last executing test programs: 1m45.577059945s ago: executing program 4 (id=551): setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x200000c0, 0xffffffff, 0xfffffff8}, 0x10) socket(0x9, 0x80006, 0xfffffffe) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = socket$can_raw(0x1d, 0x3, 0x1) timer_create(0x0, &(0x7f00000005c0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) read(r4, &(0x7f00000027c0)=""/4073, 0xfe9) 1m44.61320365s ago: executing program 4 (id=556): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff00000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='kmem_cache_free\x00', r1}, 0x18) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) open$dir(&(0x7f0000000040)='./file0\x00', 0x82, 0x0) 1m44.065242498s ago: executing program 4 (id=558): r0 = open(&(0x7f00000004c0)='./bus\x00', 0x143042, 0x0) ftruncate(r0, 0x2008002) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x17ffffb, 0x12, r0, 0x0) ftruncate(r0, 0x1) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000640)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000600)={&(0x7f0000000500)=ANY=[@ANYBLOB="f4000000", @ANYRES16=0x0, @ANYBLOB="00042abd7000fbdbdf25040000000800030006000000050005004000000008000200040000001400068005000200b300000006000100020000002400068008000700", @ANYRES32=0x0, @ANYBLOB="0600010002000000060005004e210000060005004e2300003c000680080003000a01010208000300e0000002080006000800000008000300e000000206000100080000000800060010000000060005004e22000008000300050000004c000680060005004e240000080007", @ANYRES32=0x0, @ANYBLOB="14000400fe88007f00000000000400000000010114b000000000fdff00000000ce8e000000f7f7"], 0xf4}}, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='net/igmp\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x4000, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x7, 0x2ab, &(0x7f0000000a80)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b708000002001e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000d00)='sched_switch\x00', r4}, 0x10) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x240, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r5, 0x400455c8, 0x4) 1m33.029130555s ago: executing program 4 (id=623): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) socket$igmp6(0xa, 0x3, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000140)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f00000001c0), 0x2, 0x51a, &(0x7f0000001200)="$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") socketpair$unix(0x1, 0x5, 0x0, 0x0) msync(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x5, 0x400, 0x1000}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_clone(0x44209400, 0x0, 0x0, &(0x7f0000000180), 0x0, 0x0) 1m32.354386054s ago: executing program 4 (id=627): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x4}}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000140), 0x8, &(0x7f0000000680)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) setxattr$trusted_overlay_redirect(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), 0x0, 0x0, 0x2) 1m31.97747073s ago: executing program 4 (id=631): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000100000012000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') pread64(r4, &(0x7f0000004180)=""/4096, 0x1000, 0x0) write$FUSE_BMAP(r4, &(0x7f0000000400)={0x18, 0x0, 0x0, {0x8}}, 0x18) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r5}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x2, 0x0, 0x0, 0x4, 0x0) r7 = syz_pidfd_open(r6, 0x0) pidfd_send_signal(r7, 0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) r8 = dup(0xffffffffffffffff) r9 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r9, &(0x7f0000000dc0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) write$P9_RWRITE(r8, &(0x7f00000003c0)={0xb, 0x77, 0x2, 0x5}, 0xb) sendto$inet6(r9, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x2a, &(0x7f0000000e00)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0xe0, 0x4e20, 0x8}}}}}, 0x0) r10 = socket$can_bcm(0x1d, 0x2, 0x2) preadv(r10, &(0x7f00000001c0)=[{&(0x7f0000000180)=""/1, 0x1}, {&(0x7f0000000300)=""/17, 0x9}], 0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000001d000100000000000000000007000000", @ANYRES32=r11, @ANYBLOB="000096000a000200aaaaaaaaa80c00000600050001"], 0x30}}, 0x0) rt_sigprocmask(0x2, &(0x7f0000000340)={[0x4]}, &(0x7f0000000380), 0x8) 1m31.826847513s ago: executing program 32 (id=631): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000100000012000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') pread64(r4, &(0x7f0000004180)=""/4096, 0x1000, 0x0) write$FUSE_BMAP(r4, &(0x7f0000000400)={0x18, 0x0, 0x0, {0x8}}, 0x18) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r5}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x2, 0x0, 0x0, 0x4, 0x0) r7 = syz_pidfd_open(r6, 0x0) pidfd_send_signal(r7, 0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) r8 = dup(0xffffffffffffffff) r9 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r9, &(0x7f0000000dc0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) write$P9_RWRITE(r8, &(0x7f00000003c0)={0xb, 0x77, 0x2, 0x5}, 0xb) sendto$inet6(r9, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x2a, &(0x7f0000000e00)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0xe0, 0x4e20, 0x8}}}}}, 0x0) r10 = socket$can_bcm(0x1d, 0x2, 0x2) preadv(r10, &(0x7f00000001c0)=[{&(0x7f0000000180)=""/1, 0x1}, {&(0x7f0000000300)=""/17, 0x9}], 0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000001d000100000000000000000007000000", @ANYRES32=r11, @ANYBLOB="000096000a000200aaaaaaaaa80c00000600050001"], 0x30}}, 0x0) rt_sigprocmask(0x2, &(0x7f0000000340)={[0x4]}, &(0x7f0000000380), 0x8) 24.45372656s ago: executing program 2 (id=941): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0xff58) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) getpid() r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = getpid() dup2(0xffffffffffffffff, r3) open_tree(0xffffffffffffff9c, &(0x7f0000001040)='./file0\x00', 0x40101) process_vm_readv(r4, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRESDEC=r0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) write(r5, &(0x7f0000000000)="fa", 0xfffffdef) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) getrandom(&(0x7f0000000080)=""/240, 0xfffffffffffffe77, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 23.606659592s ago: executing program 2 (id=948): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000000)='./bus\x00', 0x204a024, &(0x7f0000000040)=ANY=[@ANYRESOCT], 0xfd, 0x386, &(0x7f00000007c0)="$eJzs3c9rI2UYwPFn0jQ/WrbJQRQF6YNe3MvQVs9qkS4IBZfuRtwVFma3Uw0dkzITKhGx8eRVvPkPCC578LDgoaD+A714Wy9ePG0vC4IuIo7MryTTnSZNmqXp9vuB3bzJ+z6Z950f5XkD887hB19/sr3lmVtWS3Klh2KIiDwWqUpOEkb0UpAMnb3L838+ePnajZtFEVnbUL2yev31FVVdWPzp08/LcbP9ohxUbx0+Wvnj4PmDFw//u/5x3dO6p41mSy293fy9Zd12bN2se9um6lXHtjxb6w3PdqP6ZlS/5TR3dtpqNTYvze24tuep1Wjrtt3WVlNbblutj6x6Q03T1EtzWd2NFQfUnVelMWJqdzc2rNUxN3hnzDhM2j++7w+odt1Va0bEDC7GTqqmdvep9w0AAEyddP6v3yYJe1Vy3YTSiOcChbCcngZ05PJ8Ul5fX9vQYLLQy//vvfJLa/79+wv7QcZ963C/kJX/v/FbFJ/K/4OtTzz///7I+/LkduS02Bul8anyf0yHxfQV+bA3Y48F+X9wNXRn9F9+eG8pLJD/AwAAAAAAAAAAAAAAAAAAAABwHjz2/Yrv+5XkNfnXu4Ugfh8yOgNvNMa5k5Ps41+MVxTong94Jl27cVNK4Y17+QUR56vd2m4teo3rk4ZLUpF/w/MhFi04Ea0noIGq/Ozs7dZm44CZ8P/Vgqg4YsuyVKSaig/LV95dX1vWSBQfbn9vt2bk54L4LamH8StSkeey41cy4wvy2qt98aZU5Nc70hRHNsPzuhf/xbLqO++tH4kvh+2yvPV0DwkAAAAAABNnqpbi6XM1Pf+N5u+mqZpVL9VoDc3u/PrJ3we68+ulzPl5vvJS/owHDwAAAADABeEVPtu2HMd2vfaxhbIMa5M8T2Pw92QX8qM0DgoPwsLsoDYzfSM86TcX4idojNB5GW2kluP8VZTMnZks4ZqqKp1ir1pOMv4TNC6NeghcLzf62G3XWwz6o2MNp6+Q/GwUfTLzxK6Tq8eF/2AkUaNtNFk5d1jjF7757u/xxmXEq/b2V715v5Qa6THhxpFPOkNO2ke+P7Q/s9l/LX4c5yEzAAAAAKZEkvSXveSTt8+2QwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXECnW4ntZIWzHiMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwLf4PAAD//5QI8Zs=") bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000009f40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x60, 0x30, 0x5, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_skbedit={0x48, 0x1, 0x0, 0x0, {{0xc}, {0x38, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x4}]}, {0x4}, {0xc, 0x9, {0x2d}}, {0xc}}}]}]}, 0x60}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x40, 0x2b) 23.550739943s ago: executing program 2 (id=949): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x10000, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) lseek(0xffffffffffffffff, 0x10000, 0x1) syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000892e79105e04040000000102030109022200010900000009040000000e01000008240201010200000824020100000000"], 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x5e, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) timerfd_gettime(0xffffffffffffffff, 0x0) 21.739042631s ago: executing program 2 (id=956): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) syz_emit_ethernet(0x52, &(0x7f0000000080)={@random="110000000001", @empty, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00ff03", 0x18, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @mcast2, {[], @mld={0x83, 0x0, 0x0, 0x0, 0x2, @empty}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_emit_ethernet(0x34e, &(0x7f0000000cc0)={@local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00ed00", 0x318, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78c000005dc8080a2030003004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34060600000000000000dac15084dbaf736b41e5af0502"}, {0x0, 0x1, "000003000000000026000400"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf3915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x3, 0xb, "17dcea468000000000054740a5d4901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2bce9ac946a3f0e2bc4000091394c02bcfbbb7d71138537d68e2d2c6393a9f3cc271a9ff09a48b5b303f4f0"}, {0xe, 0x7, "b8a3e10000a3e1100000006f00ffc0ffff00000000600000ff0bc0fe000000000000000000000000d9a0274400"/55}, {0x0, 0xc, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d180600027628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808298e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c"}]}}}}}}, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000cc0)=@newqdisc={0x50, 0x24, 0xd0f, 0x7, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x4, 0xf}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x10, 0x3, 0x1, 0x3, 0x6, 0x8}, [@TCA_NETEM_DELAY_DIST={0x4}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40001d4}, 0x8840) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f00000000c0)={0x3, &(0x7f0000000040)=[{0x40, 0x0, 0x0, 0x83a4}, {0x20, 0x1, 0x0, 0xfffff034}, {0x6, 0x80}]}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r4}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r7}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @broadcast}) 20.304106823s ago: executing program 2 (id=962): syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000180)='proc\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) openat(r0, &(0x7f0000000040)='./file0\x00', 0x200, 0x80) syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000000340)='./file1\x00', 0x2200010, &(0x7f0000000380)=ANY=[@ANYRESDEC=r0], 0x1, 0x14e1, &(0x7f0000003fc0)="$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") r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x39, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000006c0)=ANY=[@ANYRES16, @ANYRES8=r1, @ANYRES32=r0, @ANYRES16=r2, @ANYRESHEX=r2, @ANYBLOB="8f39006e03e04592788b4f593927c301cbb631b4bdc4b809dba9273272ba2e8fff49848df93a34e572f75a36e85c3f1a1c824543d406ecb01615b5ef7131904fc7114b92d3b056cdc13d0fd0683c60099017e8b7287bae752087f0eddd79c2be6d3a1fb2824224eeb462adc88b02a99ea25264b002976bf273a5d35d9bab7d83e4b0e8f006a27fd02ec680773165b459ae6d7d65604c8fa414551789b6d185a93a1031dac477a593beb3f3fe141dafccdee9d8868b69b0e8fd0972349e580c38744936f982a89dfa4c1368c24dd2fbf560d9a444cfbf4a0dc32fefa307c5bdeb99ebb1adbfc7"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r3}, 0x10) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r6 = dup(r5) write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r6, &(0x7f00000000c0)={0x14c}, 0x137) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000180)={0x5, 0x7, 0x0, 0x2000, &(0x7f00007c1000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f00007b6000/0x18000)=nil, &(0x7f0000000300)=[@text16={0x10, 0x0}], 0x1, 0x10, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$KVM_GET_DIRTY_LOG(r8, 0x4010ae42, &(0x7f0000000080)={0x0, 0x0, &(0x7f00007a4000/0x4000)=nil}) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000a50000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x40, 0x0, 0x0, 0x0, 0x0) mount$incfs(&(0x7f0000000300)='./file0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000280), 0x0, 0x0) r11 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) r12 = openat$incfs(r11, &(0x7f0000000180)='.pending_reads\x00', 0x10b441, 0x0) ioctl$INCFS_IOC_CREATE_FILE(r12, 0xc058671e, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r10}, 0x10) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r6, @ANYBLOB='$\x00']) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f00000005c0)) 19.907269509s ago: executing program 2 (id=970): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_int(r0, 0x29, 0x7, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000100005070000", @ANYRES32=r3, @ANYBLOB="00000016010000001800120008000100736974000c0002000800030036"], 0x38}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x439, 0x70bd2c, 0xffffffea, {0x0, 0x0, 0xe403, r3, 0x40083, 0x602a}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FWMARK={0x8, 0x14, 0x5}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0xd}}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) 5.89854809s ago: executing program 3 (id=1037): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000400), 0xff, 0x23f, &(0x7f0000000540)="$eJzs3T1oLFUYBuB3Zne95t5FrtoI4g+IiAbCtRNsYqMQkBBEBBUiIjZKIsQEu8TKxkJrlVQ2QeyMlpIm2CiCVdQUsRE0WBgstFiZnURisuLPxh1xngdmZ2b3nPnOMPOe3WbYAK11Nclskk6S6SS9JMXpBnfWy9Xj3c2p3cVkMHjsh2LYrt6vnfS7kmQjyQNJdsoiL3STte2nDn7ae+Se11d7d7+7/eTURE/y2OHB/qNH78y/9sHc/WufffHdfJHZ9H93XhevGPFet0hu+jeK/UcU3aZHwF+x8Mr7X1a5vznJXcP891KmvnhvrFy308t9b/9R3ze///zWSY4VuHiDQa/6DtwYAK1TJumnKGeS1NtlOTNT/4b/qnO5fHF55eXp55dXl55reqYCLko/2X/4o0sfXjmT/287df6B/68q/48vbH1dbR91mh4NMBG31asq/9PPrN8b+YfWkX9oL/mH9pJ/aC/5h/aSf2gv+Yf2kn9oL/mH9pJ/aK/T+QcA2mVwqeknkIGmND3/AAAAAAAAAAAAAAAAAAAA521O7S6eLJOq+clbyeFDSbqj6neG/0ecXD98vfxjUTX7TVF3G8vTd4x5gDG91/DT1zd802z9T29vtv76UrLxapJr3e75+684vv/+uRv/5PPes2MW+JuKM/sPPjHZ+mf9stVs/bm95ONq/rk2av4pc8twPXr+6VfXb8z6L/085gEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACYmF8DAAD//xFQbUc=") setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000002b40)=ANY=[@ANYBLOB="020000000112c32140000000000000000000000010000000000000002000000000000000"], 0x24, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@ptr={0x0, 0x0, 0x0, 0x2, 0x2}]}}, &(0x7f0000000f40)=""/4071, 0x26, 0xfe7, 0x2}, 0x28) openat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', 0x443, 0x101) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) write$uinput_user_dev(r0, &(0x7f0000000380)={'syz0\x00', {0xff, 0x6, 0x7fff, 0x8d5}, 0x24, [0x10000, 0xeba, 0x7, 0xe6a, 0x8, 0x1, 0x5, 0x7ff, 0x54, 0x7fffdfff, 0x7, 0xc, 0x8008, 0x6, 0x9, 0xfffffff7, 0x7, 0x40000, 0xa, 0x23, 0x2, 0x400, 0x3ff, 0xfffffff4, 0x4, 0xda6, 0x3, 0xa7, 0xeb36, 0x2, 0x9, 0x76c9, 0x200, 0x800001, 0x1, 0x1, 0x7, 0x9, 0xf, 0xb, 0x10, 0x80000000, 0x9, 0xb50, 0x0, 0x800, 0x3, 0x5, 0xbaa3, 0xfffffffe, 0x5, 0x8, 0x24, 0x7fff, 0x8, 0x6, 0x203, 0x0, 0x0, 0x71c7, 0x964e, 0x2d5, 0x149, 0x4], [0x66ac, 0xfffffff9, 0x4, 0x10, 0x8e, 0x7, 0x13e, 0x4, 0x4, 0x2, 0x1000, 0x7, 0x6, 0x8001, 0x9, 0x8, 0x2, 0x1, 0x40, 0x7ff, 0x7ff, 0x5, 0x9, 0xc00, 0x89, 0x7ff, 0x80000000, 0x1, 0xfffffff7, 0x9, 0x9, 0x4d26, 0x10000, 0x8, 0x1, 0x7, 0x0, 0x4, 0x4c, 0x9, 0x8, 0x5, 0xe66, 0x8, 0x2, 0x81, 0x4b, 0x80, 0x6, 0xb, 0x4, 0x6, 0x2, 0x8d1, 0xfffffff7, 0xfffffffa, 0xe0, 0x6, 0x10001, 0x4, 0x401, 0xade, 0x7f, 0x9], [0x8396, 0xb, 0x7, 0x9, 0x8000, 0x1, 0x9, 0xe88, 0x8, 0x6, 0x81, 0x400, 0x1000, 0x9, 0x6e, 0x8000, 0x7, 0x3, 0x6, 0x5, 0x5, 0xc9, 0x2, 0x3, 0x0, 0x2, 0x2, 0xc, 0x5, 0xb0f, 0x1e, 0x3, 0x800, 0x8, 0x9, 0x3, 0x4, 0xfffffff7, 0x4, 0x80000000, 0x464f, 0x6, 0x2e7, 0x7ff, 0x1ff, 0x6, 0x87ff, 0x2, 0x101, 0xffffffff, 0x4, 0x10001, 0xd5d, 0xa0c787d, 0xffffff4e, 0x10001, 0x4, 0x40, 0x3, 0x0, 0x1fc1, 0x9, 0x1, 0x3], [0x10000010, 0x7, 0x9, 0x2, 0xa5e, 0x8000fe, 0xff, 0x58, 0x80000000, 0x0, 0xe, 0x7fff, 0x4, 0x7, 0x7, 0x0, 0xfffffffd, 0xfffffff8, 0xdaa, 0x4, 0x3, 0x103, 0x6, 0x6, 0x6, 0x4000403, 0xffffffff, 0xfffffffb, 0x40, 0x80000000, 0x4, 0x7, 0xfff, 0x40, 0x9, 0x0, 0x9, 0x41, 0x0, 0x7, 0x8ac1, 0x3, 0x1, 0x80000002, 0x80000002, 0xff, 0x6, 0x3, 0xfffff801, 0xffffffff, 0x380, 0xfffffff8, 0xd, 0x7, 0xd, 0x9, 0x6eaf, 0x0, 0x401, 0x5e02, 0x2, 0x3, 0x5, 0x400]}, 0x45c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) preadv(0xffffffffffffffff, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) poll(0x0, 0x0, 0x5) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000880)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xfff1, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xd935}]}, 0x38}}, 0x0) 4.872450276s ago: executing program 33 (id=970): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_int(r0, 0x29, 0x7, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000100005070000", @ANYRES32=r3, @ANYBLOB="00000016010000001800120008000100736974000c0002000800030036"], 0x38}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x439, 0x70bd2c, 0xffffffea, {0x0, 0x0, 0xe403, r3, 0x40083, 0x602a}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FWMARK={0x8, 0x14, 0x5}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0xd}}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) 3.93417714s ago: executing program 3 (id=1042): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f0000000200)={[{@jqfmt_vfsold}, {@orlov}, {@debug}, {@noload}, {@nombcache}, {@noblock_validity}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000}}]}, 0xfa, 0x47c, &(0x7f0000000a80)="$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") r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) listen(0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, 0x0, 0x20004080) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000020000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kmem_cache_free\x00', r6}, 0x10) r7 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r7, 0x40087703, 0x100000001) mmap(&(0x7f0000701000/0x4000)=nil, 0x4000, 0x200000a, 0x12, r7, 0x2546c000) lseek(r7, 0x4, 0x3) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) sendmsg$ETHTOOL_MSG_EEE_SET(r4, 0x0, 0x48001) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x9, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x100}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty, 0x10}, 0x1c) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x54, 0x12, 0x301, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, 0xf0ffffff}, [@INET_DIAG_REQ_BYTECODE={0x6, 0x3, "1100"}]}, 0x54}}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000025000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000640)={r8}, 0x70) signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0x1]}, 0x8, 0x80000) capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200003, 0x0, 0x0, 0x7, 0x3}) fdatasync(r0) 3.92899264s ago: executing program 0 (id=1044): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x400, &(0x7f0000000500)=ANY=[@ANYBLOB='rodir,shortname=mixed,uni_xlate=1,utf8=0,shortname=win95,shortname=winnt,shortname=winnt,utf8=1,iocharset=iso8859-8,shortname=lower,\x00'], 0x41, 0x254, &(0x7f0000000a80)="$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") r0 = syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x810408, 0x0, 0x0, 0x0, &(0x7f00000007c0)) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f00000007c0)=ANY=[@ANYRES32=r0], 0x4c}, 0x1, 0x0, 0x0, 0x20008880}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@abs={0x1, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x0, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000800)=ANY=[@ANYRESHEX=r5, @ANYRES32=r1, @ANYBLOB="0000000000000000b703000021000000850000001b000000b70000000000000095", @ANYRES8=r5, @ANYRES32=r1, @ANYBLOB="eb938da29f1fb2e0410f85a73e4de8b748d6569dc7228ed3dcb28a7d686fb18031d1bca3c83943d9ccf65fce912fbb8bbb3abf417063e4b37537fe23e95b24194d18eb26bb57c8deff23720ec473aa01606d669d5cb8d1c97454209d9770bf847e9cf6bbe53f601b0d85657b7019505e480913defdde9492e50378b7a10fd1987d486cd3d5f2376e75c83694dcc0b6509c8a745869676678998381c3a3b5bf431a5fe047b5eb26ee0f0501b04ca6f90c7ac509b232054ca71e11ff758c0f55582a83e64eb2942cdbce898111d1e0cf533df59b4b530d3583126a574fb367588867edc0e3eca37cfd54"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x17) bpf$PROG_LOAD(0x5, 0x0, 0x0) symlink(&(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000cc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') readlink(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001200)=""/4096, 0x1000) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000e00)=@mangle={'mangle\x00', 0x64, 0x6, 0x6f8, 0x538, 0x0, 0x2a8, 0x538, 0x0, 0x698, 0x698, 0x698, 0x698, 0x698, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x11}, 0x0, 0x198, 0x1d8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xc}}, @common=@unspec=@conntrack3={{0xc8}, {{@ipv6=@remote, [], @ipv6=@private1, [0xffffffff, 0xff000000, 0xffffffff], @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0x0, 0xffffffff, 0xffffffff, 0xffffffff], @ipv4=@multicast2, [0x0, 0x0, 0xff000000, 0xff], 0x0, 0x0, 0x42, 0x4e22, 0x4e24, 0x4e20, 0x4e24, 0x10, 0x23ccf3e9fd2b5143}, 0x0, 0x80, 0x0, 0x4e20, 0x4e24, 0x4e23}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0xd8, 0x120, 0x0, {}, [@common=@unspec=@connmark={{0x30}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4=@private}}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x4, 0x0}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x758) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{0x1, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)='%+9llu \x00'}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000002c0)={r7, &(0x7f0000000240)="ef85", &(0x7f0000000280)=""/50}, 0x20) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) r9 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r8, &(0x7f0000000300)={0x10, 0x0, 0x25dfdbfd, 0x10000000}, 0xc) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=ANY=[@ANYBLOB="44000000100039000000000000b01a756c887f3c55a4330aa141813f198bcaef1424679b50868cc333cd0d1498", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b00010065727370616e0000140002800600020006000000080007007f000001"], 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x0) 3.637162475s ago: executing program 0 (id=1049): pipe2$9p(0x0, 0x0) dup(0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000f00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) clock_adjtime(0x0, 0x0) sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)={0x2c, r2, 0x1, 0x80, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2000007}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xc3}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2805}, 0x0) 3.636593845s ago: executing program 3 (id=1050): r0 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) keyctl$update(0x2, r0, &(0x7f0000000380)="16", 0x1) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r1, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0xfdef}], 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x8) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'erspan0\x00', 0x0}) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000080)=0x6, 0x1d) sendto$packet(r3, &(0x7f00000000c0)="3f031a00260812002c001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c152bfdf9435e3ffe46", 0x3840, 0xa0c4, &(0x7f0000000540)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000001200)={0x0, 0xffffff1e, 0xffffffff, 0x4, 0x16, "001bf100eeff0000a2c2000100000000002000"}) r5 = socket(0x10, 0x803, 0x0) listen(r3, 0x8) ppoll(&(0x7f0000000200)=[{r2, 0x742d}], 0x1, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280)={[0x1]}, 0x8) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b595000000000000000002000000", @ANYRES32=r5, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x40448c9) r6 = syz_open_pts(r1, 0x101) r7 = dup3(r6, r5, 