last executing test programs: 3m19.23330891s ago: executing program 0 (id=329): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/stat\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0xb7030000) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x188) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) 3m19.156186091s ago: executing program 0 (id=330): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) fstat(0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="170000000000000004000000"], 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r2}, 0x0, &(0x7f0000000340)=r3}, 0x20) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) pselect6(0x40, &(0x7f00000001c0)={0x2, 0x80, 0x1, 0x0, 0x6656142a, 0x5c4, 0x0, 0x8000000000000001}, 0x0, &(0x7f00000003c0)={0x98cf, 0x7, 0xfffffffffffffff9, 0x4, 0x4, 0x8, 0x6, 0x1}, &(0x7f0000000640)={r4, r5+10000000}, &(0x7f00000009c0)={&(0x7f0000000680), 0x8}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$selinux_access(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f725d256c6f67645f7661725f72756e5f3a7310202f7573722f8969552f74656c6570612d6e5f5b78a411b17468792f6d697377696f6e2d636f6e74726f6c2d352030303030303030303030303030a445303037303208a25aa28ac13b3e3c3607877bc3f03c6b8977e0ff9fcb3866eb2aef2f59e1e0014e1fb366a4001c1baf9c40934a929eeec20e8dac1f27a27ec8448d1dd6ff86fceef38c6963fbbeca115e318b2e"], 0x5f) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TCSETS(r7, 0x40045431, &(0x7f0000001200)={0x0, 0xffffff1e, 0xffffffff, 0x4, 0x16, "001bf100eeff0000a2c2000100000000002000"}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000007c0)=ANY=[@ANYBLOB="380100001000010003000000fddbdf25ac1414aa000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000016000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x138}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) 3m18.244356185s ago: executing program 0 (id=337): bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[], 0x50) mlock2(&(0x7f0000df9000/0x3000)=nil, 0x3000, 0x0) r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020000000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}]}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f00000002c0)='mm_page_alloc\x00', r1}, 0x10) syz_clone(0x400a1400, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r2}, 0x18) r3 = socket$vsock_stream(0x28, 0x1, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002078316e00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000006000000850000000500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r4}, 0x10) connect$vsock_stream(r3, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r3, 0x28, 0x1, &(0x7f0000000100)=0xfffffffffffffffe, 0x112) 3m17.275694009s ago: executing program 0 (id=340): openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x188) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) umount2(&(0x7f0000000280)='./file0/file0\x00', 0x2) 3m17.247895589s ago: executing program 0 (id=341): r0 = memfd_create(0x0, 0x0) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x0, {{@in=@private, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0xa0, 0x0, 0x3c, 0x0, 0xffffffffffffffff}, {0x0, 0xf, 0x0, 0x100000000, 0xca8}, {0x6, 0x1}, 0x0, 0x0, 0x1, 0x0, 0x1}}, 0xb8}}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="85000000350000009c0000000000000025000000fffffff19500000d000000004bea11fade2d6950bdaebf39f5d5e2c5dec1e666c3a573"], &(0x7f0000000040)='GPL\x00', 0x2, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x8000000, 0x10, 0x0, 0xfffffffffffffef7}, 0x23) 3m16.888307675s ago: executing program 0 (id=343): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = gettid() prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, 0x0, 0x0, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) splice(r3, 0x0, r2, 0x0, 0x10000008ebc, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r4}, 0x10) syz_emit_ethernet(0x66, &(0x7f0000000f80)={@broadcast, @random="6487a2bed3d6", @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x6c, 0x0, @private}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0xfffc}}}}}}, 0x0) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r2) sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f00000002c0)={0x68, r5, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xb0}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xffff}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x10000006}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x40000}, 0x20040000) socket$inet6(0xa, 0x3, 0xff) 3m16.51469786s ago: executing program 32 (id=343): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = gettid() prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, 0x0, 0x0, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) splice(r3, 0x0, r2, 0x0, 0x10000008ebc, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r4}, 0x10) syz_emit_ethernet(0x66, &(0x7f0000000f80)={@broadcast, @random="6487a2bed3d6", @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x6c, 0x0, @private}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0xfffc}}}}}}, 0x0) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r2) sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f00000002c0)={0x68, r5, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xb0}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xffff}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x10000006}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x40000}, 0x20040000) socket$inet6(0xa, 0x3, 0xff) 26.723771532s ago: executing program 3 (id=1146): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x2, {{0x42}}}, 0x10) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) sched_setaffinity(r2, 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001540)=@newtaction={0x68, 0x30, 0x829, 0x0, 0x0, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PRIORITY={0x8}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) r5 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) sendmsg$tipc(r5, &(0x7f0000000540)={&(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x0, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2000481a}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = openat$cgroup_ro(r6, 0x0, 0x100002, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r7, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x0, 0x8, 0x301, 0x0, 0x0, {0x3, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x1) setsockopt$TIPC_GROUP_LEAVE(r5, 0x10f, 0x88) 25.996506523s ago: executing program 3 (id=1150): r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000041c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(r2, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r3}, 0x10) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) syz_open_procfs(0xffffffffffffffff, &(0x7f0000006100)='cmdline\x00') ioctl$VT_RESIZE(r0, 0x5609, &(0x7f0000000180)={0x65f5, 0x0, 0xff}) 24.755849351s ago: executing program 3 (id=1154): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000d7c900000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f00000003c0)=""/171}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000002c0)='mm_page_alloc\x00', r2}, 0x63) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) getsockname$packet(r5, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0xf) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x14) sendmsg$nl_route_sched(r3, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x200000, {0x0, 0x0, 0x0, r6, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x2, 0x0, 0x0, {{}, {0x0, 0x0, 0x1}}}]}]}]}}]}, 0x54}}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00', r7}, 0x10) move_mount(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 24.536128344s ago: executing program 3 (id=1157): openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x188) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) umount2(0x0, 0x2) 24.147362639s ago: executing program 3 (id=1160): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000001240), 0x2, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x5, &(0x7f0000000d40)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c0048cc4a56b7fc12808ce1f306efcb237270492b7c323d9a8d464a595c470196d475a2df441cbe7e8ec9e44ee7845304e67f40e4b3f136f60a04e1ee5614d2b44eb0f5f0236bb4501782913048e04a1404000000b0c6a180264ba4cd6b9c0e68183226e23ed0fd7ccb88619a89dbc630a971848439c6a1faf6f05b2fbd1f8c13948b1ea8e8f3d31cfaafc68263d9cdafc7e68c6c9c7dc2fa8813d5ac3eec85b44e43f864aed87b"]) read$FUSE(r4, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000004200)={0x50, 0x0, r5, {0x7, 0x1f, 0x80000, 0x2f0c07f996e5f8c, 0xc, 0x0, 0x0, 0x1000}}, 0x50) syz_fuse_handle_req(r4, &(0x7f00000066c0)="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", 0x2000, &(0x7f0000008b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x90, 0x0, 0x0, {0x100000000404, 0x0, 0xc, 0x0, 0x8000000, 0x0, {0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xa000, 0x0, 0x0, r6}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TUNSETGROUP(r3, 0x400454ce, r6) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) close(r0) r7 = openat$full(0xffffffffffffff9c, &(0x7f0000001280), 0x200000, 0x0) getsockopt$inet6_udp_int(r7, 0x11, 0x2, &(0x7f00000012c0), &(0x7f0000001300)=0x4) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0b00000007000000010001000800000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000000d9de0a39976c2e261c834877231076ce3de5043f88c69014d1e8291dea317d027dd0753b9c164b9e68c44ec9a7a77a02782481f4a5a672334c85b6cd34000a3952a10a306a227750cf3c2b41789b859243ec24086796f913a308cddbb4fc0afc27b05382e54f4bb973fa76fb1d5f0ece53db5bfeb07a523907c88d24cd7a268784bc1ecb4eeedaeca81ef25"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) close(r0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000500000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r9, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r10 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r10, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r11, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r12, &(0x7f0000000000), 0x651, 0x0) 24.080314631s ago: executing program 3 (id=1161): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fstat(0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000590000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r3}, 0x0, &(0x7f0000000340)=r4}, 0x20) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) pselect6(0x40, &(0x7f00000001c0)={0x2, 0x80, 0x1, 0x0, 0x6656142a, 0x5c4, 0x0, 0x8000000000000001}, 0x0, &(0x7f00000003c0)={0x98cf, 0x7, 0xfffffffffffffff9, 0x4, 0x4, 0x8, 0x6, 0x1}, &(0x7f0000000640)={r5, r6+10000000}, &(0x7f00000009c0)={&(0x7f0000000680), 0x8}) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10) syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000180)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x10, &(0x7f00000003c0)=ANY=[], 0x3, 0x1507, &(0x7f0000001b00)="$eJzs3Au4TtX2MPAx5pyLTdKb5D7HHIs3bUyXJLkkySVJkiNJbgkhSZKQ3G9JSELuSe4huYXkfr/lniRJkiQkJJnfo9P5Oud0/v++8z/n+zzf2eP3POt553jXGnPNucfe+11z7WevbzoMqVy3SoXazAz/EvzzS3cASAGA/gBwHQBEAFAiS4ksV/Zn0Nj9XzuJ+Pd6aPrVHoG4mqT+aZvUP22T+qdtUv+0Teqftkn90zapf9om9RciLds+I+f1sqXdTe7/p2Xy+f8f5GjhsV9sLHxjx38iReqftkn90zapf9om9U/bpP5pm9Q/bZP6p21SfyHSsv/5vWP528F/wna1v/+EEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQqQNF8JvDAD85VUIIYQQQgghhBD/OUL6qz0CIYQQQgghhBBC/N+HoECDgQjSQXpIgQyQEa6BTHAtZIbrIAHXQxa4AbLCjZANskMOyAm5IDfkAQsEDhhiyAv5IAk3QX64GVKhABSEQuChMBSBolAMboHicCuUgNugJNwOpaA0lIGycAeUgzuhPNwFFeBuqAiVoDJUgXugKtwL1eA+qA73Qw14AGrCg1AL/gS14SGoAw9DXXgE6sGjUB8aQENoBI3/R/kvQBd4EbpCN+gOPaAn9ILe0Af6Qj/oDy/BAHgZBsIrMAgGwxB4FYbCazAMXofhMAJGwhswCkbDGBgL42A8TIA3YSK8BZPgbZgMU2AqTIPpMANmwjswC2bDHHgX5sJ7MA/mwwJYCIvgfVgMS2ApfADL4ENYDitgJayC1bAG1sI6WA8bYCNsgs2wBbbCNtgOH8EO2Am7YDfsgb2wDz6G/fAJHIBP4SB89k/mn/+7/I4ICKhQoUGD6TAdpmAKZsSMmAkzYWbMjAlMYBbMglkxK2bDbJgDc2AuzIV5MA8SEjIy5sW8mMQk5sf8mIqpWBALokePRbAIFsNbsDgWxxJYAktiSSyFpbE0lsWyWA7LYXksjxWwAlbEilgZK+M9eA/ei9WwGlbH6lgDa2BNrIm1sBbWxtpYB+tgXayL9bAe1sf62BAbYmNsjE2wCTbFptgcm2MLbIGtsBW2xtbYBttgW2yL7bAdtsf22AE7YEfshJ3wBXwBX8QXsRtWVD2wJ/bE3tgb+2I/7Icv4QB8GV/GV3AQDsYh+Cq+iq/hMDyHw3EEjsSRWE6NxjE4FlmNxwk4ASfiRJyEk3AyTsEpOA2n4wyciTNxFs7G2fguzsX38D2cj/NxIS7CRbgYl+BSXIrL8DwuxxW4ElfhalyDq3Edrsd1uBE34UbcgltwG27Dj/Aj3Ik7cTfuxr1oAPBj/AQ/wUF4EA/iITyEh/EwHsEjeBSP4jE8hsfxOJ7AE3gST+IpPI1n8DSexbN4Ds/jBbyAF/EiXsLncn1VZ2+BDYNAXWGUUelUOpWiUlRGlVFlUplUZpVZJVRCZVFZVFaVVWVT2VQOlUPlUrlUHpVHkSLFKlZ5VV6VVEmVX+VXqSpVFVQFlVdeFVFFVDFVTBVXxVUJdZsqqW5XpVRp1cyXVWVVOdXcl1d3qQqqgqqoKqnKqoqqoqqqqqqaqqaqq+qqhqqhaqoHVS3VA/viQ+pKZeqqwVhPDcH6qoFqqBqp1/Ax1UQNw6aqmWqunlAjcDi2Uk18a/WUaqPGYFv1jBqLz6r2ajx2UM+rjqqT6qxeUF1UU99VdVOTsYfqqaZhb9VH9VX91CyspK5UrLJ6RQ1Sg9UQ9apaiK+pYep1NVyNUCPVG2qUGq3GqLFqnBqvJqg31UT1lpqk3laT1RQ1VU1T09UMNVO9o2ap2WqOelfNVe+peWq+WqAWqkXqfbVYLVFL1QdqmfpQLVcr1Eq1Sq1Wa9RatU6tVxvURrVJbVZb1Fa1TW1XH6kdaqfapXarPWqv2qc+VvvVJ+qA+lQdVJ+pQ+pzdVh9oY6oL9VR9ZU6pr5Wx9U36oT6Vp1U36lT6rQ6o75XZ9UP6pw6ry6oH9VF9ZO6pH5Wl1VQoFErrbXRkU6n0+sUnUFn1NfoTPpanVlfpxP6ep1F36Cz6ht1Np1d59A5dS6dW+fRVpN2mnWs8+p8Oqlv0vn1zTpVF9AFdSHtdWFdRBfVxfQturi+VZfQt+mS+nZdSpfWZXRZfYcup+/U5fVduoK+W1fUlXRlXUXfo6vqe3U1fZ+uru/XNfQDuqZ+UNfSf9K19UO6jn5Y19WP6Hr6UV1fN9ANdSPdWD+mm+jHdVPdTDfXT+gWuqVupZ/UrfVTuo1+WrfVz+h2+lndXj+nO+jndUfdSXfWP+vLOuiuupvurnvonrqX7q376L66n+6vX9ID9Mt6oH5FD9KD9RD9qh6qX9PD9Ot6uB6hR+o39Cg9Wo/RY/U4PV5P0G/qifotPUm/rSfrKXqqnqan6xm67689zfk/yH/rH+QP/OXs2/R2/ZHeoXfqXXq33qP36n16n96v9+sD+oA+qA/qQ/qQPqwP6yP6iD6qj+pj+pg+ro/rE/qEPqlP6lP6tP5Rf6/P6h/0OX1en9c/6ov6or7069cADBpltDEmMulMepNiMpiM5hqTyVxrMpvrTMJcb7KYG0xWc6PJZrKbHCanyWVymzzGGjLOsIlNXpPPJM1N+OsFhSloChlvCpsipug/k2/ym5tNqinwN/l/NL7GprFpYpqYpqapaW6amxamhWllWpnWprVpY9qYtqataWfamfamvelgOpiOpqPpbDqbLqaL6Wq6mu6mu+lpepnepo/pa/qZ/uYlM8AMMAPNQDPIDDJDzBAz1Aw1w8wwM9wMNyPNSDPKjDJjzBgzzowzE8wEM9FMNJPMJDPZTDZTzVQz3Uw3M81MM8vMMnPMHDPXzDXzzDyzwCwwi8wis9gsNkvNUrPMLDPLzQqzwqwyq8was8asM+vMBrPBbDKbzBazxSw32812s8PsMLvMLrPH7DH7zD6z3+w3B8wBc9AcNIfMIXPYHDZHzBFz1Bw1x8wxc9wcNyfMCXPSnDSnzClzxpwxZ81Zc86cMxfMBXPRXDSXzCVz2Vy+ctkXqUhFJjJRuihdlBKlRBmjjFGmKFOUOcocJaJElCXKEmWNboyyRdmjHFHOKFeUO8oT2YgiF3EUR3mjfFEyuinKH90cpUYFooJRochHhaMiUdGoWHRLVDy6NSoR3RaVjG6PSkWlozJR2eiOqFx0Z1Q+uiuqEN0dVYwqRZWjKtE9UdXo3qhadF9UPbo/qhE9ENWMHoxqRX+KakcPRXWih6O60SNRvejRqH7UIGoYNYoa/1v7D+Fc9sd9V9vNdrc9bE/by/a2fWxf28/2ty/ZAfZlO9C+YgfZwXaIfdUOta/ZYfZ1O9yOsCPtG3aUHW3H2LF2nB1vJ9g37UT7lp1k37aT7RQ71U6z0+0MO9O+Y2fZ2XaOfdfOte/ZeXa+XWAX2kX2fbvYLrFL7Qd2mf3QLrcr7Eq7yq62a+xau86utxvsRrvJbrZb7Fa7zW63H9kddqfdZXfbPXav3Wc/tvvtJ/aA/dQetJ/ZQ/Zze9h+YY/YL+1R+5U9Zr+2x+039oT91p6039lT9rQ9Y7+3Z+0P9pw9by/YH+1F+5O9ZH+2l224cnF/5eOdDBlKR+kohVIoI2WkTJSJMlNmSlCCslAWykpZKRtloxyUg3JRLspDeegKJqa8lJeSlKT8lJ9SKZUKUkHy5KkIFaFiVIyKU3EqQSWoJJWkUlSKylAZuoPuoDvpTrqL7qK76W6qRJWoClWhqlSVqlE1qk7VqQbVoJpUk2pRLapNtakO1aG6VJfqUT2qT/WpITWkxtSYmlATakpNqTk1pxbUglpRK2pNrakNtaG21JbaUTtqT+2pA3WgjtSROlNn6kJdqCt1pe7UnXpST+pNvakv9aX+1J8G0AAaSANpEA2iITSEhtJQGkbDaDiNoJH0Bo2i0TSGxtI4Gk8TaAJNpIk0iSbRZJpMU2kqTafpNJNm0iyaRXNoDs2luTSP5tECWkCLaBEtpsW0lJbSMlpGy2k5raSVtJpW01paS+tpPW2kjbSZNtNW2krbaTvtoB20i3bRHtpD+2gf7af9dIAO0EE6SIfoUEAAOkJH6CgdpWN0jI7TcTpBJ+gknaRTdIrO0Bk6S2fpHJ2jC3SBLtJPdIl+pssUKMVlcBndNS6Tu9Zldte5v49zuJwul8vt8jjrsrnsfxOTcy7VFXAF/7LEdEVdasqV10LOu8KuiCvqSrnSrowr6+5w5dydrvzv4qruXlfN3eequ/tdFXfP38Q13AOupnvE1XKPutqugavjGrm67hFXzz3q6rsGrqFr5Fq4lq6Ve9K1dk+5Nu7p38WL3RK33m1wG90mt9994i64H91x94276H5yXV0319+95Aa4l91A94ob5Ab/Lh7p3nCj3Gg3xo1149z438VT3TQ33c1wM907bpab/bt4kXvfzXVL3Tw33y1wC3+Jr4xpqfvALXMfuuVuhVvpVrnVbo1b69b977GuclvcVrfN7XMfux1up9vldrs9bu8v8ZV5HHCfuoPuM3fMfe0Ouy/cEXfCHXVf/RJfmd8J96076b5zp9xpd8Z97866H9w5d/7K/MOVuX/vfnaXXXDAyIo1G444HafnFM7AGfkazsTXcma+jhN8PWfhGzgr38jZODvn4Jyci3NzHrZM7Jg55rycj5N8E+fnmzmVC3BBLsSeC3MRLsrF+BYuzrdyCb6NS/LtXIpLcxkuy3dwOb6Ty/NdXIHv5opciStzFb6Hq/K9XI3v4+p8P9fgB7gmP8i1+E9cmx/iOvww1+VHuB4/yvW5ATfkRtyYH+Mm/Dg35WbcnJ/gFtySW/GT3Jqf4jb8NLflZ7gdP8vt+TnuwM9zR+7EnfkF7sIvclfuxt25B/fkXtyb+3Bf7sf9+SUewC/zQH6FB/FgHsKv8lB+jYfx6zycR/BIfoNH8Wgew2N5HI/nCfwmT+S3eBK/zZN5Ck/laTydZ/BMfodn8Wyew+/yXH6P5/F8XsALeRG/z4t5CS/lD3gZf8jLeQWv5FW8mtfwWl7H63kDb+RNvJm38Fbextv5I97BO3kX7+Y9vJf38ce8nzP8+gP3GR/iz/kwf8FH+Es+yl/xMf6aj/M3fIK/5ZP8HZ/i03yGv+ez/AOf4/N8gX/ki/wTX+Kf+TIHhhhjFevYxFGcLk4fp8QZ4ozxNXGm+No4c3xdnIivj7PEN8RZ4xvjbHH2OEecM84V547zxDam2MUcx3HeOF+cjG+K88c3x6lxgbhgXCj2ceG4SFw0LhbfEhePb41LxLfFJePb41Jx6fiR+8vGd8Tl4jvj8vFdcYX47rhiXCmuHFeJ74mrxvfG1eL74urx/XHx+IG4ZvxgDL/+v0qd+OG4bvxIXC9+NK4fN4gbxo3ixvFjcZP48bhp3CxuHj8Rt4hbxq3iJ+PW8VNxm/jpP9zfPe4R94x7xb3iEO7TC5ILk4uS7ycXJ5cklyY/SC5LfphcnlyRXJlclVydXJNcm1yXXJ/ckNyY3JTcnNyS3JrclgyhSnrw6JXX3vjIp/PpfYrP4DP6a3wmf63P7K/zCX+9z+Jv8Fn9jT6bz+5z+Jw+l8/t83jryTvPPvZ5fT6f9Df5/P5mn+oL+IK+kPe+sC/iG/nGvrFv4h/3TX0z39w/4Z/wLX1L/6R/0j/l2/infVv/jG/nn/Xt/XP+Of+87+g7+c7+Bd/Fv+i7+m6+u+/ue/qevrfv7fv6vr6/7+8H+AF+oB/oB/lBfogf4of6oX6YH+aH++F+pB/pR/lRfowf48f5cX6Cn+An+ol+kp/kIwCY6qf66X66n+ln+ll+lp/j5/i5qXP9PD/PL/AL/CK/yC/2i/1Sv9Qv88v8cr/cr/Qr/Wq/2q/1a/16v95v9Bv9Zr/Zb/Vb/Xa/3e/wO/wuv8vv8Xv8Pr/P7/f7/QF/wB/0B/0hf8gf9of9Ef+lP+q/8sf81/64/8af8N/6k/47f8qf9mf89/6s/8Gf8+f9Bf+jv+h/8pf8z/6yD35C4s3ExMRbiUmJtxOTE1MSUxPTEtMTMxIzE+8kZiVmJ+Yk3k3MTbyXmJeYn1iQWJhYlHg/sTixJLE08UFiWeLDxPLEisTKxKrE6sQaAyH3jjjkDflCMtwU8oebQ2ooEAqGQsGHwqFIKBqKhVtC8XBrKBFuCyXD7aFUKB3KhEdD/dAgNAyNQuPwWGgSHg9NQ7PQPDwRWoSWoVV4MrQOT4U24enQNjwT2oVnQ/vwXOgQng8dQ6fQObwQuoQXQ9fQLXQPPULP0Cv0Dn1C39Av9A8vhQHh5TAwvBIGhcFhSHg1DA2vhWHh9TA8jAgjwxthVBgdxoSxYVwYHyaEN8PE8FaYFN4Ok8OUMDVMC9PDjDAzvBNmhdlhTng3zA3vhXlhflgQFoZF4f2wOCwJS8MHYVn4MCwPK8LKsCqsDmvC2rAurA8bwsawKWwOW8LWsC1sDx+FHWFn2BV2hz1hb9gXPg77wyfhQPg0HAyfhUPh83A4fBGOhC/D0fBVOBa+DsfDN+FE+DacDN+FU+F0OBO+D2fDD+FcOB8uhB/DxfBTuBR+DpdDCP/MXe9K/85b6EIIIYQQ/x/p9Qf7e/yD9wwAqF/bP4UQrt2Z8+hf79cAsDnbn9t9VK4WCQB4qluHh/6yVazYvXv3X49driHKNx8AEn93gl/jFdAcWkJraAbF/uH4+qhOF/kP+k/eBpDxr3JS4Lf4t/4//y/6f+yJkYtLxhey/Df9zwdIzfdbzpVV+F/iFdD8l8cpNIPi/0X/2Zv8wfgzfDEBoOlf5WQCgKYZ/n78ReBxeBpa/82RQgghhBBCCCHEn/VRZdr90fr5yvo81189FDA9/Bb/0fpcCCGEEEIIIYQQV9+znTo/+Vjr1s3aSUMa0khjjZb/zTFX+zeTEEIIIYQQ4t/tt4v+397LcDUHJIQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCpEH/L540drXnKIQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQlxt/ysAAP//KWozhQ==") bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_access(r8, &(0x7f0000000580)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f725d256c6f67645f7661725f72756e5f3a7310202f7573722f8969552f74656c6570612d6e5f5b78a411b17468792f6d697377696f6e2d636f6e74726f6c2d352030303030303030303030303030a445303037303208a25aa28ac13b3e3c3607877bc3f03c6b8977e0ff9fcb3866eb2aef2f59e1e0014e1fb366a4001c1baf9c40934a929eeec20e8dac1f27a27ec8448d1dd6ff86fceef38c6963fbbeca115e318b2e"], 0x5f) 24.080078061s ago: executing program 33 (id=1161): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fstat(0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000590000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r3}, 0x0, &(0x7f0000000340)=r4}, 0x20) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) pselect6(0x40, &(0x7f00000001c0)={0x2, 0x80, 0x1, 0x0, 0x6656142a, 0x5c4, 0x0, 0x8000000000000001}, 0x0, &(0x7f00000003c0)={0x98cf, 0x7, 0xfffffffffffffff9, 0x4, 0x4, 0x8, 0x6, 0x1}, &(0x7f0000000640)={r5, r6+10000000}, &(0x7f00000009c0)={&(0x7f0000000680), 0x8}) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10) syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000180)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x10, &(0x7f00000003c0)=ANY=[], 0x3, 0x1507, &(0x7f0000001b00)="$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") bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_access(r8, &(0x7f0000000580)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f725d256c6f67645f7661725f72756e5f3a7310202f7573722f8969552f74656c6570612d6e5f5b78a411b17468792f6d697377696f6e2d636f6e74726f6c2d352030303030303030303030303030a445303037303208a25aa28ac13b3e3c3607877bc3f03c6b8977e0ff9fcb3866eb2aef2f59e1e0014e1fb366a4001c1baf9c40934a929eeec20e8dac1f27a27ec8448d1dd6ff86fceef38c6963fbbeca115e318b2e"], 0x5f) 12.214099813s ago: executing program 2 (id=1228): r0 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) r5 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000080), 0x0}, 0x20) r6 = inotify_init1(0x0) inotify_add_watch(r6, &(0x7f0000000000)='./file0\x00', 0x42000122) write$binfmt_elf32(r5, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030006000000000000000000380000000000000000191bda0000200001000000000280000000000003"], 0x69) close(r5) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb01001800000000000000680000006800000002000000000000000100000d0a0000000001000000000000000000000900000d"], &(0x7f0000000f40)=""/4080, 0x82, 0xff0, 0x1}, 0x28) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)}], 0x1) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x24, 0x0, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x3}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8000}]}, 0x24}, 0x1, 0x0, 0x0, 0x2400d090}, 0x80) keyctl$set_reqkey_keyring(0xe, 0x1) 9.471112672s ago: executing program 2 (id=1243): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000a40)={0xa56}, 0x8) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x200, 0x80, 0x20000, 0x0, 0x0, 0x8}, 0x45) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r1, 0x0) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x66, 