last executing test programs: 22m31.199556031s ago: executing program 3 (id=67): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x88e, &(0x7f0000000540)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}, {@mblk_io_submit}, {@bh}, {@auto_da_alloc}, {@barrier}, {@test_dummy_encryption}, {@nogrpid}]}, 0x3, 0x445, &(0x7f0000000800)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) fdatasync(r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000080)={'syz0\x00', {0x0, 0x0, 0x2}, 0x51, [0x0, 0x3, 0x80000000, 0x100000, 0x8, 0x100, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3ec7c00, 0x0, 0x3, 0x3, 0x10000000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xff, 0x0, 0x3, 0x0, 0xa9a4, 0x4, 0x0, 0x0, 0x0, 0x2], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xedc0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0xfffffffb, 0x0, 0x0, 0x79, 0xfffffffd, 0x0, 0x0, 0x10, 0x2, 0x47, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x20], [0x0, 0xfffffffc, 0x0, 0x6, 0x0, 0x2, 0x0, 0x5, 0x8, 0x0, 0x0, 0x4, 0x40000, 0x4, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0xffffffff, 0x89, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0xfffffffe, 0x1, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x351e, 0x0, 0xfffffffd, 0x1, 0x0, 0x6492, 0x8], [0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x200000, 0x0, 0x0, 0x10, 0x0, 0x0, 0x804, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffffffd, 0x0, 0x0, 0x0, 0x40, 0x0, 0xb, 0x0, 0x4, 0xffffffff, 0xfd32, 0x6, 0x0, 0x0, 0x0, 0x2, 0x2000005, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x4, 0x0, 0x0, 0x800, 0x100000]}, 0x45c) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ftruncate(r0, 0x81ff) 22m30.880614977s ago: executing program 3 (id=70): bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c00)=@framed={{}, [@printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={0x0, r3}, 0x18) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) 22m29.937321004s ago: executing program 3 (id=72): r0 = syz_clone(0x8000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x189, 0x0) r2 = syz_open_procfs(r0, &(0x7f0000000000)='map_files\x00') fchdir(r2) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200080, &(0x7f00000000c0)={[{@errors_remount}, {@delalloc}, {@bsdgroups}]}, 0x3, 0x56d, &(0x7f0000000c00)="$eJzs3c+PG1cdAPDvzP6w86PdBHqAqpAAhYCieLNOG1W9NLmAUFUJUXFAHNJl11ktseMQe0t3icT2bwAJBCf4EzggcUDqiQM3jkgcEFI5IAWIQFkESEYznt04WVtxYq/d7H4+0mR+vHnzfU/O+D0/e+cFcGSdjYjtiJiPiHciYqE4nhRLXOku2Xn3791Z2bl3ZyWJTuftvyd5enYsevJkThTXLEfE178S8e1kf9zW5taN5Xq9drvYX2w3bi22NrcurDeW12prtZvV6uWlyxdfu/RqdWx1PdP45d0vr7/5jd/8+lMf/n77S9/PinWySOutxzh1qz63FyczGxFvHkSwKZgp1vP7Ul7qn+HKwZaHJ5NGxMci4rP5/b8QM/n/TgDgMOt0fhqdhd59AOCwyz7/nywnaSUi0rToBFS6Y3gvxPG03my1z19vbtxc7Y6VnYq59Pp6vXbxdOmP381Pnkuy/aU8LU/P96uP7F+KiNMR8aPSsXy/stKsr06nywMAR96J/Duwov2PiH+V0rRSGSprn2/1AIBnRnkKOQGA6eptxUtTLAcAMDk+xQPA0TNE+1982b994GUBACbD538AOHq0/wBw9Dxp++83ggDwTPvaW29lS2eneP716rubG3PNdy+s1lo3Ko2NlcpK8/atylqzuZY/s6fxUOZjPdtFn6DebN5aeiU23lts11rtxdbm1rVGc+Nm+1r+XO9rtbmJ1g4A6Of0mQ/+kETE9uvH8iV65nLQVsPhlk67AMDUzDzYrJ140sw6CPBMe7rZvv4z9nIAkzdUE553En534GUBpqPvw7zLfTcf9pMnCOJ3xvCRcu6Tw4//75/jGXiWGf+Ho2vmqXK9MfZyAJP3dOP/wGHQ6SSPzvk/v5cEABxKI/yEr/ODcXVCgKl63GTeY/n+HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6ZkxHxnUjSSj4XeJr9m1YqEc9FxKmYS66v12sXI+L5OBMRc6Vsf2nahQYARpT+NSnm/zq38PLJR1Pnk3+X8nVEfO9nb//4veV2+/ZSdvwfe8dLu9OHVR/kG2FeQQBgOJ3SkCfm7Xe1WPd8kL9/787K7nJQhezn7tX4XzEV8crOvTv50k2ZjexgRDnvSxz/ZxKzRZ5yRLwYETNjiL/9fkR8ol/9k3xs5FQx82lv/ChiPzfR+OlD8dM8rbvOOl8fH0NZ4Kj54GpEXOl3/6VxNl/3v//L+TvU6O5e7V5s971vpyf+bBFppk/87J4/O2yMV3771X0HOwvdtPcjXpztFz/Zi58MiP/ykPH/9NKnf/jGgLTOzyPORf/4vbEW241bi63NrQvrjeW12lo5qtXLS5cvvnbp1epiPka9uDtSvd/fXj///KCyZfU/PiB+uW/95/fyfn7I+v/iv+986zMPdkuPxv/i5/q//i/0jd+VtYlfeDhMZ1D85eO/Gjh9dxZ/dUD9H/f6nx+m8hHx4V+2Voc8FQCYgNbm1o3ler12e6SNNHY647jOvo2siMOdvNtdHC3on+MgavGUG3MjV2daG7N7fcXxXvmb2RUnXJ107LUYaeP+pGJN7z0JmIwHN/20SwIAAAAAAAAAAAAAAAwyiT9dmnYdAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOLz+HwAA//+WydIx") quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f0000000200)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r3, 0x0, 0x0) 22m29.401866673s ago: executing program 3 (id=75): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 22m27.311956849s ago: executing program 3 (id=78): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x44, 0x86}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000000e27f000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000b61bdb17", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000950000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) mincore(&(0x7f000018b000/0x3000)=nil, 0x3000, &(0x7f0000000400)=""/53) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@mcast2, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, &(0x7f0000000000)=0xe8) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x3008c94, &(0x7f0000000580)={[{@dioread_lock}, {@journal_dev={'journal_dev', 0x3d, 0x2}}, {@quota}, {@norecovery}, {@auto_da_alloc}, {@noquota}, {@grpquota}, {@barrier_val}, {@grpjquota}, {@jqfmt_vfsold}], [{@euid_lt={'euid<', r4}}, {@context={'context', 0x3d, 'user_u'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@uid_gt={'uid>', r4}}]}, 0x45, 0x7bf, &(0x7f0000000e00)="$eJzs3c9rG1ceAPDvyPLPZNdeWNjNngQLu4EQeZ31Jlso1KWHUmgg0J56aGJkxaSWrWDJITamTSiFXgpt6a295Nyfl9Jrfxx6af+PkhJaJzSlh+Iy+hHLtuRKiS2T5vOBid+beaM333lPb148YymAR1Yu/ScTcSwi3kwixhvrk4gYrKWyETP1cnc31gvpksTm5nM/JLUydzbWC9GyT+pII/P3iPjytYgTmd31VlbXFmZLpeJyIz9ZXbw8WVldO3lpcXa+OF9cOj01PX3qzP/OnN6/WH/6du3o9289/e+PZn559W8fv/FVEjNxtLGtNY79kotc45wMpqdwm6f2u7JD8+nLXRRq6QHZgzwYepQ2zECjVY7FeAzs1T6j/TwyAOCgvBIRm50MdNwCADzUkvr1/4nDPg4AoF+avwe4s7FeaC6H+xuJ/rr1ZESM1ONv3t+sb8k27tmN1O6Djt1Jtt0ZSSJiYh/qz0XEe5+9+EG6xAHdhwRo59r1iLgwkds9/ie7nlno1X/ar55vzeR2bDT+Qf98ns5//t9u/pe5N/+JNvOf4Tbv3fuRS7bnd7//Mzf3oZqO0vnf4y3Ptt1tib9hYqCR+1NtzjeYXLxUKqZj258j4ngMDqf5qT3qOH7719udtrXO/358+6X30/rTn1slMjezw9v3mZutzj5IzK1uXY/4R7Zd/On4P1xr/6TD/Pdcl3U889jr73balsafxttcdsd/sDZvRPyrbftvdcxkz+cTJ2vdYbLZKdr4ZCbGOtWfy261f7qk9Tf/L9APafuP7R3/RNL6vGal65e+97TYNzfGv+hUqLX/t4+/ff8fSp6vpYca667OVqvLUxFDybO715/a2reZb5ZP4z/+z/bv/+b416b/v5C+/oUuT0R2ID6sj5j3E//BSuOf66n9e07EyN2FgU717xF/o/+k7T+9bZ9uxr9uD/BBzh0AAAAAAAAAAAAAAAAAAAAAAAAAdCsTEUcjyeTvpTOZfL7+Hd5/jbFMqVypnrhYXlmai9p3ZU/EYKb5UZfjLZ+HOtX4PPxm/tSO/H8j4i8R8c7waC2fL5RLc4cdPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0HOnw/f+p74Z3FB44jCMEAA7EiAs7ADxqkmz2sA8BAOi3kZ5Kjx7YcQAA/dPb9R8A+CNw/QeAR8/vXP93/hkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9Orc2bPpsvnzxnohzc9dWV1ZKF85OVesLOQXVwr5Qnn5cn6+XJ4vFfOF8mLHF7pW/1Eqly9Px9LK1clqsVKdrKyunV8sryxVz19anJ0vni8O9i0yAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOheZXVtYbZUKi5L7E9iuHFiu9xr4et68XZlNjcPPxyJvRNxrafmfogSMbQ1Soz2f2ACAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeEj8FgAA///+gx9z") 22m25.688411138s ago: executing program 3 (id=81): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x461, 0x4e72, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x20, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x50}}}}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000480)={0x2c, &(0x7f0000000080)={0x40, 0xc, 0x2, {0x2, 0x22}}, 0x0, 0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r5, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1f, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) unshare(0x2c020400) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x20, &(0x7f00000002c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x99}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r7}, 0x10) 22m10.451852372s ago: executing program 32 (id=81): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x461, 0x4e72, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x20, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x50}}}}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000480)={0x2c, &(0x7f0000000080)={0x40, 0xc, 0x2, {0x2, 0x22}}, 0x0, 0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r5, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1f, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) unshare(0x2c020400) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x20, &(0x7f00000002c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x99}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r7}, 0x10) 20m17.421265076s ago: executing program 5 (id=345): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="00008ee60cea9542d2830000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10) r3 = syz_clone(0xc00e4000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000a00)=ANY=[@ANYBLOB="180000000074000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRESHEX=r3, @ANYRESOCT=0x0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x53, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1, 0x7fff0000}]}) flistxattr(r4, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) ioctl$VHOST_VDPA_GET_STATUS(0xffffffffffffffff, 0x8001af71, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@typedef={0x4, 0x0, 0x0, 0x7}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x0, 0x0, 0x8}, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x0, 0x2}]}]}, {0x0, [0x0, 0x0, 0x0, 0xda]}}, &(0x7f0000000340)=""/142, 0x52, 0x35b, 0x1}, 0x20) 20m16.134912948s ago: executing program 5 (id=349): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x88e, &(0x7f0000000540)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}, {@mblk_io_submit}, {@bh}, {@auto_da_alloc}, {@barrier}, {@test_dummy_encryption}, {@nogrpid}]}, 0x3, 0x445, &(0x7f0000000800)="$eJzs3M9rHFUcAPDv7CZt06YmlvqjadVoFYM/kiattQcvioIHBUEP9RiTtMRuG2ki2BI0itSjFLyLR8G/wJNeRD0JXvUuhSK5tIqHldmdSXY3u2k2blzNfj4wyXszb3nvuzNv9715mQTQs0bTH0nEYET8EhFD1Wx9gdHqr9uryzN/rC7PJFEuv/57Uil3a3V5Ji+av+5AnumLKHycxNEm9S5euXphulSau5zlJ5YuvjOxeOXq0/MXp8/PnZ+7NHXmzKmTk8+ennqmI3Gmcd0aeX/h2JGX37z+6szZ62/98FWSx98QR4eMbnbwsXK5w9V118GadNLXxYbQlmK1m0Z/pf8PRTHWT95QvPRRVxsH7KhyuVy+t/XhlTKwiyXR7RYA3ZF/0afz33zbfMDQ0eFH1918vjoBSuO+nW3VI31RyMr0N8xvO2k0Is6u/Pl5usXO3IcAAKjzTTr+earZ+K8QtfeF7srWUIYj4u6IOBQRpyPicETcE1Epe19E3N9m/Y2LJBvHP4Ub2wpsi9Lx33PZ2lb9+C8f/cVwMcsdrMTfn5ybL82dyN6Tsejfm+YnN6nj2xd//rTVsdrxX7ql9edjwawdN/r21r9mdnpp+p/EXOvmhxEjfc3iT9ZWApKIOBIRI9usY/6JL4+1Onbn+JurvCUdWGcqfxHxePX8r0RD/Llk8/XJiX1RmjsxkV8VG/3407XXWtW/3fg7JT3/+5te/2vxDye167WL7ddx7ddPWs5ptnv970neqNv33vTS0uXJiD3JK9VG1+6faig3tV4+jX/sePP+fyjW34mjEZFexA9ExIMR8VDW9ocj4pGIOL5J/N+/8OjbdTvGBtuIf2el8c+2df7XE3uicU/zRPHCd1/XVTocbcSfnv9TldRYtmcrn39badf2rmYAAAD4/ylExGAkhfG1dKEwPl79G/7Dsb9QWlhcevLcwruXZqvPCAxHfyG/0zVUcz90MpvW5/mphvzJ7L7xZ8WBSn58ZqE02+3goccdaNH/U78Vu906YMd5Xgt6l/4PvUv/h96l/0PvatL/Bzbu+qvhkUFgN2j2/f9BF9oB/Psa+r9lP+gh5v/Qu/R/6F36P/SkxYG480PyEhIbElH4TzRj5xP7tvhvLnZZotufTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ3xdwAAAP//FX7vJg==") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) fdatasync(r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0e000000040000000400000009"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000080)={'syz0\x00', {0x0, 0x0, 0x2}, 0x51, [0x0, 0x3, 0x80000000, 0x100000, 0x8, 0x100, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3ec7c00, 0x0, 0x3, 0x3, 0x10000000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xff, 0x0, 0x3, 0x0, 0xa9a4, 0x4, 0x0, 0x0, 0x0, 0x2], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xedc0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0xfffffffb, 0x0, 0x0, 0x79, 0xfffffffd, 0x0, 0x0, 0x10, 0x2, 0x47, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x20], [0x0, 0xfffffffc, 0x0, 0x6, 0x0, 0x2, 0x0, 0x5, 0x8, 0x0, 0x0, 0x4, 0x40000, 0x4, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0xffffffff, 0x89, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0xfffffffe, 0x1, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x351e, 0x0, 0xfffffffd, 0x1, 0x0, 0x6492, 0x8], [0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x200000, 0x0, 0x0, 0x10, 0x0, 0x0, 0x804, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffffffd, 0x0, 0x0, 0x0, 0x40, 0x0, 0xb, 0x0, 0x4, 0xffffffff, 0xfd32, 0x6, 0x0, 0x0, 0x0, 0x2, 0x2000005, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x4, 0x0, 0x0, 0x800, 0x100000]}, 0x45c) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ftruncate(r0, 0x81ff) 20m14.200970442s ago: executing program 5 (id=353): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x9) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0xd, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x18, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x10) munlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, 0x0, &(0x7f0000000740), 0x75}, 0x38) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) sendfile(r4, r3, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000140)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000000}}, {@mblk_io_submit}, {@nodioread_nolock}, {@test_dummy_encryption}, {@nombcache}, {@nodelalloc}, {@minixdf}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}]}, 0x1, 0xbaf, &(0x7f00000017c0)="$eJzs3M1rXFUbAPDn3ny2zftO+vIi1k0jIi2o07SSYotgKxU3LgTdCg3ppIRMP0giNWkWE/0HRF0LbgS1KF3YdTcKbt1o3VpcCEVioyCikTsfSWxmkrSd5Ibk94Mz95w5d+Z5nrlM7j0wNwHsWgPZQxpxICLOJhGF+vNpRHRXe70Rldp+C/OzI7/Pz44ksbj42i9JJBFxd352pPFeSX27rz7ojYhvX0zif++sjjs5PTM+XC6XJurjI1MXLh+ZnJ55ZuzC8PnS+dLFo8efGzo2dHzwxFDbav3jx1M3fnv85Z8qf37617Vf3/84iVPRV59bWUe7DMTA0meyUmdEDLc7WE466vWsrDPpXOdF6SYnBQBAS+mKa7hHohAdsXzxVoivvss1OQAAAKAtFjsiFgEAAIAdLrH+BwAAgB2u8TuAu/OzI42W7y8Sttad0xHRX6t/od5qM51RqW57oysi9t5NYuVtrUntZQ9tICJu/3Dii6zFJt2HvJbKXEQ82uz4J9X6+6t3ca+uP42IwTbEH7hnvN3qf7q7df2n2hA/7/oB2J1unq6dyFaf/9Kl659ocv7rbHLuehB5n/8a138Lq67/luvvaHH99+oGY1z95MMrreay+p+/8dLnjZbFz7YPVdR9uDMX8Vhns/qTpfqTFvWf3WCMwt9XSq3m8q5/8aOIQ9G8/oZk7f9PdGR0rFwarD02jTH3zdBnreLnXX92/Pe2qH+94395gzHeOHPmequ59etPf+5OXq/2uuvPvDU8NTVxNKI7eWX188fqN7S30Nin8R5Z/YefWPv736z+LESl/jlka4G5+jYbv31PzBeuXf1yrfqztV+ex//cAx7/dzcY48mv3zvcam7l+jdrWfzbSW0tDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANaUT0RZIWl/ppWixG7IuI/8fetHxpcuqp0UtvXjyXzUX0R1c6OlYuDUZEoTZOsvHRan95fOye8bMRsT8iPijsqY6LI5fK5/IuHgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgCX7IqIvkrQYEWlELBTStFjMOysAAACg7frzTgAAAADYdNb/AAAAsPNZ/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALDJ9h+8eSuJiMrJPdWW6a7PdeWaGbDZ0rwTAHLTkXcCQG46804AyM19rvFdLsAOlKwz39typqftuQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwfR06cPNWEhGVk3uqLdNdn+tq+oqDW5gdsJnSvBMActOx1mTn1uUBbD1fcdi9mq/xgd0kWWe+d3mfyr9nejYtJwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC2n75qS9JiRKTVfpoWixH/iYj+6EpGx8qlwYj4b0R8X+jqycY9eScNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA201Oz4wPl8ulCR0dnXw7yfZIo9bJ+y8TAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB5mJyeGR8ul0sTk3lnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAORtcnpmfLhcLk1soHP9fnZe0cm7RgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8vNPAAAA///5ZQ4Q") r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r5, 0x80000300, 0x0, 0x0) 20m12.440331242s ago: executing program 5 (id=356): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x9) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0xd, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x18, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00'}, 0x10) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, 0x0, &(0x7f0000000740), 0x75}, 0x38) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000140)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000000}}, {@mblk_io_submit}, {@nodioread_nolock}, {@test_dummy_encryption}, {@nombcache}, {@nodelalloc}, {@minixdf}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}]}, 0x1, 0xbaf, &(0x7f00000017c0)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r1, 0x80000300, 0x0, 0x0) 20m11.815098963s ago: executing program 5 (id=359): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000500000000040000090000000100", @ANYRES32, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) syz_clone(0xc00e4000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x53, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1, 0x7fff0000}]}) flistxattr(r2, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) ioctl$VHOST_VDPA_GET_STATUS(0xffffffffffffffff, 0x8001af71, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@typedef={0x4, 0x0, 0x0, 0x7}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x0, 0x0, 0x8}, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x0, 0x2}]}]}, {0x0, [0x0, 0x0, 0x0, 0xda]}}, &(0x7f0000000340)=""/142, 0x52, 0x35b, 0x1}, 0x20) 20m10.067533563s ago: executing program 5 (id=362): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0xd, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x18, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, 0x0, &(0x7f0000000740), 0x75}, 0x38) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000140)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000000}}, {@mblk_io_submit}, {@nodioread_nolock}, {@test_dummy_encryption}, {@nombcache}, {@nodelalloc}, {@minixdf}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}]}, 0x1, 0xbaf, &(0x7f00000017c0)="$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") r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r3, 0x80000300, 0x0, 0x0) 19m53.836871885s ago: executing program 33 (id=362): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0xd, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x18, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, 0x0, &(0x7f0000000740), 0x75}, 0x38) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000140)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000000}}, {@mblk_io_submit}, {@nodioread_nolock}, {@test_dummy_encryption}, {@nombcache}, {@nodelalloc}, {@minixdf}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}]}, 0x1, 0xbaf, &(0x7f00000017c0)="$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") r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r3, 0x80000300, 0x0, 0x0) 13m29.786370048s ago: executing program 1 (id=1419): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010005000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={0x0}}, 0x80) r4 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = socket(0x10, 0x3, 0x0) write(r8, &(0x7f0000000000)="260000002200470105000007002b1f000a4a51f1ec839cd53400b017ca5b2571e21f34b5ea00", 0x26) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1b002e6c61ac75157292e3a43b444eea737f0000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x4}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r10}, 0x10) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, 0x0, 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x92) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x75, 0xa, 0x0, 0x0, 0xfffffffc, 0x61, 0x11, 0x9c}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e000000080000000000180003801400038010"], 0x44}}, 0x20008000) 13m26.992234256s ago: executing program 1 (id=1424): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x88e, &(0x7f0000000540)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}, {@mblk_io_submit}, {@bh}, {@auto_da_alloc}, {@barrier}, {@test_dummy_encryption}, {@nogrpid}]}, 0x3, 0x445, &(0x7f0000000800)="$eJzs3M9rHFUcAPDv7CZt06YmlvqjadVoFYM/kiattQcvioIHBUEP9RiTtMRuG2ki2BI0itSjFLyLR8G/wJNeRD0JXvUuhSK5tIqHldmdSXY3u2k2blzNfj4wyXszb3nvuzNv9715mQTQs0bTH0nEYET8EhFD1Wx9gdHqr9uryzN/rC7PJFEuv/57Uil3a3V5Ji+av+5AnumLKHycxNEm9S5euXphulSau5zlJ5YuvjOxeOXq0/MXp8/PnZ+7NHXmzKmTk8+ennqmI3Gmcd0aeX/h2JGX37z+6szZ62/98FWSx98QR4eMbnbwsXK5w9V118GadNLXxYbQlmK1m0Z/pf8PRTHWT95QvPRRVxsH7KhyuVy+t/XhlTKwiyXR7RYA3ZF/0afz33zbfMDQ0eFH1918vjoBSuO+nW3VI31RyMr0N8xvO2k0Is6u/Pl5usXO3IcAAKjzTTr+earZ+K8QtfeF7srWUIYj4u6IOBQRpyPicETcE1Epe19E3N9m/Y2LJBvHP4Ub2wpsi9Lx33PZ2lb9+C8f/cVwMcsdrMTfn5ybL82dyN6Tsejfm+YnN6nj2xd//rTVsdrxX7ql9edjwawdN/r21r9mdnpp+p/EXOvmhxEjfc3iT9ZWApKIOBIRI9usY/6JL4+1Onbn+JurvCUdWGcqfxHxePX8r0RD/Llk8/XJiX1RmjsxkV8VG/3407XXWtW/3fg7JT3/+5te/2vxDye167WL7ddx7ddPWs5ptnv970neqNv33vTS0uXJiD3JK9VG1+6faig3tV4+jX/sePP+fyjW34mjEZFexA9ExIMR8VDW9ocj4pGIOL5J/N+/8OjbdTvGBtuIf2el8c+2df7XE3uicU/zRPHCd1/XVTocbcSfnv9TldRYtmcrn39badf2rmYAAAD4/ylExGAkhfG1dKEwPl79G/7Dsb9QWlhcevLcwruXZqvPCAxHfyG/0zVUcz90MpvW5/mphvzJ7L7xZ8WBSn58ZqE02+3goccdaNH/U78Vu906YMd5Xgt6l/4PvUv/h96l/0PvatL/Bzbu+qvhkUFgN2j2/f9BF9oB/Psa+r9lP+gh5v/Qu/R/6F36P/SkxYG480PyEhIbElH4TzRj5xP7tvhvLnZZotufTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ3xdwAAAP//FX7vJg==") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) fdatasync(r0) r1 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0e000000040000000400"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) write$uinput_user_dev(r1, &(0x7f0000000080)={'syz0\x00', {0x0, 0x0, 0x2}, 0x51, [0x0, 0x3, 0x80000000, 0x100000, 0x8, 0x100, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3ec7c00, 0x0, 0x3, 0x3, 0x10000000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xff, 0x0, 0x3, 0x0, 0xa9a4, 0x4, 0x0, 0x0, 0x0, 0x2], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xedc0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0xfffffffb, 0x0, 0x0, 0x79, 0xfffffffd, 0x0, 0x0, 0x10, 0x2, 0x47, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x20], [0x0, 0xfffffffc, 0x0, 0x6, 0x0, 0x2, 0x0, 0x5, 0x8, 0x0, 0x0, 0x4, 0x40000, 0x4, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0xffffffff, 0x89, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0xfffffffe, 0x1, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x351e, 0x0, 0xfffffffd, 0x1, 0x0, 0x6492, 0x8], [0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x200000, 0x0, 0x0, 0x10, 0x0, 0x0, 0x804, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffffffd, 0x0, 0x0, 0x0, 0x40, 0x0, 0xb, 0x0, 0x4, 0xffffffff, 0xfd32, 0x6, 0x0, 0x0, 0x0, 0x2, 0x2000005, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x4, 0x0, 0x0, 0x800, 0x100000]}, 0x45c) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ftruncate(r0, 0x81ff) 13m26.434461445s ago: executing program 1 (id=1427): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="00008ee60cea9542d28300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000440)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1, 0x7fff0000}]}) flistxattr(r2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) ioctl$VHOST_VDPA_GET_STATUS(0xffffffffffffffff, 0x8001af71, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@typedef={0x4, 0x0, 0x0, 0x7}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x0, 0x0, 0x8}, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x0, 0x2}]}]}, {0x0, [0x0, 0x0, 0x0, 0xda]}}, &(0x7f0000000340)=""/142, 0x52, 0x35b, 0x1}, 0x20) 13m25.456794792s ago: executing program 1 (id=1433): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f00000003c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(r5, 0x80087601, &(0x7f0000000080)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00'}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0), 0x1, 0x4fa, &(0x7f00000005c0)="$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") openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) 13m20.978053968s ago: executing program 1 (id=1438): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xb, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200002000000000000000000000008500000027000000850000009e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r1 = gettid() r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="24000000190001000000000000c3b2000a0000000003c8000000000008000600ffffffff"], 0x24}, 0x1, 0x0, 0x0, 0x40080}, 0x0) setpgid(0xffffffffffffffff, r1) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$pppl2tp(r3, &(0x7f0000000180)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x4e23, @broadcast}, 0x0, 0x3, 0x1}}, 0x26) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x800) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00', 0x2}) r5 = socket(0x10, 0x803, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000080)='./file0\x00', 0x400, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x1, 0x5514, &(0x7f0000005d80)="$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") write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) fdatasync(0xffffffffffffffff) 13m17.750858593s ago: executing program 1 (id=1444): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x9) sched_setscheduler(0x0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0xd, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x18, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x50) munlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, 0x0, &(0x7f0000000740), 0x75, r3}, 0x38) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) sendfile(r4, r2, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000140)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000000}}, {@mblk_io_submit}, {@nodioread_nolock}, {@test_dummy_encryption}, {@nombcache}, {@nodelalloc}, {@minixdf}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}]}, 0x1, 0xbaf, &(0x7f00000017c0)="$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") r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r5, 0x80000300, 0x0, 0x0) 13m2.566970112s ago: executing program 34 (id=1444): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x9) sched_setscheduler(0x0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0xd, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x18, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x50) munlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, 0x0, &(0x7f0000000740), 0x75, r3}, 0x38) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) sendfile(r4, r2, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000140)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000000}}, {@mblk_io_submit}, {@nodioread_nolock}, {@test_dummy_encryption}, {@nombcache}, {@nodelalloc}, {@minixdf}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}]}, 0x1, 0xbaf, &(0x7f00000017c0)="$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") r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r5, 0x80000300, 0x0, 0x0) 9.785137353s ago: executing program 6 (id=4170): socket$inet6_udplite(0xa, 0x2, 0x88) r0 = socket$inet6(0xa, 0x3, 0x8000000003c) r1 = socket$inet6(0xa, 0x3, 0x5) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4ea3, 0x0, @loopback}, 0x1c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x9521, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xfff2}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x10, 0x4, 0x8, 0x8}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0x3100, 0x0, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r8 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r8, 0xc0105500, &(0x7f0000000000)={0x80, 0x6, 0x321, 0xffff, 0x4c, 0x101, 0x0}) 6.668497086s ago: executing program 0 (id=4177): syz_usb_connect(0x1, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000000159500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0xfffffffd}, 0x94) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0xfffffffffffffde1) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1}, 0x18) r2 = socket(0x1e, 0x805, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) connect$tipc(r2, &(0x7f0000000000)=@id, 0x10) r7 = socket(0x400000000010, 0x3, 0x0) fsetxattr(r6, &(0x7f0000000040)=@random={'osx.', '@\x00'}, &(0x7f0000000240)='GPL\x00', 0x4, 0x3) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'veth1_vlan\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x10, 0xb}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x3080201}, 0xc, &(0x7f0000000300)={&(0x7f0000001e00)=@deltclass={0xc88, 0x29, 0x800, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x19, 0xf}, {0x3, 0xfff1}, {0xfff1, 0xffe0}}, [@tclass_kind_options=@c_qfq={{0x8}, {0xc, 0x2, [@TCA_QFQ_LMAX={0x8, 0x2, 0x9}]}}, @tclass_kind_options=@c_qfq={{0x8}, {0xc, 0x2, [@TCA_QFQ_WEIGHT={0x8, 0x1, 0xc4}]}}, @TCA_RATE={0x6, 0x5, {0x8, 0x73}}, @TCA_RATE={0x6, 0x5, {0xe4, 0x81}}, @tclass_kind_options=@c_htb={{0x8}, {0xc14, 0x2, [@TCA_HTB_CTAB={0x404, 0x3, [0x1, 0x0, 0x0, 0x1, 0x1, 0x2, 0x1, 0x5, 0x7, 0x9, 0x5, 0x1ff, 0xff, 0x1, 0xffff, 0x3, 0x9, 0x7, 0xff, 0x2, 0x200, 0x2, 0x4, 0x8000, 0x8, 0x8, 0x0, 0x1, 0x2f9, 0xff, 0x8001, 0x2, 0x0, 0x7f, 0x0, 0x80000000, 0x7, 0xfffffffc, 0x6, 0x81, 0x6, 0x39bb0661, 0x4, 0xe, 0x2, 0x4, 0xa961, 0x101, 0x40, 0xb, 0x10000, 0x5, 0x0, 0xcb, 0xe9ea, 0x10, 0x3ff, 0x7, 0x101, 0xa, 0x8, 0x7ca, 0xfff, 0xfffffffb, 0x779d, 0x2, 0xad, 0x2, 0x62, 0x80, 0x7, 0x6, 0x8, 0xe, 0x5, 0x5, 0xbef7, 0xb, 0x7f, 0x80000001, 0x5, 0x10, 0x5, 0x6, 0x5, 0x36, 0x1, 0x7, 0x2, 0x0, 0x2, 0x1ff, 0x4, 0xfffffff9, 0x4, 0xb70, 0x4, 0xd705, 0x3, 0x8, 0xe35a, 0x3, 0x80000000, 0x8, 0x7, 0x80000000, 0x10000, 0x7, 0x0, 0x80, 0x10000, 0xc8, 0x3, 0xffffffff, 0x6, 0x80, 0x58, 0x8, 0x8, 0x1, 0x3ff, 0x5, 0x5, 0x7, 0x6, 0x8, 0x3, 0x6, 0x3, 0xc9b5, 0x8, 0x3, 0x7f, 0x40, 0x100, 0xc, 0x4, 0xf4, 0x9, 0x782, 0x8, 0x3, 0x3, 0x77, 0x80000000, 0x3, 0x5, 0x3, 0x1, 0x3, 0x2, 0x4, 0xffffffff, 0x9, 0x0, 0xfffffff9, 0x1, 0x3, 0x3, 0x4, 0x10001, 0x2, 0x1, 0x80000000, 0xd, 0x2, 0x1ff, 0x400, 0x3f, 0x0, 0x3, 0x1ff, 0xffffffcf, 0x353d, 0x4cd, 0x6, 0xfffffff5, 0x0, 0x7f, 0x5, 0x81, 0x4, 0x35, 0x8, 0x5, 0xdb2, 0x6, 0x2, 0x3, 0x3, 0x100, 0xc, 0x3, 0xc, 0xe03, 0x0, 0x5, 0xa2, 0x80000000, 0x10001, 0x0, 0x80, 0xac91, 0x610, 0x9, 0x67, 0x9, 0x2, 0x5, 0x9, 0x9, 0x2, 0x80000000, 0x9, 0x1, 0x10, 0x9, 0x6, 0x3ff, 0x4, 0x8, 0xe4d, 0x0, 0x3, 0x10001, 0xfff00000, 0x6, 0x8, 0x5, 0x5, 0x9, 0x10001, 0x7fffffff, 0x7, 0x8000, 0xeb7, 0xffff, 0x2, 0x4, 0xb2e, 0x6, 0xcbd, 0x3ff, 0xfffffff7, 0x6, 0x8, 0x0, 0x8, 0x9, 0x4, 0x8, 0x3, 0x7f, 0x0, 0x2, 0x6d48bfb0]}, @TCA_HTB_RTAB={0x404, 0x4, [0x10000, 0x9, 0x100, 0x6, 0xc90, 0x8, 0x5, 0xa5a, 0xd8f5, 0x8, 0xd, 0x651, 0x81, 0xcc0, 0xb79, 0xd, 0xcb07, 0xe06, 0x0, 0x1, 0x10, 0x0, 0xb2, 0x6, 0x7ff, 0x3, 0x1, 0x7, 0x6, 0x2, 0x7fff, 0x80000000, 0xb3a, 0x8, 0x1, 0x7, 0x0, 0x0, 0x7, 0x80000001, 0xfba, 0x5e9595f, 0x6, 0x9, 0xc9, 0x401, 0x9, 0x1, 0x743c, 0x3, 0x200, 0x4, 0x400, 0x7, 0x5e7, 0x4, 0x7, 0x8, 0x0, 0x256a50c9, 0x0, 0x4, 0x9, 0x6, 0x0, 0x6, 0x6, 0xff, 0xa, 0x1, 0x800, 0x1, 0x0, 0x81, 0x9, 0x6, 0x1, 0xfffffff7, 0x7, 0x1, 0x0, 0x8, 0x3, 0x7, 0x9, 0x1c, 0x2, 0xb, 0x6, 0x4dc, 0xfff, 0x72, 0x4, 0x14000, 0xc57c, 0x5, 0x4, 0x4, 0x7, 0x4, 0x9, 0x8, 0x6, 0x1, 0x3, 0x7, 0x1, 0x7f, 0x1000, 0x81, 0x7fffffff, 0x6, 0xc, 0x3b, 0x3, 0xfffffffc, 0xa, 0x2a7c, 0x8, 0x6, 0x8, 0x7, 0x9, 0x3f, 0x833, 0x5, 0x2, 0x2, 0x2, 0x5, 0x0, 0xba, 0x5, 0x9, 0x100, 0x90, 0x4, 0x1ff, 0x5, 0xb, 0x9c53, 0x7, 0x6, 0x8, 0x80000000, 0xfffff9ce, 0xffffffff, 0x0, 0x577, 0x4, 0x20, 0x3, 0x52, 0xff, 0x6, 0x0, 0x824, 0xa, 0x6, 0x0, 0x1, 0xfffffb3b, 0x5, 0xfff, 0x1b3e, 0x8000, 0x81, 0xffffffff, 0x0, 0x7, 0xfffffffd, 0x1e2, 0x7f, 0x4, 0x3, 0xc71c, 0x4, 0x5191, 0x7fff, 0x6, 0xce3, 0x2, 0xc896, 0x7, 0x2, 0x49, 0x1, 0x9, 0x8b, 0x0, 0x9, 0x4, 0xfffffff7, 0x5, 0x401, 0x4c0, 0x400, 0x7, 0x20, 0x40000000, 0x0, 0xf2, 0x9, 0xa85a00, 0x7, 0x7, 0x0, 0x4, 0x6, 0x8, 0x3, 0x3, 0xf, 0x7ff, 0x1, 0x9, 0x1652, 0x0, 0xfffffffa, 0x7f, 0x9, 0x5, 0x2000000, 0x200000, 0x2, 0x100, 0x7fff, 0x6, 0x4f8, 0x5, 0x1, 0x9, 0x6, 0x1000, 0xc, 0xe, 0xfffffff8, 0xffffff6a, 0x7, 0xbf, 0x6, 0xa7, 0x8, 0x5, 0x8000, 0xb5, 0x8, 0x5708, 0x81, 0x80, 0x6c7, 0xfffffff8, 0x800, 0x8, 0x0, 0xffffffff]}, @TCA_HTB_OFFLOAD={0x4}, @TCA_HTB_RTAB={0x404, 0x4, [0xfd4, 0x3, 0x4, 0x9, 0x400, 0x8001, 0x0, 0x11, 0x9, 0x8, 0x6, 0x6, 0x800, 0x3, 0x2, 0x6, 0x10, 0x966f, 0x1, 0x6, 0x7, 0xb, 0x10000, 0x5, 0x401, 0x5, 0x5, 0x7, 0xb, 0xede4, 0x8, 0x7ff, 0xfffff5c8, 0x2, 0x7, 0xffff, 0x200, 0xfffffffd, 0x8, 0x40fb, 0x1, 0x0, 0xd, 0x6, 0x7, 0x6, 0x401, 0x0, 0x8, 0x3, 0x1, 0xfffff001, 0x2, 0x2, 0x7, 0x7ff, 0x8, 0x7, 0x8, 0x4, 0x0, 0xff, 0x5, 0xffffffff, 0x1, 0x7, 0x1, 0x3, 0x5, 0x101, 0x7fff, 0x6, 0x6, 0x10000, 0x4, 0x6, 0x8, 0x9c8, 0x9, 0x8, 0x8, 0xfffffff9, 0x24, 0x9, 0x7, 0x8, 0x0, 0x0, 0x200, 0x101, 0x9, 0x100, 0x9, 0x2, 0x9, 0xffffffff, 0x5, 0x7, 0x9, 0xfff, 0xff, 0x1, 0x792667fd, 0x80000000, 0x7fffffff, 0x1ffe00, 0x1a00, 0x77d4, 0x9, 0x5, 0x9, 0x4, 0x40, 0x10001, 0xef, 0x2, 0x1, 0xfff, 0x3, 0x8, 0xffff8001, 0x0, 0x0, 0x4, 0xfffffff4, 0x0, 0x2, 0x2228, 0x1ff, 0x5, 0x8, 0x1, 0x6, 0x3, 0xfffffff8, 0x98, 0x3, 0xffff, 0x7f, 0x2, 0x2700, 0x7, 0x401, 0x171c4691, 0x6, 0x1, 0x80, 0xfffffffd, 0x4, 0x2, 0x2, 0x5, 0xc0a5000, 0x200, 0x5, 0xf, 0x7db, 0x8, 0x7f, 0x81, 0x6, 0x81, 0x1, 0xa33a, 0x1, 0x7, 0x3, 0x93, 0x6b8, 0x5, 0x3, 0x6, 0x401, 0x8, 0x8001, 0x8000, 0x741, 0xffff, 0x5375, 0x3, 0x8, 0x8000, 0xa, 0x7fff, 0x0, 0x4, 0x0, 0x5, 0x4, 0x7, 0x101, 0x0, 0x2, 0x7, 0x80000000, 0x8, 0xfffffffd, 0x1, 0x7, 0xfffffc38, 0x6, 0x4, 0xb9, 0x40, 0xfffffeff, 0x401, 0x8, 0x5, 0x10000, 0x29ac8264, 0x1, 0x3ff, 0x62, 0x1b8a, 0xb, 0x8, 0xffff6f56, 0x3, 0x6, 0x6, 0x3, 0x400, 0x81, 0x3, 0x6, 0xfffffff7, 0x5, 0x8, 0x5, 0x5, 0x5, 0x80000001, 0x3, 0x9, 0x3, 0x3, 0xff, 0x2, 0x180000, 0x6, 0xfffffff7, 0x8, 0xffff, 0x9, 0x4, 0xfff, 0x4, 0x5, 0xfff, 0x2, 0x8, 0xfffffffc, 0xffffffc0, 0x8, 0xffffffff, 0x7]}]}}, @tclass_kind_options=@c_sfq={0x8}, @TCA_RATE={0x6, 0x5, {0x9, 0x2}}]}, 0xc88}, 0x1, 0x0, 0x0, 0x4000084}, 0x4000000) sendmsg$nl_route_sched(r7, &(0x7f0000003640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000003580)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0xe, 0x7}, {}, {0x7}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0x1, 0x1}}]}}]}, 0x38}}, 0x40) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002ac0)={0x1a, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000001c00000000000095000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2008}, 0x94) 6.602580627s ago: executing program 6 (id=4178): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket(0x10, 0x803, 0x0) fsetxattr$security_selinux(r5, &(0x7f0000000040), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x22, 0x2) 6.518403839s ago: executing program 4 (id=4179): syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101101) syz_open_dev$usbfs(&(0x7f0000000000), 0x48, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000100)='blkio.bfq.io_service_time\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r1, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_driver={0x0, 0x80805513, 0x0}) 6.517881419s ago: executing program 4 (id=4180): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x6, 0xc, &(0x7f00000005c0)=ANY=[@ANYRES8, @ANYRESHEX, @ANYRESHEX], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b000000000000000000000000000400", @ANYRES32=0x0], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) mount$incfs(&(0x7f0000000000)='./bus\x00', 0x0, 0x0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) r6 = fsopen(&(0x7f00000003c0)='virtiofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000800)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf10xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) listen(r2, 0x8) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r3}, 0x18) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) 5.362410368s ago: executing program 7 (id=4184): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = epoll_create(0x3) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000006c0)={0xf6c447fee59251f4}) close_range(r0, r1, 0x0) 5.337301899s ago: executing program 7 (id=4185): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) getsockopt$packet_int(r1, 0x107, 0x11, &(0x7f0000000180), &(0x7f00000001c0)=0x4) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) getsockopt$sock_buf(r4, 0x1, 0x37, 0x0, &(0x7f0000000180)) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x502) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r8}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(r9, 0x4c80, 0xffffffffffffffb6) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r10}, 0x10) r11 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[], 0x3c}, 0x1, 0x2}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) 4.873115717s ago: executing program 4 (id=4186): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_LBT_MODE(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="04"], 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000cc0), r1) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000012c0), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002dbd7000fddbdf251d"], 0x40}, 0x1, 0x0, 0x0, 0x4040}, 0x10010800) sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r2, 0x10, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x31}}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xb}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000001}, 0x24000041) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='sched_switch\x00', r4}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0d00000104000000ee00000007005a12f54cf1a766ac713e440000000000063c5f7ff2d222d0a3f7bff8750a0b45a7b003f9ecd4b1767f19fd87fd54d91857f5e43412f3da1f445bc6c10174c56dd9326c968dbb3560c40f56c914e2f4e90a8715a79491a134cf141892223de863883549c02d4b674ceaef55e002ca86d0a380231eeb7dc4ea367b6339ff7bea5fa856b9b10435cfaa4537b9fa", @ANYRES32=r5, @ANYBLOB="00000100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r6, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)=r5}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r7, &(0x7f0000000000)="12adce59de0750e159eeed01b586d2dcaf607024893c4357740cb010ad9882c007db5451361e2d8cb030014218e2b96b9ae5888ff5a46b06fd33137ea64c5421b5b28e3979bd4056dbbd9c8f5595f62bab", 0x0}, 0x20) 4.800307468s ago: executing program 4 (id=4187): prlimit64(0x0, 0x4, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000000000000000000000008000000000", @ANYRES32=0x0], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000070000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000064024d4713f8c0785707230fcdb7dba700000085000000820000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r5) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB='ya\x00?\b\x00\x00\x00\x00\x00~'], 0x1c}}, 0x4000054) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x40, &(0x7f00000004c0), 0x1, 0x5ae, &(0x7f0000000b80)="$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") r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x6f) bpf$MAP_CREATE(0x800000000000000, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', 0x0}) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYRES16=r8], 0x40}, 0x1, 0x0, 0x0, 0x20000840}, 0x400c000) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r9, {0x2}}}, 0x24}}, 0x0) write$binfmt_elf64(r7, &(0x7f0000000ac0)=ANY=[@ANYBLOB="7f454c4600000006010000000000000003003e000000000003000000000000004000000000000000980100000000000002000000000038000200000002000000000000600300000008000000000000000d0000f0ffffffffec08000000000000f0ffffffffffffff0000000000000000080000000000000003000000cff5ffff800300000000000001000000000000000500000000000000ff"], 0x5b0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000fbff701091fd2406000000e6650000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) close(r7) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) 4.67173217s ago: executing program 2 (id=4188): r0 = syz_open_procfs(0x0, &(0x7f0000005840)='net/snmp6\x00') lseek(r0, 0x1, 0x0) (fail_nth: 1) 4.360200796s ago: executing program 2 (id=4189): r0 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="160000000000000004000000050000000000", @ANYBLOB, @ANYBLOB], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) sendmsg$nl_netfilter(r0, 0x0, 0x8001) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) 4.213832338s ago: executing program 2 (id=4190): r0 = syz_open_procfs(0x0, &(0x7f0000005840)='net/snmp6\x00') lseek(r0, 0x1, 0x0) 4.175504409s ago: executing program 2 (id=4191): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010005000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={0x0}}, 0x80) r4 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = socket(0x10, 0x3, 0x0) write(r8, &(0x7f0000000000)="260000002200470105000007002b1f000a4a51f1ec839cd53400b017ca5b2571e21f34b5ea00", 0x26) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1b002e6c61ac75157292e3a43b444eea737f0000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x4}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r10}, 0x10) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, 0x0, 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x92) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x75, 0xa, 0x0, 0x0, 0xfffffffc, 0x61, 0x11, 0x9c}, [@initr0]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e000000080000000000180003801400038010"], 0x44}}, 0x20008000) 3.847576634s ago: executing program 7 (id=4192): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0a00000004000000ff0f000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000840)={{r0}, &(0x7f0000000700), &(0x7f0000000740)}, 0x20) openat(0xffffffffffffff9c, 0x0, 0x40042, 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00'], 0xb4}}, 0x0) 3.845189325s ago: executing program 6 (id=4193): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket(0x10, 0x803, 0x0) fsetxattr$security_selinux(r5, &(0x7f0000000040), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x22, 0x2) 3.51630581s ago: executing program 7 (id=4194): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000020850000002d00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000040)='percpu_alloc_percpu\x00', r3}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r6}, 0x10) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r7, &(0x7f0000002280)={&(0x7f0000001e40)={0xa, 0x4e24, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="b005000000000000290000003600000000b2"], 0x5b0}, 0x20008001) sendmsg$inet6(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000022c0)="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", 0x2b3}], 0x1}, 0x20000044) 3.460564781s ago: executing program 0 (id=4195): syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x3, &(0x7f0000000000), 0xbc, 0x55a, &(0x7f0000000900)="$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") sched_setscheduler(0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) r5 = dup(0xffffffffffffffff) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x2000, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cache_loose}]}}) write$UHID_INPUT(r6, &(0x7f0000002080)={0xfc, {"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", 0x1000}}, 0x1006) (fail_nth: 1) 1.460263865s ago: executing program 2 (id=4196): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c00000010004b0400f4ed00000000007a000900", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00,'], 0x4c}}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) r1 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000280)={[{@nodiscard}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000000a40)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0b00e900ffffffff010000005a708346705ec27234061e8002753dfa0300000000000000ec3f5976a4cbee5cf1e50000000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES64=r2, @ANYRES64=r2, @ANYRES8=r1], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000680)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x2d) capget(0x0, 0x0) add_key$fscrypt_v1(&(0x7f0000000700), &(0x7f0000000640)={'fscrypt:', @desc4}, 0x0, 0x0, 0xffffffffffffffff) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000062e00f27b8af8ff00000000bfa200000000020000f8ffffffb72000001e000000b70400000000226140009f01b33b0bbb0000850000000317000095000000000000000a6576dfaad034d5c1ca9f07de40ae2aed"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000400)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r9, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r10}, 0x10) r11 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001300)='/proc/timer_list\x00', 0x0, 0x0) preadv(r11, &(0x7f0000001500)=[{&(0x7f0000002980)=""/4084, 0xff4}], 0x1, 0xf73, 0x3) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000011c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9fea01001800000000000000240000002400000006000000000000000000000b03000000000000000000000d00000000040000000000000c02000000000000006100"], &(0x7f00000010c0)=""/217, 0x42, 0xd9, 0x1}, 0x28) pwritev2(r2, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0x1}, {&(0x7f0000000100)="32db5c31a0f567ff12ecbaa1cffdd548d59def7cdf7f693f94ec874635f32324500948c75df769f3a2644e95edc798acbb47510d8d", 0x35}, {&(0x7f0000000140)="b8b3de153a5c52eb19cc77e9920a4beeccb850167f4f32d459af98eafe8853326be1a64817fa0411f6574ba8c1102dfb85f9c20f", 0x34}, {&(0x7f0000000180)="a3612ba1dd2944121fab395111", 0xd}], 0x4, 0xbfd, 0x0, 0x0) r12 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000340)={'bridge0\x00'}) 1.459588305s ago: executing program 4 (id=4197): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002400)=@newtaction={0x84, 0x30, 0xffff, 0x0, 0x0, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0xe, 0x3, 0x4, 0x80000004, 0x4, {0x5, 0x0, 0x8, 0x1, 0x7, 0x1f7}, {0x5, 0x0, 0x6, 0x800, 0x1ff, 0x4}, 0x2, 0x82e, 0x9}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x0, 0x1}}}}]}]}, 0x84}}, 0x0) 1.458772435s ago: executing program 7 (id=4198): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x21081e, &(0x7f0000000100)={[{@grpquota}, {@dioread_lock}, {@grpjquota}]}, 0x1, 0x4ff, &(0x7f0000000ac0)="$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") syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000440)='./file2\x00', 0x6, &(0x7f0000000840)={[{@errors_remount}, {@resuid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@resgid}, {@dioread_lock}, {@jqfmt_vfsv0}]}, 0x3, 0x42f, &(0x7f00000014c0)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0xffffffffffffff9c, &(0x7f0000001240)='./file1\x00', 