0x80000) r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x102, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000100), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r8, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) 3.616486265s ago: executing program 0 (id=1051): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000340)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x280008a, &(0x7f00000007c0)=ANY=[@ANYBLOB="6e6f6e756d7461696c3d302c73686f72746e616d653d77696e39352c73686f72746e616d653d6c6f7765722c696f636861727365743d64656661756c742c756e695f786c6174653d302c6e6f6e756d7461696c3d302c757466383d302c616c6c6f775f7574696d653d30303030303030303030303030303030303030303030322c726f6469722c73686f72866e616d653d6d697865642c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e39352c7569643d", @ANYRESHEX=0x0, @ANYBLOB=',uni_xlate=0,utf8=0,shortname=mixed,uni_xlate=0,shortname=winnt,\x00'], 0x96, 0x2a9, &(0x7f0000000500)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0x10, 0x3, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000280)={{0x1, 0x0, 0x61, 0x2, 0x1677}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="14000000045f000000e2ff", @ANYRES32=r1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000200"/28], 0x50) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000002380), 0x0, 0x34000, 0x0) syz_open_dev$vcsa(&(0x7f0000000300), 0x1, 0x102) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000002000010329bd70000000000002000000000000001a0000008aa2c53167901f"], 0x1c}}, 0x0) 3.333555519s ago: executing program 5 (id=1053): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000000580)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001cc0)=[{&(0x7f00000000c0)="5ae832f6604a1ba30dff515a2d51b69ac1ad28fafa555e1828f778826084ebf1989616ea405c3a66839fec93f7630bd6e71776435e07f533", 0x38}, {&(0x7f00000007c0)="cbb6e618c478a3927406adee1f9c90ea261ae34dd2d583a425a8cab89e8c87754cc27ac816e9d4c31d3153f80f0c98cc7b98f5b1d1ec312b4889d279d26118f46f5595b4b7e4326661f3692d5145bb9e77828c5b37f306972fcb7a70cd602d37a7fd33d25027c06cc1a52ebdeaa54434eeefc91fc251ec935869388975ac7ee329d7b0be91cb05d4aef27b86376c91de41e15b08effb6da5aaa789bcf51d5abc92788d5f1c8e1759cbf17e099def3e143f0cdb8128", 0xb5}, {&(0x7f0000000880)="add87893bee8f5b45f42e83d0b72c26ece18eed3f7f895567239c3059110c80cc9f8f8302ccbf83796eba7a082191227e78c4eb3a0aaeae3cb6e8905807f14b6b5dc762d9013adc8590ee49a89f0cae431273f61cec6d6848fdc591963536352f0f45c0de31029f1be78569a626fa27253a338d76aea50292b3ab531e18b5f5f98eee8bb2940e4e8c0adc4cee86c1761199fd4828945cd956aa4035ce354799b8ef3e1b3c7916855e152bbeb2a210d427f0badae01b34e1c6bed3d23f430caaaec8661ba06f2ae4bbd101d8950565febb2a863aa5325667f120da96577cab641b81a92c59615a23dad45e10cf8f940125bfb532d51b9c3d32342a0eb0abbdc86b16bdc5f94d49c144a9092f6214acdd3cceba3aa629676f4e30a21abbfd242fd7df128085cb323742143a769da85aaaa604e7d8bdb1e6e6fa57290c0db91c921b1c57caf2290876823784bbfdb71c3b4909bce5ee66a5d8d9dee9996074d5230972bb3becd84cfcfe40dff92744c8559b23a0fff1be262831f102ef05c10989c6ca90250ff6263d38ab026a7c977a2499ff4294e3ec82d78df23b89ab6ffe25ac02194089887fa994b51bdc8d486e7eda23ce20150587b8e6fc59f8ec1aec532ea4ac34c3b89299bdfe6b6540cc9f3e8db407f70c79fbe29e4b2c1ef768181a8758422360b6c19d6d5a8c16149a93018352247e30a51b419c039a019fffe9170ded66c218e7ef06ad05715f112ca289e2be028c605d8098b0314af54470dde263c05741957e07aa0cc94c8b276c5a7f1f0f9776074ed9264567c4b9765472b5552e90a73a936da00e732d2ad4ff3eb94132fcf1a9f60a4c675fef9738b7a00708c082f8d47dc1fbdcf852ba508c9bb214985ffaab762db4208a81291a23d584f52ab6a3bca1319f86fc7b0b1096e378028bb5ca2faea452e4113b5a726dd2e57261621b962ec918687c4bd428b81e41481ff8263ce6e0b8a76a56a211b37d8d8e2ff4ac5117a4a3a07c65f02fe632019d622222d368bb255d6951797e06b288bd7c4fba9b1ab877fd7a881aa5b8de39b474907ab7cd901837bd804a5b6c345bf0b17d50f7472a6956c7c25ca3b0d40117b8b856dd5dd9b5c580e7a0a21dc7514258c9a2fb8b324c79b219e00aba7f890cea0afc83ebe608dad75f9407c2d07600b82be0e76172a40a938884390a5598650a6175c2c6c09fe43881ddc682c799cffef8f63ef3b75ef5708f51abe594dcd5b30b39124bed003c7f030eb784bc73912728d5b5edad7fc85af11ed164de7b99ed036465a3983bf6b00878b42d28fe845a56a7f33825369a68cd29018ea92bef3f5740824c0792e75215ac58fddb27b4035be50e89e3df0977637df6ea1918a13f2fe65a873fd694a35b6bb1296008dc2d872228f9a5e3c05fc3ce00e82b4c78000133a71de2466a28f4337a93ee7a4bcdc529f3376734dd539a1d82b9eb0e7fbed182667f001165b0b0ae77901402b5b3fd7c0f6ff787a420e6286d414c45054a5fd61ce77dd087a5d1014822d506d15f0d7bb34579535356fd743e9ad453d825365c95f2a31eb7a4a5188422216375dbdc7a5da1dd6d956597a30a691caa57c28b6943cf9c67804065c3d289d7f8ad2d0490a729f5e9c9790a3a7b11f3db7328ad30249f13f2d79d046763441a23aa2a943df7c353a6bf13dadd77e2d67a31815c009e0d849c968a0005e0a195a1ec72283bce4447d49b4a0c6638e4bfffb013fdf76b3c3e04598aa07da1cc7f0e4367e2dc979c26c6d30fae6c02a491629481f7b6d0dd5c8a050bba463be3ddadbdda2ba75260364ab2b5fd2ceb88e5269a33f3f200e3f00eaf2405bbc10047693e645b32aa0b12b08dcba0d084b991a164d7e6c0e4ba9544e1059a542f2fca09b154f4eae0d56f6b4b0fb076ca165c997b71c9c539536db100e39148d062e6c51545862da3c06c09d679f148c96833391c3e22a9d82757a2fe8d0649b0c1ba5f03217576e4860c06299a20608e5202d4e2a829987c9d22c0c1290d01fd5b87f4939f19849197331e9650214d71c8ec8f3e0ba05704b86337df30f191603f8c96792a779b04455c8a0d15dbbbfb858e6b64f7bb4a87ab447443ae58c3faf5585116e8e9b3e518ac065f5aa971e2704808fb46cc48802fd81d76eb8862993ba325ccfb29eaef0613e6f2d224bbd4e51fccdd052aadf36a032dacc862561ac6a09929e629027be4b2f98602a1fc95ea28f8985e5ab5c9d9e1b763e9376209f4c27ddeec0a0fca8aae65a4b4d3ab4c5a7c4209c288ac08d32bd9843f432b0ab8909857409bcd0ca0984b04aaf123f2bb616673e6d7ecacb3e1c1ba872878d8ed6ae8fd09ba2219cfbf0bc3d4a5738b0d16cfa95307926e625683abfaab68835358e423f013ecede5e07627be9d3b9cc1af6029c9ebbf7734a5fab33b78b57f932c526b0a760e08d22608ad76e3fc0a7ce9e468f483cb5a90bcdcda62e9ae35c37e2b98798862647d851ded5dd8d3d5eec0db89b4191e42f90b83a363b21cc5fca3e2338f74c41bd3c6873151b900556fa5d4a7290bb7f87392aa6102e8156d6a970c3ef530e8e23b3eae67a93e9b3adab660bd27ed843eb9f91c84368043b914f86c508b3af241e090c4b712553a069b6756ffd692daed2714b3615f0b1f9f29f82a2c2569eb1c3f1dde8f816c2eb3ffdf2adc5b42acb0fcbf376f0a56c2344a24afdacf2971f7bf647f9d6b67ad227a9ecfc0d3daaeecbf04a0016e38d4935516d814ae3df867cddd91936c61658eefecd455fdb55d304ba6f159b8f77d9e8396b4a5aff79f8fe34e7c64b484422da2dc48908db44e3560751485b3b094cdc4dbfd15de7b784166a6d6770ad377f048a860d3c20204ff874e4646fa5fd62f6de3546aa348aaa5861791e3c4b123d5a28be1edd3d6797c7f1ba5c822f3293fe2061f0f2eb4000d450d9fc04cbed39afbd5fbf3ea3fb88436af824cc07d2990932bdd49a6ebc29cdab058672db862c3f11de3a32cc3bb222a0e17a04f74ee75b9c1345219b181e0f10e1785961aeff4aee6d53f46d35d451f5cbaa6e1e776f564890911055dbe9163e6353a10f6fcac5d32ccfe3584e35bd966c858c4dd6191e4e86dbbcae3a5299b14b964e519853f0f97209aad4a36cb839761d0d6977c1e1f884414f1cac1fdc886ab9c5aecea390ffa0aab8d9c944361a4f8f38d2d5d2f889bc9524abfde1de46c48f93b274ba1e49475401d60e9eaa7fa42c1127356cb492ccc50e7aeeffad00d65f4e435fca7cece0d2e5652bfef4b80cacd5c8a20c70204e6ec63d1df5ba277b92cac2efda629d66f1382ea1ea0ba21e802b9eaf4a719177e757c4ca43619449cd025945318517ea58152b53ecba86e63bc293a7e6f77e3516327e0ef9ef8a13f79694fda5e2b8e685d5dd1ba0573ab7f1a6dbb884a8bab25ca603fb59873cdc463e57d1251abc54620fe898c788a806a7bca54b01194b993482937d6d3ec9e2ddaae0ee40d094bd8444ea5c0cc4e4e76186ff4a8af2739b34604885675e96216f33d054b6bfd4a54af57ae7bbead0ff5b5f31d11346dafd4d9d4ff8453b7d132646b3a5fd7be585cad3ce99c8d22947da7220fca90b8cca9238e05d8a7b8398daf3277f246b81d82ca1634ef3b91c1672eec51d4803e8373bd15e5d2a32db7e58f41aea7c3935a9574a0b2173fd0b6fd6ced40fcc27216ec4d9f0b3b85479098e2e621eb3d4f79eb3077714c3b746f8b87200bb3b0fbb5d958da0d5ab4d34a42387d5d1020eb59c13549916d5eaaae69526c828fbc544a8d87116ddf0f03137bbbd94146742087af100a28c3ec37f61a84e11f1db57d890eed0cc1266738d2e798242d28b12f885cb01be459f0d2044e6d5f9c749dce3d9df205c086b1da55d41c234fe957960c690a2961dd75c2a41908dab3faaff4f65b5a0d164fefa4d24a06acffb96e672aae1a5ec84b6dba703a0731ccdc34c02c041790e2132791dbf962c0b73eda27d967566dc4c16c4f1a1a6436be9611cf0c328484d822b7c23d6db20bd69ad48a493ef149ba39444826bb72bcaede305f6cbce0247ecffbac19b0289428e2e156f766f9ae78e5d37f8a61bb564cfd245a1bcad2ef676c2c38ea547fcd2ca3828f08d43fab99fc9645ae17aeb29e142225d236351718fd0fd663cb15816a38a992c36e1071200e9920eb2625a6cde86f9b9efd1b6cbe6edd30d4d6401934276f24231a61923b8cdec59c9f10d2a28c909480eb8490fb734292017da7bd29eaa01c268afbc3bfd5fa6d596041c7ab9a7502bbd6d949df0a413397180e85fd05a6753b2749e3998eda601f5e046b6d015e27fa72d742259c380be85ae80625d9d570a86052bd51ae617617e4695779566603eb2f6beeb43abade660d5779822a935c13bb9a230086dfc7b7f360df2d0af8846f1303f0de0de1258a8b16bd0c868c88bc19e9c9b0fbe28029c0d2385ec9abae002ae50f7720ae1d0d3994335883b541ecd5d117dea30dfda00940c191ace21602c5fa258e3d1a5e2b2d694d6a61b77cbb46e6e72e58cdc6c3d0a8568e2cbac07f00fd2bbca55629c9de0c57820b37d986cf749ca8e9e34ccc5bf64bdcf523250d7be47eecf0501917c50c6de2c377ea65b625160e4a2de10b63ea3a3ce64eeaa9bd9c69a2bed91dd91549831e2fcafca1cbd0f20dbb42475e2bf91d93b2832f7428340b1a00b7bd57a78221941e30d684ba8ebb9c266e3c4a45ba848ab398031eaa7623441388b74a2417b940c0ec726cf548ddbc3a0d5ee76ee80b74321f89a77dc8a062e02bb201ce9050888b7213227971cc3c3bc8616f91cce3893146b89cc3aacbece89dce898c81897728f185055688a9d0e36fc837617042c96a42c184616aa94a86653b5b6215275c76272b44f41fb45ed2854119adda081baac114299b6b55b71a04d776fc64d1396f83a22778af66118024e08b75244954b66543a459beec08c522cda13c1922ff5f743bf94d277e6b8335fe20b687aa8214e94a209acd4e130e1091ac10f54462e6790248ba3ecc783befc4340ebc077b7dbb59e9cd288f60eafc172d9e452d4502d6a639e5ba7f97e8d6544c787a24be24b2b1c2094b7a3eeeb87fb9f202d46f2adfce9e1a6e25f94e70d2279bfbc353b5d3a849363f27d80d6d9466f5e4d5111aa75ab0f161523f4d503b00062a0d61e6b37c85f9cb97687437a0cc5797e2bd5eb1ff28ef80fc7a4e5ea5a2e2e3faefed3cdca471354ce48bb1d5c58eeb026d6cb6668d1e947b301a5e2d3ebc31322254fa864e58f4edb24ff80fcc306ad69ea8237d2e13652c5199aa3ea85924c39ae50d83cd1c882696bfad221a1fa88ccd1a08422975718d8f06b2c2c6e1fdbacfd16586f1f362a5ab75e1612b8a03e20c3991a4911781eba6d0d4e462546773711db6f81335d5fb71ce55a99240564e02b35732295e59c1794427b87323da12126827e4221e54a76fe7f1ee1958d66cf8261f1877f72f49c45cdfc3e3a42c4fcaae15798c2a7410d4d25c49f7612f09e31ea275641a383ce31a44bbb050037887944a2b82e4fc7b62e6fab7e28237be1ba2cd382714b567cdd6b081f676dc22a65561c0999f02d51ff2f5a8d9caac24cbdc5f99c1fd5ee176e1daa934bd9a5f348cf65de445bf076b5bcc5febcf1cc9cda4782d0fb01531297aa167a19913e417e560c040d8ef4214ef6823bb29e2abfc8c6a02da55c65919f677d4939a6271e71feb8ca3942ebc13f4421e34dc195a20f70cba8b11a7c18820b6fb1ef5922f8ccd5dcb300c7", 0x1000}, {&(0x7f0000000600)="bb85bd0c725a0d2f4cfde60c2abe78b96aed11ec689bb046806fb9bd83a62969c01c8e48c46d96196a41121498cb03aa5e622a490f35871e1704fa335453257e4ee8bd4d8f89f2643b05e23caf6ec5cb4969058b378aa879e788c4", 0x5b}, {&(0x7f0000001880)="927df31625a057d487b6e3a84113d548464393b37205cb6e5e2ce548f31628ee44676466a73f94b3b5d7613ffdb07c50c1380d52d44d58dffda9f7498d0011526eee486319f1982ab69ebe7a74f45a7fe44bb96cc5615dc8ea071110e26cb578da5612b6dbf497bd142c9d499afd1c5598073951b169f24d28929590e741f92aae4cbcc4d637eacdfde9d8668ab480f5ed6622170da761e4bb", 0x99}, {&(0x7f0000001940)="b03700f5a017030833b79dc20d7b03a8bde9538ced2bfea50a5059ab085d0889cfae8e932a728c8c8f0c74356c50cba30710d55c969496ec8bae24716bad71da61493ff38361c1701aca882ff92138611572520ec132cc950d04c5c69bced3bc39409b678aaa26e38d0aef18b5dded091eaac5e12dd5f87a48634179fb093426c9265e4c47c6617549006c9af0bf1e6dc7660bc5341163a3a1ea03915e962ef902a5f1899de7fdacc9e63ef611e7d14e8b3183e084133a0469192920a3fb4076a9c4bc10ad53f73795e8dd3e8217db93812ec231", 0xd4}, {&(0x7f0000001a40)="311d48b6c1226b49a6e28b2a6e55c861c6ed5c2c3e0aed8c32b0bc301198cbf6500fafdcdd16cc4fb6abe6a4f6aba92b21d4fe73fdbe027489cfb28a128d4b2d7d21c5f6de41638807b54bde74dbe3ae3a58a97b1873cefe352f2b142033", 0x5e}, {&(0x7f0000001ac0)="c5363393a76a0996dc49fc969cdab5793a4d44c681db78198b7bc557758fd1736073ec81fccefdec61dc46e36a7cb88aa2805ed2f6e7cbbac864fe1320f49838cff6a6a05f364da6c6a250ef4beef187c30dd0d893664b473a62f261f7a6288bbf5935f4b908c318a11cb9314383fa21f13073f6f6999c1136b113b655e65103380070e670f870957756ca165d782a5fa4c1eeb1d687a3818a7e0d035341076a3d60573b6b685fcfaaaa1d0798b9ac0571b2fc6b9884aa47565edbeca7621b3614453b29e702371a33c20f9effe12f0f42a8da937c", 0xd5}, {&(0x7f0000001bc0)="ab056588426416f18231c75e04cf1257f6842a6468a0020871b9820a0bdeac2205d2a1767b14345fa44af7a3ab095fe6772855c26cf056c60caf04307d7fd1934a5d3fe9fcbef2c2209b31ffb839b029518b71666f7898042afd36f9fdff77bbd6b468330e6822c3dbfb2b6730fe719b6957f82885ad812844442c13f02ad954b79cfee684e1db7d35e77e3b850440ad907a5576c3b916425647882e15f169d98bf32b7a630f180725b6f70ec4ca56d651d1189e617cc9de0d281926c45d018e3f3d38f8", 0xc4}], 0x9, &(0x7f0000001f00)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [r1, 0xffffffffffffffff, 0xffffffffffffffff, r2]}}, @rights={{0x24, 0x1, 0x1, [r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [r2]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @rights={{0x18, 0x1, 0x1, [r1, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [r2, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x100, 0x4044080}, 0x40) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_misc(r3, &(0x7f0000000240), 0xfffffecc) 3.25588981s ago: executing program 5 (id=1054): syz_emit_ethernet(0x32, &(0x7f0000000000)={@random="e90c610faca2", @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0xe000, 0x3, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x10, 0x0, @opaque="24dc6170e1e03185"}}}}}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200001400ffd9b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) socket$packet(0x11, 0x3, 0x300) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r3}, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x18) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r9, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r10}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r0}, &(0x7f00000004c0), &(0x7f0000000500)=r10}, 0x20) syz_emit_ethernet(0x32, &(0x7f0000000080)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x7, 0x10, 0x0, @gue={{0x2, 0x1, 0x3, 0xfd, 0x100, @val=0x80}}}}}}}, 0x0) mkdir(0x0, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) 3.133962372s ago: executing program 6 (id=1056): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x18) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f00000007c0)={0x300, 0x0, &(0x7f0000000780)={&(0x7f0000000b00)=ANY=[@ANYBLOB="020a06000300000028bd7008fcd1df25010018"], 0x18}}, 0x40) syz_emit_ethernet(0xbe, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff0800450000b00000000000119078ac141400ac1414aa00000000004d90780100000000000000f4cb985d33b16266b5efb88aaa87eda081bac8b2f9a49d564054f1c9218f47b3cf8743eb4d9e776f94a6a58d36e006ac614f6f7bce9217cbfea31675d4a860cf6003977b1e4dbb16dc7acc76522bf19d5043edd2a8cc8c41345f8feb1a7a8e23043b8a465b1ed5bf8bc91307c7193f7edd1efc4742dc481e6f57f901948177bcc5dea4029ba4683a6bdcd7a1"], 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x2}}, @restrict={0x0, 0x0, 0x0, 0xb, 0x3}, @func_proto]}}, 0x0, 0x4a}, 0x20) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, r6}]}, 0x20}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=ANY=[@ANYBLOB="300000001800dd8d00000000000000000a000000000000060000000008001e0002"], 0x30}}, 0x4090) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x80e1}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x2}, 0x18) r10 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=ANY=[@ANYBLOB="0213000002"], 0x10}}, 0x0) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000006c0)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) fcntl$lock(r11, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4}) fcntl$lock(r11, 0x6, &(0x7f0000000280)={0x0, 0x0, 0x384, 0xd}) getsockopt$inet_pktinfo(r11, 0x0, 0x8, &(0x7f0000000240)={0x0, @initdev}, &(0x7f00000002c0)=0xc) sendmsg$nl_route(r11, &(0x7f0000000440)={&(0x7f0000000000), 0xc, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB="28000000710008002bbd7000fbdbdf2507000000", @ANYRES32=r12, @ANYBLOB="1014000000000000cee95caa9add9f99"], 0x28}, 0x1, 0x0, 0x0, 0x4080011}, 0x10) fcntl$lock(r11, 0x5, &(0x7f00000000c0)={0x1, 0x0, 0x15c3, 0xffffffffffffffed}) 2.779636118s ago: executing program 3 (id=1057): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) stat(&(0x7f0000000040)='./bus\x00', &(0x7f0000000280)) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRESDEC], 0x20}, 0x1, 0x0, 0x0, 0x84854}, 0x4) unshare(0x2040600) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0b000000ff000000020000000900000001000000", @ANYRES32, @ANYBLOB='\t\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./bus\x00', 0x2000082, &(0x7f0000000600)=ANY=[@ANYBLOB='utf8=0,utf8=0,shortname=win95,rodir,codepage=869,iocharset=cp866,uid=', @ANYRESHEX=0x0, @ANYBLOB=',shortname=mixed,check=strict,xlate=0,nonumtail=0,uni_xlate=1,shortname=win95,shortname=winnt,shortname=mixed,\x00'], 0x25, 0x358, &(0x7f0000002100)="$eJzs3T9oXHUcAPDv9aW5JFhzg1B0Ot0EKU3EQaeEUqGYQSuH/xYPm/ondxZyeBCHXG5RipPiIujk1kHHzuIg4ubgagWpiovdCg0+ubt3/+/sBbxY8fMZwpfv7/d9v+97eeS9hOSXVxuxc+lkXL5162YsLeViYePcRtzORSFORBIdBzHRB4uT8wDAPe52msYfacfdZ3+00o08+wHgv6v9/H/9VD+RP0Lx1fvm0RIAMGczfv//7MTslbm1BQDM0djz/5Gh4ZEf8y/0fiegY3n+DQIA/7jnX3r5mc2tiIvF4lJE9f16qV6Kp/rjm5fjzajEdpyN1TiM6LwodN4WWh+fvrB1/myx5ZdClFoV9VJEtVEvdd4UNpN2fT7WYjUKWX3aq09a9Wvt+mJEHDTa60c1Vy+djJVs/R9XYjvWYzUeGKuPuLB1fr2YHaBU7dY3Ipqx1D2JVv9nYjW+fy2uRCUuRau23//+WrF4Lt0aqq9fy7fnAQAAAAAAAAAAAAAAAAAAAADAPJwp9hR6+9+k1Ub9vYujEwpD++OUOsPZ/kDNzv5Aab67O8/VZHR/oOH9eeqlhTjxr545AAAAAAAAAAAAAAAAAAAA3Dtqe4tRrlS2d2t77+4MBo2BzNvffvH1cnSHFrLSt5J+VWTJoeN0Jw4cOYneEmmvPE2G5mRBEtGdfFC+dr3X8eCcfO8sxspbQX5sKJf1VK5UTj3886eTqv5sBQftTBJjl2U4yGXrDwxV728lliLicFrV9GD9LnNupGk6rXz/k9FMthVD48htzBB8c/ONBx+vnX6infkqW+nRx1ZfuPHx57/tlCvR7FyZSmVxt3aYznDkyEWMDyUD908uu865CXfC5KDZzzR3a3vl5IffX3zow+9GJieT7590MPPO9LW+HM0sdoJcRKF7Ef6u1ZMTbv7JwSt3enfv0T9xpz/bKF/f/+nXWasGvkjYqAMAAAAAAAAAAAAAAAAAAI5F/49+RwbSNG1MrXryubk3BgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADHqP///weC5lhmluBOI8aH8tu7tamLLx/rqQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8D/2VwAAAP//wGN9HA==") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000800)='fib6_table_lookup\x00', r1}, 0x10) syz_emit_ethernet(0x5e, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r2}, 0x18) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000000)={0x8}, 0x9) write(r3, &(0x7f00000000c0)="240000001e005f0214f6fffffffffff8071100000000000000000000080009000d000000", 0x24) creat(&(0x7f0000000180)='./file2\x00', 0x71283578ac7c5cd) 2.677617049s ago: executing program 6 (id=1058): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) unshare(0x22020400) io_setup(0x23, &(0x7f0000000280)=0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) io_submit(r0, 0x1, &(0x7f0000000700)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r5, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r6 = dup(r5) write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r6, &(0x7f0000000280)=ANY=[@ANYBLOB="b0"], 0xb0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KDSKBSENT(r7, 0x4b49, &(0x7f0000000500)={0x8, "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"}) write$FUSE_NOTIFY_RETRIEVE(r6, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="7472616e733d66642c7201746e6f3dbc3a40ad5e31d82a8fafea8a71ae0843a6d14956b98706c821e4964ff4557885b6951c918f490ff6db6fa879eaf27363a2c981226ef3eee3f94943fd952719330fa37abe84f68b2ef87cde5dca9241fe022468c589e6c03c267302005c71e27492168e3e77cfc4d40f2922d766", @ANYRESHEX=r4, @ANYBLOB="c871057c8c44c2daf1094e5afed95ef56f4bd8161a09d0f3b9af744f5a976bd193b6934fea6bf5e2a4ed47e79ab9029ccbba7b2f4c1f8783829f335988ee74a0a47af9bf82903b26ff3af1fb0fcd7d8a8c72b189f3cc4482e4c9c010d37bad861516d83bfd9231035c3c214a1669a72187e848e0c97c38f168028992b596cdd1efab78e02f4622b1457498a8eed22c2aef3379cc04e9536ffe034062050172392b9d2544c184113cf8a1170423c1132ec4a84d74c1a19970", @ANYRES32=r2, @ANYRESDEC=r3]) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r8}, 0x10) ioctl$BINDER_WRITE_READ(r1, 0x40046208, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="b702000000000080bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7050000080000001c2400000000000045040400010000001704000001000a00b7040000000100006a0af2fe00000000850000005f000000b70000000000000095000000000000009e17f199a68b061b93d83298a8cdda1ce784909b849d5550ad855dab54d8877a6db61d69f2ffcaa10350e11cb97ce8df1bc9a0c4eeceb9171e43405d621ffbc9b0d8ca56b50f0c010d631f6dbc8486bc5d5bf2ca8285056892db03cf1c62dd7c08a90b189d190c341035de53a9a53608c10556e5734eb84049761451ce540c772e069f80cb201b2de17dfdb4b60939d5d6aed4062049b87e03e2cd18568136207304e26f7fcc059c062234d5595f6fbaa187b81d1106000000000f0000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7480884bd8000000000000000b91c61bd99dc89f12907af7dccd106cb937b450f859ce8292a79c3e40000b59b0fc46d6cec3c080a882add4e1179bd4a44f231a2d73148be428ba953df4aece69311687f4122073a236c3a32efa04137d46f0247d2638da3261c8162bb7c7824be6195a66d2e17e122040e11001131ce319045e5b3334e68475ac3f46aa2837f9004600daded9b19b35eebe52613c346e255421b23a278fd00004270b1cd5fc9aa2286ccca37db965d9dd366598f5ec993cb0cf127e2a46cfbdf63eea190d86a4d1b75ae98480100d33128954a7d093a54f7e75b3753508ca3c41685d1e407315e59d626c23b3f89a926e9382966853774e7dd1f1a2177cdf2802237c177d543e8da47a01f05e117e53518270239b69c117e2637c31085f4d8a596b6edab26afaf6605b231199f38a6fc7eb83714387450ea18eafbace8eec18a4b2c442e7b88a7611c1283bec84e1715fb9f4fcaf52c08058fc4f21c0ad71adabdd850aed3feec6eaab347bdf474e17b9aa345d1e6e3bb83f90230bdf53e7d0e5c3f914d905422b83f30936674ba8f0bffaf2305c0972df71fe5f4e01506471e897bced7798509e64df360d95f9a4099f864b0ba45efbdbd1d9db21a1d5c065567fd70aae68096827fa5c2d9bd20292344c7dcf6241447cfbb05b5d0fdb4e08afbac5397b64aa369922ed7ed8918f97294b6854210d2b93aaf92159dbaa2f186d4a420c68d6baf1c31de4f0bf478bfd51bb1e96ea849a80ae5a89be7e38474c7aade344d68324f9e12a6b9770e6bd12ae69efffaee58040753701af84c2924c1b5aea1650f42c9ae9820a33095f062fb88313d035ea405515a61a4be64f9fa0985c5be592090cc48291004609fdac2ab6100000000000000a84570c7c00d647daf8af334050b61e9b2d3f0adad1d1ff47be19b8da2799e9ecef8efabe73f92dbd0760f8bbd9c710bd1371e2b5d9a2ea2190f5e4f5cd641cdfe5d89f84a368ef7e6ff1eacdc0ec9e97b8f9c9e314661ea0aa8a104008d188b66b3a4aedeed9df4238a08fc2fb1007233cc2c87fcaa0cccd8ec03444471c1dd660c73acc17bff740d199a7c0c52c63c0408b5158e0000000c275eedb02f141113cf2c55b2c08c2c68cc99d2bb5840fba332e1c82862ec9b90104c48e41d32a47ac94ddee815dba8aeb5d3121cf247a81aef7805b020e9eec44cbe3055be69fe066824ba2292b9cdce41635fc00df96fb10a3a8cc60c4a76c65ebbb0640e0a29de94edf5cbefac1c5fa96e7080af804b22cabce10ea52f1018527f4aa39cdafa3eff63de2a7f50d042667820f6f86f276afb2b81da301e031351ee13013137e9d5cec0c84d7e3f82c6fd12eb98f9ea654bcb9ce59a2015183c6e65bb0537e611b830d74c30fb8207fca0990acdbb51e4e234026e00000000b3ebae3eb52c140953a350fcf0124b1a30b1afc29ea56f8413686d912eb8118d73ef9c6d3843ebcb555301c0205dd3040000002e334319c8979c322e92fbc2c400009f2404b941553843de114fdb03c19d606bd760c40f7f28360820b82d548198041562bcbd9edce223b54cf3c35823f3c446f0a20160ac181c96606dbc967673aca98d6f5637b20fd2809a29ea5e40139a19415f7fc5d852209bdfed74008651752b5e052412d3e00a44417b7caf91a173925a66ee6e30723e73f3b7d66d2a5d09ff40c0bc6e7a5cfef7f327018578892a23014c3629f2e41af619f0d9f0ec8d551415051ff94391c03f3501c928ed7818af61729278f84d4730ef28af4c202e0f175e2a5cbddc8b973e2701b33f1b963025220c04817010b6fb70", @ANYRESHEX], &(0x7f0000000280)='syzkaller\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) chdir(&(0x7f00000003c0)='./bus\x00') r9 = socket(0x1, 0x2, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r10, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000380)='./file1\x00', r10, r11) 2.668030869s ago: executing program 0 (id=1059): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x400}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171, 0x0, 0x0, 0x6000}}], 0x400000000000172, 0x4000000) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) r4 = open$dir(&(0x7f0000000000)='\x00', 0x0, 0x40) fchmodat(r4, &(0x7f0000000080)='./file0\x00', 0x1) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000004c0)='cgroup2\x00', 0x0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/fscaps', 0x200800, 0x8) fcntl$getflags(r5, 0x1) 2.485578652s ago: executing program 6 (id=1061): syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x6, 0x2d0, &(0x7f00000003c0)="$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") pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r1}, 0x10) setreuid(0xee00, 0x0) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000880)={0x1, 0xfff, 0x80000000, 0x9, 0x100, 0x4}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x2a08000, &(0x7f00000006c0)={[{@mblk_io_submit}, {@resuid}], [{@fowner_gt}]}, 