0x0, &(0x7f00000000c0)) 9.357143104s ago: executing program 2 (id=1247): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r4}, 0x18) inotify_add_watch(0xffffffffffffffff, 0x0, 0x42000773) syz_pidfd_open(r1, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r6 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER(r6, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYRES8=r3], 0xd4}, 0x1, 0x0, 0x0, 0x4}, 0x0) write$uinput_user_dev(r0, &(0x7f0000000a80)={'syz1\x00', {0xfffd}, 0x0, [0x0, 0x0, 0x0, 0x4, 0x80, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400], [0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0xbaa, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x185], [0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x9, 0x0, 0x3cc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x88, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x4, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffffffe, 0x4a9c, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2ec2, 0x0, 0x0, 0x4]}, 0x45c) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r7, 0x0, 0x60, &(0x7f0000000a40)={'filter\x00', 0x7, 0x4, 0x3e8, 0xe8, 0x300, 0x0, 0xe8, 0x300, 0x300, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x1000, 0xc0, 0x3}}}, {{@uncond, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x7, 'syz0\x00', {0x10000}}}}, {{@arp={@broadcast, @rand_addr=0x64010100, 0x0, 0x0, 0x5, 0xd, {@empty, {[0xff, 0x0, 0xff, 0xff, 0x0, 0xff]}}, {@empty, {[0x0, 0x0, 0x0, 0xff]}}, 0xfffa, 0x6, 0x7, 0x0, 0xb2, 0x6, 'veth1_to_bond\x00', 'lo\x00', {}, {0xff}, 0x0, 0x210}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@multicast, @empty, @multicast1, @remote, 0xd, 0x1}}}], {{'\x00', 0xaf, 0xe8}, {0x28}}}}, 0x497) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x16) socket$packet(0x11, 0x2, 0x300) ioctl$UI_DEV_CREATE(r0, 0x5501) r8 = inotify_init() inotify_add_watch(r8, &(0x7f0000000300)='./file0\x00', 0x81000c01) 8.025051494s ago: executing program 5 (id=1248): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) fstat(0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r2}, 0x0, &(0x7f0000000340)=r3}, 0x20) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) pselect6(0x40, &(0x7f00000001c0)={0x2, 0x80, 0x1, 0x0, 0x6656142a, 0x5c4, 0x0, 0x8000000000000001}, 0x0, 0x0, &(0x7f0000000640)={r4, r5+10000000}, &(0x7f00000009c0)={&(0x7f0000000680), 0x8}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$selinux_access(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f725d256c6f67645f7661725f72756e5f3a7310202f7573722f8969552f74656c6570612d6e5f5b78a411b17468792f6d697377696f6e2d636f6e74726f6c2d352030303030303030303030303030a445303037303208a25aa28ac13b3e3c3607877bc3f03c6b8977e0ff9fcb3866eb2aef2f59e1e0014e1fb366a4001c1baf9c40934a929eeec20e8dac1f27a27ec8448d1dd6ff86fceef38c6963fbbeca115e318b2e"], 0x5f) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TCSETS(r7, 0x40045431, &(0x7f0000001200)={0x0, 0xffffff1e, 0xffffffff, 0x4, 0x16, "001bf100eeff0000a2c2000100000000002000"}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000007c0)=ANY=[@ANYBLOB="380100001000010003000000fddbdf25ac1414aa000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000016000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff000000000000000000000000040000003c000000ac1414bb00000000000000080000000004000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffffffffffff0000000000000100000000000000ff007b0000000000000000225a7e48fe0e7df60000000000000000200000000000000000000000000000faffffff000000000000000000000000000000000a0000006b0000000000000048000100686d61632873686131290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000305cc46157f23f130546e69515f9f09f2e180c83894e60dd31c1d0f2f62e62583f5460ddaa0289f1b95d030b586006fe9797110c427a48b8fd789d8c495fada1983780871ceac9ed3a8a9ee66b6f42155a3a8913c60586e46194858ab83f43cc7fef1831bf4781f41fd75035251d8b73dd5112e7e66d19536353d94304e3b6d05908f7b43db3299864d5282e07f5c176d26abd6c78"], 0x138}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) 7.902779965s ago: executing program 2 (id=1252): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7f, 0x8b}, 0x0) syslog(0x4, 0xfffffffffffffffc, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r4}, 0x18) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x21, 0x0, 0x20) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00'}, 0x18) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, 0x0, 0x40088c4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) add_key$fscrypt_v1(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(0x0, &(0x7f0000000440)={'fscrypt:', @desc2}, 0x0, 0x0, 0xfffffffffffffffe) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x11, &(0x7f0000000100)={[{@noblock_validity}, {@stripe={'stripe', 0x3d, 0x2}}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x71d}}, {@abort}]}, 0x1, 0x610, &(0x7f0000000a40)="$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") prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) inotify_init() 2.646537912s ago: executing program 5 (id=1253): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) mkdir(&(0x7f0000000140)='./control\x00', 0x5) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000200)='kmem_cache_free\x00'}, 0x18) close(r0) r1 = inotify_init1(0x800) fcntl$setstatus(r0, 0x4, 0x2c00) r2 = gettid() fcntl$setown(r0, 0x8, r2) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000040)={[0xffffffffffff7ff8]}, 0x0, 0x0, 0x8) inotify_add_watch(r1, &(0x7f0000000180)='./control\x00', 0xa4000960) rmdir(&(0x7f0000000100)='./control\x00') futex(&(0x7f0000000040)=0x1, 0x1, 0x0, 0x0, 0x0, 0x1) 2.571462382s ago: executing program 2 (id=1254): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000d7c900000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f00000003c0)=""/171}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0xf) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x14) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x200000, {0x0, 0x0, 0x0, r5, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x2, 0x0, 0x0, {{}, {0x0, 0x0, 0x1}}}]}]}]}}]}, 0x54}}, 0x0) 2.364508316s ago: executing program 6 (id=1256): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000001540)='./file1\x00', 0x2000000, &(0x7f0000000800)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c00a37e941910c27d130b55ac2d5f7a61e59ec6d5de07239091924c32eeb367d16409d6d3ec1fb755f9a7989ebc4e96918e268f0b7acebf67c07bc4731200f87d27b5e9e61000e70f0c6a4e2432073d0d3e18f864e9ef64637d14e548355376ec821c05008685c055a367ea51b653eff6581710e72f1e7e4d9d1607d004d9ed64f6c3824bc667bd24219163c60803099f985567be0d978e301b4f6611628606afadb04e0158f42f1853f2e8598a5e250e0f4c9a"], 0x1, 0x1506, &(0x7f0000002ac0)="$eJzs3QnYj9XWMPC19t43D0n/JPNee938k2GTJBmSZEiSJEkyJSRJjiQkHjIlIQmZk8whmUIyz1PmJDmSJAkJSfZ3PXXOcc7b+d7e853zft73POt3Xfd173Xte+177//ifw/Xcz3PNx0HV61frVJdZoZ/Cv66SwWAFADoBwDXAEAEAKWylcqW1p9JY+o/dxLxr/XQtCs9A3ElSf3TN6l/+ib1T9+k/umb1D99k/qnb1L/9E3qL0R6tm167mtlS7/bP//+P+XXnbz//19Irv/pm9T/382ZTP/I0VL/fyeXQgj/WIbUP32T+qdvUv/0Teqfvkn90zepvxDp2ZV+/yzbld2u9L8/IYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBDpw/lwmQGAtH10pSclhBBCCCGEEEKIf6mQ8UrPQAghhBBCCCGEEP/9EBRoMBBBBsgIKZAJMsNVkAWuhqxwDSTgWsgG10F2uB5yQE7IBbkhD+SFfGCBwAFDDPmhACThBigIN0IhKAxFoCh4KAbF4SYoATdDSbgFSsGtUBpugzJQFspBebgdKsAdUBHuhEpwF1SGKlAVqsHdUB3ugRpwL9SE+6AW3A+14QGoAw9CXXgI6sHDUB8egQbwKDSERtAYmkDT/6f8F6ArvAjdoDukQg/oCS9BL+gNfaAv9IOXoT+8AgPgVRgIg2AwvAZD4HUYCm/AMBgOI+BNGAmjYDSMgbEwDsbDWzAB3oaJ8A5MgskwBabCNJgOM+BdmAmzYDa8B3PgfZgL82A+LICF8AEsgsWwBD6EpfARLIPlsAJWwipYDWtgLayD9bABNsIm2AxbYCtsg49hO+yAnbALdsMe2AufwD74FPbDZ3AAPv8H88/9h/xOCAioUKFBgxkwA6ZgCmbGzJgFs2BWzIoJTGA2zIbZMTvmwByYC3NhHsyD+TAfEhIyMubH/JjEJBbEglgIC2ERLIIePRbH4lgCb8aSWBJLYSksjaWxDJbFslgey2MFrIAVsSJWwkpYGStjVayKd+PdeA/WwBpYE2tiLayFtbE21sE6WBfrYj2sh/WxPjbABtgQG2JjbIxNsSk2w2bYHJtjS2yJrbAVtsbW2AbbYFtsi+2wHbbH9tgBO2BH7IidsDN2xhfwBXwRX8TuWFn1wJ7YE3thL+yDfbEvvoz98RV8BV/FgTgIB+Nr+Bq+jkPxLA7D4TgCR2AFNQpH4xhkNQ7H43icgBNwIk7ESTgZJ+NUnIbTcQbOwJk4C2fhezgH38f3cR7OwwW4EBfiIlyMS3AJLsVzuAyX4wpciatwNa7CtbgO1+IG3IgbcDNuxq24FT/Gj3EH7sBduAv34B78BD/BT/FTHIgH8AAexIN4CA/hYTyMR/AIHsWjeAyP4XE8jifwBJ7EU3gaT+EZPINn8Ryex/N4AS/gRbyIl/BS2n9+lcYoozKoDCpFpajMKrPKorKorCqrSqiEyqayqewqu8qhcqhcKpfKo/KofCqfIkWKVazyq/wqqZKqoCqoCqlCqogqorzyqrgqrkqoEqqkKqlKqVtVaXWbKqPKqha+vCqvKqiWvqK6U1VSlVRlVUVVVdVUNVVdVVc1VA1VU9VUtVQtVVs9oOqoHtgHH1JplamvBmEDNRgbqkaqsWqiXsfHVDM1FJurFqqlekINx2HYWjXzbdTTqq0aje3UH9QYfFZ1UOOwo3pedVKdVRf1guqqmvtuqruahD1UTzUVe6neqo/qq2ZiFZVWsarqVTVQDVKD1WtqAb6uhqo31DA1XI1Qb6qRapQarcaosWqcGq/eUhPU22qiekdNUpPVFDVVTVPT1Yy0r1Y1S81W76k56n01V81T89UCtVB9oBapxWqJ+lAtVR+pZWq5WqFWqlVqtVqj1qp1ar3aoDaqTRGoLWqr2qY+VtvVDrVT7VK71R61V32i9qlP1X71mTqgPlcH1R/VIfWFOqy+VEfUV+qo+lodU9+o4+pbdUJ9p06qU+q0+l6dUT+os+qcOq9+VBfUT+qi+lldUkGBRq201kZHOoPOqFN0Jp1ZX6Wz6Kt1Vn2NTuhrdTZ9nc6ur9c5dE6dS+fWeXRenU9bTdpp1rHOrwvopL5BF9Q36kK6sC6ii2qvi+ni+iZdQt+sS+pbdCl9qy6tb9NldFldTpfXt+sK+g5dUd+pK+m7dGVdRVfV1fTdurq+R9fQ9+qa+j5dS9+va+sHdB39oK6rH9L19MO6vn5EN9CP6oa6kW6sm+im+jHdTD+um+sWuqV+QrfST+rW+indRj+t2+pndDv9B91eP6s76Od0R/287qQ76y76Z31JB91Nd9epuofuqV/SvXRv3Uf31f30y7q/fkUP0K/qgXqQHqxf00P063qofkMP08P1CP2mHqlH6dF6jB6rx+nx+i09Qb+tJ+p39CQ9WU/RU/U0PV33+dNIs/8L+W//nfwBv5x9q96mP9bb9Q69U+/Su/UevVfv1fv0Pr1f79cH9AF9UB/Uh/QhfVgf1kf0EX1UH9XH9DF9XB/XJ/QJfVKf0j/q7/UZ/YM+q8/pc/pHfUFf0Bf/9BmAQaOMNsZEJoPJaFJMJpPZXGWymKtNVnONSZhrTTZznclurjc5TE6Ty+Q2eUxek89YQ8YZNrHJbwqYpLnBFDQ3mkKmsCliihpvipni5qZ/Ov/35tfUNDXNTDPT3DQ3LU1L08q0Mq1Na9PGtDFtTVvTzrQz7U1708F0MB1NR9PJdDJdTBfT1XQ1AQBSTarpaV4yvUxv08f0Nf3My6a/6W8GmAFmoBloBpvBZogZYoaaoWaYGWZGmBFmpBlpRpvRZqwZa8ab8WaCmWAmmolmkplkppgpZpqZZmaYGWammWlmm9lmjplj5pq5Zr6ZbxaahWaRWWSWmCVmqVlqlpnlZrlZaVaa1Wa1WWvWmvVmvdloNprNZrNZZv78A5o7zU6z2+w2e81es8/sM/vNfnPAHDAHzUFzyBwyh81hc8QcMUfNUXPMHDPHzXFzwpwwJ81Jc9qcNmfMGXPWnDXnzXlzwVwwF81Fc8lcSrvti1SkIhOZKEOUIUqJUqLMUeYoS5QlyhpljRJRIsoWZYuyR9dHOaKcUa4od5Qnyhvli2xEkYs4iqP8UYEoGd0QFYxujApFhaMiUdHIR8Wi4tFNUYno5qhkdEtUKro1Kh3dFpWJykblovLR7VGF6I6oYnRnVCm6K6ocVYmqRtWiu6Pq0T1RjejeqGZ0X1Qruj+qHT0Q1YkejOpGD0X1ooej+tEjUYPo0ahh1ChqHDWJmv5Lxw/hbM7HfTfb3abaHranfcn2sr1tH9vX9rMv2/72FTvAvmoH2kF2sH3NDrGv26H2DTvMDrcj7Jt2pB1lR9sxdqwdZ8fbt+wE+7adaN+xk+xkO8VOtdPsdDvDvmtn2ll2tn3PzrHv27l2np1vF9iF9gO7yC62S+yHdqn9yC6zy+0Ku9KusqvtGrvWrrPr7Qa70W6ym+0Wu9Vusx/b7XaH3Wl32d12j91rP7H77Kd2v/3MHrCf24P2j/aQ/cIetl/aI/Yre9R+bY/Zb+xx+609Yb+zJ+0pe9p+b8/YH+xZe86etz/aC/Yne9H+bC/ZkHZzn3Z5J0OGMlAGSqEUykyZKQtloayUlRKUoGyUjbJTdspBOSgX5aI8lIfyUT5Kw8SUn/JTkpJUkApSISpERagIefJUnIpTCSpBJakklaJSVJpKUxkqQ+Uo7aJ5O91Bd9CddCfdRXdRFapC1agaVafqVINqUE2qSbWoFtWm2lSH6lBdqkv1qB7Vp/rUgBpQQ2pIjakxNaWm1IyaUXNqTi2pJbWiVtSaWlMbakNtqS21o3bUntpTB+pAHakjdaJO1IW6UFfqSt2oG6VSKvWkntSLelEf6kP9qB/1p/40gAbQQBpIg2kwDaEhNJSG0jAaTiPoTRpJo2g0jaGxNI7G03iaQBNoIk2kSTSJptAUmkbTaAbNoJk0k2bTbJpDc2guzaX5NJ8W0kJaRItoCS2hpbSUltEyWkEraBWtojW0htbROtpAG2gTbaIttIW20TbaTttpJ+2k3bSb9tJe2kf7aD/tpwN0gA7SQTpEh+gwHaYjdISO0lE6RsfoOB2nE3SCTtJJPE2n6QydobN0ls7TebpAP9FF+pkuUaAUl8lldle5LO5ql9Vd41Jcpu4A8Jc4l8vt8ri8Lp+zLofL+TcxOecKucKuiCvqvCvmirubfhOX6VHWlXPl3e2ugrvDVXRl3N/G1d09roa719V097lq7u6/iWu5+11t94ir4x51dV0jV881cfXdI66Be9Q1dI1cY9fEtXJPutbuKdfGPe3aumd+Ey9yi906t95tcBvdPvepO+9+dMfcN+6C+8l1c91dP/ey6+9ecQPcq26gG/SbeIR70410o9xoN8aNdeN+E09xU900N93NcO+6mW7Wb+KF7gM3xy1xc908N98t+CVOm9MS96Fb6j5yy9xyt8KtdKvcarfGrf3LXFe6zW6L2+r2uk/cdrfD7XS73G6355c4bR373WfugPvcHXVfu0PuC3fYHXdH3Fe/xGnrO+6+dSfcd+6kO+VOu+/dGfeDO+vO/bL+tLV/7352l1xwwMiKNRuOOANn5BTOxJn5Ks7CV3NWvoYTfC1n4+s4O1/POTgn5+LcnIfzcj62TOyYOeb8XICTfAMX5Bu5EBfmIlyUPRfj4nwTl+CbuSTfwqX4Vi7Nt3EZLsvluDzfzhX4Dq7Id3IlvosrcxWuytX4bq7O93ANvpdr8n1ci+/n2vwA1+EHuS4/xPX4Ya7Pj3ADfpQbciNuzE24KT/Gzfhxbs4tuCU/wa34SW7NT3Ebfprb8jPcjv/A7flZ7sDPcUd+njtxZ+7CL3BXfpG7cXdO5R7ck1/iXtyb+3Bf7scvc39+hQfwqzyQB/Fgfo2H8Os8lN/gYTycR/CbPJJH8Wgew2N5HI/nt3gCv80T+R2exJN5Ck/laTydZ/C7PJNn8Wx+j+fw+zyX5/F8XsAL+QNexIt5CX/IS/kjXsbLeQWv5FW8mtfwWl7H63kDb+RNvJm38Fbexh/zdt7BO3kX7+Y9vJc/4X38Ke/nz/gAf84H+Y98iL/gw/wlH+Gv+Ch/zcf4Gz7O3/IJ/o5P8ik+zd/zGf6Bz/I5Ps8/8gX+iS/yz3yJA0OMsYp1bOIozhBnjFPiTHHm+Ko4S3x1nDW+Jk7E18bZ4uvi7PH1cY44Z5wrzh3nifPG+WIbU+xijuM4f1wgTsY3xAXjG+NCceG4SFw09nGxuHh8U1wivjkuGd8Sl4pvjUvHt8Vl4rJxubh8fHtcIb4jrhjfGVeK74orx1XiqnG1+O64enxPXCO+N64Z3xeXjO+Pa8cPxHXiB+O68UNxvfjhuH78SNwgfjRuGDeKG8dN4qbxY3Gz+PG4edwibhk/EbeKn4xbx0/FbeKn47bxM7/bnxr3iHvGL8UvxSHcq+cnFyQXJj9ILkouTi5JfphcmvwouSy5PLkiuTK5Krk6uSa5NrkuuT65IbkxuSm5ObkluTUZQrWM4NErr73xkc/gM/oUn8ln9lf5LP5qn9Vf4xP+Wp/NX+ez++t9Dp/T5/K5fR6f1+fz1pN3nn3s8/sCPulv8AX9jb6QL+yL+KLe+2K+uG/im/qmvpl/3Df3LXxL/4R/wj/pn/RP+af8076tf8a385Bo75/1Hfxz/jn/vO/kO/su/gXf1b/ou/nuPtWn+p6+p+/le/k+vo/v5/v5/r6/H+AH+IF+oB/sB/shfogf6of6YX6YH+FH+JF+pB/tR/uxfqwf78f7CX6Cn+gn+kl+kp/ip/hpfpqf4Wf4mX6mn+1n+zl+jp/r5/r5fr5f6Bf6RX6RX+KX+KV+qV/ml/kVfoVf5Vf5NX6NX+fX+Q1+g9/kN/ktfovf5rf57X673+l3+t1+t9/r9/p9fp/f7/f7A/6AP+gP+kP+kD/sv/RH/Ff+qP/aH/Pf+OP+W3/Cf+dP+lP+tP/en/E/+LP+nD/vf/QX/E/+ov/ZX/LBj0+8lZiQeDsxMfFOYlJicmJKYmpiWmJ6Ykbi3cTMxKzE7MR7iTmJ9xNzE/MS8xMLEgsTHyQWJRYnliQ+TCxNfJRYllieWJFYmViVWJ0IIe/2OOQPBUIy3BAKhhtDoVA4FAlFgw/FQvFwUygRbg4lwy2hVLg1lA63hTKhbCgXHg0NQ6PQODQJTcNjoVl4PDQPLULL8ERoFZ4MrcNToU14OrQNz4R24Q+hfXg2dAjPhY7h+dApdA5dwguha3gxdAvdQ2roEXqGl0Kv0Dv0CX1Dv/By6B9eCQPCq2FgGBQGh9fCkPB6GBreCMPC8DAivBlGhlFhdBgTxoZxYXx4K0wIb4eJ4Z0wKUwOU8LUMC1MDzPCu2FmmBVmh/fCnPB+mBvmhflhQVgYPgiLwuKwJHwYloaPwrKwPKwIK8OqsDqsCWvDurA+bAgbw6awOWwJW8O28HHYHnaEnWFX2B32hL3hk7AvfBr2h8/CgfB5OBj+GA6FL8Lh8GU4Er4KR8PX4Vj4JhwP34YT4btwMpwKp8P34Uz4IZwN58L58GO4EH4KF8PP4VII4Uq/SRdCCCGE+N9A/05/j/9LjvpTuycAXL0j95H/2L8px6/t3hnztEoAwNPdOz70561y5dTU1D8du0xDVGAeACQu52eAy/FyaAlPQhtoASX+0p/yV+fqrTpf4P9sfIAoeStA5r/KScv/c3x5/Jv/7vp7q1Fz/tPxNUTJeQCFClzOyQSX48vjl/y746eqnM1+Z/xMX4wHaP5XOVngcnx5/OLwODwDbf7mSCGEEEIIIYQQ4le9Vbn2v/d8m/Z8nsdczskIl+O/93wuhBBCCCGEEEKI/1me7dzlqcfatGnRXhr/HY0UAAjX/PpR/0+YjzSk8V9sXOlvJiGEEEIIIcS/2uWb/is9EyGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQIv36//HrxP58rt/7W4NCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCHEv6v/EwAA//8oYjL2") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r3) ioctl$SIOCSIFHWADDR(r3, 0x8b0f, &(0x7f0000000280)={'gretap0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x16, 0x0, 0x76cff5e5, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x18) fcntl$lock(r2, 0x25, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x80000000}) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='./file2\x00') 2.364028716s ago: executing program 2 (id=1257): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_clone(0x0, 0x0, 0x9, 0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountstats\x00') read$FUSE(r2, &(0x7f0000000bc0)={0x2020}, 0xfd3) preadv(r2, &(0x7f00000038c0)=[{&(0x7f0000000040)=""/95, 0x5f}], 0x1, 0x0, 0x0) 1.784494524s ago: executing program 1 (id=1258): syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000080)) 1.728957365s ago: executing program 5 (id=1260): r0 = mmap$KVM_VCPU(&(0x7f0000007000/0x1000)=nil, 0x930, 0x1000002, 0x28031, 0xffffffffffffffff, 0x0) r1 = mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x3000003, 0x28031, 0xffffffffffffffff, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r1, 0x20, &(0x7f0000000240)="fb4149dd033be3ac2cc4a22332fdaa8de0418df24200000000a6ab8031d1dfd92f0000000001ffffffff9610fbff77521ce10d8f6b69d22627e700", 0x0, 0xffffffffffffffca) syz_memcpy_off$KVM_EXIT_HYPERCALL(r0, 0x20, &(0x7f0000000240)="fb4149dd033be3ac2cc4a22332fdaa8de0418df24200000000a6ab8031d1dfd92f0000000001ffffffff9610fbff77521ce10d8f6b69d22627e700", 0x0, 0xffffffffffffffca) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$kvm(0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x4000)=nil, 0x930, 0x4, 0x4f833, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000fde000/0x4000)=nil, 0x4000) mmap$KVM_VCPU(&(0x7f0000007000/0x1000)=nil, 0x930, 0x1000002, 0x28031, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x3000003, 0x28031, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) 1.728851175s ago: executing program 1 (id=1261): mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x0, 0x5c1fd1b656592f1, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000001000/0x2000)=nil, 0x930, 0x2000003, 0x4120932, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = mmap$KVM_VCPU(&(0x7f000000e000/0x4000)=nil, 0x930, 0x3, 0x11, r2, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r3, 0x20, &(0x7f00000002c0)="fb0149dd033be3ac2cc4a29ea6ab8031d1dfd92f00000000010000005a9610fbff67521cd66f8f1f447d3570707cd24b7eebb20700000000000000000000000100", 0x0, 0xffffffffffffffa7) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r2, 0x0) r4 = eventfd2(0x0, 0x0) close(r4) openat$kvm(0xffffff9c, &(0x7f0000000040), 0xa00f2, 0x0) write$eventfd(r4, &(0x7f0000000000), 0xfffffe1e) openat$kvm(0xffffff9c, &(0x7f0000000040), 0x100b31, 0x0) 1.565212847s ago: executing program 5 (id=1263): syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4000, &(0x7f00000000c0), 0x2, 0xbb8, &(0x7f00000017c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file3\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x42) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000100)='./bus\x00', 0x2129c1b, 0x0, 0x4, 0x0, &(0x7f0000000100)) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc2}}) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000200)={0x1, 0x1, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.505660458s ago: executing program 6 (id=1265): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r1, &(0x7f0000000480)={0xa, 0x0, 0x3c000, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x5}, 0x1c) r2 = dup2(r1, r1) sendmmsg$unix(r2, &(0x7f0000008380), 0x400000000000174, 0x4008890) 1.289134461s ago: executing program 5 (id=1266): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='westwood\x00', 0x9) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 1.188461603s ago: executing program 1 (id=1267): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$user(&(0x7f0000000080), &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000540)="0706", 0x2, r0) r2 = add_key$user(&(0x7f0000000180), &(0x7f0000000340)={'syz', 0x3}, &(0x7f0000000140)="04", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f00000001c0)={r2, r1, r2}, 0x0, 0x0, 0x0) 1.155405863s ago: executing program 1 (id=1268): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000000)={[{0x81, 0x200, 0xc2, 0x4f, 0x19, 0x7, 0xc0, 0x1, 0xff, 0x6, 0xc, 0x0, 0x9}, {0xb, 0xa6f3, 0x6, 0x8, 0x9, 0xff, 0x8, 0x3, 0xa, 0x13, 0x1, 0x6, 0x10005}, {0x1fb, 0x7, 0xd, 0x10, 0x25, 0x9, 0x0, 0xfb, 0x4, 0x15, 0x1, 0x3}], 0x9}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x6, 0xfffffffffffffffd, 0x0, 0x10000, 0xfffffffffffffffd, 0x4002004c4, 0x1000, 0x0, 0xfff, 0x10, 0x0, 0x3], 0xeeee8000, 0x2011c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.154840653s ago: executing program 4 (id=1269): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d6c2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @ioapic={0xf000, 0x100, 0x1ff, 0x6, 0x0, [{0x4, 0xbd, 0x5, '\x00', 0x81}, {0x3, 0x71, 0x5, '\x00', 0xc7}, {0x95, 0xc4, 0x6, '\x00', 0x68}, {0x9, 0xf9, 0x4, '\x00', 0x72}, {0x9, 0xfc, 0x10, '\x00', 0x81}, {0xd, 0x8, 0x3, '\x00', 0x8}, {0x9, 0x20, 0x10, '\x00', 0xed}, {0x0, 0x4, 0x5, '\x00', 0xa1}, {0x3, 0x2, 0x7, '\x00', 0x8}, {0x8, 0xe1, 0x7f, '\x00', 0x8}, {0x1, 0xff, 0x2, '\x00', 0x2}, {0xfa, 0x6, 0x10, '\x00', 0xca}, {0x6, 0xe, 0xc, '\x00', 0x7}, {0x3, 0x5, 0x1, '\x00', 0xf2}, {0x7, 0x7, 0xfa, '\x00', 0x9}, {0xff, 0x8, 0x5, '\x00', 0x8f}, {0x80, 0x9, 0x2, '\x00', 0x8}, {0x6, 0x7, 0x8, '\x00', 0x1}, {0x8, 0x3, 0x9, '\x00', 0x7}, {0x5, 0xd, 0xa2, '\x00', 0x3}, {0x1, 0x0, 0x8, '\x00', 0x2}, {0x2, 0x0, 0x7, '\x00', 0xd}, {0x10, 0xf7, 0x8, '\x00', 0x7f}, {0x5, 0x80, 0x8d, '\x00', 0x8}]}}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x0, 0x180, 0x4, 0x10, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x0, 0x1, 0xfffffffffffffffe, 0x5, 0x0, 0xbdb], 0x1, 0x3c4210}) ioctl$KVM_RUN(r3, 0xae80, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x50, &(0x7f00000002c0)=0x2, 0x4) 1.087047274s ago: executing program 1 (id=1270): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x8, 0x4, 0x4, 0xbf22, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x50) 904.478017ms ago: executing program 4 (id=1271): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x17, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x8}}, 0x14}}, 0x8040804) 864.999577ms ago: executing program 4 (id=1272): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, 0x0, 0x0}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat(0xffffffffffffff9c, 0x0, 0x280900, 0x1ac) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00U\x00=\t\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00', @ANYRES32, @ANYBLOB="20000280", @ANYRES32=r0, @ANYBLOB="0000000000000000000000000a000000000000000000001420000100", @ANYRES32], 0x58}}, 0x0) 837.387388ms ago: executing program 4 (id=1273): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r3) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x3c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0x1, 0x6}, [@TCA_NETEM_DELAY_DIST={0x1d, 0x2, "5bf6490be9c3a165c6e1fcedcadf53535ff3312fc7c7eaadc3"}]}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r6, {}, {0x2, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0xd, 0x51, 0x9, 0x643b, 0x8, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 768.373599ms ago: executing program 6 (id=1274): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000040)={[{@nobh}, {@abort}]}, 0xff, 0x258, &(0x7f0000000780)="$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") syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x18808, 0x0, 0xf7, 0x0, 0x0) r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f0000000080), 0x18) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000100)=@v1={0x2, @adiantum, 0x4, @auto='\t\x00'}) r1 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) fchdir(r1) socket$nl_netfilter(0x10, 0x3, 0xc) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 768.137919ms ago: executing program 4 (id=1275): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x2200) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000140)={{0x1, 0x2, 0x276, 0x3, 0x6}}) 768.010199ms ago: executing program 4 (id=1276): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2cf6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, &(0x7f0000000280)={0x20, 0x8, 0x7, {0x7, 0x0, "3d7da32915"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000680)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x20, 0x1, 0x4, "e8b94ed0"}, 0x0}) 675.92768ms ago: executing program 1 (id=1277): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') preadv(r2, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0xc002a0, 0x0) 595.780711ms ago: executing program 6 (id=1278): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) r1 = socket$inet6(0xa, 0x3, 0xff) sendmmsg$inet6(r1, &(0x7f0000004f00)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @private1}, 0x1c, 0x0}}], 0x1, 0x4) 504.363693ms ago: executing program 6 (id=1279): syz_mount_image$f2fs(&(0x7f00000002c0), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="6e6f646973636172642c6163746976655f6c6f67733d362c646973636172645f756e69743d73656374696f6e2c616c6c6f635f6d6f64653d72657573652c696e6c696e655f78617474722c6661756c745f747970653d30303030303030303030303030303030303030372c6261636b67726f756e645f67633d6f6e2c6e6f757365725f78617474722c636865636b706f696e743d64697361626c652c757365725f78617474722c626172726965722c6167655f657874656e745f63616368652c757365725f78617474722c71756f74612c0089e5afa1e5917778089d53bf1e7976b8101ed131cec59926dc45294c5c18206d0a669306b1d0cc8e4f7753c03396a2734f10a3d75d435a08eff937580007aaad0ec81f842b74c22ac48ca4fbfd6fc3a509f51ebd287101d13d198d9a644e3d8216f29bc51a3a607656666d4d54e20072d115c3f57de32b7eb4964b4a45b355bb9d1a8cb6259ad2a4a5ef3e291451b10a28707e7964398a2d7a8a8d2b9e2ada5657"], 0x1, 0x5505, &(0x7f0000002480)="$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") r0 = open(&(0x7f0000001440)='./file1\x00', 0x14d77e, 0xc2) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000400)=0x20) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x0) 395.448124ms ago: executing program 5 (id=1280): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c00000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000500)={{{@in6, @in6=@loopback}}, {{@in=@dev}, 0x0, @in6=@local}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mknodat$loop(0xffffffffffffff9c, 0x0, 0x6004, 0x1) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x2000006, &(0x7f00000027c0)={[{@uni_xlate}, {@uni_xlate}, {@numtail}, {@shortname_mixed}, {@fat=@gid}, {@utf8}, {@shortname_win95}, {@uni_xlateno}, {@shortname_win95}, {@iocharset={'iocharset', 0x3d, 'cp857'}}, {@utf8}, {@shortname_lower}, {@uni_xlate}, {@shortname_lower}, {@uni_xlate}]}, 0x1, 0x35e, &(0x7f0000002340)="$eJzs3T9sG2UUAPDnXhKnFSUekCqYDBsSqtogBpgSVUWqyABFFv8WLJryJzaVYmEpDHG8gComEAsSTGwdYOyMGBBiY2ClSKiAWOhWqRGHzj7/t0syOLTi9xuSl/e9d993l1POiZIvr7di69JiXL5162YsLxdiYe3cWtwuRCmORRJdezHVR0vT8wDAPe52msZfaaYw4zE/7JMTvcizHwDuX53n/5snB4niIZqvPjCPJQEAczb4/j9N71L2/OiHi913V+a6NABgTiae/4+NDI/9mH+h/zsBAMD968VXXn1ufSPiYrm8HFH/sFlpVuKZwfj65Xg7arEZZ2Il9iO6LxS6rxayt89e2Dh/ppz5rRSVrKNZiai3mpXuK4X1pNNfjLOxEqW8P+33J1n/2U5/OSL2Wp35o15oVhbjRD7/zydiM1ZjJR6a6I+4sHF+tZwfoFLv9bci2rHcO4ls/adjJX58I65ELS5F1jtY/+7ZcvlcujHS37xW7NQBAAAAAAAAAAAAAAAAAAAAAMA8nC73lfr736T1VvODi+MFpZH9cSrd4Xx/oHZ3f6C02Nud52oyvj/Q6P48zcpCHPtPzxwAAAAAAAAAAAAAAAAAAADuHY2dpajWapvbjZ33t4aD1lDm3e+/+vZ49IYW8tZ3kkFX5MmR4/QKh46cRH+KtN+eJiM1eZBE9Ir3qteu91c8XFPsn8VEexYUJ4YK+ZqqtdrJR3/9fFrX31mw18kkMXFZRoNCPv/QUP3BLLEcEfuzumYHq/9ScyNN01ntu59NdkUhYiEOvYwDBN/dfOvhJxunnupkvsk3fXj8iZWXbnz65R9b1Vq0u1emVlvabuynBzhyttbJoSQ6t1YnU8ivc2HKnTA9aA8y7e3GTjX56c+XH/n4h7HiZPr9kw5n3ps919fjmaVuUIgo9S7C3Za6OOXmnx68dqd/9x7+E3fqi7Xq9d1ffj9o19AXCRt1AAAAAAAAAAAAAAAAAADAkRj6W/FDePqF+a0IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAI7e4P//DwXt8cxiRIzVTAZ3WlNqipvbjZmTHz/SUwUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4H/snwAAAP//PK5uig==") 0s ago: executing program 6 (id=1281): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x0, 0x3}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x9, 0x9, 0x1, 0x80000001}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x0) kernel console output (not intermixed with test programs): -executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7fac0ff22929 code=0x7ffc0000 [ 184.195088][ T2974] CPU: 1 PID: 2974 Comm: syz.1.754 Not tainted 5.10.238-syzkaller-00008-g59e9a7228857 #0 [ 184.204920][ T2974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 184.211137][ T24] audit: type=1326 audit(1752191806.886:1657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2973 comm="syz.1.754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac0ff22929 code=0x7ffc0000 [ 184.214983][ T2974] Call Trace: [ 184.238809][ T24] audit: type=1326 audit(1752191806.886:1658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2973 comm="syz.1.754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fac0ff21290 code=0x7ffc0000 [ 184.241510][ T2974] __dump_stack+0x21/0x24 [ 184.269094][ T2974] dump_stack_lvl+0x169/0x1d8 [ 184.273773][ T2974] ? thaw_kernel_threads+0x220/0x220 [ 184.279061][ T2974] ? show_regs_print_info+0x18/0x18 [ 184.284255][ T2974] dump_stack+0x15/0x1c [ 184.288405][ T2974] should_fail+0x3c1/0x510 [ 184.292842][ T2974] ? __alloc_skb+0x9e/0x520 [ 184.297331][ T2974] __should_failslab+0xa4/0xe0 [ 184.302084][ T2974] should_failslab+0x9/0x20 [ 184.306597][ T2974] kmem_cache_alloc+0x3d/0x2e0 [ 184.311363][ T2974] ? audit_log_start+0x3b7/0x860 [ 184.316301][ T2974] __alloc_skb+0x9e/0x520 [ 184.320624][ T2974] ? kmem_cache_alloc+0x165/0x2e0 [ 184.325637][ T2974] ? audit_log_start+0x3b7/0x860 [ 184.330567][ T2974] audit_log_start+0x3df/0x860 [ 184.335330][ T2974] ? audit_serial+0x30/0x30 [ 184.339840][ T2974] ? kstrtouint_from_user+0x1a0/0x200 [ 184.345216][ T2974] ? kmem_cache_free+0x2ac/0x2d0 [ 184.350154][ T2974] ? memset+0x35/0x40 [ 184.354134][ T2974] audit_seccomp+0x62/0x160 [ 184.358634][ T2974] __seccomp_filter+0xb4c/0x1990 [ 184.363565][ T2974] ? proc_fail_nth_read+0x210/0x210 [ 184.368760][ T2974] ? rw_verify_area+0x1c0/0x360 [ 184.373684][ T2974] ? preempt_count_add+0x90/0x1b0 [ 184.378696][ T2974] ? __secure_computing+0x290/0x290 [ 184.383875][ T2974] ? vfs_write+0xac8/0xd60 [ 184.388276][ T2974] ? kernel_write+0x3c0/0x3c0 [ 184.392938][ T2974] ? __kasan_check_write+0x14/0x20 [ 184.398035][ T2974] ? mutex_lock+0x8c/0xe0 [ 184.402346][ T2974] ? mutex_trylock+0xa0/0xa0 [ 184.406920][ T2974] ? __fget_files+0x2c4/0x320 [ 184.411583][ T2974] ? __kasan_check_write+0x14/0x20 [ 184.416681][ T2974] ? fput_many+0x15a/0x1a0 [ 184.421090][ T2974] ? fput+0x1a/0x20 [ 184.424884][ T2974] ? ksys_write+0x1eb/0x240 [ 184.429376][ T2974] __secure_computing+0xea/0x290 [ 184.434301][ T2974] syscall_trace_enter+0xb5/0x170 [ 184.439313][ T2974] syscall_enter_from_user_mode+0x20/0x30 [ 184.445025][ T2974] do_syscall_64+0x13/0x40 [ 184.449433][ T2974] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 184.455308][ T2974] RIP: 0033:0x7fac0ff22929 [ 184.459710][ T2974] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 184.479302][ T2974] RSP: 002b:00007fac0e58b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 184.487701][ T2974] RAX: ffffffffffffffda RBX: 00007fac10149fa0 RCX: 00007fac0ff22929 [ 184.495661][ T2974] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 00002000007d8000 [ 184.503632][ T2974] RBP: 00007fac0e58b090 R08: 0000000000000000 R09: 0000000000000000 [ 184.511612][ T2974] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 184.519581][ T2974] R13: 0000000000000000 R14: 00007fac10149fa0 R15: 00007ffea5b44548 [ 184.647317][ T2985] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 184.658123][ T2985] System zones: 0-2, 18-18, 34-34 [ 184.664897][ T2985] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.756: bg 0: block 248: padding at end of block bitmap is not set [ 184.687851][ T2985] EXT4-fs error (device loop5): ext4_acquire_dquot:6226: comm syz.5.756: Failed to acquire dquot type 1 [ 184.726580][ T2985] EXT4-fs (loop5): 1 truncate cleaned up [ 184.732367][ T2985] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 184.741962][ T2985] ext4 filesystem being mounted at /92/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 184.828497][ T2998] EXT4-fs (loop4): Mount option "nouser_xattr" will be removed by 3.5 [ 184.828497][ T2998] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 184.828497][ T2998] [ 184.846865][ T2998] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 184.854273][ T2998] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 184.865025][ T2998] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802a12c, mo2=0002] [ 184.876215][ T2998] EXT4-fs (loop4): orphan cleanup on readonly fs [ 184.986769][ T2998] EXT4-fs error (device loop4): ext4_clear_blocks:880: inode #11: comm syz.4.761: attempt to clear invalid blocks 1024 len 1 [ 185.001997][ T2998] EXT4-fs (loop4): Remounting filesystem read-only [ 185.011353][ T2998] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.761: bg 0: block 361: padding at end of block bitmap is not set [ 185.029201][ T2998] EXT4-fs error (device loop4) in ext4_mb_clear_bb:5645: Corrupt filesystem [ 185.038168][ T2998] EXT4-fs error (device loop4): ext4_free_branches:1026: inode #11: comm syz.4.761: invalid indirect mapped block 1811939328 (level 0) [ 185.052262][ T2998] EXT4-fs error (device loop4): ext4_free_branches:1026: inode #11: comm syz.4.761: invalid indirect mapped block 2185560079 (level 1) [ 185.066645][ T2998] EXT4-fs (loop4): 1 truncate cleaned up [ 185.072365][ T2998] EXT4-fs (loop4): mounted filesystem without journal. Opts: noload,noblock_validity,nouser_xattr,errors=remount-ro,mblk_io_submit [ 185.089106][ T3000] bridge0: the hash_elasticity option has been deprecated and is always 16 [ 185.119460][ T3004] netlink: 'syz.5.756': attribute type 27 has an invalid length. [ 185.322812][ T3013] EXT4-fs warning (device loop4): dx_probe:860: inode #2: comm syz.4.761: dx entry: limit 0 != root limit 125 [ 185.339424][ T3013] EXT4-fs warning (device loop4): dx_probe:946: inode #2: comm syz.4.761: Corrupt directory, running e2fsck is recommended [ 185.381689][ T3013] EXT4-fs warning (device loop4): dx_probe:860: inode #2: comm syz.4.761: dx entry: limit 0 != root limit 125 [ 185.539743][ T3013] EXT4-fs warning (device loop4): dx_probe:946: inode #2: comm syz.4.761: Corrupt directory, running e2fsck is recommended [ 186.389330][ T3053] syz.2.777 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 186.526444][ T3053] EXT4-fs (loop2): mounted filesystem without journal. Opts: noquota,errors=remount-ro,barrier=0x0000000000000003,nolazytime, [ 186.540331][ T3053] ext4 filesystem being mounted at /151/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 186.698644][ T3053] EXT4-fs error (device loop2): dx_make_map:1303: inode #2: block 20: comm syz.2.777: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1 [ 186.786728][ T3053] EXT4-fs (loop2): Remounting filesystem read-only [ 186.815730][ T3053] EXT4-fs error (device loop2) in do_split:2059: Corrupt filesystem [ 187.011565][ T3071] overlayfs: workdir and upperdir must be separate subtrees [ 187.947685][ T3062] F2FS-fs (loop3): Invalid SB checksum offset: 0 [ 187.964266][ T3062] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 188.031300][ T3062] F2FS-fs (loop3): invalid crc value [ 188.040958][ T3080] EXT4-fs (loop4): Mount option "nojournal_checksum" incompatible with ext3 [ 188.061478][ T3062] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 188.083328][ T3062] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 188.090648][ T3062] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 189.267903][ T24] kauditd_printk_skb: 103 callbacks suppressed [ 189.311460][ T24] audit: type=1400 audit(1752191811.566:1758): avc: denied { create } for pid=3060 comm="syz.3.779" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 189.342223][ T281] attempt to access beyond end of device [ 189.342223][ T281] loop3: rw=2049, want=45104, limit=40427 [ 189.363142][ T24] audit: type=1400 audit(1752191811.566:1759): avc: denied { getopt } for pid=3060 comm="syz.3.779" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 189.411114][ T24] audit: type=1400 audit(1752191811.576:1760): avc: denied { remount } for pid=3060 comm="syz.3.779" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 191.128366][ T3131] netlink: 8 bytes leftover after parsing attributes in process `syz.2.800'. [ 191.577196][ T3141] input: syz1 as /devices/virtual/input/input37 [ 191.908391][ T3152] netlink: 4 bytes leftover after parsing attributes in process `syz.4.803'. [ 191.923520][ T24] audit: type=1400 audit(1752191814.416:1761): avc: denied { setopt } for pid=3130 comm="syz.2.800" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 192.800984][ T24] audit: type=1400 audit(1752191815.536:1762): avc: denied { read } for pid=3148 comm="syz.1.805" name="ppp" dev="devtmpfs" ino=153 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 192.865759][ T53] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 192.880611][ T24] audit: type=1400 audit(1752191815.536:1763): avc: denied { open } for pid=3148 comm="syz.1.805" path="/dev/ppp" dev="devtmpfs" ino=153 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 192.976755][ T24] audit: type=1400 audit(1752191815.536:1764): avc: denied { ioctl } for pid=3148 comm="syz.1.805" path="/dev/ppp" dev="devtmpfs" ino=153 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 193.063644][ T24] audit: type=1400 audit(1752191815.656:1765): avc: denied { write } for pid=3148 comm="syz.1.805" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 193.125769][ T53] usb 3-1: Using ep0 maxpacket: 16 [ 193.245773][ T53] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 193.261957][ T53] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 96 [ 193.272164][ T53] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 193.286657][ T53] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 193.302060][ T3171] FAULT_INJECTION: forcing a failure. [ 193.302060][ T3171] name failslab, interval 1, probability 0, space 0, times 0 [ 193.344122][ T3171] CPU: 0 PID: 3171 Comm: syz.3.808 Not tainted 5.10.238-syzkaller-00008-g59e9a7228857 #0 [ 193.353973][ T3171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 193.364041][ T3171] Call Trace: [ 193.367339][ T3171] __dump_stack+0x21/0x24 [ 193.371800][ T3171] dump_stack_lvl+0x169/0x1d8 [ 193.376487][ T3171] ? thaw_kernel_threads+0x220/0x220 [ 193.381785][ T3171] ? show_regs_print_info+0x18/0x18 [ 193.387001][ T3171] dump_stack+0x15/0x1c [ 193.391163][ T3171] should_fail+0x3c1/0x510 [ 193.395585][ T3171] ? __alloc_skb+0x9e/0x520 [ 193.400097][ T3171] __should_failslab+0xa4/0xe0 [ 193.404865][ T3171] should_failslab+0x9/0x20 [ 193.409373][ T3171] kmem_cache_alloc+0x3d/0x2e0 [ 193.414147][ T3171] __alloc_skb+0x9e/0x520 [ 193.418487][ T3171] ? kmem_cache_free+0x2ac/0x2d0 [ 193.423434][ T3171] tipc_msg_create+0x44/0x550 [ 193.428118][ T3171] tipc_sk_send_ack+0x10e/0x630 [ 193.432970][ T3171] ? tsk_advance_rx_queue+0x10a/0x700 [ 193.438342][ T3171] tipc_recvmsg+0xc62/0x13a0 [ 193.442938][ T3171] ? tipc_send_packet+0xa0/0xa0 [ 193.447801][ T3171] ? security_socket_recvmsg+0x87/0xb0 [ 193.453259][ T3171] ? tipc_send_packet+0xa0/0xa0 [ 193.458109][ T3171] ____sys_recvmsg+0x291/0x580 [ 193.462876][ T3171] ? __sys_recvmsg_sock+0x50/0x50 [ 193.467912][ T3171] ? import_iovec+0x7c/0xb0 [ 193.472420][ T3171] ___sys_recvmsg+0x1af/0x4f0 [ 193.477098][ T3171] ? __sys_recvmsg+0x250/0x250 [ 193.481866][ T3171] ? __fdget+0x1a1/0x230 [ 193.486108][ T3171] __x64_sys_recvmsg+0x1dd/0x2a0 [ 193.491044][ T3171] ? fput+0x1a/0x20 [ 193.494852][ T3171] ? ___sys_recvmsg+0x4f0/0x4f0 [ 193.499707][ T3171] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 193.505782][ T3171] do_syscall_64+0x31/0x40 [ 193.510205][ T3171] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 193.516096][ T3171] RIP: 0033:0x7f77cd916929 [ 193.520513][ T3171] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 193.540122][ T3171] RSP: 002b:00007f77cbf3d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 193.548545][ T3171] RAX: ffffffffffffffda RBX: 00007f77cdb3e160 RCX: 00007f77cd916929 [ 193.556516][ T3171] RDX: 0000000000000000 RSI: 0000200000000900 RDI: 000000000000000c [ 193.564485][ T3171] RBP: 00007f77cbf3d090 R08: 0000000000000000 R09: 0000000000000000 [ 193.572455][ T3171] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 193.580431][ T3171] R13: 0000000000000000 R14: 00007f77cdb3e160 R15: 00007ffebae8aa48 [ 193.636642][ T53] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 193.646440][ T53] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 193.654767][ T53] usb 3-1: SerialNumber: syz [ 193.660396][ T3176] bridge0: the hash_elasticity option has been deprecated and is always 16 [ 193.685783][ T3155] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 193.694441][ T3155] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 193.726061][ T53] hub 3-1:1.0: bad descriptor, ignoring hub [ 193.733151][ T53] hub: probe of 3-1:1.0 failed with error -5 [ 193.745699][ T5] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 193.777914][ T3183] tmpfs: Unknown parameter 'usrqu' [ 193.799647][ T3187] 9pnet: p9_errstr2errno: server reported unknown error 18446744073 [ 193.928200][ T3155] 9pnet: Insufficient options for proto=fd [ 193.934320][ T3155] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 193.941433][ T3155] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 193.985776][ T5] usb 5-1: Using ep0 maxpacket: 8 [ 194.045754][ T511] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 194.105974][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 194.116981][ T5] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 194.126758][ T5] usb 5-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 194.135991][ T5] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.144700][ T5] usb 5-1: config 0 descriptor?? [ 194.295715][ T511] usb 4-1: Using ep0 maxpacket: 8 [ 194.397010][ T53] cdc_ether 3-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.2-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 194.412974][ T24] audit: type=1400 audit(1752191817.146:1766): avc: denied { read } for pid=134 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 194.438133][ T24] audit: type=1400 audit(1752191817.146:1767): avc: denied { search } for pid=134 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 194.459565][ T24] audit: type=1400 audit(1752191817.146:1768): avc: denied { read } for pid=134 comm="dhcpcd" name="n15" dev="tmpfs" ino=5922 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 194.465765][ T511] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 194.481362][ T24] audit: type=1400 audit(1752191817.146:1769): avc: denied { open } for pid=134 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=5922 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 194.499151][ T511] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 194.534991][ T511] usb 4-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 194.543274][ T24] audit: type=1400 audit(1752191817.146:1770): avc: denied { getattr } for pid=134 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=5922 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 194.555523][ T511] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.567284][ T24] audit: type=1400 audit(1752191817.176:1771): avc: denied { read } for pid=3193 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=416 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 194.600318][ T24] audit: type=1400 audit(1752191817.176:1772): avc: denied { open } for pid=3193 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=416 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 194.609484][ T511] usb 4-1: config 0 descriptor?? [ 194.625850][ T24] audit: type=1400 audit(1752191817.176:1773): avc: denied { getattr } for pid=3193 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=416 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 194.656542][ T24] audit: type=1400 audit(1752191817.266:1774): avc: denied { write } for pid=3192 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=415 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 194.680293][ T24] audit: type=1400 audit(1752191817.266:1775): avc: denied { add_name } for pid=3192 comm="dhcpcd-run-hook" name="resolv.conf.usb0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 194.795809][ T5] usbhid 5-1:0.0: can't add hid device: -71 [ 194.801792][ T5] usbhid: probe of 5-1:0.0 failed with error -71 [ 194.811003][ T5] usb 5-1: USB disconnect, device number 12 [ 195.007851][ T289] usb 3-1: USB disconnect, device number 10 [ 195.025785][ T289] cdc_ether 3-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.2-1, CDC Ethernet Device [ 195.215867][ T511] usbhid 4-1:0.0: can't add hid device: -71 [ 195.231898][ T511] usbhid: probe of 4-1:0.0 failed with error -71 [ 195.244277][ T511] usb 4-1: USB disconnect, device number 14 [ 195.265597][ T3238] EXT4-fs (loop4): Mount option "nojournal_checksum" incompatible with ext3 [ 195.375616][ T3246] netlink: 4 bytes leftover after parsing attributes in process `syz.5.821'. [ 196.840404][ T3262] syz.5.828[3262] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 196.840465][ T3262] syz.5.828[3262] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 197.397570][ T2944] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 197.620302][ T3277] exfat: Unknown parameter 'Ϙ' [ 198.874357][ T3277] netlink: 72 bytes leftover after parsing attributes in process `syz.3.830'. [ 199.395706][ T2944] usb 6-1: Using ep0 maxpacket: 8 [ 199.414698][ T3289] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 199.423267][ T3287] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 199.432078][ T3289] System zones: 0-2, 18-18, 34-34 [ 199.437594][ T3287] System zones: 0-2, 18-18, 34-34 [ 199.444274][ T3289] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.836: bg 0: block 248: padding at end of block bitmap is not set [ 199.459390][ T3287] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.835: bg 0: block 248: padding at end of block bitmap is not set [ 199.474342][ T3289] __quota_error: 31 callbacks suppressed [ 199.474352][ T3289] Quota error (device loop1): write_blk: dquota write failed [ 199.488031][ T3287] Quota error (device loop2): write_blk: dquota write failed [ 199.495430][ T3287] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 199.505708][ T3179] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 199.513409][ T3289] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 199.523669][ T3287] EXT4-fs error (device loop2): ext4_acquire_dquot:6226: comm syz.2.835: Failed to acquire dquot type 1 [ 199.535076][ T3289] EXT4-fs error (device loop1): ext4_acquire_dquot:6226: comm syz.1.836: Failed to acquire dquot type 1 [ 199.546532][ T2944] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 199.558162][ T3287] EXT4-fs (loop2): 1 truncate cleaned up [ 199.563806][ T3287] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 199.578647][ T2944] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 199.585940][ T3287] ext4 filesystem being mounted at /161/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 199.589764][ T2944] usb 6-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 199.608613][ T2944] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.616895][ T3289] EXT4-fs (loop1): 1 truncate cleaned up [ 199.622564][ T3289] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 199.632003][ T2944] usb 6-1: config 0 descriptor?? [ 199.639630][ T3289] ext4 filesystem being mounted at /166/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 199.682331][ T3287] netlink: 'syz.2.835': attribute type 27 has an invalid length. [ 199.733640][ T3289] netlink: 'syz.1.836': attribute type 27 has an invalid length. [ 199.807384][ T3298] bridge0: the hash_elasticity option has been deprecated and is always 16 [ 199.847935][ T24] audit: type=1400 audit(1752191822.576:1807): avc: denied { write } for pid=3301 comm="syz.1.840" lport=99 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 199.880716][ T24] audit: type=1326 audit(1752191822.606:1808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3303 comm="syz.3.841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77cd916929 code=0x7ffc0000 [ 199.904209][ T3179] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 199.905007][ T3306] raw_sendmsg: syz.1.842 forgot to set AF_INET. Fix it! [ 199.912892][ T3179] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 199.923111][ T24] audit: type=1326 audit(1752191822.606:1809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3303 comm="syz.3.841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77cd916929 code=0x7ffc0000 [ 199.935715][ T3179] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 199.963501][ T3179] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 199.982952][ T3179] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 199.990158][ T24] audit: type=1326 audit(1752191822.606:1810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3303 comm="syz.3.841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f77cd916929 code=0x7ffc0000 [ 200.018648][ T24] audit: type=1326 audit(1752191822.606:1811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3303 comm="syz.3.841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77cd916929 code=0x7ffc0000 [ 200.042698][ T24] audit: type=1326 audit(1752191822.606:1812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3303 comm="syz.3.841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f77cd916929 code=0x7ffc0000 [ 200.115826][ T3179] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 200.125275][ T3179] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 200.137827][ T3179] usb 5-1: Product: syz [ 200.142066][ T3179] usb 5-1: Manufacturer: syz [ 200.175794][ T2944] usbhid 6-1:0.0: can't add hid device: -71 [ 200.181798][ T2944] usbhid: probe of 6-1:0.0 failed with error -71 [ 200.188652][ T3179] cdc_wdm 5-1:1.0: skipping garbage [ 200.193882][ T3179] cdc_wdm 5-1:1.0: skipping garbage [ 200.363518][ T2944] usb 6-1: USB disconnect, device number 5 [ 200.370713][ T3179] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 200.372764][ T3313] EXT4-fs error (device loop1) in ext4_do_update_inode:5335: error 27 [ 200.385794][ T3313] EXT4-fs error (device loop1): ext4_dirty_inode:6142: inode #16: comm syz.1.845: mark_inode_dirty error [ 200.397212][ T3313] EXT4-fs error (device loop1) in ext4_do_update_inode:5335: error 27 [ 200.407622][ T3313] EXT4-fs error (device loop1): __ext4_ext_dirty:182: inode #16: comm syz.1.845: mark_inode_dirty error [ 200.424138][ T3313] EXT4-fs error (device loop1) in ext4_do_update_inode:5335: error 27 [ 200.432800][ T3313] EXT4-fs error (device loop1) in ext4_orphan_del:3292: error 27 [ 200.440937][ T3313] EXT4-fs error (device loop1) in ext4_do_update_inode:5335: error 27 [ 200.449486][ T3313] EXT4-fs error (device loop1): ext4_truncate:4390: inode #16: comm syz.1.845: mark_inode_dirty error [ 200.460790][ T3313] EXT4-fs error (device loop1) in ext4_orphan_cleanup:3108: error 27 [ 200.469369][ T3313] EXT4-fs (loop1): 1 truncate cleaned up [ 200.475067][ T3313] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 200.484118][ T3313] ext4 filesystem being mounted at /170/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 200.637650][ T511] usb 5-1: USB disconnect, device number 13 [ 200.673752][ T3325] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 200.709716][ T3328] EXT4-fs (loop2): Mount option "nojournal_checksum" incompatible with ext3 [ 200.722370][ T3325] EXT4-fs error (device loop1): ext4_mb_generate_buddy:808: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 200.737425][ T3325] EXT4-fs (loop1): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 17 with error 28 [ 200.750073][ T3325] EXT4-fs (loop1): This should not happen!! Data will be lost [ 200.750073][ T3325] [ 200.760011][ T3325] EXT4-fs (loop1): Total free blocks count 0 [ 200.766186][ T3325] EXT4-fs (loop1): Free/Dirty block details [ 200.772143][ T3325] EXT4-fs (loop1): free_blocks=2415919104 [ 200.777930][ T3325] EXT4-fs (loop1): dirty_blocks=32 [ 200.783080][ T3325] EXT4-fs (loop1): Block reservation details [ 200.789155][ T3325] EXT4-fs (loop1): i_reserved_data_blocks=2 [ 201.076865][ T3337] exfat: Unknown parameter 'Ϙ' [ 201.153744][ T3337] netlink: 72 bytes leftover after parsing attributes in process `syz.5.849'. [ 202.352189][ T3342] overlayfs: missing 'lowerdir' [ 203.726946][ T3363] exfat: Unknown parameter 'Ϙ' [ 204.685752][ T308] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 204.925723][ T308] usb 6-1: Using ep0 maxpacket: 8 [ 205.155811][ T308] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 205.166793][ T308] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 205.176561][ T308] usb 6-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 205.185690][ T308] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.194233][ T308] usb 6-1: config 0 descriptor?? [ 205.705704][ T511] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 205.749099][ T308] usbhid 6-1:0.0: can't add hid device: -71 [ 205.755092][ T308] usbhid: probe of 6-1:0.0 failed with error -71 [ 205.762663][ T308] usb 6-1: USB disconnect, device number 6 [ 206.135967][ T511] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 206.153343][ T511] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 206.175217][ T511] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 206.185186][ T511] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 206.230403][ T511] usb 5-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 206.239889][ T511] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.248688][ T511] usb 5-1: config 0 descriptor?? [ 206.286950][ T511] usb 5-1: MIDIStreaming interface descriptor not found [ 206.639071][ T308] usb 5-1: USB disconnect, device number 14 [ 206.907495][ T3397] exfat: Unknown parameter 'Ϙ' [ 206.998157][ T3397] netlink: 72 bytes leftover after parsing attributes in process `syz.2.867'. [ 207.632807][ T3402] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 207.659797][ T3402] EXT4-fs error (device loop4): ext4_mb_generate_buddy:808: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 207.675005][ T3402] EXT4-fs (loop4): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 17 with error 28 [ 207.687448][ T3402] EXT4-fs (loop4): This should not happen!! Data will be lost [ 207.687448][ T3402] [ 207.697884][ T3402] EXT4-fs (loop4): Total free blocks count 0 [ 207.703863][ T3402] EXT4-fs (loop4): Free/Dirty block details [ 207.710014][ T3402] EXT4-fs (loop4): free_blocks=2415919104 [ 207.715914][ T3402] EXT4-fs (loop4): dirty_blocks=32 [ 207.721112][ T3402] EXT4-fs (loop4): Block reservation details [ 207.727244][ T3402] EXT4-fs (loop4): i_reserved_data_blocks=2 [ 207.859343][ T24] kauditd_printk_skb: 63 callbacks suppressed [ 207.859355][ T24] audit: type=1326 audit(1752191830.596:1876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3412 comm="syz.5.873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7227b36929 code=0x7ffc0000 [ 207.889267][ T24] audit: type=1326 audit(1752191830.596:1877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3412 comm="syz.5.873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7227b36929 code=0x7ffc0000 [ 207.913074][ T24] audit: type=1326 audit(1752191830.596:1878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3412 comm="syz.5.873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7227b36929 code=0x7ffc0000 [ 207.936718][ T24] audit: type=1326 audit(1752191830.596:1879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3412 comm="syz.5.873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=282 compat=0 ip=0x7f7227b36929 code=0x7ffc0000 [ 207.960161][ T24] audit: type=1326 audit(1752191830.596:1880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3412 comm="syz.5.873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7227b36929 code=0x7ffc0000 [ 207.983568][ T24] audit: type=1326 audit(1752191830.596:1881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3412 comm="syz.5.873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f7227b36929 code=0x7ffc0000 [ 208.007018][ T24] audit: type=1326 audit(1752191830.596:1882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3412 comm="syz.5.873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7227b36929 code=0x7ffc0000 [ 208.030651][ T24] audit: type=1326 audit(1752191830.596:1883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3412 comm="syz.5.873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7227b36929 code=0x7ffc0000 [ 208.054155][ T24] audit: type=1326 audit(1752191830.596:1884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3412 comm="syz.5.873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7227b36929 code=0x7ffc0000 [ 208.077520][ T24] audit: type=1326 audit(1752191830.596:1885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3412 comm="syz.5.873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7227b36929 code=0x7ffc0000 [ 208.115740][ T5] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 208.475736][ T5] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 208.484429][ T5] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 208.494691][ T5] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 208.503668][ T5] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 208.514673][ T5] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 208.526634][ T3418] bridge0: the hash_elasticity option has been deprecated and is always 16 [ 208.645764][ T5] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 208.654881][ T5] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 208.662905][ T5] usb 5-1: Product: syz [ 208.667150][ T5] usb 5-1: Manufacturer: syz [ 208.706022][ T5] cdc_wdm 5-1:1.0: skipping garbage [ 208.711294][ T5] cdc_wdm 5-1:1.0: skipping garbage [ 208.717528][ T5] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 209.125064][ T511] usb 5-1: USB disconnect, device number 15 [ 209.356704][ T3438] exfat: Unknown parameter 'Ϙ' [ 209.484092][ T3438] netlink: 72 bytes leftover after parsing attributes in process `syz.2.882'. [ 211.566689][ T3457] FAULT_INJECTION: forcing a failure. [ 211.566689][ T3457] name failslab, interval 1, probability 0, space 0, times 0 [ 211.579397][ T3457] CPU: 0 PID: 3457 Comm: syz.1.888 Not tainted 5.10.238-syzkaller-00008-g59e9a7228857 #0 [ 211.589339][ T3457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 211.599398][ T3457] Call Trace: [ 211.602710][ T3457] __dump_stack+0x21/0x24 [ 211.607039][ T3457] dump_stack_lvl+0x169/0x1d8 [ 211.611722][ T3457] ? show_regs_print_info+0x18/0x18 [ 211.616909][ T3457] dump_stack+0x15/0x1c [ 211.621052][ T3457] should_fail+0x3c1/0x510 [ 211.625454][ T3457] ? kvm_mmu_topup_memory_cache+0xe4/0x220 [ 211.631258][ T3457] __should_failslab+0xa4/0xe0 [ 211.636004][ T3457] should_failslab+0x9/0x20 [ 211.640499][ T3457] kmem_cache_alloc+0x3d/0x2e0 [ 211.645249][ T3457] ? kvm_mmu_topup_memory_cache+0xe4/0x220 [ 211.651053][ T3457] kvm_mmu_topup_memory_cache+0xe4/0x220 [ 211.656668][ T3457] kvm_mmu_load+0x70/0x1580 [ 211.661213][ T3457] vcpu_enter_guest+0x5c3f/0x6d70 [ 211.666237][ T3457] ? local_bh_enable+0x30/0x30 [ 211.670992][ T3457] ? 0xffffffffa00161e8 [ 211.675148][ T3457] ? is_bpf_text_address+0x177/0x190 [ 211.680418][ T3457] ? __kernel_text_address+0xa0/0x100 [ 211.685793][ T3457] ? unwind_get_return_address+0x4d/0x90 [ 211.691437][ T3457] ? stack_trace_save+0xe0/0xe0 [ 211.696308][ T3457] ? arch_stack_walk+0xee/0x140 [ 211.701171][ T3457] ? stack_trace_save+0x98/0xe0 [ 211.706023][ T3457] ? stack_trace_snprint+0xf0/0xf0 [ 211.711126][ T3457] ? kasan_set_track+0x5b/0x70 [ 211.715898][ T3457] ? kasan_set_track+0x4a/0x70 [ 211.720682][ T3457] ? kasan_set_free_info+0x23/0x40 [ 211.725799][ T3457] ? ____kasan_slab_free+0x125/0x160 [ 211.731077][ T3457] ? __kasan_slab_free+0x11/0x20 [ 211.736003][ T3457] ? slab_free_freelist_hook+0xc5/0x190 [ 211.741539][ T3457] ? kmem_cache_free+0x100/0x2d0 [ 211.746464][ T3457] ? putname+0xfe/0x150 [ 211.750605][ T3457] ? do_sys_openat2+0x207/0x6d0 [ 211.755440][ T3457] ? __x64_sys_openat+0x136/0x160 [ 211.760452][ T3457] ? do_syscall_64+0x31/0x40 [ 211.765032][ T3457] ? _kstrtoull+0x3c0/0x4d0 [ 211.769522][ T3457] ? __kasan_check_read+0x11/0x20 [ 211.774533][ T3457] ? vmx_vcpu_pi_load+0xa5/0x3e0 [ 211.779462][ T3457] ? __local_bh_enable_ip+0x53/0x80 [ 211.784650][ T3457] ? kvm_load_guest_fpu+0x159/0x290 [ 211.789836][ T3457] kvm_arch_vcpu_ioctl_run+0x7d0/0x1970 [ 211.795389][ T3457] kvm_vcpu_ioctl+0x78e/0xb50 [ 211.800054][ T3457] ? kernel_write+0x3c0/0x3c0 [ 211.804724][ T3457] ? kvm_create_vcpu_debugfs+0x170/0x170 [ 211.810342][ T3457] ? selinux_file_ioctl+0x377/0x480 [ 211.815527][ T3457] ? mutex_trylock+0xa0/0xa0 [ 211.820103][ T3457] ? __fget_files+0x2c4/0x320 [ 211.824770][ T3457] ? selinux_file_alloc_security+0x120/0x120 [ 211.830740][ T3457] ? __fget_files+0x2c4/0x320 [ 211.835424][ T3457] ? security_file_ioctl+0x84/0xa0 [ 211.840544][ T3457] ? kvm_create_vcpu_debugfs+0x170/0x170 [ 211.846163][ T3457] __se_sys_ioctl+0x121/0x1a0 [ 211.850825][ T3457] __x64_sys_ioctl+0x7b/0x90 [ 211.855405][ T3457] do_syscall_64+0x31/0x40 [ 211.859811][ T3457] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 211.865700][ T3457] RIP: 0033:0x7fac0ff22929 [ 211.870106][ T3457] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 211.889706][ T3457] RSP: 002b:00007fac0e58b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 211.898109][ T3457] RAX: ffffffffffffffda RBX: 00007fac10149fa0 RCX: 00007fac0ff22929 [ 211.906070][ T3457] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 211.914029][ T3457] RBP: 00007fac0e58b090 R08: 0000000000000000 R09: 0000000000000000 [ 211.921992][ T3457] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 211.929954][ T3457] R13: 0000000000000000 R14: 00007fac10149fa0 R15: 00007ffea5b44548 [ 211.975940][ T3462] netlink: 20 bytes leftover after parsing attributes in process `syz.1.890'. [ 212.118388][ T3470] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 212.126531][ T3470] System zones: 0-2, 18-18, 34-34 [ 212.132905][ T3470] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.893: bg 0: block 248: padding at end of block bitmap is not set [ 212.147810][ T3470] EXT4-fs error (device loop1): ext4_acquire_dquot:6226: comm syz.1.893: Failed to acquire dquot type 1 [ 212.161424][ T3470] EXT4-fs (loop1): 1 truncate cleaned up [ 212.167329][ T3470] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 212.188665][ T3470] ext4 filesystem being mounted at /180/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 212.244734][ T3470] netlink: 'syz.1.893': attribute type 27 has an invalid length. [ 212.549311][ T3489] bridge0: the hash_elasticity option has been deprecated and is always 16 [ 212.884526][ T3491] input: syz1 as /devices/virtual/input/input38 [ 212.931582][ T3493] EXT4-fs (loop2): Ignoring removed nobh option [ 212.937953][ T3493] EXT4-fs (loop2): Ignoring removed bh option [ 212.944409][ T3493] EXT4-fs (loop2): Unrecognized mount option "obj_role=user_xatt" or missing value [ 212.989836][ T3496] netlink: 27 bytes leftover after parsing attributes in process `syz.4.901'. [ 213.043899][ T24] kauditd_printk_skb: 60 callbacks suppressed [ 213.043912][ T24] audit: type=1326 audit(1752191835.776:1944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3497 comm="syz.2.902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa3a876929 code=0x7ffc0000 [ 213.078375][ T24] audit: type=1326 audit(1752191835.776:1945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3497 comm="syz.2.902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa3a876929 code=0x7ffc0000 [ 213.094587][ T3501] input: syz0 as /devices/virtual/input/input39 [ 213.108052][ T24] audit: type=1326 audit(1752191835.776:1946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3497 comm="syz.2.902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faa3a876929 code=0x7ffc0000 [ 213.133097][ T24] audit: type=1326 audit(1752191835.776:1947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3497 comm="syz.2.902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa3a876929 code=0x7ffc0000 [ 213.157361][ T24] audit: type=1326 audit(1752191835.776:1948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3497 comm="syz.2.902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa3a876929 code=0x7ffc0000 [ 213.181074][ T24] audit: type=1326 audit(1752191835.776:1949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3497 comm="syz.2.902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=282 compat=0 ip=0x7faa3a876929 code=0x7ffc0000 [ 213.208257][ T24] audit: type=1326 audit(1752191835.776:1950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3497 comm="syz.2.902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa3a876929 code=0x7ffc0000 [ 213.231801][ T24] audit: type=1326 audit(1752191835.776:1951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3497 comm="syz.2.902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa3a876929 code=0x7ffc0000 [ 213.255239][ T24] audit: type=1326 audit(1752191835.776:1952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3497 comm="syz.2.902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7faa3a876929 code=0x7ffc0000 [ 213.263403][ T3504] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 213.278561][ T24] audit: type=1326 audit(1752191835.776:1953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3497 comm="syz.2.902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa3a876929 code=0x7ffc0000 [ 213.832706][ T3519] input: syz1 as /devices/virtual/input/input40 [ 214.876563][ T3546] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 214.884822][ T3546] System zones: 0-2, 18-18, 34-34 [ 214.893413][ T3546] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.920: bg 0: block 248: padding at end of block bitmap is not set [ 214.908571][ T3546] EXT4-fs error (device loop5): ext4_acquire_dquot:6226: comm syz.5.920: Failed to acquire dquot type 1 [ 214.920723][ T3546] EXT4-fs (loop5): 1 truncate cleaned up [ 214.926630][ T3546] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 214.927857][ T3550] FAULT_INJECTION: forcing a failure. [ 214.927857][ T3550] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 214.935907][ T3546] ext4 filesystem being mounted at /135/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 214.949053][ T3550] CPU: 0 PID: 3550 Comm: syz.4.918 Not tainted 5.10.238-syzkaller-00008-g59e9a7228857 #0 [ 214.969014][ T3550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 214.979081][ T3550] Call Trace: [ 214.982391][ T3550] __dump_stack+0x21/0x24 [ 214.986740][ T3550] dump_stack_lvl+0x169/0x1d8 [ 214.991433][ T3550] ? show_regs_print_info+0x18/0x18 [ 214.996650][ T3550] ? __kasan_check_write+0x14/0x20 [ 215.001781][ T3550] ? down_read_trylock+0x100/0x150 [ 215.006902][ T3550] ? __init_rwsem+0x1c0/0x1c0 [ 215.011592][ T3550] dump_stack+0x15/0x1c [ 215.011667][ T3546] netlink: 'syz.5.920': attribute type 27 has an invalid length. [ 215.015750][ T3550] should_fail+0x3c1/0x510 [ 215.015761][ T3550] should_fail_usercopy+0x1a/0x20 [ 215.015772][ T3550] _copy_from_user+0x20/0xd0 [ 215.015792][ T3550] io_submit_one+0xbf/0x1660 [ 215.042027][ T3550] ? do_kern_addr_fault+0x80/0x80 [ 215.047040][ T3550] ? rw_verify_area+0x1c0/0x360 [ 215.051880][ T3550] ? vfs_write+0xac8/0xd60 [ 215.056290][ T3550] ? exc_page_fault+0x67/0xc0 [ 215.060947][ T3550] ? lookup_ioctx+0x2b0/0x2b0 [ 215.065603][ T3550] ? asm_exc_page_fault+0x1e/0x30 [ 215.070610][ T3550] ? __get_user_4+0x1c/0x30 [ 215.075092][ T3550] ? lookup_ioctx+0x1a9/0x2b0 [ 215.079753][ T3550] __se_sys_io_submit+0x16e/0x3c0 [ 215.084759][ T3550] ? __x64_sys_io_submit+0x90/0x90 [ 215.089857][ T3550] ? ksys_write+0x1eb/0x240 [ 215.094350][ T3550] ? __ia32_sys_read+0x90/0x90 [ 215.099092][ T3550] ? fpu__clear_all+0x20/0x20 [ 215.103755][ T3550] __x64_sys_io_submit+0x7b/0x90 [ 215.108680][ T3550] do_syscall_64+0x31/0x40 [ 215.113085][ T3550] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 215.118974][ T3550] RIP: 0033:0x7f50b01b5929 [ 215.123379][ T3550] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 215.142976][ T3550] RSP: 002b:00007f50ae7fd038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 215.151380][ T3550] RAX: ffffffffffffffda RBX: 00007f50b03dd080 RCX: 00007f50b01b5929 [ 215.159345][ T3550] RDX: 0000200000000780 RSI: 0000000000000001 RDI: 00007f50ae7d4000 [ 215.167301][ T3550] RBP: 00007f50ae7fd090 R08: 0000000000000000 R09: 0000000000000000 [ 215.175437][ T3550] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 215.183399][ T3550] R13: 0000000000000000 R14: 00007f50b03dd080 R15: 00007ffe7aadaa18 [ 215.228292][ T3553] syz.3.921[3553] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 215.228356][ T3553] syz.3.921[3553] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 215.245184][ T3553] 9p: Unknown uid 18446744073709551615 [ 215.290253][ T3557] syz.5.922[3557] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 215.290315][ T3557] syz.5.922[3557] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 215.331414][ T3557] 9p: Unknown uid 18446744073709551615 [ 215.408123][ T3562] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 215.429435][ T3562] EXT4-fs error (device loop3): ext4_mb_generate_buddy:808: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 215.444622][ T3562] EXT4-fs (loop3): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 17 with error 28 [ 215.458780][ T3562] EXT4-fs (loop3): This should not happen!! Data will be lost [ 215.458780][ T3562] [ 215.468634][ T3562] EXT4-fs (loop3): Total free blocks count 0 [ 215.474749][ T3562] EXT4-fs (loop3): Free/Dirty block details [ 215.481184][ T3562] EXT4-fs (loop3): free_blocks=2415919104 [ 215.487034][ T3562] EXT4-fs (loop3): dirty_blocks=32 [ 215.492277][ T3562] EXT4-fs (loop3): Block reservation details [ 215.498658][ T3562] EXT4-fs (loop3): i_reserved_data_blocks=2 [ 215.589129][ T3576] 9pnet: Insufficient options for proto=fd [ 215.736328][ T3585] syz.4.934[3585] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 215.736385][ T3585] syz.4.934[3585] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 216.124252][ T3595] 9pnet: Insufficient options for proto=fd [ 216.321948][ T3601] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 216.346357][ T3601] EXT4-fs (loop5): 1 truncate cleaned up [ 216.352186][ T3601] EXT4-fs (loop5): mounted filesystem without journal. Opts: minixdf,max_dir_size_kb=0x0000000000000007,stripe=0x0000000000000000,noblock_validity,debug_want_extra_isize=0x0000000000000006,,errors=continue [ 216.390388][ T3601] FAULT_INJECTION: forcing a failure. [ 216.390388][ T3601] name failslab, interval 1, probability 0, space 0, times 0 [ 216.403071][ T3601] CPU: 1 PID: 3601 Comm: syz.5.940 Not tainted 5.10.238-syzkaller-00008-g59e9a7228857 #0 [ 216.412867][ T3601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 216.422916][ T3601] Call Trace: [ 216.426197][ T3601] __dump_stack+0x21/0x24 [ 216.430530][ T3601] dump_stack_lvl+0x169/0x1d8 [ 216.435186][ T3601] ? show_regs_print_info+0x18/0x18 [ 216.440377][ T3601] ? unwind_next_frame+0x3d5/0x700 [ 216.445475][ T3601] dump_stack+0x15/0x1c [ 216.449616][ T3601] should_fail+0x3c1/0x510 [ 216.454034][ T3601] ? __alloc_skb+0x9e/0x520 [ 216.458528][ T3601] __should_failslab+0xa4/0xe0 [ 216.463288][ T3601] should_failslab+0x9/0x20 [ 216.467784][ T3601] kmem_cache_alloc+0x3d/0x2e0 [ 216.472545][ T3601] ? arch_perf_update_userpage+0x3b0/0x3b0 [ 216.478350][ T3601] ? unwind_get_return_address+0x4d/0x90 [ 216.483978][ T3601] __alloc_skb+0x9e/0x520 [ 216.485702][ T53] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 216.488308][ T3601] ? __kasan_check_write+0x14/0x20 [ 216.488318][ T3601] __napi_alloc_skb+0x158/0x2e0 [ 216.488337][ T3601] napi_get_frags+0x6b/0x170 [ 216.510385][ T3601] tun_get_user+0xa2c/0x3090 [ 216.514971][ T3601] ? tun_do_read+0x1c00/0x1c00 [ 216.519733][ T3601] ? kstrtouint_from_user+0x1a0/0x200 [ 216.525098][ T3601] ? __fsnotify_parent+0x5f5/0x6c0 [ 216.530191][ T3601] ? avc_policy_seqno+0x1b/0x70 [ 216.535027][ T3601] ? selinux_file_permission+0x2a5/0x510 [ 216.540640][ T3601] ? fsnotify_perm+0x66/0x4b0 [ 216.545303][ T3601] tun_chr_write_iter+0x1bf/0x270 [ 216.550325][ T3601] vfs_write+0x725/0xd60 [ 216.554576][ T3601] ? kernel_write+0x3c0/0x3c0 [ 216.559262][ T3601] ? __fget_files+0x2c4/0x320 [ 216.561320][ T3609] netlink: 40 bytes leftover after parsing attributes in process `syz.1.942'. [ 216.563943][ T3601] ? __fdget_pos+0x1f7/0x380 [ 216.563953][ T3601] ? ksys_write+0x71/0x240 [ 216.563973][ T3601] ksys_write+0x140/0x240 [ 216.574212][ T3609] netlink: 8 bytes leftover after parsing attributes in process `syz.1.942'. [ 216.577389][ T3601] ? __ia32_sys_read+0x90/0x90 [ 216.577402][ T3601] ? fpu__clear_all+0x20/0x20 [ 216.577423][ T3601] __x64_sys_write+0x7b/0x90 [ 216.577442][ T3601] do_syscall_64+0x31/0x40 [ 216.613251][ T3601] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 216.619124][ T3601] RIP: 0033:0x7f7227b36929 [ 216.623534][ T3601] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 216.643129][ T3601] RSP: 002b:00007f722619f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 216.651523][ T3601] RAX: ffffffffffffffda RBX: 00007f7227d5dfa0 RCX: 00007f7227b36929 [ 216.659488][ T3601] RDX: 0000000000000066 RSI: 0000200000000380 RDI: 0000000000000004 [ 216.667443][ T3601] RBP: 00007f722619f090 R08: 0000000000000000 R09: 0000000000000000 [ 216.675397][ T3601] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 216.683352][ T3601] R13: 0000000000000000 R14: 00007f7227d5dfa0 R15: 00007fff26583198 [ 216.815708][ T53] usb 4-1: Using ep0 maxpacket: 8 [ 216.835113][ T3617] syz.1.945[3617] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 216.835175][ T3617] syz.1.945[3617] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 216.986481][ T53] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 217.010324][ T53] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 217.020178][ T53] usb 4-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 217.029330][ T53] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.033847][ T3635] netlink: 72 bytes leftover after parsing attributes in process `syz.4.949'. [ 217.074149][ T53] usb 4-1: config 0 descriptor?? [ 217.560971][ T3639] netlink: 4 bytes leftover after parsing attributes in process `syz.1.954'. [ 217.572123][ T3639] netlink: 12 bytes leftover after parsing attributes in process `syz.1.954'. [ 217.657329][ T3648] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3648 comm=syz.5.957 [ 217.658070][ T3643] EXT4-fs (loop1): mounted filesystem without journal. Opts: sysvgroups,inode_readahead_blks=0x0000000000004000,,errors=continue [ 217.683054][ T3643] ext4 filesystem being mounted at /193/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 217.685725][ T53] usbhid 4-1:0.0: can't add hid device: -71 [ 217.693712][ T3643] netlink: 64 bytes leftover after parsing attributes in process `syz.1.956'. [ 217.751384][ T53] usbhid: probe of 4-1:0.0 failed with error -71 [ 217.765929][ T3648] FAT-fs (loop5): Unrecognized mount option "" or missing value [ 217.781401][ T53] usb 4-1: USB disconnect, device number 15 [ 217.783452][ T3655] syz.2.961[3655] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 217.787791][ T3655] syz.2.961[3655] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 217.919759][ T3666] netlink: 96 bytes leftover after parsing attributes in process `syz.2.964'. [ 218.030398][ T3667] EXT4-fs (loop4): Ignoring removed nobh option [ 218.371244][ T3667] EXT4-fs (loop4): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000dc4,acl,nolazytime,grpid,data_err=ignore,nobh,,errors=continue [ 219.172058][ T3667] EXT4-fs error (device loop4): ext4_mb_generate_buddy:808: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 219.225717][ T24] kauditd_printk_skb: 83 callbacks suppressed [ 219.225730][ T24] audit: type=1400 audit(1752191841.956:2035): avc: denied { append } for pid=3658 comm="syz.4.959" name="001" dev="devtmpfs" ino=180 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 219.360993][ T3689] netlink: 72 bytes leftover after parsing attributes in process `syz.3.969'. [ 219.741056][ T24] audit: type=1107 audit(1752191842.476:2036): pid=3695 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='k [ 219.741056][ T24]  UJ<,]Z}gG&}j۠nfaT^L<(C >mQl/~$?TQ(y75=a`/UvvvV5e2 ,7̺iv.GG2nt-WeQUU' [ 220.356649][ T24] audit: type=1326 audit(1752191843.096:2037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3705 comm="syz.5.974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7227b36929 code=0x7ffc0000 [ 220.475350][ T24] audit: type=1326 audit(1752191843.116:2038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3705 comm="syz.5.974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7227b36929 code=0x7ffc0000 [ 220.580706][ T24] audit: type=1326 audit(1752191843.116:2039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3705 comm="syz.5.974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7227b36929 code=0x7ffc0000 [ 220.604611][ T24] audit: type=1326 audit(1752191843.116:2040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3705 comm="syz.5.974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=282 compat=0 ip=0x7f7227b36929 code=0x7ffc0000 [ 220.650660][ T24] audit: type=1326 audit(1752191843.116:2041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3705 comm="syz.5.974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7227b36929 code=0x7ffc0000 [ 220.699643][ T24] audit: type=1326 audit(1752191843.116:2042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3705 comm="syz.5.974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f7227b36929 code=0x7ffc0000 [ 220.739547][ T24] audit: type=1326 audit(1752191843.116:2043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3705 comm="syz.5.974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7227b36929 code=0x7ffc0000 [ 220.789468][ T24] audit: type=1326 audit(1752191843.116:2044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3705 comm="syz.5.974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7227b36929 code=0x7ffc0000 [ 220.855937][ T3717] syz.1.978 uses obsolete (PF_INET,SOCK_PACKET) [ 220.873830][ T3717] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 220.969370][ T379] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 221.034600][ T3717] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 221.042573][ T3717] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 221.051654][ T3723] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 221.060823][ T3723] System zones: 0-2, 18-18, 34-34 [ 221.064999][ T3717] F2FS-fs (loop1): invalid crc value [ 221.067454][ T3723] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.980: bg 0: block 248: padding at end of block bitmap is not set [ 221.071359][ T3717] F2FS-fs (loop1): invalid crc value [ 221.086379][ T3723] EXT4-fs error (device loop2): ext4_acquire_dquot:6226: comm syz.2.980: Failed to acquire dquot type 1 [ 221.091155][ T3717] F2FS-fs (loop1): Failed to get valid F2FS checkpoint [ 221.109756][ T3723] EXT4-fs (loop2): 1 truncate cleaned up [ 221.115512][ T3723] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 221.124612][ T3723] ext4 filesystem being mounted at /196/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 221.235694][ T379] usb 4-1: Using ep0 maxpacket: 8 [ 221.355823][ T379] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 221.373724][ T379] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 221.384188][ T379] usb 4-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 221.385052][ T3723] netlink: 'syz.2.980': attribute type 27 has an invalid length. [ 221.393376][ T379] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.429558][ T379] usb 4-1: config 0 descriptor?? [ 222.686625][ T3750] exfat: Unknown parameter 'Ϙ' [ 223.611283][ T3759] netlink: 72 bytes leftover after parsing attributes in process `syz.2.986'. [ 223.621039][ T379] usbhid 4-1:0.0: can't add hid device: -71 [ 223.621705][ T3761] bridge0: the hash_elasticity option has been deprecated and is always 16 [ 223.636666][ T379] usbhid: probe of 4-1:0.0 failed with error -71 [ 223.646487][ T379] usb 4-1: USB disconnect, device number 16 [ 224.686565][ T24] kauditd_printk_skb: 27 callbacks suppressed [ 224.686578][ T24] audit: type=1400 audit(1752191847.426:2070): avc: denied { create } for pid=3756 comm="syz.5.990" dev="anon_inodefs" ino=27153 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 224.716383][ T3757] netlink: 88 bytes leftover after parsing attributes in process `syz.5.990'. [ 224.738673][ T24] audit: type=1400 audit(1752191847.456:2071): avc: denied { ioctl } for pid=3756 comm="syz.5.990" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=27153 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 224.932726][ T3782] input: syz1 as /devices/virtual/input/input41 [ 224.994895][ T3793] syz.2.1001[3793] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 224.994937][ T3793] syz.2.1001[3793] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 228.143763][ T3809] FAULT_INJECTION: forcing a failure. [ 228.143763][ T3809] name failslab, interval 1, probability 0, space 0, times 0 [ 228.204785][ T3806] EXT4-fs (loop5): Mount option "nojournal_checksum" incompatible with ext3 [ 228.241637][ T3809] CPU: 0 PID: 3809 Comm: syz.4.1005 Not tainted 5.10.238-syzkaller-00008-g59e9a7228857 #0 [ 228.251556][ T3809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 228.261614][ T3809] Call Trace: [ 228.264910][ T3809] __dump_stack+0x21/0x24 [ 228.269248][ T3809] dump_stack_lvl+0x169/0x1d8 [ 228.273926][ T3809] ? thaw_kernel_threads+0x220/0x220 [ 228.279213][ T3809] ? show_regs_print_info+0x18/0x18 [ 228.284415][ T3809] ? proc_fail_nth_read+0x210/0x210 [ 228.289611][ T3809] dump_stack+0x15/0x1c [ 228.293764][ T3809] should_fail+0x3c1/0x510 [ 228.298186][ T3809] ? getname_flags+0xb9/0x500 [ 228.302864][ T3809] __should_failslab+0xa4/0xe0 [ 228.307639][ T3809] should_failslab+0x9/0x20 [ 228.312141][ T3809] kmem_cache_alloc+0x3d/0x2e0 [ 228.316904][ T3809] getname_flags+0xb9/0x500 [ 228.321752][ T3809] getname+0x19/0x20 [ 228.325643][ T3809] do_sys_openat2+0xd9/0x6d0 [ 228.330231][ T3809] ? __kasan_check_write+0x14/0x20 [ 228.335356][ T3809] ? fput_many+0x15a/0x1a0 [ 228.339892][ T3809] ? do_sys_open+0xe0/0xe0 [ 228.344316][ T3809] ? fput+0x1a/0x20 [ 228.348130][ T3809] ? ksys_write+0x1eb/0x240 [ 228.352655][ T3809] ? __ia32_sys_read+0x90/0x90 [ 228.357429][ T3809] ? fpu__clear_all+0x20/0x20 [ 228.362124][ T3809] __x64_sys_openat+0x136/0x160 [ 228.366998][ T3809] do_syscall_64+0x31/0x40 [ 228.371418][ T3809] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 228.377310][ T3809] RIP: 0033:0x7f50b01b4290 [ 228.381726][ T3809] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 228.401333][ T3809] RSP: 002b:00007f50ae81df10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 228.409756][ T3809] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f50b01b4290 [ 228.417730][ T3809] RDX: 0000000000000002 RSI: 00007f50ae81dfa0 RDI: 00000000ffffff9c [ 228.425701][ T3809] RBP: 00007f50ae81dfa0 R08: 0000000000000000 R09: 0000000000000000 [ 228.433682][ T3809] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 228.441656][ T3809] R13: 0000000000000000 R14: 00007f50b03dcfa0 R15: 00007ffe7aadaa18 [ 229.940058][ T3837] bridge0: the hash_elasticity option has been deprecated and is always 16 [ 230.374174][ T3849] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 230.486432][ T24] audit: type=1400 audit(1752191853.226:2072): avc: denied { read } for pid=3848 comm="syz.5.1017" path="/153/file1/bus" dev="loop5" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 230.527951][ T24] audit: type=1400 audit(1752191853.246:2073): avc: denied { mounton } for pid=3848 comm="syz.5.1017" path="/153/file1/bus" dev="loop5" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 230.815735][ T308] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 231.116591][ T3856] exfat: Unknown parameter 'Ϙ' [ 231.287201][ T308] usb 6-1: unable to get BOS descriptor or descriptor too short [ 231.325881][ T308] usb 6-1: not running at top speed; connect to a high speed hub [ 231.459301][ T379] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 231.677618][ T308] usb 6-1: config 0 has an invalid interface number: 93 but max is 0 [ 231.693593][ T308] usb 6-1: config 0 has no interface number 0 [ 231.715060][ T308] usb 6-1: config 0 interface 93 has no altsetting 0 [ 232.559486][ T308] usb 6-1: New USB device found, idVendor=2040, idProduct=721e, bcdDevice=5e.2b [ 232.575730][ T308] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.604025][ T308] usb 6-1: Product: syz [ 232.608479][ T308] usb 6-1: Manufacturer: syz [ 232.613073][ T308] usb 6-1: SerialNumber: syz [ 232.639468][ T308] usb 6-1: config 0 descriptor?? [ 232.838757][ T3877] 9pnet: p9_errstr2errno: server reported unknown error [ 232.845931][ T379] usb 5-1: device descriptor read/all, error -71 [ 232.889421][ T3880] bridge0: the hash_elasticity option has been deprecated and is always 16 [ 232.911076][ T3882] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1027'. [ 232.916370][ T308] usb 6-1: unknown interface protocol 0x1a, assuming v1 [ 232.920173][ T3879] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1026'. [ 232.947111][ T308] usb 6-1: cannot find UAC_HEADER [ 232.962420][ T308] snd-usb-audio: probe of 6-1:0.93 failed with error -22 [ 232.970735][ T3882] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1027'. [ 233.001868][ T308] usb 6-1: USB disconnect, device number 7 [ 233.730505][ T3896] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3896 comm=syz.1.1031 [ 233.976837][ T24] audit: type=1400 audit(1752191856.716:2074): avc: denied { remove_name } for pid=1531 comm="syz-executor" name="lost+found" dev="loop5" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 234.060256][ T24] audit: type=1400 audit(1752191856.716:2075): avc: denied { rmdir } for pid=1531 comm="syz-executor" name="lost+found" dev="loop5" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 234.083249][ T1531] Trying to write to read-only block-device loop5 (partno 0) [ 234.103145][ T1531] Trying to write to read-only block-device loop5 (partno 0) [ 234.117545][ T1531] Trying to write to read-only block-device loop5 (partno 0) [ 234.124971][ T1531] Trying to write to read-only block-device loop5 (partno 0) [ 234.136857][ T24] audit: type=1400 audit(1752191856.716:2076): avc: denied { unlink } for pid=1531 comm="syz-executor" name="file0" dev="loop5" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 234.165764][ T1531] Trying to write to read-only block-device loop5 (partno 0) [ 234.173419][ T1531] Trying to write to read-only block-device loop5 (partno 0) [ 234.190946][ T24] audit: type=1400 audit(1752191856.716:2077): avc: denied { unlink } for pid=1531 comm="syz-executor" name="file1" dev="loop5" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 234.200707][ T1531] Trying to write to read-only block-device loop5 (partno 0) [ 234.235818][ T1531] Trying to write to read-only block-device loop5 (partno 0) [ 234.253438][ T1531] Trying to write to read-only block-device loop5 (partno 0) [ 234.259059][ T24] audit: type=1400 audit(1752191856.716:2078): avc: denied { unmount } for pid=1531 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 234.261016][ T289] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 234.295063][ T3909] Bluetooth: hci0: Frame reassembly failed (-84) [ 234.301647][ T1531] Trying to write to read-only block-device loop5 (partno 0) [ 234.313520][ T3909] SELinux: policydb magic number 0x7665642f does not match expected magic number 0xf97cff8c [ 234.316009][ T9] Bluetooth: hci0: Frame reassembly failed (-84) [ 234.323969][ T24] audit: type=1400 audit(1752191856.796:2079): avc: denied { unlink } for pid=1531 comm="syz-executor" name="bus" dev="loop5" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 234.366098][ T3909] SELinux: failed to load policy [ 234.371530][ T3851] Trying to write to read-only block-device loop5 (partno 0) [ 234.395719][ T24] audit: type=1107 audit(1752191856.896:2080): pid=3906 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='k [ 234.395719][ T24]  UJ<,]Z}gG&}j۠nfaT^L<(C >mQl/~$?TQ(y75=a`/UvvvV5e2 ,7̺iv.GG2nt-WeQUU' [ 234.426758][ T24] audit: type=1400 audit(1752191857.046:2081): avc: denied { load_policy } for pid=3908 comm="syz.1.1038" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 236.067677][ T24] kauditd_printk_skb: 1 callbacks suppressed [ 236.067700][ T24] audit: type=1400 audit(1752191858.546:2083): avc: denied { create } for pid=3914 comm="syz.2.1039" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 236.186523][ T3921] exfat: Unknown parameter 'Ϙ' [ 236.228680][ T24] audit: type=1400 audit(1752191858.646:2084): avc: denied { read } for pid=3914 comm="syz.2.1039" path="socket:[27963]" dev="sockfs" ino=27963 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 236.745523][ T3925] syz.2.1041[3925] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 236.745585][ T3925] syz.2.1041[3925] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 236.780210][ T24] audit: type=1400 audit(1752191859.516:2085): avc: denied { mounton } for pid=3924 comm="syz.2.1041" path="/211/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 236.857022][ T379] Bluetooth: hci0: command 0x1003 tx timeout [ 236.863489][ T40] Bluetooth: hci0: sending frame failed (-49) [ 236.921993][ T3929] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 236.931028][ T3929] ext4 filesystem being mounted at /191/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 236.943289][ T24] audit: type=1400 audit(1752191859.676:2086): avc: denied { mounton } for pid=3928 comm="syz.4.1043" path="/191/file0/file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 236.943327][ T3929] 9pnet: Insufficient options for proto=fd [ 236.986483][ T24] audit: type=1326 audit(1752191859.716:2087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3928 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50b01b5929 code=0x7ffc0000 [ 237.009762][ T24] audit: type=1326 audit(1752191859.726:2088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3928 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50b01b5929 code=0x7ffc0000 [ 237.013577][ T3932] EXT4-fs (loop2): mounted filesystem without journal. Opts: usrquota,grpjquota=,nodelalloc,,errors=continue [ 237.049785][ T3932] ext4 filesystem being mounted at /212/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 237.065754][ T289] usb 4-1: device descriptor read/all, error -71 [ 237.072970][ T24] audit: type=1326 audit(1752191859.726:2089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3928 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f50b01b5929 code=0x7ffc0000 [ 237.096933][ T24] audit: type=1326 audit(1752191859.736:2090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3928 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50b01b5929 code=0x7ffc0000 [ 237.121434][ T24] audit: type=1326 audit(1752191859.736:2091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3928 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50b01b5929 code=0x7ffc0000 [ 237.129674][ T3938] EXT4-fs (loop3): Ignoring removed nobh option [ 237.146035][ T24] audit: type=1326 audit(1752191859.736:2092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3928 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f50b01b5929 code=0x7ffc0000 [ 237.174964][ T3938] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobh,usrjquota=,,errors=continue [ 237.185557][ T3938] ext4 filesystem being mounted at /199/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 237.246756][ T3947] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1047'. [ 237.262245][ T3949] input: syz1 as /devices/virtual/input/input42 [ 237.271459][ T3951] input: syz1 as /devices/virtual/input/input43 [ 239.027018][ T3961] exfat: Unknown parameter 'Ϙ' [ 239.096722][ T3962] exfat: Unknown parameter 'Ϙ' [ 239.976892][ T570] Bluetooth: hci0: command 0x1001 tx timeout [ 239.983878][ T40] Bluetooth: hci0: sending frame failed (-49) [ 239.987923][ T3971] 9pnet: Insufficient options for proto=fd [ 240.276148][ T3978] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3978 comm=syz.3.1057 [ 240.437076][ T53] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 240.505692][ T308] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 240.675666][ T53] usb 5-1: Using ep0 maxpacket: 8 [ 240.795873][ T53] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 240.806928][ T53] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 240.817056][ T53] usb 5-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 240.826514][ T53] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.848221][ T53] usb 5-1: config 0 descriptor?? [ 240.875806][ T308] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 240.884593][ T308] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 240.897581][ T308] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 240.906808][ T308] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 240.918048][ T308] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 241.035709][ T3980] EXT4-fs (loop3): Ignoring removed bh option [ 241.043152][ T3980] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 241.054203][ T3980] EXT4-fs (loop3): 1 truncate cleaned up [ 241.060149][ T3980] EXT4-fs (loop3): mounted filesystem without journal. Opts: bh,errors=remount-ro, [ 241.069812][ T308] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 241.078084][ T3980] EXT4-fs error (device loop3): ext4_generic_delete_entry:2683: inode #2: block 13: comm syz.3.1058: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 241.079028][ T308] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 241.099621][ T3980] EXT4-fs (loop3): Remounting filesystem read-only [ 241.108564][ T308] usb 3-1: Product: syz [ 241.114086][ T3980] EXT4-fs error (device loop3) in ext4_delete_entry:2741: Corrupt filesystem [ 241.118730][ T308] usb 3-1: Manufacturer: syz [ 241.131816][ T3980] EXT4-fs warning (device loop3): ext4_rename_delete:3901: inode #2: comm syz.3.1058: Deleting old file: nlink 5, error=-117 [ 241.145494][ T24] kauditd_printk_skb: 93 callbacks suppressed [ 241.145508][ T24] audit: type=1326 audit(1752191863.886:2186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3979 comm="syz.3.1058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77cd916929 code=0x7ffc0000 [ 241.183937][ T24] audit: type=1326 audit(1752191863.886:2187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3979 comm="syz.3.1058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77cd916929 code=0x7ffc0000 [ 241.207986][ T308] cdc_wdm 3-1:1.0: skipping garbage [ 241.208134][ T24] audit: type=1326 audit(1752191863.886:2188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3979 comm="syz.3.1058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f77cd916929 code=0x7ffc0000 [ 241.213203][ T308] cdc_wdm 3-1:1.0: skipping garbage [ 241.236842][ T24] audit: type=1326 audit(1752191863.886:2189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3979 comm="syz.3.1058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77cd916929 code=0x7ffc0000 [ 241.243498][ T3989] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1060'. [ 241.266133][ T24] audit: type=1326 audit(1752191863.886:2190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3979 comm="syz.3.1058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77cd916929 code=0x7ffc0000 [ 241.298180][ T24] audit: type=1326 audit(1752191863.886:2191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3979 comm="syz.3.1058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f77cd916929 code=0x7ffc0000 [ 241.298634][ T308] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 241.321908][ T24] audit: type=1326 audit(1752191863.886:2192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3979 comm="syz.3.1058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77cd916929 code=0x7ffc0000 [ 241.358199][ T24] audit: type=1326 audit(1752191863.886:2193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3979 comm="syz.3.1058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77cd916929 code=0x7ffc0000 [ 241.381961][ T24] audit: type=1326 audit(1752191863.886:2194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3979 comm="syz.3.1058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f77cd916929 code=0x7ffc0000 [ 241.405756][ T24] audit: type=1326 audit(1752191863.886:2195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3979 comm="syz.3.1058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77cd916929 code=0x7ffc0000 [ 241.466444][ T4000] 9pnet: Insufficient options for proto=fd [ 241.506250][ T3179] usb 3-1: USB disconnect, device number 11 [ 241.565716][ T53] usbhid 5-1:0.0: can't add hid device: -71 [ 241.571804][ T53] usbhid: probe of 5-1:0.0 failed with error -71 [ 241.580637][ T53] usb 5-1: USB disconnect, device number 18 [ 241.645726][ T289] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 242.005716][ T379] Bluetooth: hci0: command 0x1009 tx timeout [ 242.018531][ T289] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 242.032819][ T289] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 242.048808][ T4006] 9pnet: Insufficient options for proto=fd [ 242.049421][ T289] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 242.064164][ T289] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 242.076090][ T289] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 242.094255][ T296] Bluetooth: hci1: Frame reassembly failed (-84) [ 242.201862][ T4004] F2FS-fs (loop4): Found nat_bits in checkpoint [ 242.208307][ T289] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 242.218297][ T289] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 242.231701][ T289] usb 4-1: Product: syz [ 242.236109][ T289] usb 4-1: Manufacturer: syz [ 242.239155][ T4004] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 242.270497][ T4011] attempt to access beyond end of device [ 242.270497][ T4011] loop4: rw=2049, want=45104, limit=40427 [ 242.276212][ T289] cdc_wdm 4-1:1.0: skipping garbage [ 242.283293][ T4004] Bluetooth: hci1: Frame reassembly failed (-90) [ 242.287502][ T289] cdc_wdm 4-1:1.0: skipping garbage [ 242.299440][ T289] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 242.332994][ T4016] syz.5.1068[4016] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 242.333057][ T4016] syz.5.1068[4016] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 242.487726][ T53] usb 4-1: USB disconnect, device number 19 [ 243.018049][ T4027] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1072'. [ 243.240916][ T4034] 9pnet: Insufficient options for proto=fd [ 243.416809][ T4038] exfat: Unknown parameter 'Ϙ' [ 243.481837][ T4038] netlink: 72 bytes leftover after parsing attributes in process `syz.5.1075'. [ 245.976886][ T4047] exfat: Unknown parameter 'Ϙ' [ 246.006913][ T289] Bluetooth: hci1: command 0x1003 tx timeout [ 246.013084][ T1099] Bluetooth: hci1: sending frame failed (-49) [ 246.180492][ T4052] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1078'. [ 246.569320][ T4055] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 247.559603][ T4069] bridge0: the hash_elasticity option has been deprecated and is always 16 [ 247.601756][ T4073] EXT4-fs (loop5): Mount option "nojournal_checksum" incompatible with ext3 [ 248.085696][ T53] Bluetooth: hci1: command 0x1001 tx timeout [ 248.091895][ T1099] Bluetooth: hci1: sending frame failed (-49) [ 248.309356][ T4087] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1090'. [ 248.940820][ T4093] exfat: Unknown parameter 'Ϙ' [ 249.330384][ T4096] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 250.046519][ T4107] exfat: Unknown parameter 'Ϙ' [ 250.176375][ T53] Bluetooth: hci1: command 0x1009 tx timeout [ 250.582105][ T4113] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 251.135218][ T4118] input: syz1 as /devices/virtual/input/input44 [ 251.276208][ T4124] EXT4-fs (loop2): Mount option "nojournal_checksum" incompatible with ext3 [ 251.374020][ T24] kauditd_printk_skb: 30 callbacks suppressed [ 251.374121][ T24] audit: type=1400 audit(1752191874.106:2226): avc: denied { setopt } for pid=4112 comm="syz.5.1097" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 251.471224][ T4129] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 251.525409][ T4129] System zones: 0-2, 18-18, 34-34 [ 251.636732][ T4129] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.1100: bg 0: block 248: padding at end of block bitmap is not set [ 251.651781][ T4129] Quota error (device loop1): write_blk: dquota write failed [ 251.659512][ T4129] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 251.670203][ T4129] EXT4-fs error (device loop1): ext4_acquire_dquot:6226: comm syz.1.1100: Failed to acquire dquot type 1 [ 251.684109][ T4129] EXT4-fs (loop1): 1 truncate cleaned up [ 251.689835][ T4129] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 251.698874][ T4129] ext4 filesystem being mounted at /218/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 251.766918][ T4129] netlink: 'syz.1.1100': attribute type 27 has an invalid length. [ 251.977379][ T4143] exfat: Unknown parameter 'Ϙ' [ 252.058681][ T4143] netlink: 72 bytes leftover after parsing attributes in process `syz.5.1103'. [ 253.131373][ T4137] bridge0: the hash_elasticity option has been deprecated and is always 16 [ 253.343608][ T4156] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4156 comm=syz.5.1107 [ 253.749341][ T4155] exfat: Unknown parameter 'Ϙ' [ 254.608745][ T24] audit: type=1400 audit(1752191877.346:2227): avc: denied { setcheckreqprot } for pid=4152 comm="syz.4.1104" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 254.692544][ T24] audit: type=1400 audit(1752191877.426:2228): avc: denied { write } for pid=4152 comm="syz.4.1104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 254.910531][ T24] audit: type=1326 audit(1752191877.646:2229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4167 comm="syz.3.1113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77cd916929 code=0x7ffc0000 [ 254.934206][ T3179] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 255.018467][ T24] audit: type=1326 audit(1752191877.646:2230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4167 comm="syz.3.1113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f77cd916929 code=0x7ffc0000 [ 255.188277][ T24] audit: type=1326 audit(1752191877.646:2231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4167 comm="syz.3.1113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77cd916929 code=0x7ffc0000 [ 255.191124][ T4171] exfat: Unknown parameter 'Ϙ' [ 255.220979][ T24] audit: type=1326 audit(1752191877.646:2232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4167 comm="syz.3.1113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=282 compat=0 ip=0x7f77cd916929 code=0x7ffc0000 [ 255.399319][ T24] audit: type=1326 audit(1752191877.646:2233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4167 comm="syz.3.1113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77cd916929 code=0x7ffc0000 [ 255.485786][ T3179] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 255.495464][ T3179] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 255.507382][ T3179] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 255.517920][ T3179] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 255.530478][ T3179] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 255.685907][ T3179] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 255.696210][ T3179] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 255.704722][ T3179] usb 3-1: Product: syz [ 256.059295][ T3179] usb 3-1: Manufacturer: syz [ 256.096228][ T3179] cdc_wdm 3-1:1.0: skipping garbage [ 256.137587][ T3179] cdc_wdm 3-1:1.0: skipping garbage [ 256.143602][ T3179] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 256.213552][ T4179] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1114'. [ 256.300294][ T3179] usb 3-1: USB disconnect, device number 12 [ 256.850499][ T4197] input: syz1 as /devices/virtual/input/input45 [ 257.000996][ T4201] FAULT_INJECTION: forcing a failure. [ 257.000996][ T4201] name failslab, interval 1, probability 0, space 0, times 0 [ 257.013650][ T4201] CPU: 0 PID: 4201 Comm: syz.2.1123 Not tainted 5.10.238-syzkaller-00008-g59e9a7228857 #0 [ 257.023546][ T4201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 257.033610][ T4201] Call Trace: [ 257.036915][ T4201] __dump_stack+0x21/0x24 [ 257.041261][ T4201] dump_stack_lvl+0x169/0x1d8 [ 257.045958][ T4201] ? show_regs_print_info+0x18/0x18 [ 257.051354][ T4201] ? search_extable+0x8c/0xd0 [ 257.056048][ T4201] dump_stack+0x15/0x1c [ 257.060213][ T4201] should_fail+0x3c1/0x510 [ 257.064641][ T4201] ? __alloc_skb+0x9e/0x520 [ 257.069205][ T4201] __should_failslab+0xa4/0xe0 [ 257.073983][ T4201] should_failslab+0x9/0x20 [ 257.078493][ T4201] kmem_cache_alloc+0x3d/0x2e0 [ 257.083262][ T4201] ? unwind_get_return_address+0x4d/0x90 [ 257.088898][ T4201] __alloc_skb+0x9e/0x520 [ 257.093243][ T4201] ? __kasan_check_write+0x14/0x20 [ 257.098363][ T4201] __napi_alloc_skb+0x158/0x2e0 [ 257.103214][ T4201] napi_get_frags+0x6b/0x170 [ 257.107796][ T4201] tun_get_user+0xa2c/0x3090 [ 257.112378][ T4201] ? bad_area_nosemaphore+0x2d/0x40 [ 257.117564][ T4201] ? do_kern_addr_fault+0x6b/0x80 [ 257.122576][ T4201] ? tun_do_read+0x1c00/0x1c00 [ 257.127329][ T4201] ? kstrtouint_from_user+0x1a0/0x200 [ 257.132693][ T4201] ? __fsnotify_parent+0x5f5/0x6c0 [ 257.137790][ T4201] ? avc_policy_seqno+0x1b/0x70 [ 257.142630][ T4201] ? selinux_file_permission+0x2a5/0x510 [ 257.148256][ T4201] ? fsnotify_perm+0x66/0x4b0 [ 257.152920][ T4201] tun_chr_write_iter+0x1bf/0x270 [ 257.157929][ T4201] vfs_write+0x725/0xd60 [ 257.162158][ T4201] ? kernel_write+0x3c0/0x3c0 [ 257.166819][ T4201] ? __fget_files+0x2c4/0x320 [ 257.171487][ T4201] ? __fdget_pos+0x1f7/0x380 [ 257.176075][ T4201] ? ksys_write+0x71/0x240 [ 257.180486][ T4201] ksys_write+0x140/0x240 [ 257.184806][ T4201] ? __ia32_sys_read+0x90/0x90 [ 257.189651][ T4201] ? fpu__clear_all+0x20/0x20 [ 257.194322][ T4201] __x64_sys_write+0x7b/0x90 [ 257.198905][ T4201] do_syscall_64+0x31/0x40 [ 257.203331][ T4201] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 257.209217][ T4201] RIP: 0033:0x7faa3a876929 [ 257.213627][ T4201] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 257.233231][ T4201] RSP: 002b:00007faa38edf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 257.241641][ T4201] RAX: ffffffffffffffda RBX: 00007faa3aa9dfa0 RCX: 00007faa3a876929 [ 257.249607][ T4201] RDX: 0000000000000066 RSI: 0000200000000340 RDI: 0000000000000003 [ 257.257654][ T4201] RBP: 00007faa38edf090 R08: 0000000000000000 R09: 0000000000000000 [ 257.265623][ T4201] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 257.273585][ T4201] R13: 0000000000000000 R14: 00007faa3aa9dfa0 R15: 00007ffff72e6928 [ 258.902474][ T4221] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1128'. [ 258.912212][ T4221] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1128'. [ 259.130140][ T4230] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 259.248078][ T308] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 260.095797][ T308] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 260.111777][ T308] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 260.136531][ T308] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 260.264641][ T308] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 260.373378][ T4255] EXT4-fs (loop1): Ignoring removed nobh option [ 260.553560][ T4255] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobh,errors=remount-ro,inode_readahead_blks=0x0000000000010000,noinit_itable,resuid=0x0000000000000000, [ 260.624898][ T4255] ext4 filesystem being mounted at /229/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 260.782172][ T24] kauditd_printk_skb: 33 callbacks suppressed [ 260.782194][ T24] audit: type=1326 audit(1752191883.516:2267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4254 comm="syz.1.1140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac0ff22929 code=0x7ffc0000 [ 260.827757][ T4255] EXT4-fs error (device loop1): ext4_mb_generate_buddy:808: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 260.945096][ T4255] EXT4-fs (loop1): Remounting filesystem read-only [ 260.952300][ T24] audit: type=1326 audit(1752191883.546:2268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4254 comm="syz.1.1140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=121 compat=0 ip=0x7fac0ff22929 code=0x7ffc0000 [ 260.983438][ T49] Quota error (device loop1): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync! [ 260.996159][ T49] Quota error (device loop1): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync! [ 261.008754][ T24] audit: type=1326 audit(1752191883.556:2269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4254 comm="syz.1.1140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac0ff22929 code=0x7ffc0000 [ 261.033624][ T24] audit: type=1326 audit(1752191883.556:2270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4254 comm="syz.1.1140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=82 compat=0 ip=0x7fac0ff22929 code=0x7ffc0000 [ 261.057381][ T24] audit: type=1400 audit(1752191883.556:2271): avc: denied { rename } for pid=4254 comm="syz.1.1140" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 261.080320][ T24] audit: type=1326 audit(1752191883.686:2272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4254 comm="syz.1.1140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac0ff22929 code=0x7ffc0000 [ 261.104976][ T4263] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1141'. [ 261.114021][ T24] audit: type=1326 audit(1752191883.686:2273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4254 comm="syz.1.1140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac0ff22929 code=0x7ffc0000 [ 261.138096][ T4263] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1141'. [ 261.147370][ T308] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 261.276086][ T308] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 261.297864][ T308] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 261.635978][ T308] usb 3-1: Product: syz [ 261.650206][ T308] usb 3-1: Manufacturer: syz [ 261.716201][ T308] cdc_wdm 3-1:1.0: skipping garbage [ 261.723617][ T308] cdc_wdm 3-1:1.0: skipping garbage [ 261.732378][ T308] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 261.925672][ T298] usb 3-1: USB disconnect, device number 13 [ 261.937377][ T4271] F2FS-fs (loop1): Invalid segment/section count (31, 2328 x 1) [ 261.948501][ T4271] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 261.957049][ T4271] F2FS-fs (loop1): Unrecognized mount option "$4I_5`rbSZ`|*q椛Ŵ01777777777777777777777" or missing value [ 262.223279][ T24] audit: type=1400 audit(1752191884.956:2274): avc: denied { listen } for pid=4270 comm="syz.1.1142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 263.020359][ T4287] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 264.037415][ T4308] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 264.121187][ T4306] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1154'. [ 264.164201][ T4306] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1154'. [ 264.602881][ T9] Bluetooth: hci0: Frame reassembly failed (-84) [ 264.951452][ T4330] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.958706][ T4330] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.966319][ T4330] device bridge_slave_0 entered promiscuous mode [ 264.974461][ T4330] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.981808][ T4330] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.989511][ T4330] device bridge_slave_1 entered promiscuous mode [ 265.078211][ T4330] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.085307][ T4330] bridge0: port 2(bridge_slave_1) entered forwarding state [ 265.092629][ T4330] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.097122][ T4322] F2FS-fs (loop1): Found nat_bits in checkpoint [ 265.099692][ T4330] bridge0: port 1(bridge_slave_0) entered forwarding state [ 265.161808][ T4337] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 265.172935][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 265.173139][ T4322] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 265.188409][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.195561][ T4337] System zones: 0-2, 18-18, 34-34 [ 265.201268][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.217587][ T4337] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.1162: bg 0: block 248: padding at end of block bitmap is not set [ 265.232264][ T4337] EXT4-fs error (device loop5): ext4_acquire_dquot:6226: comm syz.5.1162: Failed to acquire dquot type 1 [ 265.238529][ T4335] attempt to access beyond end of device [ 265.238529][ T4335] loop1: rw=2049, want=45104, limit=40427 [ 265.261820][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 265.270669][ T4337] EXT4-fs (loop5): 1 truncate cleaned up [ 265.271687][ T4322] Bluetooth: hci0: Frame reassembly failed (-90) [ 265.283223][ T4337] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 265.283347][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 265.301171][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.305865][ T4337] ext4 filesystem being mounted at /183/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 265.308247][ T296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 265.326364][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 265.335186][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 265.343751][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.350846][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 265.370425][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 265.378557][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 265.387305][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 265.395362][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 265.415720][ T4337] netlink: 'syz.5.1162': attribute type 27 has an invalid length. [ 265.430259][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 265.438993][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 265.451654][ T4330] device veth0_vlan entered promiscuous mode [ 265.472067][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 265.480427][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 265.493634][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 265.501291][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 265.513018][ T4330] device veth1_macvtap entered promiscuous mode [ 265.519755][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 265.528041][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 265.536337][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 265.560632][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 265.570913][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 265.584275][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 265.593703][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 265.630873][ T4357] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1167'. [ 265.641785][ T4357] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1167'. [ 265.947362][ T4364] exfat: Unknown parameter 'Ϙ' [ 266.252379][ T4369] EXT4-fs (loop2): Unrecognized mount option "appraise" or missing value [ 266.822022][ T2944] Bluetooth: hci0: command 0x1003 tx timeout [ 266.828111][ T1099] Bluetooth: hci0: sending frame failed (-49) [ 267.032235][ T4376] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.039487][ T4376] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.170269][ T24] kauditd_printk_skb: 41 callbacks suppressed [ 267.170283][ T24] audit: type=1107 audit(1752191889.806:2314): pid=4378 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='k [ 267.170283][ T24]  UJ<,]Z}gG&}j۠nfaT^L<(C >mQl/~$?TQ(y75=a`/UvvvV5e2 ,7̺iv.GG2nt-WeQUU' [ 267.552609][ T4367] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 267.575716][ T4367] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 267.584900][ T4367] F2FS-fs (loop5): invalid crc value [ 267.593253][ T4367] F2FS-fs (loop5): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 9809626597) [ 267.628844][ T4367] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 267.636198][ T4367] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 267.665100][ T4367] fscrypt (loop5, inode 3): Error -61 getting encryption context [ 267.728400][ T4396] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1180'. [ 267.989348][ T4405] input: syz1 as /devices/virtual/input/input47 [ 268.133321][ T4403] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1182'. [ 268.159727][ T4403] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1182'. [ 268.232161][ T4408] attempt to access beyond end of device [ 268.232161][ T4408] loop5: rw=2049, want=1041, limit=128 [ 268.262691][ T4408] attempt to access beyond end of device [ 268.262691][ T4408] loop5: rw=524288, want=369, limit=128 [ 268.273948][ T4408] attempt to access beyond end of device [ 268.273948][ T4408] loop5: rw=0, want=153, limit=128 [ 268.285192][ T4408] attempt to access beyond end of device [ 268.285192][ T4408] loop5: rw=0, want=153, limit=128 [ 268.286175][ T4413] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue [ 268.296195][ T4408] attempt to access beyond end of device [ 268.296195][ T4408] loop5: rw=0, want=153, limit=128 [ 268.317524][ T4416] EXT4-fs (loop4): Ignoring removed bh option [ 268.328111][ T4408] attempt to access beyond end of device [ 268.328111][ T4408] loop5: rw=0, want=153, limit=128 [ 268.330599][ T4416] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 268.389933][ T4416] EXT4-fs (loop4): 1 truncate cleaned up [ 268.429316][ T4416] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsold,resgid=0x0000000000000000,bh,noload,data_err=ignore,noblock_validity,,errors=continue [ 270.136151][ T3179] Bluetooth: hci0: command 0x1001 tx timeout [ 270.142232][ T1099] Bluetooth: hci0: sending frame failed (-49) [ 270.215705][ T5] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 270.282697][ T24] audit: type=1326 audit(1752191893.016:2315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4435 comm="syz.4.1189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50b01b5929 code=0x7ffc0000 [ 270.799060][ T24] audit: type=1326 audit(1752191893.016:2316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4435 comm="syz.4.1189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50b01b5929 code=0x7ffc0000 [ 270.823674][ T24] audit: type=1326 audit(1752191893.016:2317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4435 comm="syz.4.1189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f50b01b5929 code=0x7ffc0000 [ 270.847515][ T24] audit: type=1326 audit(1752191893.016:2318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4435 comm="syz.4.1189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50b01b5929 code=0x7ffc0000 [ 270.871523][ T24] audit: type=1326 audit(1752191893.016:2319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4435 comm="syz.4.1189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50b01b5929 code=0x7ffc0000 [ 270.895219][ T24] audit: type=1326 audit(1752191893.016:2320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4435 comm="syz.4.1189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f50b01b5929 code=0x7ffc0000 [ 270.919239][ T24] audit: type=1326 audit(1752191893.016:2321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4435 comm="syz.4.1189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50b01b5929 code=0x7ffc0000 [ 270.943113][ T24] audit: type=1326 audit(1752191893.016:2322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4435 comm="syz.4.1189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50b01b5929 code=0x7ffc0000 [ 270.967847][ T5] usb 6-1: Using ep0 maxpacket: 32 [ 270.973613][ T24] audit: type=1326 audit(1752191893.016:2323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4435 comm="syz.4.1189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f50b01b5929 code=0x7ffc0000 [ 271.055702][ T5] usb 6-1: device descriptor read/all, error -71 [ 271.086570][ T4446] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 271.094808][ T4446] System zones: 0-2, 18-18, 34-34 [ 271.101072][ T4446] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.1193: bg 0: block 248: padding at end of block bitmap is not set [ 271.116221][ T4446] EXT4-fs error (device loop4): ext4_acquire_dquot:6226: comm syz.4.1193: Failed to acquire dquot type 1 [ 271.131676][ T4446] EXT4-fs (loop4): 1 truncate cleaned up [ 271.139700][ T4446] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 271.183370][ T4446] ext4 filesystem being mounted at /218/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 271.207151][ T4457] input: syz1 as /devices/virtual/input/input48 [ 271.262016][ T4454] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1195'. [ 271.442935][ T4454] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1195'. [ 271.478236][ T4446] netlink: 'syz.4.1193': attribute type 27 has an invalid length. [ 272.272005][ T53] Bluetooth: hci0: command 0x1009 tx timeout [ 272.354597][ T4480] 9pnet: Insufficient options for proto=fd [ 272.360491][ T5] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 272.566467][ T4484] exfat: Unknown parameter 'Ϙ' [ 272.666395][ T4484] netlink: 72 bytes leftover after parsing attributes in process `syz.6.1203'. [ 272.804739][ T5] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 272.874289][ T5] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 272.946692][ T5] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 272.960296][ T4487] 9pnet: Insufficient options for proto=fd [ 272.969852][ T4487] FAULT_INJECTION: forcing a failure. [ 272.969852][ T4487] name failslab, interval 1, probability 0, space 0, times 0 [ 272.984091][ T5] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 272.996900][ T5] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 273.009290][ T4487] CPU: 0 PID: 4487 Comm: syz.2.1205 Not tainted 5.10.238-syzkaller-00008-g59e9a7228857 #0 [ 273.019203][ T4487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 273.029268][ T4487] Call Trace: [ 273.032577][ T4487] __dump_stack+0x21/0x24 [ 273.036921][ T4487] dump_stack_lvl+0x169/0x1d8 [ 273.041612][ T4487] ? show_regs_print_info+0x18/0x18 [ 273.046817][ T4487] ? preempt_schedule_irq+0xbb/0x110 [ 273.052101][ T4487] ? preempt_schedule_notrace+0x110/0x110 [ 273.057834][ T4487] dump_stack+0x15/0x1c [ 273.061989][ T4487] should_fail+0x3c1/0x510 [ 273.066414][ T4487] ? shmem_alloc_inode+0x1a/0x30 [ 273.071355][ T4487] __should_failslab+0xa4/0xe0 [ 273.076125][ T4487] should_failslab+0x9/0x20 [ 273.080631][ T4487] kmem_cache_alloc+0x3d/0x2e0 [ 273.085396][ T4487] ? shmem_match+0x160/0x160 [ 273.089986][ T4487] shmem_alloc_inode+0x1a/0x30 [ 273.094758][ T4487] new_inode_pseudo+0x62/0x210 [ 273.099525][ T4487] new_inode+0x28/0x1e0 [ 273.103770][ T4487] ? percpu_counter_add_batch+0x13c/0x160 [ 273.109504][ T4487] shmem_get_inode+0x34a/0x9d0 [ 273.114269][ T4487] __shmem_file_setup+0x165/0x2b0 [ 273.119293][ T4487] shmem_zero_setup+0xa4/0x1f0 [ 273.124060][ T4487] mmap_region+0x1442/0x19d0 [ 273.128655][ T4487] ? selinux_mmap_addr+0xbe/0xe0 [ 273.133600][ T4487] do_mmap+0x7b0/0xe10 [ 273.137678][ T4487] vm_mmap_pgoff+0x1e0/0x340 [ 273.142532][ T4487] ? account_locked_vm+0x1a0/0x1a0 [ 273.147992][ T4487] ? __kasan_check_write+0x14/0x20 [ 273.153111][ T4487] ? switch_fpu_return+0x197/0x340 [ 273.158312][ T4487] ksys_mmap_pgoff+0xfd/0x1e0 [ 273.163002][ T4487] ? __kasan_check_read+0x11/0x20 [ 273.168041][ T4487] __x64_sys_mmap+0xfa/0x110 [ 273.172635][ T4487] do_syscall_64+0x31/0x40 [ 273.177053][ T4487] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 273.182947][ T4487] RIP: 0033:0x7faa3a876929 [ 273.187364][ T4487] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 273.206982][ T4487] RSP: 002b:00007faa38edf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 273.215410][ T4487] RAX: ffffffffffffffda RBX: 00007faa3aa9dfa0 RCX: 00007faa3a876929 [ 273.223475][ T4487] RDX: 000000000000000b RSI: 0000000000fbe000 RDI: 0000200000000000 [ 273.231453][ T4487] RBP: 00007faa38edf090 R08: ffffffffffffffff R09: 0000000000000000 [ 273.239424][ T4487] R10: 0000000000000031 R11: 0000000000000246 R12: 0000000000000001 [ 273.247395][ T4487] R13: 0000000000000000 R14: 00007faa3aa9dfa0 R15: 00007ffff72e6928 [ 273.275096][ T4489] 9pnet: Insufficient options for proto=fd [ 273.282229][ T4489] netlink: 'syz.2.1206': attribute type 27 has an invalid length. [ 273.390230][ T4500] syz.4.1210[4500] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 273.390289][ T4500] syz.4.1210[4500] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 273.455763][ T5] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 273.476475][ T5] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 273.488371][ T4502] EXT4-fs (loop2): Unrecognized mount option "appraise" or missing value [ 273.489046][ T5] usb 6-1: Product: syz [ 273.501998][ T5] usb 6-1: Manufacturer: syz [ 273.546132][ T5] cdc_wdm 6-1:1.0: skipping garbage [ 273.551358][ T5] cdc_wdm 6-1:1.0: skipping garbage [ 273.563369][ T5] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 273.912664][ T5] usb 6-1: USB disconnect, device number 9 [ 273.965693][ T308] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 274.205685][ T308] usb 5-1: Using ep0 maxpacket: 8 [ 274.269132][ T24] kauditd_printk_skb: 11 callbacks suppressed [ 274.269146][ T24] audit: type=1400 audit(1752191897.006:2333): avc: denied { accept } for pid=4510 comm="syz.6.1214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 274.345754][ T308] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 274.356503][ T308] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 274.366390][ T308] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 274.387148][ T4512] EXT4-fs (loop6): mounted filesystem without journal. Opts: init_itable,usrjquota=,quota,norecovery,auto_da_alloc,noquota,grpquota,barrier=0x0000000000000000,grpjquota=,jqfmt=vfsold,,errors=continue [ 274.441737][ T4517] syz.5.1215[4517] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 274.441798][ T4517] syz.5.1215[4517] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 274.463534][ T4511] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.1214: bg 0: block 234: padding at end of block bitmap is not set [ 274.490886][ T4511] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 129 with error 28 [ 274.503756][ T4511] EXT4-fs (loop6): This should not happen!! Data will be lost [ 274.503756][ T4511] [ 274.525911][ T4511] EXT4-fs (loop6): Total free blocks count 0 [ 274.531930][ T4511] EXT4-fs (loop6): Free/Dirty block details [ 274.538251][ T4511] EXT4-fs (loop6): free_blocks=0 [ 274.543212][ T4511] EXT4-fs (loop6): dirty_blocks=144 [ 274.548675][ T4511] EXT4-fs (loop6): Block reservation details [ 274.554947][ T4511] EXT4-fs (loop6): i_reserved_data_blocks=9 [ 274.585839][ T308] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 274.594978][ T308] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.610789][ T308] usb 5-1: Product: syz [ 274.690416][ T4525] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4525 comm=syz.2.1216 [ 274.854756][ T4524] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 274.863357][ T4524] System zones: 0-2, 18-18, 34-34 [ 274.874575][ T4524] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.1217: bg 0: block 248: padding at end of block bitmap is not set [ 274.882678][ T308] usb 5-1: Manufacturer: syz [ 274.893922][ T4524] Quota error (device loop5): write_blk: dquota write failed [ 274.901422][ T4524] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 274.911713][ T4524] EXT4-fs error (device loop5): ext4_acquire_dquot:6226: comm syz.5.1217: Failed to acquire dquot type 1 [ 274.923570][ T4524] EXT4-fs (loop5): 1 truncate cleaned up [ 274.929334][ T4524] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 274.931808][ T308] usb 5-1: SerialNumber: syz [ 274.938487][ T4524] ext4 filesystem being mounted at /191/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 274.965737][ T4505] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 274.972119][ T4524] netlink: 'syz.5.1217': attribute type 27 has an invalid length. [ 274.989395][ T308] cdc_ether 5-1:1.0: skipping garbage [ 274.994977][ T308] cdc_ether: probe of 5-1:1.0 failed with error -22 [ 275.336449][ T4537] exfat: Unknown parameter 'Ϙ' [ 275.420084][ T4505] udc-core: couldn't find an available UDC or it's busy [ 275.427463][ T4505] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 275.536601][ T4540] syz.1.1222[4540] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 275.537176][ T4540] syz.1.1222[4540] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 275.614756][ T4505] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1212'. [ 275.731177][ T308] usb 5-1: USB disconnect, device number 19 [ 275.845085][ T24] audit: type=1400 audit(1752191898.576:2334): avc: denied { accept } for pid=4543 comm="syz.6.1223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 276.372981][ T24] audit: type=1400 audit(1752191899.076:2335): avc: denied { watch_reads } for pid=4545 comm="syz.2.1224" path="/257" dev="tmpfs" ino=1409 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 276.501571][ T4553] syz.1.1227[4553] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 276.501631][ T4553] syz.1.1227[4553] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 277.145673][ T4556] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4556 comm=syz.5.1225 [ 277.449943][ T4565] overlayfs: missing 'lowerdir' [ 277.555321][ T4573] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4573 comm=syz.2.1228 [ 277.679370][ T4575] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4575 comm=syz.4.1233 [ 277.879888][ T24] audit: type=1326 audit(1752191900.616:2336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4576 comm="syz.5.1234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7227b36929 code=0x7ffc0000 [ 277.943045][ T24] audit: type=1326 audit(1752191900.646:2337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4576 comm="syz.5.1234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7227b36929 code=0x7ffc0000 [ 277.966557][ T24] audit: type=1326 audit(1752191900.646:2338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4576 comm="syz.5.1234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7227b36929 code=0x7ffc0000 [ 277.990152][ T24] audit: type=1326 audit(1752191900.646:2339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4576 comm="syz.5.1234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7227b36929 code=0x7ffc0000 [ 278.013607][ T24] audit: type=1326 audit(1752191900.656:2340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4576 comm="syz.5.1234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=282 compat=0 ip=0x7f7227b36929 code=0x7ffc0000 [ 278.151485][ T4585] syz.5.1237[4585] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 278.151548][ T4585] syz.5.1237[4585] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 278.345534][ T4586] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 278.366660][ T4586] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 278.381053][ T4586] EXT4-fs error (device loop6): ext4_get_journal_inode:5243: inode #5: comm syz.6.1236: unexpected bad inode w/o EXT4_IGET_BAD [ 278.394696][ T4586] EXT4-fs (loop6): no journal found [ 278.399949][ T4586] EXT4-fs (loop6): can't get journal size [ 278.409679][ T4586] EXT4-fs (loop6): mounted filesystem without journal. Opts: noblock_validity,stripe=0x0000000000000002,norecovery,min_batch_time=0x000000000000071d,abort,,errors=continue [ 279.352423][ T4606] EXT4-fs (loop4): Mount option "nojournal_checksum" incompatible with ext3 [ 280.722824][ T4624] syz.1.1249[4624] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 280.722886][ T4624] syz.1.1249[4624] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 281.040301][ T4632] exfat: Unknown parameter 'Ϙ' [ 286.180683][ T24] kauditd_printk_skb: 34 callbacks suppressed [ 286.180697][ T24] audit: type=1326 audit(1752191908.916:2375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4645 comm="syz.5.1253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7227b36929 code=0x7ffc0000 [ 286.226060][ T24] audit: type=1326 audit(1752191908.966:2376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4645 comm="syz.5.1253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7227b36929 code=0x7ffc0000 [ 286.250976][ T4647] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1254'. [ 286.260279][ T4647] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1254'. [ 286.348054][ T24] audit: type=1326 audit(1752191909.086:2377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4645 comm="syz.5.1253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7227b36929 code=0x7ffc0000 [ 286.444826][ T4654] FAULT_INJECTION: forcing a failure. [ 286.444826][ T4654] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 286.457925][ T4654] CPU: 1 PID: 4654 Comm: syz.4.1255 Not tainted 5.10.238-syzkaller-00008-g59e9a7228857 #0 [ 286.467827][ T4654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 286.477880][ T4654] Call Trace: [ 286.481189][ T4654] __dump_stack+0x21/0x24 [ 286.485521][ T4654] dump_stack_lvl+0x169/0x1d8 [ 286.490199][ T4654] ? thaw_kernel_threads+0x220/0x220 [ 286.495480][ T4654] ? vsnprintf+0x1871/0x1960 [ 286.500070][ T4654] ? show_regs_print_info+0x18/0x18 [ 286.505271][ T4654] dump_stack+0x15/0x1c [ 286.509425][ T4654] should_fail+0x3c1/0x510 [ 286.513840][ T4654] should_fail_usercopy+0x1a/0x20 [ 286.518864][ T4654] _copy_to_user+0x20/0x90 [ 286.523283][ T4654] simple_read_from_buffer+0xe9/0x160 [ 286.528654][ T4654] proc_fail_nth_read+0x19a/0x210 [ 286.533678][ T4654] ? proc_fault_inject_write+0x2f0/0x2f0 [ 286.539310][ T4654] ? rw_verify_area+0x1c0/0x360 [ 286.544162][ T4654] ? proc_fault_inject_write+0x2f0/0x2f0 [ 286.549791][ T4654] vfs_read+0x1fe/0xa10 [ 286.553945][ T4654] ? __this_cpu_preempt_check+0x13/0x20 [ 286.559487][ T4654] ? kernel_read+0x70/0x70 [ 286.563901][ T4654] ? __kasan_check_write+0x14/0x20 [ 286.569014][ T4654] ? mutex_lock+0x8c/0xe0 [ 286.573347][ T4654] ? mutex_trylock+0xa0/0xa0 [ 286.577935][ T4654] ? __fget_files+0x2c4/0x320 [ 286.582609][ T4654] ? __fdget_pos+0x2d2/0x380 [ 286.587200][ T4654] ? ksys_read+0x71/0x240 [ 286.591525][ T4654] ksys_read+0x140/0x240 [ 286.595951][ T4654] ? vfs_write+0xd60/0xd60 [ 286.600366][ T4654] ? fpu__clear_all+0x20/0x20 [ 286.605047][ T4654] ? __kasan_check_read+0x11/0x20 [ 286.610072][ T4654] __x64_sys_read+0x7b/0x90 [ 286.614576][ T4654] do_syscall_64+0x31/0x40 [ 286.618993][ T4654] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 286.624890][ T4654] RIP: 0033:0x7f50b01b433c [ 286.629306][ T4654] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 286.648914][ T4654] RSP: 002b:00007f50ae7dc030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 286.657336][ T4654] RAX: ffffffffffffffda RBX: 00007f50b03dd160 RCX: 00007f50b01b433c [ 286.665306][ T4654] RDX: 000000000000000f RSI: 00007f50ae7dc0a0 RDI: 0000000000000009 [ 286.673275][ T4654] RBP: 00007f50ae7dc090 R08: 0000000000000000 R09: 0000000000000000 [ 286.681246][ T4654] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 286.689214][ T4654] R13: 0000000000000000 R14: 00007f50b03dd160 R15: 00007ffe7aadaa18 [ 286.919107][ T24] audit: type=1326 audit(1752191909.086:2378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4645 comm="syz.5.1253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7227b36929 code=0x7ffc0000 [ 286.942581][ T24] audit: type=1326 audit(1752191909.086:2379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4645 comm="syz.5.1253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=282 compat=0 ip=0x7f7227b36929 code=0x7ffc0000 [ 286.966833][ T24] audit: type=1326 audit(1752191909.086:2380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4645 comm="syz.5.1253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7227b36929 code=0x7ffc0000 [ 286.990497][ T24] audit: type=1326 audit(1752191909.086:2381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4645 comm="syz.5.1253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f7227b36929 code=0x7ffc0000 [ 287.014109][ T24] audit: type=1326 audit(1752191909.086:2382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4645 comm="syz.5.1253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7227b36929 code=0x7ffc0000 [ 287.037839][ T24] audit: type=1326 audit(1752191909.086:2383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4645 comm="syz.5.1253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7227b36929 code=0x7ffc0000 [ 287.101684][ T4653] exFAT-fs (loop6): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d) [ 287.133075][ T24] audit: type=1326 audit(1752191909.086:2384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4645 comm="syz.5.1253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7227b36929 code=0x7ffc0000 [ 287.299535][ T4674] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 287.327373][ T4680] device syzkaller0 entered promiscuous mode [ 287.339163][ T4674] EXT4-fs (loop5): shut down requested (1) [ 287.423954][ T4674] fs-verity: sha256 using implementation "sha256-avx2" [ 287.673339][ T4697] kvm: pic: non byte read [ 287.682950][ T4697] kvm: pic: level sensitive irq not supported [ 287.685113][ T4697] kvm: pic: non byte read [ 287.705826][ T4697] kvm: pic: level sensitive irq not supported [ 287.705883][ T4697] kvm: pic: non byte read [ 287.728013][ T4697] kvm: pic: level sensitive irq not supported [ 287.728070][ T4697] kvm: pic: non byte read [ 287.911595][ T4706] tipc: Enabling of bearer rejected, failed to enable media [ 287.960579][ T4710] EXT4-fs (loop6): Ignoring removed nobh option [ 287.983959][ T4710] EXT4-fs (loop6): mounted filesystem without journal. Opts: nobh,abort,,errors=continue [ 288.025771][ T4710] ext4 filesystem being mounted at /21/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 288.056503][ T4710] fscrypt (loop6, inode 12): Reserved bits set in encryption policy [ 288.235662][ T3179] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 288.509367][ T4725] FAT-fs (loop5): Directory bread(block 64) failed [ 288.519402][ T4720] F2FS-fs (loop6): fault_type options not supported [ 288.536091][ T4720] F2FS-fs (loop6): Unrecognized mount option "barrier" or missing value [ 288.551076][ T4725] FAT-fs (loop5): Directory bread(block 65) failed [ 288.557975][ T4725] FAT-fs (loop5): Directory bread(block 66) failed [ 288.564610][ T4725] FAT-fs (loop5): Directory bread(block 67) failed [ 288.571482][ T4725] FAT-fs (loop5): Directory bread(block 68) failed [ 288.578222][ T4725] FAT-fs (loop5): Directory bread(block 69) failed [ 288.585033][ T4725] FAT-fs (loop5): Directory bread(block 70) failed [ 288.591720][ T4725] FAT-fs (loop5): Directory bread(block 71) failed [ 288.598376][ T3179] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 288.598446][ T4725] FAT-fs (loop5): Directory bread(block 72) failed [ 288.615988][ T4725] FAT-fs (loop5): Directory bread(block 73) failed [ 288.623896][ T3179] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 288.662772][ T3179] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 288.726423][ T3179] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.757440][ T3179] usb 5-1: config 0 descriptor?? [ 288.811102][ T4730] ================================================================== [ 288.819238][ T4730] BUG: KASAN: slab-out-of-bounds in tc_setup_flow_action+0x842/0x3280 [ 288.827378][ T4730] Read of size 8 at addr ffff88810ea7efc0 by task syz.6.1281/4730 [ 288.835161][ T4730] [ 288.837490][ T4730] CPU: 0 PID: 4730 Comm: syz.6.1281 Not tainted 5.10.238-syzkaller-00008-g59e9a7228857 #0 [ 288.847357][ T4730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 288.857398][ T4730] Call Trace: [ 288.860683][ T4730] __dump_stack+0x21/0x24 [ 288.865028][ T4730] dump_stack_lvl+0x169/0x1d8 [ 288.869704][ T4730] ? show_regs_print_info+0x18/0x18 [ 288.874902][ T4730] ? thaw_kernel_threads+0x220/0x220 [ 288.880185][ T4730] print_address_description+0x7f/0x2c0 [ 288.885727][ T4730] ? tc_setup_flow_action+0x842/0x3280 [ 288.891172][ T4730] kasan_report+0xe2/0x130 [ 288.895589][ T4730] ? flow_action_cookie_create+0x28/0x90 [ 288.901300][ T4730] ? tc_setup_flow_action+0x842/0x3280 [ 288.906746][ T4730] __asan_report_load8_noabort+0x14/0x20 [ 288.912365][ T4730] tc_setup_flow_action+0x842/0x3280 [ 288.917641][ T4730] ? __kmalloc+0x1a7/0x330 [ 288.922048][ T4730] ? flow_rule_alloc+0x32/0x2c0 [ 288.927005][ T4730] mall_replace_hw_filter+0x293/0x810 [ 288.932373][ T4730] ? pcpu_block_update_hint_alloc+0x8bc/0xc50 [ 288.938522][ T4730] ? mall_set_parms+0x410/0x410 [ 288.943359][ T4730] ? tcf_exts_destroy+0xb0/0xb0 [ 288.948199][ T4730] ? pcpu_alloc+0xf8a/0x16b0 [ 288.952790][ T4730] ? mall_set_parms+0x19d/0x410 [ 288.957628][ T4730] mall_change+0x528/0x750 [ 288.962035][ T4730] ? __kasan_check_write+0x14/0x20 [ 288.967132][ T4730] ? mall_get+0xa0/0xa0 [ 288.971278][ T4730] ? tcf_chain_tp_insert_unique+0xac1/0xc10 [ 288.977157][ T4730] ? nla_strcmp+0xf4/0x140 [ 288.981659][ T4730] tc_new_tfilter+0x13f6/0x1a10 [ 288.986511][ T4730] ? mall_get+0xa0/0xa0 [ 288.990657][ T4730] ? tcf_gate_entry_destructor+0x20/0x20 [ 288.996278][ T4730] ? security_capable+0x87/0xb0 [ 289.001119][ T4730] ? ns_capable+0x8c/0xf0 [ 289.005431][ T4730] ? netlink_net_capable+0x125/0x160 [ 289.010720][ T4730] ? tcf_gate_entry_destructor+0x20/0x20 [ 289.016351][ T4730] rtnetlink_rcv_msg+0x800/0xb90 [ 289.021290][ T4730] ? __irq_exit_rcu+0x40/0x150 [ 289.026225][ T4730] ? rtnetlink_bind+0x80/0x80 [ 289.030894][ T4730] ? irq_exit_rcu+0x9/0x10 [ 289.035298][ T4730] ? sysvec_call_function_single+0xc8/0xd0 [ 289.041141][ T4730] ? asm_sysvec_call_function_single+0x12/0x20 [ 289.047283][ T4730] ? avc_has_perm+0x140/0x360 [ 289.051976][ T4730] ? avc_has_perm+0x101/0x360 [ 289.056640][ T4730] ? avc_has_perm+0x140/0x360 [ 289.061308][ T4730] ? kasan_check_range+0x7f/0x290 [ 289.066322][ T4730] ? memcpy+0x56/0x70 [ 289.070290][ T4730] ? avc_has_perm+0x234/0x360 [ 289.074953][ T4730] ? __kasan_slab_alloc+0xbd/0xf0 [ 289.079982][ T4730] ? slab_post_alloc_hook+0x5d/0x2f0 [ 289.085254][ T4730] ? ___sys_sendmsg+0x1f0/0x260 [ 289.090439][ T4730] ? avc_has_perm_noaudit+0x240/0x240 [ 289.095803][ T4730] ? selinux_nlmsg_lookup+0x3fb/0x4a0 [ 289.101168][ T4730] netlink_rcv_skb+0x1e0/0x430 [ 289.105923][ T4730] ? rtnetlink_bind+0x80/0x80 [ 289.110587][ T4730] ? netlink_ack+0xb80/0xb80 [ 289.115165][ T4730] ? __netlink_lookup+0x387/0x3b0 [ 289.120176][ T4730] rtnetlink_rcv+0x1c/0x20 [ 289.124576][ T4730] netlink_unicast+0x87c/0xa40 [ 289.129337][ T4730] netlink_sendmsg+0x88d/0xb30 [ 289.134090][ T4730] ? netlink_getsockopt+0x530/0x530 [ 289.139279][ T4730] ? security_socket_sendmsg+0x82/0xa0 [ 289.144726][ T4730] ? netlink_getsockopt+0x530/0x530 [ 289.149909][ T4730] ____sys_sendmsg+0x5a2/0x8c0 [ 289.154661][ T4730] ? __sys_sendmsg_sock+0x40/0x40 [ 289.159671][ T4730] ? import_iovec+0x7c/0xb0 [ 289.164165][ T4730] ___sys_sendmsg+0x1f0/0x260 [ 289.168830][ T4730] ? __sys_sendmsg+0x250/0x250 [ 289.173582][ T4730] ? __fdget+0x1a1/0x230 [ 289.177813][ T4730] __x64_sys_sendmsg+0x1e2/0x2a0 [ 289.182740][ T4730] ? ___sys_sendmsg+0x260/0x260 [ 289.187586][ T4730] ? switch_fpu_return+0x197/0x340 [ 289.192686][ T4730] do_syscall_64+0x31/0x40 [ 289.197093][ T4730] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 289.203076][ T4730] RIP: 0033:0x7f9f16ed8929 [ 289.207491][ T4730] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 289.227100][ T4730] RSP: 002b:00007f9f15541038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 289.235515][ T4730] RAX: ffffffffffffffda RBX: 00007f9f170fffa0 RCX: 00007f9f16ed8929 [ 289.243475][ T4730] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000006 [ 289.251435][ T4730] RBP: 00007f9f16f5ab39 R08: 0000000000000000 R09: 0000000000000000 [ 289.259394][ T4730] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 289.267356][ T4730] R13: 0000000000000000 R14: 00007f9f170fffa0 R15: 00007ffc59e533a8 [ 289.275329][ T4730] [ 289.277644][ T4730] Allocated by task 4730: [ 289.282036][ T4730] __kasan_kmalloc+0xda/0x110 [ 289.286739][ T4730] __kmalloc+0x1a7/0x330 [ 289.290978][ T4730] tcf_idr_create+0x5f/0x790 [ 289.295567][ T4730] tcf_idr_create_from_flags+0x61/0x70 [ 289.301011][ T4730] tcf_gact_init+0x2b4/0x520 [ 289.305734][ T4730] tcf_action_init_1+0x3e1/0x670 [ 289.310680][ T4730] tcf_action_init+0x1e6/0x700 [ 289.315445][ T4730] tcf_exts_validate+0x215/0x510 [ 289.320380][ T4730] mall_set_parms+0x4b/0x410 [ 289.324961][ T4730] mall_change+0x45c/0x750 [ 289.329367][ T4730] tc_new_tfilter+0x13f6/0x1a10 [ 289.334205][ T4730] rtnetlink_rcv_msg+0x800/0xb90 [ 289.339132][ T4730] netlink_rcv_skb+0x1e0/0x430 [ 289.343879][ T4730] rtnetlink_rcv+0x1c/0x20 [ 289.348278][ T4730] netlink_unicast+0x87c/0xa40 [ 289.353031][ T4730] netlink_sendmsg+0x88d/0xb30 [ 289.357783][ T4730] ____sys_sendmsg+0x5a2/0x8c0 [ 289.362531][ T4730] ___sys_sendmsg+0x1f0/0x260 [ 289.367194][ T4730] __x64_sys_sendmsg+0x1e2/0x2a0 [ 289.372116][ T4730] do_syscall_64+0x31/0x40 [ 289.376521][ T4730] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 289.382396][ T4730] [ 289.384716][ T4730] The buggy address belongs to the object at ffff88810ea7ef00 [ 289.384716][ T4730] which belongs to the cache kmalloc-192 of size 192 [ 289.398755][ T4730] The buggy address is located 0 bytes to the right of [ 289.398755][ T4730] 192-byte region [ffff88810ea7ef00, ffff88810ea7efc0) [ 289.412355][ T4730] The buggy address belongs to the page: [ 289.417980][ T4730] page:ffffea00043a9f80 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x10ea7e [ 289.428199][ T4730] flags: 0x4000000000000200(slab) [ 289.433215][ T4730] raw: 4000000000000200 ffffea0004487380 0000000600000006 ffff888100043380 [ 289.441791][ T4730] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 289.450359][ T4730] page dumped because: kasan: bad access detected [ 289.456763][ T4730] page_owner tracks the page as allocated [ 289.462472][ T4730] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 325, ts 28983219859, free_ts 27891492345 [ 289.478336][ T4730] prep_new_page+0x179/0x180 [ 289.482914][ T4730] get_page_from_freelist+0x2235/0x23d0 [ 289.488451][ T4730] __alloc_pages_nodemask+0x268/0x5f0 [ 289.493806][ T4730] new_slab+0x84/0x3f0 [ 289.497862][ T4730] ___slab_alloc+0x2a6/0x450 [ 289.502437][ T4730] __slab_alloc+0x63/0xa0 [ 289.506754][ T4730] __kmalloc_track_caller+0x1ef/0x320 [ 289.512115][ T4730] kmemdup+0x26/0x60 [ 289.516007][ T4730] neigh_parms_alloc+0x85/0x430 [ 289.520850][ T4730] inetdev_init+0x141/0x480 [ 289.525337][ T4730] inetdev_event+0x1f8/0x1030 [ 289.529999][ T4730] raw_notifier_call_chain+0x90/0x100 [ 289.535356][ T4730] call_netdevice_notifiers+0x111/0x190 [ 289.540885][ T4730] register_netdevice+0x1043/0x13c0 [ 289.546073][ T4730] __ip_tunnel_create+0x2bf/0x380 [ 289.551085][ T4730] ip_tunnel_init_net+0x290/0x740 [ 289.556091][ T4730] page last free stack trace: [ 289.560757][ T4730] free_unref_page_prepare+0x2b7/0x2d0 [ 289.566205][ T4730] __free_pages+0x14b/0x380 [ 289.570692][ T4730] free_pages+0x82/0x90 [ 289.574833][ T4730] kasan_depopulate_vmalloc_pte+0x6b/0x90 [ 289.580547][ T4730] __apply_to_page_range+0x74e/0x9e0 [ 289.585816][ T4730] apply_to_existing_page_range+0x38/0x50 [ 289.591519][ T4730] kasan_release_vmalloc+0x97/0xb0 [ 289.596615][ T4730] __purge_vmap_area_lazy+0x133b/0x1470 [ 289.602144][ T4730] _vm_unmap_aliases+0x2f8/0x380 [ 289.607070][ T4730] vm_unmap_aliases+0x19/0x20 [ 289.611740][ T4730] change_page_attr_set_clr+0x311/0xc10 [ 289.617276][ T4730] set_memory_ro+0x89/0xd0 [ 289.621692][ T4730] bpf_int_jit_compile+0x860b/0x8ae0 [ 289.626969][ T4730] bpf_prog_select_runtime+0x742/0x9e0 [ 289.632410][ T4730] bpf_prog_load+0xf85/0x1420 [ 289.637072][ T4730] __se_sys_bpf+0x442/0x680 [ 289.641557][ T4730] [ 289.643872][ T4730] Memory state around the buggy address: [ 289.649500][ T4730] ffff88810ea7ee80: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 289.657548][ T4730] ffff88810ea7ef00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 289.665611][ T4730] >ffff88810ea7ef80: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 289.673654][ T4730] ^ [ 289.679791][ T4730] ffff88810ea7f000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 289.687838][ T4730] ffff88810ea7f080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 289.695881][ T4730] ================================================================== [ 289.703927][ T4730] Disabling lock debugging due to kernel taint [ 289.987643][ T3179] pyra 0003:1E7D:2CF6.0005: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.4-1/input0 [ 290.415710][ T3179] pyra 0003:1E7D:2CF6.0005: couldn't init struct pyra_device [ 290.423142][ T3179] pyra 0003:1E7D:2CF6.0005: couldn't install mouse [ 290.430304][ T3179] pyra: probe of 0003:1E7D:2CF6.0005 failed with error -71 [ 290.438513][ T3179] usb 5-1: USB disconnect, device number 20 [ 290.470288][ T4731] fido_id[4731]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory