='./file1\x00', 0x64042, 0x1e9) pwritev2(r3, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x2000, 0x0, 0x3) times(0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) timer_settime(0x0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) pipe2$9p(0x0, 0x80800) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_mount_image$erofs(&(0x7f00000000c0), &(0x7f0000000000)='./file2\x00', 0x20404a, &(0x7f00000003c0)=ANY=[], 0xfd, 0x1dc, &(0x7f0000000440)="$eJzslr+PEkEUx78zu1nAaEwsbSwkUQuX3UWNjYk0VhYm/iAWJhJZCbJKAhRCYtC/wN7EwsLef8BE2/sjLtxV13DdNdfsZXZmd+cICxwcUNz7JDy+s8y8ffPe5A0gCOLCsr93NAqRj/RlFJFTzw+MdA7X5u/mD7/8f/qk+v3N753cyC5M8xmGi7/fBPCvYqCXrD29uqi+X4An+iU47ihdBYOt9FtwvFLaB8NrpT9oui3m2/b7ZuDb79pBXQhHGFcYT5jyZHzjbwx1LT6m/d7tD1q1IPA7axTz8jeucDzS4tPrZUNG62j5c8HhKl0Gw3OlHyIX50amRNv/dTP1b8zcv4V1Z0SEcoZV165klsoCsFwYAEsc/sRK28FXdWTXeYYyhIFIxBU9J8/GhnYhDvqcOTA3nlW2WjKXqcXfx3JN/CQcynE052qGw3C44CssLJONtD+Fvxhuaf1JtpIf0VUjSljq9gd3mx9rDb/hf/K88gPnnuPc90pRI5J2Rv8rRP3pUup/6p0ksJiFz7Ver+NKm4w9aad1XB71P47bN+VYFNea8JvXNFMfEyaY7L2tP5nREwRBbI8bYMehwoyFuk2g/dd9tsUYCYIgCIIgCIIgCIJYjZMAAAD//4U6Q1I=") r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x80000, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r6, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000380)) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r8}, 0x10) r9 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) write$cgroup_type(r9, &(0x7f0000000180), 0x40010) r10 = fcntl$getown(r9, 0x9) ptrace$pokeuser(0x6, r10, 0x0, 0x2) 342.139966ms ago: executing program 0 (id=1964): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) syz_socket_connect_nvme_tcp() 172.749242ms ago: executing program 2 (id=1965): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x1e8629867d7bdaee, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newlink={0x4c, 0x10, 0x403, 0x70b528, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0xa1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x4c}, 0x1, 0xba01, 0x0, 0x4004}, 0x810) 171.932392ms ago: executing program 1 (id=1966): getpid() sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000001540)='./file0\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00f29430fb547343b87c788b837aea070f1e124f4e3813872c2b72026866bc723315089dc69c7b79aca5d661079cf989f4b528b55ccd82bf6ab83a4a1ac066512e120b99fe84d291e1aca6c39086fba18f1fadbdcbaf"], 0x1, 0x14d3, &(0x7f00000015c0)="$eJzs3HuYz9XaMPB1r7W+jGnSr0kOw7rX/eWXBsskSQ5JckiSJElySkiaJElIDDklIQk5TpLDEJLDYDDO5/P50GRLkiSnnMJ6L+39PJ6928/led+938cfc3+ua12z7vn+7vu31twz8z1c18zPnYZUb1ijSn0iEv8S+OuHFCFEjBCivxDiDiFEIIQoE18m/vrxXApS/rU3Yf9ez6Xd6hWwW4n7n71x/7M37n/2xv3P3rj/2Rv3P3vj/mdv3H/GsrOt0wrcySP7Dn7+n53x+T974/5nb9z/7I37n71x/7M37n/2xv3P3rj/2Rv3n7Hs7FY/f+Zxa8et/v5jjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMZY9XPQ3aCHEf8xv9boYY4wxxhhjjDH27+Nz3uoVMMYYY4wxxhhj7P8/EFIooUUgcoicIkbkErHiNhEnbhe5xR0iIu4U8eIukUfcLfKKfCK/KCASREFRSBiBwgoSoSgsioiouEcUFfeKRFFMFBclhBMlRZK4T5QS94vS4gFRRjwoyoqHRDlRXlQQFcXDopJ4RFQWj4oq4jFRVVQT1UUN8bioKZ4QtcSTorZ4StQRT4u64hlRTzwr6ovnRAPxvGgoXhCNxIuisWgimopmovn/U/67opt4T3QXPUSK6Cl6ifdFb9FH9BX9RH/xgRggPhQDxUdikBgshoiPxVDxiRgmPhXDxQgxUnwmRonRYowYK8aJ8SJVfC4miC/ERPGlmCQmiyliqkgT08R08ZWYIWaKWeJrMVt8I+aIuWKemC/SxQKxUCwSGWKxWCKWikyxTCwXK8RKsUqsFmvEWrFOrBcbxEaxSWwWW8RWsU1sFzvETrFL7BZ7xF6xT+wXB8RB8a3IEt/9X+Zf+If8ziBAgAQJGjTkgBwQAzEQC7EQB3GQG3JDBCIQD/GQB/JAXsgL+SE/JEACFIJCgIBAQFAYCkMUolAUikIiJEJxKA4OHCRBEpSC+6E0lIYyUAbKQlkoB+WhPFSEilAJKkFlqAxVoApUhapQHarD4/A4PAG1oBbUhtpQB+pAXagL9aAe1If60AAaQENoCI2gETSGxtAUmkJzaA4toAW0hJbQGlpDG2gDbaEtJEMytIN20B7aQwfoAB2hI3SCTtAZukAXeBfehffgPegBVWVP6AW9oDf0hr7QD/rBBzAAPoQP4SMYBINhCHwMH8MnMAzOw3AYASNhJFSSo2EMjAWS4yEVUmECTICJMBEmwWSYDFMhDabBdJgOM2AmzISvYTZ8A9/AXJgL8yEd0mEhLIIMyIAlcAEyYRkshxWwElbBSlgDa2ENrIcNsB42wSbYAltgG2yDHbADdsEu2AN7YB/sgwNwAAZBFmTBITgEh+EwHIEjcBSOwjE4BsfhOJyAE3ASTsIpOA1n4DScg3NwHi7ARbgIl+EyXIErcA2uXf/hl9dpqWUOmUPGyBgZK2NlnIyTuWVuGZERGS/jZR6ZR+aVeWV+mV8myARZSBaSKFGSDGVhWVhGZVQWlUVlokyUxWVx6aSTSTJJlpKlZGlZWpaRD8qy8iFZTpaXrVxFWVFWkq1dZfmorCKryKqymqwua8gasqasKWvJWrK2rC3ryDqyrnxG1pM9oS88J693pqEcDI3kEGgsm8imspn8BF6SLeQwaClbydbyFTkChkNb2cIly9dlOzkG2ss35Vh4S3aU46GTfEd2ll1kV/mu7CZbuu6yh5wEPWUvORV6yz6yr+wnZ0A1eb1j1eVHcpAcLIfIj+V8+EQOk5/K4XKEHCk/k6PkaDlGjpXj5HiZKj+XE+QXcqL8Uk6Sk+UUOVWmyWlyuvxKzpAz5Sz5tZwtv5Fz5Fw5T86X6XKBXCgXyQy5WC6RS2WmXCaXyxVypVwlV8s1cq1cJ9fLDXKj3CQ3yy1yq9wmt8sdcqfcJXfLPXKv3Cf3ywPyoPxWZsnv5CH5F3lYfi+PyB/kUfmjPCZ/ksflz/KE/EWelL/KU/K0PCPPynPyN3leXpAX5SV5Wf4ur8ir8pr0UihQUimlVaByqJwqRuVSseo2FaduV7nVHSqi7lTx6i6VR92t8qp8Kr8qoBJUQVVIGYXKKlKhKqyKqKi6RxVV96pEVUwVVyWUUyVVkrpPlVL3q9LqAVVGPajKqodUOVVeVVAV1cOqknpEVVaPqirqMVVVVVPVVQ31uKqpnlC11JOqtnpK1VFPq7rqGVVPPavqq+dUA/W8aqheUI3Ui6qxaqKaqmaquXpJtVAvq5aqlWqtXlFt1KuqrXpNJavXVTv1hmqv3lQd1Fuqo3pbdVLvqM6qi+qqrqpryqvuqodKUT1VL/W+6q36qL6qn+qvPlAD1IdqoPpIDVKD1RD1sRqqPlHD1KdquBqhRqrP1Cg1Wo1RY9U4NV6lqs/VBPWFmqi+VJPUZDVFTVVpaprq+7dKs/4H+V/8k/yBf7z7FrVVbVPb1Q61U+1Su9UetVftVfvVfnVQHVRZKksdUofUYXVYHVFH1FF1VB1Tx9RxdVydUCfUSXVSnVKn1SV1Vp1Tv6nz6oK6oC6py+qyuvK3r4HQoKVWWutA59A5dYzOpWP1bTpO365z6zt0RN+p4/VdOo++W+fV+XR+XUAn6IK6kDYatdWkQ11YF9FRfY8uqu/VibqYLq5LaKdL6iR937+cf7P1NdfNdQvdQrfULXVr3Vq30W10W91WJ+tk3U630+11e91Bd9AddUfdSXfSnXVn3VV31d10N91dd9cpOkX30u/r3rqP7qv76f76Az1AD9AD9UA9SA/SQ/QQPVQP1cP0MD1cD9cj9Ug9So/SY/QYPU6P06k6VU/QE/REPVFP0pP0FD1Fp+k0PV1P1zP0DD1Lz9Kz9Ww9R8/R8/Q8na7T9UK9UGfoDL1EL9GZepleplfoFXqVXqXX6DV6nV6nN+gNepPepDP1Vr1Vb9fb9U69U+/Wu/VevVfv1/v1QX1QZ+ksfUgf0of1YX1EH9FH9VF9TB/Tx/VxfUKf0Cf1SX1Kn9Jn9Bl9Tp/T5/V5fVFf1Jf1ZX1FX9HX9LXrl32BDGSgAx3kCHIEMUFMEBvEBnFBXJA7yB1EgkgQH8QHeYK7g7xBviB/UCBICAoGhQITYGADCsKgcFAkiAb3BEWDe4PEoFhQPCgRuKBkkBTcF5QK7g9KBw8EZYIHg7LBQ0G5oHxQIagYPBxUCh4JKgePBlWCx4KqQbWgelAjeDyoGTwR1AqeDGoHTwV1gqeDusEzQb3g2aB+8FzQIHg+aBi8EDQKXgwaB02CpkGzoPm/tb735/O97LqbHibF9DS9zPumt+lj+pp+pr/5wAwwH5qB5iMzyAw2Q8zHZqj5xAwzn5rhZoQZaT4zo8xoM8aMNePMeJNqPjcTzBdmovnSTDKTzRQz1aSZaWa6+crMMDPNLPO1mW2+MXPMXDPPzDfpZoFZaBaZDLPYLDFLTaZZZpabFWalWWVWmzVmrVln1psNZqPZZDabLWar2Wa2mx1mp9lldps9Zq/ZZ/abA+ag+dZkme/MIfMXc9h8b46YH8xR86M5Zn4yx83P5oT5xZw0v5pT5rQ5Y86ac+Y3c95cMBfNJXPZ/G6umKvmmvHXL+6vn95Ro8YcmANjMAZjMRbjMA5zY26MYATjMR7zYB7Mi3kxP+bHBEzAQlgIryMkLIyFMYpRLIpFMRETsTgWR4cOkzAJS2EpLI2lsQyWwbJYFsthOayAFfBhfBgfwUfwUXwUH8PHsBpWwxpYA2tiTayFtbA21sY6WAfrYl2sh/WwPtbHBtgAG2JDbISNsDE2xqbYFJtjc2yBLbAltsTW2BrbYBtsi20xGZOxHbbD9tgeO2AH7IgdsRN2ws7YGbtiV+yG3bA7dscUTMFe2At7Y2/si32xP/bHATgAB+JAHISDcAgOwaE4FIfhMByOI3AkfoajcDSOwbE4DsdjKqbiBJyAE3EiTsJJOAWnYBqm4XScjjNwBs7CWTgbZ+McnIPzcB6mYzouxIWYgRm4BJdgJmbiclyOK3ElrsbVuBbX4npcjxtxI27GzbgVt+J23I47cSfuxt24F/fiftyPB/EgZmEWHsJDeBgP4xE8gkfxKB7DY3gcj+MJPIEn8SSewlN4Bs/gOTyH5/E8XsSLeBl/xyt4Fa+hxxiby8ba22ycvd3mtnfYf4zz2wI2wRa0hayxeW2+v4vRWptoi9nitoR1tqRNsvf9KS5ny9sKtqJ92Fayj9jKf4pr2idsLfukrW2fsjXs438X17FP27r2BVvPvmjr2ya2gW1mG9oXbCP7om1sm9imtpltY1+1be1rNtm+btvZN/4UL7SL7Fq7zq63G+x+e8BetJfscfuzvWx/t91tD9vffmAH2A/tQPuRHWQH/ykeaT+zo+xoO8aOtePs+D/FU+xUm2an2en2KzvDzvxTnG4X2Nk2w86xc+08O/+P+PqaMuxiu8QutZl2mV1uV9iVdpVdbdf851pX2E12s91i99p9drvdYXfaXXa33fNHfH0fB+23Nst+Z4/Zn+xh+709Yk/Yo/bHP+Lr+zthf7En7a/2lD1tz9iz9pz9zZ63F/7Y//W9n7VX7TXrrSAgSYo0BZSDclIM5aJYuo3i6HbKTXdQhO6keLqL8tDdlJfyUX4qQAlUkAqRISRLRCEVpiIUpXuoKN1LiVSMilMJclSSkug+KkX3U2l6gMrQg1SWHqJyVJ4qUEV6mCrRI1SZHqUq9BhVpWpUnWrQ41STnqBa9CTVpqeoDj1NdekZqkfPUn16jhrQ89SQXqBG9CI1pibUlJpRc3qJWtDL1JJaUWt6hdrQq9SWXqNkep3a0RvUnt6kDvQWdaS3qRO9Q52pC3Wld6kbvUfdqQelUE/qRe9Tb+pDfakf9acPaAB9SAPpIxpEg2kIfUxD6RMaRp/ScBpBI+kzGkWjaQyNpXE0nlLpc5pAX9BE+pIm0WSaQlMpjabRdPqKZtBMmkVf02z6hubQXJpH8ymdFtBCWkQZtJiW0FLKpGW0nFbQSlpFq2kNraV1tJ420EbaRJtpC22lbbSddtBO2kW7aQ/tpX20nw7QQfqWsug7OkR/ocP0PR2hH+go/UjH6Cc6Tj/TCfqFTtKvdIpO0xk6S+foNzpPF+giXaLL9Dtdoat0jTyJEEIZqlCHQZgjzBnGhLnC2PC2MC68Pcwd3hFGwjvD+PCuME94d5g3zBfmDwuECWHBsFBoQgxtSGEYFg6LhNHwnrBoeG+YGBYLi4clQheWDJPC+8JS4f1h6fCBsEz4YFg2fCgsF5YPK4QVw4fDSuEjYeXw0bBK+FhYNawWVg9rhI+HNcMnwlrhk2Ht8KmwdPh0WDd8JqwXPhvWD58LG4TPhw3DF8JG4Yth47BJ2DRsFjYPXwpbhC+HLcNWYevwlbBN+GrYNnwtTA5fD9uFb9z0eErYM+wVvh++H3r/pJoXnR9Njy6ILowuimZEF0eXRJdGM6PLosujK6Iro6uiq6Nromuj66LroxuiG6ObopujW6Le18gpHDjplNMucDlcThfjcrlYd5uLc7e73O4OF3F3unh3l8vj7nZ5XT6X3xVwCa6gK+SMQ2cdudAVdkVc1N3jirp7XaIr5oq7Es65ki7JNXPNXXPXwr3sWrpWrrV7xb3iXnWvutfca+5118694dq7N10H95br6N52b7t3XGfXxXV177pu7j3X3fVwKS7F9XK9XG/X2/V1fV1/198NcAPcQDfQDXKD3BA3xA11Q90wN8wNd8PdSDfSjXKj3Bg3xo1z41yqS3UT3AQ30U10k9wkN8VNcWkuzU13090MN8PNcrPcbDfbzXFz3Dw3z6W7dLfQLXQZLsMtcUtcpst0y91yt9KtdKvdarfWrXXr3Xq30W10m91mt9VtddvddrfT7XS73W631+11+91+d9AddFkuyx1yh9xhd9gdcT+4o+5Hd8z95I67n90J94s76X51p9xpd8addefcb+68u+AuukvusvvdXXFX3TXnXWrk88iEyBeRiZEvI5MikyNTIlMjaZFpkemRryIzIjMjsyJfR2ZHvonMicyNzIvMj6RHFkQWRhZFMiKLI0siSyOZkWWR5ZEVkZWRVRHvC24PfWFfxEf9Pb6ov9cn+mK+uC/hnS/pk/x9vpS/35f2D/gy/kFf1j/ky/nyvoJ/0Tf2TXxT38w39y/5Fv5l39K38q39K76Nf9W39a/5ZP+6b+ff8O39m76Df8t39G/7Tv4d39l38V39u76bf8939z18iu/pe/n3fW/fx/f1/Xx//4Ef4D/0A/1HfpAf7If4j/1Q/4kf5j/1w/0IP9J/5kf50X6MH+vH+fE+1X/uJ/gv/ET/pZ/kJ/spfqpP89P8dP+Vn+Fn+ln+az/bf+Pn+Ll+np/v0/0Cv9Av8hl+sV/il/pMv8wv9yv8Sr/Kr/Zr/Fq/zq/3G/xGv8lv9lv8Vr/Nb/c7/E6/y+/2e/xev8/v9wf8Qf+tz/Lf+UP+L/6w/94f8T/4o/5Hf8z/5I/7n/0J/4s/6X/1p/xpf8af9ef8b/68v+Av+kv+sv/dX/FX/TX+mzXGGGOMsf8RdZPjPf/J5+TfxnW9hBC37yhw9B9rbsz713kfmdAmIoR4vUen5/5jVK2akpLyt9dmKhEUmSuEiNzIzyFuxMtEa/GqSBatRKl/ur4+sstlukn96INCxP6XnBhxI75R//7/pv7o2TetP1eIxCI3cnKJG/GN+qX/m/r5Wtykfq7vU4Vo+V9y4sSN+Eb9JPGyeEMk/90rGWOMMcYYY4yxv+ojK3S42f3t9fvzBH0jJ6e4Ed/s/pwxxhhjjDHGGGO33ltdur72UnJyqw484QlPePKfk1v9m4kxxhhjjDH273bjov9Wr4QxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGMu+/jf+ndit3iNjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDF2q/2fAAAA//+uBTVz") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001f40)) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000900)={0x1, &(0x7f00000008c0)=[{0x6, 0x0, 0x0, 0x6}]}) socket$inet6(0x10, 0x3, 0x2800000) close_range(r4, 0xffffffffffffffff, 0x0) 101.835716ms ago: executing program 3 (id=1967): openat$tun(0xffffffffffffff9c, 0x0, 0x100, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000100)={0x30, 0x5, 0x0, {0x0, 0x1}}, 0x30) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) read$FUSE(r0, &(0x7f0000004180)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x29, 0x0, 0x440, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x8, 0x80}}, 0x50) 0s ago: executing program 3 (id=1968): r0 = socket$inet(0x2, 0x4, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0xc) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000740)=@raw={'raw\x00', 0x3c1, 0x3, 0x408, 0x230, 0x12, 0x60a, 0x0, 0x202, 0x338, 0x2e8, 0x2e8, 0x338, 0x2c0, 0x4, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @dev}, @mcast2, [], [], 'veth1_to_bond\x00', 'xfrm0\x00'}, 0x0, 0x108, 0x230, 0x0, {}, [@common=@unspec=@statistic={{0x38}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x57c, 'system_u:object_r:file_context_t:s0\x00'}}}, {{@ipv6={@private2, @loopback, [], [], 'vxcan1\x00', 'geneve0\x00'}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@empty, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x39e}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x468) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000c00)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r5 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r5, 0x2) r6 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r6, 0x2) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0x4, &(0x7f0000000a40)=ANY=[@ANYBLOB="1801000000050000000000000000ea0485000000d000000095"], &(0x7f0000000a00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, 0x2}, 0x94) r8 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f0000000280)={@mcast2, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r8, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r8, &(0x7f0000000140)={&(0x7f0000000080)={0xa, 0x4e26, 0x80000, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000290000000b0000002b00000000000000b0"], 0xc8}, 0x810) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x14, @empty}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x0) kernel console output (not intermixed with test programs): 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 04 25 [ 165.709910][ T2955] RSP: 002b:00007f925970aa80 EFLAGS: 00000202 ORIG_RAX: 000000000000000f [ 165.718337][ T2955] RAX: ffffffffffffffda RBX: 00007f92589e5fa0 RCX: 00007f925872b829 [ 165.726385][ T2955] RDX: 00007f925970aa80 RSI: 00007f925970abb0 RDI: 0000000000000021 [ 165.734453][ T2955] RBP: 00007f925970b090 R08: 0000000000000000 R09: 0000000000000000 [ 165.742425][ T2955] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000001 [ 165.750399][ T2955] R13: 00007f92589e6038 R14: 00007f92589e5fa0 R15: 00007fffa8fc4168 [ 165.758378][ T2955] [ 165.875597][ T2983] loop1: detected capacity change from 0 to 256 [ 165.930846][ T2983] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 165.955792][ T28] audit: type=1400 audit(1764855833.517:471): avc: denied { unmount } for pid=2987 comm="syz.0.712" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 165.971969][ T2983] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 166.000574][ T2983] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 166.041912][ T28] audit: type=1400 audit(1764855833.607:472): avc: denied { remove_name } for pid=2982 comm="syz.1.710" name="file0" dev="loop1" ino=1048610 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 166.084595][ T2995] overlayfs: missing 'workdir' [ 166.090127][ T2994] fuse: Bad value for 'fd' [ 166.099258][ T28] audit: type=1400 audit(1764855833.637:473): avc: denied { rename } for pid=2982 comm="syz.1.710" name="file0" dev="loop1" ino=1048610 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 166.166119][ T2985] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 166.169605][ T28] audit: type=1400 audit(1764855833.637:474): avc: denied { unlink } for pid=2982 comm="syz.1.710" name="file1" dev="loop1" ino=1048611 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 166.200420][ T28] audit: type=1400 audit(1764855833.637:475): avc: denied { map } for pid=2982 comm="syz.1.710" path="/135/file0/blkio.bfq.group_wait_time" dev="loop1" ino=1048613 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 166.225596][ T28] audit: type=1400 audit(1764855833.637:476): avc: denied { execute } for pid=2982 comm="syz.1.710" path="/135/file0/blkio.bfq.group_wait_time" dev="loop1" ino=1048613 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 166.288910][ T3008] netlink: 24 bytes leftover after parsing attributes in process `syz.2.720'. [ 166.316189][ T3008] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3008 comm=syz.2.720 [ 166.369845][ T28] audit: type=1400 audit(1764855833.937:477): avc: denied { associate } for pid=3011 comm="syz.2.723" name="cgroup" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 166.529370][ T3027] overlayfs: missing 'workdir' [ 166.748446][ T3035] fuse: Bad value for 'fd' [ 167.918999][ T3056] loop2: detected capacity change from 0 to 256 [ 167.996951][ T3056] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 168.033969][ T3056] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 168.034234][ T3062] overlayfs: missing 'workdir' [ 168.059500][ T3056] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 168.092307][ T3064] netlink: 52 bytes leftover after parsing attributes in process `syz.4.741'. [ 168.101550][ T3064] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.108823][ T3064] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.119419][ T3064] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3064 comm=syz.4.741 [ 168.131878][ T3064] netlink: 52 bytes leftover after parsing attributes in process `syz.4.741'. [ 168.312386][ T3060] netlink: 84 bytes leftover after parsing attributes in process `syz.0.737'. [ 169.639216][ T24] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 169.663352][ T3107] loop4: detected capacity change from 0 to 256 [ 169.678198][ T3107] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 169.693843][ T3107] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 169.728356][ T3107] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 169.839181][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 169.942912][ T24] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 169.959139][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.967205][ T24] usb 4-1: Product: syz [ 170.629206][ T24] usb 4-1: Manufacturer: syz [ 170.633866][ T24] usb 4-1: SerialNumber: syz [ 170.639909][ T24] usb 4-1: config 0 descriptor?? [ 170.650677][ T24] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 170.659346][ T24] usb 4-1: Detected FT-X [ 171.040256][ T24] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 171.344645][ T3137] Bluetooth: hci0: Frame reassembly failed (-84) [ 171.355615][ T3117] Bluetooth: hci0: Frame reassembly failed (-84) [ 171.602686][ T24] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 171.787209][ T3154] loop1: detected capacity change from 0 to 4096 [ 171.804204][ T3089] loop3: detected capacity change from 0 to 128 [ 171.812265][ T3154] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 171.820741][ T3089] FAT-fs (loop3): bogus number of reserved sectors [ 171.831210][ T3089] FAT-fs (loop3): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 171.841323][ T3089] FAT-fs (loop3): Can't find a valid FAT filesystem [ 171.894582][ T24] usb 4-1: USB disconnect, device number 9 [ 171.904799][ T24] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 171.920081][ T24] ftdi_sio 4-1:0.0: device disconnected [ 171.923314][ T284] EXT4-fs (loop1): unmounting filesystem. [ 172.700824][ T3172] netlink: 16 bytes leftover after parsing attributes in process `syz.0.769'. [ 172.893700][ T3175] loop3: detected capacity change from 0 to 4096 [ 172.898924][ T3177] loop1: detected capacity change from 0 to 4096 [ 172.910545][ T3175] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 172.942762][ T3177] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 173.114239][ T284] EXT4-fs (loop1): unmounting filesystem. [ 173.576964][ T2782] Bluetooth: hci0: command 0x1003 tx timeout [ 173.602634][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 173.902458][ T3199] fuse: Bad value for 'fd' [ 174.550530][ T285] EXT4-fs (loop3): unmounting filesystem. [ 174.625862][ T3234] fuse: Bad value for 'fd' [ 175.086352][ T3228] loop3: detected capacity change from 0 to 4096 [ 175.110295][ T3240] fuse: Bad value for 'fd' [ 175.119494][ T3228] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 175.345902][ T3246] netlink: 84 bytes leftover after parsing attributes in process `syz.2.789'. [ 175.399784][ T285] EXT4-fs (loop3): unmounting filesystem. [ 175.552402][ T3253] loop4: detected capacity change from 0 to 512 [ 175.975976][ T3253] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 176.286954][ T3253] EXT4-fs (loop4): 1 truncate cleaned up [ 176.292733][ T3253] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 176.769596][ T287] EXT4-fs (loop4): unmounting filesystem. [ 176.846345][ T3273] loop3: detected capacity change from 0 to 512 [ 176.911522][ T337] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 176.923281][ T3280] netlink: 36 bytes leftover after parsing attributes in process `syz.4.804'. [ 177.489293][ T3292] loop3: detected capacity change from 0 to 4096 [ 177.516721][ T3292] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 177.690621][ T285] EXT4-fs (loop3): unmounting filesystem. [ 177.709218][ T3305] netlink: 4 bytes leftover after parsing attributes in process `syz.0.815'. [ 177.807159][ T3310] fuse: Bad value for 'fd' [ 177.851649][ T3314] netlink: 76 bytes leftover after parsing attributes in process `syz.0.818'. [ 177.909799][ T3316] overlayfs: missing 'lowerdir' [ 177.926649][ T3316] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 178.055168][ T3322] overlayfs: missing 'lowerdir' [ 178.081913][ T3322] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 178.136831][ T3327] fuse: Bad value for 'fd' [ 179.257090][ T345] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 179.438948][ T3365] loop4: detected capacity change from 0 to 1024 [ 179.450807][ T345] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 179.627138][ T3365] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 179.637472][ T345] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 179.727817][ T345] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 179.770035][ T3369] netlink: 36 bytes leftover after parsing attributes in process `syz.1.837'. [ 179.834166][ T345] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 179.867724][ T345] usb 4-1: SerialNumber: syz [ 179.943084][ T345] usb 4-1: 0:2 : does not exist [ 180.159241][ T2271] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 180.180728][ T345] usb 4-1: USB disconnect, device number 10 [ 180.360790][ T3377] fuse: Bad value for 'fd' [ 180.423126][ T3381] fuse: Bad value for 'fd' [ 180.624174][ T3387] fuse: Bad value for 'fd' [ 180.779193][ T2271] usb 5-1: Using ep0 maxpacket: 32 [ 180.785604][ T2271] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 180.793919][ T2271] usb 5-1: config 0 has no interface number 0 [ 180.800149][ T2271] usb 5-1: config 0 interface 2 has no altsetting 0 [ 180.808427][ T2271] usb 5-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 180.817612][ T2271] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.825675][ T2271] usb 5-1: Product: syz [ 180.829940][ T2271] usb 5-1: Manufacturer: syz [ 180.834535][ T2271] usb 5-1: SerialNumber: syz [ 180.840097][ T2271] usb 5-1: config 0 descriptor?? [ 181.048134][ T2271] usb 5-1: invalid MIDI in EP 0 [ 181.055278][ T2271] snd-usb-audio: probe of 5-1:0.2 failed with error -22 [ 181.063269][ T2271] usb 5-1: USB disconnect, device number 6 [ 181.072385][ T425] udevd[425]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 181.469720][ T3412] loop1: detected capacity change from 0 to 512 [ 181.482228][ T3412] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 181.661736][ T3412] EXT4-fs (loop1): 1 truncate cleaned up [ 181.667505][ T3412] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 182.000130][ T287] EXT4-fs (loop4): unmounting filesystem. [ 182.478128][ T3419] fuse: Bad value for 'fd' [ 182.490423][ T284] EXT4-fs (loop1): unmounting filesystem. [ 182.756779][ T3433] fuse: Bad value for 'fd' [ 182.776356][ T3441] overlayfs: missing 'lowerdir' [ 182.934533][ T3437] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 183.249160][ T345] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 183.430260][ T345] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 183.461327][ T345] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 183.485717][ T345] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 183.501122][ T345] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 183.512969][ T345] usb 5-1: SerialNumber: syz [ 183.520295][ T345] usb 5-1: 0:2 : does not exist [ 183.722650][ T345] usb 5-1: USB disconnect, device number 7 [ 183.773411][ T3463] netlink: 56 bytes leftover after parsing attributes in process `syz.3.872'. [ 183.782471][ T3463] netlink: 12 bytes leftover after parsing attributes in process `syz.3.872'. [ 183.791554][ T3463] netlink: 43 bytes leftover after parsing attributes in process `syz.3.872'. [ 183.800532][ T3463] netlink: 'syz.3.872': attribute type 2 has an invalid length. [ 183.808315][ T3463] netlink: 43 bytes leftover after parsing attributes in process `syz.3.872'. [ 183.960564][ T337] udevd[337]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 184.614340][ T3486] loop4: detected capacity change from 0 to 4096 [ 184.633697][ T3486] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 184.662013][ T3494] fuse: Bad value for 'fd' [ 184.780716][ T287] EXT4-fs (loop4): unmounting filesystem. [ 185.777353][ T3511] loop4: detected capacity change from 0 to 512 [ 185.860424][ T3511] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 185.913834][ T3511] EXT4-fs (loop4): orphan cleanup on readonly fs [ 185.924035][ T3511] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.888: bg 0: block 248: padding at end of block bitmap is not set [ 185.941183][ T3511] Quota error (device loop4): write_blk: dquota write failed [ 185.948783][ T3511] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 185.958912][ T3511] EXT4-fs error (device loop4): ext4_acquire_dquot:6803: comm syz.4.888: Failed to acquire dquot type 1 [ 186.102263][ T3511] EXT4-fs (loop4): 1 truncate cleaned up [ 186.146437][ T3511] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 186.272754][ T287] EXT4-fs (loop4): unmounting filesystem. [ 186.460007][ T3529] fuse: Bad value for 'fd' [ 186.493827][ T3533] overlayfs: failed to clone upperpath [ 186.891853][ T3549] netlink: 36 bytes leftover after parsing attributes in process `syz.4.903'. [ 187.560763][ T3559] fuse: Bad value for 'fd' [ 187.800373][ T3571] loop4: detected capacity change from 0 to 4096 [ 187.823379][ T1917] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 187.866462][ T3571] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 188.041490][ T1917] usb 2-1: New USB device found, idVendor=256c, idProduct=006e, bcdDevice= 0.00 [ 188.074569][ T1917] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.156327][ T1917] usb 2-1: config 0 descriptor?? [ 188.247599][ T287] EXT4-fs (loop4): unmounting filesystem. [ 190.043282][ T1917] usb 2-1: string descriptor 0 read error: -71 [ 190.051763][ T1917] uclogic 0003:256C:006E.0003: failed retrieving string descriptor #200: -71 [ 190.060844][ T1917] uclogic 0003:256C:006E.0003: failed retrieving pen parameters: -71 [ 190.068996][ T1917] uclogic 0003:256C:006E.0003: failed probing pen v2 parameters: -71 [ 190.077859][ T1917] uclogic 0003:256C:006E.0003: failed probing parameters: -71 [ 190.087849][ T1917] uclogic: probe of 0003:256C:006E.0003 failed with error -71 [ 190.182363][ T1917] usb 2-1: USB disconnect, device number 10 [ 190.545433][ T3616] fuse: Bad value for 'fd' [ 192.303498][ T3635] netlink: 36 bytes leftover after parsing attributes in process `syz.1.929'. [ 192.340554][ T3636] fuse: Bad value for 'fd' [ 192.803559][ T3650] fuse: Bad value for 'fd' [ 192.844119][ T3649] loop4: detected capacity change from 0 to 4096 [ 192.876652][ T3649] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 193.001761][ T287] EXT4-fs (loop4): unmounting filesystem. [ 193.407264][ T3675] fuse: Unknown parameter 'e ' [ 194.154038][ T3692] fuse: Bad value for 'fd' [ 194.231164][ T3697] loop3: detected capacity change from 0 to 4096 [ 194.280330][ T3697] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 194.736828][ T285] EXT4-fs (loop3): unmounting filesystem. [ 194.744306][ T3712] fuse: Bad value for 'fd' [ 197.451126][ T3743] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 197.509499][ T3747] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 203.679159][ T2271] usb 5-1: new low-speed USB device number 8 using dummy_hcd [ 203.858992][ T3847] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 204.307572][ T2271] usb 5-1: device descriptor read/all, error -71 [ 204.413614][ T28] audit: type=1400 audit(1764855871.977:478): avc: denied { write } for pid=3862 comm="syz.4.1000" name="file0" dev="tmpfs" ino=1225 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 204.436533][ T28] audit: type=1400 audit(1764855871.977:479): avc: denied { open } for pid=3862 comm="syz.4.1000" path="/205/file0" dev="tmpfs" ino=1225 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 204.456681][ T3858] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 206.866856][ T3912] IPv6: sit1: Disabled Multicast RS [ 206.917758][ T3912] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1012'. [ 206.957769][ T3920] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1013'. [ 207.005478][ T3917] netlink: 'syz.0.1016': attribute type 16 has an invalid length. [ 207.016308][ T3917] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.1016'. [ 208.114504][ T3937] overlayfs: missing 'lowerdir' [ 208.167558][ T3929] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 208.759211][ T2271] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 209.350222][ T2271] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 209.365584][ T2271] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 209.923631][ T2271] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 209.939128][ T2271] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 209.947285][ T2271] usb 2-1: SerialNumber: syz [ 209.961366][ T2271] usb 2-1: 0:2 : does not exist [ 211.881992][ T2271] usb 2-1: USB disconnect, device number 11 [ 213.493902][ T337] udevd[337]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 213.589458][ T4001] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 213.997288][ T4030] fuse: Bad value for 'fd' [ 214.002440][ T4030] fuse: Bad value for 'fd' [ 214.013919][ T4030] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1054'. [ 214.121258][ T4033] overlayfs: missing 'lowerdir' [ 214.449160][ T2271] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 214.640704][ T2271] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 214.651002][ T2271] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 214.667096][ T2271] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 214.676692][ T2271] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 215.070940][ T2271] usb 4-1: SerialNumber: syz [ 215.107323][ T2271] usb 4-1: 0:2 : does not exist [ 216.123299][ T2271] usb 4-1: USB disconnect, device number 11 [ 216.316840][ T4068] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 216.697073][ T337] udevd[337]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 216.980680][ T28] audit: type=1400 audit(1764855884.547:480): avc: denied { map } for pid=4095 comm="syz.0.1074" path="socket:[27490]" dev="sockfs" ino=27490 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 217.007121][ T28] audit: type=1400 audit(1764855884.547:481): avc: denied { read } for pid=4095 comm="syz.0.1074" path="socket:[27490]" dev="sockfs" ino=27490 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 217.396957][ T4108] fuse: Bad value for 'fd' [ 217.432657][ T4113] netlink: 'syz.4.1076': attribute type 16 has an invalid length. [ 218.499455][ T4113] netlink: 64138 bytes leftover after parsing attributes in process `syz.4.1076'. [ 218.614375][ T4112] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 218.655904][ T4125] overlayfs: missing 'lowerdir' [ 218.665303][ T4127] loop4: detected capacity change from 0 to 256 [ 218.683200][ T4127] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 218.763389][ T4127] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x7f1fc68d, utbl_chksum : 0xe619d30d) [ 218.798020][ T28] audit: type=1400 audit(1764855886.357:482): avc: denied { setattr } for pid=4126 comm="syz.4.1084" name="file0" dev="loop4" ino=1048625 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 219.189186][ T794] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 219.269213][ T24] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 219.409246][ T794] usb 5-1: Using ep0 maxpacket: 32 [ 219.416199][ T794] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 219.429156][ T794] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 219.442989][ T794] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 219.458532][ T794] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.469197][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 219.476112][ T24] usb 2-1: config 1 interface 0 altsetting 138 bulk endpoint 0x3 has invalid maxpacket 1024 [ 219.494039][ T794] usb 5-1: config 0 descriptor?? [ 219.500202][ T24] usb 2-1: config 1 interface 0 has no altsetting 0 [ 219.507954][ T794] hub 5-1:0.0: bad descriptor, ignoring hub [ 219.514217][ T794] hub: probe of 5-1:0.0 failed with error -5 [ 219.521527][ T794] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 219.535683][ T24] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 219.554916][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.556743][ T4147] loop3: detected capacity change from 0 to 4096 [ 219.569124][ T24] usb 2-1: Product: 롒磿櫣㹚ኼ鉆翛鳽肠险伕퓫曕䟓愋澉ỽ腀牄ჲ忯㡋貿啐㦕婊餤ҹ﷙鬽焕㙻⬎쯇쒉ﹳ蠯ᡗ歅䐬欥䯈㠐੭卬퍉㞘尶㡊尷旝મ夫є隢瞵闌䗁篙◱쎱꙯쀭궟볍䆞ⶮ὞盋漻ײ婞䘿쪲缐낣㢤ᐡ췭ᳲ靁Ʇ걓 [ 219.614542][ T24] usb 2-1: Manufacturer: ࠐ [ 219.615510][ T4147] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 219.619256][ T24] usb 2-1: SerialNumber: 㢹࿋ꌂ釐糲헪釧実톉랩軕痕ﺕ씧떯൱䇷셶髜ဒࠕ㲹驫᎚ᙞ얌袈ᑂᑟۗ⼚⃛ꬉ⇒儲᪽䯨ᝲⷊ㽤奩瀮↲票铄霯萈Ჟㆌ㺨㵃৿솱툛놾퍢麏䳵㢄佱똝ﯕ⋳Ϗꌙ휭窥엥ⷆ嫴煨区鿠ιꝏ莭鋋✲ḭ湐黚溾霘渪桬켔㝗໥裮䣚㊫ᒊ㓅䦳䬝噱 [ 219.708211][ T4135] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 219.756541][ T285] EXT4-fs (loop3): unmounting filesystem. [ 219.923978][ T24] cdc_ether: probe of 2-1:1.0 failed with error -71 [ 219.932257][ T24] usb 2-1: USB disconnect, device number 12 [ 220.326722][ T4165] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 220.587008][ T28] audit: type=1400 audit(1764855888.147:483): avc: denied { mount } for pid=4169 comm="syz.1.1097" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 220.609571][ T28] audit: type=1400 audit(1764855888.147:484): avc: denied { mounton } for pid=4169 comm="syz.1.1097" path="/210/file0" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 220.708821][ T4172] overlayfs: missing 'lowerdir' [ 220.789939][ T4175] loop1: detected capacity change from 0 to 256 [ 220.814812][ T4175] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 220.837684][ T4175] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 220.919236][ T4175] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 220.999166][ T24] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 221.190250][ T24] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 221.213890][ T24] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 221.237516][ T28] audit: type=1400 audit(1764855888.797:485): avc: denied { rmdir } for pid=4174 comm="syz.1.1099" name="file0" dev="loop1" ino=1048627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 221.265499][ T24] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 221.291154][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 221.317669][ T24] usb 4-1: SerialNumber: syz [ 221.337759][ T24] usb 4-1: 0:2 : does not exist [ 221.544145][ T24] usb 4-1: USB disconnect, device number 12 [ 221.740956][ T4193] fuse: Bad value for 'fd' [ 221.779219][ T218] usb 5-1: USB disconnect, device number 10 [ 221.872087][ T4197] netlink: 'syz.1.1106': attribute type 16 has an invalid length. [ 221.886383][ T4197] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.1106'. [ 222.358522][ T4208] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 222.447877][ T4218] device pim6reg1 entered promiscuous mode [ 222.506983][ T28] audit: type=1400 audit(1764855890.067:486): avc: denied { map } for pid=4202 comm="syz.2.1108" path="socket:[28784]" dev="sockfs" ino=28784 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 222.561890][ T28] audit: type=1400 audit(1764855890.067:487): avc: denied { read accept } for pid=4202 comm="syz.2.1108" path="socket:[28784]" dev="sockfs" ino=28784 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 222.732915][ T4227] fuse: Bad value for 'fd' [ 223.389983][ T4237] overlayfs: failed to clone upperpath [ 223.681411][ T4243] netlink: 'syz.0.1120': attribute type 16 has an invalid length. [ 223.699926][ T4243] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.1120'. [ 223.753120][ T28] audit: type=1400 audit(1764855891.317:488): avc: denied { sys_module } for pid=4251 comm="syz.0.1124" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 223.848591][ T4257] FAULT_INJECTION: forcing a failure. [ 223.848591][ T4257] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 223.861720][ T4257] CPU: 0 PID: 4257 Comm: syz.4.1126 Tainted: G W syzkaller #0 [ 223.870608][ T4257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 223.880675][ T4257] Call Trace: [ 223.883960][ T4257] [ 223.886890][ T4257] __dump_stack+0x21/0x24 [ 223.891241][ T4257] dump_stack_lvl+0xee/0x150 [ 223.895833][ T4257] ? __cfi_dump_stack_lvl+0x8/0x8 [ 223.900860][ T4257] ? __cfi_copy_fpstate_to_sigframe+0x10/0x10 [ 223.906933][ T4257] dump_stack+0x15/0x24 [ 223.911088][ T4257] should_fail_ex+0x3d4/0x520 [ 223.915780][ T4257] should_fail+0xb/0x10 [ 223.920062][ T4257] should_fail_usercopy+0x1a/0x20 [ 223.925105][ T4257] _copy_to_user+0x1e/0x90 [ 223.929530][ T4257] copy_siginfo_to_user+0x28/0xa0 [ 223.934651][ T4257] arch_do_signal_or_restart+0xb1b/0x1030 [ 223.940375][ T4257] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 223.946547][ T4257] ? __cfi_ksys_write+0x10/0x10 [ 223.951409][ T4257] exit_to_user_mode_loop+0x7a/0xb0 [ 223.956611][ T4257] exit_to_user_mode_prepare+0x87/0xd0 [ 223.962072][ T4257] syscall_exit_to_user_mode+0x1a/0x30 [ 223.967556][ T4257] do_syscall_64+0x58/0xa0 [ 223.971974][ T4257] ? clear_bhb_loop+0x30/0x80 [ 223.976657][ T4257] ? clear_bhb_loop+0x30/0x80 [ 223.981336][ T4257] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 223.987236][ T4257] RIP: 0033:0x7fe4d458f747 [ 223.991668][ T4257] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 [ 224.011273][ T4257] RSP: 002b:00007fe4d54e6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f7 [ 224.019689][ T4257] RAX: 00000000000000f7 RBX: 00007fe4d47e5fa0 RCX: 00007fe4d458f749 [ 224.027661][ T4257] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 1000000000000000 [ 224.035632][ T4257] RBP: 00007fe4d54e6090 R08: 0000000000000000 R09: 0000000000000000 [ 224.043602][ T4257] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000001 [ 224.051572][ T4257] R13: 00007fe4d47e6038 R14: 00007fe4d47e5fa0 R15: 00007ffd58950998 [ 224.059548][ T4257] [ 225.062568][ T4262] loop1: detected capacity change from 0 to 4096 [ 225.227964][ T4262] EXT4-fs (loop1): Test dummy encryption mode enabled [ 225.344940][ T4262] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 225.353438][ T4262] System zones: 0-5 [ 225.403979][ T4262] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 225.872646][ T4274] FAULT_INJECTION: forcing a failure. [ 225.872646][ T4274] name failslab, interval 1, probability 0, space 0, times 0 [ 225.885430][ T4274] CPU: 1 PID: 4274 Comm: syz.4.1129 Tainted: G W syzkaller #0 [ 225.894302][ T4274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 225.904382][ T4274] Call Trace: [ 225.907858][ T4274] [ 225.910821][ T4274] __dump_stack+0x21/0x24 [ 225.915170][ T4274] dump_stack_lvl+0xee/0x150 [ 225.919779][ T4274] ? __cfi_dump_stack_lvl+0x8/0x8 [ 225.924818][ T4274] ? selinux_socket_sock_rcv_skb+0x320/0x7c0 [ 225.930823][ T4274] dump_stack+0x15/0x24 [ 225.934998][ T4274] should_fail_ex+0x3d4/0x520 [ 225.939698][ T4274] ? skb_clone+0x1f5/0x380 [ 225.944135][ T4274] __should_failslab+0xac/0xf0 [ 225.948941][ T4274] should_failslab+0x9/0x20 [ 225.953457][ T4274] kmem_cache_alloc+0x3b/0x330 [ 225.958245][ T4274] ? do_syscall_64+0x4c/0xa0 [ 225.962854][ T4274] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 225.968942][ T4274] skb_clone+0x1f5/0x380 [ 225.973218][ T4274] ip_icmp_error+0x37/0x9f0 [ 225.977740][ T4274] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 225.983653][ T4274] raw_icmp_error+0x61e/0xa70 [ 225.988352][ T4274] icmp_socket_deliver+0xff/0x2c0 [ 225.993389][ T4274] icmp_unreach+0x5a6/0x920 [ 225.997916][ T4274] icmp_rcv+0xfc1/0x17f0 [ 226.002174][ T4274] ? raw_local_deliver+0x999/0xa60 [ 226.007313][ T4274] ? __cfi_icmp_rcv+0x10/0x10 [ 226.012001][ T4274] ? __cfi_raw_local_deliver+0x10/0x10 [ 226.017489][ T4274] ? ipt_do_table+0x2ae/0x15d0 [ 226.022273][ T4274] ip_protocol_deliver_rcu+0x325/0x6e0 [ 226.027775][ T4274] ip_local_deliver_finish+0x24e/0x410 [ 226.033262][ T4274] ip_local_deliver+0x1d8/0x320 [ 226.038145][ T4274] ? __cfi_ip_local_deliver+0x10/0x10 [ 226.043543][ T4274] ? __cfi_ip_local_deliver_finish+0x10/0x10 [ 226.049546][ T4274] ? ip_rcv_finish_core+0xcee/0x1490 [ 226.054849][ T4274] ip_rcv+0x163/0x270 [ 226.058843][ T4274] ? do_syscall_64+0x4c/0xa0 [ 226.063451][ T4274] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 226.069538][ T4274] ? __cfi_ip_rcv+0x10/0x10 [ 226.074068][ T4274] ? __cfi_ip_rcv_finish+0x10/0x10 [ 226.079205][ T4274] ? __cfi_ip_rcv+0x10/0x10 [ 226.083731][ T4274] __netif_receive_skb+0xd7/0x2a0 [ 226.088779][ T4274] ? tun_rx_batched+0x158/0x770 [ 226.093646][ T4274] netif_receive_skb+0x98/0x3d0 [ 226.098506][ T4274] ? __cfi_netif_receive_skb+0x10/0x10 [ 226.103981][ T4274] ? kasan_save_alloc_info+0x25/0x30 [ 226.109299][ T4274] ? tun_rx_batched+0x158/0x770 [ 226.114170][ T4274] tun_rx_batched+0x1b6/0x770 [ 226.118863][ T4274] ? pskb_may_pull+0x100/0x100 [ 226.123646][ T4274] ? tun_get_user+0x1f21/0x3320 [ 226.128520][ T4274] tun_get_user+0x2494/0x3320 [ 226.133227][ T4274] ? tun_do_read+0x1c20/0x1c20 [ 226.138012][ T4274] ? __kasan_check_write+0x14/0x20 [ 226.143144][ T4274] ? ref_tracker_alloc+0x30f/0x430 [ 226.148268][ T4274] ? __cfi_ref_tracker_alloc+0x10/0x10 [ 226.153752][ T4274] ? avc_policy_seqno+0x1b/0x70 [ 226.158625][ T4274] ? selinux_file_permission+0x2a5/0x510 [ 226.164375][ T4274] tun_chr_write_iter+0x1fb/0x300 [ 226.169500][ T4274] vfs_write+0x5db/0xca0 [ 226.173785][ T4274] ? slab_free_freelist_hook+0xc2/0x190 [ 226.179351][ T4274] ? __cfi_vfs_write+0x10/0x10 [ 226.184134][ T4274] ? __fget_files+0x2d5/0x330 [ 226.188822][ T4274] ? __fdget_pos+0x1f2/0x380 [ 226.193425][ T4274] ? ksys_write+0x71/0x240 [ 226.197872][ T4274] ksys_write+0x140/0x240 [ 226.202215][ T4274] ? __cfi_ksys_write+0x10/0x10 [ 226.207080][ T4274] ? debug_smp_processor_id+0x17/0x20 [ 226.212470][ T4274] __x64_sys_write+0x7b/0x90 [ 226.217074][ T4274] x64_sys_call+0x27b/0x9a0 [ 226.221592][ T4274] do_syscall_64+0x4c/0xa0 [ 226.226023][ T4274] ? clear_bhb_loop+0x30/0x80 [ 226.230720][ T4274] ? clear_bhb_loop+0x30/0x80 [ 226.235422][ T4274] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 226.241333][ T4274] RIP: 0033:0x7fe4d458e1ff [ 226.245762][ T4274] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 226.265385][ T4274] RSP: 002b:00007fe4d54e6000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 226.273828][ T4274] RAX: ffffffffffffffda RBX: 00007fe4d47e5fa0 RCX: 00007fe4d458e1ff [ 226.281826][ T4274] RDX: 00000000000000be RSI: 0000200000000380 RDI: 00000000000000c8 [ 226.289834][ T4274] RBP: 00007fe4d54e6090 R08: 0000000000000000 R09: 0000000000000000 [ 226.297845][ T4274] R10: 00000000000000be R11: 0000000000000293 R12: 0000000000000001 [ 226.305838][ T4274] R13: 00007fe4d47e6038 R14: 00007fe4d47e5fa0 R15: 00007ffd58950998 [ 226.313837][ T4274] [ 226.320774][ T28] audit: type=1400 audit(1764855893.827:489): avc: denied { rmdir } for pid=284 comm="syz-executor" name="lost+found" dev="loop1" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 226.344440][ T284] EXT4-fs (loop1): unmounting filesystem. [ 226.350253][ T28] audit: type=1400 audit(1764855893.887:490): avc: denied { unlink } for pid=284 comm="syz-executor" name="file0" dev="loop1" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 226.350285][ T28] audit: type=1400 audit(1764855893.887:491): avc: denied { unlink } for pid=284 comm="syz-executor" name=66696C6507 dev="loop1" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 226.396812][ T4276] loop3: detected capacity change from 0 to 128 [ 226.407796][ T4276] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 226.435501][ T4276] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 226.447273][ T4282] loop4: detected capacity change from 0 to 1024 [ 226.493289][ T4282] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 226.518297][ T4290] netlink: 'syz.0.1135': attribute type 16 has an invalid length. [ 226.527412][ T4290] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.1135'. [ 226.571030][ T4298] loop1: detected capacity change from 0 to 256 [ 226.582125][ T28] audit: type=1400 audit(1764855894.137:492): avc: denied { name_bind } for pid=4275 comm="syz.3.1130" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 226.613775][ T4298] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 226.624942][ T4298] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 226.643283][ T4298] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 228.131276][ T1449] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 228.231023][ T287] EXT4-fs (loop4): unmounting filesystem. [ 229.212139][ T4343] netlink: 'syz.1.1152': attribute type 16 has an invalid length. [ 229.221050][ T4343] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.1152'. [ 229.320350][ T28] audit: type=1400 audit(1764855896.835:493): avc: denied { wake_alarm } for pid=4353 comm="syz.0.1157" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 229.441760][ T4364] fuse: Bad value for 'fd' [ 229.462382][ T4360] FAULT_INJECTION: forcing a failure. [ 229.462382][ T4360] name failslab, interval 1, probability 0, space 0, times 0 [ 229.475407][ T4360] CPU: 1 PID: 4360 Comm: syz.4.1156 Tainted: G W syzkaller #0 [ 229.484319][ T4360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 229.494389][ T4360] Call Trace: [ 229.497683][ T4360] [ 229.500620][ T4360] __dump_stack+0x21/0x24 [ 229.504959][ T4360] dump_stack_lvl+0xee/0x150 [ 229.509552][ T4360] ? __cfi_dump_stack_lvl+0x8/0x8 [ 229.514589][ T4360] dump_stack+0x15/0x24 [ 229.518753][ T4360] should_fail_ex+0x3d4/0x520 [ 229.523449][ T4360] ? radix_tree_node_alloc+0x80/0x380 [ 229.528847][ T4360] __should_failslab+0xac/0xf0 [ 229.533622][ T4360] should_failslab+0x9/0x20 [ 229.538127][ T4360] kmem_cache_alloc+0x3b/0x330 [ 229.542897][ T4360] radix_tree_node_alloc+0x80/0x380 [ 229.548122][ T4360] idr_get_free+0x2b1/0xab0 [ 229.552633][ T4360] idr_alloc_u32+0x157/0x2d0 [ 229.557226][ T4360] ? __cfi_idr_alloc_u32+0x10/0x10 [ 229.562369][ T4360] ? mutex_lock+0x8d/0x1a0 [ 229.566789][ T4360] ? radix_tree_lookup+0x276/0x290 [ 229.571909][ T4360] tcf_idr_check_alloc+0x2bc/0x4a0 [ 229.577030][ T4360] ? __cfi_tcf_idr_check_alloc+0x10/0x10 [ 229.582671][ T4360] tcf_police_init+0x27e/0x1360 [ 229.587622][ T4360] ? __cfi_tcf_police_init+0x10/0x10 [ 229.592920][ T4360] ? __kasan_kmalloc+0x95/0xb0 [ 229.597693][ T4360] ? memcpy+0x56/0x70 [ 229.601764][ T4360] tcf_action_init_1+0x433/0x6e0 [ 229.606710][ T4360] ? __cfi_tcf_action_init_1+0x10/0x10 [ 229.612174][ T4360] ? _raw_read_unlock+0x25/0x40 [ 229.617026][ T4360] ? tc_action_load_ops+0x20b/0x4c0 [ 229.622329][ T4360] tcf_action_init+0x23e/0xa10 [ 229.627104][ T4360] ? __cfi_tcf_action_init+0x10/0x10 [ 229.632393][ T4360] ? avc_has_perm_noaudit+0x2f4/0x460 [ 229.637967][ T4360] ? __nla_parse+0x42/0x60 [ 229.642400][ T4360] tc_ctl_action+0x3f2/0xb20 [ 229.646999][ T4360] ? __cfi_tc_ctl_action+0x10/0x10 [ 229.652118][ T4360] ? selinux_capable+0x29c/0x380 [ 229.657161][ T4360] ? netlink_net_capable+0x125/0x160 [ 229.662477][ T4360] ? __cfi_tc_ctl_action+0x10/0x10 [ 229.667610][ T4360] rtnetlink_rcv_msg+0x9f4/0xcf0 [ 229.672650][ T4360] ? __cfi_rtnetlink_rcv_msg+0x10/0x10 [ 229.678141][ T4360] ? kernel_text_address+0xa0/0xd0 [ 229.683265][ T4360] ? __kernel_text_address+0xd/0x30 [ 229.688476][ T4360] ? unwind_get_return_address+0x4d/0x90 [ 229.694122][ T4360] ? memcpy+0x56/0x70 [ 229.698152][ T4360] ? avc_has_perm_noaudit+0x2f4/0x460 [ 229.703537][ T4360] ? __cfi_avc_has_perm_noaudit+0x10/0x10 [ 229.709267][ T4360] ? slab_post_alloc_hook+0x4f/0x2d0 [ 229.714559][ T4360] ? kmem_cache_alloc_node+0x181/0x340 [ 229.720029][ T4360] ? __alloc_skb+0xea/0x4b0 [ 229.724547][ T4360] ? avc_has_perm+0x158/0x240 [ 229.729238][ T4360] ? __alloc_skb+0x236/0x4b0 [ 229.733837][ T4360] ? netlink_sendmsg+0x626/0xbc0 [ 229.738788][ T4360] ? __cfi_avc_has_perm+0x10/0x10 [ 229.743832][ T4360] ? selinux_nlmsg_lookup+0x40b/0x4c0 [ 229.749217][ T4360] netlink_rcv_skb+0x1f2/0x440 [ 229.753988][ T4360] ? __cfi_rtnetlink_rcv_msg+0x10/0x10 [ 229.759455][ T4360] ? __cfi_netlink_rcv_skb+0x10/0x10 [ 229.764759][ T4360] ? __netlink_lookup+0x387/0x3b0 [ 229.769811][ T4360] rtnetlink_rcv+0x1c/0x20 [ 229.774233][ T4360] netlink_unicast+0x8ab/0xa30 [ 229.779009][ T4360] netlink_sendmsg+0x8aa/0xbc0 [ 229.783776][ T4360] ? __cfi_netlink_sendmsg+0x10/0x10 [ 229.789064][ T4360] ? security_socket_sendmsg+0x93/0xb0 [ 229.794523][ T4360] ? __cfi_netlink_sendmsg+0x10/0x10 [ 229.799811][ T4360] ____sys_sendmsg+0x5a9/0x990 [ 229.804669][ T4360] ? __sys_sendmsg_sock+0x40/0x40 [ 229.809725][ T4360] ? import_iovec+0x7c/0xb0 [ 229.814233][ T4360] ___sys_sendmsg+0x21c/0x290 [ 229.818922][ T4360] ? __sys_sendmsg+0x270/0x270 [ 229.823698][ T4360] ? __kasan_check_write+0x14/0x20 [ 229.828807][ T4360] ? proc_fail_nth_write+0x17a/0x1f0 [ 229.834092][ T4360] ? vfs_write+0x9d6/0xca0 [ 229.838529][ T4360] ? __fdget+0x19c/0x220 [ 229.842773][ T4360] __x64_sys_sendmsg+0x1f0/0x2c0 [ 229.847714][ T4360] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 229.853266][ T4360] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 229.859337][ T4360] x64_sys_call+0x171/0x9a0 [ 229.863850][ T4360] do_syscall_64+0x4c/0xa0 [ 229.868270][ T4360] ? clear_bhb_loop+0x30/0x80 [ 229.872961][ T4360] ? clear_bhb_loop+0x30/0x80 [ 229.877644][ T4360] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 229.883542][ T4360] RIP: 0033:0x7fe4d458f749 [ 229.887958][ T4360] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 229.907564][ T4360] RSP: 002b:00007fe4d54c5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 229.915982][ T4360] RAX: ffffffffffffffda RBX: 00007fe4d47e6090 RCX: 00007fe4d458f749 [ 229.923967][ T4360] RDX: 0000000000000000 RSI: 00002000000037c0 RDI: 0000000000000003 [ 229.931939][ T4360] RBP: 00007fe4d54c5090 R08: 0000000000000000 R09: 0000000000000000 [ 229.939999][ T4360] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 229.948058][ T4360] R13: 00007fe4d47e6128 R14: 00007fe4d47e6090 R15: 00007ffd58950998 [ 229.956050][ T4360] [ 229.980096][ T4366] input: syz1 as /devices/virtual/input/input10 [ 230.047665][ T4375] loop1: detected capacity change from 0 to 512 [ 230.055061][ T4375] ext3: Bad value for 'max_dir_size_kb' [ 230.175077][ T4376] random: crng reseeded on system resumption [ 231.479204][ T4408] loop3: detected capacity change from 0 to 512 [ 231.761209][ T28] audit: type=1400 audit(1764855899.096:494): avc: denied { transfer } for pid=4413 comm="syz.4.1179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 232.010516][ T4437] netlink: 'syz.2.1189': attribute type 12 has an invalid length. [ 232.027291][ T4437] netlink: 'syz.2.1189': attribute type 29 has an invalid length. [ 232.038012][ T4437] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1189'. [ 232.052737][ T4437] netlink: 59 bytes leftover after parsing attributes in process `syz.2.1189'. [ 232.139377][ T794] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 232.372965][ T4461] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1196'. [ 232.384597][ T4461] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1196'. [ 232.396010][ T794] usb 4-1: Using ep0 maxpacket: 16 [ 232.406407][ T794] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 232.498795][ T794] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 232.598418][ T794] usb 4-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 232.651200][ T794] usb 4-1: config 0 interface 0 has no altsetting 0 [ 232.670093][ T794] usb 4-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 232.694901][ T794] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.712283][ T794] usb 4-1: config 0 descriptor?? [ 232.942961][ T794] hid-generic 0003:04D8:00DF.0004: item 0 4 0 9 parsing failed [ 232.960857][ T794] hid-generic: probe of 0003:04D8:00DF.0004 failed with error -22 [ 233.206262][ T19] usb 4-1: USB disconnect, device number 13 [ 233.797951][ T4499] loop4: detected capacity change from 0 to 512 [ 233.805976][ T4499] EXT4-fs: Ignoring removed i_version option [ 233.943579][ T4499] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 234.973737][ T4494] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 235.057523][ T287] EXT4-fs (loop4): unmounting filesystem. [ 235.147793][ T4519] loop3: detected capacity change from 0 to 4096 [ 235.172950][ T4519] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 235.277595][ T4523] overlayfs: workdir and upperdir must reside under the same mount [ 235.313883][ T28] audit: type=1400 audit(1764855902.336:495): avc: denied { getattr } for pid=4514 comm="syz.4.1213" name="/" dev="incremental-fs" ino=1418 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 235.531522][ T285] EXT4-fs (loop3): unmounting filesystem. [ 236.297954][ T4541] overlayfs: failed to clone upperpath [ 236.937289][ T4560] bridge: RTM_NEWNEIGH with invalid ether address [ 236.967617][ T4550] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 237.200136][ T4575] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1234'. [ 237.342071][ T4574] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1234'. [ 238.219703][ T4591] fuse: Bad value for 'fd' [ 238.328381][ T28] audit: type=1400 audit(1764855905.160:496): avc: denied { create } for pid=4597 comm="syz.0.1243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 238.366584][ T4596] loop1: detected capacity change from 0 to 512 [ 238.385895][ T4596] EXT4-fs: Invalid want_extra_isize 14 [ 238.640043][ T4609] device bridge0 entered promiscuous mode [ 238.715143][ T4609] bridge0: port 3(vlan2) entered blocking state [ 238.737308][ T4609] bridge0: port 3(vlan2) entered disabled state [ 238.753051][ T4609] device bridge0 left promiscuous mode [ 238.840136][ T4616] loop3: detected capacity change from 0 to 4096 [ 238.863908][ T4616] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 238.973369][ T285] EXT4-fs (loop3): unmounting filesystem. [ 239.094162][ T4622] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 240.125185][ T4634] fuse: Bad value for 'fd' [ 240.162210][ T4636] device bridge0 entered promiscuous mode [ 240.168249][ T4636] device macsec1 entered promiscuous mode [ 240.174591][ T4636] bridge0: port 3(macsec1) entered blocking state [ 240.185780][ T4636] bridge0: port 3(macsec1) entered disabled state [ 240.199310][ T4636] device bridge0 left promiscuous mode [ 240.407050][ T4652] netlink: 'syz.0.1260': attribute type 16 has an invalid length. [ 240.415121][ T4652] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.1260'. [ 240.416305][ T4661] fuse: Bad value for 'fd' [ 241.559020][ T4686] FAULT_INJECTION: forcing a failure. [ 241.559020][ T4686] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 241.572624][ T4686] CPU: 1 PID: 4686 Comm: syz.3.1274 Tainted: G W syzkaller #0 [ 241.581525][ T4686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 241.591610][ T4686] Call Trace: [ 241.594916][ T4686] [ 241.597894][ T4686] __dump_stack+0x21/0x24 [ 241.602253][ T4686] dump_stack_lvl+0xee/0x150 [ 241.606879][ T4686] ? __cfi_dump_stack_lvl+0x8/0x8 [ 241.611939][ T4686] ? _parse_integer+0x2a/0x40 [ 241.616653][ T4686] dump_stack+0x15/0x24 [ 241.620991][ T4686] should_fail_ex+0x3d4/0x520 [ 241.625709][ T4686] should_fail+0xb/0x10 [ 241.629911][ T4686] should_fail_usercopy+0x1a/0x20 [ 241.634968][ T4686] _copy_from_user+0x1e/0xc0 [ 241.639589][ T4686] ___sys_sendmsg+0x155/0x290 [ 241.644387][ T4686] ? __sys_sendmsg+0x270/0x270 [ 241.649186][ T4686] ? __kasan_check_write+0x14/0x20 [ 241.654673][ T4686] ? proc_fail_nth_write+0x17a/0x1f0 [ 241.660338][ T4686] ? vfs_write+0x9d6/0xca0 [ 241.664793][ T4686] ? __fdget+0x19c/0x220 [ 241.669065][ T4686] __x64_sys_sendmsg+0x1f0/0x2c0 [ 241.674044][ T4686] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 241.679543][ T4686] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 241.685696][ T4686] x64_sys_call+0x171/0x9a0 [ 241.690323][ T4686] do_syscall_64+0x4c/0xa0 [ 241.694943][ T4686] ? clear_bhb_loop+0x30/0x80 [ 241.699675][ T4686] ? clear_bhb_loop+0x30/0x80 [ 241.704386][ T4686] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 241.710319][ T4686] RIP: 0033:0x7f830998f749 [ 241.714433][ T4694] fuse: Unknown parameter 'grou00000000000000000000' [ 241.714748][ T4686] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 241.741080][ T4686] RSP: 002b:00007f830a7d9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 241.749531][ T4686] RAX: ffffffffffffffda RBX: 00007f8309be5fa0 RCX: 00007f830998f749 [ 241.757691][ T4686] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000006 [ 241.765677][ T4686] RBP: 00007f830a7d9090 R08: 0000000000000000 R09: 0000000000000000 [ 241.773656][ T4686] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 241.781770][ T4686] R13: 00007f8309be6038 R14: 00007f8309be5fa0 R15: 00007ffe5709b308 [ 241.789772][ T4686] [ 241.876249][ T4703] loop3: detected capacity change from 0 to 512 [ 242.453225][ T4703] EXT4-fs (loop3): external journal device major/minor numbers have changed [ 242.746271][ T4703] EXT4-fs (loop3): failed to open journal device unknown-block(0,8) -6 [ 242.864023][ T4720] overlayfs: missing 'lowerdir' [ 243.222709][ T662] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 243.363569][ T2271] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 243.418812][ T4740] fuse: Bad value for 'fd' [ 243.567787][ T662] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 243.570641][ T2271] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 243.578413][ T662] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 243.596354][ T2271] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 243.598416][ T662] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 243.607348][ T2271] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 243.615960][ T662] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 243.624959][ T2271] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 243.632819][ T662] usb 2-1: SerialNumber: syz [ 243.641047][ T2271] usb 4-1: SerialNumber: syz [ 243.647947][ T662] usb 2-1: 0:2 : does not exist [ 243.884892][ T662] usb 2-1: USB disconnect, device number 13 [ 244.198515][ T337] udevd[337]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 245.250555][ T4764] loop1: detected capacity change from 0 to 4096 [ 245.278232][ T4764] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 245.380640][ T2271] usb 4-1: 0:2 : does not exist [ 245.448903][ T2271] usb 4-1: unit 5: unexpected type 0x0d [ 245.455739][ T284] EXT4-fs (loop1): unmounting filesystem. [ 245.467734][ T2271] usb 4-1: USB disconnect, device number 14 [ 245.526282][ T4780] fuse: Unknown parameter 'grou00000000000000000000' [ 245.545983][ T4782] overlayfs: missing 'lowerdir' [ 245.598281][ T28] audit: type=1400 audit(1764855911.871:497): avc: denied { bind } for pid=4787 comm="syz.1.1309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 245.629637][ T28] audit: type=1400 audit(1764855911.871:498): avc: denied { setopt } for pid=4787 comm="syz.1.1309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 246.109380][ T4793] loop3: detected capacity change from 0 to 4096 [ 246.129101][ T4793] EXT4-fs: Ignoring removed bh option [ 246.148259][ T4793] EXT4-fs (loop3): Test dummy encryption mode enabled [ 246.165531][ T4793] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 246.174668][ T4793] System zones: 0-5 [ 246.313626][ T4793] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 246.480943][ T4802] device pim6reg1 entered promiscuous mode [ 246.565321][ T4814] fuse: Unknown parameter 'group_i00000000000000000000' [ 246.586254][ T4816] tipc: Invalid UDP bearer configuration [ 246.586281][ T4816] tipc: Enabling of bearer rejected, failed to enable media [ 246.639800][ T285] EXT4-fs (loop3): unmounting filesystem. [ 246.713386][ T4830] netlink: 88 bytes leftover after parsing attributes in process `syz.4.1320'. [ 246.818760][ T4825] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 247.100203][ T4844] fuse: Bad value for 'fd' [ 248.160081][ T4859] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1334'. [ 248.210849][ T4857] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1335'. [ 248.242862][ T4862] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1334'. [ 248.272229][ T4863] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1335'. [ 248.378406][ T4875] fuse: Unknown parameter 'group_i00000000000000000000' [ 248.385969][ T4877] fuse: Bad value for 'fd' [ 248.493981][ T28] audit: type=1400 audit(1764855914.538:499): avc: denied { ioctl } for pid=4883 comm="syz.2.1345" path="socket:[29654]" dev="sockfs" ino=29654 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 248.852418][ T28] audit: type=1400 audit(1764855914.833:500): avc: denied { mounton } for pid=4883 comm="syz.2.1345" path="/282/file0" dev="tmpfs" ino=1558 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 248.935470][ T4891] netlink: 88 bytes leftover after parsing attributes in process `syz.4.1346'. [ 249.187353][ T4905] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1350'. [ 249.258729][ T4911] fuse: Bad value for 'fd' [ 249.298478][ T4917] fuse: Bad value for 'fd' [ 249.371932][ T4923] netlink: 'syz.0.1357': attribute type 16 has an invalid length. [ 249.386859][ T4923] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.1357'. [ 249.480753][ T4930] overlayfs: missing 'lowerdir' [ 249.490588][ T4934] fuse: Bad value for 'fd' [ 249.521637][ T4938] fuse: Unknown parameter 'group_id00000000000000000000' [ 249.541117][ T4941] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1365'. [ 249.603367][ T4946] netlink: 4300 bytes leftover after parsing attributes in process `syz.2.1360'. [ 249.709919][ T28] audit: type=1400 audit(1764855915.655:501): avc: denied { mount } for pid=4953 comm="syz.1.1370" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 249.777522][ T744] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 249.860881][ T28] audit: type=1400 audit(1764855915.793:502): avc: denied { remount } for pid=4953 comm="syz.1.1370" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 249.985697][ T744] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 250.021978][ T744] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 250.061682][ T744] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 250.085449][ T744] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 250.106973][ T744] usb 5-1: SerialNumber: syz [ 250.120361][ T744] usb 5-1: 0:2 : does not exist [ 250.343968][ T744] usb 5-1: USB disconnect, device number 11 [ 250.579708][ T337] udevd[337]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 250.645019][ T28] audit: type=1400 audit(1764855916.532:503): avc: denied { unmount } for pid=284 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 250.674953][ T4962] fuse: Bad value for 'fd' [ 250.717517][ T4971] fuse: Unknown parameter 'group_id00000000000000000000' [ 250.763624][ T4963] loop3: detected capacity change from 0 to 16 [ 250.864195][ T4963] erofs: (device loop3): mounted with root inode @ nid 36. [ 251.260071][ T4993] netlink: 'syz.2.1382': attribute type 16 has an invalid length. [ 251.323189][ T4987] loop1: detected capacity change from 0 to 40427 [ 251.333220][ T4987] F2FS-fs (loop1): heap/no_heap options were deprecated [ 251.340568][ T4987] F2FS-fs (loop1): fault_injection options not supported [ 251.347886][ T4987] F2FS-fs (loop1): fault_type options not supported [ 251.355776][ T4987] F2FS-fs (loop1): invalid crc value [ 251.376700][ T4987] F2FS-fs (loop1): Found nat_bits in checkpoint [ 251.443433][ T5001] loop4: detected capacity change from 0 to 512 [ 251.553268][ T5001] EXT4-fs (loop4): 1 orphan inode deleted [ 251.559781][ T5001] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 251.569499][ T5001] ext4 filesystem being mounted at /257/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 251.587120][ T1967] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 251.667324][ T1967] EXT4-fs error (device loop4): ext4_release_dquot:6839: comm kworker/u4:103: Failed to release dquot type 1 [ 251.735386][ T4987] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 251.771610][ T5010] fuse: Bad value for 'fd' [ 251.805608][ T28] audit: type=1400 audit(1764855917.593:504): avc: denied { create } for pid=4986 comm="syz.1.1381" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 251.841150][ T4987] syz.1.1381: attempt to access beyond end of device [ 251.841150][ T4987] loop1: rw=2049, sector=77824, nr_sectors = 136 limit=40427 [ 251.944544][ T28] audit: type=1400 audit(1764855917.621:505): avc: denied { append open } for pid=4986 comm="syz.1.1381" path="/266/file0/file1" dev="loop1" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 251.984980][ T28] audit: type=1400 audit(1764855917.621:506): avc: denied { ioctl } for pid=4986 comm="syz.1.1381" path="/266/file0/file1" dev="loop1" ino=10 ioctlcmd=0xf501 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 252.018200][ T28] audit: type=1400 audit(1764855917.621:507): avc: denied { write } for pid=4986 comm="syz.1.1381" name="sockstat6" dev="proc" ino=4026532355 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 252.048158][ T28] audit: type=1400 audit(1764855917.621:508): avc: denied { write } for pid=4986 comm="syz.1.1381" name="file1" dev="loop1" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 252.070374][ T28] audit: type=1400 audit(1764855917.815:509): avc: denied { read } for pid=4986 comm="syz.1.1381" name="file1" dev="loop1" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 252.073675][ T284] syz-executor: attempt to access beyond end of device [ 252.073675][ T284] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 252.139972][ T5015] fuse: Bad value for 'user_id' [ 252.247292][ T287] EXT4-fs (loop4): unmounting filesystem. [ 252.316302][ T5026] netlink: 'syz.0.1394': attribute type 16 has an invalid length. [ 252.331704][ T5026] __nla_validate_parse: 2 callbacks suppressed [ 252.331721][ T5026] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.1394'. [ 252.498169][ T5038] fuse: Bad value for 'fd' [ 252.537318][ T5044] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1396'. [ 253.053201][ T5054] device ipip0 entered promiscuous mode [ 253.704051][ T5058] fuse: Bad value for 'user_id' [ 253.868597][ T5069] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1407'. [ 253.897481][ T5069] FAULT_INJECTION: forcing a failure. [ 253.897481][ T5069] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 253.924449][ T5069] CPU: 1 PID: 5069 Comm: syz.1.1407 Tainted: G W syzkaller #0 [ 253.933356][ T5069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 253.943428][ T5069] Call Trace: [ 253.946721][ T5069] [ 253.949667][ T5069] __dump_stack+0x21/0x24 [ 253.954027][ T5069] dump_stack_lvl+0xee/0x150 [ 253.958633][ T5069] ? __cfi_dump_stack_lvl+0x8/0x8 [ 253.963702][ T5069] dump_stack+0x15/0x24 [ 253.967883][ T5069] should_fail_ex+0x3d4/0x520 [ 253.972584][ T5069] should_fail+0xb/0x10 [ 253.976764][ T5069] should_fail_usercopy+0x1a/0x20 [ 253.981822][ T5069] _copy_to_user+0x1e/0x90 [ 253.986259][ T5069] simple_read_from_buffer+0xe9/0x160 [ 253.991659][ T5069] proc_fail_nth_read+0x19a/0x210 [ 253.996727][ T5069] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 254.002297][ T5069] ? security_file_permission+0x94/0xb0 [ 254.007874][ T5069] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 254.013435][ T5069] vfs_read+0x26e/0x8c0 [ 254.017617][ T5069] ? __cfi_vfs_read+0x10/0x10 [ 254.022333][ T5069] ? __kasan_check_write+0x14/0x20 [ 254.027467][ T5069] ? mutex_lock+0x8d/0x1a0 [ 254.031908][ T5069] ? __cfi_mutex_lock+0x10/0x10 [ 254.036791][ T5069] ? __fdget_pos+0x2cd/0x380 [ 254.041401][ T5069] ? ksys_read+0x71/0x240 [ 254.045760][ T5069] ksys_read+0x140/0x240 [ 254.050033][ T5069] ? __cfi_ksys_read+0x10/0x10 [ 254.054837][ T5069] ? fpregs_restore_userregs+0x128/0x260 [ 254.060495][ T5069] __x64_sys_read+0x7b/0x90 [ 254.065027][ T5069] x64_sys_call+0x2f/0x9a0 [ 254.069468][ T5069] do_syscall_64+0x4c/0xa0 [ 254.073903][ T5069] ? clear_bhb_loop+0x30/0x80 [ 254.078608][ T5069] ? clear_bhb_loop+0x30/0x80 [ 254.083316][ T5069] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 254.089233][ T5069] RIP: 0033:0x7f7f6c98e15c [ 254.093665][ T5069] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 254.113303][ T5069] RSP: 002b:00007f7f6d888030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 254.121740][ T5069] RAX: ffffffffffffffda RBX: 00007f7f6cbe5fa0 RCX: 00007f7f6c98e15c [ 254.129735][ T5069] RDX: 000000000000000f RSI: 00007f7f6d8880a0 RDI: 0000000000000004 [ 254.137728][ T5069] RBP: 00007f7f6d888090 R08: 0000000000000000 R09: 0000000000000000 [ 254.145723][ T5069] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 254.153718][ T5069] R13: 00007f7f6cbe6038 R14: 00007f7f6cbe5fa0 R15: 00007ffed8497f38 [ 254.161722][ T5069] [ 254.173515][ T5072] netlink: 'syz.0.1408': attribute type 16 has an invalid length. [ 254.192837][ T5072] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.1408'. [ 254.201673][ T5076] fuse: Invalid rootmode [ 254.312257][ T5082] netlink: 4300 bytes leftover after parsing attributes in process `syz.2.1409'. [ 254.651839][ T5087] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1411'. [ 254.858934][ T5093] fuse: Bad value for 'user_id' [ 255.085239][ T5097] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1415'. [ 255.622322][ T5109] fuse: Invalid rootmode [ 255.929112][ T5111] netlink: 'syz.1.1422': attribute type 16 has an invalid length. [ 255.944346][ T5111] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.1422'. [ 256.064219][ T5124] fuse: Bad value for 'fd' [ 256.524469][ T5133] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=5133 comm=syz.2.1428 [ 256.678840][ T421] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 256.709200][ T5143] netlink: 4300 bytes leftover after parsing attributes in process `syz.2.1430'. [ 257.058435][ T28] audit: type=1400 audit(1764855922.254:510): avc: denied { create } for pid=5139 comm="syz.0.1432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 257.233127][ T5146] fuse: Bad value for 'rootmode' [ 257.318077][ T421] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 257.328220][ T421] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 257.352612][ T421] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 257.393047][ T421] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 257.430393][ T421] usb 5-1: SerialNumber: syz [ 257.488253][ T421] usb 5-1: 0:2 : does not exist [ 257.509602][ T5157] fuse: Bad value for 'fd' [ 257.556704][ T5160] netlink: 'syz.0.1436': attribute type 16 has an invalid length. [ 257.567731][ T5160] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.1436'. [ 258.366081][ T421] usb 5-1: USB disconnect, device number 12 [ 258.416397][ T5169] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1440'. [ 258.429385][ T5169] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1440'. [ 258.551200][ T5179] fuse: Bad value for 'fd' [ 258.641145][ T337] udevd[337]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 259.216299][ T5188] fuse: Bad value for 'fd' [ 259.401656][ T5196] netlink: 'syz.1.1449': attribute type 16 has an invalid length. [ 259.412389][ T5196] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.1449'. [ 259.657520][ T5201] loop1: detected capacity change from 0 to 4096 [ 259.688150][ T5201] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 259.737895][ T5206] netlink: 4300 bytes leftover after parsing attributes in process `syz.0.1451'. [ 259.759464][ T284] EXT4-fs (loop1): unmounting filesystem. [ 260.285780][ T5213] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1454'. [ 260.363316][ T5214] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1454'. [ 260.450912][ T5218] fuse: Bad value for 'rootmode' [ 260.690344][ T5224] fuse: Bad value for 'fd' [ 260.827151][ T5230] netlink: 'syz.1.1462': attribute type 16 has an invalid length. [ 260.847744][ T5230] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.1462'. [ 261.117476][ T5238] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1463'. [ 261.361855][ T5226] loop3: detected capacity change from 0 to 40427 [ 261.412502][ T5226] F2FS-fs (loop3): fault_type options not supported [ 261.428283][ T5226] F2FS-fs (loop3): Unrecognized mount option "noflush_m" or missing value [ 261.489248][ T794] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 261.597823][ T483] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 261.684403][ T794] usb 2-1: Using ep0 maxpacket: 16 [ 261.693260][ T794] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 261.814255][ T794] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 261.834242][ T794] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 261.844754][ T483] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 261.859107][ T794] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.867272][ T483] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 261.889959][ T794] usb 2-1: config 0 descriptor?? [ 261.896011][ T483] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 261.906325][ T483] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 261.963710][ T483] usb 5-1: SerialNumber: syz [ 261.974563][ T483] usb 5-1: 0:2 : does not exist [ 262.199532][ T483] usb 5-1: USB disconnect, device number 13 [ 262.374723][ T5246] fuse: Bad value for 'fd' [ 262.437494][ T5252] fuse: Unknown parameter 'use00000000000000000000' [ 262.450155][ T5253] fuse: Bad value for 'fd' [ 262.458306][ T5253] fuse: Bad value for 'fd' [ 262.464037][ T5253] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1466'. [ 262.596568][ T5259] netlink: 4300 bytes leftover after parsing attributes in process `syz.3.1470'. [ 263.309800][ T5272] fuse: Bad value for 'fd' [ 263.688858][ T5279] overlayfs: unrecognized mount option "/" or missing value [ 263.701300][ T28] audit: type=1400 audit(1764855928.558:511): avc: denied { mount } for pid=5275 comm="syz.3.1475" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 263.792542][ T28] audit: type=1400 audit(1764855928.558:512): avc: denied { mounton } for pid=5275 comm="syz.3.1475" path="/266/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 263.936906][ T5290] fuse: Unknown parameter 'use00000000000000000000' [ 263.976168][ T5294] fuse: Bad value for 'fd' [ 263.996597][ T5298] fuse: Bad value for 'fd' [ 264.102816][ T5303] netlink: 88 bytes leftover after parsing attributes in process `syz.4.1483'. [ 264.126805][ T5305] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1485'. [ 264.158000][ T2271] usb 2-1: USB disconnect, device number 14 [ 264.198894][ T28] audit: type=1326 audit(1764855929.038:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5306 comm="syz.1.1486" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7f6c98f749 code=0x0 [ 264.496242][ T28] audit: type=1400 audit(1764855929.306:514): avc: denied { unmount } for pid=285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 265.169263][ T5324] fuse: Bad value for 'fd' [ 265.188673][ T5326] fuse: Bad value for 'fd' [ 265.650476][ T5344] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 265.718584][ T5347] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1501'. [ 265.734412][ T5347] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1501'. [ 265.787208][ T5357] fuse: Bad value for 'fd' [ 265.863804][ T5350] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 266.012047][ T5368] overlayfs: failed to clone upperpath [ 266.220835][ T5371] netlink: 88 bytes leftover after parsing attributes in process `syz.4.1506'. [ 266.440456][ T421] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 266.581291][ T2271] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 266.591690][ T5379] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 266.636705][ T421] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 266.647003][ T421] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 266.657493][ T421] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 266.667517][ T421] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 266.676300][ T421] usb 4-1: SerialNumber: syz [ 266.683725][ T421] usb 4-1: 0:2 : does not exist [ 266.692776][ T5385] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1516'. [ 266.705017][ T5385] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1516'. [ 266.799153][ T2271] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 266.825030][ T2271] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 266.842021][ T2271] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 266.858454][ T2271] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 266.873841][ T2271] usb 2-1: SerialNumber: syz [ 266.955652][ T2271] usb 2-1: 0:2 : does not exist [ 266.962998][ T421] usb 4-1: USB disconnect, device number 15 [ 267.385696][ T2271] usb 2-1: USB disconnect, device number 15 [ 267.400799][ T425] udevd[425]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 267.593101][ T5408] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 267.611864][ T337] udevd[337]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 267.698304][ T5414] syz.0.1527[5414] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 267.698405][ T5414] syz.0.1527[5414] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 267.705445][ T5415] syz.0.1527[5415] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 267.721670][ T5415] syz.0.1527[5415] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 267.770325][ T5419] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1529'. [ 267.802758][ T5419] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1529'. [ 267.881541][ T5428] fuse: Bad value for 'fd' [ 267.886672][ T5428] fuse: Bad value for 'fd' [ 267.898143][ T5428] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1530'. [ 268.099828][ T5434] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 268.226730][ T5456] netlink: 'syz.1.1538': attribute type 16 has an invalid length. [ 268.279138][ T5454] netlink: 'syz.3.1541': attribute type 16 has an invalid length. [ 269.404190][ T5477] fuse: Bad value for 'fd' [ 269.842702][ T794] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 270.012758][ T5484] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 270.129328][ T5498] __nla_validate_parse: 2 callbacks suppressed [ 270.129359][ T5498] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1556'. [ 270.292090][ T794] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 270.303188][ T794] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 270.317155][ T794] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 270.327880][ T794] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 270.367159][ T794] usb 2-1: SerialNumber: syz [ 270.378966][ T794] usb 2-1: 0:2 : does not exist [ 270.521110][ T5507] netlink: 'syz.0.1558': attribute type 16 has an invalid length. [ 270.529252][ T5507] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.1558'. [ 270.553641][ T5510] fuse: Unknown parameter 'user_id00000000000000000000' [ 270.645647][ T794] usb 2-1: USB disconnect, device number 16 [ 271.014342][ T5516] FAULT_INJECTION: forcing a failure. [ 271.014342][ T5516] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 271.027593][ T5516] CPU: 0 PID: 5516 Comm: syz.4.1563 Tainted: G W syzkaller #0 [ 271.036486][ T5516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 271.046559][ T5516] Call Trace: [ 271.049849][ T5516] [ 271.052785][ T5516] __dump_stack+0x21/0x24 [ 271.057131][ T5516] dump_stack_lvl+0xee/0x150 [ 271.061733][ T5516] ? __cfi_dump_stack_lvl+0x8/0x8 [ 271.066787][ T5516] dump_stack+0x15/0x24 [ 271.070956][ T5516] should_fail_ex+0x3d4/0x520 [ 271.075651][ T5516] should_fail+0xb/0x10 [ 271.079826][ T5516] should_fail_usercopy+0x1a/0x20 [ 271.084869][ T5516] _copy_to_user+0x1e/0x90 [ 271.089300][ T5516] simple_read_from_buffer+0xe9/0x160 [ 271.094685][ T5516] proc_fail_nth_read+0x19a/0x210 [ 271.099720][ T5516] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 271.105275][ T5516] ? security_file_permission+0x94/0xb0 [ 271.110835][ T5516] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 271.116392][ T5516] vfs_read+0x26e/0x8c0 [ 271.120572][ T5516] ? __cfi_vfs_read+0x10/0x10 [ 271.125269][ T5516] ? __kasan_check_write+0x14/0x20 [ 271.130562][ T5516] ? mutex_lock+0x8d/0x1a0 [ 271.135006][ T5516] ? __cfi_mutex_lock+0x10/0x10 [ 271.139879][ T5516] ? __fdget_pos+0x2cd/0x380 [ 271.144475][ T5516] ? ksys_read+0x71/0x240 [ 271.148824][ T5516] ksys_read+0x140/0x240 [ 271.153085][ T5516] ? __cfi_ksys_read+0x10/0x10 [ 271.157865][ T5516] ? fput+0x154/0x1a0 [ 271.161864][ T5516] ? debug_smp_processor_id+0x17/0x20 [ 271.167259][ T5516] __x64_sys_read+0x7b/0x90 [ 271.171769][ T5516] x64_sys_call+0x2f/0x9a0 [ 271.176322][ T5516] do_syscall_64+0x4c/0xa0 [ 271.180748][ T5516] ? clear_bhb_loop+0x30/0x80 [ 271.185442][ T5516] ? clear_bhb_loop+0x30/0x80 [ 271.190136][ T5516] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 271.196042][ T5516] RIP: 0033:0x7fe4d458e15c [ 271.200468][ T5516] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 271.220263][ T5516] RSP: 002b:00007fe4d54e6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 271.228693][ T5516] RAX: ffffffffffffffda RBX: 00007fe4d47e5fa0 RCX: 00007fe4d458e15c [ 271.236674][ T5516] RDX: 000000000000000f RSI: 00007fe4d54e60a0 RDI: 0000000000000004 [ 271.244689][ T5516] RBP: 00007fe4d54e6090 R08: 0000000000000000 R09: 0000000000000000 [ 271.252686][ T5516] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 271.260666][ T5516] R13: 00007fe4d47e6038 R14: 00007fe4d47e5fa0 R15: 00007ffd58950998 [ 271.268654][ T5516] [ 271.272179][ T337] udevd[337]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 271.380365][ T5533] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1567'. [ 271.398879][ T5533] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1567'. [ 271.413055][ T5535] loop4: detected capacity change from 0 to 4096 [ 271.431653][ T5535] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 271.550633][ T5542] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 271.567063][ T287] EXT4-fs (loop4): unmounting filesystem. [ 271.672603][ T5547] netlink: 'syz.4.1572': attribute type 16 has an invalid length. [ 271.680722][ T5547] netlink: 64138 bytes leftover after parsing attributes in process `syz.4.1572'. [ 271.807427][ T5553] fuse: Bad value for 'fd' [ 271.833482][ T5557] fuse: Bad value for 'fd' [ 271.844249][ T5558] netlink: 88 bytes leftover after parsing attributes in process `syz.4.1573'. [ 271.879822][ T5565] fuse: Unknown parameter 'user_id00000000000000000000' [ 271.907024][ T5569] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1581'. [ 271.921695][ T5569] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1581'. [ 272.054769][ T5578] fuse: Unknown parameter 'use00000000000000000000' [ 272.467929][ T5589] netlink: 'syz.3.1587': attribute type 16 has an invalid length. [ 272.475960][ T5589] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.1587'. [ 272.510937][ T5596] fuse: Bad value for 'fd' [ 273.081686][ T5610] fuse: Bad value for 'fd' [ 273.125986][ T5614] loop4: detected capacity change from 0 to 4096 [ 273.151625][ T5614] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 273.185171][ T5612] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 273.193288][ T794] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 273.251735][ T287] EXT4-fs (loop4): unmounting filesystem. [ 273.269972][ T5620] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1598'. [ 273.344205][ T5626] fuse: Bad value for 'fd' [ 273.361529][ T5627] netlink: 'syz.4.1600': attribute type 16 has an invalid length. [ 273.397284][ T794] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 273.409254][ T794] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 273.419450][ T794] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 273.429151][ T794] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 273.437246][ T794] usb 4-1: SerialNumber: syz [ 273.443933][ T794] usb 4-1: 0:2 : does not exist [ 273.507940][ T5636] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 273.516826][ T5636] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 273.550350][ T5636] loop1: detected capacity change from 0 to 2048 [ 273.667240][ T794] usb 4-1: USB disconnect, device number 16 [ 273.916878][ T337] udevd[337]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 274.234010][ T5645] fuse: Unknown parameter 'user_i00000000000000000000' [ 274.286837][ T5649] loop3: detected capacity change from 0 to 4096 [ 274.341126][ T5649] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 274.411944][ T285] EXT4-fs (loop3): unmounting filesystem. [ 274.484636][ T5661] fuse: Bad value for 'fd' [ 274.559970][ T28] audit: type=1400 audit(1764855938.601:515): avc: denied { load_policy } for pid=5662 comm="syz.3.1615" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 274.577450][ T5671] SELinux: policydb magic number 0x7 does not match expected magic number 0xf97cff8c [ 274.589836][ T5671] SELinux: failed to load policy [ 276.799584][ T28] audit: type=1326 audit(1764855940.659:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5662 comm="syz.3.1615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f830998f749 code=0x7ffc0000 [ 277.200413][ T28] audit: type=1326 audit(1764855940.659:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5662 comm="syz.3.1615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f830998f749 code=0x7ffc0000 [ 277.224233][ T28] audit: type=1326 audit(1764855940.659:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5662 comm="syz.3.1615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f830998f749 code=0x7ffc0000 [ 277.232726][ T5677] fuse: Unknown parameter 'user_i00000000000000000000' [ 277.247560][ T28] audit: type=1326 audit(1764855940.659:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5662 comm="syz.3.1615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f830998f749 code=0x7ffc0000 [ 277.277782][ T28] audit: type=1326 audit(1764855940.659:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5662 comm="syz.3.1615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f830998f749 code=0x7ffc0000 [ 277.301235][ T28] audit: type=1326 audit(1764855940.659:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5662 comm="syz.3.1615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=92 compat=0 ip=0x7f830998f749 code=0x7ffc0000 [ 277.325065][ T28] audit: type=1326 audit(1764855940.659:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5662 comm="syz.3.1615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f830998f749 code=0x7ffc0000 [ 277.329722][ T5669] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 277.348418][ T28] audit: type=1326 audit(1764855940.659:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5662 comm="syz.3.1615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f830998f749 code=0x7ffc0000 [ 277.507147][ T5691] loop1: detected capacity change from 0 to 4096 [ 277.511609][ T5693] fuse: Unknown parameter '0xffffffffffffffff' [ 277.549068][ T5691] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 277.633184][ T5703] fuse: Bad value for 'fd' [ 277.638276][ T5703] fuse: Bad value for 'fd' [ 277.647550][ T284] EXT4-fs (loop1): unmounting filesystem. [ 277.660005][ T5706] fuse: Unknown parameter 'user_id00000000000000000000' [ 277.685231][ T5703] __nla_validate_parse: 3 callbacks suppressed [ 277.685252][ T5703] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1626'. [ 278.063962][ T421] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 278.272595][ T421] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 278.283000][ T421] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 278.292698][ T421] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 278.301849][ T421] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 278.309893][ T421] usb 4-1: SerialNumber: syz [ 278.316590][ T421] usb 4-1: 0:2 : does not exist [ 278.546644][ T421] usb 4-1: USB disconnect, device number 17 [ 278.602763][ T5804] fuse: Unknown parameter '0xffffffffffffffff' [ 278.702323][ T28] audit: type=1326 audit(1764855942.422:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5812 comm="syz.2.1639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff48058f749 code=0x7ffc0000 [ 278.765502][ T5815] loop1: detected capacity change from 0 to 4096 [ 278.796473][ T5815] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 278.837094][ T284] EXT4-fs (loop1): unmounting filesystem. [ 278.857465][ T5820] fuse: Unknown parameter 'user_id00000000000000000000' [ 280.113625][ T5832] overlayfs: failed to clone upperpath [ 280.938585][ T28] kauditd_printk_skb: 21 callbacks suppressed [ 280.938656][ T28] audit: type=1326 audit(1764855944.489:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5812 comm="syz.2.1639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff48058f749 code=0x7ffc0000 [ 281.141653][ T5839] fuse: Unknown parameter '0xffffffffffffffff' [ 281.164221][ T28] audit: type=1326 audit(1764855944.489:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5812 comm="syz.2.1639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff48058f749 code=0x7ffc0000 [ 281.367173][ T5850] fuse: Unknown parameter 'user_id00000000000000000000' [ 282.050851][ T5854] loop1: detected capacity change from 0 to 16 [ 282.092863][ T5851] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1646'. [ 282.118669][ T5851] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1646'. [ 284.883818][ T5856] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1650'. [ 284.924438][ T5854] erofs: (device loop1): mounted with root inode @ nid 36. [ 285.288499][ T5870] fuse: Unknown parameter '0xffffffffffffffff' [ 285.304465][ T5862] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1656'. [ 285.550519][ T5886] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1663'. [ 285.617041][ T1917] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 285.824721][ T1917] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 285.840237][ T1917] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 285.852359][ T1917] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 285.862843][ T1917] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 285.872248][ T1917] usb 2-1: SerialNumber: syz [ 285.902819][ T1917] usb 2-1: 0:2 : does not exist [ 286.050341][ T5896] netlink: 'syz.2.1666': attribute type 16 has an invalid length. [ 286.058261][ T5896] netlink: 64138 bytes leftover after parsing attributes in process `syz.2.1666'. [ 286.122123][ T1917] usb 2-1: USB disconnect, device number 17 [ 286.397181][ T337] udevd[337]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 286.456267][ T5905] fuse: Unknown parameter '0x0000000000000003' [ 286.896977][ T5910] netlink: 'syz.3.1671': attribute type 16 has an invalid length. [ 286.904846][ T5910] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.1671'. [ 287.064894][ T5918] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 288.827578][ T5945] fuse: Bad value for 'fd' [ 288.833189][ T5945] fuse: Bad value for 'fd' [ 288.839537][ T5945] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1680'. [ 288.930319][ T5952] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1685'. [ 289.359885][ T5957] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1688'. [ 289.739868][ T5959] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 291.189162][ T5984] netlink: 'syz.4.1698': attribute type 16 has an invalid length. [ 291.214345][ T5984] netlink: 64138 bytes leftover after parsing attributes in process `syz.4.1698'. [ 291.331048][ T5988] netlink: 'syz.0.1696': attribute type 16 has an invalid length. [ 291.374300][ T5988] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.1696'. [ 291.537984][ T5996] FAULT_INJECTION: forcing a failure. [ 291.537984][ T5996] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 291.551233][ T5996] CPU: 0 PID: 5996 Comm: syz.4.1701 Tainted: G W syzkaller #0 [ 291.560120][ T5996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 291.570200][ T5996] Call Trace: [ 291.573506][ T5996] [ 291.576456][ T5996] __dump_stack+0x21/0x24 [ 291.580820][ T5996] dump_stack_lvl+0xee/0x150 [ 291.585538][ T5996] ? __cfi_dump_stack_lvl+0x8/0x8 [ 291.590610][ T5996] dump_stack+0x15/0x24 [ 291.594803][ T5996] should_fail_ex+0x3d4/0x520 [ 291.599515][ T5996] should_fail+0xb/0x10 [ 291.603705][ T5996] should_fail_usercopy+0x1a/0x20 [ 291.608768][ T5996] _copy_from_user+0x1e/0xc0 [ 291.613391][ T5996] __sys_bpf+0x277/0x780 [ 291.617660][ T5996] ? bpf_link_show_fdinfo+0x320/0x320 [ 291.623064][ T5996] ? __cfi_ksys_write+0x10/0x10 [ 291.627939][ T5996] ? debug_smp_processor_id+0x17/0x20 [ 291.633333][ T5996] __x64_sys_bpf+0x7c/0x90 [ 291.637783][ T5996] x64_sys_call+0x488/0x9a0 [ 291.642316][ T5996] do_syscall_64+0x4c/0xa0 [ 291.646791][ T5996] ? clear_bhb_loop+0x30/0x80 [ 291.651758][ T5996] ? clear_bhb_loop+0x30/0x80 [ 291.656559][ T5996] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 291.662490][ T5996] RIP: 0033:0x7fe4d458f749 [ 291.667142][ T5996] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 291.686877][ T5996] RSP: 002b:00007fe4d54e6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 291.695322][ T5996] RAX: ffffffffffffffda RBX: 00007fe4d47e5fa0 RCX: 00007fe4d458f749 [ 291.703323][ T5996] RDX: 000000000000000c RSI: 00002000000004c0 RDI: 000000000000000a [ 291.711327][ T5996] RBP: 00007fe4d54e6090 R08: 0000000000000000 R09: 0000000000000000 [ 291.719324][ T5996] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 291.727322][ T5996] R13: 00007fe4d47e6038 R14: 00007fe4d47e5fa0 R15: 00007ffd58950998 [ 291.735347][ T5996] [ 292.615865][ T6011] loop3: detected capacity change from 0 to 8192 [ 294.479550][ T6023] loop4: detected capacity change from 0 to 4096 [ 294.488920][ T6023] EXT4-fs (loop4): Test dummy encryption mode enabled [ 294.503998][ T6023] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 294.512405][ T6023] System zones: 0-5 [ 294.521828][ T6023] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 295.275383][ T6028] netlink: 'syz.2.1710': attribute type 16 has an invalid length. [ 295.292080][ T6028] netlink: 64138 bytes leftover after parsing attributes in process `syz.2.1710'. [ 295.807717][ T287] EXT4-fs (loop4): unmounting filesystem. [ 295.826080][ T6037] netlink: 'syz.0.1712': attribute type 16 has an invalid length. [ 295.843052][ T6037] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.1712'. [ 297.623429][ T6070] loop4: detected capacity change from 0 to 256 [ 297.670728][ T6070] FAT-fs (loop4): Directory bread(block 64) failed [ 297.677411][ T6070] FAT-fs (loop4): Directory bread(block 65) failed [ 297.684279][ T6070] FAT-fs (loop4): Directory bread(block 66) failed [ 297.690912][ T6070] FAT-fs (loop4): Directory bread(block 67) failed [ 297.697714][ T6070] FAT-fs (loop4): Directory bread(block 68) failed [ 297.704490][ T6070] FAT-fs (loop4): Directory bread(block 69) failed [ 297.711394][ T6070] FAT-fs (loop4): Directory bread(block 70) failed [ 297.718080][ T6070] FAT-fs (loop4): Directory bread(block 71) failed [ 297.728332][ T6070] FAT-fs (loop4): Directory bread(block 72) failed [ 297.735032][ T6070] FAT-fs (loop4): Directory bread(block 73) failed [ 298.083261][ T6138] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1727'. [ 298.586938][ T6144] fuse: Unknown parameter 'fd0xffffffffffffffff' [ 298.609717][ T6148] fuse: Bad value for 'fd' [ 298.775054][ T6157] netlink: 'syz.0.1732': attribute type 16 has an invalid length. [ 298.799190][ T6157] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.1732'. [ 300.283470][ T6165] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1736'. [ 300.411742][ T6168] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 300.483503][ T6177] fuse: Unknown parameter 'fd0x0000000000000003' [ 300.499965][ T6179] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1742'. [ 300.515990][ T6182] loop3: detected capacity change from 0 to 16 [ 300.526439][ T6182] erofs: (device loop3): mounted with root inode @ nid 36. [ 300.765548][ T28] audit: type=1400 audit(1764855962.746:548): avc: denied { listen } for pid=6181 comm="syz.3.1744" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 301.142127][ T6185] loop1: detected capacity change from 0 to 40427 [ 301.280373][ T28] audit: type=1400 audit(1764855963.245:549): avc: denied { name_bind } for pid=6193 comm="syz.0.1748" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 301.322797][ T337] I/O error, dev loop1, sector 40192 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 301.786138][ T6201] overlayfs: missing 'lowerdir' [ 302.300824][ T6206] overlayfs: missing 'lowerdir' [ 302.496780][ T421] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 302.977207][ T6211] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1752'. [ 303.318996][ T421] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 303.330781][ T421] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 303.344193][ T421] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 303.363531][ T421] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 303.371621][ T421] usb 4-1: SerialNumber: syz [ 303.378165][ T421] usb 4-1: 0:2 : does not exist [ 304.441784][ T6228] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 304.940717][ T6244] netlink: 'syz.1.1762': attribute type 16 has an invalid length. [ 304.975136][ T6244] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.1762'. [ 305.012380][ T421] usb 4-1: USB disconnect, device number 18 [ 305.972050][ T6254] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1767'. [ 306.032655][ T6256] fuse: Bad value for 'fd' [ 306.038194][ T6256] fuse: Bad value for 'fd' [ 306.082963][ T617] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 306.110797][ T6257] loop1: detected capacity change from 0 to 4096 [ 306.120479][ T6257] EXT4-fs: Ignoring removed bh option [ 306.139938][ T6257] EXT4-fs (loop1): Test dummy encryption mode enabled [ 306.147562][ T6257] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 306.155899][ T6257] System zones: 0-5 [ 306.161931][ T6257] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 306.506632][ T617] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 306.516826][ T617] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 306.526583][ T617] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 306.535752][ T617] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 306.543799][ T617] usb 5-1: SerialNumber: syz [ 306.550195][ T617] usb 5-1: 0:2 : does not exist [ 306.783919][ T617] usb 5-1: USB disconnect, device number 14 [ 306.858315][ T284] EXT4-fs (loop1): unmounting filesystem. [ 306.892062][ T6271] fuse: Bad value for 'fd' [ 306.972394][ T6277] netlink: 'syz.2.1774': attribute type 16 has an invalid length. [ 306.980352][ T6277] netlink: 64138 bytes leftover after parsing attributes in process `syz.2.1774'. [ 309.341712][ T6298] FAULT_INJECTION: forcing a failure. [ 309.341712][ T6298] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 309.355085][ T6298] CPU: 1 PID: 6298 Comm: syz.1.1781 Tainted: G W syzkaller #0 [ 309.363966][ T6298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 309.374054][ T6298] Call Trace: [ 309.377358][ T6298] [ 309.380309][ T6298] __dump_stack+0x21/0x24 [ 309.384671][ T6298] dump_stack_lvl+0xee/0x150 [ 309.389287][ T6298] ? __cfi_dump_stack_lvl+0x8/0x8 [ 309.394353][ T6298] dump_stack+0x15/0x24 [ 309.398536][ T6298] should_fail_ex+0x3d4/0x520 [ 309.403246][ T6298] should_fail+0xb/0x10 [ 309.407429][ T6298] should_fail_usercopy+0x1a/0x20 [ 309.412480][ T6298] _copy_to_user+0x1e/0x90 [ 309.416925][ T6298] simple_read_from_buffer+0xe9/0x160 [ 309.422322][ T6298] proc_fail_nth_read+0x19a/0x210 [ 309.427375][ T6298] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 309.432947][ T6298] ? security_file_permission+0x94/0xb0 [ 309.438525][ T6298] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 309.444273][ T6298] vfs_read+0x26e/0x8c0 [ 309.448466][ T6298] ? __cfi_vfs_read+0x10/0x10 [ 309.453193][ T6298] ? __kasan_check_write+0x14/0x20 [ 309.458411][ T6298] ? mutex_lock+0x8d/0x1a0 [ 309.462850][ T6298] ? __cfi_mutex_lock+0x10/0x10 [ 309.467728][ T6298] ? __fdget_pos+0x2cd/0x380 [ 309.472333][ T6298] ? ksys_read+0x71/0x240 [ 309.476713][ T6298] ksys_read+0x140/0x240 [ 309.480984][ T6298] ? __cfi_ksys_read+0x10/0x10 [ 309.485769][ T6298] ? debug_smp_processor_id+0x17/0x20 [ 309.491173][ T6298] __x64_sys_read+0x7b/0x90 [ 309.495689][ T6298] x64_sys_call+0x2f/0x9a0 [ 309.500112][ T6298] do_syscall_64+0x4c/0xa0 [ 309.504538][ T6298] ? clear_bhb_loop+0x30/0x80 [ 309.509227][ T6298] ? clear_bhb_loop+0x30/0x80 [ 309.513929][ T6298] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 309.519837][ T6298] RIP: 0033:0x7f7f6c98e15c [ 309.524267][ T6298] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 309.543880][ T6298] RSP: 002b:00007f7f6d888030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 309.552317][ T6298] RAX: ffffffffffffffda RBX: 00007f7f6cbe5fa0 RCX: 00007f7f6c98e15c [ 309.560369][ T6298] RDX: 000000000000000f RSI: 00007f7f6d8880a0 RDI: 0000000000000004 [ 309.568345][ T6298] RBP: 00007f7f6d888090 R08: 0000000000000000 R09: 0000000000000000 [ 309.576425][ T6298] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 309.584405][ T6298] R13: 00007f7f6cbe6038 R14: 00007f7f6cbe5fa0 R15: 00007ffed8497f38 [ 309.592410][ T6298] [ 309.628629][ T6301] overlayfs: missing 'lowerdir' [ 309.638578][ T6296] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1778'. [ 309.649443][ T6296] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1778'. [ 309.894991][ T6309] fuse: Bad value for 'fd' [ 310.268733][ T6320] netlink: 'syz.0.1788': attribute type 16 has an invalid length. [ 310.320794][ T6320] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.1788'. [ 310.455850][ T6322] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 310.487698][ T6300] bridge: RTM_NEWNEIGH with invalid ether address [ 312.650546][ T6336] bridge0: port 3(vlan2) entered blocking state [ 312.656877][ T6336] bridge0: port 3(vlan2) entered disabled state [ 312.729874][ T6348] loop1: detected capacity change from 0 to 16 [ 312.742486][ T6348] erofs: (device loop1): mounted with root inode @ nid 36. [ 313.112224][ T6354] fuse: Bad value for 'fd' [ 313.217329][ T6358] fuse: Bad value for 'fd' [ 313.223433][ T6358] fuse: Bad value for 'fd' [ 313.239670][ T6358] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1798'. [ 316.756132][ T6384] netlink: 'syz.2.1804': attribute type 16 has an invalid length. [ 316.887782][ T6384] netlink: 64138 bytes leftover after parsing attributes in process `syz.2.1804'. [ 317.798395][ T6398] netlink: 88 bytes leftover after parsing attributes in process `syz.4.1808'. [ 320.220690][ T6407] loop1: detected capacity change from 0 to 256 [ 320.288047][ T6407] FAT-fs (loop1): Directory bread(block 64) failed [ 320.295070][ T6407] FAT-fs (loop1): Directory bread(block 65) failed [ 320.301682][ T6407] FAT-fs (loop1): Directory bread(block 66) failed [ 320.308584][ T6407] FAT-fs (loop1): Directory bread(block 67) failed [ 320.315149][ T6407] FAT-fs (loop1): Directory bread(block 68) failed [ 320.321712][ T6407] FAT-fs (loop1): Directory bread(block 69) failed [ 320.328283][ T6407] FAT-fs (loop1): Directory bread(block 70) failed [ 320.334854][ T6407] FAT-fs (loop1): Directory bread(block 71) failed [ 320.341439][ T6407] FAT-fs (loop1): Directory bread(block 72) failed [ 320.347976][ T6407] FAT-fs (loop1): Directory bread(block 73) failed [ 320.409629][ T6419] fuse: Bad value for 'user_id' [ 320.759670][ T6435] netlink: 'syz.0.1821': attribute type 16 has an invalid length. [ 320.777592][ T6435] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.1821'. [ 320.953236][ T6444] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1824'. [ 321.921808][ T6456] fuse: Bad value for 'user_id' [ 322.030006][ T6459] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 322.043893][ T6462] overlayfs: conflicting lowerdir path [ 322.225975][ T6464] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 322.392351][ T6467] loop4: detected capacity change from 0 to 256 [ 322.674301][ T28] audit: type=1400 audit(1764855982.988:550): avc: denied { create } for pid=6466 comm="syz.4.1832" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 322.917084][ T28] audit: type=1400 audit(1764855982.988:551): avc: denied { write } for pid=6466 comm="syz.4.1832" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 322.943651][ T28] audit: type=1400 audit(1764855982.988:552): avc: denied { read } for pid=6466 comm="syz.4.1832" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 322.964084][ T28] audit: type=1400 audit(1764855982.997:553): avc: denied { ioctl } for pid=6466 comm="syz.4.1832" path="/dev/uinput" dev="devtmpfs" ino=262 ioctlcmd=0x942e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 322.993948][ T28] audit: type=1400 audit(1764855983.006:554): avc: denied { mount } for pid=6466 comm="syz.4.1832" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 323.016983][ T28] audit: type=1400 audit(1764855983.099:555): avc: denied { bpf } for pid=6469 comm="syz.3.1833" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 323.037776][ T28] audit: type=1400 audit(1764855983.099:556): avc: denied { prog_load } for pid=6469 comm="syz.3.1833" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 323.067479][ T28] audit: type=1400 audit(1764855983.099:557): avc: denied { perfmon } for pid=6469 comm="syz.3.1833" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 323.088766][ T28] audit: type=1400 audit(1764855983.108:558): avc: denied { read } for pid=6469 comm="syz.3.1833" path="/dev/fuse" dev="devtmpfs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 323.120136][ T28] audit: type=1400 audit(1764855983.117:559): avc: denied { write } for pid=6469 comm="syz.3.1833" path="/dev/fuse" dev="devtmpfs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 323.158967][ T6486] fuse: Bad value for 'fd' [ 323.208403][ T6492] netlink: 'syz.2.1839': attribute type 16 has an invalid length. [ 323.225964][ T6492] netlink: 64138 bytes leftover after parsing attributes in process `syz.2.1839'. [ 323.274429][ T6494] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1837'. [ 323.883409][ T6499] netlink: 'syz.4.1844': attribute type 16 has an invalid length. [ 323.926805][ T6499] netlink: 64138 bytes leftover after parsing attributes in process `syz.4.1844'. [ 323.939033][ T6502] fuse: Bad value for 'fd' [ 324.196080][ T6517] fuse: Bad value for 'fd' [ 324.209032][ T6506] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 324.366848][ T6525] loop3: detected capacity change from 0 to 256 [ 325.780115][ T6536] netlink: 'syz.0.1857': attribute type 16 has an invalid length. [ 325.812159][ T6536] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.1857'. [ 325.828078][ T421] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 325.906540][ T6548] fuse: Bad value for 'fd' [ 325.969883][ T6555] netlink: 'syz.3.1861': attribute type 16 has an invalid length. [ 325.977877][ T6555] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.1861'. [ 325.979108][ T6554] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 326.040831][ T421] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 326.051104][ T421] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 326.061145][ T421] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 326.070358][ T421] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 326.078500][ T421] usb 2-1: SerialNumber: syz [ 326.085300][ T421] usb 2-1: 0:2 : does not exist [ 326.314529][ T421] usb 2-1: USB disconnect, device number 18 [ 326.969622][ T6563] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 327.107626][ T6583] bridge0: port 3(vlan2) entered blocking state [ 327.113993][ T6583] bridge0: port 3(vlan2) entered disabled state [ 327.324544][ T6580] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1868'. [ 327.377470][ T6590] loop4: detected capacity change from 0 to 4096 [ 327.387006][ T6590] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 327.415339][ T6594] netlink: 'syz.1.1878': attribute type 16 has an invalid length. [ 327.423527][ T6594] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.1878'. [ 327.478302][ T287] EXT4-fs (loop4): unmounting filesystem. [ 327.919222][ T6602] fuse: Bad value for 'fd' [ 327.934370][ T6598] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 328.302148][ T6621] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1890'. [ 328.312124][ T6621] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1890'. [ 328.336062][ T28] kauditd_printk_skb: 46 callbacks suppressed [ 328.336080][ T28] audit: type=1400 audit(1764855988.230:606): avc: denied { mounton } for pid=6622 comm="syz.3.1891" path="/339/file0" dev="tmpfs" ino=1916 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 328.493026][ T6619] loop1: detected capacity change from 0 to 40427 [ 328.508124][ T6619] F2FS-fs (loop1): fault_type options not supported [ 328.514951][ T6619] F2FS-fs (loop1): Unrecognized mount option "noflush_m" or missing value [ 328.576991][ T6631] fuse: Bad value for 'fd' [ 328.591157][ T6632] loop3: detected capacity change from 0 to 16 [ 328.616624][ T6632] erofs: (device loop3): mounted with root inode @ nid 36. [ 328.733690][ T6631] fuse: Bad value for 'fd' [ 328.995165][ T6636] fuse: Bad value for 'fd' [ 329.125256][ T6631] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1894'. [ 329.701132][ T6640] fuse: Bad value for 'fd' [ 329.872347][ T6651] netlink: 'syz.3.1899': attribute type 16 has an invalid length. [ 329.952212][ T6651] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.1899'. [ 330.592593][ T28] audit: type=1400 audit(1764855990.316:607): avc: denied { create } for pid=6618 comm="syz.1.1889" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 330.612104][ T28] audit: type=1400 audit(1764855990.316:608): avc: denied { ioctl } for pid=6618 comm="syz.1.1889" path="socket:[35774]" dev="sockfs" ino=35774 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 331.099944][ T28] audit: type=1400 audit(1764855990.556:609): avc: denied { create } for pid=6618 comm="syz.1.1889" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 331.132674][ T6664] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1902'. [ 331.185723][ T6664] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1902'. [ 331.223262][ T28] audit: type=1400 audit(1764855990.898:610): avc: denied { mounton } for pid=6669 comm="syz.0.1905" path="/451/file0" dev="tmpfs" ino=2508 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 331.250889][ T6670] fuse: Bad value for 'fd' [ 331.518799][ T28] audit: type=1400 audit(1764855991.166:611): avc: denied { sqpoll } for pid=6665 comm="syz.4.1903" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 331.525532][ T6668] loop3: detected capacity change from 0 to 4096 [ 331.541573][ T6678] fuse: Bad value for 'fd' [ 331.576538][ T28] audit: type=1400 audit(1764855991.230:612): avc: denied { create } for pid=6665 comm="syz.4.1903" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 331.598655][ T28] audit: type=1400 audit(1764855991.230:613): avc: denied { map } for pid=6665 comm="syz.4.1903" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=35778 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 331.628747][ T6668] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 331.742536][ T6690] loop1: detected capacity change from 0 to 512 [ 331.750874][ T6690] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 333.222657][ T28] audit: type=1400 audit(1764855991.230:614): avc: denied { read write } for pid=6665 comm="syz.4.1903" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=35778 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 333.369690][ T6690] EXT4-fs (loop1): orphan cleanup on readonly fs [ 333.380665][ T6690] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.1909: bg 0: block 248: padding at end of block bitmap is not set [ 333.397434][ T6690] Quota error (device loop1): write_blk: dquota write failed [ 333.405065][ T6690] EXT4-fs error (device loop1): ext4_acquire_dquot:6803: comm syz.1.1909: Failed to acquire dquot type 1 [ 333.418406][ T6690] EXT4-fs (loop1): 1 truncate cleaned up [ 333.424873][ T6690] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 333.473108][ T285] EXT4-fs (loop3): unmounting filesystem. [ 333.742157][ T6700] netlink: 'syz.2.1914': attribute type 16 has an invalid length. [ 333.750399][ T2271] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 333.834813][ T6700] netlink: 64138 bytes leftover after parsing attributes in process `syz.2.1914'. [ 333.988550][ T6705] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1915'. [ 333.997768][ T2271] usb 2-1: Using ep0 maxpacket: 32 [ 334.004885][ T2271] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 334.053648][ T2271] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 334.071164][ T6706] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1915'. [ 334.142455][ T2271] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 334.212121][ T2271] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.286326][ T2271] usb 2-1: config 0 descriptor?? [ 334.294609][ T2271] hub 2-1:0.0: bad descriptor, ignoring hub [ 334.301035][ T2271] hub: probe of 2-1:0.0 failed with error -5 [ 334.308027][ T2271] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 334.363791][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 334.363807][ T28] audit: type=1400 audit(1764855993.796:615): avc: denied { execute } for pid=6709 comm="syz.0.1916" name="file0" dev="tmpfs" ino=2529 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 334.392288][ T28] audit: type=1400 audit(1764855993.796:616): avc: denied { execute_no_trans } for pid=6709 comm="syz.0.1916" path="/455/file0" dev="tmpfs" ino=2529 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 334.417057][ T28] audit: type=1400 audit(1764855993.796:617): avc: denied { relabelfrom } for pid=6709 comm="syz.0.1916" name="NETLINK" dev="sockfs" ino=35817 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 334.458694][ T28] audit: type=1400 audit(1764855993.796:618): avc: denied { relabelto } for pid=6709 comm="syz.0.1916" name="NETLINK" dev="sockfs" ino=35817 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=netlink_netfilter_socket permissive=1 [ 334.528577][ T6711] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1916'. [ 334.601913][ T28] audit: type=1400 audit(1764855994.018:619): avc: denied { create } for pid=6714 comm="syz.2.1917" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 334.631157][ T6720] fuse: Bad value for 'fd' [ 334.646921][ T6722] fuse: Bad value for 'fd' [ 334.663976][ T6724] fuse: Bad value for 'fd' [ 334.871438][ T6728] device bridge0 entered promiscuous mode [ 334.883632][ T6728] bridge0: port 3(vlan2) entered blocking state [ 334.889954][ T6728] bridge0: port 3(vlan2) entered disabled state [ 334.905311][ T6728] device bridge0 left promiscuous mode [ 335.119931][ T6730] loop3: detected capacity change from 0 to 256 [ 335.145961][ T6730] FAT-fs (loop3): Directory bread(block 64) failed [ 335.152873][ T6730] FAT-fs (loop3): Directory bread(block 65) failed [ 335.159665][ T6730] FAT-fs (loop3): Directory bread(block 66) failed [ 335.166471][ T6730] FAT-fs (loop3): Directory bread(block 67) failed [ 335.173189][ T6730] FAT-fs (loop3): Directory bread(block 68) failed [ 335.179936][ T6730] FAT-fs (loop3): Directory bread(block 69) failed [ 335.186744][ T6730] FAT-fs (loop3): Directory bread(block 70) failed [ 335.193380][ T6730] FAT-fs (loop3): Directory bread(block 71) failed [ 335.200688][ T6730] FAT-fs (loop3): Directory bread(block 72) failed [ 335.207529][ T6730] FAT-fs (loop3): Directory bread(block 73) failed [ 335.681554][ T284] EXT4-fs (loop1): unmounting filesystem. [ 335.779332][ T6743] netlink: 'syz.1.1928': attribute type 16 has an invalid length. [ 335.800710][ T6743] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.1928'. [ 335.812119][ T794] usb 2-1: USB disconnect, device number 19 [ 335.950051][ T6747] netlink: 88 bytes leftover after parsing attributes in process `syz.4.1929'. [ 336.105688][ T6757] fuse: Bad value for 'fd' [ 336.164174][ T28] audit: type=1400 audit(1764855995.457:620): avc: denied { setopt } for pid=6758 comm="syz.0.1934" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 336.190061][ T28] audit: type=1400 audit(1764855995.467:621): avc: denied { connect } for pid=6758 comm="syz.0.1934" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 336.286559][ T6768] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1935'. [ 336.380112][ T6769] loop3: detected capacity change from 0 to 4096 [ 336.408457][ T6769] EXT4-fs (loop3): Test dummy encryption mode enabled [ 336.445797][ T6769] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 336.659013][ T28] audit: type=1400 audit(1764855995.919:622): avc: denied { setopt } for pid=6771 comm="syz.1.1937" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 336.688282][ T28] audit: type=1400 audit(1764855995.937:623): avc: denied { map } for pid=6771 comm="syz.1.1937" path="socket:[36764]" dev="sockfs" ino=36764 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 336.733015][ T28] audit: type=1400 audit(1764855995.937:624): avc: denied { read } for pid=6771 comm="syz.1.1937" path="socket:[36764]" dev="sockfs" ino=36764 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 336.759953][ T6772] loop1: detected capacity change from 0 to 256 [ 337.206682][ T6782] loop1: detected capacity change from 0 to 4096 [ 337.352299][ T6782] EXT4-fs (loop1): Test dummy encryption mode enabled [ 337.426003][ T6782] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 337.434510][ T6782] System zones: 0-5 [ 337.485567][ T6782] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 338.085305][ T284] EXT4-fs (loop1): unmounting filesystem. [ 338.630202][ T6795] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1943'. [ 338.640603][ T6795] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1943'. [ 338.668956][ T6798] loop1: detected capacity change from 0 to 256 [ 339.421942][ T6810] netlink: 'syz.4.1948': attribute type 27 has an invalid length. [ 339.524903][ T6814] netlink: 'syz.0.1947': attribute type 16 has an invalid length. [ 339.571359][ T6815] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6815 comm=syz.4.1948 [ 339.659728][ T6814] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.1947'. [ 339.732020][ T6815] loop4: detected capacity change from 0 to 256 [ 339.908353][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 339.908373][ T28] audit: type=1400 audit(1764855998.910:626): avc: denied { append } for pid=6797 comm="syz.1.1944" name="001" dev="devtmpfs" ino=182 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 340.004887][ T28] audit: type=1400 audit(1764855998.910:627): avc: denied { read } for pid=6797 comm="syz.1.1944" name="usbmon7" dev="devtmpfs" ino=180 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 340.056264][ T28] audit: type=1400 audit(1764855998.910:628): avc: denied { open } for pid=6797 comm="syz.1.1944" path="/dev/usbmon7" dev="devtmpfs" ino=180 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 340.080364][ T28] audit: type=1400 audit(1764855998.910:629): avc: denied { ioctl } for pid=6797 comm="syz.1.1944" path="/dev/usbmon7" dev="devtmpfs" ino=180 ioctlcmd=0x920a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 340.183796][ T285] EXT4-fs (loop3): unmounting filesystem. [ 340.275187][ T28] audit: type=1400 audit(1764855999.251:630): avc: denied { audit_write } for pid=6809 comm="syz.4.1948" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 340.303184][ T28] audit: type=1107 audit(1764855999.251:631): pid=6809 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 340.465366][ T6836] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1954'. [ 340.501260][ T6836] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1954'. [ 340.528917][ T6832] 9pnet: Could not find request transport: fd0x0000000000000003 [ 340.994430][ T6851] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1958'. [ 341.886264][ T6848] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1956'. [ 342.267884][ T6858] loop4: detected capacity change from 0 to 256 [ 342.283341][ T6861] netlink: 'syz.3.1962': attribute type 16 has an invalid length. [ 342.305223][ T28] audit: type=1400 audit(1764856001.115:632): avc: denied { mount } for pid=6855 comm="syz.4.1961" name="/" dev="loop4" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 342.305566][ T6861] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.1962'. [ 343.291605][ T6867] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1960'. [ 343.601280][ T6874] loop1: detected capacity change from 0 to 256 [ 343.717880][ T28] audit: type=1326 audit(1764856002.426:633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6855 comm="syz.4.1961" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe4d458f749 code=0x0 [ 343.907582][ T6881] bridge0: port 3(vlan2) entered blocking state [ 343.913930][ T6881] bridge0: port 3(vlan2) entered disabled state [ 344.002844][ T6882] FAULT_INJECTION: forcing a failure. [ 344.002844][ T6882] name failslab, interval 1, probability 0, space 0, times 0 [ 344.019556][ T6882] CPU: 0 PID: 6882 Comm: syz.4.1961 Tainted: G W syzkaller #0 [ 344.028459][ T6882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 344.038554][ T6882] Call Trace: [ 344.041866][ T6882] [ 344.044823][ T6882] __dump_stack+0x21/0x24 [ 344.049185][ T6882] dump_stack_lvl+0xee/0x150 [ 344.053804][ T6882] ? __cfi_dump_stack_lvl+0x8/0x8 [ 344.058860][ T6882] ? ____fput+0x15/0x20 [ 344.063050][ T6882] ? exit_to_user_mode_loop+0x9b/0xb0 [ 344.068456][ T6882] ? exit_to_user_mode_prepare+0x87/0xd0 [ 344.074132][ T6882] ? syscall_exit_to_user_mode+0x1a/0x30 [ 344.079900][ T6882] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 344.086011][ T6882] dump_stack+0x15/0x24 [ 344.090197][ T6882] should_fail_ex+0x3d4/0x520 [ 344.094919][ T6882] __should_failslab+0xac/0xf0 [ 344.099720][ T6882] ? tracepoint_probe_unregister+0x1e6/0x8b0 [ 344.105735][ T6882] should_failslab+0x9/0x20 [ 344.110283][ T6882] __kmem_cache_alloc_node+0x3d/0x2c0 [ 344.115690][ T6882] ? __cfi_mutex_lock+0x10/0x10 [ 344.120569][ T6882] ? delete_node+0x2f4/0xa60 [ 344.125190][ T6882] ? tracepoint_probe_unregister+0x1e6/0x8b0 [ 344.131199][ T6882] __kmalloc+0xa1/0x1e0 [ 344.135392][ T6882] ? __cfi___bpf_trace_sched_switch+0x10/0x10 [ 344.141496][ T6882] tracepoint_probe_unregister+0x1e6/0x8b0 [ 344.147341][ T6882] bpf_probe_unregister+0x61/0x70 [ 344.152402][ T6882] bpf_raw_tp_link_release+0x63/0x90 [ 344.157714][ T6882] bpf_link_free+0x13a/0x390 [ 344.162342][ T6882] ? bpf_link_put_deferred+0x20/0x20 [ 344.167660][ T6882] ? security_file_free+0xd8/0xf0 [ 344.172721][ T6882] bpf_link_release+0x15f/0x170 [ 344.177598][ T6882] ? __cfi_bpf_link_release+0x10/0x10 [ 344.183037][ T6882] __fput+0x1fc/0x8f0 [ 344.187143][ T6882] ____fput+0x15/0x20 [ 344.191163][ T6882] task_work_run+0x1db/0x240 [ 344.195821][ T6882] ? __cfi_task_work_run+0x10/0x10 [ 344.200963][ T6882] ? __cfi___close_range+0x10/0x10 [ 344.206105][ T6882] exit_to_user_mode_loop+0x9b/0xb0 [ 344.209134][ T6884] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 344.211326][ T6882] exit_to_user_mode_prepare+0x87/0xd0 [ 344.224808][ T6882] syscall_exit_to_user_mode+0x1a/0x30 [ 344.230337][ T6882] do_syscall_64+0x58/0xa0 [ 344.234812][ T6882] ? clear_bhb_loop+0x30/0x80 [ 344.239527][ T6882] ? clear_bhb_loop+0x30/0x80 [ 344.244220][ T6882] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 344.250123][ T6882] RIP: 0033:0x7fe4d458f749 [ 344.254567][ T6882] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 344.274195][ T6882] RSP: 002b:00007fe4d54a4038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 344.282648][ T6882] RAX: 0000000000000000 RBX: 00007fe4d47e6180 RCX: 00007fe4d458f749 [ 344.290630][ T6882] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000000 [ 344.298608][ T6882] RBP: 00007fe4d54a4090 R08: 0000000000000000 R09: 0000000000000000 [ 344.306589][ T6882] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 344.314561][ T6882] R13: 00007fe4d47e6218 R14: 00007fe4d47e6180 R15: 00007ffd58950998 [ 344.322547][ T6882] [ 344.326344][ T91] CFI failure at __traceiter_sched_switch+0x9b/0xd0 (target: tp_stub_func+0x0/0x10; expected type: 0xee1f7a69) [ 344.327089][ T6882] CFI failure at __traceiter_sched_switch+0x9b/0xd0 (target: tp_stub_func+0x0/0x10; expected type: 0xee1f7a69) [ 344.338159][ T91] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 344.355905][ T91] CPU: 1 PID: 91 Comm: klogd Tainted: G W syzkaller #0 [ 344.364230][ T91] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 344.374284][ T91] RIP: 0010:__traceiter_sched_switch+0x9b/0xd0 [ 344.380461][ T91] Code: 80 3c 30 00 74 05 e8 84 86 69 00 49 8b 7d 08 44 89 e6 48 8b 55 c8 48 8b 4d c0 44 8b 45 d4 41 ba 97 85 e0 11 45 03 57 fc 74 02 <0f> 0b 41 ff d7 48 83 c3 18 48 89 d8 48 c1 e8 03 42 80 3c 30 00 74 [ 344.400075][ T91] RSP: 0018:ffffc900009d7770 EFLAGS: 00010096 [ 344.406146][ T91] RAX: 1ffff1102127b3c6 RBX: ffff8881093d9e28 RCX: ffff88811de4e540 [ 344.414116][ T91] RDX: ffff88810f8fbcc0 RSI: 0000000000000000 RDI: ffffc9000fb19000 [ 344.422172][ T91] RBP: ffffc900009d77b0 R08: 0000000000000001 R09: fffffbfff0ee4ef6 [ 344.430303][ T91] R10: 00000000b720eca3 R11: 1ffffffff0ee4ef5 R12: 0000000000000000 [ 344.438267][ T91] R13: ffff8881093d9e28 R14: dffffc0000000000 R15: ffffffff817146d0 [ 344.446235][ T91] FS: 00007f8b45d46c80(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 344.455168][ T91] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 344.461755][ T91] CR2: 0000001b2eb1cff8 CR3: 000000010f8cc000 CR4: 00000000003506a0 [ 344.469741][ T91] DR0: 0000000000000008 DR1: 0000000000000002 DR2: 0000000000000081 [ 344.477708][ T91] DR3: ffffffffefffff15 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 344.485759][ T91] Call Trace: [ 344.489031][ T91] [ 344.491962][ T91] __schedule+0x1263/0x14e0 [ 344.496496][ T91] ? __sched_text_start+0x8/0x8 [ 344.501351][ T91] ? avc_has_perm+0x158/0x240 [ 344.506028][ T91] schedule+0xbd/0x170 [ 344.510097][ T91] schedule_timeout+0xa6/0x2e0 [ 344.514852][ T91] ? __cfi_schedule_timeout+0x10/0x10 [ 344.520220][ T91] ? _raw_spin_unlock_irqrestore+0x5a/0x80 [ 344.526026][ T91] ? prepare_to_wait_exclusive+0x191/0x1d0 [ 344.531831][ T91] unix_wait_for_peer+0x1e5/0x2e0 [ 344.536854][ T91] ? unix_find_other+0x880/0x880 [ 344.541793][ T91] ? __cfi_autoremove_wake_function+0x10/0x10 [ 344.547856][ T91] ? __cfi__raw_spin_lock+0x10/0x10 [ 344.553048][ T91] ? security_unix_may_send+0x8c/0xb0 [ 344.558413][ T91] unix_dgram_sendmsg+0xed4/0x16d0 [ 344.563527][ T91] ? __cfi_unix_dgram_sendmsg+0x10/0x10 [ 344.569071][ T91] ? security_socket_sendmsg+0x93/0xb0 [ 344.574537][ T91] __sys_sendto+0x464/0x5e0 [ 344.579079][ T91] ? __cfi_autoremove_wake_function+0x10/0x10 [ 344.585159][ T91] ? __cfi___sys_sendto+0x10/0x10 [ 344.590200][ T91] ? __cfi_do_syslog+0x10/0x10 [ 344.595049][ T91] __x64_sys_sendto+0xe5/0x100 [ 344.599830][ T91] x64_sys_call+0x83/0x9a0 [ 344.604284][ T91] do_syscall_64+0x4c/0xa0 [ 344.608791][ T91] ? clear_bhb_loop+0x30/0x80 [ 344.613485][ T91] ? clear_bhb_loop+0x30/0x80 [ 344.618164][ T91] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 344.624080][ T91] RIP: 0033:0x7f8b45e96407 [ 344.628490][ T91] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 344.648106][ T91] RSP: 002b:00007ffd65e2c8a0 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 344.656520][ T91] RAX: ffffffffffffffda RBX: 00007f8b45d46c80 RCX: 00007f8b45e96407 [ 344.664501][ T91] RDX: 000000000000003a RSI: 00007ffd65e2c9e0 RDI: 0000000000000003 [ 344.672470][ T91] RBP: 00007ffd65e2ce10 R08: 0000000000000000 R09: 0000000000000000 [ 344.680450][ T91] R10: 0000000000004000 R11: 0000000000000202 R12: 00007ffd65e2ce28 [ 344.688538][ T91] R13: 00007ffd65e2c9e0 R14: 000000000000001f R15: 00007ffd65e2c9e0 [ 344.696620][ T91] [ 344.699646][ T91] Modules linked in: [ 344.703639][ T91] ---[ end trace 0000000000000000 ]--- [ 344.703719][ T6882] invalid opcode: 0000 [#2] PREEMPT SMP KASAN [ 344.709092][ T91] RIP: 0010:__traceiter_sched_switch+0x9b/0xd0 [ 344.715159][ T6882] CPU: 0 PID: 6882 Comm: syz.4.1961 Tainted: G D W syzkaller #0 [ 344.721310][ T91] Code: 80 3c 30 00 74 05 e8 84 86 69 00 49 8b 7d 08 44 89 e6 48 8b 55 c8 48 8b 4d c0 44 8b 45 d4 41 ba 97 85 e0 11 45 03 57 fc 74 02 <0f> 0b 41 ff d7 48 83 c3 18 48 89 d8 48 c1 e8 03 42 80 3c 30 00 74 [ 344.730140][ T6882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 344.749741][ T91] RSP: 0018:ffffc900009d7770 EFLAGS: 00010096 [ 344.759794][ T6882] RIP: 0010:__traceiter_sched_switch+0x9b/0xd0 [ 344.765857][ T91] RAX: 1ffff1102127b3c6 RBX: ffff8881093d9e28 RCX: ffff88811de4e540 [ 344.771997][ T6882] Code: 80 3c 30 00 74 05 e8 84 86 69 00 49 8b 7d 08 44 89 e6 48 8b 55 c8 48 8b 4d c0 44 8b 45 d4 41 ba 97 85 e0 11 45 03 57 fc 74 02 <0f> 0b 41 ff d7 48 83 c3 18 48 89 d8 48 c1 e8 03 42 80 3c 30 00 74 [ 344.779964][ T91] RDX: ffff88810f8fbcc0 RSI: 0000000000000000 RDI: ffffc9000fb19000 [ 344.799566][ T6882] RSP: 0018:ffffc900101271b0 EFLAGS: 00010096 [ 344.807533][ T91] RBP: ffffc900009d77b0 R08: 0000000000000001 R09: fffffbfff0ee4ef6 [ 344.813598][ T6882] RAX: 1ffff1102127b3c6 RBX: ffff8881093d9e28 RCX: ffff888114e9e540 [ 344.821564][ T91] R10: 00000000b720eca3 R11: 1ffffffff0ee4ef5 R12: 0000000000000000 [ 344.829549][ T6882] RDX: ffff888116279440 RSI: 0000000000000001 RDI: ffffc9000fb19000 [ 344.837509][ T91] R13: ffff8881093d9e28 R14: dffffc0000000000 R15: ffffffff817146d0 [ 344.845469][ T6882] RBP: ffffc900101271f0 R08: 0000000000000000 R09: fffffbfff0ee4ef6 [ 344.853434][ T91] FS: 00007f8b45d46c80(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 344.861393][ T6882] R10: 00000000b720eca3 R11: 1ffffffff0ee4ef5 R12: 0000000000000001 [ 344.870314][ T91] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 344.878277][ T6882] R13: ffff8881093d9e28 R14: dffffc0000000000 R15: ffffffff817146d0 [ 344.884854][ T91] CR2: 0000001b2eb1cff8 CR3: 000000010f8cc000 CR4: 00000000003506a0 [ 344.892817][ T6882] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 344.900789][ T91] DR0: 0000000000000008 DR1: 0000000000000002 DR2: 0000000000000081 [ 344.909711][ T6882] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 344.917675][ T91] DR3: ffffffffefffff15 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 344.924263][ T6882] CR2: 0000001b2f0c1000 CR3: 0000000006e0f000 CR4: 00000000003506b0 [ 344.932226][ T91] Kernel panic - not syncing: Fatal exception [ 344.940200][ T6882] DR0: 0000000000000008 DR1: 0000000000000002 DR2: 0000000000000081 [ 344.940214][ T6882] DR3: ffffffffefffff15 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 344.940228][ T6882] Call Trace: [ 344.940234][ T6882] [ 344.940245][ T6882] __schedule+0x1263/0x14e0 [ 344.940271][ T6882] ? __cfi_free_unref_page_list+0x10/0x10 [ 344.940298][ T6882] ? __sched_text_start+0x8/0x8 [ 344.940318][ T6882] ? release_pages+0xad1/0xb20 [ 344.940345][ T6882] ? cgroup_rstat_updated+0xf5/0x370 [ 344.940364][ T6882] ? lru_add_drain_cpu+0x383/0x4b0 [ 344.940389][ T6882] ? preempt_schedule+0xa7/0xb0 [ 344.940425][ T6882] preempt_schedule_common+0x9b/0xf0 [ 344.940447][ T6882] preempt_schedule+0xa7/0xb0 [ 344.940468][ T6882] ? __cfi_preempt_schedule+0x10/0x10 [ 344.940488][ T6882] ? __mod_memcg_lruvec_state+0xd4/0x110 [ 344.940516][ T6882] ? unlock_page_memcg+0x115/0x130 [ 344.940534][ T6882] preempt_schedule_thunk+0x16/0x18 [ 344.940560][ T6882] _raw_spin_unlock+0x5f/0x70 [ 344.940580][ T6882] unmap_page_range+0x20da/0x2310 [ 344.940612][ T6882] ? __cfi_unmap_page_range+0x10/0x10 [ 344.940637][ T6882] ? mas_find+0x155/0x370 [ 344.940656][ T6882] unmap_vmas+0x31c/0x430 [ 344.940680][ T6882] ? __cfi_unmap_vmas+0x10/0x10 [ 344.940707][ T6882] ? __cfi_lru_add_drain_cpu+0x10/0x10 [ 344.940734][ T6882] ? __kasan_check_write+0x14/0x20 [ 344.940752][ T6882] exit_mmap+0x263/0xbb0 [ 344.940778][ T6882] ? task_cputime_adjusted+0x220/0x230 [ 344.940805][ T6882] ? __cfi_exit_mmap+0x10/0x10 [ 344.940834][ T6882] ? __cfi_exit_aio+0x10/0x10 [ 344.940853][ T6882] ? uprobe_clear_state+0x2c1/0x320 [ 344.940874][ T6882] __mmput+0x93/0x360 [ 344.940896][ T6882] ? mmput+0x43/0x150 [ 344.940918][ T6882] mmput+0x4b/0x150 [ 344.940939][ T6882] do_exit+0x981/0x2650 [ 344.940963][ T6882] ? do_syscall_64+0x58/0xa0 [ 344.940986][ T6882] ? __cfi_do_exit+0x10/0x10 [ 344.941013][ T6882] ? __kasan_check_write+0x14/0x20 [ 344.941030][ T6882] ? _raw_spin_lock_irq+0x8f/0xe0 [ 344.941050][ T6882] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 344.941071][ T6882] do_group_exit+0x210/0x2d0 [ 344.941096][ T6882] ? __kasan_check_write+0x14/0x20 [ 344.941114][ T6882] get_signal+0x13b5/0x1520 [ 344.941145][ T6882] arch_do_signal_or_restart+0xb0/0x1030 [ 344.941170][ T6882] ? percpu_counter_add_batch+0x13c/0x160 [ 344.941196][ T6882] ? __fput+0x66a/0x8f0 [ 344.941219][ T6882] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 344.941240][ T6882] ? blkcg_maybe_throttle_current+0x1df/0x9f0 [ 344.941269][ T6882] ? __cfi___close_range+0x10/0x10 [ 344.941288][ T6882] exit_to_user_mode_loop+0x7a/0xb0 [ 344.941309][ T6882] exit_to_user_mode_prepare+0x87/0xd0 [ 344.941329][ T6882] syscall_exit_to_user_mode+0x1a/0x30 [ 344.941357][ T6882] do_syscall_64+0x58/0xa0 [ 344.941375][ T6882] ? clear_bhb_loop+0x30/0x80 [ 344.941407][ T6882] ? clear_bhb_loop+0x30/0x80 [ 344.941433][ T6882] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 344.941457][ T6882] RIP: 0033:0x7fe4d458f749 [ 344.941471][ T6882] Code: Unable to access opcode bytes at 0x7fe4d458f71f. [ 344.941481][ T6882] RSP: 002b:00007fe4d54a4038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 344.941500][ T6882] RAX: 0000000000000000 RBX: 00007fe4d47e6180 RCX: 00007fe4d458f749 [ 344.941512][ T6882] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000000 [ 344.941525][ T6882] RBP: 00007fe4d54a4090 R08: 0000000000000000 R09: 0000000000000000 [ 344.941537][ T6882] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 344.941548][ T6882] R13: 00007fe4d47e6218 R14: 00007fe4d47e6180 R15: 00007ffd58950998 [ 344.941566][ T6882] [ 344.941571][ T6882] Modules linked in: [ 344.947632][ T6882] ---[ end trace 0000000000000000 ]--- [ 344.947641][ T6882] RIP: 0010:__traceiter_sched_switch+0x9b/0xd0 [ 344.947663][ T6882] Code: 80 3c 30 00 74 05 e8 84 86 69 00 49 8b 7d 08 44 89 e6 48 8b 55 c8 48 8b 4d c0 44 8b 45 d4 41 ba 97 85 e0 11 45 03 57 fc 74 02 <0f> 0b 41 ff d7 48 83 c3 18 48 89 d8 48 c1 e8 03 42 80 3c 30 00 74 [ 344.947680][ T6882] RSP: 0018:ffffc900009d7770 EFLAGS: 00010096 [ 344.947694][ T6882] RAX: 1ffff1102127b3c6 RBX: ffff8881093d9e28 RCX: ffff88811de4e540 [ 344.947708][ T6882] RDX: ffff88810f8fbcc0 RSI: 0000000000000000 RDI: ffffc9000fb19000 [ 344.947721][ T6882] RBP: ffffc900009d77b0 R08: 0000000000000001 R09: fffffbfff0ee4ef6 [ 344.947734][ T6882] R10: 00000000b720eca3 R11: 1ffffffff0ee4ef5 R12: 0000000000000000 [ 344.947746][ T6882] R13: ffff8881093d9e28 R14: dffffc0000000000 R15: ffffffff817146d0 [ 344.947761][ T6882] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 344.947777][ T6882] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 344.947790][ T6882] CR2: 0000001b2f0c1000 CR3: 0000000006e0f000 CR4: 00000000003506b0 [ 344.947806][ T6882] DR0: 0000000000000008 DR1: 0000000000000002 DR2: 0000000000000081 [ 344.947817][ T6882] DR3: ffffffffefffff15 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 346.126645][ T91] Shutting down cpus with NMI [ 346.590179][ T91] Kernel Offset: disabled [ 346.594592][ T91] Rebooting in 86400 seconds..