0x2) openat$dir(0xffffffffffffff9c, 0x0, 0x282201, 0x1b0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x7, 0x4, 0x8, 0x1}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) 1.449847865s ago: executing program 6 (id=4199): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000004c0)}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@func_proto]}, {0x0, [0x5f]}}, 0x0, 0x27, 0x32, 0x1}, 0x28) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02"], 0x50) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x5, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x0, 0x1c, 0x0, 0xffffffffffffffff, 0x6], 0x0, 0x41901}) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 1) 1.449558755s ago: executing program 0 (id=4200): r0 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="160000000000000004000000050000000000", @ANYBLOB, @ANYBLOB], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) sendmsg$nl_netfilter(r0, 0x0, 0x8001) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) 1.332184747s ago: executing program 0 (id=4201): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x6, 0xc, &(0x7f00000005c0)=ANY=[@ANYRES8, @ANYRESHEX, @ANYRESHEX], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b000000000000000000000000000400", @ANYRES32=0x0], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) mount$incfs(&(0x7f0000000000)='./bus\x00', 0x0, 0x0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) r6 = fsopen(&(0x7f00000003c0)='virtiofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000800)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf10xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) capset(&(0x7f0000000500)={0x20080522}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="14000000045f000000e2", @ANYRES32=r2, @ANYBLOB='\x00'/19, @ANYRES32=0xffffffffffffffff, @ANYBLOB="000000000200"/25], 0x50) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x10, 0x80002, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYRES32=r4], 0x1c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000380)={'veth0_to_team\x00'}) r9 = fsopen(&(0x7f0000000080)='sysfs\x00', 0x1) fsconfig$FSCONFIG_SET_BINARY(r9, 0x2, &(0x7f0000000000)='ro\x00', &(0x7f0000000100)="b0", 0x1) sendmsg$nl_route(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000840)=ANY=[@ANYBLOB="540000001d00310a2dbd7000fbdbdf2502000000", @ANYRES32=r7, @ANYBLOB="0200000108000d000100000008000700e0ff0f00080007000500000008000a000500000008000a000180000008000800", @ANYRES32=r7, @ANYBLOB="05000c000c00000064e5b9d844109b52b46751717e0ecb977e99b4138656113ed83c25b6d0bd212057c26138fa5cd8c36eb47b3da4645337c2e6ea5668fcddd82040f4b6acfb21e7f136184411a86180ac8430f973c55d3086b34b697f44de8f5924873d8055756e827d5f0ce25ef923bd6aa8752d9cdccc996d11dedb13548e41e6b5bb3dfb675dd28d64691aef4d120ffcc95e7d75fd7b4a42b1a2eb3d41d9abe771be05bd23a4836f6f672bf13f50f6fd0575bc2636864549f3032bcb033c1afc61fda702164d76fdf563d015ded0f325aafeccf2a80126047038656500000000000000"], 0x54}, 0x1, 0xba01, 0x0, 0x4010}, 0x4000000) r10 = syz_open_dev$char_usb(0xc, 0xb4, 0x8) write$char_usb(r10, &(0x7f00000001c0)="f901a5c066c3a41f1b051fd4b83af564f5bab62252a4eed8cedee8a93a6ef13a5e32459b288b25f9eecb8f8f71d4744fe25e087fecc2c07932920c5327fbb4e83c30e03187c8ed4dde3ae7619559bea6b83be989d780afabb0442857f603018d9beccc97ea68c124607403043ad56246dd43b0e4c015e8", 0x77) 135.043178ms ago: executing program 2 (id=4205): syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f0000000540)=ANY=[], 0x1, 0x551e, &(0x7f00000087c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) linkat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', 0x1400) close(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xe, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) listen(r2, 0x8) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000015000000181100", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) getsockopt$sock_buf(r1, 0x1, 0x1c, &(0x7f0000000740)=""/228, &(0x7f0000000380)=0xe4) 1.87939ms ago: executing program 6 (id=4206): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[], 0x15) r3 = socket$packet(0x11, 0xa, 0x300) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4}, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000240)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x6, 0x88, 0x0, @empty, @broadcast}, @timestamp_reply}}}}, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) close(r5) socket$pppl2tp(0x18, 0x1, 0x1) socket$nl_route(0x10, 0x3, 0x0) connect$pppl2tp(r5, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e22, @private}, 0x2, 0x0, 0x2, 0x3}}, 0x2e) ioctl$PPPIOCSFLAGS(r5, 0x40047459, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000380)='./file0\x00', 0x1008413, &(0x7f0000000300)={[{@resgid={'resgid', 0x3d, 0xee01}}, {@nodelalloc}, {@usrquota}, {@min_batch_time={'min_batch_time', 0x3d, 0xffffffff}}]}, 0x0, 0x526, &(0x7f0000000c00)="$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") r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={0x1, 0x58, &(0x7f00000000c0)}, 0x10) getsockname$packet(r3, 0x0, &(0x7f00000001c0)) sendmsg$ETHTOOL_MSG_TSINFO_GET(r6, 0x0, 0xc040) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f00000012c0)=ANY=[@ANYBLOB="b0"], 0xb0) 0s ago: executing program 7 (id=4207): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000480)=[{0x6, 0x0, 0x0, 0x7ffffffb}]}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) socket$key(0xf, 0x3, 0x2) close_range(r0, 0xffffffffffffffff, 0x0) (fail_nth: 1) kernel console output (not intermixed with test programs): m_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 1305.002554][T14254] usb 8-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1305.013406][T14254] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1305.022447][ T28] audit: type=1400 audit(1753440536.503:2004): avc: denied { unmount } for pid=16141 comm="syz.0.3743" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1305.029460][T16145] loop6: detected capacity change from 0 to 128 [ 1305.043518][T14254] usb 8-1: config 0 descriptor?? [ 1305.057405][ T28] audit: type=1400 audit(1753440536.533:2005): avc: denied { create } for pid=16141 comm="syz.0.3743" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1305.077310][ T28] audit: type=1400 audit(1753440536.533:2006): avc: denied { bind } for pid=16141 comm="syz.0.3743" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1305.213234][T16145] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100) [ 1305.221118][T16145] FAT-fs (loop6): Filesystem has been set read-only [ 1305.227985][T16145] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100) [ 1305.235850][T16145] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100) [ 1305.744377][ T28] audit: type=1400 audit(1753440537.113:2007): avc: denied { connect } for pid=16125 comm="syz.7.3737" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1306.187560][T16164] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1306.448439][T16168] loop6: detected capacity change from 0 to 512 [ 1306.479525][T16168] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 1306.496693][T16168] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 1306.515107][T16168] EXT4-fs (loop6): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 1306.594045][T16160] loop2: detected capacity change from 0 to 40427 [ 1306.604427][T16160] F2FS-fs (loop2): Invalid segment/section count (31, 2328 x 1) [ 1306.612315][T16160] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 1306.621226][T16160] F2FS-fs (loop2): invalid crc value [ 1306.627651][T16168] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 1306.636117][T16168] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=e04ce01c, mo2=0000] [ 1306.644314][T16168] EXT4-fs (loop6): failed to initialize system zone (-117) [ 1306.652767][T16160] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1306.653527][T16168] EXT4-fs (loop6): mount failed [ 1306.715095][T16160] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 1307.207931][T16180] overlayfs: failed to clone upperpath [ 1307.238138][T16160] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 1307.316789][T14254] asix 8-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1307.406722][T14254] asix: probe of 8-1:0.0 failed with error -71 [ 1307.422391][T16189] FAULT_INJECTION: forcing a failure. [ 1307.422391][T16189] name failslab, interval 1, probability 0, space 0, times 0 [ 1307.452990][T14254] usb 8-1: USB disconnect, device number 21 [ 1307.491942][T16189] CPU: 0 PID: 16189 Comm: syz.4.3756 Not tainted 6.1.141-syzkaller-00042-g96160a0e0aa1 #0 [ 1307.501898][T16189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1307.511974][T16189] Call Trace: [ 1307.515278][T16189] [ 1307.518226][T16189] __dump_stack+0x21/0x24 [ 1307.522590][T16189] dump_stack_lvl+0xee/0x150 [ 1307.527218][T16189] ? __cfi_dump_stack_lvl+0x8/0x8 [ 1307.532275][T16189] ? _parse_integer_limit+0x18a/0x1d0 [ 1307.537676][T16189] dump_stack+0x15/0x24 [ 1307.541859][T16189] should_fail_ex+0x3d4/0x520 [ 1307.546570][T16189] __should_failslab+0xac/0xf0 [ 1307.551360][T16189] ? kvmalloc_node+0x294/0x480 [ 1307.556157][T16189] should_failslab+0x9/0x20 [ 1307.560679][T16189] __kmem_cache_alloc_node+0x3d/0x2c0 [ 1307.566063][T16189] ? kstrtouint_from_user+0xf7/0x150 [ 1307.571359][T16189] ? kvmalloc_node+0x294/0x480 [ 1307.576144][T16189] __kmalloc_node+0xa1/0x1e0 [ 1307.580751][T16189] kvmalloc_node+0x294/0x480 [ 1307.585356][T16189] ? __cfi_kvmalloc_node+0x10/0x10 [ 1307.590477][T16189] ? __kasan_check_write+0x14/0x20 [ 1307.595602][T16189] ? proc_fail_nth_write+0x17a/0x1f0 [ 1307.600907][T16189] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 1307.606585][T16189] ? security_file_permission+0x8a/0xb0 [ 1307.612144][T16189] keyctl_update_key+0x61/0x120 [ 1307.617013][T16189] __se_sys_keyctl+0x23f/0xc20 [ 1307.621792][T16189] ? slab_free_freelist_hook+0xc2/0x190 [ 1307.627355][T16189] ? __x64_sys_keyctl+0xd0/0xd0 [ 1307.632226][T16189] ? __cfi_vfs_write+0x10/0x10 [ 1307.637007][T16189] ? __kasan_check_write+0x14/0x20 [ 1307.642148][T16189] ? mutex_unlock+0x89/0x220 [ 1307.646865][T16189] ? __cfi_mutex_unlock+0x10/0x10 [ 1307.651911][T16189] ? __kasan_check_write+0x14/0x20 [ 1307.657043][T16189] ? fput+0x154/0x1a0 [ 1307.661048][T16189] ? ksys_write+0x1eb/0x240 [ 1307.665577][T16189] ? __cfi_ksys_write+0x10/0x10 [ 1307.670454][T16189] __x64_sys_keyctl+0xbf/0xd0 [ 1307.675159][T16189] x64_sys_call+0x71a/0x9a0 [ 1307.679677][T16189] do_syscall_64+0x4c/0xa0 [ 1307.684101][T16189] ? clear_bhb_loop+0x30/0x80 [ 1307.688873][T16189] ? clear_bhb_loop+0x30/0x80 [ 1307.693558][T16189] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1307.699453][T16189] RIP: 0033:0x7fcae398e9a9 [ 1307.703871][T16189] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1307.723564][T16189] RSP: 002b:00007fcae4831038 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 1307.732034][T16189] RAX: ffffffffffffffda RBX: 00007fcae3bb5fa0 RCX: 00007fcae398e9a9 [ 1307.740007][T16189] RDX: 0000200000000540 RSI: 000000003ecdd6a4 RDI: 0000000000000002 [ 1307.747982][T16189] RBP: 00007fcae4831090 R08: 0000000000000000 R09: 0000000000000000 [ 1307.755952][T16189] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 1307.763927][T16189] R13: 0000000000000000 R14: 00007fcae3bb5fa0 R15: 00007ffdfdc4cb78 [ 1307.771912][T16189] [ 1307.795374][T16193] loop6: detected capacity change from 0 to 128 [ 1307.836578][T13065] bio_check_eod: 23343 callbacks suppressed [ 1307.836609][T13065] syz-executor: attempt to access beyond end of device [ 1307.836609][T13065] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1307.861591][T16194] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100) [ 1307.891590][T16197] loop4: detected capacity change from 0 to 2048 [ 1307.903491][T16194] FAT-fs (loop6): Filesystem has been set read-only [ 1308.089774][T16197] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1308.102737][T16194] syz.6.3759: attempt to access beyond end of device [ 1308.102737][T16194] loop6: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 1308.104143][T16197] ext4 filesystem being mounted at /137/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1308.137409][T16194] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100) [ 1308.145477][T16194] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100) [ 1308.160673][T16194] syz.6.3759: attempt to access beyond end of device [ 1308.160673][T16194] loop6: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 1308.174386][ T28] audit: type=1400 audit(1753440539.653:2008): avc: denied { read } for pid=16196 comm="syz.4.3760" name="file0" dev="loop4" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1308.196460][T16194] syz.6.3759: attempt to access beyond end of device [ 1308.196460][T16194] loop6: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 1308.198491][ T28] audit: type=1400 audit(1753440539.683:2009): avc: denied { open } for pid=16196 comm="syz.4.3760" path="/137/file0/file0/file0" dev="loop4" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1308.214131][T16194] syz.6.3759: attempt to access beyond end of device [ 1308.214131][T16194] loop6: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 1308.234186][T16197] SELinux: Context : is not valid (left unmapped). [ 1308.303493][ T28] audit: type=1400 audit(1753440539.743:2010): avc: denied { relabelto } for pid=16196 comm="syz.4.3760" name="rdma.current" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=":" [ 1308.329179][T16194] syz.6.3759: attempt to access beyond end of device [ 1308.329179][T16194] loop6: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 1308.401532][T16194] syz.6.3759: attempt to access beyond end of device [ 1308.401532][T16194] loop6: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 1308.410672][T16213] loop7: detected capacity change from 0 to 256 [ 1308.430705][ T28] audit: type=1400 audit(1753440539.903:2011): avc: denied { create } for pid=16214 comm="syz.0.3766" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1308.440558][T16213] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1308.467942][ T28] audit: type=1400 audit(1753440539.943:2012): avc: denied { write } for pid=16214 comm="syz.0.3766" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1308.493003][T13792] EXT4-fs (loop4): unmounting filesystem. [ 1308.500204][T16219] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3769'. [ 1308.576339][ T28] audit: type=1400 audit(1753440539.973:2013): avc: denied { create } for pid=16218 comm="syz.0.3769" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1308.690125][T16227] loop4: detected capacity change from 0 to 512 [ 1308.715762][T16227] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 1308.810397][T16227] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 1308.851539][ T28] audit: type=1400 audit(1753440540.253:2014): avc: denied { connect } for pid=16212 comm="syz.7.3765" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1309.015194][T16227] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 1309.037660][T16222] loop2: detected capacity change from 0 to 40427 [ 1309.058223][T16222] F2FS-fs (loop2): Invalid segment/section count (31, 2328 x 1) [ 1309.062075][T16227] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 1309.071560][T16222] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 1309.082625][T16227] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=e04ce01c, mo2=0000] [ 1309.091656][T16227] EXT4-fs (loop4): failed to initialize system zone (-117) [ 1309.099067][T16227] EXT4-fs (loop4): mount failed [ 1309.104443][T16222] F2FS-fs (loop2): invalid crc value [ 1309.134219][T16222] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1309.207193][T16222] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 1309.218481][T16222] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 1309.470119][T16250] loop4: detected capacity change from 0 to 1024 [ 1309.476954][T16250] EXT4-fs: Ignoring removed bh option [ 1309.518165][T16250] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c80ce018, mo2=0000] [ 1309.863302][T13065] syz-executor: attempt to access beyond end of device [ 1309.863302][T13065] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1309.892295][T16250] EXT4-fs error (device loop4): ext4_map_blocks:635: inode #3: block 2: comm syz.4.3778: lblock 2 mapped to illegal pblock 2 (length 1) [ 1309.906398][T16250] Quota error (device loop4): qtree_write_dquot: dquota write failed [ 1309.914968][T16250] EXT4-fs error (device loop4): ext4_map_blocks:635: inode #3: block 48: comm syz.4.3778: lblock 0 mapped to illegal pblock 48 (length 1) [ 1309.929216][T16250] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 1309.938019][T16250] EXT4-fs error (device loop4): ext4_acquire_dquot:6801: comm syz.4.3778: Failed to acquire dquot type 0 [ 1309.949470][T16250] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5916: Corrupt filesystem [ 1309.959431][T16250] EXT4-fs error (device loop4): ext4_evict_inode:279: inode #11: comm syz.4.3778: mark_inode_dirty error [ 1309.970881][T16250] EXT4-fs warning (device loop4): ext4_evict_inode:282: couldn't mark inode dirty (err -117) [ 1309.981159][T16250] EXT4-fs (loop4): 1 orphan inode deleted [ 1309.986937][T16250] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1309.999172][ T10] EXT4-fs error (device loop4): ext4_map_blocks:635: inode #3: block 1: comm kworker/u4:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 1310.041595][ T10] EXT4-fs error (device loop4): ext4_release_dquot:6837: comm kworker/u4:1: Failed to release dquot type 0 [ 1310.071979][T16250] EXT4-fs (loop4): re-mounted. Quota mode: writeback. [ 1310.341934][T13792] EXT4-fs (loop4): unmounting filesystem. [ 1310.630980][T16278] loop7: detected capacity change from 0 to 128 [ 1310.673924][T16278] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 1310.691202][T16278] FAT-fs (loop7): Filesystem has been set read-only [ 1310.705190][T16278] syz.7.3787: attempt to access beyond end of device [ 1310.705190][T16278] loop7: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 1310.721518][T16278] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 1310.734580][T16278] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 1310.761212][T16278] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 1310.792044][T16278] syz.7.3787: attempt to access beyond end of device [ 1310.792044][T16278] loop7: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 1310.807590][T16278] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 1310.815955][T16278] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 1310.843372][T16280] loop2: detected capacity change from 0 to 40427 [ 1310.856136][T16280] F2FS-fs (loop2): Invalid segment/section count (31, 2328 x 1) [ 1310.864596][T16280] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 1310.882221][T16280] F2FS-fs (loop2): invalid crc value [ 1310.902097][T16280] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1310.969671][T16280] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 1310.976892][T16280] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 1311.531975][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 1311.531992][ T28] audit: type=1400 audit(1753440543.013:2016): avc: denied { remount } for pid=16299 comm="syz.4.3792" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 1311.677137][T16305] loop7: detected capacity change from 0 to 128 [ 1311.702888][T16305] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 1311.725678][T16305] FAT-fs (loop7): Filesystem has been set read-only [ 1311.740606][T16305] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 1311.758742][T16305] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 1311.776818][T16309] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 1311.793505][T16309] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 1311.811114][T16309] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 1312.478408][T16330] tmpfs: Bad value for 'gid' [ 1312.486421][T16332] FAULT_INJECTION: forcing a failure. [ 1312.486421][T16332] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1312.521474][T16332] CPU: 0 PID: 16332 Comm: syz.2.3804 Not tainted 6.1.141-syzkaller-00042-g96160a0e0aa1 #0 [ 1312.531420][T16332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1312.541494][T16332] Call Trace: [ 1312.544790][T16332] [ 1312.547731][T16332] __dump_stack+0x21/0x24 [ 1312.552096][T16332] dump_stack_lvl+0xee/0x150 [ 1312.556718][T16332] ? __cfi_dump_stack_lvl+0x8/0x8 [ 1312.561774][T16332] dump_stack+0x15/0x24 [ 1312.565949][T16332] should_fail_ex+0x3d4/0x520 [ 1312.570635][T16332] should_fail+0xb/0x10 [ 1312.574795][T16332] should_fail_usercopy+0x1a/0x20 [ 1312.579822][T16332] _copy_from_user+0x1e/0xc0 [ 1312.584419][T16332] ___sys_recvmsg+0x12b/0x510 [ 1312.589106][T16332] ? __sys_recvmsg+0x270/0x270 [ 1312.593871][T16332] ? security_file_permission+0x94/0xb0 [ 1312.599420][T16332] ? __fget_files+0x2d5/0x330 [ 1312.604109][T16332] ? __fdget+0x19c/0x220 [ 1312.608360][T16332] __x64_sys_recvmsg+0x1ed/0x2c0 [ 1312.613301][T16332] ? __cfi___x64_sys_recvmsg+0x10/0x10 [ 1312.618769][T16332] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 1312.624844][T16332] x64_sys_call+0x75/0x9a0 [ 1312.629268][T16332] do_syscall_64+0x4c/0xa0 [ 1312.633682][T16332] ? clear_bhb_loop+0x30/0x80 [ 1312.638361][T16332] ? clear_bhb_loop+0x30/0x80 [ 1312.643038][T16332] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1312.648934][T16332] RIP: 0033:0x7f825698e9a9 [ 1312.653348][T16332] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1312.672955][T16332] RSP: 002b:00007f8257888038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 1312.681370][T16332] RAX: ffffffffffffffda RBX: 00007f8256bb5fa0 RCX: 00007f825698e9a9 [ 1312.689346][T16332] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000000000000008 [ 1312.697322][T16332] RBP: 00007f8257888090 R08: 0000000000000000 R09: 0000000000000000 [ 1312.705293][T16332] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1312.713263][T16332] R13: 0000000000000000 R14: 00007f8256bb5fa0 R15: 00007ffdbf6320a8 [ 1312.721252][T16332] [ 1312.734618][T16334] loop6: detected capacity change from 0 to 1024 [ 1312.772052][T16334] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1312.826706][T16340] loop7: detected capacity change from 0 to 128 [ 1312.881533][T16340] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 1312.914253][T16340] FAT-fs (loop7): Filesystem has been set read-only [ 1312.931475][T16340] bio_check_eod: 30495 callbacks suppressed [ 1312.931495][T16340] syz.7.3806: attempt to access beyond end of device [ 1312.931495][T16340] loop7: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 1312.951189][T16340] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 1312.959360][T16340] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 1312.974958][T16340] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 1313.008249][T16340] syz.7.3806: attempt to access beyond end of device [ 1313.008249][T16340] loop7: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 1313.282388][T16340] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 1313.290347][T16347] syz.7.3806: attempt to access beyond end of device [ 1313.290347][T16347] loop7: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 1313.306814][T16340] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 1313.316894][T16347] syz.7.3806: attempt to access beyond end of device [ 1313.316894][T16347] loop7: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 1313.339553][T16340] syz.7.3806: attempt to access beyond end of device [ 1313.339553][T16340] loop7: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 1313.357627][T16334] syz.6.3805[16334] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1313.357710][T16334] syz.6.3805[16334] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1313.369440][T16340] syz.7.3806: attempt to access beyond end of device [ 1313.369440][T16340] loop7: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 1313.395648][T16334] EXT4-fs error (device loop6): mb_free_blocks:1815: group 0, inode 18: block 113:freeing already freed block (bit 7); block bitmap corrupt. [ 1313.410444][T16340] syz.7.3806: attempt to access beyond end of device [ 1313.410444][T16340] loop7: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 1313.429515][T16340] syz.7.3806: attempt to access beyond end of device [ 1313.429515][T16340] loop7: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 1313.456249][T16340] syz.7.3806: attempt to access beyond end of device [ 1313.456249][T16340] loop7: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 1313.471236][T16340] syz.7.3806: attempt to access beyond end of device [ 1313.471236][T16340] loop7: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 1313.485611][T14837] EXT4-fs (loop6): unmounting filesystem. [ 1313.611258][T16354] loop4: detected capacity change from 0 to 40427 [ 1313.626619][T16354] F2FS-fs (loop4): Invalid segment/section count (31, 2328 x 1) [ 1313.645819][T16354] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 1313.655805][T16354] F2FS-fs (loop4): invalid crc value [ 1313.663006][T16354] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1313.737028][T16365] loop2: detected capacity change from 0 to 128 [ 1313.752914][T16367] loop7: detected capacity change from 0 to 512 [ 1313.759691][T16354] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 1313.767520][T16354] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 1313.775275][T16367] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1313.787798][T16367] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #11: comm syz.7.3814: invalid indirect mapped block 4294967295 (level 1) [ 1313.802342][ T726] usb 7-1: new low-speed USB device number 39 using dummy_hcd [ 1313.810360][T16367] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #11: comm syz.7.3814: invalid indirect mapped block 4294967295 (level 1) [ 1313.810822][T16365] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 1313.824816][T16367] EXT4-fs (loop7): 2 truncates cleaned up [ 1313.839070][ T28] audit: type=1400 audit(1753440545.313:2017): avc: denied { bind } for pid=16370 comm="syz.0.3816" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1313.842927][T16365] FAT-fs (loop2): Filesystem has been set read-only [ 1313.859769][T16367] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 1313.865771][T16365] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 1313.899459][T16365] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 1313.967894][ T6902] EXT4-fs (loop7): unmounting filesystem. [ 1313.986456][ T726] usb 7-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1314.334692][ T726] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1314.363047][ T726] usb 7-1: config 0 descriptor?? [ 1314.872228][T14254] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 1317.365531][T16397] 9pnet: Could not find request transport: fd0x0000000000000005 [ 1317.389908][T16399] tmpfs: Bad value for 'gid' [ 1317.444261][T14254] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1317.463609][T14254] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1317.482581][T14254] usb 5-1: string descriptor 0 read error: -71 [ 1317.505481][T14254] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1317.563549][ T726] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1317.583956][ T726] asix: probe of 7-1:0.0 failed with error -71 [ 1317.585219][T16409] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1317.590217][T14254] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1317.608349][ T726] usb 7-1: USB disconnect, device number 39 [ 1317.631324][T14254] usb 5-1: can't set config #1, error -71 [ 1317.636488][T16405] loop4: detected capacity change from 0 to 8192 [ 1317.648541][T14254] usb 5-1: USB disconnect, device number 59 [ 1317.713997][T16415] loop7: detected capacity change from 0 to 512 [ 1317.732376][T16412] loop6: detected capacity change from 0 to 512 [ 1317.746075][T16415] EXT4-fs (loop7): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 1317.767756][T16405] loop4: detected capacity change from 0 to 2048 [ 1317.775243][T16412] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1317.781828][T16415] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 1317.810845][T16415] EXT4-fs (loop7): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 1317.821792][T16405] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1317.831010][T16412] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #11: comm syz.6.3829: invalid indirect mapped block 4294967295 (level 1) [ 1317.855741][T16405] ext4 filesystem being mounted at /149/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1317.868560][T16415] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 1317.879944][T16412] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #11: comm syz.6.3829: invalid indirect mapped block 4294967295 (level 1) [ 1317.885118][T16415] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=e04ce01c, mo2=0000] [ 1317.898722][ T28] audit: type=1400 audit(1753440549.373:2018): avc: denied { append } for pid=16404 comm="syz.4.3827" name="file0" dev="loop4" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1317.924757][T16405] fs-verity: sha512 using implementation "sha512-avx2" [ 1317.931628][T16412] EXT4-fs (loop6): 2 truncates cleaned up [ 1317.937672][T16412] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1317.938708][T16415] EXT4-fs (loop7): failed to initialize system zone (-117) [ 1317.956807][T16415] EXT4-fs (loop7): mount failed [ 1317.969307][ T28] audit: type=1400 audit(1753440549.413:2019): avc: denied { ioctl } for pid=16404 comm="syz.4.3827" path="/149/file0/file0/file0" dev="loop4" ino=13 ioctlcmd=0x6685 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1317.999236][T16424] loop2: detected capacity change from 0 to 128 [ 1318.012296][T16424] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 1318.020328][ T28] audit: type=1400 audit(1753440549.413:2020): avc: denied { write } for pid=16404 comm="syz.4.3827" name="file0" dev="loop4" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1318.055082][T16424] FAT-fs (loop2): Filesystem has been set read-only [ 1318.062726][T16424] bio_check_eod: 14517 callbacks suppressed [ 1318.062888][T16424] syz.2.3831: attempt to access beyond end of device [ 1318.062888][T16424] loop2: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 1318.083579][T16424] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 1318.091860][T16424] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 1318.121668][T16425] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 1318.139741][T16425] syz.2.3831: attempt to access beyond end of device [ 1318.139741][T16425] loop2: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 1318.166490][T16425] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 1318.178880][T16425] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 1318.195827][T16429] loop7: detected capacity change from 0 to 512 [ 1318.202898][T16424] syz.2.3831: attempt to access beyond end of device [ 1318.202898][T16424] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 1318.220646][T16429] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1318.229550][T16425] syz.2.3831: attempt to access beyond end of device [ 1318.229550][T16425] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 1318.244014][T16424] syz.2.3831: attempt to access beyond end of device [ 1318.244014][T16424] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 1318.259318][T16429] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #11: comm syz.7.3833: invalid indirect mapped block 4294967295 (level 1) [ 1318.280600][T16429] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #11: comm syz.7.3833: invalid indirect mapped block 4294967295 (level 1) [ 1318.296430][T14837] EXT4-fs (loop6): unmounting filesystem. [ 1318.302612][T16425] syz.2.3831: attempt to access beyond end of device [ 1318.302612][T16425] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 1318.324043][T16429] EXT4-fs (loop7): 2 truncates cleaned up [ 1318.334087][T16433] 9pnet: Could not find request transport: fd0x0000000000000005 [ 1318.341969][T16424] syz.2.3831: attempt to access beyond end of device [ 1318.341969][T16424] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 1318.355902][T16429] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 1318.385631][T16424] syz.2.3831: attempt to access beyond end of device [ 1318.385631][T16424] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 1318.414297][T16424] syz.2.3831: attempt to access beyond end of device [ 1318.414297][T16424] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 1318.428407][T16424] syz.2.3831: attempt to access beyond end of device [ 1318.428407][T16424] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 1318.458949][ T6902] EXT4-fs (loop7): unmounting filesystem. [ 1320.072855][ T4496] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1320.593380][ T28] audit: type=1400 audit(1753440552.073:2021): avc: denied { create } for pid=16448 comm="syz.6.3839" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 1320.615654][T13792] EXT4-fs (loop4): unmounting filesystem. [ 1320.693377][ T28] audit: type=1400 audit(1753440552.103:2022): avc: denied { write } for pid=16448 comm="syz.6.3839" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 1320.791703][ T28] audit: type=1400 audit(1753440552.103:2023): avc: denied { create } for pid=16448 comm="syz.6.3839" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1321.224378][ T28] audit: type=1400 audit(1753440552.673:2024): avc: denied { map } for pid=16448 comm="syz.6.3839" path="socket:[67498]" dev="sockfs" ino=67498 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1321.250994][ T28] audit: type=1400 audit(1753440552.673:2025): avc: denied { read write } for pid=16448 comm="syz.6.3839" path="socket:[67498]" dev="sockfs" ino=67498 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1321.282870][ T28] audit: type=1400 audit(1753440552.703:2026): avc: denied { read write } for pid=16438 comm="syz.7.3837" name="event0" dev="devtmpfs" ino=260 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1321.311920][ T28] audit: type=1400 audit(1753440552.703:2027): avc: denied { open } for pid=16438 comm="syz.7.3837" path="/dev/input/event0" dev="devtmpfs" ino=260 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1321.508684][T16468] 9pnet: Could not find request transport: fd0x0000000000000005 [ 1321.533517][T16470] tmpfs: Bad value for 'gid' [ 1322.282554][T16473] overlayfs: missing 'lowerdir' [ 1323.279870][T16476] loop4: detected capacity change from 0 to 4096 [ 1323.286832][T16476] EXT4-fs: Ignoring removed mblk_io_submit option [ 1323.295037][T16476] EXT4-fs (loop4): Test dummy encryption mode enabled [ 1323.307337][T16483] loop2: detected capacity change from 0 to 512 [ 1323.315303][T16483] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 1323.331139][T16476] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1323.340404][T16483] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 1323.350575][T16483] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 1323.378658][T16482] loop7: detected capacity change from 0 to 512 [ 1323.405661][T16482] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1323.425860][T16483] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 1323.439673][T16482] EXT4-fs error (device loop7): ext4_get_branch:178: inode #11: block 4294967295: comm syz.7.3847: invalid block [ 1323.461454][T16483] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=e04ce01c, mo2=0000] [ 1323.481505][T16482] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #11: comm syz.7.3847: invalid indirect mapped block 4294967295 (level 1) [ 1323.501044][T16483] EXT4-fs (loop2): failed to initialize system zone (-117) [ 1323.501895][T16482] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #11: comm syz.7.3847: invalid indirect mapped block 4294967295 (level 1) [ 1323.508666][T16483] EXT4-fs (loop2): mount failed [ 1323.539974][T13792] EXT4-fs (loop4): unmounting filesystem. [ 1323.611725][T16482] EXT4-fs (loop7): 2 truncates cleaned up [ 1323.619511][T16494] loop4: detected capacity change from 0 to 128 [ 1323.623252][T16496] loop2: detected capacity change from 0 to 512 [ 1323.627674][T16482] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 1323.668538][T16496] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1323.681571][T16496] ext4 filesystem being mounted at /180/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1323.771621][T16496] bridge: RTM_NEWNEIGH with unconfigured vlan 2 on bridge0 [ 1323.779329][T16494] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 1323.796498][ T28] audit: type=1400 audit(1753440555.273:2028): avc: denied { create } for pid=16495 comm="syz.2.3852" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 1323.817884][ T6902] EXT4-fs (loop7): unmounting filesystem. [ 1323.825727][T16496] EXT4-fs error (device loop2): ext4_get_first_dir_block:3583: inode #12: comm syz.2.3852: Attempting to read directory block (0) that is past i_size (3) [ 1323.853031][T16494] FAT-fs (loop4): Filesystem has been set read-only [ 1323.857613][ T28] audit: type=1400 audit(1753440555.303:2029): avc: denied { remove_name } for pid=16495 comm="syz.2.3852" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1323.882692][T16494] bio_check_eod: 12497 callbacks suppressed [ 1323.882709][T16494] syz.4.3851: attempt to access beyond end of device [ 1323.882709][T16494] loop4: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 1323.890013][ T28] audit: type=1400 audit(1753440555.303:2030): avc: denied { rename } for pid=16495 comm="syz.2.3852" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1323.903074][T16494] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 1323.927776][ T28] audit: type=1400 audit(1753440555.303:2031): avc: denied { rmdir } for pid=16495 comm="syz.2.3852" name="bus" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 1323.961223][ T28] audit: type=1400 audit(1753440555.303:2032): avc: denied { rename } for pid=16495 comm="syz.2.3852" name="bus" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 1323.983341][T16494] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 1323.993543][T16494] syz.4.3851: attempt to access beyond end of device [ 1323.993543][T16494] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 1324.016048][T13065] EXT4-fs (loop2): unmounting filesystem. [ 1324.061306][ T28] audit: type=1400 audit(1753440555.303:2033): avc: denied { rmdir } for pid=16495 comm="syz.2.3852" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1324.084108][T16494] syz.4.3851: attempt to access beyond end of device [ 1324.084108][T16494] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 1324.093319][T16508] loop6: detected capacity change from 0 to 128 [ 1324.107489][T16494] syz.4.3851: attempt to access beyond end of device [ 1324.107489][T16494] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 1324.121166][T16494] syz.4.3851: attempt to access beyond end of device [ 1324.121166][T16494] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 1324.134673][T16494] syz.4.3851: attempt to access beyond end of device [ 1324.134673][T16494] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 1324.150184][T16494] syz.4.3851: attempt to access beyond end of device [ 1324.150184][T16494] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 1324.154554][T16508] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100) [ 1324.164816][T16494] syz.4.3851: attempt to access beyond end of device [ 1324.164816][T16494] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 1324.187171][T16510] 9pnet_fd: Insufficient options for proto=fd [ 1324.189307][T16494] syz.4.3851: attempt to access beyond end of device [ 1324.189307][T16494] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 1324.193951][T16508] FAT-fs (loop6): Filesystem has been set read-only [ 1324.272712][T16512] overlayfs: missing 'lowerdir' [ 1324.486370][T16508] syz.6.3855: attempt to access beyond end of device [ 1324.486370][T16508] loop6: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 1324.617553][T16508] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100) [ 1324.631469][T16508] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100) [ 1324.646041][T16515] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100) [ 1324.656597][T16515] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100) [ 1324.664890][T16515] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100) [ 1324.941624][ T724] usb 3-1: new low-speed USB device number 47 using dummy_hcd [ 1325.016675][T16528] loop7: detected capacity change from 0 to 256 [ 1325.034900][T16528] exfat: Deprecated parameter 'namecase' [ 1325.063447][T16528] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x25fbf2c1, utbl_chksum : 0xe619d30d) [ 1325.090292][ T28] audit: type=1400 audit(1753440556.563:2034): avc: denied { write } for pid=16527 comm="syz.7.3862" name="/" dev="loop7" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1325.125008][ T28] audit: type=1400 audit(1753440556.593:2035): avc: denied { add_name } for pid=16527 comm="syz.7.3862" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1325.129971][T16531] loop6: detected capacity change from 0 to 512 [ 1325.145907][ T28] audit: type=1400 audit(1753440556.593:2036): avc: denied { associate } for pid=16527 comm="syz.7.3862" name="bus" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 1325.175558][T16531] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1325.180270][ T28] audit: type=1400 audit(1753440556.593:2037): avc: denied { write open } for pid=16527 comm="syz.7.3862" path="/493/file0/bus" dev="loop7" ino=1048944 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1325.199123][T16531] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #11: comm syz.6.3863: invalid indirect mapped block 4294967295 (level 1) [ 1325.209009][ T724] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1325.223139][T16531] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #11: comm syz.6.3863: invalid indirect mapped block 4294967295 (level 1) [ 1325.245852][T16531] EXT4-fs (loop6): 2 truncates cleaned up [ 1325.258967][T16531] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1325.354697][ T724] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1325.430347][ T724] usb 3-1: config 0 descriptor?? [ 1325.555124][T14837] EXT4-fs (loop6): unmounting filesystem. [ 1325.619450][T16539] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1325.628887][T16543] 9pnet_fd: Insufficient options for proto=fd [ 1325.758326][T16535] loop7: detected capacity change from 0 to 40427 [ 1325.787189][T16535] F2FS-fs (loop7): Invalid segment/section count (31, 2328 x 1) [ 1325.796357][T16535] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 1325.805673][T16535] F2FS-fs (loop7): invalid crc value [ 1326.104787][T16535] F2FS-fs (loop7): Found nat_bits in checkpoint [ 1326.224883][T16556] loop4: detected capacity change from 0 to 128 [ 1326.248269][T16561] loop6: detected capacity change from 0 to 256 [ 1326.255564][T16535] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 1326.267428][T16561] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1326.278292][T16535] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e4 [ 1326.322663][T16556] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 1326.330606][T16556] FAT-fs (loop4): Filesystem has been set read-only [ 1326.342072][T16556] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 1326.375547][T16556] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 1327.450248][T16578] loop6: detected capacity change from 0 to 512 [ 1327.459004][T16578] EXT4-fs: Ignoring removed mblk_io_submit option [ 1327.472799][T16578] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1327.493543][T16580] loop4: detected capacity change from 0 to 512 [ 1327.500648][T16580] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1327.509527][T16578] EXT4-fs (loop6): 1 truncate cleaned up [ 1327.511986][T16580] EXT4-fs error (device loop4): ext4_get_branch:178: inode #11: block 4294967295: comm syz.4.3877: invalid block [ 1327.528259][T16578] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1327.531948][T16580] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.3877: invalid indirect mapped block 4294967295 (level 1) [ 1327.641214][T16584] overlayfs: failed to clone upperpath [ 1327.851817][T16580] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.3877: invalid indirect mapped block 4294967295 (level 1) [ 1327.853741][ T724] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1327.893653][T16580] EXT4-fs (loop4): 2 truncates cleaned up [ 1327.906746][T16580] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1327.942566][ T724] asix: probe of 3-1:0.0 failed with error -71 [ 1327.950417][ T724] usb 3-1: USB disconnect, device number 47 [ 1328.607657][T16591] FAULT_INJECTION: forcing a failure. [ 1328.607657][T16591] name failslab, interval 1, probability 0, space 0, times 0 [ 1328.620389][T16591] CPU: 0 PID: 16591 Comm: syz.6.3878 Not tainted 6.1.141-syzkaller-00042-g96160a0e0aa1 #0 [ 1328.630327][T16591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1328.640400][T16591] Call Trace: [ 1328.643694][T16591] [ 1328.646635][T16591] __dump_stack+0x21/0x24 [ 1328.650992][T16591] dump_stack_lvl+0xee/0x150 [ 1328.655612][T16591] ? __cfi_dump_stack_lvl+0x8/0x8 [ 1328.660661][T16591] ? __kasan_check_write+0x14/0x20 [ 1328.665796][T16591] dump_stack+0x15/0x24 [ 1328.669974][T16591] should_fail_ex+0x3d4/0x520 [ 1328.674676][T16591] ? getname_flags+0xb9/0x500 [ 1328.679384][T16591] __should_failslab+0xac/0xf0 [ 1328.684162][T16591] should_failslab+0x9/0x20 [ 1328.688691][T16591] kmem_cache_alloc+0x3b/0x330 [ 1328.693471][T16591] getname_flags+0xb9/0x500 [ 1328.698009][T16591] getname+0x19/0x20 [ 1328.701944][T16591] do_sys_openat2+0xcb/0x7e0 [ 1328.706567][T16591] ? __kasan_check_write+0x14/0x20 [ 1328.711706][T16591] ? do_sys_open+0xe0/0xe0 [ 1328.716143][T16591] ? ksys_write+0x1eb/0x240 [ 1328.720667][T16591] ? __cfi_ksys_write+0x10/0x10 [ 1328.725545][T16591] __x64_sys_openat+0x136/0x160 [ 1328.730428][T16591] x64_sys_call+0x783/0x9a0 [ 1328.734966][T16591] do_syscall_64+0x4c/0xa0 [ 1328.739392][T16591] ? clear_bhb_loop+0x30/0x80 [ 1328.744083][T16591] ? clear_bhb_loop+0x30/0x80 [ 1328.748771][T16591] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1328.754678][T16591] RIP: 0033:0x7fbd2718e9a9 [ 1328.759106][T16591] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1328.778724][T16591] RSP: 002b:00007fbd28086038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1328.787167][T16591] RAX: ffffffffffffffda RBX: 00007fbd273b6160 RCX: 00007fbd2718e9a9 [ 1328.795157][T16591] RDX: 000000000000275a RSI: 00002000000001c0 RDI: ffffffffffffff9c [ 1328.803146][T16591] RBP: 00007fbd28086090 R08: 0000000000000000 R09: 0000000000000000 [ 1328.811135][T16591] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1328.819118][T16591] R13: 0000000000000000 R14: 00007fbd273b6160 R15: 00007fff5692b328 [ 1328.827111][T16591] [ 1329.151160][T14837] EXT4-fs (loop6): unmounting filesystem. [ 1329.169544][T13792] EXT4-fs (loop4): unmounting filesystem. [ 1330.778903][T16602] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1330.961081][T16618] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16618 comm=syz.7.3889 [ 1330.977723][T16619] loop6: detected capacity change from 0 to 128 [ 1331.090265][T16618] devtmpfs: Unknown parameter 'posixacl' [ 1331.097619][T16618] netlink: 'syz.7.3889': attribute type 3 has an invalid length. [ 1331.476129][T16627] tmpfs: Bad value for 'gid' [ 1331.523996][T16628] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100) [ 1331.533367][T16628] FAT-fs (loop6): Filesystem has been set read-only [ 1331.540228][T16628] bio_check_eod: 21979 callbacks suppressed [ 1331.540245][T16628] syz.6.3888: attempt to access beyond end of device [ 1331.540245][T16628] loop6: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 1331.560144][T16628] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100) [ 1331.568093][T16628] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100) [ 1331.584985][T16628] syz.6.3888: attempt to access beyond end of device [ 1331.584985][T16628] loop6: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 1331.598525][T16628] syz.6.3888: attempt to access beyond end of device [ 1331.598525][T16628] loop6: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 1331.620315][T16628] syz.6.3888: attempt to access beyond end of device [ 1331.620315][T16628] loop6: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 1331.639308][T16628] syz.6.3888: attempt to access beyond end of device [ 1331.639308][T16628] loop6: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 1331.639858][T16633] loop2: detected capacity change from 0 to 512 [ 1331.652966][T16628] syz.6.3888: attempt to access beyond end of device [ 1331.652966][T16628] loop6: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 1331.753886][T16635] overlayfs: failed to clone upperpath [ 1331.769998][T16628] syz.6.3888: attempt to access beyond end of device [ 1331.769998][T16628] loop6: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 1331.786501][T16633] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1331.967256][T16628] syz.6.3888: attempt to access beyond end of device [ 1331.967256][T16628] loop6: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 1332.018926][T16633] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.3893: invalid indirect mapped block 4294967295 (level 1) [ 1332.038933][T16633] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.3893: invalid indirect mapped block 4294967295 (level 1) [ 1332.053538][T16633] EXT4-fs (loop2): 2 truncates cleaned up [ 1332.059454][T16633] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1332.140830][T13065] EXT4-fs (loop2): unmounting filesystem. [ 1333.199328][T16652] loop2: detected capacity change from 0 to 512 [ 1333.217813][T16652] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 1333.239882][T16652] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 1333.261075][T16652] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 1333.275374][T16652] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 1333.296987][T16652] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=e04ce01c, mo2=0000] [ 1333.305132][T16652] EXT4-fs (loop2): failed to initialize system zone (-117) [ 1333.312683][T16652] EXT4-fs (loop2): mount failed [ 1333.452174][T16673] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1333.749678][T16680] loop7: detected capacity change from 0 to 4096 [ 1333.757781][T16680] EXT4-fs: Ignoring removed mblk_io_submit option [ 1333.769526][T16680] EXT4-fs (loop7): Test dummy encryption mode enabled [ 1333.845553][T16680] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 1335.487881][T16657] loop4: detected capacity change from 0 to 40427 [ 1335.502311][ T6902] EXT4-fs (loop7): unmounting filesystem. [ 1335.511659][T16657] F2FS-fs (loop4): Invalid segment/section count (31, 2328 x 1) [ 1335.532090][T16657] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 1335.552013][T16657] F2FS-fs (loop4): invalid crc value [ 1335.607472][T16657] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1335.956946][T16695] overlayfs: missing 'lowerdir' [ 1337.546917][T16703] loop6: detected capacity change from 0 to 256 [ 1337.594252][T16703] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1337.619009][T16707] tmpfs: Bad value for 'gid' [ 1337.834936][T16716] loop7: detected capacity change from 0 to 512 [ 1339.815043][T16716] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1339.880209][T16716] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #11: comm syz.7.3916: invalid indirect mapped block 4294967295 (level 1) [ 1339.895114][T16716] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #11: comm syz.7.3916: invalid indirect mapped block 4294967295 (level 1) [ 1339.942361][T16716] EXT4-fs (loop7): 2 truncates cleaned up [ 1339.948141][T16716] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 1341.585557][T16738] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3920'. [ 1341.611022][T16738] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1341.652713][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 1341.652733][ T28] audit: type=1400 audit(1753440573.083:2039): avc: denied { mounton } for pid=16736 comm="syz.6.3920" path="/101/file0" dev="tmpfs" ino=591 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1341.800968][ T6902] EXT4-fs (loop7): unmounting filesystem. [ 1341.833726][T16747] loop6: detected capacity change from 0 to 128 [ 1342.214893][T16747] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100) [ 1342.222970][T16747] FAT-fs (loop6): Filesystem has been set read-only [ 1342.229594][T16747] syz.6.3925: attempt to access beyond end of device [ 1342.229594][T16747] loop6: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 1342.254600][T16747] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100) [ 1342.263422][T16747] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100) [ 1342.278844][T16754] loop7: detected capacity change from 0 to 512 [ 1342.291654][T16747] syz.6.3925: attempt to access beyond end of device [ 1342.291654][T16747] loop6: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 1342.291860][T16754] EXT4-fs: Ignoring removed mblk_io_submit option [ 1342.311955][T16754] EXT4-fs: Ignoring removed bh option [ 1342.318126][T16754] EXT4-fs (loop7): Test dummy encryption mode enabled [ 1342.323939][T16747] syz.6.3925: attempt to access beyond end of device [ 1342.323939][T16747] loop6: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 1342.325652][T16754] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 1342.351919][T16747] syz.6.3925: attempt to access beyond end of device [ 1342.351919][T16747] loop6: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 1342.367330][T16757] syz.6.3925: attempt to access beyond end of device [ 1342.367330][T16757] loop6: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 1342.382568][T16747] syz.6.3925: attempt to access beyond end of device [ 1342.382568][T16747] loop6: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 1342.397222][T16757] syz.6.3925: attempt to access beyond end of device [ 1342.397222][T16757] loop6: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 1342.430417][T16747] syz.6.3925: attempt to access beyond end of device [ 1342.430417][T16747] loop6: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 1342.564680][T16760] loop4: detected capacity change from 0 to 4096 [ 1342.571520][T16760] EXT4-fs: Ignoring removed mblk_io_submit option [ 1342.663704][T16760] EXT4-fs (loop4): Test dummy encryption mode enabled [ 1342.697963][T16754] EXT4-fs (loop7): 1 truncate cleaned up [ 1342.798437][T16754] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 1342.823667][T16760] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1344.195666][T16747] syz.6.3925: attempt to access beyond end of device [ 1344.195666][T16747] loop6: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 1346.261587][T16773] overlayfs: missing 'lowerdir' [ 1346.453521][ T6902] EXT4-fs (loop7): unmounting filesystem. [ 1346.462232][T13792] EXT4-fs (loop4): unmounting filesystem. [ 1346.497747][ T28] audit: type=1326 audit(1753440577.973:2040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16779 comm="syz.6.3932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd2718e9a9 code=0x7ffc0000 [ 1346.527950][T16784] tmpfs: Bad value for 'gid' [ 1346.569847][ T28] audit: type=1326 audit(1753440577.983:2041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16779 comm="syz.6.3932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd2718e9a9 code=0x7ffc0000 [ 1346.603103][ T28] audit: type=1326 audit(1753440578.003:2042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16779 comm="syz.6.3932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbd2718e9a9 code=0x7ffc0000 [ 1346.649492][ T28] audit: type=1326 audit(1753440578.003:2043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16779 comm="syz.6.3932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd2718e9a9 code=0x7ffc0000 [ 1346.675665][ T28] audit: type=1326 audit(1753440578.003:2044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16779 comm="syz.6.3932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbd2718e9a9 code=0x7ffc0000 [ 1346.699621][ T28] audit: type=1326 audit(1753440578.003:2045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16779 comm="syz.6.3932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd2718e9a9 code=0x7ffc0000 [ 1346.723213][ T28] audit: type=1326 audit(1753440578.003:2046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16779 comm="syz.6.3932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbd2718e9a9 code=0x7ffc0000 [ 1346.746918][ T28] audit: type=1326 audit(1753440578.003:2047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16779 comm="syz.6.3932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd2718e9a9 code=0x7ffc0000 [ 1346.771232][ T28] audit: type=1326 audit(1753440578.003:2048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16779 comm="syz.6.3932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbd2718e9a9 code=0x7ffc0000 [ 1346.799097][ T28] audit: type=1326 audit(1753440578.003:2049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16779 comm="syz.6.3932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd2718e9a9 code=0x7ffc0000 [ 1346.829769][ T28] audit: type=1326 audit(1753440578.003:2050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16779 comm="syz.6.3932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=292 compat=0 ip=0x7fbd2718e9a9 code=0x7ffc0000 [ 1347.811984][ T28] audit: type=1326 audit(1753440578.003:2051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16779 comm="syz.6.3932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd2718e9a9 code=0x7ffc0000 [ 1347.835810][ T28] audit: type=1326 audit(1753440578.003:2052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16779 comm="syz.6.3932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbd2718e9a9 code=0x7ffc0000 [ 1347.859578][ T28] audit: type=1400 audit(1753440578.003:2053): avc: denied { write } for pid=16779 comm="syz.6.3932" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1348.250479][ T724] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 1348.333242][T16809] loop4: detected capacity change from 0 to 128 [ 1348.342487][T16811] loop2: detected capacity change from 0 to 128 [ 1348.350884][T16801] loop6: detected capacity change from 0 to 40427 [ 1348.363386][T16801] F2FS-fs (loop6): Invalid segment/section count (31, 2328 x 1) [ 1348.382163][T16801] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 1348.399166][T16801] F2FS-fs (loop6): invalid crc value [ 1348.405290][T16809] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 1348.421509][T16809] FAT-fs (loop4): Filesystem has been set read-only [ 1348.428467][T16811] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 1348.436787][T16811] FAT-fs (loop2): Filesystem has been set read-only [ 1348.443739][T16809] syz.4.3943: attempt to access beyond end of device [ 1348.443739][T16809] loop4: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 1348.457823][T16811] syz.2.3942: attempt to access beyond end of device [ 1348.457823][T16811] loop2: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 1348.461439][ T724] usb 8-1: Using ep0 maxpacket: 32 [ 1348.477446][T16809] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 1348.485555][T16811] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 1348.486479][T16809] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 1348.501567][T16811] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 1348.509776][T16814] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 1348.510755][ T724] usb 8-1: config 6 has an invalid interface number: 19 but max is 3 [ 1348.518296][T16816] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 1348.525791][T16801] F2FS-fs (loop6): Found nat_bits in checkpoint [ 1348.541563][T16814] syz.4.3943: attempt to access beyond end of device [ 1348.541563][T16814] loop4: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 1348.545495][ T724] usb 8-1: config 6 has an invalid interface number: 169 but max is 3 [ 1348.556318][T16816] syz.2.3942: attempt to access beyond end of device [ 1348.556318][T16816] loop2: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 1348.578400][T16814] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 1348.586496][T16814] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 1348.594581][T16816] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 1348.602731][T16814] syz.4.3943: attempt to access beyond end of device [ 1348.602731][T16814] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 1348.616147][T16816] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 1348.624216][T16811] syz.2.3942: attempt to access beyond end of device [ 1348.624216][T16811] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 1348.637708][T16814] syz.4.3943: attempt to access beyond end of device [ 1348.637708][T16814] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 1348.651217][T16816] syz.2.3942: attempt to access beyond end of device [ 1348.651217][T16816] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 1348.655999][ T724] usb 8-1: config 6 has an invalid interface number: 155 but max is 3 [ 1348.672209][T16809] syz.4.3943: attempt to access beyond end of device [ 1348.672209][T16809] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 1348.672817][ T724] usb 8-1: config 6 has an invalid interface number: 96 but max is 3 [ 1348.694513][T16811] syz.2.3942: attempt to access beyond end of device [ 1348.694513][T16811] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 1348.707913][ T724] usb 8-1: config 6 has no interface number 0 [ 1348.714080][ T724] usb 8-1: config 6 has no interface number 1 [ 1348.714574][T16801] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 1348.720202][ T724] usb 8-1: config 6 has no interface number 2 [ 1348.733656][T16801] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4 [ 1348.741424][ T724] usb 8-1: config 6 has no interface number 3 [ 1348.758646][ T724] usb 8-1: config 6 interface 19 altsetting 7 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 1348.850971][ T724] usb 8-1: config 6 interface 19 altsetting 7 has a duplicate endpoint with address 0xE, skipping [ 1349.056947][ T724] usb 8-1: config 6 interface 19 altsetting 7 has an invalid endpoint with address 0x80, skipping [ 1349.081472][ T724] usb 8-1: config 6 interface 19 altsetting 7 has a duplicate endpoint with address 0x89, skipping [ 1349.097630][ T724] usb 8-1: config 6 interface 169 altsetting 187 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 1349.109264][ T724] usb 8-1: config 6 interface 169 altsetting 187 has a duplicate endpoint with address 0xB, skipping [ 1349.120885][ T724] usb 8-1: config 6 interface 169 altsetting 187 has an invalid endpoint with address 0xDB, skipping [ 1349.197976][ T724] usb 8-1: config 6 interface 169 altsetting 187 has an invalid endpoint with address 0x0, skipping [ 1349.209091][ T724] usb 8-1: config 6 interface 169 altsetting 187 has 6 endpoint descriptors, different from the interface descriptor's value: 5 [ 1349.222636][ T724] usb 8-1: config 6 interface 155 altsetting 4 has a duplicate endpoint with address 0x5, skipping [ 1349.233623][ T724] usb 8-1: config 6 interface 155 altsetting 4 has a duplicate endpoint with address 0xE, skipping [ 1349.261428][ T724] usb 8-1: config 6 interface 155 altsetting 4 has an invalid endpoint with address 0x80, skipping [ 1349.291487][ T724] usb 8-1: config 6 interface 155 altsetting 4 has a duplicate endpoint with address 0x6, skipping [ 1349.311447][ T724] usb 8-1: config 6 interface 96 altsetting 127 endpoint 0x2 has invalid maxpacket 54663, setting to 64 [ 1349.329923][ T724] usb 8-1: config 6 interface 96 altsetting 127 has a duplicate endpoint with address 0xD, skipping [ 1349.368732][ T724] usb 8-1: config 6 interface 96 altsetting 127 has a duplicate endpoint with address 0x8, skipping [ 1349.405679][ T724] usb 8-1: config 6 interface 96 altsetting 127 has an invalid endpoint with address 0x0, skipping [ 1349.467768][ T724] usb 8-1: config 6 interface 96 altsetting 127 has a duplicate endpoint with address 0xB, skipping [ 1349.479047][ T724] usb 8-1: config 6 interface 96 altsetting 127 has a duplicate endpoint with address 0xB, skipping [ 1349.493440][ T724] usb 8-1: config 6 interface 96 altsetting 127 has a duplicate endpoint with address 0xD, skipping [ 1349.504464][ T724] usb 8-1: config 6 interface 96 altsetting 127 has a duplicate endpoint with address 0x6, skipping [ 1349.518225][ T724] usb 8-1: config 6 interface 96 altsetting 127 has an invalid endpoint with address 0x0, skipping [ 1349.529263][ T724] usb 8-1: config 6 interface 96 altsetting 127 has a duplicate endpoint with address 0x6, skipping [ 1349.540339][ T724] usb 8-1: config 6 interface 96 altsetting 127 has a duplicate endpoint with address 0x6, skipping [ 1349.551356][ T724] usb 8-1: config 6 interface 96 altsetting 127 has a duplicate endpoint with address 0x3, skipping [ 1349.581434][ T724] usb 8-1: config 6 interface 96 altsetting 127 has a duplicate endpoint with address 0xF, skipping [ 1349.601644][ T724] usb 8-1: config 6 interface 96 altsetting 127 has 15 endpoint descriptors, different from the interface descriptor's value: 14 [ 1349.635909][ T724] usb 8-1: config 6 interface 19 has no altsetting 0 [ 1349.642836][ T724] usb 8-1: config 6 interface 169 has no altsetting 0 [ 1349.650025][ T724] usb 8-1: config 6 interface 155 has no altsetting 0 [ 1349.657245][ T724] usb 8-1: config 6 interface 96 has no altsetting 0 [ 1349.666066][ T724] usb 8-1: language id specifier not provided by device, defaulting to English [ 1349.745704][ T724] usb 8-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=8c.c5 [ 1349.755024][ T724] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1349.763275][ T724] usb 8-1: Product: syz [ 1349.767526][ T724] usb 8-1: Manufacturer: syz [ 1349.772350][ T724] usb 8-1: SerialNumber: syz [ 1349.892149][T16841] loop4: detected capacity change from 0 to 40427 [ 1350.049070][T16841] F2FS-fs (loop4): Invalid segment/section count (31, 2328 x 1) [ 1350.174118][ T724] usb 8-1: USB disconnect, device number 22 [ 1350.187170][T16841] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 1350.189497][T16850] loop6: detected capacity change from 0 to 512 [ 1350.202792][T16841] F2FS-fs (loop4): invalid crc value [ 1350.217279][T16850] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 1350.226414][T16841] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1350.227333][T16850] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 1350.252264][T16850] EXT4-fs (loop6): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 1350.264307][T16850] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 1350.275028][T16850] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=e04ce01c, mo2=0000] [ 1350.282878][T16841] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 1350.283129][T16850] EXT4-fs (loop6): failed to initialize system zone (-117) [ 1350.290075][T16841] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 1350.297505][T16850] EXT4-fs (loop6): mount failed [ 1350.783565][T16882] loop7: detected capacity change from 0 to 256 [ 1350.801143][T16882] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1351.626736][T16904] loop2: detected capacity change from 0 to 512 [ 1351.662350][T16904] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 1351.672749][T16906] loop6: detected capacity change from 0 to 128 [ 1351.688135][T16904] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 1351.702681][T16904] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 1351.737747][T16904] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 1351.759221][T16904] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=e04ce01c, mo2=0000] [ 1351.775317][T16904] EXT4-fs (loop2): failed to initialize system zone (-117) [ 1351.790917][T16904] EXT4-fs (loop2): mount failed [ 1351.806549][T16912] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100) [ 1351.843303][T16912] FAT-fs (loop6): Filesystem has been set read-only [ 1351.887309][T16912] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100) [ 1351.935608][T16912] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100) [ 1352.195310][T16923] loop2: detected capacity change from 0 to 4096 [ 1352.206145][T16923] EXT4-fs: Ignoring removed mblk_io_submit option [ 1352.217301][T16923] EXT4-fs (loop2): Test dummy encryption mode enabled [ 1352.435679][T16927] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1352.495314][T16923] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1353.332980][T13065] EXT4-fs (loop2): unmounting filesystem. [ 1353.456057][T16912] bio_check_eod: 16263 callbacks suppressed [ 1353.456080][T16912] syz.6.3971: attempt to access beyond end of device [ 1353.456080][T16912] loop6: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 1353.472104][T16942] loop4: detected capacity change from 0 to 128 [ 1353.695843][T16942] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 1353.804331][T16942] FAT-fs (loop4): Filesystem has been set read-only [ 1353.811095][T16942] syz.4.3982: attempt to access beyond end of device [ 1353.811095][T16942] loop4: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 1353.833938][T16942] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 1353.842175][T16942] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 1353.850397][T16942] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 1353.858504][T16942] syz.4.3982: attempt to access beyond end of device [ 1353.858504][T16942] loop4: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 1353.900891][T16949] syz.4.3982: attempt to access beyond end of device [ 1353.900891][T16949] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 1353.956593][T16942] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 1354.133865][T16953] loop7: detected capacity change from 0 to 4096 [ 1354.142431][T16953] EXT4-fs: Ignoring removed mblk_io_submit option [ 1354.160533][T16953] EXT4-fs (loop7): Test dummy encryption mode enabled [ 1354.312553][T16953] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 1354.608989][T16942] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 1355.704660][T16942] syz.4.3982: attempt to access beyond end of device [ 1355.704660][T16942] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 1355.723087][T16961] loop6: detected capacity change from 0 to 512 [ 1355.764764][T16961] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 1355.789250][T16961] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 1355.799072][T16961] EXT4-fs (loop6): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 1355.935913][T16965] loop2: detected capacity change from 0 to 512 [ 1355.942898][T16965] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1355.953140][T16965] EXT4-fs error (device loop2): ext4_get_branch:178: inode #11: block 4294967295: comm syz.2.3989: invalid block [ 1355.969792][T16961] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 1357.178180][T16976] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3991'. [ 1357.265781][ T6902] EXT4-fs (loop7): unmounting filesystem. [ 1357.741586][T16961] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=e04ce01c, mo2=0000] [ 1357.750432][T16965] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.3989: invalid indirect mapped block 4294967295 (level 1) [ 1357.782457][T16961] EXT4-fs (loop6): failed to initialize system zone (-117) [ 1357.794867][T16961] EXT4-fs (loop6): mount failed [ 1357.806233][T16965] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.3989: invalid indirect mapped block 4294967295 (level 1) [ 1357.826037][T16965] EXT4-fs (loop2): 2 truncates cleaned up [ 1357.832114][T16965] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1357.910012][T13065] EXT4-fs (loop2): unmounting filesystem. [ 1358.172828][T16992] loop6: detected capacity change from 0 to 128 [ 1358.812765][T16995] loop2: detected capacity change from 0 to 4096 [ 1358.821873][T16995] EXT4-fs: Ignoring removed mblk_io_submit option [ 1359.202896][T16995] EXT4-fs (loop2): Test dummy encryption mode enabled [ 1359.225481][T16995] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1359.942592][T16984] loop7: detected capacity change from 0 to 40427 [ 1359.979100][T16984] F2FS-fs (loop7): Invalid segment/section count (31, 2328 x 1) [ 1360.005939][T16984] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 1360.034650][T16984] F2FS-fs (loop7): invalid crc value [ 1360.046685][T16984] F2FS-fs (loop7): Found nat_bits in checkpoint [ 1360.114984][T16984] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 1360.122418][T16984] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e4 [ 1361.064640][T13065] EXT4-fs (loop2): unmounting filesystem. [ 1361.270414][ T6902] syz-executor: attempt to access beyond end of device [ 1361.270414][ T6902] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1361.309334][T17007] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100) [ 1361.464926][T17007] FAT-fs (loop6): Filesystem has been set read-only [ 1361.696663][T17014] FAULT_INJECTION: forcing a failure. [ 1361.696663][T17014] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1361.773982][T17007] syz.6.3998: attempt to access beyond end of device [ 1361.773982][T17007] loop6: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 1361.833250][T17014] CPU: 0 PID: 17014 Comm: syz.2.4003 Not tainted 6.1.141-syzkaller-00042-g96160a0e0aa1 #0 [ 1361.843193][T17014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1361.853265][T17014] Call Trace: [ 1361.856575][T17014] [ 1361.859520][T17014] __dump_stack+0x21/0x24 [ 1361.863903][T17014] dump_stack_lvl+0xee/0x150 [ 1361.868519][T17014] ? __cfi_dump_stack_lvl+0x8/0x8 [ 1361.873577][T17014] dump_stack+0x15/0x24 [ 1361.877757][T17014] should_fail_ex+0x3d4/0x520 [ 1361.882453][T17014] should_fail+0xb/0x10 [ 1361.886631][T17014] should_fail_usercopy+0x1a/0x20 [ 1361.891673][T17014] _copy_from_user+0x1e/0xc0 [ 1361.896277][T17014] __sys_bpf+0x277/0x780 [ 1361.900551][T17014] ? bpf_link_show_fdinfo+0x320/0x320 [ 1361.905958][T17014] ? __kasan_check_write+0x14/0x20 [ 1361.911094][T17014] ? fpregs_restore_userregs+0x128/0x260 [ 1361.916745][T17014] __x64_sys_bpf+0x7c/0x90 [ 1361.921186][T17014] x64_sys_call+0x488/0x9a0 [ 1361.925706][T17014] do_syscall_64+0x4c/0xa0 [ 1361.930136][T17014] ? clear_bhb_loop+0x30/0x80 [ 1361.934840][T17014] ? clear_bhb_loop+0x30/0x80 [ 1361.939535][T17014] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1361.945453][T17014] RIP: 0033:0x7f825698e9a9 [ 1361.949879][T17014] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1361.969499][T17014] RSP: 002b:00007f8257888038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1361.977943][T17014] RAX: ffffffffffffffda RBX: 00007f8256bb5fa0 RCX: 00007f825698e9a9 [ 1361.985932][T17014] RDX: 0000000000000070 RSI: 0000200000000440 RDI: 0000000000000005 [ 1361.993916][T17014] RBP: 00007f8257888090 R08: 0000000000000000 R09: 0000000000000000 [ 1362.001904][T17014] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1362.009888][T17014] R13: 0000000000000000 R14: 00007f8256bb5fa0 R15: 00007ffdbf6320a8 [ 1362.017881][T17014] [ 1362.191467][T17007] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100) [ 1362.228991][T17007] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100) [ 1362.254335][T17016] loop4: detected capacity change from 0 to 512 [ 1362.338682][T17016] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1362.341010][T17024] tmpfs: Bad value for 'gid' [ 1362.475909][T17016] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1362.496530][T17016] ext4 filesystem being mounted at /177/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1363.073250][T17016] EXT4-fs error (device loop4): ext4_empty_dir:3145: inode #12: block 32: comm syz.4.4004: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 1363.107966][T17016] EXT4-fs warning (device loop4): ext4_empty_dir:3147: inode #12: comm syz.4.4004: directory missing '.' [ 1363.111650][T17020] loop2: detected capacity change from 0 to 40427 [ 1363.147876][T13792] EXT4-fs (loop4): unmounting filesystem. [ 1363.162178][T17020] F2FS-fs (loop2): Invalid segment/section count (31, 2328 x 1) [ 1363.170238][T17020] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 1363.252163][T17020] F2FS-fs (loop2): invalid crc value [ 1363.271372][T17038] loop7: detected capacity change from 0 to 40427 [ 1363.319705][T17020] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1363.347066][T17050] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4014'. [ 1363.351542][T17038] F2FS-fs (loop7): Invalid segment/section count (31, 2328 x 1) [ 1363.491562][T17038] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 1363.618648][T17038] F2FS-fs (loop7): invalid crc value [ 1363.645023][T17020] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 1363.697780][T17020] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 1363.800947][ T28] kauditd_printk_skb: 43 callbacks suppressed [ 1363.800964][ T28] audit: type=1400 audit(1753440595.273:2097): avc: denied { write } for pid=17057 comm="syz.6.4016" name="001" dev="devtmpfs" ino=164 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 1363.816344][T17038] F2FS-fs (loop7): Found nat_bits in checkpoint [ 1363.831281][ T28] audit: type=1326 audit(1753440595.313:2098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17057 comm="syz.6.4016" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbd2718e9a9 code=0x0 [ 1363.889284][T17038] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 1363.898203][T17038] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e4 [ 1364.131275][T13065] syz-executor: attempt to access beyond end of device [ 1364.131275][T13065] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1364.365766][ T6902] syz-executor: attempt to access beyond end of device [ 1364.365766][ T6902] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1366.271467][ T28] audit: type=1400 audit(1753440597.693:2099): avc: denied { unmount } for pid=14837 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 1366.339482][T17098] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4026'. [ 1366.961209][T17109] loop7: detected capacity change from 0 to 512 [ 1367.002087][T17097] loop4: detected capacity change from 0 to 40427 [ 1367.015332][T17097] F2FS-fs (loop4): Invalid segment/section count (31, 2328 x 1) [ 1367.023320][T17109] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 1367.024153][T17097] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 1367.042395][T17097] F2FS-fs (loop4): invalid crc value [ 1367.048532][T17109] EXT4-fs (loop7): invalid journal inode [ 1367.061622][T17097] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1367.111700][T17097] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 1367.118834][T17097] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 1367.324242][T17109] fuse: Unknown parameter 'ÿÿÿÿ18446744073709551615ÿÿ1844674407370955161501777777777777777777777' [ 1367.338206][T17128] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4038'. [ 1367.362731][T17128] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4038'. [ 1367.389326][ T28] audit: type=1400 audit(1753440598.863:2100): avc: denied { setopt } for pid=17125 comm="syz.6.4038" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1367.434415][ T28] audit: type=1400 audit(1753440598.903:2101): avc: denied { setopt } for pid=17126 comm="syz.2.4037" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1367.461643][T13792] syz-executor: attempt to access beyond end of device [ 1367.461643][T13792] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1367.470709][ T28] audit: type=1400 audit(1753440598.903:2102): avc: denied { bind } for pid=17126 comm="syz.2.4037" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1367.525172][T17141] loop6: detected capacity change from 0 to 128 [ 1367.536010][ T28] audit: type=1400 audit(1753440598.903:2103): avc: denied { node_bind } for pid=17126 comm="syz.2.4037" saddr=100.1.1.0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 1367.654957][T17150] loop4: detected capacity change from 0 to 512 [ 1367.684153][T17150] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 1368.196205][T17150] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 1368.440850][T17141] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100) [ 1368.454054][T17150] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 1368.472978][T17141] FAT-fs (loop6): Filesystem has been set read-only [ 1368.482841][T17141] syz.6.4045: attempt to access beyond end of device [ 1368.482841][T17141] loop6: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 1368.499804][ T28] audit: type=1400 audit(1753440599.983:2104): avc: denied { write } for pid=17156 comm="syz.7.4049" name="igmp" dev="proc" ino=4026533028 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 1368.534236][T17157] virtiofs: Unknown parameter 'always 1 V3 [ 1368.534236][T17157] 010000E0 1 0:00000000 0 [ 1368.534236][T17157] 19 wg1 : 1 V3 [ 1368.534236][T17157] 010000E0 1 0:00000000 0 [ 1368.534236][T17157] 20 wg2 : 1 V3 [ 1368.534236][T17157] 010000E0 1 0:00000000 0 [ 1368.534236][T17157] 21 veth0_to_bridge: 1 V3 [ 1368.534236][T17157] 010000E0 1 0:00000000 0 [ 1368.534236][T17157] 22 bridge_slave_0: 1 V3 [ 1368.534236][T17157] 010000E0 1 0:00000000 0 [ 1368.534236][T17157] 23 veth1_to_bridge: 1 V3 [ 1368.534236][T17157] 010000E0 1 0:00000000 0 [ 1368.534236][T17157] 24 bridge_slave_1: 1 V3 [ 1368.534236][T17157] 010000E0 1 0:00000000 0 [ 1368.534236][T17157] 25 veth0_to_bond: 1 V3 [ 1368.534236][T17157] 010000E0 1 0:00000000 0 [ 1368.534236][T17157] 26 bond_slave_0: 1 V3 [ 1368.534236][T17157] 010000E0 1 0:00000000 0 [ 1368.534695][T17157] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4049'. [ 1368.542164][T17141] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100) [ 1368.643164][T17141] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100) [ 1368.651876][T17150] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 1368.659913][T17141] syz.6.4045: attempt to access beyond end of device [ 1368.659913][T17141] loop6: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 1368.674673][T17150] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=e04ce01c, mo2=0000] [ 1368.694866][T17150] EXT4-fs (loop4): failed to initialize system zone (-117) [ 1368.710415][T17141] syz.6.4045: attempt to access beyond end of device [ 1368.710415][T17141] loop6: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 1368.724368][T17141] syz.6.4045: attempt to access beyond end of device [ 1368.724368][T17141] loop6: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 1368.732590][T17150] EXT4-fs (loop4): mount failed [ 1368.737801][T17141] syz.6.4045: attempt to access beyond end of device [ 1368.737801][T17141] loop6: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 1368.737851][T17141] syz.6.4045: attempt to access beyond end of device [ 1368.737851][T17141] loop6: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 1368.769274][T17141] syz.6.4045: attempt to access beyond end of device [ 1368.769274][T17141] loop6: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 1368.782642][T17141] syz.6.4045: attempt to access beyond end of device [ 1368.782642][T17141] loop6: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 1368.795950][T17141] syz.6.4045: attempt to access beyond end of device [ 1368.795950][T17141] loop6: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 1368.945549][T17174] loop6: detected capacity change from 0 to 512 [ 1368.960597][T17171] loop2: detected capacity change from 0 to 512 [ 1368.980822][T17174] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1369.014748][T17166] loop7: detected capacity change from 0 to 40427 [ 1369.027068][T17166] F2FS-fs (loop7): Invalid segment/section count (31, 2328 x 1) [ 1369.034898][T17166] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 1369.043991][T17166] F2FS-fs (loop7): invalid crc value [ 1369.051051][T17166] F2FS-fs (loop7): Found nat_bits in checkpoint [ 1369.069705][T17174] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #11: comm syz.6.4056: invalid indirect mapped block 4294967295 (level 1) [ 1369.084310][T17174] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #11: comm syz.6.4056: invalid indirect mapped block 4294967295 (level 1) [ 1369.099415][T17174] EXT4-fs (loop6): 2 truncates cleaned up [ 1369.105436][T17174] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1369.191009][T17171] EXT4-fs (loop2): 1 orphan inode deleted [ 1369.197084][T17171] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1369.208102][T17171] ext4 filesystem being mounted at /216/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1369.246042][T17171] IPv6: sit1: Disabled Multicast RS [ 1369.387759][ T6866] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 1369.405823][ T6866] EXT4-fs error (device loop2): ext4_release_dquot:6837: comm kworker/u4:4: Failed to release dquot type 1 [ 1369.414282][T17166] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 1369.424379][T17166] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e4 [ 1369.553629][T14837] EXT4-fs (loop6): unmounting filesystem. [ 1369.730038][T13065] EXT4-fs (loop2): unmounting filesystem. [ 1371.769963][T17205] loop7: detected capacity change from 0 to 128 [ 1371.802490][T17211] loop2: detected capacity change from 0 to 128 [ 1371.814098][T17205] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 1371.831475][T17205] FAT-fs (loop7): Filesystem has been set read-only [ 1371.847280][T17205] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 1371.855706][T17205] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 1371.866479][T17221] loop6: detected capacity change from 0 to 512 [ 1371.902472][T17221] EXT4-fs error (device loop6): ext4_xattr_inode_iget:404: comm syz.6.4068: inode #1: comm syz.6.4068: iget: illegal inode # [ 1371.917186][T17221] EXT4-fs error (device loop6): ext4_xattr_inode_iget:409: comm syz.6.4068: error while reading EA inode 1 err=-117 [ 1371.929767][T17221] EXT4-fs error (device loop6): ext4_xattr_inode_iget:404: comm syz.6.4068: inode #1: comm syz.6.4068: iget: illegal inode # [ 1371.944002][T17221] EXT4-fs error (device loop6): ext4_xattr_inode_iget:409: comm syz.6.4068: error while reading EA inode 1 err=-117 [ 1371.956910][T17221] EXT4-fs (loop6): 1 orphan inode deleted [ 1371.962784][T17221] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1371.998324][T17211] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 1372.006400][T17211] FAT-fs (loop2): Filesystem has been set read-only [ 1372.028675][T17211] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 1372.062307][T17211] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 1372.083305][T17212] loop4: detected capacity change from 0 to 40427 [ 1372.096707][T17212] F2FS-fs (loop4): Invalid segment/section count (31, 2328 x 1) [ 1372.104722][T17212] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 1372.116160][T17212] F2FS-fs (loop4): invalid crc value [ 1372.139813][T17212] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1372.207140][T17212] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 1372.218472][T17212] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 1372.489316][T17211] bio_check_eod: 16418 callbacks suppressed [ 1372.489359][T17211] syz.2.4067: attempt to access beyond end of device [ 1372.489359][T17211] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 1372.511047][T17205] syz.7.4062: attempt to access beyond end of device [ 1372.511047][T17205] loop7: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 1372.557318][T17205] syz.7.4062: attempt to access beyond end of device [ 1372.557318][T17205] loop7: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 1372.646223][T17211] syz.2.4067: attempt to access beyond end of device [ 1372.646223][T17211] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 1372.660872][T14837] EXT4-fs (loop6): unmounting filesystem. [ 1372.667292][T17205] syz.7.4062: attempt to access beyond end of device [ 1372.667292][T17205] loop7: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 1372.696602][T17205] syz.7.4062: attempt to access beyond end of device [ 1372.696602][T17205] loop7: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 1372.710740][T13792] syz-executor: attempt to access beyond end of device [ 1372.710740][T13792] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1372.714091][T17211] syz.2.4067: attempt to access beyond end of device [ 1372.714091][T17211] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 1373.521685][T14255] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 1373.540930][T17265] overlayfs: failed to clone upperpath [ 1373.721484][T14255] usb 3-1: Using ep0 maxpacket: 16 [ 1373.751521][ T726] usb 5-1: new low-speed USB device number 60 using dummy_hcd [ 1373.764091][T14255] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 1373.927434][T14255] usb 3-1: New USB device found, idVendor=04b4, idProduct=ed81, bcdDevice= 0.00 [ 1373.951655][T14255] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1374.012545][ T726] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1374.031885][T14255] usb 3-1: config 0 descriptor?? [ 1374.038727][ T726] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1374.062372][ T726] usb 5-1: config 0 descriptor?? [ 1374.478471][T17277] loop7: detected capacity change from 0 to 128 [ 1375.492745][T17280] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 1375.505436][T17280] FAT-fs (loop7): Filesystem has been set read-only [ 1375.512193][T17280] syz.7.4088: attempt to access beyond end of device [ 1375.512193][T17280] loop7: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 1375.526071][T17280] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 1375.544421][T17280] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 1375.562014][T17280] syz.7.4088: attempt to access beyond end of device [ 1375.562014][T17280] loop7: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 1375.633428][T17267] loop6: detected capacity change from 0 to 40427 [ 1375.654765][T17267] F2FS-fs (loop6): Invalid segment/section count (31, 2328 x 1) [ 1375.678491][T17267] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 1375.697703][T17267] F2FS-fs (loop6): invalid crc value [ 1375.728683][T17267] F2FS-fs (loop6): Found nat_bits in checkpoint [ 1375.771560][T17267] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 1375.778807][T17267] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4 [ 1376.238587][T14255] cypress 0003:04B4:ED81.0006: hidraw0: USB HID v0.07 Device [HID 04b4:ed81] on usb-dummy_hcd.2-1/input0 [ 1376.254200][T14255] usb 3-1: USB disconnect, device number 48 [ 1376.425919][T17291] fido_id[17291]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 1376.750535][ T726] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1376.760879][ T726] asix: probe of 5-1:0.0 failed with error -71 [ 1376.769020][ T726] usb 5-1: USB disconnect, device number 60 [ 1376.788333][T17307] loop7: detected capacity change from 0 to 512 [ 1376.800464][T17307] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1376.864259][T17307] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #11: comm syz.7.4096: invalid indirect mapped block 4294967295 (level 1) [ 1376.961635][T17307] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #11: comm syz.7.4096: invalid indirect mapped block 4294967295 (level 1) [ 1377.006396][T17307] EXT4-fs (loop7): 2 truncates cleaned up [ 1377.025859][T17307] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 1377.084835][ T6902] EXT4-fs (loop7): unmounting filesystem. [ 1377.097394][T17298] loop6: detected capacity change from 0 to 40427 [ 1377.124249][T17298] F2FS-fs (loop6): Invalid segment/section count (31, 2328 x 1) [ 1377.128454][T17308] loop4: detected capacity change from 0 to 40427 [ 1377.175611][T17308] F2FS-fs (loop4): Invalid segment/section count (31, 2328 x 1) [ 1377.178402][T17298] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 1377.198847][T17298] F2FS-fs (loop6): invalid crc value [ 1377.257334][T17308] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 1377.298515][T17308] F2FS-fs (loop4): invalid crc value [ 1377.313201][T17298] F2FS-fs (loop6): Found nat_bits in checkpoint [ 1377.458451][T17323] overlayfs: failed to clone upperpath [ 1377.487167][T17308] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1377.651642][T17313] loop7: detected capacity change from 0 to 40427 [ 1377.658390][T17298] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 1377.662530][T17313] F2FS-fs (loop7): Invalid segment/section count (31, 2328 x 1) [ 1377.673705][T17298] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4 [ 1377.701608][T17313] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 1377.742599][T17308] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 1377.749838][T17308] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 1377.791460][T17313] F2FS-fs (loop7): invalid crc value [ 1377.866110][T17313] F2FS-fs (loop7): Found nat_bits in checkpoint [ 1377.906796][T17313] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 1377.914238][T17313] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e4 [ 1378.802693][T14837] bio_check_eod: 1718 callbacks suppressed [ 1378.802715][T14837] syz-executor: attempt to access beyond end of device [ 1378.802715][T14837] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1378.823183][T13792] syz-executor: attempt to access beyond end of device [ 1378.823183][T13792] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1378.928625][T17334] loop2: detected capacity change from 0 to 40427 [ 1378.939021][T17334] F2FS-fs (loop2): Invalid segment/section count (31, 2328 x 1) [ 1378.947847][T17334] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 1379.078803][T17334] F2FS-fs (loop2): invalid crc value [ 1379.249832][T17334] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1379.271842][ T6902] syz-executor: attempt to access beyond end of device [ 1379.271842][ T6902] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1379.378096][T17352] netlink: 104 bytes leftover after parsing attributes in process `syz.6.4103'. [ 1379.387625][T17334] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 1379.421567][T17334] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 1380.180090][T17363] loop7: detected capacity change from 0 to 128 [ 1380.207960][T17363] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 1381.096519][T17363] FAT-fs (loop7): Filesystem has been set read-only [ 1381.107159][T13065] syz-executor: attempt to access beyond end of device [ 1381.107159][T13065] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1381.158252][T17363] syz.7.4108: attempt to access beyond end of device [ 1381.158252][T17363] loop7: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 1381.326728][T17363] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 1381.348228][T17363] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 1381.367341][T17367] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 1381.375650][T17367] syz.7.4108: attempt to access beyond end of device [ 1381.375650][T17367] loop7: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 1381.390141][T17367] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 1381.404839][T17367] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 1381.924679][T17373] loop4: detected capacity change from 0 to 40427 [ 1381.969463][T17373] F2FS-fs (loop4): Invalid segment/section count (31, 2328 x 1) [ 1381.977215][T17373] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 1381.986265][T17373] F2FS-fs (loop4): invalid crc value [ 1381.993740][T17373] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1383.383244][T17373] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 1383.391031][T17373] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 1383.426005][ T28] audit: type=1400 audit(1753440614.903:2105): avc: denied { validate_trans } for pid=17395 comm="syz.6.4118" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 1383.856888][ T28] audit: type=1400 audit(1753440615.333:2106): avc: denied { watch } for pid=17389 comm="syz.2.4116" path="/225/file1" dev="tmpfs" ino=1289 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1383.890509][T13792] syz-executor: attempt to access beyond end of device [ 1383.890509][T13792] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1384.078551][T17401] loop6: detected capacity change from 0 to 40427 [ 1384.091479][T17398] loop7: detected capacity change from 0 to 40427 [ 1384.185731][T17401] F2FS-fs (loop6): Invalid segment/section count (31, 2328 x 1) [ 1384.193756][T17398] F2FS-fs (loop7): Invalid segment/section count (31, 2328 x 1) [ 1384.231543][T17401] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 1384.240414][T17401] F2FS-fs (loop6): invalid crc value [ 1384.246021][T17398] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 1384.255657][T17398] F2FS-fs (loop7): invalid crc value [ 1385.197135][T17401] F2FS-fs (loop6): Found nat_bits in checkpoint [ 1385.234871][T17398] F2FS-fs (loop7): Found nat_bits in checkpoint [ 1385.351960][T17398] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 1385.359144][T17398] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e4 [ 1385.451565][T17401] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 1385.453217][T17433] loop4: detected capacity change from 0 to 128 [ 1385.459698][T17401] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4 [ 1386.582144][ T6902] syz-executor: attempt to access beyond end of device [ 1386.582144][ T6902] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1386.672146][T17436] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 1386.721821][T17436] FAT-fs (loop4): Filesystem has been set read-only [ 1386.728481][T17436] syz.4.4126: attempt to access beyond end of device [ 1386.728481][T17436] loop4: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 1386.790615][ T28] audit: type=1400 audit(1753440618.263:2107): avc: denied { ioctl } for pid=17449 comm="syz.6.4130" path="socket:[72161]" dev="sockfs" ino=72161 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1386.816044][T17450] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1386.841519][T17436] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 1386.849381][T17436] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 1386.858098][T17450] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 1386.908035][T17436] syz.4.4126: attempt to access beyond end of device [ 1386.908035][T17436] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 1386.971120][ T28] audit: type=1400 audit(1753440618.443:2108): avc: denied { compute_member } for pid=17456 comm="syz.2.4133" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 1387.013840][T17459] loop4: detected capacity change from 0 to 512 [ 1387.028661][T17459] FAT-fs (loop4): Unrecognized mount option "0xffffffffffffffff" or missing value [ 1387.061445][ T313] usb 8-1: new low-speed USB device number 23 using dummy_hcd [ 1387.176728][T17459] loop4: detected capacity change from 0 to 512 [ 1387.193390][T17459] FAT-fs (loop4): Unrecognized mount option "0xffffffffffffffff" or missing value [ 1388.201805][T17469] overlayfs: missing 'lowerdir' [ 1388.682396][T17474] overlayfs: missing 'lowerdir' [ 1389.032520][ T313] usb 8-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1389.053496][T17478] loop2: detected capacity change from 0 to 128 [ 1389.061773][ T313] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1389.073089][ T313] usb 8-1: config 0 descriptor?? [ 1389.118760][T17478] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 1389.151451][T17478] FAT-fs (loop2): Filesystem has been set read-only [ 1389.168366][T17478] syz.2.4139: attempt to access beyond end of device [ 1389.168366][T17478] loop2: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 1389.201808][T17478] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 1389.219958][T17478] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 1389.233076][T17482] loop4: detected capacity change from 0 to 40427 [ 1389.238384][T17487] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 1389.256285][T17482] F2FS-fs (loop4): Invalid segment/section count (31, 2328 x 1) [ 1389.265134][T17487] syz.2.4139: attempt to access beyond end of device [ 1389.265134][T17487] loop2: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 1389.271556][T17482] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 1389.337504][T17487] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 1389.360035][T17482] F2FS-fs (loop4): invalid crc value [ 1389.365534][T17487] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 1389.384085][T17478] syz.2.4139: attempt to access beyond end of device [ 1389.384085][T17478] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 1389.441909][T17478] syz.2.4139: attempt to access beyond end of device [ 1389.441909][T17478] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 1389.480706][T17482] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1389.647854][T17481] loop6: detected capacity change from 0 to 40427 [ 1389.659122][T17482] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 1389.682764][T17482] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 1389.721802][T17481] F2FS-fs (loop6): Invalid segment/section count (31, 2328 x 1) [ 1389.787356][T17478] syz.2.4139: attempt to access beyond end of device [ 1389.787356][T17478] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 1389.806749][T17478] syz.2.4139: attempt to access beyond end of device [ 1389.806749][T17478] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 1389.810972][T17481] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 1389.820280][T17478] syz.2.4139: attempt to access beyond end of device [ 1389.820280][T17478] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 1389.842908][T17481] F2FS-fs (loop6): invalid crc value [ 1389.848981][T17478] syz.2.4139: attempt to access beyond end of device [ 1389.848981][T17478] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 1389.867538][T17478] syz.2.4139: attempt to access beyond end of device [ 1389.867538][T17478] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 1389.914111][T17478] syz.2.4139: attempt to access beyond end of device [ 1389.914111][T17478] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 1389.953360][T17481] F2FS-fs (loop6): Found nat_bits in checkpoint [ 1390.497643][T17507] overlayfs: missing 'lowerdir' [ 1390.993465][T17481] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 1391.000626][T17481] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4 [ 1391.053690][ T313] asix 8-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1391.063801][ T313] asix: probe of 8-1:0.0 failed with error -71 [ 1391.078708][T17513] loop2: detected capacity change from 0 to 512 [ 1391.086194][ T313] usb 8-1: USB disconnect, device number 23 [ 1391.252506][T17513] EXT4-fs error (device loop2): ext4_read_inode_bitmap:140: comm syz.2.4148: Invalid inode bitmap blk 4 in block_group 0 [ 1392.968007][T17513] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1393.090833][T17531] loop4: detected capacity change from 0 to 512 [ 1393.125812][T17531] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1393.135195][ T28] audit: type=1400 audit(1753440624.613:2109): avc: denied { setattr } for pid=17510 comm="syz.2.4148" path="/230/file0/file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1393.333047][T17540] loop7: detected capacity change from 0 to 128 [ 1393.367937][T17531] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1393.475846][T17531] ext4 filesystem being mounted at /200/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1393.510899][T13065] EXT4-fs (loop2): unmounting filesystem. [ 1393.517755][T17538] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 1393.551044][T17538] FAT-fs (loop7): Filesystem has been set read-only [ 1393.558338][T17538] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 1393.566466][T17538] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 1393.579514][T13792] EXT4-fs (loop4): unmounting filesystem. [ 1393.666129][ T28] audit: type=1400 audit(1753440625.143:2110): avc: denied { read } for pid=17544 comm="syz.4.4158" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1394.088760][ T28] audit: type=1400 audit(1753440625.143:2111): avc: denied { setattr } for pid=17544 comm="syz.4.4158" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1394.171560][T17538] bio_check_eod: 6008 callbacks suppressed [ 1394.171616][T17538] syz.7.4156: attempt to access beyond end of device [ 1394.171616][T17538] loop7: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 1395.565116][T17546] loop2: detected capacity change from 0 to 40427 [ 1395.602026][T17546] F2FS-fs (loop2): Invalid segment/section count (31, 2328 x 1) [ 1395.610062][T17546] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 1396.020296][T17546] F2FS-fs (loop2): invalid crc value [ 1396.250292][T17546] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1396.274362][T17579] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 1396.295894][T17579] loop7: detected capacity change from 0 to 512 [ 1396.303311][T17579] EXT4-fs: Ignoring removed nobh option [ 1396.319158][T17579] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 1396.323248][T17546] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 1396.339688][ T28] audit: type=1400 audit(1753440627.823:2112): avc: denied { create } for pid=17574 comm="syz.0.4167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 1396.371624][T17546] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 1396.439881][T17568] loop4: detected capacity change from 0 to 40427 [ 1396.457625][ T6902] EXT4-fs (loop7): unmounting filesystem. [ 1396.461819][T17568] F2FS-fs (loop4): Invalid segment/section count (31, 2328 x 1) [ 1396.464820][T17585] xt_hashlimit: size too large, truncated to 1048576 [ 1396.482316][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1396.486334][T17568] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 1396.546753][T17568] F2FS-fs (loop4): invalid crc value [ 1396.833976][T17587] process 'syz.0.4171' launched '/dev/fd/-1' with NULL argv: empty string added [ 1396.859336][T17568] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1396.903024][T17568] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 1396.920555][T17568] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 1397.603834][T13065] syz-executor: attempt to access beyond end of device [ 1397.603834][T13065] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1398.252816][T13792] syz-executor: attempt to access beyond end of device [ 1398.252816][T13792] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1399.490385][T17612] loop7: detected capacity change from 0 to 128 [ 1399.500600][T17613] loop2: detected capacity change from 0 to 128 [ 1399.702613][T17612] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 1399.711199][T17613] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 1399.719769][T17612] FAT-fs (loop7): Filesystem has been set read-only [ 1399.727049][T17613] FAT-fs (loop2): Filesystem has been set read-only [ 1400.347474][T17613] syz.2.4172: attempt to access beyond end of device [ 1400.347474][T17613] loop2: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 1400.368043][T17612] syz.7.4175: attempt to access beyond end of device [ 1400.368043][T17612] loop7: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 1400.384487][T17613] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 1400.393141][T17613] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 1400.431016][T17613] syz.2.4172: attempt to access beyond end of device [ 1400.431016][T17613] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 1400.445229][T17612] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 1400.511435][T17613] syz.2.4172: attempt to access beyond end of device [ 1400.511435][T17613] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 1400.523376][T17612] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 1400.576679][T17631] SELinux: failed to load policy [ 1400.583772][ T28] audit: type=1400 audit(1753440632.053:2113): avc: denied { load_policy } for pid=17630 comm="syz.7.4181" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 1401.378953][T17645] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4186'. [ 1401.481222][T17634] loop6: detected capacity change from 0 to 40427 [ 1401.491186][T17634] F2FS-fs (loop6): Invalid segment/section count (31, 2328 x 1) [ 1401.527726][T17634] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 1401.536735][T17634] F2FS-fs (loop6): invalid crc value [ 1401.543783][T17634] F2FS-fs (loop6): Found nat_bits in checkpoint [ 1401.577763][T17654] FAULT_INJECTION: forcing a failure. [ 1401.577763][T17654] name failslab, interval 1, probability 0, space 0, times 0 [ 1401.605324][T17654] CPU: 0 PID: 17654 Comm: syz.2.4188 Not tainted 6.1.141-syzkaller-00042-g96160a0e0aa1 #0 [ 1401.615355][T17654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1401.625439][T17654] Call Trace: [ 1401.628071][T17655] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4187'. [ 1401.628734][T17654] [ 1401.628745][T17654] __dump_stack+0x21/0x24 [ 1401.644858][T17654] dump_stack_lvl+0xee/0x150 [ 1401.649479][T17654] ? __cfi_dump_stack_lvl+0x8/0x8 [ 1401.654544][T17654] ? __cfi_kstrtouint_from_user+0x10/0x10 [ 1401.660305][T17654] dump_stack+0x15/0x24 [ 1401.664492][T17654] should_fail_ex+0x3d4/0x520 [ 1401.669199][T17654] __should_failslab+0xac/0xf0 [ 1401.673986][T17654] ? kvmalloc_node+0x294/0x480 [ 1401.678781][T17654] should_failslab+0x9/0x20 [ 1401.683312][T17654] __kmem_cache_alloc_node+0x3d/0x2c0 [ 1401.688710][T17654] ? kvmalloc_node+0x294/0x480 [ 1401.693502][T17654] __kmalloc_node+0xa1/0x1e0 [ 1401.698126][T17654] ? slab_free_freelist_hook+0xc2/0x190 [ 1401.703700][T17654] kvmalloc_node+0x294/0x480 [ 1401.708316][T17654] ? __cfi_kvmalloc_node+0x10/0x10 [ 1401.713454][T17654] ? __kasan_check_write+0x14/0x20 [ 1401.718598][T17654] traverse+0xd6/0x560 [ 1401.722698][T17654] ? __cfi_mutex_lock+0x10/0x10 [ 1401.727578][T17654] ? __kasan_check_write+0x14/0x20 [ 1401.732720][T17654] ? mutex_lock+0x8d/0x1a0 [ 1401.735086][T17656] loop4: detected capacity change from 0 to 1024 [ 1401.737157][T17654] ? __cfi_mutex_lock+0x10/0x10 [ 1401.748348][T17654] seq_lseek+0x13b/0x260 [ 1401.752624][T17654] proc_reg_llseek+0x1c1/0x2a0 [ 1401.757418][T17654] __x64_sys_lseek+0x182/0x200 [ 1401.762214][T17654] x64_sys_call+0x297/0x9a0 [ 1401.766744][T17654] do_syscall_64+0x4c/0xa0 [ 1401.771170][T17654] ? clear_bhb_loop+0x30/0x80 [ 1401.775857][T17654] ? clear_bhb_loop+0x30/0x80 [ 1401.780545][T17654] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1401.786453][T17654] RIP: 0033:0x7f825698e9a9 [ 1401.790871][T17654] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1401.810488][T17654] RSP: 002b:00007f8257888038 EFLAGS: 00000246 ORIG_RAX: 0000000000000008 [ 1401.818919][T17654] RAX: ffffffffffffffda RBX: 00007f8256bb5fa0 RCX: 00007f825698e9a9 [ 1401.826895][T17654] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000003 [ 1401.834867][T17654] RBP: 00007f8257888090 R08: 0000000000000000 R09: 0000000000000000 [ 1401.842837][T17654] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1401.850827][T17654] R13: 0000000000000000 R14: 00007f8256bb5fa0 R15: 00007ffdbf6320a8 [ 1401.858807][T17654] [ 1401.863770][T17634] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 1401.878547][T17634] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4 [ 1401.999142][T17656] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1402.051124][T17656] ext4 filesystem being mounted at /208/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1402.345946][T17655] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4187'. [ 1402.388119][T14837] syz-executor: attempt to access beyond end of device [ 1402.388119][T14837] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1402.424090][ T28] audit: type=1400 audit(1753440633.903:2114): avc: denied { execute } for pid=17646 comm="syz.4.4187" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1402.511433][T17672] overlayfs: missing 'lowerdir' [ 1402.781633][ T28] audit: type=1400 audit(1753440634.263:2115): avc: denied { execute_no_trans } for pid=17646 comm="syz.4.4187" path="/208/file1/file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1404.660594][T17686] loop2: detected capacity change from 0 to 1024 [ 1404.667520][T17686] EXT4-fs: Ignoring removed nobh option [ 1404.674376][T17686] EXT4-fs: Ignoring removed bh option [ 1404.691982][T13792] EXT4-fs (loop4): unmounting filesystem. [ 1404.725259][T17686] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1404.739006][T17689] loop7: detected capacity change from 0 to 512 [ 1404.745384][ T28] audit: type=1400 audit(1753440636.203:2116): avc: denied { append } for pid=17687 comm="syz.6.4199" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1404.786554][T17686] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1404.801658][T17689] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1404.814965][T17690] FAULT_INJECTION: forcing a failure. [ 1404.814965][T17690] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1404.849905][T17690] CPU: 0 PID: 17690 Comm: syz.6.4199 Not tainted 6.1.141-syzkaller-00042-g96160a0e0aa1 #0 [ 1404.859866][T17690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1404.869950][T17690] Call Trace: [ 1404.873254][T17690] [ 1404.876203][T17690] __dump_stack+0x21/0x24 [ 1404.880568][T17690] dump_stack_lvl+0xee/0x150 [ 1404.885185][T17690] ? __cfi_dump_stack_lvl+0x8/0x8 [ 1404.890238][T17690] ? vmx_read_guest_seg_ar+0x164/0x380 [ 1404.895720][T17690] dump_stack+0x15/0x24 [ 1404.899905][T17690] should_fail_ex+0x3d4/0x520 [ 1404.904603][T17690] should_fail+0xb/0x10 [ 1404.908790][T17690] should_fail_usercopy+0x1a/0x20 [ 1404.913854][T17690] __kvm_read_guest_page+0x14c/0x1d0 [ 1404.919170][T17690] kvm_vcpu_read_guest_page+0x318/0x3f0 [ 1404.924742][T17690] kvm_fetch_guest_virt+0x13f/0x180 [ 1404.929968][T17690] ? __cfi_kvm_fetch_guest_virt+0x10/0x10 [ 1404.935723][T17690] __do_insn_fetch_bytes+0x2b7/0x6c0 [ 1404.941041][T17690] ? x86_decode_insn+0x4cb0/0x4cb0 [ 1404.946177][T17690] ? kvm_tdp_mmu_map+0xc6c/0x1050 [ 1404.951224][T17690] x86_decode_insn+0x2dd/0x4cb0 [ 1404.956096][T17690] ? __cfi_kvm_tdp_mmu_map+0x10/0x10 [ 1404.961403][T17690] ? vmx_read_guest_seg_ar+0x1c1/0x380 [ 1404.966886][T17690] ? memset+0x35/0x40 [ 1404.970910][T17690] ? __cfi_x86_decode_insn+0x10/0x10 [ 1404.976224][T17690] x86_decode_emulated_instruction+0x62/0x180 [ 1404.982319][T17690] x86_emulate_instruction+0x203/0x1af0 [ 1404.987912][T17690] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 1404.994116][T17690] kvm_mmu_page_fault+0x68c/0x890 [ 1404.999184][T17690] ? __cfi_kvm_mmu_page_fault+0x10/0x10 [ 1405.004764][T17690] ? __kasan_check_read+0x11/0x20 [ 1405.009826][T17690] ? __kasan_check_write+0x14/0x20 [ 1405.014978][T17690] handle_ept_violation+0x217/0x4f0 [ 1405.020221][T17690] ? __cfi_handle_ept_violation+0x10/0x10 [ 1405.026069][T17690] vmx_handle_exit+0xc92/0x1b30 [ 1405.027446][T17702] loop4: detected capacity change from 0 to 512 [ 1405.030952][T17690] ? __cfi_vmx_vcpu_run+0x10/0x10 [ 1405.030983][T17690] ? vmx_handle_exit_irqoff+0x25a/0x6a0 [ 1405.047783][T17690] vcpu_enter_guest+0x2efe/0x6be0 [ 1405.052828][T17690] ? pvclock_gtod_update_fn+0x270/0x270 [ 1405.058384][T17690] ? segmented_read+0x60/0x400 [ 1405.063161][T17690] ? __kasan_check_read+0x11/0x20 [ 1405.068292][T17690] ? emulate_pop+0x2ed/0x670 [ 1405.072985][T17690] ? em_sti+0x220/0x220 [ 1405.077157][T17690] ? 0xffffffffa00041c0 [ 1405.081312][T17690] ? is_bpf_text_address+0x177/0x190 [ 1405.086610][T17690] ? generic_exec_single+0x237/0x3a0 [ 1405.091897][T17690] ? __kernel_text_address+0xd/0x30 [ 1405.097104][T17690] ? em_pop_sreg+0xd1/0x6c0 [ 1405.101614][T17690] ? arch_stack_walk+0xfc/0x150 [ 1405.106475][T17690] ? __cfi_em_pop_sreg+0x10/0x10 [ 1405.111425][T17690] ? vmx_vcpu_pi_load+0x12d/0x810 [ 1405.116458][T17690] ? __cfi___loaded_vmcs_clear+0x10/0x10 [ 1405.122101][T17690] ? __cfi_smp_call_function_single+0x10/0x10 [ 1405.128187][T17690] ? __kasan_check_write+0x14/0x20 [ 1405.133325][T17690] ? kvm_multiple_exception+0x63d/0xa50 [ 1405.138901][T17690] ? __kasan_check_read+0x11/0x20 [ 1405.143952][T17690] ? vmx_get_rflags+0xfb/0x200 [ 1405.148732][T17690] ? vmx_get_interrupt_shadow+0x1b/0xc0 [ 1405.154288][T17690] ? x86_emulate_instruction+0x13b8/0x1af0 [ 1405.160109][T17690] ? complete_emulated_mmio+0x4f7/0x780 [ 1405.165668][T17690] kvm_arch_vcpu_ioctl_run+0xec4/0x1fa0 [ 1405.171228][T17690] kvm_vcpu_ioctl+0x882/0xb70 [ 1405.175919][T17690] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 1405.181133][T17690] ? selinux_file_ioctl+0x377/0x480 [ 1405.186340][T17690] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 1405.191885][T17690] ? mutex_unlock+0x89/0x220 [ 1405.196480][T17690] ? __cfi_mutex_unlock+0x10/0x10 [ 1405.201512][T17690] ? __fget_files+0x2d5/0x330 [ 1405.206204][T17690] ? security_file_ioctl+0x95/0xc0 [ 1405.211318][T17690] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 1405.216618][T17690] __se_sys_ioctl+0x12f/0x1b0 [ 1405.221404][T17690] __x64_sys_ioctl+0x7b/0x90 [ 1405.226015][T17690] x64_sys_call+0x58b/0x9a0 [ 1405.230529][T17690] do_syscall_64+0x4c/0xa0 [ 1405.234956][T17690] ? clear_bhb_loop+0x30/0x80 [ 1405.239642][T17690] ? clear_bhb_loop+0x30/0x80 [ 1405.244326][T17690] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1405.250243][T17690] RIP: 0033:0x7fbd2718e9a9 [ 1405.254671][T17690] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1405.274373][T17690] RSP: 002b:00007fbd280c8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1405.282794][T17690] RAX: ffffffffffffffda RBX: 00007fbd273b5fa0 RCX: 00007fbd2718e9a9 [ 1405.290766][T17690] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1405.298737][T17690] RBP: 00007fbd280c8090 R08: 0000000000000000 R09: 0000000000000000 [ 1405.306711][T17690] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1405.314683][T17690] R13: 0000000000000000 R14: 00007fbd273b5fa0 R15: 00007fff5692b328 [ 1405.322667][T17690] [ 1405.878963][T17702] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 1406.019457][T17702] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 1406.031475][T17702] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 1406.042491][T17689] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 1406.089341][T17702] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 1406.100286][T13065] EXT4-fs (loop2): unmounting filesystem. [ 1406.101556][T17689] ext4 filesystem being mounted at /555/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1406.146278][T17702] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=e04ce01c, mo2=0000] [ 1406.170331][T17689] EXT4-fs error (device loop7): ext4_empty_dir:3145: inode #12: block 32: comm syz.7.4198: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 1406.191020][T17702] EXT4-fs (loop4): failed to initialize system zone (-117) [ 1406.198551][T17702] EXT4-fs (loop4): mount failed [ 1406.204980][T17689] EXT4-fs warning (device loop7): ext4_empty_dir:3147: inode #12: comm syz.7.4198: directory missing '.' [ 1406.237525][ T6902] EXT4-fs (loop7): unmounting filesystem. [ 1406.248447][T17717] loop6: detected capacity change from 0 to 512 [ 1406.348226][T17717] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 1406.513874][T17717] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 1406.561447][T17717] EXT4-fs (loop6): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 1406.584493][T17717] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 1406.592580][T17717] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=e04ce01c, mo2=0000] [ 1406.602934][T17717] EXT4-fs (loop6): failed to initialize system zone (-117) [ 1406.610968][T17717] EXT4-fs (loop6): mount failed [ 1406.618003][T17721] FAULT_INJECTION: forcing a failure. [ 1406.618003][T17721] name failslab, interval 1, probability 0, space 0, times 0 [ 1406.631488][T17721] CPU: 1 PID: 17721 Comm: syz.7.4207 Not tainted 6.1.141-syzkaller-00042-g96160a0e0aa1 #0 [ 1406.641415][T17721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1406.651491][T17721] Call Trace: [ 1406.654796][T17721] [ 1406.657743][T17721] __dump_stack+0x21/0x24 [ 1406.662116][T17721] dump_stack_lvl+0xee/0x150 [ 1406.666740][T17721] ? __cfi_dump_stack_lvl+0x8/0x8 [ 1406.671816][T17721] ? call_rcu+0xb83/0xf90 [ 1406.676178][T17721] ? exit_to_user_mode_loop+0x9b/0xb0 [ 1406.681579][T17721] dump_stack+0x15/0x24 [ 1406.685767][T17721] should_fail_ex+0x3d4/0x520 [ 1406.690473][T17721] __should_failslab+0xac/0xf0 [ 1406.695264][T17721] ? tracepoint_probe_unregister+0x1e6/0x8b0 [ 1406.701277][T17721] should_failslab+0x9/0x20 [ 1406.705807][T17721] __kmem_cache_alloc_node+0x3d/0x2c0 [ 1406.711207][T17721] ? __cfi_mutex_lock+0x10/0x10 [ 1406.716079][T17721] ? delete_node+0x2b3/0xa60 [ 1406.720703][T17721] ? tracepoint_probe_unregister+0x1e6/0x8b0 [ 1406.726709][T17721] __kmalloc+0xa1/0x1e0 [ 1406.730901][T17721] ? __cfi___bpf_trace_sched_switch+0x10/0x10 [ 1406.731538][T17715] loop2: detected capacity change from 0 to 40427 [ 1406.736996][T17721] tracepoint_probe_unregister+0x1e6/0x8b0 [ 1406.737028][T17721] bpf_probe_unregister+0x61/0x70 [ 1406.747403][T17715] F2FS-fs (loop2): Invalid segment/section count (31, 2328 x 1) [ 1406.749235][T17721] bpf_raw_tp_link_release+0x63/0x90 [ 1406.767157][T17721] bpf_link_free+0x13a/0x390 [ 1406.769576][T17715] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 1406.771785][T17721] ? bpf_link_put_deferred+0x20/0x20 [ 1406.771819][T17721] ? security_file_free+0xd8/0xf0 [ 1406.771845][T17721] bpf_link_release+0x15f/0x170 [ 1406.795139][T17721] ? __cfi_bpf_link_release+0x10/0x10 [ 1406.800550][T17721] __fput+0x1fc/0x8f0 [ 1406.804563][T17721] ? _raw_spin_unlock+0x4c/0x70 [ 1406.809252][T17715] F2FS-fs (loop2): invalid crc value [ 1406.809446][T17721] ____fput+0x15/0x20 [ 1406.818156][T17715] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1406.818707][T17721] task_work_run+0x1db/0x240 [ 1406.829553][T17721] ? __cfi_task_work_run+0x10/0x10 [ 1406.834688][T17721] ? __cfi___close_range+0x10/0x10 [ 1406.839831][T17721] exit_to_user_mode_loop+0x9b/0xb0 [ 1406.845048][T17721] exit_to_user_mode_prepare+0x5a/0xa0 [ 1406.850532][T17721] syscall_exit_to_user_mode+0x1a/0x30 [ 1406.856020][T17721] do_syscall_64+0x58/0xa0 [ 1406.860454][T17721] ? clear_bhb_loop+0x30/0x80 [ 1406.862672][T17715] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 1406.865148][T17721] ? clear_bhb_loop+0x30/0x80 [ 1406.872383][T17715] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 1406.876837][T17721] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1406.890174][T17721] RIP: 0033:0x7f1fa838e9a9 [ 1406.894610][T17721] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1406.914237][T17721] RSP: 002b:00007f1fa926a038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1406.922679][T17721] RAX: 0000000000000000 RBX: 00007f1fa85b5fa0 RCX: 00007f1fa838e9a9 [ 1406.930657][T17721] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000000 [ 1406.938625][T17721] RBP: 00007f1fa926a090 R08: 0000000000000000 R09: 0000000000000000 [ 1406.946593][T17721] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1406.954558][T17721] R13: 0000000000000000 R14: 00007f1fa85b5fa0 R15: 00007fff93476af8 [ 1406.962531][T17721] [ 1406.976308][T17721] CFI failure at __traceiter_sched_switch+0x9b/0xd0 (target: tp_stub_func+0x0/0x10; expected type: 0xee1f7a69) [ 1406.988132][T17721] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 1406.994218][T17721] CPU: 1 PID: 17721 Comm: syz.7.4207 Not tainted 6.1.141-syzkaller-00042-g96160a0e0aa1 #0 [ 1407.004127][T17721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1407.011283][T17718] CFI failure at __traceiter_sched_switch+0x9b/0xd0 (target: tp_stub_func+0x0/0x10; expected type: 0xee1f7a69) [ 1407.014191][T17721] RIP: 0010:__traceiter_sched_switch+0x9b/0xd0 [ 1407.032042][T17721] Code: 80 3c 30 00 74 05 e8 04 57 69 00 49 8b 7d 08 44 89 e6 48 8b 55 c8 48 8b 4d c0 44 8b 45 d4 41 ba 97 85 e0 11 45 03 57 fc 74 02 <0f> 0b 41 ff d7 48 83 c3 18 48 89 d8 48 c1 e8 03 42 80 3c 30 00 74 [ 1407.051641][T17721] RSP: 0018:ffffc90009f77490 EFLAGS: 00010096 [ 1407.057699][T17721] RAX: 1ffff11023802966 RBX: ffff88811c014b28 RCX: ffff88811f07e540 [ 1407.065665][T17721] RDX: ffff88813e628000 RSI: 0000000000000001 RDI: ffffc9000a9bb000 [ 1407.073643][T17721] RBP: ffffc90009f774d0 R08: 0000000000000000 R09: fffffbfff0ee43ee [ 1407.081609][T17721] R10: 00000000b720eca3 R11: 1ffffffff0ee43ed R12: 0000000000000001 [ 1407.089582][T17721] R13: ffff88811c014b28 R14: dffffc0000000000 R15: ffffffff817113c0 [ 1407.097550][T17721] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 1407.106471][T17721] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1407.113048][T17721] CR2: 00007f1fa83edbf8 CR3: 000000011cc16000 CR4: 00000000003506a0 [ 1407.121035][T17721] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1407.129005][T17721] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1407.136967][T17721] Call Trace: [ 1407.140238][T17721] [ 1407.143164][T17721] __schedule+0x1263/0x14e0 [ 1407.147671][T17721] ? release_firmware_map_entry+0x194/0x194 [ 1407.153563][T17721] preempt_schedule_notrace+0xca/0x110 [ 1407.159015][T17721] ? __cfi_preempt_schedule_notrace+0x10/0x10 [ 1407.165078][T17721] preempt_schedule_notrace_thunk+0x16/0x18 [ 1407.170983][T17721] rcu_is_watching+0x7b/0xb0 [ 1407.175567][T17721] kernel_text_address+0x80/0xd0 [ 1407.180524][T17721] __kernel_text_address+0xd/0x30 [ 1407.185544][T17721] unwind_get_return_address+0x4d/0x90 [ 1407.190999][T17721] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 1407.197165][T17721] arch_stack_walk+0xfc/0x150 [ 1407.201885][T17721] stack_trace_save+0x98/0xe0 [ 1407.206556][T17721] ? __cfi_stack_trace_save+0x10/0x10 [ 1407.211921][T17721] ? check_preempt_wakeup+0x5be/0xbc0 [ 1407.217306][T17721] ? memset+0x35/0x40 [ 1407.221294][T17721] kasan_set_track+0x4b/0x70 [ 1407.225883][T17721] ? kasan_set_track+0x4b/0x70 [ 1407.230645][T17721] ? kasan_save_free_info+0x31/0x50 [ 1407.235838][T17721] ? ____kasan_slab_free+0x132/0x180 [ 1407.241114][T17721] ? __kasan_slab_free+0x11/0x20 [ 1407.246045][T17721] ? slab_free_freelist_hook+0xc2/0x190 [ 1407.251591][T17721] ? __kmem_cache_free+0xb7/0x1b0 [ 1407.256608][T17721] ? kfree+0x6f/0xf0 [ 1407.260500][T17721] ? __seccomp_filter_release+0x167/0x1e0 [ 1407.266211][T17721] ? seccomp_filter_release+0x8b/0xb0 [ 1407.271572][T17721] ? release_task+0x10b7/0x1200 [ 1407.276423][T17721] ? do_exit+0x18af/0x2650 [ 1407.280844][T17721] ? do_group_exit+0x210/0x2d0 [ 1407.285605][T17721] ? __x64_sys_exit_group+0x3f/0x40 [ 1407.290799][T17721] ? x64_sys_call+0x7b4/0x9a0 [ 1407.295471][T17721] ? do_syscall_64+0x4c/0xa0 [ 1407.300049][T17721] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1407.306121][T17721] ? __kmem_cache_free+0xb7/0x1b0 [ 1407.311145][T17721] kasan_save_free_info+0x31/0x50 [ 1407.316168][T17721] ____kasan_slab_free+0x132/0x180 [ 1407.321276][T17721] __kasan_slab_free+0x11/0x20 [ 1407.326031][T17721] slab_free_freelist_hook+0xc2/0x190 [ 1407.331418][T17721] ? __seccomp_filter_release+0x167/0x1e0 [ 1407.337130][T17721] __kmem_cache_free+0xb7/0x1b0 [ 1407.341978][T17721] kfree+0x6f/0xf0 [ 1407.345696][T17721] __seccomp_filter_release+0x167/0x1e0 [ 1407.351233][T17721] seccomp_filter_release+0x8b/0xb0 [ 1407.356424][T17721] release_task+0x10b7/0x1200 [ 1407.361100][T17721] do_exit+0x18af/0x2650 [ 1407.365343][T17721] ? __fget_files+0x2d5/0x330 [ 1407.370019][T17721] ? __cfi_do_exit+0x10/0x10 [ 1407.374611][T17721] ? kick_process+0xee/0x160 [ 1407.379194][T17721] ? zap_other_threads+0x2b7/0x2f0 [ 1407.384301][T17721] do_group_exit+0x210/0x2d0 [ 1407.388892][T17721] __x64_sys_exit_group+0x3f/0x40 [ 1407.393920][T17721] x64_sys_call+0x7b4/0x9a0 [ 1407.398420][T17721] do_syscall_64+0x4c/0xa0 [ 1407.402826][T17721] ? clear_bhb_loop+0x30/0x80 [ 1407.407498][T17721] ? clear_bhb_loop+0x30/0x80 [ 1407.412196][T17721] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1407.418085][T17721] RIP: 0033:0x7f1fa838e9a9 [ 1407.422491][T17721] Code: Unable to access opcode bytes at 0x7f1fa838e97f. [ 1407.429497][T17721] RSP: 002b:00007f1fa9269f48 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 1407.437904][T17721] RAX: ffffffffffffffda RBX: 00007f1fa83edbf8 RCX: 00007f1fa838e9a9 [ 1407.445869][T17721] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 1407.453834][T17721] RBP: 0000000000000009 R08: 00007f1fa9267ce7 R09: 0000000000000001 [ 1407.461801][T17721] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1407.469763][T17721] R13: 0000000000000000 R14: 00007f1fa85b5fa0 R15: 00007fff93476af8 [ 1407.477732][T17721] [ 1407.480746][T17721] Modules linked in: [ 1407.484676][T17721] ---[ end trace 0000000000000000 ]--- [ 1407.484696][T17718] invalid opcode: 0000 [#2] PREEMPT SMP KASAN [ 1407.490141][T17721] RIP: 0010:__traceiter_sched_switch+0x9b/0xd0 [ 1407.496206][T17718] CPU: 0 PID: 17718 Comm: syz.0.4204 Tainted: G D 6.1.141-syzkaller-00042-g96160a0e0aa1 #0 [ 1407.502350][T17721] Code: 80 3c 30 00 74 05 e8 04 57 69 00 49 8b 7d 08 44 89 e6 48 8b 55 c8 48 8b 4d c0 44 8b 45 d4 41 ba 97 85 e0 11 45 03 57 fc 74 02 <0f> 0b 41 ff d7 48 83 c3 18 48 89 d8 48 c1 e8 03 42 80 3c 30 00 74 [ 1407.513699][T17718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1407.533296][T17721] RSP: 0018:ffffc90009f77490 EFLAGS: 00010096 [ 1407.543348][T17718] RIP: 0010:__traceiter_sched_switch+0x9b/0xd0 [ 1407.549416][T17721] RAX: 1ffff11023802966 RBX: ffff88811c014b28 RCX: ffff88811f07e540 [ 1407.555558][T17718] Code: 80 3c 30 00 74 05 e8 04 57 69 00 49 8b 7d 08 44 89 e6 48 8b 55 c8 48 8b 4d c0 44 8b 45 d4 41 ba 97 85 e0 11 45 03 57 fc 74 02 <0f> 0b 41 ff d7 48 83 c3 18 48 89 d8 48 c1 e8 03 42 80 3c 30 00 74 [ 1407.563520][T17721] RDX: ffff88813e628000 RSI: 0000000000000001 RDI: ffffc9000a9bb000 [ 1407.583147][T17718] RSP: 0018:ffffc9000a057830 EFLAGS: 00010096 [ 1407.591113][T17721] RBP: ffffc90009f774d0 R08: 0000000000000000 R09: fffffbfff0ee43ee [ 1407.597172][T17718] RAX: 1ffff11023802966 RBX: ffff88811c014b28 RCX: ffff88811cd21440 [ 1407.605133][T17721] R10: 00000000b720eca3 R11: 1ffffffff0ee43ed R12: 0000000000000001 [ 1407.613094][T17718] RDX: ffff88810039bcc0 RSI: 0000000000000000 RDI: ffffc9000a9bb000 [ 1407.621055][T17721] R13: ffff88811c014b28 R14: dffffc0000000000 R15: ffffffff817113c0 [ 1407.629023][T17718] RBP: ffffc9000a057870 R08: 0000000000000080 R09: fffffbfff0ee43ee [ 1407.636990][T17721] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 1407.644987][T17718] R10: 00000000b720eca3 R11: 1ffffffff0ee43ed R12: 0000000000000000 [ 1407.653907][T17721] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1407.661897][T17718] R13: ffff88811c014b28 R14: dffffc0000000000 R15: ffffffff817113c0 [ 1407.668657][T17721] CR2: 00007f1fa83edbf8 CR3: 000000011cc16000 CR4: 00000000003506a0 [ 1407.676638][T17718] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 1407.684693][T17721] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1407.693608][T17718] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1407.701568][T17721] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1407.708141][T17718] CR2: 0000001b2c11fffc CR3: 0000000006e0f000 CR4: 00000000003506b0 [ 1407.716111][T17721] Kernel panic - not syncing: Fatal exception [ 1407.724080][T17718] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1407.724093][T17718] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1407.724105][T17718] Call Trace: [ 1407.724112][T17718] [ 1407.724123][T17718] __schedule+0x1263/0x14e0 [ 1407.724158][T17718] ? release_firmware_map_entry+0x194/0x194 [ 1407.724187][T17718] ? memcpy+0x56/0x70 [ 1407.724212][T17718] ? __kasan_check_write+0x14/0x20 [ 1407.724239][T17718] do_task_dead+0x9c/0xa0 [ 1407.724264][T17718] do_exit+0x1baa/0x2650 [ 1407.724291][T17718] ? __cfi_do_exit+0x10/0x10 [ 1407.724315][T17718] ? plist_del+0x3df/0x3f0 [ 1407.724334][T17718] ? _raw_spin_unlock+0x4c/0x70 [ 1407.724360][T17718] ? futex_unqueue+0x126/0x160 [ 1407.724386][T17718] ? cgroup_freezing+0x9c/0xc0 [ 1407.724408][T17718] do_group_exit+0x210/0x2d0 [ 1407.724432][T17718] ? __kasan_check_write+0x14/0x20 [ 1407.724459][T17718] get_signal+0x13b5/0x1520 [ 1407.724488][T17718] arch_do_signal_or_restart+0xb0/0x1030 [ 1407.724511][T17718] ? do_futex+0x2dc/0x420 [ 1407.724538][T17718] ? __cfi_do_futex+0x10/0x10 [ 1407.724565][T17718] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 1407.724587][T17718] ? __se_sys_futex+0x273/0x2e0 [ 1407.724618][T17718] exit_to_user_mode_loop+0x7a/0xb0 [ 1407.724637][T17718] exit_to_user_mode_prepare+0x5a/0xa0 [ 1407.724655][T17718] syscall_exit_to_user_mode+0x1a/0x30 [ 1407.724679][T17718] do_syscall_64+0x58/0xa0 [ 1407.724694][T17718] ? clear_bhb_loop+0x30/0x80 [ 1407.724714][T17718] ? clear_bhb_loop+0x30/0x80 [ 1407.724734][T17718] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1407.724753][T17718] RIP: 0033:0x7f9bf2b8e9a9 [ 1407.724767][T17718] Code: Unable to access opcode bytes at 0x7f9bf2b8e97f. [ 1407.724777][T17718] RSP: 002b:00007f9bf3a180e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1407.724795][T17718] RAX: fffffffffffffe00 RBX: 00007f9bf2db6088 RCX: 00007f9bf2b8e9a9 [ 1407.724809][T17718] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f9bf2db6088 [ 1407.724822][T17718] RBP: 00007f9bf2db6080 R08: 0000000000000000 R09: 0000000000000000 [ 1407.724834][T17718] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9bf2db608c [ 1407.724846][T17718] R13: 0000000000000000 R14: 00007fff1e953d00 R15: 00007fff1e953de8 [ 1407.724862][T17718] [ 1407.724868][T17718] Modules linked in: [ 1407.730933][T17718] ---[ end trace 0000000000000000 ]--- [ 1407.730942][T17718] RIP: 0010:__traceiter_sched_switch+0x9b/0xd0 [ 1407.730965][T17718] Code: 80 3c 30 00 74 05 e8 04 57 69 00 49 8b 7d 08 44 89 e6 48 8b 55 c8 48 8b 4d c0 44 8b 45 d4 41 ba 97 85 e0 11 45 03 57 fc 74 02 <0f> 0b 41 ff d7 48 83 c3 18 48 89 d8 48 c1 e8 03 42 80 3c 30 00 74 [ 1407.730981][T17718] RSP: 0018:ffffc90009f77490 EFLAGS: 00010096 [ 1407.730996][T17718] RAX: 1ffff11023802966 RBX: ffff88811c014b28 RCX: ffff88811f07e540 [ 1407.731010][T17718] RDX: ffff88813e628000 RSI: 0000000000000001 RDI: ffffc9000a9bb000 [ 1407.731023][T17718] RBP: ffffc90009f774d0 R08: 0000000000000000 R09: fffffbfff0ee43ee [ 1407.731036][T17718] R10: 00000000b720eca3 R11: 1ffffffff0ee43ed R12: 0000000000000001 [ 1407.731048][T17718] R13: ffff88811c014b28 R14: dffffc0000000000 R15: ffffffff817113c0 [ 1407.731067][T17718] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 1407.731083][T17718] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1407.731096][T17718] CR2: 0000001b2c11fffc CR3: 0000000006e0f000 CR4: 00000000003506b0 [ 1407.731111][T17718] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1407.731122][T17718] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1408.909177][T17721] Shutting down cpus with NMI [ 1409.246005][T17721] Kernel Offset: disabled [ 1409.250334][T17721] Rebooting in 86400 seconds..