0xfc, 0x47a, &(0x7f0000000a80)="$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") sendmsg$tipc(0xffffffffffffffff, 0x0, 0x20000805) r3 = socket(0x10, 0x2, 0x0) dup2(r3, r3) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wake_unlock', 0x220242, 0x221) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'tunl0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0x11000000}, 0x3, r5}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r7}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r8 = getpid() r9 = socket(0x10, 0x3, 0x0) sendto$inet6(r9, &(0x7f0000000740)="9000000018001f2fb9409b52ffff65580200be04020c060560020b0243000f00ffffff9e00c8388827a685a168d0bf47d32345653602648dcaaf6c26c291214549935ade4a460c20b6ec0cff3959547f500f58ba86c902000f1d012e02000280160012000a000000000200000000000000080000000eceb6b362bb944cf2e70100aba4183b003e5fa424ac4d31c4f7a1", 0x90, 0x24000040, 0x0, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r10, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x2000) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x7) 2.484988292s ago: executing program 3 (id=1062): setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x200000c0, 0xffffffff, 0xfffffff8}, 0x10) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = socket$can_raw(0x1d, 0x3, 0x1) r4 = gettid() timer_create(0x0, &(0x7f00000005c0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) read(r3, &(0x7f00000027c0)=""/4073, 0xfe9) 2.157677127s ago: executing program 5 (id=1063): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$igmp6(0xa, 0x3, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x1, &(0x7f0000000140)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f00000001c0), 0x2, 0x51a, &(0x7f0000001200)="$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") socketpair$unix(0x1, 0x5, 0x0, 0x0) msync(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) process_vm_readv(r2, &(0x7f0000000300)=[{&(0x7f0000000000)=""/7, 0x7}], 0x1, 0x0, 0x0, 0x0) close(0x3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmmsg$inet6(r1, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) 1.894103021s ago: executing program 6 (id=1064): bpf$MAP_CREATE(0x0, &(0x7f0000010080)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e01f3440cee51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cad32b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337602d3e5a815232f5e16c1b30c3a6abc85018e5ff2c91018afc9ffc2cc788bee1b47683db012469398685211dfbbae3e2ed0a50e7393bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d300006aca54183fb01c73f979ca9857399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7af22e30d46a9d26d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977fb536a9caab37d9ac4cfc1c7b400000000000007ffc826b956ba859ac8e3c177b91bd7d5e41ff83ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d000069a16203a967c1bbe09315c29877a308bcc87dc3addb08142bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8240000e3428d2129369ee1b85af9ffffff0d0df414b315f651c8412392191fa83ee830548f11be359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92000000000f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb74d4ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905de328c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a978ee56c83a3466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342e0eaf6f330e935878a6d169c80aa4252d4ea6b"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket(0x1e, 0x4, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x6}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) pipe(&(0x7f0000000040)) unshare(0x22020400) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00'}, 0x18) 1.404260208s ago: executing program 0 (id=1065): r0 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f00000000c0)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$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") r1 = socket$tipc(0x1e, 0x5, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000700002dcbabaeedbcc21098ee9a9100", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x28}, 0x1c) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001a00)={0xffffffffffffffff, 0x20, &(0x7f0000000980)={&(0x7f00000008c0)=""/129, 0x81, 0x0, &(0x7f0000000a00)=""/4096, 0x1000}}, 0x10) r7 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_misc(r7, &(0x7f0000000240), 0xfffffecc) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000001a40)=ANY=[@ANYBLOB="1800170400000000200000110000", @ANYRESHEX, @ANYRESDEC=r0], &(0x7f0000000240)='GPL\x00', 0x200, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffc5, r6, 0x0, 0xfffffffffffffe7f, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001a80)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r5}, &(0x7f0000000400), &(0x7f0000000440)=r8}, 0x20) connect$pppl2tp(r3, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x32) writev(r3, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x180204}], 0x1) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0300e31b04000000040000000a00000000000000", @ANYRES32=r2, @ANYBLOB="000200"/20, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="030000000100"/28], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r9, &(0x7f0000000640)="76e771a9a26a0de0d788d3e86ae7443c4214d45c49dad03ee68ff0ee6d6af1dfe67e61a3a3c0d5ad80af9389b97ade6c5ee25d5010c27d735014c459b0b7b0c512a2b871899fd8", &(0x7f0000000740)=""/166}, 0x20) r10 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88040, 0x0) fcntl$setlease(r10, 0x400, 0x0) ioctl$EVIOCGPROP(r10, 0x80404509, &(0x7f0000000800)=""/149) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r2, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r12}, 0x10) r13 = memfd_create(&(0x7f0000000380)='\x103q}2\x9a\xce\xaf\x03\xdfyR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7R\x94\xaf\xbb\xdcM\x90k\xd6\x05\r\x84\x87\x1e?\x10\x95SWFO{\x1f\x1b!\xd5\x991D\x1c\b\x8c`\xeaSA\x90m\xb6&\xd0\xf1\xb3\xed:\x82\xbd\xe3i|BL\x1f\x9d\x00\x00\xc5\xb8$\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\r\xd6h\x80\x8fQ|\xf5d\x10\x10\xd7\t\x00\x00\x00\x00\x00\x00\x00<\xfeeS\xb2l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfaa\xd3\xf1\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7~x\xb8vo\xe6\x15@\xc9\"CY\x11\xb9u\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D4E^7%8\x94y\x90\xf0l\xa0\'L%\xd4\xda\xee\x81\x98\xcc\xfd\xa2\x89$\x9by\xf1\xbb\x01\xb7\xcd\xbf\x99\x1f\x90@b\x03\xb3\xe0CfU\x16{\xbey\xa1cs\x96U\x11\xdb*\xdf\xcdG\xc7z\x85\x8aE\xf7\xd5\x9dAj\xe3\xfb\xc4\xa0\x14\x87\x19\x17\xed\xd1\x185%Q%\x81\xfaK\x82\xec=\xa3\xb8~\xb6O\xbd\x19*\xdb\x1c\x10\xa4\x8dIl\xc1\xceG\xd0h\xa1\xab:dP\xb6\xa0BR\xbe\x03\xac\xd9\x87\x00@\x80\x94\xd88\xc9\x03\x97\x17r\x85#\x7f\x8cu\x8f\xcc\x7fF\xb5\xea\xa6\xc1\x9d\xac\x89\xc9\xa1tuJw\xee\x1a\xe73\xa8\xadS\xd1\x11#d\xc2\xcfdj\x9ec\x93\xd5K\x90*_3\x89\v\xab\x04ih\x12\x93\xc5m\x8f~{\xe5\x85\xa5g\x00\x00\x00\xe45Q\xab%\xa8[\xf3\x17\x94\xf8\xdfq\xff\xd2?\xafW\xde\x1bW]\x1f\aaV\xc5\xc82*\xc7\xc5\"C}L\x10e\xc6\x90\xc0\xf9z\xb6+/d\x86\xf2\xbe\xc9:u\t\\e\x05)\xe4\xd2\xc4\x1a\xc9\xac\xdb\x925\x02\x94@\xa2\xe1\xee\x16\xb4\x98\xff\x0f\xbb\xb2\x81\xcf\x13g6l\xcc\xc8\x02\v\xa2\xb2\xf6\xbf@d\xcecC\x9fVz\xf4\x14\xa5\x8b|\xe1\xc0\xfa3X\xf4\xd9L\xe6\x8f\x9dy\x0fX.\xc5EQ\xd1/\xa1\xd0\x03>\xf0\x90\x13B\xe2\x97\x8b!\xf7\"\xecX\x92\xab\xbc^\xb2\x80@\xcc+\xbbp\xdc|N\xd3[=G\xb2\xe1\x9c\xc5\x81y\x84\xef\xacQ\x01\xdd\xe7<\xb8\xf1Hn\x86\xa6\xe3\x18N\x19\"[-\xdb\xef\xc3\xe0\xa8}', 0x0) ftruncate(r13, 0x800799c) r14 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r14, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendfile(r14, r13, 0x0, 0x7fffffff) r15 = openat(r0, &(0x7f0000000540)='mnt\x00', 0x10042, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r15, 0xc0506617, &(0x7f0000000580)={@id={0x2, 0x0, @a}, 0x40, 0x0, '\x00', @a}) 1.098320553s ago: executing program 1 (id=1067): openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) fchownat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) 1.097053293s ago: executing program 3 (id=1068): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_clone3(&(0x7f00000003c0)={0x90000000, &(0x7f00000001c0), &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x0, {0xe}, &(0x7f0000000300)=""/74, 0x4a, &(0x7f0000000280)=""/16, &(0x7f0000000380)=[r0, r0, r0], 0x3}, 0x58) ptrace$getsig(0x4202, r3, 0x80, &(0x7f0000000440)) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000004000000e27f000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) syz_usb_connect$uac1(0x3, 0xa2, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000406b1d01014000010203010902900003010380000904000000010100000a24010f00030201020c2402060602040c0032a304090401000001020000090401010101020000072401200404000c2402010201400f0a3b4725090501090000f7090607250183020c0009040200000103000009040201"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000038000009400"/24], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5df6}, 0x94) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="0100feffffff0000000005000000180001801400020073797a5f74756e00000000000000000018000380140003800c"], 0x44}}, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r11 = socket$inet(0x2, 0x4000000000000001, 0x0) ptrace$setsig(0x4203, r4, 0xffffffffffffffff, &(0x7f0000000740)={0x1a, 0x7, 0x7ff}) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r12}, 0x10) mount$9p_unix(&(0x7f0000000000)='\x00', &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0), 0x202010, &(0x7f0000000600)=ANY=[@ANYRES8=r5, @ANYRESOCT=r8, @ANYRES64, @ANYRESDEC, @ANYRESDEC=r8, @ANYBLOB="a1e224b5238a35b69ecd41c4207a217dfe98f14524a182925a5e81c8811de4005258d766fc53a11c1ab3a77a859cb035ad4382f1a3a4205c54c7c0d461208834088364ac25ac671ee38689144b922c88d11549de5920dc625aedadf2f52286f9b211961261c24ad98dde573854f6efa194b0949592588853008ea90764d6d6ef665e948b862a4194818bb0463a21456fe88f9c8c088645f653bd931cac61932269a8668451ec99a69afef849d902d960aaf0ab2c34b454b6c56dbc7271163ac195239115121923", @ANYRES64=r3, @ANYRESOCT=r8, @ANYRES16=r12]) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r13, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$NL80211_CMD_LEAVE_OCB(r13, &(0x7f00000005c0)={&(0x7f00000004c0), 0xc, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r14, @ANYBLOB="200028bd7000fddbdf256d0011000c0099002b00000043000000"], 0x20}, 0x1, 0x0, 0x0, 0x20044890}, 0x1) setsockopt$inet_opts(r11, 0x0, 0x4, &(0x7f0000000080)="441f08010000", 0x6) 933.705366ms ago: executing program 1 (id=1069): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sys_enter\x00', r0}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x6}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sys_enter\x00', r3}, 0x10) timer_getoverrun(0x0) setregid(0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000240)={0x8f8, r1, 'id0\x00'}) unshare(0x24020400) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_UNREGISTER(r5, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000ffe000/0x2000)=nil, 0x2000}) fchmodat(r4, &(0x7f0000000000)='./file0\x00', 0x39) connect$unix(0xffffffffffffffff, 0x0, 0x0) clock_getres(0x2, 0x0) 906.360766ms ago: executing program 1 (id=1070): syz_emit_ethernet(0x32, &(0x7f0000000000)={@random="e90c610faca2", @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0xe000, 0x3, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x10, 0x0, @opaque="24dc6170e1e03185"}}}}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) socket$packet(0x11, 0x3, 0x300) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r1}, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r6, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) 903.248846ms ago: executing program 5 (id=1071): r0 = socket(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f00000000c0)=0x1002, 0x4) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000000)={0x2, 0x4e20}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x1}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000000400000008"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000200)='mm_page_alloc\x00'}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, 0x0, 0x5000) recvmsg$inet_nvme(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x10163) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000002e00)=ANY=[@ANYBLOB="61636c2c757365725f78617474722c6e6f61636c2c757365725f78617474722c6e6f757365725f78617574722c6361637265616461686561642c00c932724afb74e3958abb3ac911e745bee1b0d823d5c0885ff781a1e1f822dba9b22be7ec237d6db3729f24f8b60e2d8e31b3ad292f2c41643d9675396124b032e6799b873a58d1b430eedfe12774e65ba1b471825927fe8afb711317160fe6aa0c4264688bb333064b1e3c7553c3e1b536956a61b971634e9d5246b9adac6a211361a5b6a2575b4ccb554d0444337377db184a3df1fbd52f59973289ab6e5671fffc6092cf434aff49a629d210d924066630d6129b4ba20b0386d1073269c72ce621d2aac24e89a844011f0f9a46402124219f7f077cadf2d7532869b1e91a1c5be04f7a9f41c99438876b000000000000000000d035a59f146e725ae51c6b04f0c8036de6e917f19e657c3d628ddcf71c0025fe8878dafb50dbcf67b85b3bbdc0392fc6eb837d2131f5a0fccc718c2466efed977fe79bd370c7dfce3f855f414f43023299565f0b8c99134678748acfd1623e6d6d8db03baa42f0212f0c3bef558cf58f877e142a518e65fa8371a01d2dba3cae2a0293d1c7a68300"/450], 0xfe, 0x177, &(0x7f0000000680)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x80000, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r2, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000006a000105000000000000000000d7d0602900000008000a"], 0x20}}, 0x0) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r5 = getpgrp(0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) setuid(0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000002b80)=0x0) stat(&(0x7f0000002bc0)='./file0\x00', &(0x7f0000002c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(r4, &(0x7f0000002cc0)=[{{0x0, 0x0, &(0x7f0000002a80)=[{&(0x7f0000000640)="4abb194a7d3fb8421cb291dde19accaef2e0e43b5dcb102eee0d45f1cbe07266476276fdd83810b1bd4cf9f244990d2ded7bc0dd7b335a04f724310caaba9c375f53", 0x42}, {&(0x7f00000006c0)="be4d73ccfc679dc93f5c3a0895a7daccb1e61b396eeaf509b3db0dc8de1846a7156095c8531540d2cc5a5e634f21350094856b264a6cafe72014376f2d5509fe8663ae93ee66ecbf65c65d00d5345b6e0155359cdd50a9f09f9fa2aa8fe2eb62d21ed2fc4ed74aa26da47d0862f547b6b6417bd75231dae31dace58eb0a4b4c1d7f83ca7c1143bcbcc36409dcaf81fc9920b91cc16569ac26f6e140c3a77804ee503302d486351b56082a478dcfad4c330d1f3ad0e21b1b05cdddbfef420f7bcb58f08489ee4fdc2c2bf286d7a851134", 0xd0}, {&(0x7f00000007c0)="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", 0x1000}, {&(0x7f00000017c0)="ea706cc894bee814948aa469617faa36a41be131343eaad0f298d6dfa698cf5ec3ebecf877694948684aea5bbf39004d8f9c92535c47748fe4c19021b66d8358d0e67702494cae2047", 0x49}, {&(0x7f0000001840)="cb72041c31e9dc403399ae20de48899af137b70ba3547a6b23ae2b056e5779ec87bc4c31ea1dc21c76ace8bf579b2e6de2ceac03edc8f6b858670161f07652f973cd1939e8858b98c81ac0711a6a02081ff6a53ef6c0d7c40fa5bb7d50d75c7f1a610d75e4ef7802d165d90542db2bdbfe9dfc109b55da50e11ec64f1361469855691696", 0x84}, {&(0x7f0000001900)="313b265cf5df97e17cc2b3e197507884bdeaef08c83ff214dc6f8a54a2ccdab9c45c7f1e5a51b80794a8e6985a9d6fc6e79e9daeff5e27c6351afe0559b1be911e5b305fe27d2a02f31c32dad14eac9cec8b4477386c3b0b294d8a3becb4f727726d9762ad42dda198f9ed81fa0981e20ffd771d0aef73c417470c1dab0cef162c483f6ecd8fa4daa2768c9dd64a694f33f989989ecb9855d1e69dd864e0b1b533f02d4648fc1525b6cbda38433f3c575361b7d6a048d3c213ec735dda71bd4b9ef0ebc0da0c1bf30dd0882e24", 0xcd}, {&(0x7f0000001a00)="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", 0xc00}, {0x0}, {&(0x7f0000002a40)}], 0x9, &(0x7f0000002c80)=[@cred={{0x1c, 0x1, 0x2, {r5}}}, @cred={{0x1c, 0x1, 0x2, {r6, 0x0, r7}}}], 0x40, 0x4004000}}], 0x1, 0x24000800) 816.676657ms ago: executing program 6 (id=1072): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x28, 0x5, 0x0, 0xfffff034}, {0x48, 0x40, 0x42, 0x12}, {0x6, 0x4, 0x4, 0x1000004}]}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/2566], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="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", 0x0, 0x8, 0x60000000}, 0x1e) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x5c, 0x0, &(0x7f0000001100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f0000001080)={@flat=@weak_binder={0x77622a85, 0x1000}, @flat=@weak_binder={0x77622a85, 0x110a, 0x2}, @ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/176, 0xb0, 0x1, 0x15}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}, 0x1000}, @request_death={0x400c630e, 0x2}], 0x0, 0x0, 0x0}) socket$key(0xf, 0x3, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000006000000000000000085"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) readlinkat(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)=""/21, 0x15) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x0) socket(0x25, 0x80000, 0x101) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r5}, &(0x7f0000000040), &(0x7f0000000280)}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000300)='afs_make_fs_call\x00', r6}, 0x18) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001700)=ANY=[@ANYBLOB="160000000000000061b1000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r7, 0xffffffffffffffff}, 0x0, &(0x7f0000000040)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000e00)={r8, 0x0, &(0x7f0000001780)=""/4088}, 0x20) 745.830049ms ago: executing program 6 (id=1073): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000400620180100000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000600)=ANY=[], 0x50) socket$inet6(0xa, 0x6, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) faccessat(0xffffffffffffff9c, 0x0, 0x2) syz_usb_connect(0x0, 0x1cb, 0x0, 0x0) openat$kvm(0xffffff9c, 0x0, 0x800, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[]) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$selinux_member(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="48000000140009050000000000000000021f0020", @ANYRES32=r4, @ANYBLOB="08000100e0000002080002000a01010008000400ac1414aa08000400ffffffff08000a000100000008000200e00000"], 0x48}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x70}}, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000040)={'batadv_slave_1\x00', {0x2, 0x0, @loopback=0x7f000000}}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f00000000c0)=ANY=[@ANYBLOB="1808000000000000008425b43589d9295de10000432239c224b9292fb29fad1076fe61b310f50d7e5c4beb967a83bf8901ea1844bcf27919ec952adc7a72005d1baa45ed1665e767cbeedc486eac8f2ca75010ad5db32784d22859ad02856516c2976f89", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1f00, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r7}, 0x10) 669.175119ms ago: executing program 5 (id=1074): pipe2$9p(0x0, 0x0) dup(0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000f00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) clock_adjtime(0x0, 0x0) sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)={0x2c, r2, 0x1, 0x80, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2000007}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xc3}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2805}, 0x0) 642.57544ms ago: executing program 5 (id=1075): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) openat(0xffffffffffffff9c, 0x0, 0x101042, 0x56633bd1cf1d94b2) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000280)={'nicvf0\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00'}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r5}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000000080)=@req={0x800, 0x7, 0xfffffffc, 0x800}, 0x10) r7 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$VT_RESIZE(r7, 0x5609, &(0x7f0000000180)={0x65f5, 0x1, 0xff}) fcntl$lock(r6, 0x26, &(0x7f0000000000)={0x2, 0x0, 0x7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 157.571757ms ago: executing program 0 (id=1076): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r4}, 0x10) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r5, 0x0, 0x4, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$sock_linger(r8, 0x1, 0xd, &(0x7f0000002cc0)={0x1, 0xa449}, 0x8) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x10, 0x2, 0x0) sendmsg$SMC_PNETID_GET(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r10, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) sendmsg$nl_route(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000900)=ANY=[@ANYBLOB="8c0000001000370400"/20, @ANYRES32=r11, @ANYBLOB="00000000000000006c0012800e00010069703665727370616e000000580002801400060020010000000000000000000000000002050016000100000014000700fc020000000000000000000000000000040012"], 0x8c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140), 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@deltclass={0x24, 0x29, 0x800, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xd, 0xfff3}, {0xb, 0xfff1}, {0x6, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@gettclass={0x24, 0x2a, 0x8, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r11, {0xf, 0xfff9}, {0xfff1, 0x1}, {0x1, 0x8}}, ["", "", "", "", ""]}, 0x24}}, 0x4000) r12 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r12, &(0x7f00000002c0), 0x40000000000009f, 0x0) close(r8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r6}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) connect$unix(r13, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) recvmmsg(r13, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000000)=ANY=[@ANYRES32=r7, @ANYRESDEC=r6, @ANYRES16=r1, @ANYRES64=r2, @ANYBLOB="f9fb222e2bb6ca2043b335f8a8a02f25a67ea810b070148f30a5cb2e04229416319bb850734ccb19fb3bda8fd8ae3eb7920fcac94f51097227ee0d56a9c8e3599c92814d42661fee1810f899d69a6a2fa9c6d757c90d24b614cee6d8386ab85cbcd23043866aed286cc52ba48632075ae1b205a30ab9667f1280c636129a1ce9b402cc188049d4236af11be88343196a0e5a1084d5447540f3b6302c4ed403e29bb8e6c6f9ae7bedeb579ed3878cd26353da300dc11d6e67e2fdd97e8f5f822db5319c6fab", @ANYRES32, @ANYRES16=r0, @ANYRES64=r13, @ANYRESHEX=r6], 0x119) add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) add_key$fscrypt_v1(&(0x7f00000003c0), &(0x7f0000000480)={'fscrypt:', @desc4}, &(0x7f0000000580)={0x0, "87f7fd9b2f93ec336b00fbe25d4b7d12a2ff9c6be65904a35addc08e097958adeb2d2298fa574169cd2c475b70e67fa35e8141ca853c25b0e9e21b684881601d", 0x17}, 0x48, 0x0) 35.402969ms ago: executing program 1 (id=1077): r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000440)={'syz_tun\x00', 0x101}) 25.558559ms ago: executing program 1 (id=1078): syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000", @ANYRES16=r1], 0x138) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 0s ago: executing program 1 (id=1079): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000040)={[{@nobh}, {@abort}]}, 0xff, 0x23f, &(0x7f0000000540)="$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") sendmsg$tipc(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)=@id={0x1e, 0x3, 0x0, {0x4e22, 0x1}}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000340)="d06eadcefb81fa0e99624cf26be8809741b8183e70922abef9e90f02d53841d61c1de6c36419dd41744bf44656e5a291142ce5f712812741237ef5d96599bd7243ca3f44e4a3eac92a4a", 0x4a}], 0x1, &(0x7f0000000780)="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", 0x1000, 0x4040010}, 0x2f86d83eb76723c6) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f0000000080), 0x18) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f00000000c0)=@v1={0x2, @adiantum, 0x0, @desc3}) read$FUSE(0xffffffffffffffff, &(0x7f0000002080)={0x2020}, 0x2020) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='tmpfs\x00', 0x0, &(0x7f0000000240)='nolazytime') rename(&(0x7f0000000340)='.\x00', &(0x7f0000000380)='./file0\x00') r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000440)={'ip_vti0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x7c7, 0x3, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x86, 0x4, 0x0, @loopback, @local}}}}) kernel console output (not intermixed with test programs): +0x50f/0xfc0 [ 138.184627][ T2332] ? __this_cpu_preempt_check+0x13/0x20 [ 138.190316][ T2332] ? __perf_event_task_sched_in+0x1fb/0x280 [ 138.196341][ T2332] ? perf_pmu_sched_task+0x180/0x180 [ 138.201936][ T2332] ? native_set_ldt+0x370/0x370 [ 138.206964][ T2332] ? perf_sched_cb_inc+0x240/0x240 [ 138.212221][ T2332] ? _raw_spin_unlock_irq+0x4e/0x70 [ 138.212243][ T2332] ? finish_task_switch+0x12e/0x5a0 [ 138.223120][ T2332] ? switch_mm_irqs_off+0x763/0x9a0 [ 138.228599][ T2332] ? __switch_to_asm+0x34/0x60 [ 138.233661][ T2332] ? __schedule+0xb4f/0x1310 [ 138.233681][ T2332] ? release_firmware_map_entry+0x190/0x190 [ 138.244779][ T2332] ? __switch_to+0x50f/0xfc0 [ 138.244801][ T2332] ? blkdev_common_ioctl+0xf90/0x1a80 [ 138.255851][ T2332] ? do_vfs_ioctl+0x12e6/0x1510 [ 138.260953][ T2332] ? blkdev_bszset+0x1e0/0x1e0 [ 138.266176][ T2332] ? __ia32_compat_sys_ioctl+0x7b0/0x7b0 [ 138.272150][ T2332] ? has_cap_mac_admin+0x330/0x330 [ 138.277672][ T2332] ? __perf_event_task_sched_in+0x1fb/0x280 [ 138.277685][ T2332] ? perf_pmu_sched_task+0x180/0x180 [ 138.277698][ T2332] ? __kasan_check_read+0x11/0x20 [ 138.277710][ T2332] ? preempt_schedule_irq+0xbb/0x110 [ 138.277720][ T2332] ? preempt_schedule_notrace+0x110/0x110 [ 138.277744][ T2332] ? selinux_file_ioctl+0x377/0x480 [ 138.277756][ T2332] ? lo_release+0x1f0/0x1f0 [ 138.277776][ T2332] blkdev_ioctl+0x2d2/0x5b0 [ 138.323508][ T2332] ? asm_sysvec_reschedule_ipi+0x12/0x20 [ 138.323521][ T2332] ? blkdev_compat_ptr_ioctl+0xc0/0xc0 [ 138.323537][ T2332] block_ioctl+0xae/0x100 [ 138.323547][ T2332] ? blkdev_iopoll+0x100/0x100 [ 138.323558][ T2332] __se_sys_ioctl+0x121/0x1a0 [ 138.323569][ T2332] __x64_sys_ioctl+0x7b/0x90 [ 138.323581][ T2332] do_syscall_64+0x31/0x40 [ 138.323593][ T2332] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 138.323604][ T2332] RIP: 0033:0x7f22b822652b [ 138.323617][ T2332] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 138.323626][ T2332] RSP: 002b:00007f22b688edc0 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 138.323642][ T2332] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007f22b822652b [ 138.323649][ T2332] RDX: 0000000000000004 RSI: 0000000000004c00 RDI: 0000000000000005 [ 138.323657][ T2332] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000054d [ 138.323664][ T2332] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 138.323672][ T2332] R13: 00007f22b688eef0 R14: 00007f22b688eeb0 R15: 00007f22ae46f000 [ 138.323680][ T2332] ---[ end trace f9925cbb6a5ad4ee ]--- [ 138.407414][ T2332] EXT4-fs (loop1048579): Ignoring removed nobh option [ 138.407429][ T2332] EXT4-fs (loop1048579): Ignoring removed bh option [ 138.407447][ T2332] EXT4-fs (loop1048579): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 138.422873][ T2332] EXT4-fs (loop1048579): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue [ 138.465759][ T25] Bluetooth: hci0: command 0x1003 tx timeout [ 138.809350][ T2058] Bluetooth: hci0: sending frame failed (-49) [ 139.325800][ T1646] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 139.685863][ T1646] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 139.696022][ T1646] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 139.704991][ T1646] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 139.714162][ T1646] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.722828][ T1646] usb 1-1: config 0 descriptor?? [ 139.888589][ T2379] netlink: 8 bytes leftover after parsing attributes in process `syz.2.591'. [ 139.898149][ T2379] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1025 sclass=netlink_route_socket pid=2379 comm=syz.2.591 [ 140.291900][ T2389] FAULT_INJECTION: forcing a failure. [ 140.291900][ T2389] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 140.306424][ T2389] CPU: 0 PID: 2389 Comm: syz.3.595 Tainted: G W 5.10.238-syzkaller-00008-g59e9a7228857 #0 [ 140.317631][ T2389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 140.327782][ T2389] Call Trace: [ 140.331086][ T2389] __dump_stack+0x21/0x24 [ 140.335419][ T2389] dump_stack_lvl+0x169/0x1d8 [ 140.340115][ T2389] ? show_regs_print_info+0x18/0x18 [ 140.345319][ T2389] ? fsnotify_set_children_dentry_flags+0x210/0x210 [ 140.351913][ T2389] dump_stack+0x15/0x1c [ 140.356070][ T2389] should_fail+0x3c1/0x510 [ 140.360487][ T2389] should_fail_usercopy+0x1a/0x20 [ 140.365510][ T2389] _copy_from_user+0x20/0xd0 [ 140.370103][ T2389] memdup_user+0x5e/0xb0 [ 140.374358][ T2389] kvm_vcpu_ioctl+0x655/0xb50 [ 140.379224][ T2389] ? kernel_write+0x3c0/0x3c0 [ 140.384345][ T2389] ? kvm_create_vcpu_debugfs+0x170/0x170 [ 140.389990][ T2389] ? selinux_file_ioctl+0x377/0x480 [ 140.395212][ T2389] ? mutex_trylock+0xa0/0xa0 [ 140.399821][ T2389] ? __fget_files+0x2c4/0x320 [ 140.404529][ T2389] ? selinux_file_alloc_security+0x120/0x120 [ 140.410534][ T2389] ? __fget_files+0x2c4/0x320 [ 140.415235][ T2389] ? security_file_ioctl+0x84/0xa0 [ 140.420372][ T2389] ? kvm_create_vcpu_debugfs+0x170/0x170 [ 140.426281][ T2389] __se_sys_ioctl+0x121/0x1a0 [ 140.430976][ T2389] __x64_sys_ioctl+0x7b/0x90 [ 140.435585][ T2389] do_syscall_64+0x31/0x40 [ 140.440023][ T2389] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 140.446030][ T2389] RIP: 0033:0x7f22b8226929 [ 140.450544][ T2389] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 140.470270][ T2389] RSP: 002b:00007f22b688f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 140.478706][ T2389] RAX: ffffffffffffffda RBX: 00007f22b844dfa0 RCX: 00007f22b8226929 [ 140.486886][ T2389] RDX: 00002000000005c0 RSI: 000000004138ae84 RDI: 0000000000000005 [ 140.494872][ T2389] RBP: 00007f22b688f090 R08: 0000000000000000 R09: 0000000000000000 [ 140.502849][ T2389] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 140.510860][ T2389] R13: 0000000000000000 R14: 00007f22b844dfa0 R15: 00007fff380c7a38 [ 140.806597][ T24] kauditd_printk_skb: 26 callbacks suppressed [ 140.806620][ T24] audit: type=1400 audit(1751568608.265:1315): avc: denied { read } for pid=2398 comm="syz.2.598" name="file0" dev="tmpfs" ino=638 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 140.855923][ T483] Bluetooth: hci0: command 0x1001 tx timeout [ 140.862469][ T2058] Bluetooth: hci0: sending frame failed (-49) [ 140.863875][ T24] audit: type=1400 audit(1751568608.295:1316): avc: denied { open } for pid=2398 comm="syz.2.598" path="/113/file0" dev="tmpfs" ino=638 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 140.899917][ T24] audit: type=1400 audit(1751568608.295:1317): avc: denied { ioctl } for pid=2398 comm="syz.2.598" path="/113/file0" dev="tmpfs" ino=638 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 141.422762][ T2408] netlink: 37 bytes leftover after parsing attributes in process `syz.3.601'. [ 141.431764][ T2408] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 141.439209][ T2408] IPv6: NLM_F_CREATE should be set when creating new route [ 141.446465][ T2408] IPv6: NLM_F_CREATE should be set when creating new route [ 141.459864][ T2408] ------------[ cut here ]------------ [ 141.465419][ T2408] WARNING: CPU: 1 PID: 2408 at fs/sysfs/group.c:116 internal_create_group+0xe4/0xcf0 [ 141.475749][ T2408] Modules linked in: [ 141.479717][ T2408] CPU: 1 PID: 2408 Comm: syz.3.601 Tainted: G W 5.10.238-syzkaller-00008-g59e9a7228857 #0 [ 141.491031][ T2408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 141.501345][ T2408] RIP: 0010:internal_create_group+0xe4/0xcf0 [ 141.507455][ T2408] Code: 00 74 08 48 89 df e8 6b c0 d7 ff 48 8b 03 83 7c 24 1c 00 74 22 48 85 c0 0f 84 ef 0b 00 00 e8 f3 cf 9d ff eb 20 e8 ec cf 9d ff <0f> 0b 41 be ea ff ff ff e9 40 0b 00 00 48 85 c0 0f 84 dd 0b 00 00 [ 141.527389][ T2408] RSP: 0018:ffffc90000fbf140 EFLAGS: 00010287 [ 141.533504][ T2408] RAX: ffffffff81c5d01c RBX: ffff8881133f9098 RCX: 0000000000080000 [ 141.541636][ T2408] RDX: ffffc90003122000 RSI: 0000000000005def RDI: 0000000000005df0 [ 141.549805][ T2408] RBP: ffffc90000fbf248 R08: dffffc0000000000 R09: ffffed10215f323a [ 141.558122][ T2408] R10: ffffed10215f323a R11: 1ffff110215f3239 R12: 1ffff920001f7e38 [ 141.566284][ T2408] R13: dffffc0000000000 R14: ffffffff866335e0 R15: 1ffff1102267f213 [ 141.574385][ T2408] FS: 00007f22b688f6c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 141.583374][ T2408] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 141.590143][ T2408] CR2: 0000001b2d315ff8 CR3: 000000010ece9000 CR4: 00000000003506a0 [ 141.598182][ T2408] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 141.606268][ T2408] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 141.614282][ T2408] Call Trace: [ 141.617635][ T2408] ? rt_mutex_setprio+0xb40/0xb40 [ 141.622711][ T2408] ? sysfs_create_group+0x30/0x30 [ 141.627820][ T2408] ? __kasan_check_write+0x14/0x20 [ 141.632976][ T2408] sysfs_create_group+0x1f/0x30 [ 141.637907][ T2408] loop_configure+0xc2f/0x1260 [ 141.642808][ T2408] lo_ioctl+0x76d/0x1a80 [ 141.647322][ T2408] ? lo_release+0x1f0/0x1f0 [ 141.651947][ T2408] ? 0xffffffffa0012d80 [ 141.656154][ T2408] ? is_bpf_text_address+0x177/0x190 [ 141.661552][ T2408] ? __kernel_text_address+0xa0/0x100 [ 141.666999][ T2408] ? unwind_get_return_address+0x4d/0x90 [ 141.672657][ T2408] ? stack_trace_save+0xe0/0xe0 [ 141.677552][ T2408] ? arch_stack_walk+0xee/0x140 [ 141.682437][ T2408] ? __kasan_check_write+0x14/0x20 [ 141.687625][ T2408] ? kobject_get_unless_zero+0x15e/0x1e0 [ 141.693279][ T2408] ? __kobject_del+0x2f0/0x2f0 [ 141.698102][ T2408] ? __kasan_check_write+0x14/0x20 [ 141.703285][ T2408] ? mutex_lock+0x8c/0xe0 [ 141.707682][ T2408] ? mutex_trylock+0xa0/0xa0 [ 141.714730][ T2408] ? bdev_check_media_change+0x350/0x350 [ 141.720762][ T2408] ? __kasan_check_write+0x14/0x20 [ 141.725990][ T2408] ? bdev_check_media_change+0x350/0x350 [ 141.731815][ T2408] ? __kasan_check_write+0x14/0x20 [ 141.737059][ T2408] ? _raw_spin_lock+0x8e/0xe0 [ 141.741803][ T2408] ? _raw_spin_trylock_bh+0x130/0x130 [ 141.747512][ T2408] ? __kasan_check_write+0x14/0x20 [ 141.752749][ T2408] ? __kasan_check_write+0x14/0x20 [ 141.757943][ T2408] ? __kasan_check_write+0x14/0x20 [ 141.763412][ T2408] ? disk_unblock_events+0x51/0x60 [ 141.769021][ T2408] ? 0xffffffffa0012d80 [ 141.773229][ T2408] ? is_bpf_text_address+0x177/0x190 [ 141.778708][ T2408] ? __kernel_text_address+0xa0/0x100 [ 141.784153][ T2408] ? unwind_get_return_address+0x4d/0x90 [ 141.789925][ T24] audit: type=1326 audit(1751569062.245:1318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2410 comm="syz.2.602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cb3076929 code=0x7ffc0000 [ 141.791743][ T2408] ? stack_trace_save+0xe0/0xe0 [ 141.818668][ T24] audit: type=1326 audit(1751569062.275:1319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2410 comm="syz.2.602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5cb3076929 code=0x7ffc0000 [ 141.820065][ T2408] ? arch_stack_walk+0xee/0x140 [ 141.842337][ T24] audit: type=1326 audit(1751569062.275:1320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2410 comm="syz.2.602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cb3076929 code=0x7ffc0000 [ 141.847289][ T2408] ? memcpy+0x56/0x70 [ 141.872497][ T24] audit: type=1326 audit(1751569062.275:1321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2410 comm="syz.2.602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cb3076929 code=0x7ffc0000 [ 141.874953][ T2408] ? avc_has_extended_perms+0x7f0/0xc30 [ 141.899296][ T24] audit: type=1326 audit(1751569062.305:1322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2410 comm="syz.2.602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5cb3076929 code=0x7ffc0000 [ 141.903566][ T2408] ? avc_ss_reset+0x280/0x280 [ 141.926956][ T24] audit: type=1326 audit(1751569062.305:1323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2410 comm="syz.2.602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cb3076929 code=0x7ffc0000 [ 141.931765][ T2408] ? kasan_set_track+0x5b/0x70 [ 141.954750][ T24] audit: type=1326 audit(1751569062.305:1324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2410 comm="syz.2.602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cb3076929 code=0x7ffc0000 [ 141.983494][ T2408] ? __kasan_slab_free+0x11/0x20 [ 141.988820][ T2408] ? slab_free_freelist_hook+0xc5/0x190 [ 141.994520][ T2408] ? kmem_cache_free+0x100/0x2d0 [ 141.999689][ T2408] ? putname+0xfe/0x150 [ 142.003919][ T2408] ? do_sys_openat2+0x207/0x6d0 [ 142.009327][ T2408] ? blkdev_common_ioctl+0xf90/0x1a80 [ 142.014873][ T2408] ? blkdev_bszset+0x1e0/0x1e0 [ 142.019827][ T2408] ? do_vfs_ioctl+0x766/0x1510 [ 142.024297][ T25] usb 1-1: USB disconnect, device number 9 [ 142.024667][ T2408] ? __ia32_compat_sys_ioctl+0x7b0/0x7b0 [ 142.036427][ T2408] ? has_cap_mac_admin+0x330/0x330 [ 142.042058][ T2408] ? putname+0xfe/0x150 [ 142.050158][ T2408] ? kmem_cache_free+0x2ac/0x2d0 [ 142.055173][ T2408] ? selinux_file_ioctl+0x377/0x480 [ 142.061329][ T2408] ? lo_release+0x1f0/0x1f0 [ 142.066045][ T2408] blkdev_ioctl+0x2d2/0x5b0 [ 142.070556][ T2408] ? blkdev_compat_ptr_ioctl+0xc0/0xc0 [ 142.087172][ T2408] ? __fget_files+0x2c4/0x320 [ 142.092255][ T2408] block_ioctl+0xae/0x100 [ 142.216458][ T2408] ? blkdev_iopoll+0x100/0x100 [ 142.221353][ T2408] __se_sys_ioctl+0x121/0x1a0 [ 142.263023][ T2408] __x64_sys_ioctl+0x7b/0x90 [ 142.345428][ T2408] do_syscall_64+0x31/0x40 [ 142.351445][ T2408] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 142.358138][ T2408] RIP: 0033:0x7f22b822652b [ 142.362844][ T2408] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 142.385119][ T2408] RSP: 002b:00007f22b688edc0 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 142.689929][ T2408] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 00007f22b822652b [ 142.698935][ T2408] RDX: 000000000000000a RSI: 0000000000004c00 RDI: 000000000000000b [ 142.708866][ T2408] RBP: 0000000000000000 R08: 0000000000000000 R09: 00000000000004b8 [ 142.717609][ T2408] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000a [ 142.726804][ T2408] R13: 00007f22b688eef0 R14: 00007f22b688eeb0 R15: 00007f22ae46f000 [ 142.734880][ T2408] ---[ end trace f9925cbb6a5ad4ef ]--- [ 143.031220][ T25] Bluetooth: hci0: command 0x1009 tx timeout [ 143.041319][ T2408] EXT4-fs (loop1048579): couldn't mount as ext2 due to feature incompatibilities [ 143.232044][ T2428] netlink: 'syz.0.606': attribute type 4 has an invalid length. [ 143.610948][ T2433] netlink: 12 bytes leftover after parsing attributes in process `syz.0.608'. [ 143.696803][ T2438] ------------[ cut here ]------------ [ 143.702342][ T2438] WARNING: CPU: 1 PID: 2438 at fs/sysfs/group.c:116 internal_create_group+0xe4/0xcf0 [ 143.712095][ T2438] Modules linked in: [ 143.716179][ T2438] CPU: 1 PID: 2438 Comm: syz.3.609 Tainted: G W 5.10.238-syzkaller-00008-g59e9a7228857 #0 [ 143.730029][ T2437] xt_CT: You must specify a L4 protocol and not use inversions on it [ 143.738807][ T2438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 143.775817][ T2438] RIP: 0010:internal_create_group+0xe4/0xcf0 [ 143.792073][ T2438] Code: 00 74 08 48 89 df e8 6b c0 d7 ff 48 8b 03 83 7c 24 1c 00 74 22 48 85 c0 0f 84 ef 0b 00 00 e8 f3 cf 9d ff eb 20 e8 ec cf 9d ff <0f> 0b 41 be ea ff ff ff e9 40 0b 00 00 48 85 c0 0f 84 dd 0b 00 00 [ 143.846333][ T2438] RSP: 0018:ffffc90000fbf140 EFLAGS: 00010287 [ 143.865528][ T2438] RAX: ffffffff81c5d01c RBX: ffff8881133f9098 RCX: 0000000000080000 [ 143.874944][ T2438] RDX: ffffc90003122000 RSI: 000000000000a120 RDI: 000000000000a121 [ 143.883071][ T2438] RBP: ffffc90000fbf248 R08: dffffc0000000000 R09: ffffed10215f323a [ 143.891324][ T2438] R10: ffffed10215f323a R11: 1ffff110215f3239 R12: 1ffff920001f7e38 [ 143.899452][ T2438] R13: dffffc0000000000 R14: ffffffff866335e0 R15: 1ffff1102267f213 [ 143.907554][ T2438] FS: 00007f22b688f6c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 143.919233][ T2438] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 143.926029][ T2438] CR2: 00007f3252c3b9c8 CR3: 000000010e8ab000 CR4: 00000000003506a0 [ 143.945804][ T2438] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 143.953815][ T2438] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 143.982477][ T2438] Call Trace: [ 143.986253][ T2438] ? rt_mutex_setprio+0xb40/0xb40 [ 143.991431][ T2438] ? sysfs_create_group+0x30/0x30 [ 144.003265][ T2438] ? __kasan_check_write+0x14/0x20 [ 144.008742][ T2438] sysfs_create_group+0x1f/0x30 [ 144.013739][ T2438] loop_configure+0xc2f/0x1260 [ 144.018963][ T2438] lo_ioctl+0x76d/0x1a80 [ 144.023370][ T2438] ? lo_release+0x1f0/0x1f0 [ 144.028199][ T2438] ? 0xffffffffa002a9f4 [ 144.032506][ T2438] ? is_bpf_text_address+0x177/0x190 [ 144.038642][ T2438] ? __kernel_text_address+0xa0/0x100 [ 144.044254][ T2438] ? unwind_get_return_address+0x4d/0x90 [ 144.050269][ T2438] ? stack_trace_save+0xe0/0xe0 [ 144.055256][ T2438] ? arch_stack_walk+0xee/0x140 [ 144.060519][ T2438] ? __kasan_check_write+0x14/0x20 [ 144.065925][ T2438] ? kobject_get_unless_zero+0x15e/0x1e0 [ 144.071687][ T2438] ? __kobject_del+0x2f0/0x2f0 [ 144.076791][ T2438] ? __kasan_check_write+0x14/0x20 [ 144.082033][ T2438] ? mutex_lock+0x8c/0xe0 [ 144.086694][ T2438] ? mutex_trylock+0xa0/0xa0 [ 144.091389][ T2438] ? bdev_check_media_change+0x350/0x350 [ 144.165924][ T2438] ? __kasan_check_write+0x14/0x20 [ 144.171476][ T2438] ? bdev_check_media_change+0x350/0x350 [ 144.178903][ T2438] ? __kasan_check_write+0x14/0x20 [ 144.184101][ T2438] ? _raw_spin_lock+0x8e/0xe0 [ 144.189385][ T2438] ? _raw_spin_trylock_bh+0x130/0x130 [ 144.194927][ T2438] ? __kasan_check_write+0x14/0x20 [ 144.200412][ T2438] ? __kasan_check_write+0x14/0x20 [ 144.205606][ T2438] ? __kasan_check_write+0x14/0x20 [ 144.211113][ T2438] ? disk_unblock_events+0x51/0x60 [ 144.216464][ T2438] ? 0xffffffffa002a9f4 [ 144.220720][ T2438] ? is_bpf_text_address+0x177/0x190 [ 144.235779][ T2438] ? __kernel_text_address+0xa0/0x100 [ 144.243434][ T2438] ? unwind_get_return_address+0x4d/0x90 [ 144.251430][ T2438] ? stack_trace_save+0xe0/0xe0 [ 144.259424][ T2438] ? arch_stack_walk+0xee/0x140 [ 144.271431][ T2438] ? memcpy+0x56/0x70 [ 144.294465][ T2438] ? avc_has_extended_perms+0x7f0/0xc30 [ 144.302461][ T2438] ? avc_ss_reset+0x280/0x280 [ 144.310453][ T2438] ? kasan_set_track+0x5b/0x70 [ 144.374729][ T2438] ? __kasan_slab_free+0x11/0x20 [ 144.402489][ T2438] ? slab_free_freelist_hook+0xc5/0x190 [ 144.432024][ T2438] ? kmem_cache_free+0x100/0x2d0 [ 144.506770][ T2438] ? putname+0xfe/0x150 [ 144.533228][ T2438] ? do_sys_openat2+0x207/0x6d0 [ 144.559785][ T2438] ? blkdev_common_ioctl+0xf90/0x1a80 [ 144.588754][ T2438] ? blkdev_bszset+0x1e0/0x1e0 [ 144.614976][ T2438] ? do_vfs_ioctl+0x766/0x1510 [ 144.644736][ T2438] ? __ia32_compat_sys_ioctl+0x7b0/0x7b0 [ 144.675078][ T2438] ? has_cap_mac_admin+0x330/0x330 [ 145.115871][ T2438] ? __kasan_slab_free+0x11/0x20 [ 145.126306][ T2438] ? slab_free_freelist_hook+0xc5/0x190 [ 145.135924][ T2438] ? putname+0xfe/0x150 [ 145.149891][ T2438] ? kmem_cache_free+0x100/0x2d0 [ 145.162112][ T2438] ? selinux_file_ioctl+0x377/0x480 [ 145.179436][ T2438] ? lo_release+0x1f0/0x1f0 [ 145.183989][ T2438] blkdev_ioctl+0x2d2/0x5b0 [ 145.208533][ T2438] ? blkdev_compat_ptr_ioctl+0xc0/0xc0 [ 145.218622][ T2438] ? __fget_files+0x2c4/0x320 [ 145.223334][ T2438] block_ioctl+0xae/0x100 [ 145.237507][ T2438] ? blkdev_iopoll+0x100/0x100 [ 145.259050][ T2438] __se_sys_ioctl+0x121/0x1a0 [ 145.333746][ T2438] __x64_sys_ioctl+0x7b/0x90 [ 145.345907][ T2438] do_syscall_64+0x31/0x40 [ 145.350514][ T2438] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 145.365023][ T2438] RIP: 0033:0x7f22b822652b [ 145.374237][ T2438] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 145.395374][ T2438] RSP: 002b:00007f22b688edc0 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 145.420641][ T2438] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00007f22b822652b [ 145.432719][ T2438] RDX: 0000000000000005 RSI: 0000000000004c00 RDI: 0000000000000006 [ 145.456094][ T2438] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000564 [ 145.562701][ T2438] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 145.644420][ T2438] R13: 00007f22b688eef0 R14: 00007f22b688eeb0 R15: 00007f22ae46f000 [ 145.655776][ T2438] ---[ end trace f9925cbb6a5ad4f0 ]--- [ 145.757142][ T2438] EXT4-fs (loop1048579): Ignoring removed orlov option [ 145.774284][ T2438] EXT4-fs (loop1048579): Ignoring removed nomblk_io_submit option [ 145.808463][ T2438] EXT4-fs (loop1048579): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue [ 146.324409][ T15] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 146.565761][ T15] usb 4-1: Using ep0 maxpacket: 16 [ 146.639335][ T2487] FAULT_INJECTION: forcing a failure. [ 146.639335][ T2487] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 146.652465][ T2487] CPU: 1 PID: 2487 Comm: syz.1.622 Tainted: G W 5.10.238-syzkaller-00008-g59e9a7228857 #0 [ 146.663855][ T2487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 146.673912][ T2487] Call Trace: [ 146.677207][ T2487] __dump_stack+0x21/0x24 [ 146.681548][ T2487] dump_stack_lvl+0x169/0x1d8 [ 146.686485][ T2487] ? show_regs_print_info+0x18/0x18 [ 146.691785][ T2487] dump_stack+0x15/0x1c [ 146.695941][ T2487] should_fail+0x3c1/0x510 [ 146.700358][ T2487] should_fail_usercopy+0x1a/0x20 [ 146.705383][ T2487] _copy_from_user+0x20/0xd0 [ 146.709974][ T2487] __copy_msghdr_from_user+0xaf/0x5e0 [ 146.715539][ T2487] ? __ia32_sys_shutdown+0x1e0/0x1e0 [ 146.720825][ T2487] ? finish_task_switch+0x12e/0x5a0 [ 146.726026][ T2487] ? switch_mm_irqs_off+0x30c/0x9a0 [ 146.731240][ T2487] ___sys_sendmsg+0x156/0x260 [ 146.735935][ T2487] ? __sys_sendmsg+0x250/0x250 [ 146.740719][ T2487] ? __fdget+0x1a1/0x230 [ 146.744973][ T2487] __x64_sys_sendmsg+0x1e2/0x2a0 [ 146.749927][ T2487] ? ___sys_sendmsg+0x260/0x260 [ 146.754792][ T2487] ? switch_fpu_return+0x197/0x340 [ 146.760007][ T2487] ? syscall_trace_enter+0x108/0x170 [ 146.765294][ T2487] do_syscall_64+0x31/0x40 [ 146.769713][ T2487] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 146.775610][ T2487] RIP: 0033:0x7f32545d2929 [ 146.780019][ T2487] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 146.800245][ T2487] RSP: 002b:00007f3252bf9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 146.808663][ T2487] RAX: ffffffffffffffda RBX: 00007f32547fa160 RCX: 00007f32545d2929 [ 146.816627][ T2487] RDX: 0000000000000000 RSI: 0000200000001e00 RDI: 000000000000000a [ 146.824613][ T2487] RBP: 00007f3252bf9090 R08: 0000000000000000 R09: 0000000000000000 [ 146.832574][ T2487] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 146.840535][ T2487] R13: 0000000000000000 R14: 00007f32547fa160 R15: 00007ffd5adfdba8 [ 146.859999][ T310] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 146.872934][ T310] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 146.893362][ T310] Buffer I/O error on dev loop4p3, logical block 0, async page read [ 146.903066][ T310] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 146.914124][ T310] Buffer I/O error on dev loop4p3, logical block 0, async page read [ 146.922266][ T310] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 146.934064][ T310] Buffer I/O error on dev loop4p3, logical block 0, async page read [ 146.942300][ T310] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 146.945766][ T15] usb 4-1: unable to read config index 0 descriptor/all [ 146.953269][ T310] Buffer I/O error on dev loop4p3, logical block 0, async page read [ 146.968326][ T310] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 146.979219][ T310] Buffer I/O error on dev loop4p3, logical block 0, async page read [ 146.982775][ T15] usb 4-1: can't read configurations, error -71 [ 147.157486][ T2489] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 147.166651][ T2489] ext4 filesystem being mounted at /94/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 147.246412][ T24] kauditd_printk_skb: 94 callbacks suppressed [ 147.246424][ T24] audit: type=1400 audit(1751569067.705:1419): avc: denied { rmdir } for pid=275 comm="syz-executor" name="lost+found" dev="loop4" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 147.277350][ T275] Quota error (device loop4): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 147.282856][ T24] audit: type=1400 audit(1751569067.735:1420): avc: denied { unlink } for pid=275 comm="syz-executor" name="file0" dev="loop4" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 147.288484][ T275] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 147.321645][ T275] EXT4-fs error (device loop4): ext4_acquire_dquot:6226: comm syz-executor: Failed to acquire dquot type 0 [ 147.445816][ T15] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 147.550093][ T2510] input input15: cannot allocate more than FF_MAX_EFFECTS effects [ 147.627665][ T24] audit: type=1400 audit(1751569067.995:1421): avc: denied { mount } for pid=2505 comm="syz.0.629" name="/" dev="bdev" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bdev_t tclass=filesystem permissive=1 [ 147.807727][ T24] audit: type=1400 audit(1751569068.265:1422): avc: denied { mounton } for pid=2512 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 147.839464][ T2512] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.846744][ T2512] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.854115][ T2512] device bridge_slave_0 entered promiscuous mode [ 147.861201][ T2512] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.868286][ T2512] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.875955][ T2512] device bridge_slave_1 entered promiscuous mode [ 147.930398][ T2512] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.937518][ T2512] bridge0: port 2(bridge_slave_1) entered forwarding state [ 147.944811][ T2512] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.951915][ T2512] bridge0: port 1(bridge_slave_0) entered forwarding state [ 147.975349][ T1006] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 147.986968][ T1006] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.994459][ T1006] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.005409][ T1006] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 148.014123][ T1006] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.021221][ T1006] bridge0: port 1(bridge_slave_0) entered forwarding state [ 148.038800][ T15] usb 4-1: not running at top speed; connect to a high speed hub [ 148.047364][ T1006] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 148.059116][ T1006] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.066230][ T1006] bridge0: port 2(bridge_slave_1) entered forwarding state [ 148.089639][ T1006] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 148.098455][ T1006] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 148.117551][ T1006] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 148.125862][ T15] usb 4-1: config 95 has an invalid interface number: 1 but max is 0 [ 148.125875][ T15] usb 4-1: config 95 has no interface number 0 [ 148.125893][ T15] usb 4-1: config 95 interface 1 has no altsetting 0 [ 148.154485][ T2512] device veth0_vlan entered promiscuous mode [ 148.165280][ T1006] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 148.173517][ T1006] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 148.195821][ T1006] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 148.213245][ T1006] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 148.264372][ T2512] device veth1_macvtap entered promiscuous mode [ 148.271582][ T1006] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 148.294926][ T1006] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 148.305607][ T1006] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 148.329039][ T7] tipc: Left network mode [ 148.335104][ T1006] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 148.343655][ T1006] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 148.376312][ T15] usb 4-1: string descriptor 0 read error: -22 [ 148.384845][ T15] usb 4-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice=79.79 [ 148.394389][ T1006] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 148.403669][ T1006] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 148.412236][ T15] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.429403][ T24] audit: type=1400 audit(1751569068.885:1423): avc: denied { mount } for pid=2512 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 148.560264][ T24] audit: type=1400 audit(1751569068.885:1424): avc: denied { mounton } for pid=2512 comm="syz-executor" path="/root/syzkaller.VWkxoX/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 148.802496][ T15] usb 4-1: USB disconnect, device number 4 [ 149.086768][ T7] device bridge_slave_1 left promiscuous mode [ 149.104331][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.194350][ T7] device bridge_slave_0 left promiscuous mode [ 149.210706][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.236891][ T7] device veth1_macvtap left promiscuous mode [ 149.243130][ T7] device veth0_vlan left promiscuous mode [ 149.407707][ T2551] IPv6: NLM_F_CREATE should be specified when creating new route [ 149.416413][ T2551] IPv6: Can't replace route, no match found [ 149.425915][ T2558] netlink: 37 bytes leftover after parsing attributes in process `syz.0.646'. [ 149.434966][ T2558] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 149.483582][ T2564] netlink: 40 bytes leftover after parsing attributes in process `syz.5.649'. [ 150.076241][ T24] audit: type=1400 audit(1751569070.535:1425): avc: denied { remount } for pid=2563 comm="syz.5.649" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 150.258265][ T2584] ------------[ cut here ]------------ [ 150.266077][ T2584] WARNING: CPU: 0 PID: 2584 at fs/sysfs/group.c:116 internal_create_group+0xe4/0xcf0 [ 150.276000][ T2584] Modules linked in: [ 150.280044][ T2584] CPU: 0 PID: 2584 Comm: syz.3.655 Tainted: G W 5.10.238-syzkaller-00008-g59e9a7228857 #0 [ 150.294098][ T2584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 150.305643][ T2584] RIP: 0010:internal_create_group+0xe4/0xcf0 [ 150.374768][ T2584] Code: 00 74 08 48 89 df e8 6b c0 d7 ff 48 8b 03 83 7c 24 1c 00 74 22 48 85 c0 0f 84 ef 0b 00 00 e8 f3 cf 9d ff eb 20 e8 ec cf 9d ff <0f> 0b 41 be ea ff ff ff e9 40 0b 00 00 48 85 c0 0f 84 dd 0b 00 00 [ 150.397094][ T2584] RSP: 0018:ffffc90000ef7140 EFLAGS: 00010283 [ 150.412190][ T2584] RAX: ffffffff81c5d01c RBX: ffff8881133f9098 RCX: 0000000000080000 [ 150.420964][ T2584] RDX: ffffc90003122000 RSI: 000000000000237e RDI: 000000000000237f [ 150.429207][ T2584] RBP: ffffc90000ef7248 R08: dffffc0000000000 R09: ffffed10215f323a [ 150.437448][ T2584] R10: ffffed10215f323a R11: 1ffff110215f3239 R12: 1ffff920001dee38 [ 150.446453][ T2584] R13: dffffc0000000000 R14: ffffffff866335e0 R15: 1ffff1102267f213 [ 150.548196][ T2584] FS: 00007f22b688f6c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 150.557213][ T2584] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 150.563811][ T2584] CR2: ffffffffdfa50000 CR3: 000000010d06a000 CR4: 00000000003506a0 [ 150.571856][ T2584] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 150.579854][ T2584] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 151.325229][ T2576] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 151.419023][ T2584] Call Trace: [ 151.425150][ T2584] ? rt_mutex_setprio+0xb40/0xb40 [ 151.467141][ T2584] ? sysfs_create_group+0x30/0x30 [ 151.542689][ T2584] ? __kasan_check_write+0x14/0x20 [ 151.547890][ T2584] sysfs_create_group+0x1f/0x30 [ 151.552766][ T2584] loop_configure+0xc2f/0x1260 [ 151.557612][ T2584] lo_ioctl+0x76d/0x1a80 [ 151.561863][ T2584] ? lo_release+0x1f0/0x1f0 [ 151.566387][ T2584] ? 0xffffffffa002ab98 [ 151.570579][ T2584] ? is_bpf_text_address+0x177/0x190 [ 151.576317][ T2584] ? __kernel_text_address+0xa0/0x100 [ 151.581795][ T2584] ? unwind_get_return_address+0x4d/0x90 [ 151.587464][ T2584] ? stack_trace_save+0xe0/0xe0 [ 151.592328][ T2584] ? arch_stack_walk+0xee/0x140 [ 151.597237][ T2584] ? __kasan_check_write+0x14/0x20 [ 151.602410][ T2584] ? kobject_get_unless_zero+0x15e/0x1e0 [ 151.608779][ T2584] ? __kobject_del+0x2f0/0x2f0 [ 151.613557][ T2584] ? __kasan_check_write+0x14/0x20 [ 151.618865][ T2584] ? mutex_lock+0x8c/0xe0 [ 151.623242][ T2584] ? mutex_trylock+0xa0/0xa0 [ 151.628221][ T2584] ? bdev_check_media_change+0x350/0x350 [ 151.633872][ T2584] ? __kasan_check_write+0x14/0x20 [ 151.709998][ T2584] ? bdev_check_media_change+0x350/0x350 [ 151.729684][ T2584] ? __kasan_check_write+0x14/0x20 [ 151.734843][ T2584] ? _raw_spin_lock+0x8e/0xe0 [ 151.749948][ T2584] ? _raw_spin_trylock_bh+0x130/0x130 [ 151.755349][ T2584] ? __kasan_check_write+0x14/0x20 [ 152.366478][ T2584] ? __kasan_check_write+0x14/0x20 [ 152.375449][ T2584] ? __kasan_check_write+0x14/0x20 [ 152.381489][ T2584] ? disk_unblock_events+0x51/0x60 [ 152.393687][ T2584] ? 0xffffffffa002ab98 [ 152.397925][ T2584] ? is_bpf_text_address+0x177/0x190 [ 152.403229][ T2584] ? __kernel_text_address+0xa0/0x100 [ 152.408668][ T2584] ? unwind_get_return_address+0x4d/0x90 [ 152.414315][ T2584] ? stack_trace_save+0xe0/0xe0 [ 152.427438][ T2584] ? arch_stack_walk+0xee/0x140 [ 152.437693][ T2584] ? memcpy+0x56/0x70 [ 152.851101][ T2604] FAULT_INJECTION: forcing a failure. [ 152.851101][ T2604] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 152.864314][ T2604] CPU: 1 PID: 2604 Comm: syz.2.661 Tainted: G W 5.10.238-syzkaller-00008-g59e9a7228857 #0 [ 152.875511][ T2604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 152.885828][ T2604] Call Trace: [ 152.889130][ T2604] __dump_stack+0x21/0x24 [ 152.893467][ T2604] dump_stack_lvl+0x169/0x1d8 [ 152.898137][ T2604] ? show_regs_print_info+0x18/0x18 [ 152.903335][ T2604] ? stack_trace_save+0x98/0xe0 [ 152.908174][ T2604] dump_stack+0x15/0x1c [ 152.912320][ T2604] should_fail+0x3c1/0x510 [ 152.916731][ T2604] should_fail_usercopy+0x1a/0x20 [ 152.921765][ T2604] _copy_from_user+0x20/0xd0 [ 152.926429][ T2604] iovec_from_user+0x1bc/0x2f0 [ 152.931199][ T2604] ? __copy_msghdr_from_user+0x302/0x5e0 [ 152.936819][ T2604] __import_iovec+0x71/0x390 [ 152.941397][ T2604] ? __ia32_sys_shutdown+0x1e0/0x1e0 [ 152.946787][ T2604] import_iovec+0x7c/0xb0 [ 152.951114][ T2604] ___sys_sendmsg+0x1b9/0x260 [ 152.955782][ T2604] ? __sys_sendmsg+0x250/0x250 [ 152.960536][ T2604] ? rw_verify_area+0x1c0/0x360 [ 152.965377][ T2604] ? __fdget+0x1a1/0x230 [ 152.969615][ T2604] __x64_sys_sendmsg+0x1e2/0x2a0 [ 152.974543][ T2604] ? fput+0x1a/0x20 [ 152.978361][ T2604] ? ___sys_sendmsg+0x260/0x260 [ 152.983204][ T2604] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 152.989347][ T2604] do_syscall_64+0x31/0x40 [ 152.993757][ T2604] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 152.999745][ T2604] RIP: 0033:0x7f5cb3076929 [ 153.004240][ T2604] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 153.023930][ T2604] RSP: 002b:00007f5cb169d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 153.032334][ T2604] RAX: ffffffffffffffda RBX: 00007f5cb329e160 RCX: 00007f5cb3076929 [ 153.040394][ T2604] RDX: 0000000000000000 RSI: 0000200000002ac0 RDI: 0000000000000006 [ 153.048448][ T2604] RBP: 00007f5cb169d090 R08: 0000000000000000 R09: 0000000000000000 [ 153.056405][ T2604] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 153.064370][ T2604] R13: 0000000000000000 R14: 00007f5cb329e160 R15: 00007ffe1b251378 [ 153.141579][ T2584] ? avc_has_extended_perms+0x7f0/0xc30 [ 153.197517][ T2584] ? avc_ss_reset+0x280/0x280 [ 153.212674][ T2584] ? kasan_set_track+0x5b/0x70 [ 153.222778][ T2584] ? __kasan_slab_free+0x11/0x20 [ 153.228446][ T24] audit: type=1326 audit(1751569074.693:1426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2612 comm="syz.0.665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94a154f929 code=0x7ffc0000 [ 153.259380][ T2584] ? slab_free_freelist_hook+0xc5/0x190 [ 153.267970][ T24] audit: type=1326 audit(1751569074.713:1427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2612 comm="syz.0.665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f94a154f929 code=0x7ffc0000 [ 153.291756][ T2584] ? kmem_cache_free+0x100/0x2d0 [ 153.296846][ T2584] ? putname+0xfe/0x150 [ 153.301161][ T2584] ? do_sys_openat2+0x207/0x6d0 [ 153.306169][ T2584] ? blkdev_common_ioctl+0xf90/0x1a80 [ 153.311691][ T2584] ? blkdev_bszset+0x1e0/0x1e0 [ 153.413310][ T2584] ? do_vfs_ioctl+0x766/0x1510 [ 153.418493][ T24] audit: type=1326 audit(1751569074.713:1428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2612 comm="syz.0.665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94a154f929 code=0x7ffc0000 [ 153.442276][ T2584] ? __ia32_compat_sys_ioctl+0x7b0/0x7b0 [ 153.448309][ T2584] ? has_cap_mac_admin+0x330/0x330 [ 153.453555][ T2584] ? putname+0xfe/0x150 [ 153.457971][ T2584] ? kmem_cache_free+0x2ac/0x2d0 [ 154.016347][ T2584] ? selinux_file_ioctl+0x377/0x480 [ 154.021644][ T2584] ? lo_release+0x1f0/0x1f0 [ 154.026657][ T2584] blkdev_ioctl+0x2d2/0x5b0 [ 154.031205][ T2584] ? blkdev_compat_ptr_ioctl+0xc0/0xc0 [ 154.037507][ T2584] ? __fget_files+0x2c4/0x320 [ 154.042264][ T24] audit: type=1326 audit(1751569074.713:1429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2612 comm="syz.0.665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f94a154f929 code=0x7ffc0000 [ 154.149158][ T2617] netem: invalid attributes len -24 [ 154.154551][ T2584] block_ioctl+0xae/0x100 [ 154.159211][ T2584] ? blkdev_iopoll+0x100/0x100 [ 154.164031][ T2617] netem: change failed [ 154.168383][ T2584] __se_sys_ioctl+0x121/0x1a0 [ 154.178349][ T2584] __x64_sys_ioctl+0x7b/0x90 [ 154.188473][ T2584] do_syscall_64+0x31/0x40 [ 154.195925][ T24] audit: type=1326 audit(1751569074.713:1430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2612 comm="syz.0.665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94a154f929 code=0x7ffc0000 [ 154.225786][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 154.225809][ T2584] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 154.225830][ T2584] RIP: 0033:0x7f22b822652b [ 154.267213][ T2584] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 154.292320][ T24] audit: type=1326 audit(1751569074.713:1431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2612 comm="syz.0.665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f94a154f929 code=0x7ffc0000 [ 154.316324][ T2584] RSP: 002b:00007f22b688edc0 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 154.325463][ T2584] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f22b822652b [ 154.334886][ T24] audit: type=1326 audit(1751569074.713:1432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2612 comm="syz.0.665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f94a154f963 code=0x7ffc0000 [ 154.359726][ T2584] RDX: 0000000000000003 RSI: 0000000000004c00 RDI: 0000000000000004 [ 154.368114][ T2584] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000239 [ 154.379182][ T2584] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 154.387481][ T24] audit: type=1326 audit(1751569074.713:1433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2612 comm="syz.0.665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f94a154e3df code=0x7ffc0000 [ 154.417820][ T2584] R13: 00007f22b688eef0 R14: 00007f22b688eeb0 R15: 00007f22ae46f000 [ 154.433170][ T24] audit: type=1326 audit(1751569074.723:1434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2612 comm="syz.0.665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f94a154f9b7 code=0x7ffc0000 [ 154.456791][ T24] audit: type=1326 audit(1751569074.723:1435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2612 comm="syz.0.665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f94a154e290 code=0x7ffc0000 [ 154.480501][ T2584] ---[ end trace f9925cbb6a5ad4f1 ]--- [ 154.499820][ T2622] tipc: Started in network mode [ 154.504808][ T2622] tipc: Own node identity 2000007, cluster identity 4711 [ 154.511899][ T2622] tipc: 32-bit node address hash set to 2000007 [ 154.575802][ T370] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 154.605981][ T2634] EXT4-fs (loop5): Mount option "nouser_xattr" will be removed by 3.5 [ 154.605981][ T2634] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 154.605981][ T2634] [ 154.625288][ T2634] EXT4-fs (loop5): Ignoring removed orlov option [ 154.632908][ T2634] EXT4-fs (loop5): Ignoring removed nomblk_io_submit option [ 154.686293][ T2634] EXT4-fs (loop5): mounted filesystem without journal. Opts: nouser_xattr,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue [ 154.719100][ T2642] ------------[ cut here ]------------ [ 154.724853][ T2642] WARNING: CPU: 1 PID: 2642 at fs/sysfs/group.c:116 internal_create_group+0xe4/0xcf0 [ 154.736655][ T2642] Modules linked in: [ 154.740746][ T2642] CPU: 1 PID: 2642 Comm: syz.3.674 Tainted: G W 5.10.238-syzkaller-00008-g59e9a7228857 #0 [ 154.753447][ T2642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 154.779079][ T2642] RIP: 0010:internal_create_group+0xe4/0xcf0 [ 154.785450][ T2642] Code: 00 74 08 48 89 df e8 6b c0 d7 ff 48 8b 03 83 7c 24 1c 00 74 22 48 85 c0 0f 84 ef 0b 00 00 e8 f3 cf 9d ff eb 20 e8 ec cf 9d ff <0f> 0b 41 be ea ff ff ff e9 40 0b 00 00 48 85 c0 0f 84 dd 0b 00 00 [ 154.808516][ T2642] RSP: 0018:ffffc90000df7140 EFLAGS: 00010287 [ 154.814911][ T2642] RAX: ffffffff81c5d01c RBX: ffff8881133f9098 RCX: 0000000000080000 [ 154.824535][ T2642] RDX: ffffc90003122000 RSI: 0000000000008894 RDI: 0000000000008895 [ 154.833020][ T2642] RBP: ffffc90000df7248 R08: dffffc0000000000 R09: ffffed10215f323a [ 154.842502][ T2642] R10: ffffed10215f323a R11: 1ffff110215f3239 R12: 1ffff920001bee38 [ 154.851119][ T2642] R13: dffffc0000000000 R14: ffffffff866335e0 R15: 1ffff1102267f213 [ 154.860551][ T2642] FS: 00007f22b688f6c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 154.882464][ T2642] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 154.889831][ T2642] CR2: ffffffffdfa50000 CR3: 000000011c89c000 CR4: 00000000003506a0 [ 154.899085][ T2642] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 154.907699][ T2642] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 154.916715][ T2642] Call Trace: [ 154.920139][ T2642] ? irqentry_exit+0x56/0x60 [ 154.925454][ T2642] ? sysvec_reschedule_ipi+0x69/0x70 [ 154.944044][ T2642] ? asm_sysvec_reschedule_ipi+0x12/0x20 [ 154.950969][ T2642] ? sysfs_create_group+0x30/0x30 [ 154.956223][ T2642] ? blk_queue_logical_block_size+0x71/0x1f0 [ 154.962629][ T2642] ? __kasan_check_write+0x14/0x20 [ 154.968011][ T2642] sysfs_create_group+0x1f/0x30 [ 154.972889][ T2642] loop_configure+0xc2f/0x1260 [ 154.977768][ T2642] lo_ioctl+0x76d/0x1a80 [ 154.982090][ T2642] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 154.988050][ T2642] ? lo_release+0x1f0/0x1f0 [ 154.992752][ T2642] ? __kasan_check_write+0x14/0x20 [ 154.998140][ T2642] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 155.003837][ T2642] ? _raw_spin_lock+0xe0/0xe0 [ 155.008668][ T2642] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 155.014284][ T2642] ? __kasan_check_write+0x14/0x20 [ 155.019540][ T2642] ? __switch_to+0x50f/0xfc0 [ 155.024164][ T2642] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 155.030417][ T2642] ? queue_stack_map_push_elem+0x32a/0x510 [ 155.036359][ T2642] ? __kasan_check_write+0x14/0x20 [ 155.041521][ T2642] ? __switch_to+0x50f/0xfc0 [ 155.046301][ T2642] ? __this_cpu_preempt_check+0x13/0x20 [ 155.051915][ T2642] ? __perf_event_task_sched_in+0x1fb/0x280 [ 155.057894][ T2642] ? perf_pmu_sched_task+0x180/0x180 [ 155.063257][ T2642] ? __kasan_check_write+0x14/0x20 [ 155.068520][ T2642] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 155.074030][ T2642] ? _raw_spin_lock+0xe0/0xe0 [ 155.078948][ T2642] ? _raw_spin_unlock_irq+0x4e/0x70 [ 155.084200][ T2642] ? finish_task_switch+0x12e/0x5a0 [ 155.089605][ T2642] ? switch_mm_irqs_off+0x763/0x9a0 [ 155.094852][ T2642] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 155.100743][ T2642] ? queue_stack_map_push_elem+0x32a/0x510 [ 155.106787][ T2642] ? __kasan_check_write+0x14/0x20 [ 155.111956][ T2642] ? __switch_to+0x50f/0xfc0 [ 155.116700][ T2642] ? __this_cpu_preempt_check+0x13/0x20 [ 155.122333][ T2642] ? __perf_event_task_sched_in+0x1fb/0x280 [ 155.128407][ T2642] ? perf_pmu_sched_task+0x180/0x180 [ 155.133845][ T2642] ? native_set_ldt+0x370/0x370 [ 155.138834][ T2642] ? perf_sched_cb_inc+0x240/0x240 [ 155.144105][ T2642] ? _raw_spin_unlock_irq+0x4e/0x70 [ 155.149539][ T2642] ? finish_task_switch+0x12e/0x5a0 [ 155.154778][ T2642] ? switch_mm_irqs_off+0x763/0x9a0 [ 155.160198][ T2642] ? __switch_to_asm+0x34/0x60 [ 155.164986][ T2642] ? __schedule+0xb4f/0x1310 [ 155.169662][ T2642] ? release_firmware_map_entry+0x190/0x190 [ 155.175628][ T2642] ? avc_ss_reset+0x280/0x280 [ 155.180406][ T2642] ? __kasan_check_read+0x11/0x20 [ 155.185476][ T2642] ? preempt_schedule_irq+0xbb/0x110 [ 155.190870][ T2642] ? blkdev_common_ioctl+0x1743/0x1a80 [ 155.195854][ T370] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 155.196433][ T2642] ? blkdev_bszset+0x1e0/0x1e0 [ 155.207579][ T370] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 155.212111][ T2642] ? do_vfs_ioctl+0x766/0x1510 [ 155.222141][ T370] usb 2-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 155.226683][ T2642] ? __ia32_compat_sys_ioctl+0x7b0/0x7b0 [ 155.236141][ T370] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.241464][ T2642] ? has_cap_mac_admin+0x330/0x330 [ 155.250753][ T370] usb 2-1: config 0 descriptor?? [ 155.255794][ T2642] ? rcu_read_unlock_special+0x170/0x420 [ 155.265435][ T2642] ? irqentry_exit+0x56/0x60 [ 155.270382][ T2642] ? selinux_file_ioctl+0x377/0x480 [ 155.275973][ T2642] ? lo_release+0x1f0/0x1f0 [ 155.280796][ T2642] blkdev_ioctl+0x2d2/0x5b0 [ 155.285459][ T2642] ? __rcu_read_unlock+0x5e/0xa0 [ 155.290555][ T2642] ? blkdev_compat_ptr_ioctl+0xc0/0xc0 [ 155.297324][ T2642] ? __fget_files+0x2c4/0x320 [ 155.302151][ T2642] block_ioctl+0xae/0x100 [ 155.306667][ T2642] ? blkdev_iopoll+0x100/0x100 [ 155.311684][ T2642] __se_sys_ioctl+0x121/0x1a0 [ 155.316936][ T2642] __x64_sys_ioctl+0x7b/0x90 [ 155.321560][ T2642] do_syscall_64+0x31/0x40 [ 155.326278][ T2642] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 155.332755][ T2642] RIP: 0033:0x7f22b822652b [ 155.337298][ T2642] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 155.357239][ T2642] RSP: 002b:00007f22b688edc0 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 155.365680][ T2642] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00007f22b822652b [ 155.373892][ T2642] RDX: 0000000000000005 RSI: 0000000000004c00 RDI: 0000000000000006 [ 155.382420][ T2642] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000001503 [ 155.390571][ T2642] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 155.398647][ T2642] R13: 00007f22b688eef0 R14: 00007f22b688eeb0 R15: 00007f22ae46f000 [ 155.407073][ T2642] ---[ end trace f9925cbb6a5ad4f2 ]--- [ 155.430998][ T2642] exFAT-fs (loop1048579): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 155.443658][ T2656] netem: invalid attributes len -24 [ 155.452522][ T2656] netem: change failed [ 155.456742][ T2642] exFAT-fs (loop1048579): Medium has reported failures. Some data may be lost. [ 155.493199][ T2642] exFAT-fs (loop1048579): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 155.506555][ T2609] netlink: 68 bytes leftover after parsing attributes in process `syz.1.663'. [ 155.620376][ T2661] IPv6: Can't replace route, no match found [ 155.986537][ T370] hid-led 0003:1D34:000A.0006: hidraw0: USB HID v0.00 Device [HID 1d34:000a] on usb-dummy_hcd.1-1/input0 [ 156.016383][ T370] hid-led 0003:1D34:000A.0006: Dream Cheeky Webmail Notifier initialized [ 156.215084][ T391] usb 2-1: USB disconnect, device number 7 [ 156.221083][ T2647] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 156.407600][ T2687] IPv6: Can't replace route, no match found [ 156.475858][ T2647] usb 4-1: Using ep0 maxpacket: 16 [ 156.635845][ T2647] usb 4-1: config 0 has an invalid interface number: 78 but max is 0 [ 156.643952][ T2647] usb 4-1: config 0 has no interface number 0 [ 157.266259][ T2647] usb 4-1: New USB device found, idVendor=0456, idProduct=f000, bcdDevice=90.9f [ 157.349285][ T2647] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.359575][ T2647] usb 4-1: Product: syz [ 157.402128][ T2647] usb 4-1: Manufacturer: syz [ 157.407006][ T2647] usb 4-1: SerialNumber: syz [ 157.459993][ T2647] usb 4-1: config 0 descriptor?? [ 157.496650][ T2647] ftdi_sio 4-1:0.78: FTDI USB Serial Device converter detected [ 157.507966][ T2647] usb 4-1: Detected FT-X [ 157.514695][ T2713] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2713 comm=syz.2.696 [ 157.688660][ T2725] netlink: 72 bytes leftover after parsing attributes in process `syz.0.703'. [ 157.715943][ T2647] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 157.885749][ T560] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 158.187253][ T2647] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 158.255900][ T560] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 158.273804][ T560] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 158.301256][ T560] usb 6-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 158.395818][ T2647] usb 4-1: USB disconnect, device number 5 [ 158.410441][ T2647] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 158.432246][ T2647] ftdi_sio 4-1:0.78: device disconnected [ 158.505860][ T560] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 158.514952][ T560] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.545852][ T560] usb 6-1: Product: syz [ 158.550064][ T560] usb 6-1: Manufacturer: syz [ 158.554686][ T560] usb 6-1: SerialNumber: syz [ 158.616335][ T560] cdc_mbim 6-1:1.0: skipping garbage [ 158.647029][ T2741] tipc: Started in network mode [ 158.662161][ T2741] tipc: Own node identity 2000007, cluster identity 4711 [ 158.679514][ T2741] tipc: 32-bit node address hash set to 2000007 [ 158.909005][ T2748] netlink: 20 bytes leftover after parsing attributes in process `syz.1.711'. [ 159.449208][ T24] kauditd_printk_skb: 43 callbacks suppressed [ 159.449221][ T24] audit: type=1400 audit(1751569080.913:1479): avc: denied { block_suspend } for pid=2751 comm="syz.0.713" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 159.978534][ T2760] netlink: 20 bytes leftover after parsing attributes in process `syz.3.714'. [ 159.989584][ T2760] FAULT_INJECTION: forcing a failure. [ 159.989584][ T2760] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 160.002741][ T2760] CPU: 1 PID: 2760 Comm: syz.3.714 Tainted: G W 5.10.238-syzkaller-00008-g59e9a7228857 #0 [ 160.014019][ T2760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 160.024070][ T2760] Call Trace: [ 160.027386][ T2760] __dump_stack+0x21/0x24 [ 160.031749][ T2760] dump_stack_lvl+0x169/0x1d8 [ 160.036513][ T2760] ? show_regs_print_info+0x18/0x18 [ 160.041712][ T2760] ? do_vfs_ioctl+0x766/0x1510 [ 160.046481][ T2760] ? __ia32_compat_sys_ioctl+0x7b0/0x7b0 [ 160.052114][ T2760] dump_stack+0x15/0x1c [ 160.056444][ T2760] should_fail+0x3c1/0x510 [ 160.060880][ T2760] should_fail_usercopy+0x1a/0x20 [ 160.065905][ T2760] _copy_from_user+0x20/0xd0 [ 160.070501][ T2760] __tun_chr_ioctl+0x1ef/0x1cd0 [ 160.075383][ T2760] ? release_firmware_map_entry+0x190/0x190 [ 160.081277][ T2760] ? tun_flow_create+0x320/0x320 [ 160.086245][ T2760] ? __fget_files+0x2c4/0x320 [ 160.090935][ T2760] tun_chr_ioctl+0x2a/0x40 [ 160.095347][ T2760] ? tun_chr_poll+0x6b0/0x6b0 [ 160.100022][ T2760] __se_sys_ioctl+0x121/0x1a0 [ 160.104711][ T2760] __x64_sys_ioctl+0x7b/0x90 [ 160.109303][ T2760] do_syscall_64+0x31/0x40 [ 160.113723][ T2760] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 160.119645][ T2760] RIP: 0033:0x7f22b8226929 [ 160.124059][ T2760] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 160.143763][ T2760] RSP: 002b:00007f22b684d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 160.152442][ T2760] RAX: ffffffffffffffda RBX: 00007f22b844e160 RCX: 00007f22b8226929 [ 160.160400][ T2760] RDX: 00002000000000c0 RSI: 00000000400454ca RDI: 000000000000000a [ 160.168629][ T2760] RBP: 00007f22b684d090 R08: 0000000000000000 R09: 0000000000000000 [ 160.176591][ T2760] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 160.184550][ T2760] R13: 0000000000000000 R14: 00007f22b844e160 R15: 00007fff380c7a38 [ 161.525603][ T24] audit: type=1326 audit(1751569082.983:1480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2781 comm="syz.3.721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22b8226929 code=0x7ffc0000 [ 161.565922][ T560] cdc_mbim 6-1:1.0: bind() failure [ 161.573092][ T560] cdc_ncm 6-1:1.1: bind() failure [ 161.592832][ T560] usb 6-1: USB disconnect, device number 2 [ 161.606785][ T24] audit: type=1326 audit(1751569083.013:1481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2781 comm="syz.3.721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22b8226929 code=0x7ffc0000 [ 161.680817][ T24] audit: type=1326 audit(1751569083.013:1482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2781 comm="syz.3.721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=267 compat=0 ip=0x7f22b8226929 code=0x7ffc0000 [ 161.719171][ T24] audit: type=1326 audit(1751569083.013:1483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2781 comm="syz.3.721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22b8226929 code=0x7ffc0000 [ 161.752941][ T24] audit: type=1326 audit(1751569083.013:1484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2781 comm="syz.3.721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22b8226929 code=0x7ffc0000 [ 161.903633][ T24] audit: type=1400 audit(1751569536.359:1485): avc: denied { create } for pid=2758 comm="syz.0.715" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 162.106059][ T560] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 162.466232][ T560] usb 6-1: Using ep0 maxpacket: 16 [ 162.489670][ T24] audit: type=1326 audit(1751569536.949:1486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2791 comm="syz.3.724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22b8226929 code=0x7ffc0000 [ 162.516228][ T2792] FAULT_INJECTION: forcing a failure. [ 162.516228][ T2792] name failslab, interval 1, probability 0, space 0, times 0 [ 162.536661][ T24] audit: type=1326 audit(1751569536.949:1487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2791 comm="syz.3.724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22b8226929 code=0x7ffc0000 [ 162.577458][ T2794] xt_hashlimit: max too large, truncated to 1048576 [ 162.580736][ T2792] CPU: 0 PID: 2792 Comm: syz.3.724 Tainted: G W 5.10.238-syzkaller-00008-g59e9a7228857 #0 [ 162.595470][ T2792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 162.597599][ T2794] device pim6reg1 entered promiscuous mode [ 162.605661][ T2792] Call Trace: [ 162.605685][ T2792] __dump_stack+0x21/0x24 [ 162.605696][ T2792] dump_stack_lvl+0x169/0x1d8 [ 162.605709][ T2792] ? show_regs_print_info+0x18/0x18 [ 162.605730][ T2792] dump_stack+0x15/0x1c [ 162.633154][ T2792] should_fail+0x3c1/0x510 [ 162.637596][ T2792] ? sidtab_sid2str_get+0x120/0x2c0 [ 162.642898][ T2792] __should_failslab+0xa4/0xe0 [ 162.647766][ T2792] should_failslab+0x9/0x20 [ 162.652280][ T2792] __kmalloc_track_caller+0x5f/0x320 [ 162.657579][ T2792] kmemdup+0x26/0x60 [ 162.661660][ T2792] sidtab_sid2str_get+0x120/0x2c0 [ 162.666695][ T2792] security_sid_to_context_core+0x2ac/0x480 [ 162.672371][ T24] audit: type=1326 audit(1751569536.969:1488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2791 comm="syz.3.724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f22b8226929 code=0x7ffc0000 [ 162.672596][ T2792] security_sid_to_context+0x33/0x40 [ 162.701124][ T2792] selinux_secid_to_secctx+0x2c/0x40 [ 162.705978][ T560] usb 6-1: config 1 has an invalid interface number: 105 but max is 0 [ 162.706449][ T2792] security_secid_to_secctx+0x74/0xb0 [ 162.714870][ T560] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 162.720127][ T2792] audit_log_task_context+0xc6/0x1e0 [ 162.720139][ T2792] ? audit_log_key+0x130/0x130 [ 162.720149][ T2792] ? audit_log_start+0x76b/0x860 [ 162.720167][ T2792] audit_log_task+0x185/0x2e0 [ 162.733170][ T560] usb 6-1: config 1 has no interface number 0 [ 162.735765][ T2792] ? audit_core_dumps+0x110/0x110 [ 162.735777][ T2792] ? memset+0x35/0x40 [ 162.735795][ T2792] audit_seccomp+0x7f/0x160 [ 162.740846][ T560] usb 6-1: config 1 interface 105 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 162.745487][ T2792] __seccomp_filter+0xb4c/0x1990 [ 162.745505][ T2792] ? proc_fail_nth_read+0x210/0x210 [ 162.750425][ T560] usb 6-1: config 1 interface 105 has no altsetting 0 [ 162.756219][ T2792] ? rw_verify_area+0x1c0/0x360 [ 162.756230][ T2792] ? preempt_count_add+0x90/0x1b0 [ 162.756240][ T2792] ? __secure_computing+0x290/0x290 [ 162.756249][ T2792] ? vfs_write+0xac8/0xd60 [ 162.756261][ T2792] ? __bpf_trace_kmem_free+0x6f/0x90 [ 162.756278][ T2792] ? kernel_write+0x3c0/0x3c0 [ 162.829238][ T2792] ? __kasan_check_write+0x14/0x20 [ 162.834425][ T2792] ? mutex_lock+0x8c/0xe0 [ 162.838745][ T2792] ? mutex_trylock+0xa0/0xa0 [ 162.843323][ T2792] ? __fget_files+0x2c4/0x320 [ 162.847987][ T2792] ? __kasan_check_write+0x14/0x20 [ 162.853129][ T2792] ? fput_many+0x15a/0x1a0 [ 162.857639][ T2792] ? fput+0x1a/0x20 [ 162.861449][ T2792] ? ksys_write+0x1eb/0x240 [ 162.865945][ T2792] __secure_computing+0xea/0x290 [ 162.870872][ T2792] syscall_trace_enter+0xb5/0x170 [ 162.875890][ T2792] syscall_enter_from_user_mode+0x20/0x30 [ 162.881597][ T2792] do_syscall_64+0x13/0x40 [ 162.886007][ T2792] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 162.891930][ T2792] RIP: 0033:0x7f22b8226929 [ 162.896380][ T2792] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 162.916216][ T2792] RSP: 002b:00007f22b688f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 162.924636][ T2792] RAX: ffffffffffffffda RBX: 00007f22b844dfa0 RCX: 00007f22b8226929 [ 162.932609][ T2792] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 162.940747][ T2792] RBP: 00007f22b688f090 R08: 0000000000000000 R09: 0000000000000000 [ 162.948798][ T2792] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000001 [ 162.957020][ T2792] R13: 0000000000000000 R14: 00007f22b844dfa0 R15: 00007fff380c7a38 [ 162.976750][ T2798] incfs: Can't find or create .index dir in ./file0 [ 162.994803][ T2801] fuse: Unknown parameter '' [ 162.999866][ T2798] incfs: mount failed -5 [ 163.404170][ T370] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 163.836373][ T370] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 163.864902][ T370] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 163.909707][ T370] usb 1-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 163.951347][ T370] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.549539][ T370] usb 1-1: config 0 descriptor?? [ 164.575844][ T560] usb 6-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 164.735646][ T2820] device wg2 entered promiscuous mode [ 164.905777][ T560] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.913862][ T560] usb 6-1: Product: syz [ 164.925120][ T2825] IPv6: Can't replace route, no match found [ 164.967417][ T560] usb 6-1: Manufacturer: syz [ 164.972213][ T560] usb 6-1: SerialNumber: syz [ 165.085759][ T2830] 9pnet: p9_fd_create_tcp (2830): problem connecting socket to 127.0.0.1 [ 165.716428][ T560] aqc111: probe of 6-1:1.105 failed with error -22 [ 166.144882][ T370] isku 0003:1E7D:319C.0007: unknown main item tag 0x0 [ 166.173395][ T560] usb 6-1: USB disconnect, device number 3 [ 166.189642][ T24] kauditd_printk_skb: 24 callbacks suppressed [ 166.189655][ T24] audit: type=1326 audit(1751569540.649:1512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2834 comm="syz.3.738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22b8226929 code=0x7ffc0000 [ 166.229598][ T370] isku 0003:1E7D:319C.0007: unknown main item tag 0x0 [ 166.238927][ T370] isku 0003:1E7D:319C.0007: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.0-1/input0 [ 166.260532][ T24] audit: type=1326 audit(1751569540.689:1513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2834 comm="syz.3.738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22b8226929 code=0x7ffc0000 [ 166.274169][ T2844] netem: invalid attributes len -24 [ 166.284478][ T370] isku 0003:1E7D:319C.0007: couldn't init struct isku_device [ 166.297153][ T370] isku 0003:1E7D:319C.0007: couldn't install keyboard [ 166.304446][ T24] audit: type=1326 audit(1751569540.689:1514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2834 comm="syz.3.738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f22b8226929 code=0x7ffc0000 [ 166.329303][ T370] isku: probe of 0003:1E7D:319C.0007 failed with error -71 [ 166.345075][ T370] usb 1-1: USB disconnect, device number 10 [ 166.365514][ T2846] fido_id[2846]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 166.394787][ T2844] netem: change failed [ 166.406015][ T24] audit: type=1326 audit(1751569540.719:1515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2834 comm="syz.3.738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22b8226929 code=0x7ffc0000 [ 166.730031][ T2848] device pim6reg1 entered promiscuous mode [ 166.950004][ T24] audit: type=1326 audit(1751569540.719:1516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2834 comm="syz.3.738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f22b8226929 code=0x7ffc0000 [ 166.973947][ T24] audit: type=1326 audit(1751569540.719:1517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2834 comm="syz.3.738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22b8226929 code=0x7ffc0000 [ 169.746154][ T24] audit: type=1326 audit(1751569540.719:1518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2834 comm="syz.3.738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f22b8226929 code=0x7ffc0000 [ 169.855588][ T24] audit: type=1326 audit(1751569540.719:1519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2834 comm="syz.3.738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f22b8226963 code=0x7ffc0000 [ 169.925039][ T24] audit: type=1326 audit(1751569540.719:1520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2834 comm="syz.3.738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f22b82253df code=0x7ffc0000 [ 169.953585][ T24] audit: type=1326 audit(1751569540.719:1521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2834 comm="syz.3.738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f22b82269b7 code=0x7ffc0000 [ 170.047205][ T2862] udc-core: couldn't find an available UDC or it's busy [ 170.047222][ T2862] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 170.199938][ T2877] incfs: Error accessing: ./file0. [ 170.200000][ T2877] incfs: mount failed -20 [ 170.623874][ T2873] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 170.624195][ T2873] ext4 filesystem being mounted at /18/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 170.651839][ T2873] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.749: bg 0: block 345: padding at end of block bitmap is not set [ 171.102878][ T2898] FAULT_INJECTION: forcing a failure. [ 171.102878][ T2898] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 171.116107][ T2898] CPU: 1 PID: 2898 Comm: syz.0.752 Tainted: G W 5.10.238-syzkaller-00008-g59e9a7228857 #0 [ 171.127410][ T2898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 171.137549][ T2898] Call Trace: [ 171.140844][ T2898] __dump_stack+0x21/0x24 [ 171.145436][ T2898] dump_stack_lvl+0x169/0x1d8 [ 171.150112][ T2898] ? show_regs_print_info+0x18/0x18 [ 171.155401][ T2898] dump_stack+0x15/0x1c [ 171.159557][ T2898] should_fail+0x3c1/0x510 [ 171.163980][ T2898] should_fail_usercopy+0x1a/0x20 [ 171.169020][ T2898] _copy_from_user+0x20/0xd0 [ 171.173616][ T2898] __copy_msghdr_from_user+0xaf/0x5e0 [ 171.179005][ T2898] ? __ia32_sys_shutdown+0x1e0/0x1e0 [ 171.184299][ T2898] ? __fsnotify_parent+0x5f5/0x6c0 [ 171.189409][ T2898] ___sys_sendmsg+0x156/0x260 [ 171.194085][ T2898] ? __sys_sendmsg+0x250/0x250 [ 171.198861][ T2898] ? __fdget+0x1a1/0x230 [ 171.203190][ T2898] __x64_sys_sendmsg+0x1e2/0x2a0 [ 171.208128][ T2898] ? ___sys_sendmsg+0x260/0x260 [ 171.212977][ T2898] ? switch_fpu_return+0x197/0x340 [ 171.218185][ T2898] do_syscall_64+0x31/0x40 [ 171.222631][ T2898] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 171.228609][ T2898] RIP: 0033:0x7f94a154f929 [ 171.233030][ T2898] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 171.252640][ T2898] RSP: 002b:00007f949fb76038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 171.261099][ T2898] RAX: ffffffffffffffda RBX: 00007f94a1777160 RCX: 00007f94a154f929 [ 171.269156][ T2898] RDX: 0000000000000000 RSI: 00002000000012c0 RDI: 000000000000000b [ 171.277139][ T2898] RBP: 00007f949fb76090 R08: 0000000000000000 R09: 0000000000000000 [ 171.285112][ T2898] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 171.293081][ T2898] R13: 0000000000000000 R14: 00007f94a1777160 R15: 00007fffb7a59e28 [ 171.336606][ T2896] FAT-fs (loop5): Unrecognized mount option "shorname=mixed" or missing value [ 171.347162][ T24] kauditd_printk_skb: 53 callbacks suppressed [ 171.347175][ T24] audit: type=1326 audit(1751569545.799:1575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2895 comm="syz.5.756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f545c156197 code=0x7ffc0000 [ 171.394520][ T24] audit: type=1326 audit(1751569545.799:1576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2895 comm="syz.5.756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f545c1590ca code=0x7ffc0000 [ 171.508859][ T24] audit: type=1326 audit(1751569545.909:1577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2895 comm="syz.5.756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f545c156290 code=0x7ffc0000 [ 171.575091][ T24] audit: type=1326 audit(1751569545.909:1578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2895 comm="syz.5.756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f545c15752b code=0x7ffc0000 [ 172.081197][ T24] audit: type=1326 audit(1751569545.909:1579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2895 comm="syz.5.756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f545c15658a code=0x7ffc0000 [ 172.120903][ T2885] mip6: mip6_destopt_init_state: state's mode is not 2: 1 [ 172.675774][ T24] audit: type=1326 audit(1751569545.909:1580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2895 comm="syz.5.756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f545c157929 code=0x7ffc0000 [ 172.715686][ T24] audit: type=1326 audit(1751569545.909:1581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2895 comm="syz.5.756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f545c157929 code=0x7ffc0000 [ 173.996425][ T24] audit: type=1326 audit(1751569545.909:1582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2895 comm="syz.5.756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f545c157929 code=0x7ffc0000 [ 174.025928][ T24] audit: type=1326 audit(1751569545.909:1583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2895 comm="syz.5.756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f545c157929 code=0x7ffc0000 [ 174.085081][ T24] audit: type=1326 audit(1751569545.909:1584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2895 comm="syz.5.756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f545c157929 code=0x7ffc0000 [ 174.305970][ T816] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 176.110650][ T2941] F2FS-fs (loop5): invalid crc value [ 176.241797][ T2941] F2FS-fs (loop5): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 176.318460][ T2941] F2FS-fs (loop5): Start checkpoint disabled! [ 176.326658][ T2941] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 178.221521][ T2980] netlink: 8 bytes leftover after parsing attributes in process `syz.2.775'. [ 178.456341][ T2982] @: renamed from bond_slave_0 [ 179.894519][ T24] kauditd_printk_skb: 26 callbacks suppressed [ 179.894531][ T24] audit: type=1400 audit(1751570007.351:1611): avc: denied { getopt } for pid=2995 comm="syz.1.782" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 179.960397][ T24] audit: type=1400 audit(1751570007.401:1612): avc: denied { mounton } for pid=3001 comm="syz.5.784" path="/25/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 180.465786][ T560] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 180.465838][ T816] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 180.715746][ T816] usb 1-1: Using ep0 maxpacket: 16 [ 180.715795][ T560] usb 2-1: Using ep0 maxpacket: 16 [ 180.855879][ T816] usb 1-1: config 0 has an invalid interface number: 78 but max is 0 [ 180.864728][ T560] usb 2-1: config 0 has an invalid interface number: 78 but max is 0 [ 180.873010][ T816] usb 1-1: config 0 has no interface number 0 [ 180.880005][ T560] usb 2-1: config 0 has no interface number 0 [ 181.045836][ T816] usb 1-1: New USB device found, idVendor=0456, idProduct=f000, bcdDevice=90.9f [ 181.054996][ T560] usb 2-1: New USB device found, idVendor=0456, idProduct=f000, bcdDevice=90.9f [ 181.064097][ T816] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.072404][ T560] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.080571][ T816] usb 1-1: Product: syz [ 181.084733][ T816] usb 1-1: Manufacturer: syz [ 181.089540][ T560] usb 2-1: Product: syz [ 181.093723][ T560] usb 2-1: Manufacturer: syz [ 181.098694][ T816] usb 1-1: SerialNumber: syz [ 181.103666][ T560] usb 2-1: SerialNumber: syz [ 181.112765][ T816] usb 1-1: config 0 descriptor?? [ 181.121715][ T560] usb 2-1: config 0 descriptor?? [ 181.166519][ T816] ftdi_sio 1-1:0.78: FTDI USB Serial Device converter detected [ 181.174805][ T560] ftdi_sio 2-1:0.78: FTDI USB Serial Device converter detected [ 181.187364][ T560] usb 2-1: Detected FT-X [ 181.192070][ T816] usb 1-1: Detected FT-X [ 181.375894][ T816] ftdi_sio ttyUSB1: Unable to read latency timer: -32 [ 181.405913][ T560] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 182.317584][ T3038] FAULT_INJECTION: forcing a failure. [ 182.317584][ T3038] name failslab, interval 1, probability 0, space 0, times 0 [ 182.330429][ T3038] CPU: 0 PID: 3038 Comm: syz.2.795 Tainted: G W 5.10.238-syzkaller-00008-g59e9a7228857 #0 [ 182.342072][ T3038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 182.352141][ T3038] Call Trace: [ 182.355440][ T3038] __dump_stack+0x21/0x24 [ 182.359775][ T3038] dump_stack_lvl+0x169/0x1d8 [ 182.364635][ T3038] ? show_regs_print_info+0x18/0x18 [ 182.369839][ T3038] dump_stack+0x15/0x1c [ 182.374056][ T3038] should_fail+0x3c1/0x510 [ 182.378471][ T3038] ? audit_log_start+0x3b7/0x860 [ 182.383777][ T3038] __should_failslab+0xa4/0xe0 [ 182.388739][ T3038] should_failslab+0x9/0x20 [ 182.393246][ T3038] kmem_cache_alloc+0x3d/0x2e0 [ 182.398008][ T3038] audit_log_start+0x3b7/0x860 [ 182.402777][ T3038] ? ____kasan_slab_free+0x130/0x160 [ 182.408154][ T3038] ? audit_serial+0x30/0x30 [ 182.412659][ T3038] ? kstrtouint_from_user+0x1a0/0x200 [ 182.418030][ T3038] ? kmem_cache_free+0x2ac/0x2d0 [ 182.423063][ T3038] ? memset+0x35/0x40 [ 182.427054][ T3038] audit_seccomp+0x62/0x160 [ 182.431554][ T3038] __seccomp_filter+0xb4c/0x1990 [ 182.436508][ T3038] ? proc_fail_nth_read+0x210/0x210 [ 182.441833][ T3038] ? rw_verify_area+0x1c0/0x360 [ 182.446687][ T3038] ? preempt_count_add+0x90/0x1b0 [ 182.451709][ T3038] ? __secure_computing+0x290/0x290 [ 182.457022][ T3038] ? vfs_write+0xac8/0xd60 [ 182.461526][ T3038] ? __bpf_trace_kmem_free+0x6f/0x90 [ 182.466821][ T3038] ? kernel_write+0x3c0/0x3c0 [ 182.471498][ T3038] ? __kasan_check_write+0x14/0x20 [ 182.476607][ T3038] ? mutex_lock+0x8c/0xe0 [ 182.480958][ T3038] ? mutex_trylock+0xa0/0xa0 [ 182.485548][ T3038] ? __fget_files+0x2c4/0x320 [ 182.490306][ T3038] ? __kasan_check_write+0x14/0x20 [ 182.495417][ T3038] ? fput_many+0x15a/0x1a0 [ 182.500102][ T3038] ? fput+0x1a/0x20 [ 182.503925][ T3038] ? ksys_write+0x1eb/0x240 [ 182.508563][ T3038] __secure_computing+0xea/0x290 [ 182.513516][ T3038] syscall_trace_enter+0xb5/0x170 [ 182.518548][ T3038] syscall_enter_from_user_mode+0x20/0x30 [ 182.524272][ T3038] do_syscall_64+0x13/0x40 [ 182.528732][ T3038] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 182.534718][ T3038] RIP: 0033:0x7f5cb3076929 [ 182.539136][ T3038] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 182.555729][ T24] audit: type=1326 audit(1751570009.781:1613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3037 comm="syz.2.795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cb3076929 code=0x7ffc0000 [ 182.558742][ T3038] RSP: 002b:00007f5cb16df038 EFLAGS: 00000246 ORIG_RAX: 000000000000010b [ 182.590608][ T3038] RAX: ffffffffffffffda RBX: 00007f5cb329dfa0 RCX: 00007f5cb3076929 [ 182.598578][ T3038] RDX: 0000200000000180 RSI: 0000200000000380 RDI: 0000000000000006 [ 182.606633][ T3038] RBP: 00007f5cb16df090 R08: 0000000000000000 R09: 0000000000000000 [ 182.614605][ T3038] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 182.622674][ T3038] R13: 0000000000000000 R14: 00007f5cb329dfa0 R15: 00007ffe1b251378 [ 182.642152][ T3038] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 182.695909][ T3038] audit: out of memory in audit_log_start [ 182.705531][ T24] audit: type=1326 audit(1751570009.781:1614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3037 comm="syz.2.795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5cb3075290 code=0x7ffc0000 [ 182.743555][ T24] audit: type=1326 audit(1751570009.781:1615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3037 comm="syz.2.795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5cb3075290 code=0x7ffc0000 [ 182.835088][ T24] audit: type=1326 audit(1751570009.781:1616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3037 comm="syz.2.795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cb3076929 code=0x7ffc0000 [ 182.861421][ T816] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB1 [ 182.870158][ T560] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 183.057384][ T560] usb 2-1: USB disconnect, device number 8 [ 183.074938][ T560] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 183.095598][ T24] audit: type=1326 audit(1751570009.781:1617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3037 comm="syz.2.795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5cb3075290 code=0x7ffc0000 [ 183.136668][ T560] ftdi_sio 2-1:0.78: device disconnected [ 183.152069][ T24] audit: type=1326 audit(1751570009.781:1618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3037 comm="syz.2.795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f5cb30753df code=0x7ffc0000 [ 183.177275][ T816] usb 1-1: USB disconnect, device number 12 [ 183.271875][ T816] ftdi_sio ttyUSB1: FTDI USB Serial Device converter now disconnected from ttyUSB1 [ 183.283083][ T816] ftdi_sio 1-1:0.78: device disconnected [ 183.948342][ T3065] netlink: 37 bytes leftover after parsing attributes in process `syz.1.804'. [ 183.976555][ T3065] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 184.151448][ T3076] erofs: (device loop5): mounted with root inode @ nid 36. [ 184.213893][ T3076] @: renamed from bond_slave_0 [ 185.434380][ T370] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 185.695776][ T370] usb 2-1: Using ep0 maxpacket: 16 [ 185.935852][ T370] usb 2-1: config 0 has an invalid interface number: 78 but max is 0 [ 185.943993][ T370] usb 2-1: config 0 has no interface number 0 [ 185.987362][ T3100] netlink: 400 bytes leftover after parsing attributes in process `syz.2.815'. [ 186.115817][ T370] usb 2-1: New USB device found, idVendor=0456, idProduct=f000, bcdDevice=90.9f [ 186.124907][ T370] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.145726][ T370] usb 2-1: Product: syz [ 186.149912][ T370] usb 2-1: Manufacturer: syz [ 186.154516][ T370] usb 2-1: SerialNumber: syz [ 186.175967][ T370] usb 2-1: config 0 descriptor?? [ 186.216374][ T370] ftdi_sio 2-1:0.78: FTDI USB Serial Device converter detected [ 186.224178][ T370] usb 2-1: Detected FT-X [ 186.435795][ T370] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 186.892204][ T3122] @: renamed from bond_slave_0 [ 186.907052][ T370] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 187.010599][ T3128] udc-core: couldn't find an available UDC or it's busy [ 187.017666][ T3128] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 187.095842][ T297] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 187.107798][ T280] usb 2-1: USB disconnect, device number 9 [ 187.114921][ T280] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 187.125160][ T280] ftdi_sio 2-1:0.78: device disconnected [ 187.496005][ T297] usb 6-1: not running at top speed; connect to a high speed hub [ 187.578343][ T297] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 187.589694][ T297] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 187.768522][ T297] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 187.841885][ T297] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.855113][ T297] usb 6-1: Product: 鴭ꜙ᭚䑼艥僃鍻툜㹈趨᢯섓桜䂱㩾㧉⤞⹎쒥䭱䃖ꎙ䍷ᖵЭ읖嘘禭萒롪鮿㒥ⵁꊈ惯譃飵饥ᒤ궅 [ 187.876779][ T297] usb 6-1: Manufacturer: Є [ 187.881426][ T297] usb 6-1: SerialNumber: ᳝銁낿깡ࢫ漊ہફᵌҐ哽猈ℵ쮴ܒ왻텉ꋌ뷅庡໸዆બ✂턄˂覦ே蘽뀛鑨鉆츠妝㹏텵餑귄僽獂ѽ㬠๰ꦐ噥ٝ帙艠킨끧꺭镆턊 [ 189.575892][ T297] cdc_ncm 6-1:1.0: bind() failure [ 189.645145][ T297] cdc_ncm 6-1:1.1: bind() failure [ 189.654434][ T297] usb 6-1: USB disconnect, device number 5 [ 190.363144][ T3160] device vlan0 left promiscuous mode [ 190.442765][ T1006] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 190.513629][ T1006] IPv6: ADDRCONF(NETDEV_CHANGE): 1@: link becomes ready [ 190.635891][ T1006] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 190.644135][ T1006] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 190.652263][ T1006] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 190.660511][ T1006] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 190.669168][ T1006] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 190.677435][ T1006] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 190.685521][ T1006] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 190.707970][ T24] kauditd_printk_skb: 78 callbacks suppressed [ 190.708142][ T24] audit: type=1400 audit(1751570018.161:1697): avc: denied { name_bind } for pid=3161 comm="syz.0.835" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 191.714053][ T3173] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 191.723267][ T3173] ext4 filesystem being mounted at /36/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 192.037251][ T3181] netlink: 4 bytes leftover after parsing attributes in process `syz.0.838'. [ 192.082844][ T24] audit: type=1326 audit(1751570019.541:1698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3180 comm="syz.0.838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94a154f929 code=0x7ffc0000 [ 192.246711][ T3181] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3181 comm=syz.0.838 [ 192.304248][ T24] audit: type=1326 audit(1751570019.641:1699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3180 comm="syz.0.838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=97 compat=0 ip=0x7f94a154f929 code=0x7ffc0000 [ 192.384972][ T24] audit: type=1326 audit(1751570019.641:1700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3180 comm="syz.0.838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94a154f929 code=0x7ffc0000 [ 192.505422][ T24] audit: type=1326 audit(1751570019.701:1701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3180 comm="syz.0.838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=51 compat=0 ip=0x7f94a154f929 code=0x7ffc0000 [ 192.581231][ T24] audit: type=1326 audit(1751570019.701:1702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3180 comm="syz.0.838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94a154f929 code=0x7ffc0000 [ 192.654015][ T24] audit: type=1326 audit(1751570019.701:1703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3180 comm="syz.0.838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f94a15517bc code=0x7ffc0000 [ 192.690319][ T24] audit: type=1326 audit(1751570019.711:1704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3180 comm="syz.0.838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f94a15516f4 code=0x7ffc0000 [ 192.714221][ T24] audit: type=1326 audit(1751570019.711:1705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3180 comm="syz.0.838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94a154f929 code=0x7ffc0000 [ 192.737750][ T24] audit: type=1326 audit(1751570019.711:1706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3180 comm="syz.0.838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=50 compat=0 ip=0x7f94a154f929 code=0x7ffc0000 [ 192.872757][ T3190] netem: invalid attributes len -24 [ 192.892475][ T3190] netem: change failed [ 193.063564][ T3190] device pim6reg1 entered promiscuous mode [ 195.243202][ T3211] F2FS-fs (loop5): invalid crc value [ 195.360413][ T3211] F2FS-fs (loop5): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 195.438722][ T3211] F2FS-fs (loop5): Start checkpoint disabled! [ 195.447379][ T3211] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 197.057850][ T3229] netlink: 96 bytes leftover after parsing attributes in process `syz.1.852'. [ 197.226243][ T3232] EXT4-fs error (device loop5): ext4_read_inode_bitmap:140: comm syz.5.851: Invalid inode bitmap blk 4 in block_group 0 [ 197.252393][ T3232] EXT4-fs (loop5): mounted filesystem without journal. Opts: noblock_validity,nogrpid,grpquota,noload,nobarrier,lazytime,,errors=continue [ 197.358921][ T3240] device syzkaller0 entered promiscuous mode [ 197.432307][ T3246] netlink: 37 bytes leftover after parsing attributes in process `syz.3.855'. [ 197.452429][ T3246] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 197.484334][ T3249] netlink: 4 bytes leftover after parsing attributes in process `syz.2.856'. [ 197.666293][ T3258] netlink: 2 bytes leftover after parsing attributes in process `syz.3.858'. [ 198.262072][ T2943] IPv6: ADDRCONF(NETDEV_CHANGE): 1@: link becomes ready [ 198.300416][ T2943] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 198.546413][ T2943] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 198.554758][ T2943] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 198.627982][ T2943] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 198.636320][ T2943] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 198.644530][ T2943] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 198.652818][ T2943] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 198.676260][ T280] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 198.748427][ T3263] netlink: 'syz.2.859': attribute type 4 has an invalid length. [ 198.771467][ T3263] netlink: 'syz.2.859': attribute type 4 has an invalid length. [ 198.842094][ T3265] netlink: 272 bytes leftover after parsing attributes in process `syz.0.860'. [ 198.896181][ T24] kauditd_printk_skb: 7 callbacks suppressed [ 198.896194][ T24] audit: type=1400 audit(1751570026.331:1714): avc: denied { read } for pid=3264 comm="syz.0.860" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 198.922564][ T280] usb 6-1: Using ep0 maxpacket: 32 [ 199.056630][ T280] usb 6-1: config 1 has an invalid interface number: 242 but max is 0 [ 199.077181][ T280] usb 6-1: config 1 has no interface number 0 [ 199.115550][ T280] usb 6-1: config 1 interface 242 has no altsetting 0 [ 199.225436][ T24] audit: type=1400 audit(1751570026.681:1715): avc: denied { load_policy } for pid=3264 comm="syz.0.860" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 199.259735][ T3265] SELinux: ebitmap: truncated map [ 199.305972][ T280] usb 6-1: New USB device found, idVendor=2eca, idProduct=c101, bcdDevice= 7.df [ 199.322056][ T3265] SELinux: failed to load policy [ 199.327127][ T280] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.352547][ T280] usb 6-1: Product: syz [ 199.357406][ T280] usb 6-1: Manufacturer: syz [ 199.362019][ T280] usb 6-1: SerialNumber: syz [ 200.905900][ T280] aqc111: probe of 6-1:1.242 failed with error -71 [ 200.925948][ T280] usb 6-1: USB disconnect, device number 6 [ 201.802796][ T24] audit: type=1326 audit(1751570482.266:1716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3305 comm="syz.5.867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f545c157929 code=0x7ffc0000 [ 201.862645][ T24] audit: type=1326 audit(1751570482.296:1717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3305 comm="syz.5.867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f545c157929 code=0x7ffc0000 [ 201.891762][ T24] audit: type=1326 audit(1751570482.296:1718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3305 comm="syz.5.867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f545c157929 code=0x7ffc0000 [ 201.946177][ T24] audit: type=1326 audit(1751570482.296:1719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3305 comm="syz.5.867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f545c157963 code=0x7ffc0000 [ 201.976523][ T24] audit: type=1326 audit(1751570482.296:1720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3305 comm="syz.5.867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f545c1563df code=0x7ffc0000 [ 202.000039][ T24] audit: type=1326 audit(1751570482.296:1721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3305 comm="syz.5.867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f545c1579b7 code=0x7ffc0000 [ 202.076361][ T3315] netlink: 44 bytes leftover after parsing attributes in process `syz.3.870'. [ 202.097818][ T7] Bluetooth: hci0: Frame reassembly failed (-84) [ 202.110987][ T24] audit: type=1326 audit(1751570482.296:1722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3305 comm="syz.5.867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f545c156290 code=0x7ffc0000 [ 202.165911][ T24] audit: type=1326 audit(1751570482.296:1723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3305 comm="syz.5.867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f545c15752b code=0x7ffc0000 [ 202.646415][ T3320] netlink: 'syz.0.871': attribute type 3 has an invalid length. [ 204.136410][ T280] Bluetooth: hci0: command 0x1003 tx timeout [ 204.142558][ T2058] Bluetooth: hci0: sending frame failed (-49) [ 204.291337][ T24] kauditd_printk_skb: 28 callbacks suppressed [ 204.291351][ T24] audit: type=1326 audit(1751570484.756:1752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3305 comm="syz.5.867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f545c157929 code=0x7ffc0000 [ 204.368551][ T24] audit: type=1326 audit(1751570484.756:1753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3305 comm="syz.5.867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f545c157929 code=0x7ffc0000 [ 204.519752][ T3335] FAULT_INJECTION: forcing a failure. [ 204.519752][ T3335] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 204.549019][ T3335] CPU: 0 PID: 3335 Comm: syz.3.876 Tainted: G W 5.10.238-syzkaller-00008-g59e9a7228857 #0 [ 204.560244][ T3335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 204.570307][ T3335] Call Trace: [ 204.573613][ T3335] __dump_stack+0x21/0x24 [ 204.577961][ T3335] dump_stack_lvl+0x169/0x1d8 [ 204.582650][ T3335] ? show_regs_print_info+0x18/0x18 [ 204.587852][ T3335] ? vfs_write+0xac8/0xd60 [ 204.592276][ T3335] dump_stack+0x15/0x1c [ 204.596431][ T3335] should_fail+0x3c1/0x510 [ 204.600850][ T3335] should_fail_usercopy+0x1a/0x20 [ 204.605876][ T3335] _copy_from_user+0x20/0xd0 [ 204.610470][ T3335] __sys_bind+0x1cb/0x400 [ 204.614810][ T3335] ? __ia32_sys_socketpair+0xb0/0xb0 [ 204.620107][ T3335] ? fpu__clear_all+0x20/0x20 [ 204.624783][ T3335] __x64_sys_bind+0x7a/0x90 [ 204.629312][ T3335] do_syscall_64+0x31/0x40 [ 204.633739][ T3335] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 204.639785][ T3335] RIP: 0033:0x7f22b8226929 [ 204.644308][ T3335] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 204.664376][ T3335] RSP: 002b:00007f22b688f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 204.673111][ T3335] RAX: ffffffffffffffda RBX: 00007f22b844dfa0 RCX: 00007f22b8226929 [ 204.681096][ T3335] RDX: 0000000000000006 RSI: 0000200000000080 RDI: 0000000000000004 [ 204.689084][ T3335] RBP: 00007f22b688f090 R08: 0000000000000000 R09: 0000000000000000 [ 204.697062][ T3335] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 204.705034][ T3335] R13: 0000000000000000 R14: 00007f22b844dfa0 R15: 00007fff380c7a38 [ 204.812173][ T24] audit: type=1400 audit(1751570485.276:1754): avc: denied { connect } for pid=3337 comm="syz.2.877" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 204.869296][ T3340] input: syz1 as /devices/virtual/input/input20 [ 204.955808][ T3349] FAULT_INJECTION: forcing a failure. [ 204.955808][ T3349] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 204.980985][ T3349] CPU: 0 PID: 3349 Comm: syz.2.881 Tainted: G W 5.10.238-syzkaller-00008-g59e9a7228857 #0 [ 204.992323][ T3349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 205.002400][ T3349] Call Trace: [ 205.005729][ T3349] __dump_stack+0x21/0x24 [ 205.010066][ T3349] dump_stack_lvl+0x169/0x1d8 [ 205.014751][ T3349] ? show_regs_print_info+0x18/0x18 [ 205.019953][ T3349] ? stack_trace_save+0x98/0xe0 [ 205.024816][ T3349] dump_stack+0x15/0x1c [ 205.029062][ T3349] should_fail+0x3c1/0x510 [ 205.033485][ T3349] should_fail_usercopy+0x1a/0x20 [ 205.038574][ T3349] _copy_from_user+0x20/0xd0 [ 205.043427][ T3349] __copy_msghdr_from_user+0x448/0x5e0 [ 205.048894][ T3349] ? __ia32_sys_shutdown+0x1e0/0x1e0 [ 205.054181][ T3349] ? __fsnotify_parent+0x5f5/0x6c0 [ 205.059386][ T3349] ___sys_sendmsg+0x156/0x260 [ 205.064070][ T3349] ? __sys_sendmsg+0x250/0x250 [ 205.068838][ T3349] ? rw_verify_area+0x1c0/0x360 [ 205.073705][ T3349] ? __fdget+0x1a1/0x230 [ 205.078140][ T3349] __x64_sys_sendmsg+0x1e2/0x2a0 [ 205.083081][ T3349] ? fput+0x1a/0x20 [ 205.086896][ T3349] ? ___sys_sendmsg+0x260/0x260 [ 205.091756][ T3349] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 205.097830][ T3349] do_syscall_64+0x31/0x40 [ 205.102288][ T3349] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 205.108180][ T3349] RIP: 0033:0x7f5cb3076929 [ 205.112652][ T3349] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 205.132377][ T3349] RSP: 002b:00007f5cb16df038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 205.140807][ T3349] RAX: ffffffffffffffda RBX: 00007f5cb329dfa0 RCX: 00007f5cb3076929 [ 205.148955][ T3349] RDX: 0000000000000000 RSI: 0000200000000640 RDI: 0000000000000005 [ 205.157026][ T3349] RBP: 00007f5cb16df090 R08: 0000000000000000 R09: 0000000000000000 [ 205.164996][ T3349] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 205.173060][ T3349] R13: 0000000000000000 R14: 00007f5cb329dfa0 R15: 00007ffe1b251378 [ 205.335296][ T3353] netlink: 44 bytes leftover after parsing attributes in process `syz.2.883'. [ 205.510355][ T3361] FAULT_INJECTION: forcing a failure. [ 205.510355][ T3361] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 205.524031][ T3361] CPU: 1 PID: 3361 Comm: syz.1.886 Tainted: G W 5.10.238-syzkaller-00008-g59e9a7228857 #0 [ 205.535328][ T3361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 205.545613][ T3361] Call Trace: [ 205.548905][ T3361] __dump_stack+0x21/0x24 [ 205.553226][ T3361] dump_stack_lvl+0x169/0x1d8 [ 205.557993][ T3361] ? show_regs_print_info+0x18/0x18 [ 205.563174][ T3361] ? hrtimer_start_range_ns+0x9db/0xaf0 [ 205.568836][ T3361] dump_stack+0x15/0x1c [ 205.573064][ T3361] should_fail+0x3c1/0x510 [ 205.577487][ T3361] should_fail_usercopy+0x1a/0x20 [ 205.582555][ T3361] copy_fpstate_to_sigframe+0x86b/0xb40 [ 205.588120][ T3361] ? fpregs_set+0x540/0x540 [ 205.592739][ T3361] ? _raw_spin_unlock_irq+0x4e/0x70 [ 205.598094][ T3361] ? get_signal+0x1238/0x12e0 [ 205.602817][ T3361] ? fpu__alloc_mathframe+0x88/0x150 [ 205.608201][ T3361] arch_do_signal_or_restart+0x5c7/0x10f0 [ 205.613923][ T3361] ? mutex_lock+0x8c/0xe0 [ 205.618249][ T3361] ? __ia32_sys_rt_sigreturn+0x6c0/0x6c0 [ 205.623878][ T3361] ? fput_many+0x15a/0x1a0 [ 205.628430][ T3361] ? fpu__clear_all+0x20/0x20 [ 205.633109][ T3361] exit_to_user_mode_loop+0xa2/0xe0 [ 205.638328][ T3361] syscall_exit_to_user_mode+0x68/0x90 [ 205.643792][ T3361] do_syscall_64+0x3d/0x40 [ 205.648217][ T3361] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 205.654192][ T3361] RIP: 0033:0x7f32545d2927 [ 205.658620][ T3361] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 [ 205.678237][ T3361] RSP: 002b:00007f3252c3b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 205.686827][ T3361] RAX: 0000000000000013 RBX: 00007f32547f9fa0 RCX: 00007f32545d2929 [ 205.694900][ T3361] RDX: 0000000000000001 RSI: 0000200000000300 RDI: 0000000000000004 [ 205.702872][ T3361] RBP: 00007f3252c3b090 R08: 0000000000000000 R09: 0000000000000000 [ 205.710871][ T3361] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 205.719031][ T3361] R13: 0000000000000000 R14: 00007f32547f9fa0 R15: 00007ffd5adfdba8 [ 205.812263][ T24] audit: type=1400 audit(1751570486.276:1755): avc: denied { accept } for pid=3365 comm="syz.1.887" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 206.276158][ T1734] Bluetooth: hci0: command 0x1001 tx timeout [ 206.336057][ T2058] Bluetooth: hci0: sending frame failed (-49) [ 206.631998][ T24] audit: type=1326 audit(1751570487.096:1756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3386 comm="syz.0.893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94a154f929 code=0x7ffc0000 [ 206.658186][ T24] audit: type=1326 audit(1751570487.096:1757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3386 comm="syz.0.893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94a154f929 code=0x7ffc0000 [ 206.681827][ T24] audit: type=1326 audit(1751570487.126:1758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3386 comm="syz.0.893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f94a154f929 code=0x7ffc0000 [ 206.748469][ T24] audit: type=1326 audit(1751570487.126:1759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3386 comm="syz.0.893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94a154f929 code=0x7ffc0000 [ 206.802136][ T24] audit: type=1326 audit(1751570487.126:1760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3386 comm="syz.0.893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94a154f929 code=0x7ffc0000 [ 206.969643][ T24] audit: type=1326 audit(1751570487.156:1761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3386 comm="syz.0.893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f94a154f929 code=0x7ffc0000 [ 207.534377][ T3387] syz.0.893[3387] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 207.534528][ T3387] syz.0.893[3387] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 208.352909][ T3415] netlink: 4 bytes leftover after parsing attributes in process `syz.1.901'. [ 208.375747][ T2647] Bluetooth: hci0: command 0x1009 tx timeout [ 209.122286][ T3435] udc-core: couldn't find an available UDC or it's busy [ 209.129498][ T3435] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 211.529117][ T3463] netem: invalid attributes len -24 [ 211.534397][ T3463] netem: change failed [ 211.542195][ T3463] device pim6reg1 entered promiscuous mode [ 211.640070][ T3465] sch_tbf: burst 4398 is lower than device lo mtu (11337746) ! [ 211.853385][ T24] kauditd_printk_skb: 63 callbacks suppressed [ 211.865547][ T24] audit: type=1326 audit(1751570492.316:1825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3466 comm="syz.1.918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32545d2929 code=0x7ffc0000 [ 211.890115][ T24] audit: type=1326 audit(1751570492.316:1826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3466 comm="syz.1.918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32545d2929 code=0x7ffc0000 [ 211.914859][ T24] audit: type=1326 audit(1751570492.316:1827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3466 comm="syz.1.918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f32545d2929 code=0x7ffc0000 [ 211.959984][ T24] audit: type=1326 audit(1751570492.316:1828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3466 comm="syz.1.918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32545d2929 code=0x7ffc0000 [ 211.986230][ T24] audit: type=1326 audit(1751570492.316:1829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3466 comm="syz.1.918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32545d2929 code=0x7ffc0000 [ 212.010012][ T24] audit: type=1326 audit(1751570492.326:1830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3466 comm="syz.1.918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f32545d2929 code=0x7ffc0000 [ 212.033924][ T24] audit: type=1326 audit(1751570492.326:1831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3466 comm="syz.1.918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32545d2929 code=0x7ffc0000 [ 212.058659][ T24] audit: type=1326 audit(1751570492.326:1832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3466 comm="syz.1.918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32545d2929 code=0x7ffc0000 [ 212.114436][ T3477] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3477 comm=syz.3.921 [ 212.115780][ T24] audit: type=1326 audit(1751570492.326:1833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3466 comm="syz.1.918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32545d2929 code=0x7ffc0000 [ 212.150567][ T24] audit: type=1326 audit(1751570492.326:1834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3466 comm="syz.1.918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32545d2929 code=0x7ffc0000 [ 212.622934][ T3489] fuse: Bad value for 'rootmode' [ 212.679800][ T3495] netem: invalid attributes len -24 [ 212.685032][ T3495] netem: change failed [ 212.706065][ T3495] device pim6reg1 entered promiscuous mode [ 212.769830][ T3497] erofs: (device loop5): mounted with root inode @ nid 36. [ 215.570170][ T3537] netem: invalid attributes len -24 [ 215.633156][ T3537] device pim6reg1 entered promiscuous mode [ 216.061906][ T3557] udc-core: couldn't find an available UDC or it's busy [ 216.079731][ T3557] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 217.657021][ T3568] tipc: Cannot configure node identity twice [ 217.870931][ T3578] netem: invalid attributes len -24 [ 217.881264][ T3578] netem: change failed [ 218.855990][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 218.884187][ T3581] netlink: 'syz.5.952': attribute type 280 has an invalid length. [ 219.482183][ T24] kauditd_printk_skb: 32 callbacks suppressed [ 219.482197][ T24] audit: type=1400 audit(1751571405.954:1867): avc: denied { mounton } for pid=3593 comm="syz.2.962" path="/194/file0" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 219.482305][ T3596] incfs: mount failed -22 [ 219.587614][ T3596] 9pnet: Insufficient options for proto=fd [ 219.735841][ T392] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 219.985779][ T392] usb 4-1: Using ep0 maxpacket: 16 [ 220.204970][ T3626] netem: invalid attributes len -24 [ 220.230847][ T3626] netem: change failed [ 220.333399][ T392] usb 4-1: New USB device found, idVendor=045e, idProduct=0004, bcdDevice= 0.00 [ 220.355720][ T392] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.363749][ T392] usb 4-1: Product: syz [ 220.385839][ T392] usb 4-1: Manufacturer: syz [ 220.390483][ T392] usb 4-1: SerialNumber: syz [ 220.457485][ T392] uvcvideo: Found UVC 0.00 device syz (045e:0004) [ 220.464105][ T392] uvcvideo: No valid video chain found. [ 220.659825][ T392] usb 4-1: USB disconnect, device number 7 [ 221.595794][ T392] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 221.845812][ T392] usb 4-1: Using ep0 maxpacket: 16 [ 221.966126][ T392] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 222.007851][ T392] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 222.008075][ T392] usb 4-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 222.008156][ T392] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.059101][ T392] usb 4-1: config 0 descriptor?? [ 222.356178][ T392] usb 4-1: string descriptor 0 read error: -71 [ 222.361712][ T392] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 222.454927][ T392] usb 4-1: USB disconnect, device number 8 [ 223.725152][ T3684] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 223.743390][ T3682] netlink: 4 bytes leftover after parsing attributes in process `syz.0.994'. [ 223.753390][ T3682] netlink: 12 bytes leftover after parsing attributes in process `syz.0.994'. [ 224.035754][ T392] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 224.395929][ T392] usb 4-1: Using ep0 maxpacket: 16 [ 224.486287][ T24] audit: type=1400 audit(1751571410.934:1868): avc: denied { setopt } for pid=3701 comm="syz.1.1000" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 224.935817][ T392] usb 4-1: New USB device found, idVendor=045e, idProduct=0004, bcdDevice= 0.00 [ 224.955192][ T392] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.004601][ T392] usb 4-1: Product: syz [ 225.008894][ T392] usb 4-1: Manufacturer: syz [ 225.013572][ T392] usb 4-1: SerialNumber: syz [ 225.056407][ T392] uvcvideo: Found UVC 0.00 device syz (045e:0004) [ 225.062863][ T392] uvcvideo: No valid video chain found. [ 225.259217][ T392] usb 4-1: USB disconnect, device number 9 [ 225.285731][ T483] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 225.685879][ T483] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 225.694615][ T483] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 225.709462][ T483] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 225.723335][ T24] audit: type=1400 audit(1751571412.194:1869): avc: denied { listen } for pid=3714 comm="syz.0.1005" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 225.729119][ T483] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 225.867087][ T24] audit: type=1326 audit(1751571412.284:1870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3711 comm="syz.5.1004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f545c157929 code=0x7ffc0000 [ 225.897764][ T483] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 225.909399][ T483] usb 2-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 225.970639][ T24] audit: type=1326 audit(1751571412.284:1871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3711 comm="syz.5.1004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f545c157929 code=0x7ffc0000 [ 226.296417][ T24] audit: type=1326 audit(1751571412.284:1872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3711 comm="syz.5.1004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f545c157929 code=0x7ffc0000 [ 226.321007][ T483] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 226.348629][ T483] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.358060][ T483] usb 2-1: Product: syz [ 226.362361][ T483] usb 2-1: Manufacturer: syz [ 226.399601][ T483] usb 2-1: SerialNumber: syz [ 226.406253][ T24] audit: type=1326 audit(1751571412.284:1873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3711 comm="syz.5.1004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f545c157929 code=0x7ffc0000 [ 226.958993][ T24] audit: type=1326 audit(1751571412.284:1874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3711 comm="syz.5.1004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f545c157929 code=0x7ffc0000 [ 226.983493][ T24] audit: type=1326 audit(1751571412.284:1875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3711 comm="syz.5.1004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f545c157929 code=0x7ffc0000 [ 227.158747][ T24] audit: type=1326 audit(1751571412.294:1876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3711 comm="syz.5.1004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f545c157929 code=0x7ffc0000 [ 227.250119][ T24] audit: type=1326 audit(1751571412.294:1877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3711 comm="syz.5.1004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f545c157929 code=0x7ffc0000 [ 228.235809][ T483] cdc_ncm 2-1:1.0: bind() failure [ 228.242131][ T483] cdc_ncm 2-1:1.1: bind() failure [ 228.375761][ T5] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 228.615847][ T5] usb 4-1: Using ep0 maxpacket: 16 [ 228.735827][ T5] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 228.748158][ T5] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 228.762885][ T5] usb 4-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 228.772115][ T5] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.796004][ T5] usb 4-1: config 0 descriptor?? [ 229.005822][ T483] usb 2-1: USB disconnect, device number 10 [ 229.075784][ T5] usb 4-1: string descriptor 0 read error: -71 [ 229.084162][ T5] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 229.100794][ T5] usb 4-1: USB disconnect, device number 10 [ 229.569890][ T24] kauditd_printk_skb: 45 callbacks suppressed [ 229.569904][ T24] audit: type=1326 audit(1751571869.039:1923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3756 comm="syz.3.1021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22b8226929 code=0x7ffc0000 [ 229.631609][ T24] audit: type=1326 audit(1751571869.039:1924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3756 comm="syz.3.1021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f22b8226929 code=0x7ffc0000 [ 229.687592][ T24] audit: type=1326 audit(1751571869.049:1925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3756 comm="syz.3.1021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22b8226929 code=0x7ffc0000 [ 229.725304][ T24] audit: type=1326 audit(1751571869.049:1926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3756 comm="syz.3.1021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f22b8226929 code=0x7ffc0000 [ 229.749775][ T24] audit: type=1326 audit(1751571869.049:1927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3756 comm="syz.3.1021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22b8226929 code=0x7ffc0000 [ 229.773927][ T24] audit: type=1326 audit(1751571869.049:1928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3756 comm="syz.3.1021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22b8226929 code=0x7ffc0000 [ 229.797982][ T24] audit: type=1326 audit(1751571869.049:1929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3756 comm="syz.3.1021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f22b8226929 code=0x7ffc0000 [ 229.821741][ T24] audit: type=1326 audit(1751571869.049:1930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3756 comm="syz.3.1021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f22b8226963 code=0x7ffc0000 [ 229.845710][ T24] audit: type=1326 audit(1751571869.049:1931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3756 comm="syz.3.1021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f22b82253df code=0x7ffc0000 [ 229.905777][ T24] audit: type=1326 audit(1751571869.049:1932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3756 comm="syz.3.1021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f22b82269b7 code=0x7ffc0000 [ 234.744186][ T3818] netlink: 'syz.0.1039': attribute type 8 has an invalid length. [ 234.783654][ T3818] syz.0.1039[3818] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 234.783715][ T3818] syz.0.1039[3818] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 234.837136][ T24] kauditd_printk_skb: 88 callbacks suppressed [ 234.837148][ T24] audit: type=1400 audit(1751571874.309:2021): avc: denied { map } for pid=3821 comm="syz.3.1042" path="/dev/ashmem" dev="devtmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 234.881499][ T24] audit: type=1400 audit(1751571874.329:2022): avc: denied { bind } for pid=3816 comm="syz.0.1039" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 234.902210][ T24] audit: type=1400 audit(1751571874.329:2023): avc: denied { getopt } for pid=3816 comm="syz.0.1039" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 234.949794][ T2647] usb 3-1: USB disconnect, device number 8 [ 234.963018][ T7] tipc: Left network mode [ 235.032567][ T3825] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.039926][ T3825] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.048527][ T3825] device bridge_slave_0 entered promiscuous mode [ 235.059034][ T3825] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.066505][ T3825] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.075341][ T3825] device bridge_slave_1 entered promiscuous mode [ 235.082366][ T3836] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1044'. [ 235.144480][ T3825] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.151662][ T3825] bridge0: port 2(bridge_slave_1) entered forwarding state [ 235.158968][ T3825] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.166081][ T3825] bridge0: port 1(bridge_slave_0) entered forwarding state [ 235.192379][ T1006] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 235.200471][ T1006] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.208391][ T1006] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.221959][ T1006] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 235.230891][ T1006] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.238336][ T1006] bridge0: port 1(bridge_slave_0) entered forwarding state [ 235.247596][ T1006] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 235.256606][ T1006] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.263679][ T1006] bridge0: port 2(bridge_slave_1) entered forwarding state [ 235.290691][ T1006] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 235.299142][ T1006] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 235.321678][ T1006] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 235.334966][ T1006] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 235.344003][ T1006] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 235.351862][ T1006] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 235.361515][ T3825] device veth0_vlan entered promiscuous mode [ 235.375208][ T1006] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 235.389874][ T3825] device veth1_macvtap entered promiscuous mode [ 235.404149][ T1006] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 235.452294][ T1006] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 235.538653][ T7] device bridge_slave_1 left promiscuous mode [ 235.545050][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.553184][ T7] device bridge_slave_0 left promiscuous mode [ 235.559667][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.570409][ T7] device veth1_macvtap left promiscuous mode [ 235.969588][ T3852] tipc: Cannot configure node identity twice [ 235.991218][ T24] audit: type=1326 audit(1751572328.464:2024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3855 comm="syz.0.1051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94a154f929 code=0x7ffc0000 [ 236.015033][ T24] audit: type=1326 audit(1751572328.464:2025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3855 comm="syz.0.1051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94a154f929 code=0x7ffc0000 [ 236.038810][ T24] audit: type=1326 audit(1751572328.464:2026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3855 comm="syz.0.1051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f94a154f929 code=0x7ffc0000 [ 236.069705][ T24] audit: type=1326 audit(1751572328.534:2027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3855 comm="syz.0.1051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94a154f929 code=0x7ffc0000 [ 236.094071][ T24] audit: type=1326 audit(1751572328.534:2028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3855 comm="syz.0.1051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94a154f929 code=0x7ffc0000 [ 236.117820][ T24] audit: type=1400 audit(1751572328.544:2029): avc: denied { listen } for pid=3853 comm="syz.3.1050" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 236.140950][ T24] audit: type=1326 audit(1751572328.544:2030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3855 comm="syz.0.1051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f94a154f929 code=0x7ffc0000 [ 236.698074][ T3873] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1056'. [ 236.757099][ T3873] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.764491][ T3873] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.047790][ T3884] SELinux: policydb version 987100711 does not match my version range 15-33 [ 237.056745][ T3884] SELinux: failed to load policy [ 237.537598][ T3888] netlink: 'syz.6.1061': attribute type 15 has an invalid length. [ 237.545744][ T3888] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1061'. [ 238.845835][ T5] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 239.085714][ T392] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 239.301637][ T5] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 239.310589][ T5] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 239.320769][ T5] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 239.320781][ T5] usb 4-1: config 1 has no interface number 1 [ 239.320809][ T5] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 239.421590][ T3930] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1076'. [ 239.433308][ T3930] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1076'. [ 239.465818][ T392] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 239.476878][ T392] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 239.485864][ T5] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 239.486846][ T392] usb 7-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 239.496121][ T5] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.505012][ T392] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.512920][ T5] usb 4-1: Product: syz [ 239.524574][ T392] usb 7-1: config 0 descriptor?? [ 239.525076][ T5] usb 4-1: Manufacturer: syz [ 239.534450][ T5] usb 4-1: SerialNumber: syz [ 239.605379][ T3937] ================================================================== [ 239.613482][ T3937] BUG: KASAN: use-after-free in exact_lock+0x38/0xc0 [ 239.620144][ T3937] Read of size 8 at addr ffff888109675460 by task syz.1.1079/3937 [ 239.627936][ T3937] [ 239.630277][ T3937] CPU: 1 PID: 3937 Comm: syz.1.1079 Tainted: G W 5.10.238-syzkaller-00008-g59e9a7228857 #0 [ 239.641817][ T3937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 239.651959][ T3937] Call Trace: [ 239.655258][ T3937] __dump_stack+0x21/0x24 [ 239.659591][ T3937] dump_stack_lvl+0x169/0x1d8 [ 239.664269][ T3937] ? show_regs_print_info+0x18/0x18 [ 239.669555][ T3937] ? thaw_kernel_threads+0x220/0x220 [ 239.674946][ T3937] print_address_description+0x7f/0x2c0 [ 239.680490][ T3937] ? exact_lock+0x38/0xc0 [ 239.684826][ T3937] kasan_report+0xe2/0x130 [ 239.689335][ T3937] ? exact_lock+0x38/0xc0 [ 239.693662][ T3937] __asan_report_load8_noabort+0x14/0x20 [ 239.699284][ T3937] exact_lock+0x38/0xc0 [ 239.703444][ T3937] ? bdev_check_media_change+0x350/0x350 [ 239.709074][ T3937] kobj_lookup+0x298/0x430 [ 239.713483][ T3937] get_gendisk+0xe9/0x340 [ 239.717803][ T3937] ? _raw_spin_lock+0x8e/0xe0 [ 239.722468][ T3937] __blkdev_get+0x1b0/0x12f0 [ 239.727048][ T3937] ? _raw_spin_unlock+0x4d/0x70 [ 239.731978][ T3937] ? blkdev_bio_end_io+0x450/0x450 [ 239.737086][ T3937] ? selinux_file_receive+0x130/0x130 [ 239.742450][ T3937] ? selinux_inode_permission+0x3fc/0x5e0 [ 239.748158][ T3937] blkdev_open+0x208/0x430 [ 239.752619][ T3937] ? block_ioctl+0x100/0x100 [ 239.757200][ T3937] do_dentry_open+0x793/0x1090 [ 239.761958][ T3937] vfs_open+0x73/0x80 [ 239.765947][ T3937] path_openat+0x27ad/0x3160 [ 239.770541][ T3937] ? __stack_depot_save+0x479/0x4c0 [ 239.775744][ T3937] ? __kasan_slab_alloc+0xcf/0xf0 [ 239.780771][ T3937] ? kmem_cache_alloc+0x165/0x2e0 [ 239.785800][ T3937] ? getname+0x19/0x20 [ 239.789872][ T3937] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 239.796205][ T3937] ? do_filp_open+0x3e0/0x3e0 [ 239.800958][ T3937] do_filp_open+0x1b3/0x3e0 [ 239.805465][ T3937] ? vfs_tmpfile+0x2c0/0x2c0 [ 239.810135][ T3937] ? get_unused_fd_flags+0x92/0xa0 [ 239.815235][ T3937] do_sys_openat2+0x14c/0x6d0 [ 239.819900][ T3937] ? do_sys_open+0xe0/0xe0 [ 239.824312][ T3937] ? filename_create+0x442/0x680 [ 239.829252][ T3937] ? __kasan_check_write+0x14/0x20 [ 239.834372][ T3937] ? _copy_from_user+0x95/0xd0 [ 239.839169][ T3937] __x64_sys_openat2+0x20e/0x270 [ 239.844092][ T3937] ? __ia32_sys_openat+0x160/0x160 [ 239.849279][ T3937] do_syscall_64+0x31/0x40 [ 239.853693][ T3937] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 239.859573][ T3937] RIP: 0033:0x7f32545d2929 [ 239.864005][ T3937] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 239.884121][ T3937] RSP: 002b:00007f3252c3b038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b5 [ 239.892525][ T3937] RAX: ffffffffffffffda RBX: 00007f32547f9fa0 RCX: 00007f32545d2929 [ 239.900576][ T3937] RDX: 0000200000000080 RSI: 0000200000000300 RDI: ffffffffffffff9c [ 239.908543][ T3937] RBP: 00007f3254654b39 R08: 0000000000000000 R09: 0000000000000000 [ 239.916767][ T3937] R10: 0000000000000018 R11: 0000000000000246 R12: 0000000000000000 [ 239.924727][ T3937] R13: 0000000000000000 R14: 00007f32547f9fa0 R15: 00007ffd5adfdba8 [ 239.932696][ T3937] [ 239.935014][ T3937] Allocated by task 276: [ 239.939251][ T3937] __kasan_kmalloc+0xda/0x110 [ 239.943923][ T3937] __kmalloc+0x1a7/0x330 [ 239.948182][ T3937] kvmalloc_node+0x88/0x130 [ 239.952676][ T3937] xt_alloc_table_info+0x3b/0xa0 [ 239.957609][ T3937] do_ip6t_set_ctl+0x86a/0xcf0 [ 239.962361][ T3937] nf_setsockopt+0x272/0x2a0 [ 239.966939][ T3937] ipv6_setsockopt+0x2551/0x3860 [ 239.971991][ T3937] tcp_setsockopt+0x1f8/0x1c30 [ 239.977008][ T3937] sock_common_setsockopt+0xa0/0xb0 [ 239.982198][ T3937] __sys_setsockopt+0x2ed/0x460 [ 239.987065][ T3937] __x64_sys_setsockopt+0xbf/0xd0 [ 239.992078][ T3937] do_syscall_64+0x31/0x40 [ 239.996483][ T3937] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 240.002357][ T3937] [ 240.004674][ T3937] Freed by task 7: [ 240.008386][ T3937] kasan_set_track+0x4a/0x70 [ 240.013138][ T3937] kasan_set_free_info+0x23/0x40 [ 240.018067][ T3937] ____kasan_slab_free+0x125/0x160 [ 240.023183][ T3937] __kasan_slab_free+0x11/0x20 [ 240.028021][ T3937] slab_free_freelist_hook+0xc5/0x190 [ 240.033384][ T3937] kfree+0xc0/0x270 [ 240.037269][ T3937] skb_release_data+0x532/0x670 [ 240.042110][ T3937] consume_skb+0xab/0x1f0 [ 240.046432][ T3937] netlink_broadcast_filtered+0x119a/0x1290 [ 240.052319][ T3937] nlmsg_notify+0xed/0x1b0 [ 240.056926][ T3937] rtmsg_ifinfo+0xea/0x130 [ 240.061429][ T3937] dev_close_many+0x27c/0x4d0 [ 240.066094][ T3937] unregister_netdevice_many+0x44c/0x1980 [ 240.071802][ T3937] default_device_exit_batch+0x330/0x390 [ 240.077420][ T3937] cleanup_net+0x5fb/0xb70 [ 240.081945][ T3937] process_one_work+0x6e1/0xba0 [ 240.086885][ T3937] worker_thread+0xa6a/0x13b0 [ 240.091558][ T3937] kthread+0x346/0x3d0 [ 240.095618][ T3937] ret_from_fork+0x1f/0x30 [ 240.100026][ T3937] [ 240.102439][ T3937] The buggy address belongs to the object at ffff888109675000 [ 240.102439][ T3937] which belongs to the cache kmalloc-2k of size 2048 [ 240.116481][ T3937] The buggy address is located 1120 bytes inside of [ 240.116481][ T3937] 2048-byte region [ffff888109675000, ffff888109675800) [ 240.130026][ T3937] The buggy address belongs to the page: [ 240.135654][ T3937] page:ffffea0004259c00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x109670 [ 240.145882][ T3937] head:ffffea0004259c00 order:3 compound_mapcount:0 compound_pincount:0 [ 240.154210][ T3937] flags: 0x4000000000010200(slab|head) [ 240.159684][ T3937] raw: 4000000000010200 0000000000000000 0000000300000001 ffff888100042d80 [ 240.168628][ T3937] raw: 0000000000000000 0000000000080008 00000001ffffffff 0000000000000000 [ 240.177200][ T3937] page dumped because: kasan: bad access detected [ 240.183599][ T3937] page_owner tracks the page as allocated [ 240.189315][ T3937] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, ts 1998560989, free_ts 0 [ 240.207190][ T3937] prep_new_page+0x179/0x180 [ 240.212039][ T3937] get_page_from_freelist+0x2235/0x23d0 [ 240.217572][ T3937] __alloc_pages_nodemask+0x268/0x5f0 [ 240.222941][ T3937] new_slab+0x84/0x3f0 [ 240.227009][ T3937] ___slab_alloc+0x2a6/0x450 [ 240.231593][ T3937] __slab_alloc+0x63/0xa0 [ 240.235934][ T3937] kmem_cache_alloc_trace+0x1b3/0x2e0 [ 240.241298][ T3937] __alloc_disk_node+0x79/0x580 [ 240.246146][ T3937] loop_add+0x33f/0x7b0 [ 240.250467][ T3937] loop_init+0x1bf/0x1ff [ 240.254697][ T3937] do_one_initcall+0x187/0x510 [ 240.259448][ T3937] do_initcall_level+0x16f/0x2cf [ 240.264381][ T3937] do_initcalls+0x50/0x92 [ 240.268703][ T3937] do_basic_setup+0x88/0x8f [ 240.273198][ T3937] kernel_init_freeable+0x287/0x3be [ 240.278389][ T3937] kernel_init+0x11/0x1a0 [ 240.282722][ T3937] page_owner free stack trace missing [ 240.288075][ T3937] [ 240.290397][ T3937] Memory state around the buggy address: [ 240.296116][ T3937] ffff888109675300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 240.304175][ T3937] ffff888109675380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 240.312237][ T3937] >ffff888109675400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 240.320722][ T3937] ^ [ 240.327915][ T3937] ffff888109675480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 240.335971][ T3937] ffff888109675500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 240.344032][ T3937] ================================================================== [ 240.352078][ T3937] Disabling lock debugging due to kernel taint [ 240.364006][ T24] kauditd_printk_skb: 85 callbacks suppressed [ 240.364018][ T24] audit: type=1400 audit(1751572332.834:2116): avc: denied { read } for pid=77 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 240.396132][ T24] audit: type=1400 audit(1751572332.864:2117): avc: denied { search } for pid=77 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 240.418045][ T24] audit: type=1400 audit(1751572332.864:2118): avc: denied { write } for pid=77 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 240.439790][ T24] audit: type=1400 audit(1751572332.864:2119): avc: denied { add_name } for pid=77 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 240.461308][ T24] audit: type=1400 audit(1751572332.864:2120): avc: denied { create } for pid=77 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 240.482077][ T24] audit: type=1400 audit(1751572332.864:2121): avc: denied { append open } for pid=77 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 240.508786][ T24] audit: type=1400 audit(1751572332.864:2122): avc: denied { getattr } for pid=77 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 240.598021][ T3921] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1073'. [ 240.675782][ T392] usbhid 7-1:0.0: can't add hid device: -71 [ 240.681869][ T392] usbhid: probe of 7-1:0.0 failed with error -71 [ 240.689757][ T392] usb 7-1: USB disconnect, device number 2 [ 241.625855][ T5] usb 4-1: MIDIStreaming interface descriptor not found [ 241.635835][ T5] usb 4-1: USB disconnect, device number 11 [ 241.836138][ T3618] udevd[3618]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory