last executing test programs: 8m48.467193782s ago: executing program 0 (id=293): syz_open_dev$hiddev(&(0x7f0000000180), 0x7, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x2008002, &(0x7f0000000140)={[{@errors_remount}, {@nodelalloc}, {@quota}]}, 0x1, 0x56e, &(0x7f0000001380)="$eJzs3c9vHFcdAPDvjH+s86N1Aj1ABSRAIaAou/GmjapeWi4gVFVCVBwQh9TYG8tkNxuy61KbSLh/A0ggcYI/gQMSB6SeOHDjiMQBEOWAVCACJUhILJrZsb21183GXu82u5+PNJl582bm+946s+/tW3teAFPrYkRsR8R8RLwREYvF/qRY4pXukh334P69lYf3760k0em8/o8kz8/2Rc85mTPFNRci4utfifh2cjBua3Pr1nK9XrtbpCvtxp1Ka3Prynpjea22VrtdrV5fun71xWsvVIdW1wuNX7z35fVXv/HrX33y3d9tf/H7WbHOFnm99RimbtXnduNkZiPi1ZMINgYzxXp+zOXgaNKI+EhEfCa//xdjJv/fCQBMsk5nMTqLvWkAYNKl+RhYkpYjIk2LTkC5O4b3TJxO681W+/LN5sbt1e5Y2bmYS2+u12tXz5f+8N384LkkSy/leXl+nq7uS1+LiPMR8aPSqTxdXmnWV8fT5QGAqXemt/2PiH+X0rRcHujUPt/qAQBPjIVxFwAAGDntPwBMH+0/AEyfAdr/4sv+7RMvCwAwGoN8/i+NoBwAwOgY/weA6aP9B4Cp8rXXXsuWzsPi+derb25u3Gq+eWW11rpVbmyslFead++U15rNtfyZPY1HXa/ebN5Zej423qq0a612pbW5daPR3LjdvpE/1/tGbW4ktQIAPsj5C+/8PomI7ZdO5Uv0zOWgrYbJlg7xKODJMnOck3UQ4Ilmti+YXgM14Xkn4bcnXhZgPPo+zHuh7+b7/eQxgvg9I/hQufTxwcf/zfEMk8XIPkyvo43/vzz0cgCjd+Tx/z8NtxzA6HU6yf45/+d3swCAiXS0X+H7X94/+MEwOyLA2DxqMu+hfP8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAE+ZsRHwnkijnc4Gn2b9puRzxVESci7nk5nq9djUino4LETFXytJL4y40AHBM6d+SYv6vS4vPnd2fO5/8p5SvI+J7P339x28tt9t3l7L9/9zdX9qZPqy6d97R5hUEAB7TXwY5KG+/q8W654P8g/v3VnaWEyzjAe99aXfy0ZWH9+/lSzdnNjqdTidiIe9LnP5XErPFOQsR8WxEzAwh/vbbEfGxfvVP8rGRc8XMp73xo4j91Ejjp++Ln+Z53XX28n10CGWBafNO9v7zSr/7L42L+br//b+Qv0MdX/7+txCx8973sCf+bBFppk/87J6/OGiM53/z1QM7O4vdvLcjnp3tFz/ZjZ8cEv+5AeP/8ROf+uHL+/bN7xTjZxGXon/83liVduNOpbW5dWW9sbxWW6vdrlavL12/+uK1F6qVfIy6sjNSfdDfX7r89GFly+p/+pD43Z/8mX31n98993MD1v/n/33jW5/eS5b2x//CZ4v4p3pz0ngmX/d//bM28fMDxl8+/ctDp+/O4q8eUv9H/fwvDxj/3b9urQ54KAAwAq3NrVvL9Xrt7rE2sk+hw7jOgY2siIMdvNNdPF7QP0e+sfeyJJHEsOuVdcYGOXjug6oT507kBR/OxuxuX3G4V/5mdsURVycdei2OshFJsfFgSBe8PMitB0yyvZt+3CUBAAAAAAAAAAAAAAAOM4q/YRp3HQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJhc/w8AAP//PJa9TQ==") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) epoll_create1(0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b708000002001e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000d00)='sched_switch\x00', r2}, 0x10) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r4}, 0xc) 8m47.527974007s ago: executing program 0 (id=300): r0 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000140)=@generic={&(0x7f0000000040)='./file0\x00', 0x0, 0xcda446ba63944f9a}, 0x18) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000dd0000000000003b810000850000006d000000a50000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="a1ab0000000000eb2000329a"], 0x1c}, 0x1, 0x0, 0x0, 0x4050}, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r3, 0x4068aea3, &(0x7f0000000680)) r7 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r7, 0x0) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0x2, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x7, 0x6], 0x0, 0x8340}) ioctl$KVM_RUN(r7, 0xae80, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) syz_emit_ethernet(0x2e, &(0x7f0000000080)={@multicast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @broadcast, @multicast1}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x100, @void}}}}}}}, 0x0) fchdir(r0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b909006f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f949170ef8cb9c13c12138116bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2c74664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677eff7c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc405a18ca0264400abf38e90000000000000000008faf2cddffbfa69bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5431bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de086553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c04f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c80f30505dd4cf2ae2a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265425d513a1294b8439276394945d94a589708e32a1cb30f1fa4b2f08e01dc5e8c6732e6dc59b5c8cb400000000000000592c9b68f09c8f5ddb20b4ae08b4d9df548e5ed6cd47b91a4bea8b6aa52edf64576aef1e43f2958437fdc20fbbd0d4e13d8cce1193b2f9b4f107e25af178d056e1b1e40bd75b013f7484fae0bc447b1ffaf34819fe3ad1a634c94345e26e1e68dec08723a37b05d1594a66a4718a51d4d67fc880c9d640f4eacc509873f1a103c87f69"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r8}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) io_setup(0xfc4b, &(0x7f0000000000)) syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f00000002c0)='./file0\x00', 0x200000, &(0x7f0000003d40)={[{@lazytime}, {@noblock_validity}, {@noacl}, {@errors_continue}], [{@context={'context', 0x3d, 'sysadm_u'}}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}]}, 0xf2, 0x5be, &(0x7f0000000440)="$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") r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="400000001600010000000000400000000a0000fd", @ANYRES32=r9, @ANYBLOB="14000100"], 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$KVM_GET_NESTED_STATE(r7, 0xc080aebe, &(0x7f0000001cc0)={{0x0, 0x0, 0x80}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) 8m47.420586288s ago: executing program 0 (id=303): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0xfc, 0x7ffc1ffb}]}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000380)='ocfs2\x00', 0x840, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r1}, 0x10) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8) write$cgroup_int(r3, &(0x7f00000001c0), 0xfffffdef) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000280)=ANY=[@ANYRESOCT=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0x6769) r5 = socket(0x10, 0x3, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) clock_gettime(0x6, &(0x7f00000003c0)={0x0, 0x0}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r6}, &(0x7f0000000040), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)=ANY=[@ANYRES32=r7, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800800040000000000050017"], 0x44}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) getdents64(0xffffffffffffffff, &(0x7f0000001f00)=""/4111, 0x100f) 8m46.855670777s ago: executing program 0 (id=307): syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000400)='./file1\x00', 0x1008801, &(0x7f0000005ac0)=ANY=[], 0x1, 0x1ea, &(0x7f00000004c0)="$eJzsmbGLE0EUxr+Z3STnIYqNhY2FB57obXY3KtcceIKlINyJWgZvPaKbRJIVkoBgsLGxtBBs/QcsLFJZ2NnZaqGCYGFK65GZnd2duIkmrkXw3g8y+83szJt5bzdfsyAI4sDy5fOPT08vb+6eA3AYa6jo8W9WNocb8z8+f3D22daVF68+vHzbOvJwZMa6BIABEGL+/W0Ab7Yt4NFR1RdicvWavu6Cp/o6OM5ofQMMTnJWka0OwHBLD981dPuQFmHAbrfDvTuNMHBl48nGl00NEBPnGw8Z9gCs6C2Ycb5uf3CvHgKdWIRBIkoi2Sd3a1Hxp/qNtzm2jBLI53XzyeOh7Dt63DXq54HD07oGhh2tN1GB4zhZSYz8T9hZfCuXf8EkUbxGU8WxjX8c8P8VrOATBLAEWcwn2K8j8g+djhwfj97lV31dlsP/hVDGBSB36/1qGF4tELmsTWDmKxH7B7OB04Y/2bBT/6hGzfvVbn+w0WjW94P9oOX7tYvuede94FeVEcXtb/xvRfnTqhG/NGNumZXRq0dRx+sBUcdL+37cGo6787r9Xa3hyv841k/FMeSrotKuTN+D6R9XV6nWrZmHJwiCIAiCIAiCIAiCIAiCWIiTYPGHsPhDlUgoiQn8a2r2zwAAAP//tSxqVQ==") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) setrlimit(0x40000000000008, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r2 = getpgrp(0x0) syz_clone(0x20002000, 0x0, 0x0, 0x0, 0x0, 0x0) getpriority(0x1, r2) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000180)={0x100, 0xffffff01, 0x7, 0xfffffe01, 0x9, "dc7a557d1894156745ffd7024a554622c96eed"}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fadvise64(r4, 0x0, 0x0, 0x3) 8m46.64993225s ago: executing program 0 (id=309): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="07000000040000000802000001"], 0x50) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=@newsa={0x150, 0x10, 0x413, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x4e24, 0x0, 0x2, 0x0, 0x20, 0x0, 0x0, 0xee00}, {@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x32}, @in=@dev={0xac, 0x14, 0x14, 0xfe}, {0x0, 0x7, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x20000000008}, {0x0, 0x8, 0xcc}, {0xf6}, 0x0, 0x0, 0x2, 0x1, 0x1}, [@algo_aead={0x5f, 0x12, {{'rfc4309(ccm(aes))\x00'}, 0x98, 0x60, "25cac5216d1c8af0a976902918bf448c5d9f54"}}]}, 0x150}}, 0x804) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r7, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r7, 0x0, 0x0, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) shutdown(r7, 0x1) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000021000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x18) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) close(r0) 8m46.415954514s ago: executing program 0 (id=313): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0700000004000000080000000100"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f0000000380)) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00') mount(&(0x7f0000000000), 0x0, 0x0, 0x75809, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="180300000005000000000000000000001801000011af000000000000002020207b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="ec0000002100390d000000000000000000000000000000000000000000000000e000000200000000000000000000000000000000000000000000a00000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c001100ff010000000000000000000000000001ffffffff000000000000000000000000ac1414aa000000000000000000000000ac141400000000000000000000000000000000000000000011000a00ff010000000000000000000000000001ffffffff"], 0xec}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x2, 0x1, 0x8}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1a, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x1, 0xc0, &(0x7f0000000180)=""/197, 0x0, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2620}, 0x80) 8m46.398548964s ago: executing program 32 (id=313): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0700000004000000080000000100"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f0000000380)) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00') mount(&(0x7f0000000000), 0x0, 0x0, 0x75809, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="180300000005000000000000000000001801000011af000000000000002020207b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="ec0000002100390d000000000000000000000000000000000000000000000000e000000200000000000000000000000000000000000000000000a00000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c001100ff010000000000000000000000000001ffffffff000000000000000000000000ac1414aa000000000000000000000000ac141400000000000000000000000000000000000000000011000a00ff010000000000000000000000000001ffffffff"], 0xec}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x2, 0x1, 0x8}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1a, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x1, 0xc0, &(0x7f0000000180)=""/197, 0x0, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2620}, 0x80) 7m26.035085065s ago: executing program 5 (id=910): r0 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x2008002, &(0x7f0000000140)={[{@errors_remount}, {@nodelalloc}, {@quota}]}, 0x1, 0x56e, &(0x7f0000001380)="$eJzs3c9vHFcdAPDvjH+s86N1Aj1ABSRAIaAou/GmjapeWi4gVFVCVBwQh9TYG8tkNxuy61KbSLh/A0ggcYI/gQMSB6SeOHDjiMQBEOWAVCACJUhILJrZsb21183GXu82u5+PNJl582bm+946s+/tW3teAFPrYkRsR8R8RLwREYvF/qRY4pXukh334P69lYf3760k0em8/o8kz8/2Rc85mTPFNRci4utfifh2cjBua3Pr1nK9XrtbpCvtxp1Ka3Prynpjea22VrtdrV5fun71xWsvVIdW1wuNX7z35fVXv/HrX33y3d9tf/H7WbHOFnm99RimbtXnduNkZiPi1ZMINgYzxXp+zOXgaNKI+EhEfCa//xdjJv/fCQBMsk5nMTqLvWkAYNKl+RhYkpYjIk2LTkC5O4b3TJxO681W+/LN5sbt1e5Y2bmYS2+u12tXz5f+8N384LkkSy/leXl+nq7uS1+LiPMR8aPSqTxdXmnWV8fT5QGAqXemt/2PiH+X0rRcHujUPt/qAQBPjIVxFwAAGDntPwBMH+0/AEyfAdr/4sv+7RMvCwAwGoN8/i+NoBwAwOgY/weA6aP9B4Cp8rXXXsuWzsPi+derb25u3Gq+eWW11rpVbmyslFead++U15rNtfyZPY1HXa/ebN5Zej423qq0a612pbW5daPR3LjdvpE/1/tGbW4ktQIAPsj5C+/8PomI7ZdO5Uv0zOWgrYbJlg7xKODJMnOck3UQ4Ilmti+YXgM14Xkn4bcnXhZgPPo+zHuh7+b7/eQxgvg9I/hQufTxwcf/zfEMk8XIPkyvo43/vzz0cgCjd+Tx/z8NtxzA6HU6yf45/+d3swCAiXS0X+H7X94/+MEwOyLA2DxqMu+hfP8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAE+ZsRHwnkijnc4Gn2b9puRzxVESci7nk5nq9djUino4LETFXytJL4y40AHBM6d+SYv6vS4vPnd2fO5/8p5SvI+J7P339x28tt9t3l7L9/9zdX9qZPqy6d97R5hUEAB7TXwY5KG+/q8W654P8g/v3VnaWEyzjAe99aXfy0ZWH9+/lSzdnNjqdTidiIe9LnP5XErPFOQsR8WxEzAwh/vbbEfGxfvVP8rGRc8XMp73xo4j91Ejjp++Ln+Z53XX28n10CGWBafNO9v7zSr/7L42L+br//b+Qv0MdX/7+txCx8973sCf+bBFppk/87J6/OGiM53/z1QM7O4vdvLcjnp3tFz/ZjZ8cEv+5AeP/8ROf+uHL+/bN7xTjZxGXon/83liVduNOpbW5dWW9sbxWW6vdrlavL12/+uK1F6qVfIy6sjNSfdDfX7r89GFly+p/+pD43Z/8mX31n98993MD1v/n/33jW5/eS5b2x//CZ4v4p3pz0ngmX/d//bM28fMDxl8+/ctDp+/O4q8eUv9H/fwvDxj/3b9urQ54KAAwAq3NrVvL9Xrt7rE2sk+hw7jOgY2siIMdvNNdPF7QP0e+sfeyJJHEsOuVdcYGOXjug6oT507kBR/OxuxuX3G4V/5mdsURVycdei2OshFJsfFgSBe8PMitB0yyvZt+3CUBAAAAAAAAAAAAAAAOM4q/YRp3HQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJhc/w8AAP//PJa9TQ==") prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) getpid() sched_setscheduler(0x0, 0x2, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b000000080000000100010009000000"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b708000002001e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000d00)='sched_switch\x00', r5}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) openat(r0, &(0x7f0000000040)='.\x00', 0x100, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r7}, 0xc) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r6, 0x6, 0x1d, &(0x7f00000000c0), &(0x7f0000000100)=0x14) 7m24.963975112s ago: executing program 5 (id=924): bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="000455f4584a0000000200"/25, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f00000007c0)={0x300, 0x0, &(0x7f0000000780)={&(0x7f0000000b00)=ANY=[@ANYBLOB], 0x18}}, 0x40) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace(0x8, r6) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0xc, 0x0, 0x0, 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r7}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sys_enter\x00', r8}, 0x10) 7m24.103908405s ago: executing program 5 (id=925): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020300001d00000000000000000000000400030000000000020000000000000000000000000000000000000000000000050006006c0000000a00000000000900fc010000000000000000000000000000000000000000000004000400000000000700000000000000000000000000000000000006000000000200010000000000000000030000000005000500008000000a00000000000000ff010000000000000000000000000001000000000000000005000700000000000a004e2200000400200100000000000000000000000000010200000000000000020013"], 0xe8}}, 0x0) 7m24.015846567s ago: executing program 5 (id=927): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r3 = getpid() syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000840)=ANY=[@ANYBLOB='iocharset=macceltic,fmask=00000000000000000000240,errors=remount-ro,iocharset=cp936,iocharset=cp850,dmask=00000000000000000000000,gid=', @ANYRESHEX=0x0, @ANYBLOB=',dmask=00000000000000000001,errors=continue,errors=continue,\x00'], 0x1, 0x152f, &(0x7f00000037c0)="$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") unlink(&(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00') sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x1, &(0x7f0000000340)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) r8 = syz_io_uring_setup(0x94f, &(0x7f00000016c0), &(0x7f0000000080)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x40, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_enter(r8, 0x1815, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) r10 = open$dir(&(0x7f0000000140)='./file0\x00', 0x500, 0x40) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x480, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) getdents64(r10, 0x0, 0x0) stat(&(0x7f0000006e00)='./file0\x00', 0x0) 7m23.109318031s ago: executing program 5 (id=932): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = dup(r0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0004}]}) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x57, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000380)='kfree\x00', r2}, 0x18) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82000000000", @ANYRES32=r3, @ANYBLOB="000080000000000018003480050035"], 0x38}, 0x1, 0x300}, 0x0) bind$bt_sco(r0, 0x0, 0x0) (async) eventfd2(0x0, 0x1000) (async) r4 = creat(&(0x7f0000000180)='./file0\x00', 0xecf86c37d53048ee) close(r4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r5}, 0x10) r6 = memfd_create(&(0x7f0000000500)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85l\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~7\x16\x02\x00(v\xe6`\"6\xfcgC\xb5\xf0\x13.zj\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\a\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x82\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff, 0xffffffffffffffff}) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r11, 0x0, r9, 0x0, 0x2, 0x0) (async) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r12}, 0x10) vmsplice(r8, &(0x7f0000000100)=[{&(0x7f0000000080)="a1", 0x1}], 0x1, 0x8) (async) write$binfmt_elf64(r10, &(0x7f0000000000)=ANY=[], 0x18c6) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000200)={'ip6tnl0\x00', &(0x7f0000000040)={'ip6gre0\x00', 0x0, 0x4, 0x0, 0x3, 0xcad, 0x49, @private2, @loopback, 0x1, 0x20, 0x81}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r13, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 7m22.981680953s ago: executing program 5 (id=935): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70200000004000085000000860000009500"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x18) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000000}, 0x94) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020300001d00000000000000000000000400030000000000020000000000000000000000000000000000000000000000050006006c0000000a00000000000000fc010000000000000000000000000000000000000000000004000400000000000700000000000000000000000000000000000006000000000200010000000000000000030000000005000500008000000a00000000000000ff010000000000000000000000000001000000000000000005000700000000000a004e2200000400200100000000000000000000000000010200000000000000020013"], 0xe8}}, 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r7 = getpid() bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00'}, 0x80) r8 = syz_pidfd_open(r7, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) setns(r8, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) socket$packet(0x11, 0x2, 0x300) syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') 7m22.930016243s ago: executing program 33 (id=935): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70200000004000085000000860000009500"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x18) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000000}, 0x94) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020300001d00000000000000000000000400030000000000020000000000000000000000000000000000000000000000050006006c0000000a00000000000000fc010000000000000000000000000000000000000000000004000400000000000700000000000000000000000000000000000006000000000200010000000000000000030000000005000500008000000a00000000000000ff010000000000000000000000000001000000000000000005000700000000000a004e2200000400200100000000000000000000000000010200000000000000020013"], 0xe8}}, 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r7 = getpid() bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00'}, 0x80) r8 = syz_pidfd_open(r7, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) setns(r8, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) socket$packet(0x11, 0x2, 0x300) syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') 34.421545449s ago: executing program 1 (id=2846): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, 0x0, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000080)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a2401fd6e000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r1, @ANYBLOB="05"], 0x0) 31.847690829s ago: executing program 1 (id=2862): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x4, r5, 0xee01, 0x0) 30.603878678s ago: executing program 1 (id=2871): socket(0x400000000010, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541c, &(0x7f0000000180)={0xd, 0x2e}) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r5, 0x107, 0x5, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') write$FUSE_NOTIFY_STORE(r6, &(0x7f0000000500)=ANY=[@ANYBLOB='1\x00'], 0x31) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000c5008005000100000000f8e5543d", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r7], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00'}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r8}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x3, &(0x7f0000000000)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0xb3}}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x80) 29.693416652s ago: executing program 1 (id=2877): r0 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x2008002, &(0x7f0000000140)={[{@errors_remount}, {@nodelalloc}, {@quota}]}, 0x1, 0x56e, &(0x7f0000001380)="$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") prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) getpid() sched_setscheduler(0x0, 0x2, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r3}, 0x10) r4 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) write$selinux_validatetrans(r4, &(0x7f0000000280)={'system_u:object_r:null_device_t:s0', 0x20, 'unconfined', 0x20, 0x10000, 0x20, '/usr/sbin/cupsd\x00'}, 0x53) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b708000002001e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000d00)='sched_switch\x00', r8}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) openat(r0, &(0x7f0000000040)='.\x00', 0x100, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r10}, 0xc) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r9, 0x6, 0x1d, &(0x7f00000000c0), &(0x7f0000000100)=0x14) 28.263825024s ago: executing program 1 (id=2888): bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0700000004000000080000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000010000000000080000000000"], 0x50) socket$xdp(0x2c, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000003c0)={r0, 0x58, &(0x7f0000000240)}, 0x10) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) syz_open_pts(r1, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b000000e6ffffffff7f0000ca0004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESOCT=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0}, 0x94) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xd}, 0x0, &(0x7f00000002c0)={0x3fc, 0x0, 0x100000, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000004000500001d000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x0, 0x10003, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x1010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000007476f007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) request_key(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f0000000140)='\\\\@[*#)\x00', 0xfffffffffffffffe) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0x1222080, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000500)={[&(0x7f0000000440)='\x1e+#,(\x00', &(0x7f0000000480)='&*{\x00', &(0x7f00000004c0)=']#\xf9\x00']}, &(0x7f0000000600)={[&(0x7f0000000540)=']\x00', &(0x7f0000000580)='sched_switch\x00', &(0x7f00000005c0)='\\#:!^\x00']}) 27.973226849s ago: executing program 1 (id=2891): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000009500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001b40)={0x1c, 0x20000000000000bb, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r4}, 0x10) dup(r3) (async) r5 = dup(r3) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[], [], 0x6b}}) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[], [], 0x6b}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='sys_enter\x00', r1}, 0x10) inotify_init1(0x800) 12.870104292s ago: executing program 34 (id=2891): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000009500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001b40)={0x1c, 0x20000000000000bb, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r4}, 0x10) dup(r3) (async) r5 = dup(r3) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[], [], 0x6b}}) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[], [], 0x6b}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='sys_enter\x00', r1}, 0x10) inotify_init1(0x800) 9.488004234s ago: executing program 6 (id=2993): r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/if_inet6\x00') pwritev(r0, 0x0, 0x0, 0xffffffff, 0x6) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x8413, &(0x7f0000000080)={[{@minixdf}, {}, {@nodioread_nolock}, {@errors_continue}, {@lazytime}, {@noblock_validity}, {@usrjquota}, {@nodelalloc}]}, 0x18, 0x56a, &(0x7f0000000780)="$eJzs3c9vHFcdAPDvjL3+kTixCxygEm2hRWkEWce12lgcSpEQnCqByj249tqysrYje93GVqU44g9AQqggcePSCxJ/ABJU6oVjhVQJroAACVWQwgEk6KBZz65dezbZuutdx/58pMm892bfft+b9czOvJ3MBHBuvVRMH2ZZdjUiJovytJi+mGd2I56KiA/uv7GQT0lk2St/TyIpylrvlTWNxsW9KvkbjMS3Il5Njsbd3N65NV+v1zaK/HRj9fb05vbOtZXV+eXacm1tdnbmhbkbc8/PXf8k3Vu6WCQuRcSL3/jrmz9465sv/uorr//p5t+GWq2+G4f68TENlxcf7HQlxvLZ+H7JxjGDnUatFdDs8Xh3de4VfyIAAPRXflz6qeI4/2pMxlCnw1kAAADgkZV9bSL+m7R+uztipEM5AAAA8AhJI2IikrRaXO87EWlarUbzGt7PxIW0vr7Z+PLS+tbaYr4sYioq6dJKvXa9uFZ4KipJnp9ppvfzzx3Kz0bEY2nEjybHm/nqwnp9cdCDHwAAAHBOXDx0/v+vyTQdHXSjAAAAgN6bGnQDAAAAgBPn/B8AAADOPuf/AAAAcKZ9++WX8ylrPf968bXtrVvrr11brG3eqq5uLVQX1jduV5fX15eb9+xbfeCbtR8duLZ1Z7pR22yMRcTN1fWttcbNlb1HYAMAAAD999iTb/8+iYjdr443p9zIgeX/KZ4TMLAGAiemPWQXSTEfOfqiP17em/+lT40C+mLoYObNwbUD6L/m9//4saoerxZwalQG3QBg4JL95GTZ8rFkuLziu8X8C91GctgAAACDcuVznX//Tx9Yc/fBi4FTz0YM59fQoBsADExzVL/kkr9SDhbgTKm0jwCSAbcEGJSHbf0db97xbrcRDvwfotFu6wAAAL000ZyStFoM701EmlarEZeajwWoJEsr9dr1iLgcEb+brIzm+ZlmzcSIAQAAAAAAAAAAAAAAAAAAAAAAAAB0KcuSyAAAAIAzLSIdTd7Zu5f/lclnJg6PD4wk/56M4hGhr//0lR/fmW80Nmby8n+0yxs/KcqfOzq+MNyXUQwAAAA4H7p9pHbrPL11Hg8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAvfTB/TcWWlM/477/9YiYKos/HGPN+VhUIuLCP5MYPlAviYihHsTfvRcRny2Ln+TNaocsiz9+8vFjqlgLZfEv9iA+nGdv5/ufl8q2vzSeas7Lt7/hiI/kj6vz/i/a+7+hDtv/pS5jPP7eL6Y/UvDW/p7z/XsRjw+X739a8ZMO8Z/uMv73vruzU75krJ0qi38w1nRj9fb05vbOtZXV+eXacm1tdnbmhbkbc8/PXZ9eWqnXin8j4saR3eIPP//LDzu1Le//hQ7xpx7S/2e67P//3rtz/9Pxap6slMV/9umS+L/5WXsdHY6fFt99XyrS+fIrrfTuXvqgJ37+2yce1P/FDv1/2Of/bJf9v/qd7/+5y5cCAH2wub1za75er208MolsKKJs0XCHWvlZep+bGnEaVtTRRFp86KelPQNP3N0v+fUf9tbNk3H8v8wsyz7h6k2yLLvbgw5OFJ9017WuXN57cdIuGdAOCQAAODH7pwEHfp24POBGAQAAAAAAAAAAAAAAAAAAwDmzuf3Oid9l7XDM3XYq6cUttAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeuL/AQAA//+6y9p4") 9.219382668s ago: executing program 6 (id=2997): r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0xc008, &(0x7f0000000540)=ANY=[@ANYRES8=0x0, @ANYRESOCT=0x0, @ANYRESDEC, @ANYRES16, @ANYBLOB="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"], 0x41, 0x2f5, &(0x7f0000000b40)="$eJzs3E1rE10UwPGTNG3SlDZZPDygIr3oRjdDG/dCkBbEgFIb8QWEaTPRkDEJmVCJiI0rt34NQ5fdSEHrB+jGnSs34qYbwU1BaySZiZ20kzaNttOS/w/KPZ17T+blTsKZgZnNu6+f5LOWltUrEowoCYrUZFsk3owci+MiEpCAtJoRe2HEbmpyeez7p/NKRJKp1MycUrPJ+SsJpdTE5Lunz1curFfG7qxOrIVlI/5w81viy8b/G2c2f80/zlkqZ6lCsaJ0tVD8XNEXTENlclZeU+qWaeiWoXIFyyjb/cWKs1oplapKL2TGo6WyYVlKL1RV3qiqSlFVylWlP9JzBaVpmhqPyuDYmmw1pcPmpetzc3qyz5Uu9pmHf259395yuf3l+dDo7EnXj26bAADASdWu/8Pu+n+rs/4POG3QXf87alJr1v+3792/0UP9vzbSpf4v7qn/nesL6ejPmkXq/35F9i5K14f6r/9xSpRHReorsvONfvlgZaoVUP8DAAAAAAAAAAAAAAAAAAAAAHAabDUasUajEWu2QbHj5l/YeWCk/b/f24mj4Z5/e65DzVln/geE68G9iIj5aim9lLZbuz+ZlZyYYsiUxORn63xw2PHs9dRMQLXE5b257OQvL6WHOvOnJSZx7/xpO1915g9L1J2fkJj8552f8MwfkUsXXfmaxOTjohTFlEzrvN7JfzGt1LWbqV35o5LxeGIOAAAAAIDTSFN/eF6/a1q3fju/l/sDU57X5yE5G/J33wEAAAAAGBRW9VleN02jfGDwxsk4cPBXZ2DPn/y3wfAh9qLX4G0rCHT75MihDt0RBO13Mu87eNQZ1NHl3J5Z9nHj+w0mfVl7qHnSu5ZEuw6eGPI64PsFYeetzM0l241dY66unvvh3wE/1p8hAAAAAMdgp+j3e0sAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABhcx/E6Mb/3EQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgpfgcAAP//06IWPQ==") bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = gettid() bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = syz_open_dev$usbmon(0x0, 0x0, 0x80) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) futex(&(0x7f00000001c0)=0x4, 0x2, 0x4, &(0x7f000000b000)={0x0, 0x989680}, &(0x7f0000048000), 0x4) ioctl$MON_IOCX_MFETCH(r2, 0xc0109207, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x1}) timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000880), 0x88000, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) 9.210517948s ago: executing program 6 (id=2998): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) mlock2(&(0x7f0000549000/0x1000)=nil, 0x1000, 0x1) syz_clone3(&(0x7f0000000840)={0x40000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000400)=[0xffffffffffffffff], 0x1}, 0x58) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000005c0)='./file1\x00', 0x8200, &(0x7f0000000240)={[{@max_dir_size_kb}, {@jqfmt_vfsv1}, {@grpid}, {@nojournal_checksum}, {@journal_dev={'journal_dev', 0x3d, 0x7}}, {@block_validity}, {@minixdf}, {@lazytime}]}, 0x83, 0x5fe, &(0x7f0000001040)="$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") openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0) socket(0x10, 0x803, 0x0) socket$unix(0x1, 0x1, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect$uac1(0x2, 0xdc, &(0x7f0000000380)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r0, @ANYRES8=r1, @ANYRESDEC], 0x0) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 6.679939137s ago: executing program 6 (id=3016): syz_open_dev$mouse(&(0x7f0000000000), 0x0, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={0xffffffffffffffff, 0x58, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_open_dev$vcsn(&(0x7f0000000300), 0x80, 0x40a00) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000040850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x15, 0x2, 0x4, 0x3, 0x21e8c, r1, 0x2, '\x00', r0, 0xffffffffffffffff, 0x2, 0x1}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) r4 = inotify_init1(0x0) inotify_add_watch(r4, &(0x7f00000000c0)='.\x00', 0xa4000061) read(r4, &(0x7f0000000140)=""/68, 0x44) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) 6.560105029s ago: executing program 6 (id=3019): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="00000000000000ccd038f151aacd2a4ea488982ae4648867345f5f000000be9c19", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000505e11d442eec60906d256a500000000"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000300000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000539d00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000000)="89e7ee2c78dad9b4b473fec96558", 0xffbf}], 0x1) r3 = socket$packet(0x11, 0x3, 0x300) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[], 0x50) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) openat$rtc(0xffffffffffffff9c, 0x0, 0x84002, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r4 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r4, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r6}, 0x10) socket$inet6(0xa, 0x80002, 0x0) getrandom(&(0x7f0000000040)=""/133, 0xfffffffffffffdde, 0x2) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) 5.377564897s ago: executing program 3 (id=3024): r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0xc008, &(0x7f0000000540)=ANY=[@ANYRES8=0x0, @ANYRESOCT=0x0, @ANYRESDEC, @ANYRES16, @ANYBLOB="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"], 0x41, 0x2f5, &(0x7f0000000b40)="$eJzs3E1rE10UwPGTNG3SlDZZPDygIr3oRjdDG/dCkBbEgFIb8QWEaTPRkDEJmVCJiI0rt34NQ5fdSEHrB+jGnSs34qYbwU1BaySZiZ20kzaNttOS/w/KPZ17T+blTsKZgZnNu6+f5LOWltUrEowoCYrUZFsk3owci+MiEpCAtJoRe2HEbmpyeez7p/NKRJKp1MycUrPJ+SsJpdTE5Lunz1curFfG7qxOrIVlI/5w81viy8b/G2c2f80/zlkqZ6lCsaJ0tVD8XNEXTENlclZeU+qWaeiWoXIFyyjb/cWKs1oplapKL2TGo6WyYVlKL1RV3qiqSlFVylWlP9JzBaVpmhqPyuDYmmw1pcPmpetzc3qyz5Uu9pmHf259395yuf3l+dDo7EnXj26bAADASdWu/8Pu+n+rs/4POG3QXf87alJr1v+3792/0UP9vzbSpf4v7qn/nesL6ejPmkXq/35F9i5K14f6r/9xSpRHReorsvONfvlgZaoVUP8DAAAAAAAAAAAAAAAAAAAAAHAabDUasUajEWu2QbHj5l/YeWCk/b/f24mj4Z5/e65DzVln/geE68G9iIj5aim9lLZbuz+ZlZyYYsiUxORn63xw2PHs9dRMQLXE5b257OQvL6WHOvOnJSZx7/xpO1915g9L1J2fkJj8552f8MwfkUsXXfmaxOTjohTFlEzrvN7JfzGt1LWbqV35o5LxeGIOAAAAAIDTSFN/eF6/a1q3fju/l/sDU57X5yE5G/J33wEAAAAAGBRW9VleN02jfGDwxsk4cPBXZ2DPn/y3wfAh9qLX4G0rCHT75MihDt0RBO13Mu87eNQZ1NHl3J5Z9nHj+w0mfVl7qHnSu5ZEuw6eGPI64PsFYeetzM0l241dY66unvvh3wE/1p8hAAAAAMdgp+j3e0sAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABhcx/E6Mb/3EQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgpfgcAAP//06IWPQ==") bpf$PROG_LOAD(0x5, 0x0, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, &(0x7f0000000100)=@v2={0x2000000, [{0x1, 0x400}, {0x8c0, 0x58}]}, 0x14, 0x3) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = gettid() bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x7, 0x8000, 0x1}, 0x48) syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x80) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f000000b000)={0x77359400}, &(0x7f0000048000), 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) 4.773543437s ago: executing program 4 (id=3027): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYRESHEX=r0, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095489a62a37ec499981ae769018e0004a11367bbd062e7483dbb18126a1fa17ecb1db21258db05512924297d35ecd68067d585e08c0200dfb730057982f0f6bbbec375507646"], 0x0, 0xf2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00', r1}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00', r2}, 0x18) io_uring_setup(0x1de0, &(0x7f00000000c0)={0x0, 0x45d6}) 4.670230908s ago: executing program 4 (id=3028): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x0, &(0x7f0000000380)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000480)=@abs={0x0, 0x0, 0x8004e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffff05850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r3}, 0x10) socket$inet6_icmp_raw(0xa, 0x3, 0x87) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYRESHEX, @ANYRES32, @ANYRES16=r4], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r6}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000003c0)) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0b00000007000000020001000900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000007925dd4cfe7ef78f4ae253aaa330e756e6d13a901420aa4865bdd50c3e71000000000000"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r7, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESDEC=r5], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r8}, 0x10) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) 4.668225888s ago: executing program 6 (id=3029): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001004900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000d43c57caae90a69500"/28], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) write$cgroup_netprio_ifpriomap(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000600)=0x20400288) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0xffffff3a}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r4, 0x400455c8, 0x4) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000040)=0x32) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) userfaultfd(0x801) syz_mount_image$msdos(&(0x7f0000000000), &(0x7f00000004c0)='./file0\x00', 0x0, &(0x7f0000000700)=ANY=[], 0xfd, 0x1bf, &(0x7f0000000300)="$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") socket$nl_netfilter(0x10, 0x3, 0xc) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mknod(&(0x7f00000001c0)='./bus\x00', 0x8000, 0x9) mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0xc) open(&(0x7f00000003c0)='./bus\x00', 0x20102, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000005900), 0x0, 0x24008850) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0e00000004000000080000000800000000000000", @ANYRES32=0x1, @ANYBLOB="0700ffffffffffffff00000000000e7b4faaff7f09fe008e776d717d230b745ad912d474fac704bc819e6f8dc7df2bfe81bc916dd72004097b2eb3", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000002c0)={r8, &(0x7f0000000000), 0x0}, 0x20) 4.467973081s ago: executing program 3 (id=3030): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r2, 0x8912, &(0x7f0000000100)=@req={0x28, &(0x7f00000000c0)={'veth0_to_bond\x00', @ifru_hwaddr=@random="1c2d694549cb"}}) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x4, r5, 0xee01, 0x0) 4.324703473s ago: executing program 7 (id=3033): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000380)={'syz0\x00', {0xff, 0x6, 0x7fff, 0x8d5}, 0x24, [0x10000, 0xeba, 0x7, 0xe6a, 0x8, 0x1, 0x5, 0x7ff, 0x54, 0x7fffdfff, 0x7, 0xc, 0x8008, 0x6, 0x9, 0xfffffff7, 0x7, 0x40000, 0xa, 0x23, 0x2, 0x400, 0x3ff, 0xfffffff4, 0x4, 0xda6, 0x3, 0xa7, 0xeb36, 0x2, 0x9, 0x76c9, 0x200, 0x800001, 0x1, 0x1, 0x7, 0x9, 0xf, 0xb, 0x10, 0x80000000, 0x9, 0xb50, 0x0, 0x800, 0x3, 0x5, 0xbaa3, 0xfffffffe, 0x5, 0x8, 0x24, 0x7fff, 0x8, 0x6, 0x203, 0x0, 0x0, 0x71c7, 0x964e, 0x2d5, 0x149, 0x4], [0x66ac, 0xfffffff9, 0x4, 0x10, 0x8e, 0x7, 0x13e, 0x4, 0x4, 0x2, 0x1000, 0x7, 0x6, 0x8001, 0x9, 0x8, 0x2, 0x1, 0x40, 0x7ff, 0x7ff, 0x5, 0x9, 0xc00, 0x89, 0x7ff, 0x80000000, 0x1, 0xfffffff7, 0x9, 0x9, 0x4d26, 0x10000, 0x8, 0x1, 0x7, 0x0, 0x4, 0x4c, 0x9, 0x8, 0x5, 0xe66, 0x8, 0x2, 0x81, 0x4b, 0x80, 0x6, 0xb, 0x4, 0x6, 0x2, 0x8d1, 0xfffffff7, 0xfffffffa, 0xe0, 0x6, 0x10001, 0x4, 0x401, 0xade, 0x7f, 0x9], [0x8396, 0xb, 0x7, 0x9, 0x8000, 0x1, 0x9, 0xe88, 0x8, 0x6, 0x81, 0x400, 0x1000, 0x9, 0x6e, 0x8000, 0x7, 0x3, 0x6, 0x5, 0x5, 0xc9, 0x2, 0x3, 0x0, 0x2, 0x2, 0xc, 0x5, 0xb0f, 0x1e, 0x3, 0x800, 0x8, 0x9, 0x3, 0x4, 0xfffffff7, 0x4, 0x80000000, 0x464f, 0x6, 0x2e7, 0x7ff, 0x1ff, 0x6, 0x87ff, 0x2, 0x101, 0xffffffff, 0x4, 0x10001, 0xd5d, 0xa0c787d, 0xffffff4e, 0x10001, 0x4, 0x40, 0x3, 0x0, 0x1fc1, 0x9, 0x1, 0x3], [0x10000010, 0x7, 0x9, 0x2, 0xa5e, 0x8000fe, 0xff, 0x58, 0x80000000, 0x0, 0xe, 0x7fff, 0x4, 0x7, 0x7, 0x0, 0xfffffffd, 0xfffffff8, 0xdaa, 0x4, 0x3, 0x103, 0x6, 0x6, 0x6, 0x4000403, 0xffffffff, 0xfffffffb, 0x40, 0x80000000, 0x4, 0x7, 0xfff, 0x40, 0x9, 0x0, 0x9, 0x41, 0x0, 0x7, 0x8ac1, 0x3, 0x1, 0x80000002, 0x80000002, 0xff, 0x6, 0x3, 0xfffff801, 0xffffffff, 0x380, 0xfffffff8, 0xd, 0x7, 0xd, 0x9, 0x6eaf, 0x0, 0x401, 0x5e02, 0x2, 0x3, 0x5, 0x400]}, 0x45c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) preadv(0xffffffffffffffff, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) poll(0x0, 0x0, 0x5) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r6, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000000) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x68, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0xea}]}}}, @IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}, @IFLA_PROTO_DOWN={0x5, 0x27, 0x3}, @IFLA_EVENT={0x8, 0x2c, 0x400}, @IFLA_LINK_NETNSID={0x8, 0x25, 0x4}]}, 0x68}}, 0x0) 4.266734944s ago: executing program 3 (id=3034): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000500)='kmem_cache_free\x00', r0}, 0x18) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000005c0)=""/151, 0x97}], 0x1, &(0x7f0000002f40)=""/229, 0x17}, 0x0) close(r2) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$incfs(0xffffffffffffffff, &(0x7f0000000180)='.log\x00', 0x1, 0x40) connect$inet6(r6, &(0x7f00000001c0)={0xa, 0x4e22, 0x1, @empty, 0x40}, 0x1c) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c00)=@framed={{}, [@printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_usb_connect(0x5, 0xb6, &(0x7f0000000c40)=ANY=[@ANYBLOB="12010003cf7e8f4040201f7262f2010203010902a400018104004f0904870605ffff020102092403050703020496062404029cfe09050b00400080000007250181f7090009050d0000046404050725010300bfbb0905020200000000000000003847c1db1f"], &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x4, [{0x4, &(0x7f0000000000)=@lang_id={0x4, 0x3, 0x439}}, {0x0, 0x0}, {0x4, &(0x7f0000000080)=@lang_id={0x4, 0x3, 0x1007}}, {0x0, 0x0}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) fsopen(0x0, 0x0) 3.795373382s ago: executing program 4 (id=3035): sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, 0x0, 0x4000004) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x10000, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x2c) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) setresuid(0x0, 0xee01, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18) getresuid(&(0x7f0000000800), &(0x7f0000000000), &(0x7f0000000340)=0x0) write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000000280)={0xa0, 0x0, 0x0, {{0x0, 0x1, 0x5, 0x6, 0xffc, 0x6, {0x1, 0x0, 0x2, 0x0, 0xffffffffffff15ef, 0x3ff, 0x7, 0x7fff, 0x7, 0x2000, 0x8, r5, 0x0, 0x2, 0x10000}}, {0x0, 0x1}}}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYBLOB, @ANYRESHEX]) stat(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040), 0x80400, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000200)='contention_end\x00', r6, 0x0, 0xfffffffffffffffe}, 0x18) clock_gettime(0x0, &(0x7f00000000c0)) r7 = userfaultfd(0x801) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f00000004c0)) ioctl$UFFDIO_CONTINUE(r7, 0xc020aa07, &(0x7f00000000c0)={{&(0x7f0000ff2000/0xe000)=nil, 0xe000}}) r8 = syz_usb_connect(0x0, 0x10b, &(0x7f0000000000)=ANY=[@ANYBLOB="05010900b24b6a10e6040300770100000001090224000b010000000904000302ccd4280009050b02000000040009058a02"], 0x0) syz_usb_control_io(r8, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) 3.586343695s ago: executing program 2 (id=3036): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x50) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=@newsa={0x150, 0x10, 0x413, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x4e24, 0x0, 0x2, 0x0, 0x20, 0x0, 0x0, 0xee00}, {@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x32}, @in=@dev={0xac, 0x14, 0x14, 0xfe}, {0x0, 0x7, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x20000000008}, {0x0, 0x8, 0xcc}, {0xf6}, 0x0, 0x0, 0x2, 0x1, 0x1}, [@algo_aead={0x5f, 0x12, {{'rfc4309(ccm(aes))\x00'}, 0x98, 0x60, "25cac5216d1c8af0a976902918bf448c5d9f54"}}]}, 0x150}}, 0x804) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r7, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r7, 0x0, 0x0, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) shutdown(r7, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000021000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) close(r0) 3.446577347s ago: executing program 7 (id=3037): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000006b40)={0x2020}, 0x206e) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x24008844, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty}, 0x1c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000040), 0x4) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000200)=ANY=[], 0x9) recvmsg$unix(0xffffffffffffffff, 0x0, 0x2060) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002280)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000002140)={0x50, 0x0, 0x0, {0x7, 0x29, 0x0, 0x0, 0x0, 0x5}}, 0x50) read$FUSE(0xffffffffffffffff, &(0x7f0000002900)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0xffffffffffffffda, r6}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000180)=@ipv4_newroute={0x2c, 0x1a, 0x1, 0x0, 0x0, {0xa}, [@RTA_DPORT={0x6}, @RTA_IP_PROTO={0x5, 0x1b, 0x11}]}, 0x2c}}, 0x0) 3.155959141s ago: executing program 2 (id=3038): socket(0x400000000010, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541c, &(0x7f0000000180)={0xd, 0x2e}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r4, 0x107, 0x5, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') write$FUSE_NOTIFY_STORE(r5, &(0x7f0000000500)=ANY=[@ANYBLOB='1\x00'], 0x31) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000c5008005000100000000f8e5543d", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00'}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r7}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x3, &(0x7f0000000000)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0xb3}}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x80) 2.560255291s ago: executing program 7 (id=3039): socket$netlink(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1}, &(0x7f0000000000), &(0x7f0000000180)=r2}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r3}, 0x18) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) fcntl$lock(r4, 0x26, &(0x7f0000000000)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) creat(&(0x7f0000000080)='./bus\x00', 0x14f) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r6}, 0x10) statfs(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000180)=""/24) r7 = syz_btf_id_by_name$bpf_lsm(&(0x7f0000000000)='bpf_lsm_inode_getattr\x00') r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket$inet6(0xa, 0x2, 0x3a) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0xffd8}}, 0x4000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000004c0)='host1x_cdma_push\x00', r8, 0x0, 0x3}, 0x18) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r10}, 0x10) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8001}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000181100"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0b00000005000000000400000900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000090b4d08de075fe31a1603f0b57c6d0795"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r11], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r12}, 0x10) 2.466270332s ago: executing program 7 (id=3040): socket(0x400000000010, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) socket$inet6(0xa, 0x3, 0x7) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000c5008005000100000000f8e5543d", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r3}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x3, &(0x7f0000000000)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0xb3}}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x80) 2.257253375s ago: executing program 2 (id=3041): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) fchdir(0xffffffffffffffff) syz_open_pts(0xffffffffffffffff, 0x113402) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00') mount(0x0, 0x0, 0x0, 0x75809, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) openat$vcsa(0xffffffffffffff9c, 0x0, 0x4000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x2, 0x1, 0x8}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1a, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x1, 0xc0, &(0x7f0000000180)=""/197, 0x0, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2620, 0x0, 0x6204}, 0x80) 1.822018222s ago: executing program 4 (id=3042): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x11, &(0x7f0000000340)={[{@nombcache}, {@debug}, {@jqfmt_vfsv0}, {@grpid}, {@block_validity}]}, 0x9, 0x61b, &(0x7f0000000800)="$eJzs3c9rHGUfAPDvTDY/mrzvm7S8vK+92IBIC9qkSVspItjitZT64+YpNmmpTZvSRDS1YAr1oogXD4InD9b/QgtePXj14MWDSCGI9GCl2pXZzKa72Wyy+bG7SfbzgUmemcnO852Eb55nn31mJoCONZx9SSMORsT1JGKwYl8h8p3DSz/34PdbF7IliWLx9d+SuPVBslB5rCT/PpC/+O/BSH5IIw501dY7O3/zysT09NSNfH107ur10dn5m0cvX524NHVp6tr4C+OnTp44eWrs2JbOr1BRPnvn7XcHPzr35ldfPErGvv7pXBKn43EeW3ZeK1/bu6Was9/ZcBSXPHyyNS19PbXFY+8UfwxW/44zycoN7FgX8xzpjoj/x2B0Vfw1B+PDV9saHNBUxSTKbRTQcZL187+7dlNfc4IBWqjcDyi/t1/tfXCttMm9EqAVFs8sDQAs5X53RJTzv7A0Nhh9pbGB/gdJ1ThPEhFbG5lbktXx/Xfn7mRL1BmHA5pj4XZ5lHtl+5+UcnMo+kpr/Q/SqvxPK5Zs+2ubrH94xbr8h9ZZuB0RT+Xtf09sOv/f2mT98h8AAAAAAAC2z70zEfH8avP/0uX5Pz2rzP8ZiIjT21D/+p//pffzQrIN1QEVFs9EvFQz//evytnBQ1355/z/Ls0H6E4vXp6eOhYR/4mII9Hdm62PVR+2aoLw0U8OfF6v/sr5f9mS1V+eC5gf6n5hxYW4kxNzE9tz9tDZFm9HPCzN/z2Ub6me/5O1/0lN+//xK1mCX2+wjgPP3j1fteGXJ/8e1s9/oFmKX0YcXvX6nyfd7WTt+3OMlvoDo+VeQa2n3//0m3r1y39on6z97187/3uTyvv1zG7s+D0RcXy+UKy3f7P9/57kja7y8TPvTczN3RiL6EnO1m4f31jMsFeV86GcL1n+H3lm7fG/5f5/RR7ui4iFBuv83+OBn+vt0/5D+2T5P7l2+z9U3f5vtNAX43eHvs1vMVbjfEPt/4lSm34k32L8DyrV3o+j0QRtS7gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsMulEfGvSNKR5XKajoxEDETEf6M/nZ6ZnXvu4sw71yazfdXP/x9cWk/Kz/8fqlgfX7F+PCL2R8RnXftK6yMXZqYn233yAAAAAAAAAAAAAAAAAAAAsEMMlK75L/auvP4/82tXu6MDmq6Qf5fv0HkKm35lsXdbAwFabvP5D+x2jed/d1PjAFqvfv4/fFQsaWk4QAvp/0Pn2mT++7gA9gDtP3SqBsf0+podB9AODbf/i82NAwAAAAAA2Bb7D937MYmIhRf3lZZMT77PZH/Y29J2BwC0jTm80LkKM+2OAGgX7/GBZLn056oX+9ef/Z80JyAAAAAAAAAAAAAAoMbhg67/h06VRqzxCG9z+2EvW+P6/9WS3+0CYA+p/+iPRtr+RA8BdjHv8YH12nHX/wMAAAAAAAAAAADADtB388rE9PTUjdn53Vd4eWeEsbHCwsSOCGNbC4/X+5nyY+Y3duTuiNgZJ9jqQvkWHG0Mo43/kwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgCr/BAAA///kPC2+") sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0xc000) 1.691919864s ago: executing program 3 (id=3043): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) sendmmsg$unix(r2, &(0x7f00000022c0)=[{{&(0x7f0000000240)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000780)=[{&(0x7f0000000a00)="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", 0xfe0}, {&(0x7f00000004c0)="eb8ae8b591646856cbee3087a7cc88971735c3f20b27869729ccfed538167094e0f260bf50423d0e0bf7b4e412fd9ba8cacbbbab316a18ef40c4cf9111984f599cd3076ac4fc8e82deb7752b09eb4d9c36258be460fc64c87a9792554a1b53f1db680fa04704ba522dfda9ac10d82ae79af5708ece579360b24a677f56d4259b0e99da7509e12cd1308b7d7e2fef012af6dda83c71727c3cdc72cb5f5957568e6a000f1eef064cee5d0b4015c62e88b2462d689dea", 0xb5}, {&(0x7f0000000580)="12504f15fc16fcaea4333e9c540afb6fc44669a7e8fb21af273c67a0ee19ca7bdc3911df8a92f45f8b3a801cd53fe227d9e3a893b4e56b64b94e6f7a4e957d37f11fbecce2e37b9eb9b3fbf55ac2b6d2da445f1737b244b24fc29e76a3dd85855ad0905e297d72009d5c4c3b98766cc55d22672be1a2cf663add155f4cc8e9844179998a4d9c1ef498941b2010f3fbdad4f836b28d0a8500ac711b3221d6a21d5c2b55cf9d94b2213712873f58b2d7", 0xaf}, {&(0x7f0000000640)="50e9f17439d30574765daa86c125e078c908aabc9864c087dc3eac37624d80d186809fa1c1a40b340e6778773afef557d451abc1d883859ffea2f76f9fcc92c96933bf92add7d2fd5ee8904ca944560b909c26aeab09da729e9e90693ce093dbce5a", 0x62}, {&(0x7f00000006c0)="34bf5a7728e65ff097892b68078cf1977a6b33f047d75d589072402eaf9f34a0e286678aa209f0ecc0066b62dcb1124cd34bdb9ac8c59271d79b347f174c323ed8a9ce055d136b8e5b4d80b94dbbdf2493e1fa6cf524ea5321c99db7546956068396c80a1099853e6a98a0f0a191cbf7537855d74a6f07aa1a195f5629ad8c0546fa3406a82f1c0dfe9507016380dabf718b9426ad978a2c6d0b8cb2fd9c252cc957fb059266df4901f0883889", 0xad}, {&(0x7f00000001c0)="19c56633c69fe895", 0x8}], 0x6, &(0x7f0000000800)=[@cred={{0x1c, 0x1, 0x2, {r0}}}, @cred={{0x1c, 0x1, 0x2, {r0}}}, @rights={{0x38, 0x1, 0x1, [r5, r4, 0xffffffffffffffff, r3, r5, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, r3]}}, @cred={{0x1c, 0x1, 0x2, {r0, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r3, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xd8, 0x4000010}}], 0x1, 0x4000) 1.607491935s ago: executing program 7 (id=3044): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) sendmmsg$unix(r2, &(0x7f00000022c0)=[{{&(0x7f0000000240)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000780)=[{&(0x7f0000000a00)="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", 0xfe0}, {&(0x7f00000004c0)="eb8ae8b591646856cbee3087a7cc88971735c3f20b27869729ccfed538167094e0f260bf50423d0e0bf7b4e412fd9ba8cacbbbab316a18ef40c4cf9111984f599cd3076ac4fc8e82deb7752b09eb4d9c36258be460fc64c87a9792554a1b53f1db680fa04704ba522dfda9ac10d82ae79af5708ece579360b24a677f56d4259b0e99da7509e12cd1308b7d7e2fef012af6dda83c71727c3cdc72cb5f5957568e6a000f1eef064cee5d0b4015c62e88b2462d689dea", 0xb5}, {&(0x7f0000000580)="12504f15fc16fcaea4333e9c540afb6fc44669a7e8fb21af273c67a0ee19ca7bdc3911df8a92f45f8b3a801cd53fe227d9e3a893b4e56b64b94e6f7a4e957d37f11fbecce2e37b9eb9b3fbf55ac2b6d2da445f1737b244b24fc29e76a3dd85855ad0905e297d72009d5c4c3b98766cc55d22672be1a2cf663add155f4cc8e9844179998a4d9c1ef498941b2010f3fbdad4f836b28d0a8500ac711b3221d6a21d5c2b55cf9d94b2213712873f58b2d7", 0xaf}, {&(0x7f0000000640)="50e9f17439d30574765daa86c125e078c908aabc9864c087dc3eac37624d80d186809fa1c1a40b340e6778773afef557d451abc1d883859ffea2f76f9fcc92c96933bf92add7d2fd5ee8904ca944560b909c26aeab09da729e9e90693ce093dbce5a", 0x62}, {&(0x7f00000006c0)="34bf5a7728e65ff097892b68078cf1977a6b33f047d75d589072402eaf9f34a0e286678aa209f0ecc0066b62dcb1124cd34bdb9ac8c59271d79b347f174c323ed8a9ce055d136b8e5b4d80b94dbbdf2493e1fa6cf524ea5321c99db7546956068396c80a1099853e6a98a0f0a191cbf7537855d74a6f07aa1a195f5629ad8c0546fa3406a82f1c0dfe9507016380dabf718b9426ad978a2c6d0b8cb2fd9c252cc957fb059266df4901f0883889", 0xad}, {&(0x7f00000001c0)="19c56633c69fe895", 0x8}], 0x6, &(0x7f0000000800)=[@cred={{0x1c, 0x1, 0x2, {r0}}}, @cred={{0x1c, 0x1, 0x2, {r0}}}, @rights={{0x38, 0x1, 0x1, [r5, r4, 0xffffffffffffffff, r3, r5, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, r3]}}, @cred={{0x1c, 0x1, 0x2, {r0, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r3, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xd8, 0x4000010}}], 0x1, 0x4000) 1.534103606s ago: executing program 4 (id=3045): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x7, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000096e03ea18367d6c71000000500000018260000", @ANYRES32=r0, @ANYBLOB="00000000ff03000095000000000000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x80000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), 0xffffffffffffffff) openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.log\x00', 0x200, 0x80) prlimit64(0x0, 0x5, &(0x7f0000000240)={0x8, 0x81}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x0, 0x40002003, 0x0) clock_gettime(0x0, 0x0) select(0x40, &(0x7f0000000300)={0x6, 0x6, 0x7, 0x1, 0x169c, 0x0, 0x6048f42e, 0x10}, 0x0, &(0x7f0000000040)={0x9, 0x800, 0x1ff, 0x9, 0x1000, 0x8005, 0x10000000002, 0x5}, &(0x7f00000000c0)={0x77359400}) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x20c006, &(0x7f0000000480)={[{@grpjquota}, {@mblk_io_submit}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@discard}, {@grpquota}], [{@seclabel}]}, 0x1, 0x446, &(0x7f0000000d40)="$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") bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0xffffffffffffffff, 0x9, &(0x7f0000000140)={0xf89, 0xffffffffffffffba}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) 1.33594754s ago: executing program 2 (id=3046): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x66002, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kmem_cache_free\x00', r1}, 0x10) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x82, &(0x7f0000000580)=ANY=[@ANYBLOB="cf599d3baed500000000000086dd60f20000004c2c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa000600080000"], 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000102c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa11000001"], 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff00000006"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='kmem_cache_free\x00', r3}, 0x18) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r4, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xd240, 0x7}) fcntl$lock(r4, 0x25, &(0x7f0000000140)={0x1, 0x2, 0x8000, 0x80000000}) r5 = socket(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r8, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x74, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x44, 0x2, [@TCA_BASIC_EMATCHES={0x40, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x34, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{}, {0x0, 0x0, 0x1}}}, @TCF_EM_META={0x20, 0x2, 0x0, 0x0, {{0x0, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc}, @TCA_EM_META_RVALUE={0x4, 0x3, [@TCF_META_TYPE_VAR]}, @TCA_EM_META_LVALUE={0x4, 0x2, [@TCF_META_TYPE_VAR]}]}}]}]}]}}]}, 0x74}}, 0x0) 1.32321688s ago: executing program 2 (id=3047): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) fchdir(0xffffffffffffffff) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000780)=ANY=[@ANYBLOB="540100001000330600000000fddbdf25e0000002000000000000000000000000e000000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe880000000000000000000000639fd95a0004d6320000000a010101000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000900000000000000000000000000000000000000040000000000000002000400000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c0004"], 0x154}}, 0x0) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00') mount(0x0, 0x0, 0x0, 0x75809, 0x0) openat$vcsa(0xffffffffffffff9c, 0x0, 0x4000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x2, 0x1, 0x8}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1a, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x1, 0xc0, &(0x7f0000000180)=""/197, 0x0, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2620}, 0x80) 868.420007ms ago: executing program 3 (id=3048): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x50) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=@newsa={0x150, 0x10, 0x413, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x4e24, 0x0, 0x2, 0x0, 0x20, 0x0, 0x0, 0xee00}, {@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x32}, @in=@dev={0xac, 0x14, 0x14, 0xfe}, {0x0, 0x7, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x20000000008}, {0x0, 0x8, 0xcc}, {0xf6}, 0x0, 0x0, 0x2, 0x1, 0x1}, [@algo_aead={0x5f, 0x12, {{'rfc4309(ccm(aes))\x00'}, 0x98, 0x60, "25cac5216d1c8af0a976902918bf448c5d9f54"}}]}, 0x150}}, 0x804) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r7, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r7, 0x0, 0x0, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) shutdown(r7, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000021000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) close(r0) 723.539909ms ago: executing program 7 (id=3049): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() getpeername$inet6(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x4517, &(0x7f0000000d40), 0x12, 0x4b3, &(0x7f0000001b00)="$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") r5 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0), 0x802, 0x0) write$uinput_user_dev(r5, &(0x7f0000000a00)={'syz1\x00', {0x0, 0x7, 0x5, 0x5}, 0x3e, [0x9, 0x2, 0x8, 0x2, 0x5334, 0x400, 0x80000000, 0x5, 0x8, 0x0, 0x6, 0xf5, 0x9, 0x39, 0x747d5e13, 0x8, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x4, 0x3, 0x4, 0xf252, 0x80, 0x800, 0x300000, 0x7, 0xe, 0x4623f, 0x0, 0x0, 0x1ff, 0x8000, 0x3ff, 0x3, 0xd, 0x3, 0xba55, 0x8da8, 0x2, 0x200, 0x2, 0x400008, 0xe, 0x4, 0x2, 0xde, 0x8, 0x9, 0x1, 0x199f, 0x8, 0x2, 0x9, 0xffffffff, 0x2004, 0x6, 0x1000, 0x5, 0x40, 0x9, 0xa, 0x5], [0x6, 0x1e, 0x3, 0xce7, 0xfffffffe, 0x3, 0x0, 0x25, 0x7, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0x1c32, 0x3, 0x9, 0x10000, 0x400, 0x8001, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x4, 0x100, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0xfffffffe, 0x5, 0x1, 0xffffffff, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x96, 0xfffffff9, 0x101, 0x0, 0x2, 0x401, 0xc, 0x3, 0x80000001, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x6, 0x200, 0x3], [0x401, 0xc584, 0xffff, 0xcd4, 0x7, 0x20, 0x7, 0x4, 0x8, 0x10, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x8, 0xffffffff, 0x1000, 0x2, 0x10, 0x1, 0xfffffff9, 0xe55, 0x10, 0x80000001, 0x4, 0x4, 0x5, 0x200003, 0x2, 0x5, 0x80, 0x9, 0x9, 0x47, 0x2, 0x3, 0x4, 0x7, 0x6d7e, 0x3, 0x8, 0x8001, 0xbf23, 0x6, 0x8, 0xffff, 0x0, 0x3ff, 0x3, 0x6, 0x100fffd, 0x2005, 0x7, 0x0, 0xea, 0x9, 0x20000005, 0x6, 0xd9, 0x0, 0x7d, 0x401, 0x5], [0x108e, 0x7fff, 0x3, 0x3, 0x88, 0x2, 0x6, 0x4, 0x50, 0x2, 0x763, 0xb, 0x402, 0x8000, 0x5, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x10, 0x4, 0xe47, 0x3, 0x3, 0x4, 0x200, 0x1000, 0x3b, 0x2, 0x5, 0x800, 0xa80a, 0x65f413f9, 0x4, 0x8, 0x8a8, 0x2, 0x40, 0x409, 0x2, 0x4, 0x4, 0x10, 0x0, 0x0, 0x7fff, 0x2, 0xfffffff8, 0x401, 0x1, 0x200, 0x7, 0x4edf, 0xfffffffd, 0x7, 0xb, 0x2, 0xe, 0xf, 0x133, 0x6]}, 0x45c) 583.975921ms ago: executing program 4 (id=3050): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000200000000000000000073012b00000000009500009c06000000e1f9386e9df76af0d4cea09b70be1a7de3f6eca03596d7551d5c44a6448865c48e8561f4309a1f0a3d08d44d97512914279f5ef44a0f7c3702f1a87bb9b3aa425318d91ab738bd046e627c4fd1b5ce46c37375b15fc354802e39470f454d09e9959bdfa1ebac1a60715b31724ae833ce57de9902d5c21c29f2b3d5a6666c2aca3fb6c2b1cef3b56b4af450c760052a7d3547c6dd73a887b74dc30049ca1b0c0000cd718a77958a5aa89c7b95c20d034bb6f60bcfc0c801de03128956334706322949a008f37dcde60685fc2706dfb02d471b0167cf2f5e9c10ff3e75fbf8206f7a6d9e87e0bb6998556a88c4d6e62e71a8cb07ea02c2bbb4433a56edcec31fdeb1e9be3482573c2948282f9c911737b192ee73d653333916ac1b6d7dcdf55f72f69a74ae292645775a402a4e8f4f9058977e8599b6ee923bf27b0d30e3d391f6abc007c1c17c83fab7df47f9132ddbf9b182f5f4b1e669bd53726e4ec05ebe51"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x80) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r5 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f00000000c0)={@mcast1, 0x800, 0x0, 0x103, 0x1, 0x0, 0x3}, 0x20) setsockopt$inet6_int(r5, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x4) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x180000, @empty}, 0x1c) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000140)={@local}, &(0x7f0000000040)=0xfffffffffffffff1) setsockopt$inet6_int(r4, 0x29, 0x1a, &(0x7f0000000000)=0x9, 0xe7) bind$inet6(r4, 0x0, 0x0) listen(r4, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) mount$incfs(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) 318.888915ms ago: executing program 2 (id=3051): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r2, &(0x7f0000000100)={&(0x7f0000000080)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x1}}, 0x10, &(0x7f00000000c0)=[{&(0x7f00000018c0)="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", 0x1000}, {&(0x7f0000000240)="6ad843bdd4542c09219a9d23d93b47f8f0edf054c69d68fe62aa23ff2ee5716b7cc290a8dbb478886cdde32908f888cc356483be04846a6204b4648cbebca61a45f7801f83a84a8682c856079b4e601db4b9474dfd1f15116c3cedf817d6e1b3062e50fe580a8e555aab89380a783fcb2d8212d36f6c5cb517f152ab337b53d1f2b6d182374ff1790a46818fdad6422c61a4554c82445fdd98c4e9ea74451eb74f46038d618122e06440e4f351ced0d5fb7d947e2f5e25fb6f6b8ef2b87999d0ed8c6e86debc577ff671c7bf11fbc7b4a8d57ed32e9cdd8b3a9f9832cef21c376a7f011ad8ebb40813f00a8bb26fc8c8", 0xf0}], 0x2, &(0x7f0000000340)="4e964d0f55db11e70b828236c2374885721a7aa35bde3de1a54a9903917d9c00e40430a3188109807d9eeabc4346303b15895828ba680a4f41d635eae2c9333a9378a6d71ea7424d42bdf618ab39a306bff25f13e2741837757ec2c040aff5e2e3438f26c8e6dd852279bff28ce3385417f1b86e74ee83c99616a422112dfc41430590da4cfe7830dd1f3b6418ad03aa75", 0x91, 0x11}, 0x10) r3 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x0) sendto$inet(r3, 0x0, 0x0, 0x20008884, &(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10) fcntl$setsig(r3, 0xa, 0x21) fcntl$setlease(r3, 0x400, 0x1) sendmsg$TCPDIAG_GETSOCK(r3, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000580)={0x180, 0x12, 0x100, 0x70bd2a, 0x25dfdbfc, {0x9, 0x2, 0x8, 0x95, {0x4e20, 0x4e23, [0x7fffffff, 0x4, 0xfffffff7, 0xfffffff8], [0x7, 0xe3, 0x8, 0x25], 0x0, [0x10001, 0x4]}, 0xe0, 0x8}, [@INET_DIAG_REQ_BYTECODE={0x34, 0x1, "68c4117e49f38e13902fcf019f3ef87000add526cccd47cc22831cdad171cd727c812dae78d4a4c3384c5859960d297e"}, @INET_DIAG_REQ_BYTECODE={0x75, 0x1, "91a7d6a20955a98222b891686c110c702704d21bc94936521fea434f0decf669acc87dbb27ac68f9cb9f189b78900331f2c759a862fd37d8bf284702a238cb35c45a959142a5c897c9e3d78eef1488c738774c762ee9a36bcb1a6d51c797cd4ab74a064b3695e0ea32025633df3fd8eba6"}, @INET_DIAG_REQ_BYTECODE={0x86, 0x1, "a3eafedd851ab2edbbeb0e4feb4edcc65ef1dfc3b564766c831115177166a9574469e3068a22328043ce7c75589b65c3c245693737118821a37e0e9a4976ddd50414335d28bb2a1bcad2314ff1ad140e8a2129d605449c8a96d7b60bc888bf15e6c230e824ee9964e1324759c35188996e91cbe2be7e445cc2cf8c66c9dc0e18cebf"}]}, 0x180}, 0x1, 0x0, 0x0, 0x4000040}, 0x20000801) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) syz_usb_connect$uac1(0x0, 0xa5, &(0x7f0000000400)=ANY=[@ANYBLOB="12011003000000106b1d010140000102030109029300030103f0070904000000010100000a24014000920201020d2406050603050005000700ff0c2407060300004917fcff0f0c240205ff010100010000060924030906030301f70624050100800904010000010200000904010101010200000905010940000800070725018000000009040200000102000009040201ffff0200000905820910000505fd0725"], &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0}) mount$incfs(&(0x7f0000000b40)='./file0\x00', &(0x7f0000000b80)='.\x00', &(0x7f0000000bc0), 0x1, &(0x7f0000000c00)={[{@read_timeout_ms={'read_timeout_ms', 0x3d, 0x5}}]}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r4}, &(0x7f0000000380), &(0x7f00000003c0)=r5}, 0x20) syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x0) mount(&(0x7f0000000000)=@filename='./file0\x00', &(0x7f0000000040)='.\x00', &(0x7f0000000140)='f2fs\x00', 0x0, 0x0) 0s ago: executing program 3 (id=3052): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x1800700, &(0x7f0000000100)={[{@bsdgroups}, {@abort}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5e}}, {@noauto_da_alloc}, {@block_validity}, {@oldalloc}, {@journal_dev={'journal_dev', 0x3d, 0x77}}]}, 0x2, 0x44a, &(0x7f0000000400)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) syz_mount_image$ext4(0x0, &(0x7f0000000580)='./file0\x00', 0x19560c0, 0x0, 0x0, 0x0, 0x0) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, 0x0) kernel console output (not intermixed with test programs): k_file permissive=1 [ 422.057408][ T30] audit: type=1326 audit(422.028:7675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7399 comm="syz.2.2032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b40152929 code=0x7ffc0000 [ 422.104831][ T30] audit: type=1326 audit(422.028:7676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7399 comm="syz.2.2032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b40152929 code=0x7ffc0000 [ 422.166054][ T30] audit: type=1326 audit(422.028:7677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7399 comm="syz.2.2032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f5b40152929 code=0x7ffc0000 [ 422.204381][ T7411] loop6: detected capacity change from 0 to 256 [ 422.231997][ T7413] netlink: 124 bytes leftover after parsing attributes in process `syz.1.2037'. [ 422.235387][ T30] audit: type=1326 audit(422.028:7678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7399 comm="syz.2.2032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b40152929 code=0x7ffc0000 [ 422.264243][ T30] audit: type=1326 audit(422.028:7679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7399 comm="syz.2.2032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b40152929 code=0x7ffc0000 [ 422.287607][ T7411] exfat: Deprecated parameter 'utf8' [ 422.293059][ T7411] exfat: Deprecated parameter 'utf8' [ 422.298432][ T7411] exfat: Bad value for 'uid' [ 422.304219][ T30] audit: type=1326 audit(422.028:7680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7399 comm="syz.2.2032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f5b40152929 code=0x7ffc0000 [ 422.415389][ T7415] loop6: detected capacity change from 0 to 256 [ 422.732055][ T7417] overlayfs: failed to clone upperpath [ 423.336738][ T7434] loop6: detected capacity change from 0 to 128 [ 423.431772][ T7434] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 423.520488][ T7452] netlink: 'syz.1.2047': attribute type 15 has an invalid length. [ 424.585066][ T7458] overlayfs: failed to clone upperpath [ 424.641312][ T7460] 9pnet: Insufficient options for proto=fd [ 424.742373][ T7470] incfs: Backing dir is not set, filesystem can't be mounted. [ 424.774471][ T7470] incfs: mount failed -2 [ 424.827504][ T7471] loop6: detected capacity change from 0 to 512 [ 424.892690][ T7471] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 424.973533][ T7471] EXT4-fs error (device loop6): ext4_orphan_get:1427: comm syz.6.2051: bad orphan inode 131083 [ 424.984774][ T7471] EXT4-fs (loop6): mounted filesystem without journal. Opts: stripe=0x000000000000003d,init_itable,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 425.302913][ T7487] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2057'. [ 425.316444][ T7487] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7487 comm=syz.2.2057 [ 425.682273][ T7515] overlayfs: failed to clone upperpath [ 426.080616][ T7526] device wg2 entered promiscuous mode [ 426.250376][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 426.250389][ T30] audit: type=1326 audit(426.228:7691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7532 comm="syz.4.2070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1aea048929 code=0x7ffc0000 [ 426.279688][ T30] audit: type=1326 audit(426.228:7692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7532 comm="syz.4.2070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1aea048929 code=0x7ffc0000 [ 426.304676][ T30] audit: type=1326 audit(426.228:7693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7532 comm="syz.4.2070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=227 compat=0 ip=0x7f1aea048929 code=0x7ffc0000 [ 426.328048][ T30] audit: type=1326 audit(426.228:7694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7532 comm="syz.4.2070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1aea048929 code=0x7ffc0000 [ 426.351339][ T30] audit: type=1326 audit(426.228:7695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7532 comm="syz.4.2070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1aea048929 code=0x7ffc0000 [ 426.407836][ T30] audit: type=1326 audit(426.228:7696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7532 comm="syz.4.2070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1aea048929 code=0x7ffc0000 [ 426.432953][ T30] audit: type=1326 audit(426.228:7697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7532 comm="syz.4.2070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1aea048929 code=0x7ffc0000 [ 426.456966][ T30] audit: type=1326 audit(426.228:7698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7532 comm="syz.4.2070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1aea048929 code=0x7ffc0000 [ 426.487566][ T30] audit: type=1326 audit(426.228:7699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7532 comm="syz.4.2070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f1aea048929 code=0x7ffc0000 [ 426.510727][ T30] audit: type=1326 audit(426.228:7700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7532 comm="syz.4.2070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1aea048929 code=0x7ffc0000 [ 427.103733][ T7550] sock: sock_timestamping_bind_phc: sock not bind to device [ 427.307359][ T7575] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7575 comm=syz.6.2083 [ 428.829843][ T7610] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 429.310517][ T7618] overlayfs: failed to clone upperpath [ 429.449961][ T7623] syz.4.2097[7623] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 429.450358][ T7623] syz.4.2097[7623] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 431.308936][ T7658] loop6: detected capacity change from 0 to 512 [ 431.376377][ T7658] EXT4-fs (loop6): Ignoring removed mblk_io_submit option [ 431.408457][ T7658] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 431.421978][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 431.421991][ T30] audit: type=1326 audit(431.378:7718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7660 comm="syz.4.2110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1aea048929 code=0x7ffc0000 [ 431.494061][ T7658] EXT4-fs (loop6): 1 truncate cleaned up [ 431.502038][ T7658] EXT4-fs (loop6): mounted filesystem without journal. Opts: i_version,mblk_io_submit,debug_want_extra_isize=0x0000000000000068,lazytime,block_validity,data_err=abort,,errors=continue. Quota mode: none. [ 431.544283][ T30] audit: type=1326 audit(431.428:7719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7660 comm="syz.4.2110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=192 compat=0 ip=0x7f1aea048929 code=0x7ffc0000 [ 431.618687][ T30] audit: type=1326 audit(431.428:7720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7660 comm="syz.4.2110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1aea048929 code=0x7ffc0000 [ 431.641637][ T30] audit: type=1326 audit(431.428:7721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7660 comm="syz.4.2110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f1aea048929 code=0x7ffc0000 [ 431.664440][ T30] audit: type=1326 audit(431.428:7722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7660 comm="syz.4.2110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1aea048929 code=0x7ffc0000 [ 431.687320][ T30] audit: type=1326 audit(431.428:7723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7660 comm="syz.4.2110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f1aea048929 code=0x7ffc0000 [ 431.783037][ T30] audit: type=1326 audit(431.428:7724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7660 comm="syz.4.2110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1aea048929 code=0x7ffc0000 [ 432.479991][ T30] audit: type=1326 audit(431.428:7725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7660 comm="syz.4.2110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1aea048929 code=0x7ffc0000 [ 432.497468][ T7678] overlayfs: './file1' not a directory [ 432.509943][ T30] audit: type=1326 audit(431.428:7726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7660 comm="syz.4.2110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1aea048929 code=0x7ffc0000 [ 432.533391][ T30] audit: type=1326 audit(431.428:7727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7660 comm="syz.4.2110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f1aea048929 code=0x7ffc0000 [ 432.558849][ T7684] 9pnet: Insufficient options for proto=fd [ 432.689008][ T7687] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2115'. [ 435.706747][ T7716] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=7716 comm=syz.6.2125 [ 436.220143][ T7732] overlayfs: './file1' not a directory [ 436.749669][ T7749] loop6: detected capacity change from 0 to 256 [ 438.267273][ T30] kauditd_printk_skb: 56 callbacks suppressed [ 438.267287][ T30] audit: type=1326 audit(438.238:7784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7781 comm="syz.1.2144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f445c7e7929 code=0x7ffc0000 [ 438.319582][ T7785] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2145'. [ 438.348903][ T30] audit: type=1326 audit(438.268:7785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7781 comm="syz.1.2144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f445c7e7929 code=0x7ffc0000 [ 438.416792][ T30] audit: type=1326 audit(438.268:7786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7781 comm="syz.1.2144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f445c7e7929 code=0x7ffc0000 [ 438.439705][ T30] audit: type=1326 audit(438.288:7787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7781 comm="syz.1.2144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f445c7e7929 code=0x7ffc0000 [ 438.463711][ T30] audit: type=1326 audit(438.288:7788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7781 comm="syz.1.2144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f445c7e7929 code=0x7ffc0000 [ 438.486718][ T30] audit: type=1326 audit(438.288:7789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7781 comm="syz.1.2144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f445c7e7929 code=0x7ffc0000 [ 438.522319][ T30] audit: type=1326 audit(438.288:7790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7781 comm="syz.1.2144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f445c7e7929 code=0x7ffc0000 [ 438.561407][ T30] audit: type=1326 audit(438.288:7791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7781 comm="syz.1.2144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f445c7e7929 code=0x7ffc0000 [ 438.607658][ T30] audit: type=1326 audit(438.288:7792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7781 comm="syz.1.2144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f445c7e7929 code=0x7ffc0000 [ 438.645838][ T30] audit: type=1326 audit(438.288:7793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7781 comm="syz.1.2144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f445c7e7929 code=0x7ffc0000 [ 440.784799][ T7824] loop6: detected capacity change from 0 to 40427 [ 440.891468][ T7824] F2FS-fs (loop6): invalid crc value [ 440.913879][ T7824] F2FS-fs (loop6): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 441.147205][ T7824] F2FS-fs (loop6): Start checkpoint disabled! [ 441.274238][ T7824] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 441.365447][ T7824] attempt to access beyond end of device [ 441.365447][ T7824] loop6: rw=2049, want=78344, limit=40427 [ 441.402858][ T7850] overlayfs: './file1' not a directory [ 442.523016][ T7824] attempt to access beyond end of device [ 442.523016][ T7824] loop6: rw=2049, want=78480, limit=40427 [ 442.914607][ T7710] attempt to access beyond end of device [ 442.914607][ T7710] loop6: rw=2049, want=45112, limit=40427 [ 443.126103][ T7875] loop6: detected capacity change from 0 to 128 [ 443.738415][ T7875] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 444.294696][ T7891] overlayfs: './file1' not a directory [ 444.348022][ T7901] overlayfs: unrecognized mount option "uuid=null" or missing value [ 446.381734][ T30] kauditd_printk_skb: 53 callbacks suppressed [ 446.381748][ T30] audit: type=1326 audit(446.358:7847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7941 comm="syz.3.2187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f908b60a929 code=0x7ffc0000 [ 446.411991][ T30] audit: type=1326 audit(446.358:7848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7941 comm="syz.3.2187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f908b60a929 code=0x7ffc0000 [ 446.435234][ T30] audit: type=1326 audit(446.358:7849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7941 comm="syz.3.2187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f908b60a929 code=0x7ffc0000 [ 446.464574][ T30] audit: type=1326 audit(446.428:7850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7941 comm="syz.3.2187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f908b60a929 code=0x7ffc0000 [ 446.489038][ T30] audit: type=1326 audit(446.428:7851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7941 comm="syz.3.2187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f908b60a929 code=0x7ffc0000 [ 446.771332][ T30] audit: type=1400 audit(446.728:7852): avc: denied { mount } for pid=7945 comm="syz.2.2189" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 449.299897][ T30] audit: type=1326 audit(449.268:7853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7990 comm="syz.4.2202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1aea048929 code=0x7ffc0000 [ 449.335350][ T30] audit: type=1326 audit(449.268:7854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7990 comm="syz.4.2202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=36 compat=0 ip=0x7f1aea048929 code=0x7ffc0000 [ 449.358508][ T30] audit: type=1326 audit(449.268:7855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7990 comm="syz.4.2202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1aea048929 code=0x7ffc0000 [ 449.381724][ T30] audit: type=1326 audit(449.298:7856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7990 comm="syz.4.2202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1aea048929 code=0x7ffc0000 [ 452.107830][ T8079] syz.2.2225[8079] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 452.107900][ T8079] syz.2.2225[8079] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 452.127027][ T8077] syz.4.2222[8077] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 452.138425][ T8077] syz.4.2222[8077] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 453.286631][ T8099] loop6: detected capacity change from 0 to 512 [ 453.360057][ T30] kauditd_printk_skb: 39 callbacks suppressed [ 453.360084][ T30] audit: type=1400 audit(453.338:7896): avc: denied { map } for pid=8109 comm="syz.3.2233" path="socket:[36967]" dev="sockfs" ino=36967 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 453.398114][ T8099] EXT4-fs (loop6): Mount option "noacl" will be removed by 3.5 [ 453.398114][ T8099] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 453.398114][ T8099] [ 453.423472][ T8099] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -2 [ 453.432324][ T8099] EXT4-fs (loop6): 1 truncate cleaned up [ 453.950057][ T8099] EXT4-fs (loop6): mounted filesystem without journal. Opts: jqfmt=vfsold,usrjquota=,min_batch_time=0x0000000000000001,noload,nombcache,usrjquota="init_itable=0x0000000000000601,noacl,data_err=abort,,errors=continue. Quota mode: writeback. [ 453.989619][ T8122] 9pnet: Insufficient options for proto=fd [ 454.067849][ T30] audit: type=1400 audit(454.038:7897): avc: denied { setopt } for pid=8097 comm="syz.6.2229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 454.198899][ T30] audit: type=1326 audit(454.168:7898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8131 comm="syz.2.2239" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5b40152929 code=0x0 [ 454.508685][ T30] audit: type=1400 audit(454.438:7899): avc: denied { accept } for pid=8131 comm="syz.2.2239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 454.604945][ T30] audit: type=1326 audit(454.578:7900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8139 comm="syz.3.2241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f908b60a929 code=0x7ffc0000 [ 454.649790][ T30] audit: type=1326 audit(454.598:7901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8139 comm="syz.3.2241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f908b60a929 code=0x7ffc0000 [ 454.687181][ T30] audit: type=1326 audit(454.598:7902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8139 comm="syz.3.2241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f908b60a929 code=0x7ffc0000 [ 454.726722][ T30] audit: type=1326 audit(454.608:7903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8139 comm="syz.3.2241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f908b60a929 code=0x7ffc0000 [ 454.757361][ T30] audit: type=1326 audit(454.608:7904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8139 comm="syz.3.2241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f908b60a929 code=0x7ffc0000 [ 454.786160][ T30] audit: type=1326 audit(454.608:7905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8139 comm="syz.3.2241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f908b60a929 code=0x7ffc0000 [ 455.069726][ T8161] device vti0 entered promiscuous mode [ 455.098208][ T8152] overlayfs: failed to clone upperpath [ 458.534251][ T8189] loop6: detected capacity change from 0 to 1024 [ 458.546907][ T8185] overlayfs: failed to clone upperpath [ 458.574024][ T8189] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 458.575877][ T8202] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2258'. [ 458.599347][ T8202] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2258'. [ 458.747216][ T8218] overlayfs: failed to clone upperpath [ 459.015949][ T8223] netlink: 1323 bytes leftover after parsing attributes in process `syz.2.2262'. [ 459.369244][ T30] kauditd_printk_skb: 47 callbacks suppressed [ 459.369266][ T30] audit: type=1400 audit(459.338:7953): avc: denied { read } for pid=8237 comm="syz.3.2267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 459.629240][ T30] audit: type=1326 audit(459.398:7954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8233 comm="syz.2.2266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b40152929 code=0x7ffc0000 [ 459.657228][ T30] audit: type=1326 audit(459.398:7955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8233 comm="syz.2.2266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b40152929 code=0x7ffc0000 [ 459.817839][ T30] audit: type=1326 audit(459.398:7956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8233 comm="syz.2.2266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=23 compat=0 ip=0x7f5b40152929 code=0x7ffc0000 [ 460.189235][ T8270] syz.3.2273[8270] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 460.189544][ T8270] syz.3.2273[8270] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 460.426999][ T30] audit: type=1400 audit(460.398:7957): avc: denied { ioctl } for pid=8269 comm="syz.6.2276" path="uts:[4026532288]" dev="nsfs" ino=4026532288 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 460.925503][ T8278] loop6: detected capacity change from 0 to 128 [ 460.936596][ T8278] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 461.924128][ T8302] SELinux: security_context_str_to_sid(saf) failed for (dev ?, type ?) errno=-22 [ 462.006629][ T8314] loop6: detected capacity change from 0 to 2048 [ 462.076354][ T8314] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 462.153363][ T8319] xt_bpf: check failed: parse error [ 462.356339][ T8314] device pim6reg1 entered promiscuous mode [ 462.388678][ T30] audit: type=1400 audit(462.328:7958): avc: denied { watch watch_reads } for pid=8313 comm="syz.6.2288" path="/193/control/file0" dev="loop6" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 462.425456][ T30] audit: type=1400 audit(462.338:7959): avc: denied { execute } for pid=8313 comm="syz.6.2288" name="file1" dev="loop6" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 462.448397][ T30] audit: type=1400 audit(462.388:7960): avc: denied { execute_no_trans } for pid=8313 comm="syz.6.2288" path="/193/control/file1" dev="loop6" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 462.505358][ T7710] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 462.534326][ T7710] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 462.563114][ T7710] EXT4-fs (loop6): This should not happen!! Data will be lost [ 462.563114][ T7710] [ 462.579784][ T7710] EXT4-fs (loop6): Total free blocks count 0 [ 462.585853][ T7710] EXT4-fs (loop6): Free/Dirty block details [ 462.595960][ T7710] EXT4-fs (loop6): free_blocks=4096 [ 462.601208][ T7710] EXT4-fs (loop6): dirty_blocks=16 [ 462.616229][ T7710] EXT4-fs (loop6): Block reservation details [ 462.628090][ T7710] EXT4-fs (loop6): i_reserved_data_blocks=1 [ 462.734372][ T30] audit: type=1326 audit(462.708:7961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8337 comm="syz.1.2295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f445c7e7929 code=0x7ffc0000 [ 462.795722][ T8339] loop6: detected capacity change from 0 to 1024 [ 462.816501][ T30] audit: type=1326 audit(462.778:7962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8337 comm="syz.1.2295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f445c7e7929 code=0x7ffc0000 [ 463.001119][ T8339] EXT4-fs (loop6): Ignoring removed orlov option [ 463.117072][ T8339] EXT4-fs (loop6): mounted filesystem without journal. Opts: jqfmt=vfsv1,bsddf,quota,noauto_da_alloc,debug_want_extra_isize=0x0000000000000080,discard,barrier=0x0000000000000006,stripe=0x0000000000000005,orlov,,errors=continue. Quota mode: writeback. [ 463.154978][ T8356] bridge: RTM_NEWNEIGH with invalid ether address [ 463.168713][ T8359] 9pnet: Insufficient options for proto=fd [ 463.195480][ T8361] 9pnet: Insufficient options for proto=fd [ 463.208289][ T8361] overlayfs: failed to clone upperpath [ 463.478665][ T8368] loop6: detected capacity change from 0 to 40427 [ 463.512530][ T8368] F2FS-fs (loop6): Found nat_bits in checkpoint [ 463.620895][ T8368] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 463.695726][ T8368] overlayfs: failed to resolve './file0': -2 [ 463.730835][ T3607] attempt to access beyond end of device [ 463.730835][ T3607] loop6: rw=2049, want=45112, limit=40427 [ 463.762221][ T8399] overlayfs: failed to clone upperpath [ 464.221131][ T8420] loop6: detected capacity change from 0 to 256 [ 464.300370][ T8420] FAT-fs (loop6): Unrecognized mount option "uoi_xlate=0" or missing value [ 464.792609][ T8429] loop6: detected capacity change from 0 to 2048 [ 464.844184][ T8429] EXT4-fs (loop6): Ignoring removed bh option [ 464.860523][ T8429] EXT4-fs (loop6): unsupported descriptor size 9 [ 464.860790][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 464.860989][ T30] audit: type=1400 audit(464.838:7984): avc: denied { write } for pid=8430 comm="syz.3.2321" name="/" dev="configfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 465.212432][ T30] audit: type=1400 audit(465.188:7985): avc: denied { add_name } for pid=8430 comm="syz.3.2321" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 465.232746][ T30] audit: type=1400 audit(465.188:7986): avc: denied { create } for pid=8430 comm="syz.3.2321" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=file permissive=1 [ 466.235582][ T8478] 9pnet: Insufficient options for proto=fd [ 467.919348][ T6358] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 467.937483][ T8507] overlayfs: './file1' not a directory [ 468.020644][ T8511] tipc: Enabling of bearer rejected, failed to enable media [ 468.734972][ T8522] netlink: 8 bytes leftover after parsing attributes in process `+}[@'. [ 468.808731][ T6358] usb 7-1: Using ep0 maxpacket: 16 [ 468.949907][ T6358] usb 7-1: config 0 interface 0 has no altsetting 0 [ 468.956610][ T6358] usb 7-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 468.966056][ T6358] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 468.981150][ T6358] usb 7-1: config 0 descriptor?? [ 469.444620][ T8489] loop6: detected capacity change from 0 to 2048 [ 469.511632][ T6358] hid (null): report_id 0 is invalid [ 469.518758][ T6358] hid (null): report_id 9618 is invalid [ 470.684318][ T8552] syz.3.2351[8552] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 470.684416][ T8552] syz.3.2351[8552] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 471.317025][ T8560] device ip6gretap1 entered promiscuous mode [ 471.783280][ T6367] usb 7-1: USB disconnect, device number 20 [ 471.846094][ T8585] loop6: detected capacity change from 0 to 512 [ 472.355152][ T8585] EXT4-fs (loop6): mounted filesystem without journal. Opts: grpjquota=,stripe=0x0000000000000002,,errors=continue. Quota mode: writeback. [ 472.500191][ T8811] device lo entered promiscuous mode [ 472.515028][ T8811] device tunl0 entered promiscuous mode [ 472.524547][ T8811] device gre0 entered promiscuous mode [ 472.533522][ T8811] device gretap0 entered promiscuous mode [ 472.541729][ T8811] device erspan0 entered promiscuous mode [ 472.550278][ T8811] device ip_vti0 entered promiscuous mode [ 472.557387][ T8811] device ip6_vti0 entered promiscuous mode [ 472.565113][ T8811] device sit0 entered promiscuous mode [ 472.574955][ T8811] device ip6tnl0 entered promiscuous mode [ 472.584962][ T8811] device ip6gre0 entered promiscuous mode [ 472.594668][ T8811] device syz_tun entered promiscuous mode [ 472.601893][ T8811] device ip6gretap0 entered promiscuous mode [ 472.609979][ T8811] bridge0: port 2(bridge_slave_1) entered disabled state [ 472.617145][ T8811] bridge0: port 1(bridge_slave_0) entered disabled state [ 472.625002][ T8811] device bridge0 entered promiscuous mode [ 472.632270][ T8811] device dummy0 entered promiscuous mode [ 472.639476][ T8811] device veth0 entered promiscuous mode [ 472.649373][ T8811] device veth1 entered promiscuous mode [ 472.660705][ T8811] device wg0 entered promiscuous mode [ 472.667481][ T8811] device wg1 entered promiscuous mode [ 472.682798][ T8811] device veth0_to_bridge entered promiscuous mode [ 472.705103][ T8811] device veth1_to_bridge entered promiscuous mode [ 472.751461][ T8811] device veth0_to_bond entered promiscuous mode [ 472.766368][ T8811] device bond_slave_0 entered promiscuous mode [ 472.781040][ T8811] device veth1_to_bond entered promiscuous mode [ 472.800530][ T8811] device bond_slave_1 entered promiscuous mode [ 472.807057][ T8811] device veth0_to_team entered promiscuous mode [ 472.814544][ T8811] device team_slave_0 entered promiscuous mode [ 472.821136][ T8811] device veth1_to_team entered promiscuous mode [ 472.828241][ T8811] device team_slave_1 entered promiscuous mode [ 472.837251][ T8811] device veth0_to_batadv entered promiscuous mode [ 472.852366][ T8811] device batadv_slave_0 entered promiscuous mode [ 472.862573][ T8811] device veth1_to_batadv entered promiscuous mode [ 472.871984][ T8811] device batadv_slave_1 entered promiscuous mode [ 472.881668][ T8811] device xfrm0 entered promiscuous mode [ 472.890212][ T8811] device veth0_to_hsr entered promiscuous mode [ 473.050537][ T8811] device hsr_slave_0 entered promiscuous mode [ 473.060015][ T8811] device veth1_to_hsr entered promiscuous mode [ 473.067930][ T8811] device hsr_slave_1 entered promiscuous mode [ 473.075955][ T30] audit: type=1326 audit(473.048:7987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8841 comm="syz.3.2370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f908b60a929 code=0x7ffc0000 [ 473.098932][ T8811] device veth1_virt_wifi entered promiscuous mode [ 473.100010][ T30] audit: type=1326 audit(473.048:7988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8841 comm="syz.3.2370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f908b60a929 code=0x7ffc0000 [ 473.129579][ T30] audit: type=1326 audit(473.048:7989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8841 comm="syz.3.2370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f908b60a929 code=0x7ffc0000 [ 473.153777][ T8811] device veth0_virt_wifi entered promiscuous mode [ 473.160284][ T30] audit: type=1326 audit(473.048:7990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8841 comm="syz.3.2370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f908b60a929 code=0x7ffc0000 [ 473.184277][ T8811] device veth1_vlan entered promiscuous mode [ 473.184361][ T30] audit: type=1326 audit(473.048:7991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8841 comm="syz.3.2370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f908b60a929 code=0x7ffc0000 [ 473.195064][ T8811] device vlan0 entered promiscuous mode [ 473.213779][ T30] audit: type=1326 audit(473.048:7992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8841 comm="syz.3.2370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f908b60a929 code=0x7ffc0000 [ 473.221641][ T8811] device vlan1 entered promiscuous mode [ 473.248508][ T8811] device veth0_macvtap entered promiscuous mode [ 473.250165][ T30] audit: type=1326 audit(473.048:7993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8841 comm="syz.3.2370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f908b60a929 code=0x7ffc0000 [ 473.278135][ T30] audit: type=1326 audit(473.048:7994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8841 comm="syz.3.2370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f908b60a929 code=0x7ffc0000 [ 473.301043][ T8811] device macsec0 entered promiscuous mode [ 473.301280][ T30] audit: type=1326 audit(473.048:7995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8841 comm="syz.3.2370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f908b60a929 code=0x7ffc0000 [ 473.308177][ T8811] device bridge1 entered promiscuous mode [ 473.335268][ T30] audit: type=1326 audit(473.048:7996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8841 comm="syz.3.2370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f908b60a929 code=0x7ffc0000 [ 473.335722][ T8811] device vlan4094 entered promiscuous mode [ 473.364473][ T8811] device ipip0 entered promiscuous mode [ 473.373844][ T8851] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 473.451532][ T8870] loop6: detected capacity change from 0 to 128 [ 474.011566][ T8888] loop6: detected capacity change from 0 to 40427 [ 474.095502][ T8888] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 474.109689][ T8888] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 474.119005][ T8888] F2FS-fs (loop6): invalid crc value [ 474.124729][ T8888] F2FS-fs (loop6): invalid crc value [ 474.130226][ T8888] F2FS-fs (loop6): Failed to get valid F2FS checkpoint [ 474.909013][ T8918] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2392'. [ 474.918147][ T8918] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2392'. [ 474.927277][ T8918] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2392'. [ 475.173672][ T8888] loop6: detected capacity change from 0 to 131072 [ 475.243135][ T8888] F2FS-fs (loop6): Test dummy encryption mode enabled [ 475.251208][ T8888] F2FS-fs (loop6): invalid crc value [ 475.257888][ T8888] F2FS-fs (loop6): Current segment's next free block offset is inconsistent with bitmap, logtype:2, segno:0, type:0, next_blkoff:0, blkofs:0 [ 475.272737][ T8888] F2FS-fs (loop6): Failed to initialize F2FS segment manager (-117) [ 475.820353][ T8947] overlayfs: failed to clone upperpath [ 475.828162][ T8947] device wg2 entered promiscuous mode [ 476.147520][ T8957] syz.3.2402[8957] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 476.147603][ T8957] syz.3.2402[8957] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 477.127023][ T8983] xt_CT: No such helper "pptp" [ 478.257737][ T30] kauditd_printk_skb: 65 callbacks suppressed [ 478.257752][ T30] audit: type=1326 audit(478.228:8062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9020 comm="syz.2.2419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b40152929 code=0x7ffc0000 [ 478.287567][ T30] audit: type=1326 audit(478.228:8063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9020 comm="syz.2.2419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=179 compat=0 ip=0x7f5b40152929 code=0x7ffc0000 [ 478.317360][ T9028] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23829 sclass=netlink_route_socket pid=9028 comm=syz.6.2421 [ 478.331203][ T30] audit: type=1326 audit(478.228:8064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9020 comm="syz.2.2419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b40152929 code=0x7ffc0000 [ 478.629921][ T6352] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 479.030096][ T6352] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 479.041261][ T6352] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 479.052908][ T6352] usb 7-1: config 1 has no interface number 0 [ 479.059340][ T6352] usb 7-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 479.199565][ T9054] netlink: 'syz.3.2429': attribute type 12 has an invalid length. [ 479.245445][ T30] audit: type=1326 audit(479.218:8065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9058 comm="syz.2.2431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b40152929 code=0x7ffc0000 [ 479.256887][ T6352] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 479.269395][ T9059] netlink: 'syz.2.2431': attribute type 13 has an invalid length. [ 479.286537][ T30] audit: type=1326 audit(479.248:8066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9058 comm="syz.2.2431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5b40152929 code=0x7ffc0000 [ 479.287122][ T6352] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 479.310600][ T30] audit: type=1326 audit(479.248:8067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9058 comm="syz.2.2431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b40152929 code=0x7ffc0000 [ 479.317810][ T6352] usb 7-1: Product: syz [ 479.352541][ T6352] usb 7-1: Manufacturer: syz [ 479.362635][ T6352] usb 7-1: SerialNumber: syz [ 479.364899][ T30] audit: type=1326 audit(479.248:8068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9058 comm="syz.2.2431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f5b40152929 code=0x7ffc0000 [ 479.427254][ T9059] bridge0: port 2(bridge_slave_1) entered disabled state [ 479.430547][ T6352] cdc_ncm 7-1:1.1: skipping garbage [ 479.440282][ T6352] cdc_ncm 7-1:1.1: NCM or ECM functional descriptors missing [ 479.453126][ T6352] cdc_ncm 7-1:1.1: bind() failure [ 479.496389][ T30] audit: type=1326 audit(479.468:8069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9058 comm="syz.2.2431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b40152929 code=0x7ffc0000 [ 479.519628][ T30] audit: type=1326 audit(479.468:8070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9058 comm="syz.2.2431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b40152929 code=0x7ffc0000 [ 479.644226][ T6362] usb 7-1: USB disconnect, device number 21 [ 479.774722][ T30] audit: type=1400 audit(479.748:8071): avc: denied { name_bind } for pid=9068 comm="syz.1.2433" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 480.805774][ T9109] 9pnet: Insufficient options for proto=fd [ 481.900756][ T9139] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2451'. [ 481.965521][ T9145] fuse: Bad value for 'fd' [ 482.684335][ T9166] 9pnet: Insufficient options for proto=fd [ 483.507680][ T9195] loop6: detected capacity change from 0 to 128 [ 483.580193][ T9195] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 484.097065][ T9206] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=48421 sclass=netlink_route_socket pid=9206 comm=syz.1.2471 [ 485.001787][ T9231] overlayfs: failed to clone upperpath [ 485.008194][ T9231] overlayfs: failed to clone upperpath [ 486.054006][ T9249] overlayfs: failed to clone upperpath [ 486.998650][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 486.998663][ T30] audit: type=1400 audit(486.968:8074): avc: denied { setopt } for pid=9267 comm="syz.1.2490" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 487.772878][ T9291] device wireguard0 entered promiscuous mode [ 489.079279][ T9315] overlayfs: failed to clone upperpath [ 490.601561][ T9353] overlayfs: failed to clone upperpath [ 490.666677][ T30] audit: type=1326 audit(490.638:8075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9355 comm="syz.2.2515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b40152929 code=0x7ffc0000 [ 490.667108][ T9357] netlink: 'syz.2.2515': attribute type 3 has an invalid length. [ 490.715845][ T30] audit: type=1326 audit(490.638:8076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9355 comm="syz.2.2515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b40152929 code=0x7ffc0000 [ 490.785276][ T30] audit: type=1326 audit(490.638:8077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9355 comm="syz.2.2515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=229 compat=0 ip=0x7f5b40152929 code=0x7ffc0000 [ 490.842668][ T30] audit: type=1326 audit(490.638:8078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9355 comm="syz.2.2515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b40152929 code=0x7ffc0000 [ 490.865912][ T30] audit: type=1326 audit(490.638:8079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9355 comm="syz.2.2515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b40152929 code=0x7ffc0000 [ 490.889148][ T30] audit: type=1326 audit(490.638:8080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9355 comm="syz.2.2515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f5b40152929 code=0x7ffc0000 [ 490.912230][ T30] audit: type=1326 audit(490.678:8081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9355 comm="syz.2.2515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b40152929 code=0x7ffc0000 [ 490.948401][ T30] audit: type=1326 audit(490.688:8082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9355 comm="syz.2.2515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f5b40152929 code=0x7ffc0000 [ 490.996064][ T9366] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2593 sclass=netlink_route_socket pid=9366 comm=syz.6.2517 [ 490.997310][ T30] audit: type=1326 audit(490.688:8083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9355 comm="syz.2.2515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b40152929 code=0x7ffc0000 [ 491.035639][ T9366] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2593 sclass=netlink_route_socket pid=9366 comm=syz.6.2517 [ 491.049905][ T9366] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2593 sclass=netlink_route_socket pid=9366 comm=syz.6.2517 [ 491.063434][ T9366] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2593 sclass=netlink_route_socket pid=9366 comm=syz.6.2517 [ 491.076612][ T9366] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2593 sclass=netlink_route_socket pid=9366 comm=syz.6.2517 [ 491.089447][ T9366] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2593 sclass=netlink_route_socket pid=9366 comm=syz.6.2517 [ 491.126093][ T9366] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2593 sclass=netlink_route_socket pid=9366 comm=syz.6.2517 [ 491.163317][ T9368] loop6: detected capacity change from 0 to 128 [ 491.181853][ T9366] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2593 sclass=netlink_route_socket pid=9366 comm=syz.6.2517 [ 491.212764][ T9366] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2593 sclass=netlink_route_socket pid=9366 comm=syz.6.2517 [ 491.237736][ T9366] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2593 sclass=netlink_route_socket pid=9366 comm=syz.6.2517 [ 493.083303][ T9396] overlayfs: failed to clone upperpath [ 493.712296][ T6362] usb 7-1: new full-speed USB device number 22 using dummy_hcd [ 494.339978][ T6362] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 494.361266][ T6362] usb 7-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 494.384309][ T6362] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 494.406309][ T6362] usb 7-1: config 0 descriptor?? [ 494.429894][ T9394] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 494.716286][ T6362] hid-generic 0003:04F3:0755.000B: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.6-1/input0 [ 495.088735][ T6362] usb 7-1: USB disconnect, device number 22 [ 497.384713][ T9489] loop6: detected capacity change from 0 to 256 [ 497.421168][ T9489] exfat: Deprecated parameter 'utf8' [ 497.426605][ T9489] exfat: Deprecated parameter 'utf8' [ 497.470384][ T9489] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x18acca35, utbl_chksum : 0xe619d30d) [ 497.571336][ T9489] netlink: 96 bytes leftover after parsing attributes in process `syz.6.2551'. [ 499.316368][ T9516] sch_fq: defrate 0 ignored. [ 501.779905][ T6358] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 502.059802][ T6358] usb 7-1: device descriptor read/64, error -71 [ 503.354659][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 503.354673][ T30] audit: type=1400 audit(503.328:8085): avc: denied { watch } for pid=9587 comm="syz.4.2579" path="/" dev="ramfs" ino=40273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 503.384047][ T30] audit: type=1400 audit(503.358:8086): avc: denied { execute } for pid=9587 comm="syz.4.2579" name="file1" dev="ramfs" ino=40274 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 503.405714][ T30] audit: type=1400 audit(503.358:8087): avc: denied { execute_no_trans } for pid=9587 comm="syz.4.2579" path="/file1" dev="ramfs" ino=40274 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 503.419863][ T6358] usb 7-1: device descriptor read/64, error -71 [ 503.699814][ T6358] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 504.109854][ T6358] usb 7-1: device descriptor read/64, error -71 [ 505.195899][ T9627] overlayfs: failed to clone upperpath [ 505.747729][ T30] audit: type=1326 audit(505.718:8088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9636 comm="syz.1.2594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f445c7e7929 code=0x7ffc0000 [ 505.748515][ T9637] loop6: detected capacity change from 0 to 256 [ 505.777798][ T30] audit: type=1326 audit(505.718:8089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9636 comm="syz.1.2594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f445c7e7929 code=0x7ffc0000 [ 505.802201][ T30] audit: type=1326 audit(505.748:8090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9636 comm="syz.1.2594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f445c7e7929 code=0x7ffc0000 [ 505.825357][ T30] audit: type=1326 audit(505.748:8091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9636 comm="syz.1.2594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f445c7e7929 code=0x7ffc0000 [ 505.859513][ T30] audit: type=1326 audit(505.748:8092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9636 comm="syz.1.2594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f445c7e7929 code=0x7ffc0000 [ 505.889117][ T30] audit: type=1326 audit(505.748:8093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9636 comm="syz.1.2594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f445c7e7929 code=0x7ffc0000 [ 505.912506][ T30] audit: type=1326 audit(505.748:8094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9636 comm="syz.1.2594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f445c7e7929 code=0x7ffc0000 [ 506.796300][ T9664] overlayfs: failed to clone upperpath [ 507.166468][ T9676] fuse: Unknown parameter '`y ¥¶'dýÃÏ虤J kM³ó…ÒÜ1>¼R&yçD–¡‡Ö©’£'šƒe>¯#Ð' [ 508.662775][ T30] kauditd_printk_skb: 31 callbacks suppressed [ 508.662796][ T30] audit: type=1400 audit(508.638:8126): avc: denied { mount } for pid=9725 comm="syz.6.2622" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 509.429480][ T30] audit: type=1400 audit(509.398:8127): avc: denied { unmount } for pid=3607 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 510.989653][ T9742] loop6: detected capacity change from 0 to 40427 [ 511.060007][ T30] audit: type=1400 audit(509.608:8128): avc: denied { compute_member } for pid=9737 comm="syz.6.2625" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 511.139938][ T9742] F2FS-fs (loop6): Unrecognized mount option "" or missing value [ 511.260487][ T9739] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2625'. [ 511.269355][ T9739] tc_dump_action: action bad kind [ 512.286322][ T9771] overlayfs: failed to clone upperpath [ 514.289465][ T9813] overlayfs: failed to clone upperpath [ 514.402602][ T9820] fuse: Bad value for 'user_id' [ 515.891844][ T9855] loop6: detected capacity change from 0 to 128 [ 515.920198][ T9855] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 516.455028][ T30] audit: type=1400 audit(516.428:8129): avc: denied { append } for pid=9876 comm="syz.4.2667" name="file0" dev="tmpfs" ino=2935 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 517.516314][ T30] audit: type=1400 audit(517.488:8130): avc: denied { map } for pid=9890 comm="syz.4.2671" path="socket:[41060]" dev="sockfs" ino=41060 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 517.554440][ T30] audit: type=1400 audit(517.518:8131): avc: denied { accept } for pid=9890 comm="syz.4.2671" path="socket:[41060]" dev="sockfs" ino=41060 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 517.658778][ T9898] loop6: detected capacity change from 0 to 128 [ 517.680061][ T9901] syz.4.2676[9901] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 517.680125][ T9901] syz.4.2676[9901] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 517.722510][ T9901] syz.4.2676[9901] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 517.735116][ T9901] syz.4.2676[9901] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 517.818898][ T9898] EXT4-fs (loop6): mounted filesystem without journal. Opts: usrquota,acl,,errors=continue. Quota mode: writeback. [ 517.852420][ T9901] syz.4.2676[9901] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 517.853268][ T9901] syz.4.2676[9901] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 517.939823][ T6367] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 518.140880][ T9911] overlayfs: failed to clone upperpath [ 518.189836][ T6367] usb 7-1: Using ep0 maxpacket: 16 [ 518.309932][ T6367] usb 7-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 518.320985][ T6367] usb 7-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 518.330852][ T6367] usb 7-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 518.343908][ T6367] usb 7-1: config 0 interface 0 has no altsetting 0 [ 518.350557][ T6367] usb 7-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 518.359702][ T6367] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 518.388189][ T6367] usb 7-1: config 0 descriptor?? [ 518.734762][ T6367] hid (null): global environment stack underflow [ 518.742209][ T6367] hid (null): invalid report_count 107748025 [ 518.931042][ T30] audit: type=1400 audit(518.908:8132): avc: denied { setattr } for pid=9897 comm="syz.6.2675" path="/252/file1/file1" dev="loop6" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 518.954371][ T6366] usb 7-1: USB disconnect, device number 25 [ 519.025693][ T30] audit: type=1326 audit(518.998:8133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9931 comm="syz.3.2685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f908b60a929 code=0x7ffc0000 [ 519.061763][ T30] audit: type=1326 audit(519.028:8134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9931 comm="syz.3.2685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f908b60a929 code=0x7ffc0000 [ 519.099889][ T30] audit: type=1326 audit(519.028:8135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9931 comm="syz.3.2685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f908b60a929 code=0x7ffc0000 [ 519.123088][ T30] audit: type=1326 audit(519.028:8136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9931 comm="syz.3.2685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f908b60a929 code=0x7ffc0000 [ 519.146247][ T30] audit: type=1326 audit(519.028:8137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9931 comm="syz.3.2685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f908b60a929 code=0x7ffc0000 [ 519.169368][ T30] audit: type=1326 audit(519.028:8138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9931 comm="syz.3.2685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f908b60a929 code=0x7ffc0000 [ 520.118040][ T9965] bridge0: port 1(bridge_slave_0) entered blocking state [ 520.131378][ T9965] bridge0: port 1(bridge_slave_0) entered disabled state [ 520.199699][ T9965] device bridge_slave_0 entered promiscuous mode [ 520.214105][ T9965] bridge0: port 2(bridge_slave_1) entered blocking state [ 520.221544][ T9965] bridge0: port 2(bridge_slave_1) entered disabled state [ 520.229037][ T9965] device bridge_slave_1 entered promiscuous mode [ 520.281298][ T9965] bridge0: port 2(bridge_slave_1) entered blocking state [ 520.288345][ T9965] bridge0: port 2(bridge_slave_1) entered forwarding state [ 520.295674][ T9965] bridge0: port 1(bridge_slave_0) entered blocking state [ 520.302722][ T9965] bridge0: port 1(bridge_slave_0) entered forwarding state [ 520.322992][ T8782] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 520.330601][ T8782] bridge0: port 1(bridge_slave_0) entered disabled state [ 520.337795][ T8782] bridge0: port 2(bridge_slave_1) entered disabled state [ 520.347936][ T8782] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 520.356396][ T8782] bridge0: port 1(bridge_slave_0) entered blocking state [ 520.363441][ T8782] bridge0: port 1(bridge_slave_0) entered forwarding state [ 520.372514][ T8782] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 520.380877][ T8782] bridge0: port 2(bridge_slave_1) entered blocking state [ 520.387912][ T8782] bridge0: port 2(bridge_slave_1) entered forwarding state [ 520.402956][ T8782] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 520.419340][ T8782] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 520.431621][ T9975] loop6: detected capacity change from 0 to 256 [ 520.436406][ T8782] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 520.446426][ T8782] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 520.455376][ T8782] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 520.462955][ T8782] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 520.513515][ T9965] device veth0_vlan entered promiscuous mode [ 520.528798][ T8676] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 520.538349][ T9965] device veth1_macvtap entered promiscuous mode [ 520.627054][ T8676] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 520.699979][ T8676] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 522.172063][ T30] kauditd_printk_skb: 32 callbacks suppressed [ 522.172077][ T30] audit: type=1326 audit(522.148:8171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10004 comm="syz.6.2705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5362a3a929 code=0x7ffc0000 [ 522.201825][ T30] audit: type=1326 audit(522.148:8172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10004 comm="syz.6.2705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5362a3a929 code=0x7ffc0000 [ 522.226035][ T30] audit: type=1326 audit(522.148:8173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10004 comm="syz.6.2705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=318 compat=0 ip=0x7f5362a3a929 code=0x7ffc0000 [ 522.248986][ T30] audit: type=1326 audit(522.148:8174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10004 comm="syz.6.2705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5362a3a929 code=0x7ffc0000 [ 522.271968][ T30] audit: type=1326 audit(522.148:8175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10004 comm="syz.6.2705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5362a3a929 code=0x7ffc0000 [ 522.294954][ T30] audit: type=1326 audit(522.148:8176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10004 comm="syz.6.2705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5362a3a929 code=0x7ffc0000 [ 522.318242][ T30] audit: type=1326 audit(522.148:8177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10004 comm="syz.6.2705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5362a3a929 code=0x7ffc0000 [ 522.341260][ T30] audit: type=1326 audit(522.148:8178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10004 comm="syz.6.2705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5362a3a929 code=0x7ffc0000 [ 522.364316][ T30] audit: type=1326 audit(522.148:8179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10004 comm="syz.6.2705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5362a3a929 code=0x7ffc0000 [ 522.388058][ T30] audit: type=1326 audit(522.148:8180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10004 comm="syz.6.2705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5362a3a929 code=0x7ffc0000 [ 522.687175][T10012] xt_hashlimit: max too large, truncated to 1048576 [ 523.939833][ T6349] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 524.139385][T10056] 9pnet: Insufficient options for proto=fd [ 524.146629][T10056] overlayfs: failed to clone upperpath [ 524.499888][ T6349] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 524.510118][ T6349] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 524.589922][ T6349] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 524.599061][ T6349] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 524.607062][ T6349] usb 4-1: SerialNumber: syz [ 524.900742][ T6349] usb 4-1: 0:2 : does not exist [ 524.917214][ T6349] usb 4-1: USB disconnect, device number 3 [ 525.939727][T10095] 9pnet: Insufficient options for proto=fd [ 526.391835][T10110] loop6: detected capacity change from 0 to 128 [ 526.401197][T10110] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 528.429911][ T6352] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 528.799909][ T6352] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 528.969886][ T6352] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 528.979421][ T6352] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 528.987848][ T6352] usb 4-1: Product: syz [ 528.993119][ T6352] usb 4-1: Manufacturer: syz [ 528.997837][ T6352] usb 4-1: SerialNumber: syz [ 529.038764][ T6352] usb 4-1: config 0 descriptor?? [ 529.080468][ T6352] snd-usb-audio: probe of 4-1:0.0 failed with error -22 [ 529.305224][ T6349] usb 4-1: USB disconnect, device number 4 [ 529.333997][T10187] loop6: detected capacity change from 0 to 128 [ 529.412913][T10187] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 529.433044][T10187] FAULT_INJECTION: forcing a failure. [ 529.433044][T10187] name fail_futex, interval 1, probability 0, space 0, times 1 [ 529.445929][T10187] CPU: 1 PID: 10187 Comm: syz.6.2759 Tainted: G W 5.15.185-syzkaller-00032-g0d918fa8e88d #0 [ 529.457295][T10187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 529.467328][T10187] Call Trace: [ 529.470584][T10187] [ 529.473490][T10187] __dump_stack+0x21/0x30 [ 529.477796][T10187] dump_stack_lvl+0xee/0x150 [ 529.482362][T10187] ? show_regs_print_info+0x20/0x20 [ 529.487533][T10187] ? get_user_pages_fast_only+0x50/0x50 [ 529.493053][T10187] dump_stack+0x15/0x20 [ 529.497196][T10187] should_fail+0x3c1/0x510 [ 529.501605][T10187] get_futex_key+0x6e8/0xb50 [ 529.506193][T10187] ? futex_wait_restart+0x210/0x210 [ 529.511389][T10187] ? __kasan_check_write+0x14/0x20 [ 529.516498][T10187] ? get_futex_key+0x918/0xb50 [ 529.521256][T10187] futex_wait_setup+0x52/0x510 [ 529.526016][T10187] ? futex_wait_restart+0x210/0x210 [ 529.531209][T10187] ? memset+0x35/0x40 [ 529.535188][T10187] ? hrtimer_init_sleeper+0x10c/0x370 [ 529.540554][T10187] do_futex+0x1ab2/0x2620 [ 529.544878][T10187] ? _raw_spin_lock+0xe0/0xe0 [ 529.549556][T10187] ? slab_free_freelist_hook+0xc2/0x190 [ 529.555122][T10187] ? putname+0x111/0x160 [ 529.559355][T10187] ? do_sys_openat2+0x6a7/0x7b0 [ 529.564184][T10187] ? x64_sys_call+0x219/0x9a0 [ 529.568836][T10187] ? _kstrtoull+0x3c0/0x4d0 [ 529.573329][T10187] ? futex_exit_release+0x1d0/0x1d0 [ 529.578520][T10187] ? kstrtouint_from_user+0x1a0/0x200 [ 529.583868][T10187] ? __remove_hrtimer+0x3e0/0x3e0 [ 529.588868][T10187] ? __kasan_check_write+0x14/0x20 [ 529.593958][T10187] ? proc_fail_nth_write+0x17a/0x1f0 [ 529.599218][T10187] ? security_file_permission+0x79/0xa0 [ 529.604740][T10187] ? __kasan_check_write+0x14/0x20 [ 529.609830][T10187] ? _copy_from_user+0x95/0xd0 [ 529.614594][T10187] ? get_timespec64+0x10e/0x1a0 [ 529.619437][T10187] ? timespec64_add_safe+0x1d0/0x1d0 [ 529.624715][T10187] ? mutex_unlock+0x89/0x220 [ 529.629299][T10187] __se_sys_futex+0x139/0x310 [ 529.633970][T10187] ? __kasan_check_write+0x14/0x20 [ 529.639076][T10187] ? __x64_sys_futex+0x100/0x100 [ 529.644005][T10187] ? ksys_write+0x1eb/0x240 [ 529.648501][T10187] ? __ia32_sys_read+0x90/0x90 [ 529.653257][T10187] __x64_sys_futex+0xe5/0x100 [ 529.657933][T10187] x64_sys_call+0x251/0x9a0 [ 529.662433][T10187] do_syscall_64+0x4c/0xa0 [ 529.666842][T10187] ? clear_bhb_loop+0x50/0xa0 [ 529.671516][T10187] ? clear_bhb_loop+0x50/0xa0 [ 529.676185][T10187] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 529.682072][T10187] RIP: 0033:0x7f5362a3a929 [ 529.686478][T10187] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 529.706078][T10187] RSP: 002b:00007f53610a3038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 529.714532][T10187] RAX: ffffffffffffffda RBX: 00007f5362c61fa0 RCX: 00007f5362a3a929 [ 529.722718][T10187] RDX: 0000000000000004 RSI: 000080000000000b RDI: 000020000000cffc [ 529.730692][T10187] RBP: 00007f53610a3090 R08: 0000200000048000 R09: 0000000000000000 [ 529.738661][T10187] R10: 000020000000b000 R11: 0000000000000246 R12: 0000000000000001 [ 529.746644][T10187] R13: 0000000000000000 R14: 00007f5362c61fa0 R15: 00007fff5f616d58 [ 529.754618][T10187] [ 530.645494][T10203] overlayfs: statfs failed on './file0' [ 531.120472][ T30] kauditd_printk_skb: 45 callbacks suppressed [ 531.120486][ T30] audit: type=1326 audit(531.098:8226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10216 comm="syz.1.2769" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f445c7e7929 code=0x0 [ 531.981156][T10242] loop6: detected capacity change from 0 to 128 [ 532.201063][T10242] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 532.320579][T10248] overlayfs: failed to clone upperpath [ 533.369981][T10285] fuse: Bad value for 'fd' [ 533.642714][T10292] overlayfs: statfs failed on './file0' [ 534.097223][ T30] audit: type=1326 audit(534.058:8227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10313 comm="syz.1.2794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f445c7e7929 code=0x7ffc0000 [ 534.133142][ T30] audit: type=1326 audit(534.058:8228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10313 comm="syz.1.2794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f445c7e7929 code=0x7ffc0000 [ 534.156270][ T30] audit: type=1326 audit(534.058:8229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10313 comm="syz.1.2794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f445c7e7929 code=0x7ffc0000 [ 534.180381][ T30] audit: type=1326 audit(534.058:8230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10313 comm="syz.1.2794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f445c7e7929 code=0x7ffc0000 [ 534.203672][ T30] audit: type=1326 audit(534.058:8231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10313 comm="syz.1.2794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f445c7e7929 code=0x7ffc0000 [ 534.227124][ T30] audit: type=1326 audit(534.058:8232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10313 comm="syz.1.2794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f445c7e7929 code=0x7ffc0000 [ 534.250309][ T30] audit: type=1326 audit(534.058:8233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10313 comm="syz.1.2794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f445c7e7929 code=0x7ffc0000 [ 534.273917][ T30] audit: type=1326 audit(534.058:8234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10313 comm="syz.1.2794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f445c7e7929 code=0x7ffc0000 [ 534.297118][ T30] audit: type=1326 audit(534.068:8235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10313 comm="syz.1.2794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f445c7e7929 code=0x7ffc0000 [ 536.223857][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 536.223875][ T30] audit: type=1400 audit(535.808:8244): avc: denied { lock } for pid=10327 comm="syz.3.2798" path="socket:[42353]" dev="sockfs" ino=42353 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 536.256064][T10328] devtmpfs: Unknown parameter 'inode32:öÇÖoží´ver' [ 536.321289][T10335] overlayfs: failed to clone upperpath [ 536.334397][ T30] audit: type=1400 audit(535.818:8245): avc: denied { remount } for pid=10327 comm="syz.3.2798" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 536.395977][T10337] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2801'. [ 536.419900][ T30] audit: type=1400 audit(536.268:8246): avc: denied { unmount } for pid=9965 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 536.492638][T10344] loop3: detected capacity change from 0 to 256 [ 537.398630][T10358] loop3: detected capacity change from 0 to 512 [ 537.521876][T10358] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,nodelalloc,quota,. Quota mode: writeback. [ 539.790798][T10390] device bridge_slave_1 left promiscuous mode [ 539.810506][T10390] bridge0: port 2(bridge_slave_1) entered disabled state [ 539.825532][T10390] device bridge_slave_0 left promiscuous mode [ 539.838312][T10390] bridge0: port 1(bridge_slave_0) entered disabled state [ 539.845666][ T30] audit: type=1400 audit(539.788:8247): avc: denied { write } for pid=10388 comm="syz.2.2817" name="file0" dev="tmpfs" ino=3077 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 541.016545][T10405] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 541.114543][T10417] loop3: detected capacity change from 0 to 512 [ 541.202652][T10417] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,nodelalloc,quota,. Quota mode: writeback. [ 541.689827][ T6363] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 541.950241][T10427] bridge0: port 1(bridge_slave_0) entered blocking state [ 541.957341][T10427] bridge0: port 1(bridge_slave_0) entered disabled state [ 541.965199][T10427] device bridge_slave_0 entered promiscuous mode [ 541.976233][T10427] bridge0: port 2(bridge_slave_1) entered blocking state [ 541.983441][T10427] bridge0: port 2(bridge_slave_1) entered disabled state [ 541.991357][T10427] device bridge_slave_1 entered promiscuous mode [ 542.049876][ T6363] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 542.065720][ T6363] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 542.075297][T10437] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 542.104968][T10440] loop3: detected capacity change from 0 to 256 [ 542.132435][T10427] bridge0: port 2(bridge_slave_1) entered blocking state [ 542.139498][T10427] bridge0: port 2(bridge_slave_1) entered forwarding state [ 542.146803][T10427] bridge0: port 1(bridge_slave_0) entered blocking state [ 542.153841][T10427] bridge0: port 1(bridge_slave_0) entered forwarding state [ 542.212659][ T6363] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 542.221980][ T6363] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 542.230261][ T6363] usb 7-1: SerialNumber: syz [ 542.247711][ T8676] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 542.255989][ T8676] bridge0: port 1(bridge_slave_0) entered disabled state [ 542.264024][ T8676] bridge0: port 2(bridge_slave_1) entered disabled state [ 542.377934][ T8676] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 542.405926][ T8676] bridge0: port 1(bridge_slave_0) entered blocking state [ 542.413022][ T8676] bridge0: port 1(bridge_slave_0) entered forwarding state [ 542.468117][ T8676] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 542.476989][ T8676] bridge0: port 2(bridge_slave_1) entered blocking state [ 542.484061][ T8676] bridge0: port 2(bridge_slave_1) entered forwarding state [ 542.501486][ T8676] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 542.521959][ T8676] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 542.530635][ T6363] usb 7-1: 0:2 : does not exist [ 542.546453][ T6363] usb 7-1: USB disconnect, device number 26 [ 542.554134][ T8676] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 542.567699][ T8676] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 542.575738][ T8676] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 542.583271][ T8676] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 542.591512][T10427] device veth0_vlan entered promiscuous mode [ 542.601952][ T8676] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 542.612247][T10427] device veth1_macvtap entered promiscuous mode [ 542.622694][ T8676] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 542.633891][ T8676] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 542.790482][ T9610] udevd[9610]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 542.916911][T10449] overlayfs: failed to clone upperpath [ 542.993697][T10451] overlayfs: failed to clone upperpath [ 543.227896][T10457] overlayfs: statfs failed on './file0' [ 543.311283][T10461] loop6: detected capacity change from 0 to 128 [ 543.380477][T10461] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 544.071659][ T30] audit: type=1326 audit(544.048:8248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10478 comm="syz.3.2842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1806657929 code=0x7ffc0000 [ 544.095504][ T30] audit: type=1326 audit(544.048:8249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10478 comm="syz.3.2842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1806657929 code=0x7ffc0000 [ 544.119521][ T30] audit: type=1326 audit(544.048:8250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10478 comm="syz.3.2842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7f1806657929 code=0x7ffc0000 [ 544.143328][ T30] audit: type=1326 audit(544.068:8251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10478 comm="syz.3.2842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1806657929 code=0x7ffc0000 [ 544.175491][ T30] audit: type=1326 audit(544.078:8252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10478 comm="syz.3.2842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1806657929 code=0x7ffc0000 [ 544.198633][ T30] audit: type=1400 audit(544.078:8253): avc: denied { prog_load } for pid=10478 comm="syz.3.2842" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 544.272003][ T30] audit: type=1400 audit(544.078:8254): avc: denied { bpf } for pid=10478 comm="syz.3.2842" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 544.294284][ T30] audit: type=1400 audit(544.078:8255): avc: denied { perfmon } for pid=10478 comm="syz.3.2842" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 544.318094][ T30] audit: type=1326 audit(544.078:8256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10478 comm="syz.3.2842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1806657929 code=0x7ffc0000 [ 544.343164][ T30] audit: type=1326 audit(544.078:8257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10478 comm="syz.3.2842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1806657929 code=0x7ffc0000 [ 544.403127][T10486] loop6: detected capacity change from 0 to 256 [ 545.018177][T10495] overlayfs: failed to clone upperpath [ 545.109829][ T6363] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 545.509880][ T6363] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 545.520044][ T6363] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 545.599884][ T6363] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 545.609062][ T6363] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 545.617398][ T6363] usb 2-1: SerialNumber: syz [ 545.655648][T10516] fuse: Bad value for 'fd' [ 545.900558][ T6363] usb 2-1: 0:2 : does not exist [ 545.906899][ T6363] usb 2-1: USB disconnect, device number 12 [ 546.152175][ T9610] udevd[9610]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 547.003568][T10555] fuse: Bad value for 'fd' [ 547.031290][T10557] cgroup: Unknown subsys name 'nofavordynmods' [ 547.037961][T10557] incfs: Options parsing error. -22 [ 547.046158][T10557] incfs: mount failed -22 [ 548.766919][T10586] loop3: detected capacity change from 0 to 512 [ 548.790872][T10586] EXT4-fs (loop3): Test dummy encryption mode enabled [ 548.800289][T10586] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.2874: invalid indirect mapped block 4294967295 (level 1) [ 548.814653][T10586] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.2874: invalid indirect mapped block 4294967295 (level 1) [ 548.829034][T10586] EXT4-fs (loop3): 2 truncates cleaned up [ 548.834942][T10586] EXT4-fs (loop3): mounted filesystem without journal. Opts: noauto_da_alloc,init_itable=0x0000000000004004,test_dummy_encryption=v1,,errors=continue. Quota mode: writeback. [ 548.918015][T10591] loop3: detected capacity change from 0 to 128 [ 548.933850][T10591] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 549.007035][T10591] FAULT_INJECTION: forcing a failure. [ 549.007035][T10591] name fail_futex, interval 1, probability 0, space 0, times 0 [ 549.032510][T10596] loop1: detected capacity change from 0 to 512 [ 549.045555][T10591] CPU: 0 PID: 10591 Comm: syz.3.2875 Tainted: G W 5.15.185-syzkaller-00032-g0d918fa8e88d #0 [ 549.056957][T10591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 549.067007][T10591] Call Trace: [ 549.070273][T10591] [ 549.073195][T10591] __dump_stack+0x21/0x30 [ 549.077518][T10591] dump_stack_lvl+0xee/0x150 [ 549.082102][T10591] ? show_regs_print_info+0x20/0x20 [ 549.087299][T10591] ? release_firmware_map_entry+0x190/0x190 [ 549.093205][T10591] dump_stack+0x15/0x20 [ 549.097364][T10591] should_fail+0x3c1/0x510 [ 549.101782][T10591] get_futex_key+0x13d/0xb50 [ 549.106373][T10591] ? lapic_next_event+0x5f/0x70 [ 549.111226][T10591] ? futex_wait_restart+0x210/0x210 [ 549.116425][T10591] ? memset+0x35/0x40 [ 549.120400][T10591] ? hrtimer_init_sleeper+0x10c/0x370 [ 549.125768][T10591] do_futex+0x1a23/0x2620 [ 549.130093][T10591] ? _raw_spin_lock_irq+0x8f/0xe0 [ 549.135116][T10591] ? _raw_spin_lock_irqsave+0x110/0x110 [ 549.140664][T10591] ? futex_exit_release+0x1d0/0x1d0 [ 549.145862][T10591] ? __local_bh_enable_ip+0x58/0x80 [ 549.151059][T10591] ? local_bh_enable+0x1f/0x30 [ 549.155803][T10591] ? __remove_hrtimer+0x3e0/0x3e0 [ 549.160804][T10591] ? restore_altstack+0x221/0x360 [ 549.165805][T10591] ? __ia32_sys_sigaltstack+0x70/0x70 [ 549.171155][T10591] ? __kasan_check_write+0x14/0x20 [ 549.176243][T10591] ? _copy_from_user+0x95/0xd0 [ 549.180981][T10591] ? get_timespec64+0x10e/0x1a0 [ 549.185808][T10591] ? timespec64_add_safe+0x1d0/0x1d0 [ 549.191072][T10591] __se_sys_futex+0x139/0x310 [ 549.195734][T10591] ? __x64_sys_futex+0x100/0x100 [ 549.200652][T10591] ? __ia32_sys_read+0x90/0x90 [ 549.205397][T10591] __x64_sys_futex+0xe5/0x100 [ 549.210053][T10591] x64_sys_call+0x251/0x9a0 [ 549.214537][T10591] do_syscall_64+0x4c/0xa0 [ 549.218929][T10591] ? clear_bhb_loop+0x50/0xa0 [ 549.223584][T10591] ? clear_bhb_loop+0x50/0xa0 [ 549.228244][T10591] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 549.234120][T10591] RIP: 0033:0x7f1806657929 [ 549.238516][T10591] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 549.258102][T10591] RSP: 002b:00007f1804cc0038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 549.266505][T10591] RAX: ffffffffffffffda RBX: 00007f180687efa0 RCX: 00007f1806657929 [ 549.274460][T10591] RDX: 0000000000000004 RSI: 000080000000000b RDI: 000020000000cffc [ 549.282420][T10591] RBP: 00007f1804cc0090 R08: 0000200000048000 R09: 0000000000000000 [ 549.290372][T10591] R10: 000020000000b000 R11: 0000000000000246 R12: 0000000000000002 [ 549.298412][T10591] R13: 0000000000000000 R14: 00007f180687efa0 R15: 00007ffd126f2138 [ 549.306378][T10591] [ 549.605036][T10612] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2881'. [ 549.614280][ T30] kauditd_printk_skb: 47 callbacks suppressed [ 549.614296][ T30] audit: type=1400 audit(549.568:8305): avc: denied { create } for pid=10611 comm="syz.4.2881" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 549.643570][T10596] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,nodelalloc,quota,. Quota mode: writeback. [ 549.656300][T10612] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2881'. [ 549.665249][T10612] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2881'. [ 549.675477][ T30] audit: type=1400 audit(549.578:8306): avc: denied { write } for pid=10611 comm="syz.4.2881" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 549.704005][ T30] audit: type=1400 audit(549.678:8307): avc: denied { mount } for pid=10592 comm="syz.6.2876" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 549.728695][ T30] audit: type=1400 audit(549.698:8308): avc: denied { validate_trans } for pid=10595 comm="syz.1.2877" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 549.845494][T10616] overlayfs: failed to clone upperpath [ 549.894747][ T30] audit: type=1400 audit(549.868:8309): avc: denied { unmount } for pid=3607 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 550.260806][T10628] overlayfs: failed to clone upperpath [ 550.536551][ T30] audit: type=1400 audit(550.478:8310): avc: denied { create } for pid=10633 comm="syz.2.2887" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 550.686713][ T30] audit: type=1400 audit(550.498:8311): avc: denied { ioctl } for pid=10633 comm="syz.2.2887" path="socket:[42989]" dev="sockfs" ino=42989 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 550.809655][ T30] audit: type=1400 audit(550.778:8312): avc: denied { mounton } for pid=10652 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 550.861162][T10652] bridge0: port 1(bridge_slave_0) entered blocking state [ 550.868199][T10652] bridge0: port 1(bridge_slave_0) entered disabled state [ 550.875698][T10652] device bridge_slave_0 entered promiscuous mode [ 550.883645][T10652] bridge0: port 2(bridge_slave_1) entered blocking state [ 550.890876][T10652] bridge0: port 2(bridge_slave_1) entered disabled state [ 550.900553][T10652] device bridge_slave_1 entered promiscuous mode [ 550.912994][ T8795] tipc: Left network mode [ 550.981622][T10652] bridge0: port 2(bridge_slave_1) entered blocking state [ 550.988675][T10652] bridge0: port 2(bridge_slave_1) entered forwarding state [ 550.995993][T10652] bridge0: port 1(bridge_slave_0) entered blocking state [ 551.003037][T10652] bridge0: port 1(bridge_slave_0) entered forwarding state [ 551.023067][ T8782] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 551.030459][ T6365] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 551.038122][ T8782] bridge0: port 1(bridge_slave_0) entered disabled state [ 551.045805][ T8782] bridge0: port 2(bridge_slave_1) entered disabled state [ 551.056623][ T8782] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 551.066139][ T8782] bridge0: port 1(bridge_slave_0) entered blocking state [ 551.073232][ T8782] bridge0: port 1(bridge_slave_0) entered forwarding state [ 551.114225][ T8782] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 551.211130][ T8782] bridge0: port 2(bridge_slave_1) entered blocking state [ 551.218200][ T8782] bridge0: port 2(bridge_slave_1) entered forwarding state [ 551.255671][ T8782] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 551.264208][ T8782] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 551.277632][ T8782] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 551.290672][ T8782] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 551.298682][ T8782] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 551.306364][ T8782] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 551.316226][T10652] device veth0_vlan entered promiscuous mode [ 551.326666][ T8782] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 551.335938][T10652] device veth1_macvtap entered promiscuous mode [ 551.347870][ T8782] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 551.357856][ T8782] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 551.373059][ T30] audit: type=1400 audit(551.348:8313): avc: denied { mounton } for pid=10652 comm="syz-executor" path="/root/syzkaller.bDDO4S/syz-tmp" dev="sda1" ino=2055 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 551.397617][ T30] audit: type=1400 audit(551.348:8314): avc: denied { mount } for pid=10652 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 551.479934][ T6365] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 551.490190][ T6365] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 551.594248][ T6365] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 551.603314][ T6365] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 551.611366][ T6365] usb 4-1: SerialNumber: syz [ 551.631303][ T8795] device dummy0 left promiscuous mode [ 551.636728][ T8795] device veth1_macvtap left promiscuous mode [ 551.642775][ T8795] device veth0_vlan left promiscuous mode [ 551.810662][T10670] loop6: detected capacity change from 0 to 256 [ 551.910533][ T6365] usb 4-1: 0:2 : does not exist [ 551.915471][ T6365] usb 4-1: unit 5 not found! [ 551.922045][ T6365] usb 4-1: USB disconnect, device number 5 [ 552.130398][ T9610] udevd[9610]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 552.295753][T10674] overlayfs: statfs failed on './file0' [ 553.005506][T10690] loop4: detected capacity change from 0 to 128 [ 553.090965][T10690] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 554.179961][ T6365] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 554.231002][T10712] overlayfs: statfs failed on './file0' [ 554.472283][ T6365] usb 4-1: Using ep0 maxpacket: 8 [ 554.589914][ T6365] usb 4-1: config 0 has an invalid interface number: 31 but max is 0 [ 554.598056][ T6365] usb 4-1: config 0 has no interface number 0 [ 554.759934][ T6365] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 554.770055][ T6365] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 554.779455][ T6365] usb 4-1: Product: syz [ 554.783779][ T6365] usb 4-1: Manufacturer: syz [ 554.788504][ T6365] usb 4-1: SerialNumber: syz [ 554.800597][ T6365] usb 4-1: config 0 descriptor?? [ 554.802069][T10721] xt_bpf: check failed: parse error [ 554.812589][T10719] loop6: detected capacity change from 0 to 256 [ 555.801167][T10734] futex_wake_op: syz.6.2914 tries to shift op by -1; fix this program [ 555.821395][ T30] kauditd_printk_skb: 48 callbacks suppressed [ 555.821407][ T30] audit: type=1400 audit(555.798:8363): avc: denied { read } for pid=10730 comm="syz.6.2914" name="kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 555.849993][ T30] audit: type=1400 audit(555.798:8364): avc: denied { open } for pid=10730 comm="syz.6.2914" path="/dev/kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 555.999287][ T30] audit: type=1400 audit(555.968:8365): avc: denied { read write } for pid=10735 comm="syz.4.2916" name="uinput" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 556.039835][ T30] audit: type=1400 audit(555.968:8366): avc: denied { open } for pid=10735 comm="syz.4.2916" path="/dev/uinput" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 556.145605][ T30] audit: type=1400 audit(556.118:8367): avc: denied { ioctl } for pid=10735 comm="syz.4.2916" path="/dev/uinput" dev="devtmpfs" ino=258 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 556.145980][T10737] input: syz0 as /devices/virtual/input/input12 [ 556.178307][ T30] audit: type=1400 audit(556.148:8368): avc: denied { read } for pid=86 comm="acpid" name="event3" dev="devtmpfs" ino=1185 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 556.201005][ T30] audit: type=1400 audit(556.148:8369): avc: denied { open } for pid=86 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=1185 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 556.224116][ T30] audit: type=1400 audit(556.148:8370): avc: denied { ioctl } for pid=86 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=1185 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 556.319951][ T6365] usb 4-1: Found UVC 0.04 device syz (046d:08c3) [ 556.326458][ T6365] uvcvideo 4-1:0.31: Entity type for entity Output 6 was not initialized! [ 556.335618][ T6365] usb 4-1: Failed to create links for entity 5 [ 556.342052][ T6365] usb 4-1: Failed to register entities (-22). [ 556.386947][ T6365] usb 4-1: USB disconnect, device number 6 [ 556.772390][ T30] audit: type=1400 audit(556.748:8371): avc: denied { create } for pid=10752 comm="syz.6.2921" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 556.776727][T10753] Unsupported ieee802154 address type: 0 [ 556.798266][T10753] Unsupported ieee802154 address type: 0 [ 556.798273][ T30] audit: type=1400 audit(556.748:8372): avc: denied { create } for pid=10752 comm="syz.6.2921" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 556.805184][T10753] Unsupported ieee802154 address type: 0 [ 556.829861][T10753] Unsupported ieee802154 address type: 0 [ 556.835585][T10753] Unsupported ieee802154 address type: 0 [ 556.841533][T10753] Unsupported ieee802154 address type: 0 [ 556.847420][T10753] Unsupported ieee802154 address type: 0 [ 556.855059][T10754] loop6: detected capacity change from 0 to 256 [ 556.861535][T10753] Unsupported ieee802154 address type: 0 [ 556.868953][T10754] exfat: Unknown parameter '' [ 556.899541][T10763] loop4: detected capacity change from 0 to 256 [ 557.977037][T10787] input: syz0 as /devices/virtual/input/input13 [ 557.984851][T10787] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 558.540747][T10800] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2934'. [ 559.230312][T10808] loop6: detected capacity change from 0 to 256 [ 559.499156][T10810] overlayfs: statfs failed on './file0' [ 559.657300][T10814] 9pnet: Insufficient options for proto=fd [ 559.818736][T10820] bridge0: port 1(bridge_slave_0) entered blocking state [ 559.826375][T10820] bridge0: port 1(bridge_slave_0) entered disabled state [ 559.833842][T10820] device bridge_slave_0 entered promiscuous mode [ 559.843778][T10820] bridge0: port 2(bridge_slave_1) entered blocking state [ 559.850899][T10820] bridge0: port 2(bridge_slave_1) entered disabled state [ 559.858226][T10820] device bridge_slave_1 entered promiscuous mode [ 559.996756][T10820] bridge0: port 2(bridge_slave_1) entered blocking state [ 560.003838][T10820] bridge0: port 2(bridge_slave_1) entered forwarding state [ 560.011157][T10820] bridge0: port 1(bridge_slave_0) entered blocking state [ 560.018171][T10820] bridge0: port 1(bridge_slave_0) entered forwarding state [ 560.072449][ T8782] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 560.090774][ T8782] bridge0: port 1(bridge_slave_0) entered disabled state [ 560.106824][ T8782] bridge0: port 2(bridge_slave_1) entered disabled state [ 560.174395][ T8782] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 560.184792][ T8782] bridge0: port 1(bridge_slave_0) entered blocking state [ 560.191851][ T8782] bridge0: port 1(bridge_slave_0) entered forwarding state [ 560.424221][ T8782] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 560.432549][ T8782] bridge0: port 2(bridge_slave_1) entered blocking state [ 560.439623][ T8782] bridge0: port 2(bridge_slave_1) entered forwarding state [ 560.468595][ T8795] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 560.487031][ T8795] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 560.504782][ T8795] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 560.513755][ T8795] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 560.522232][ T8795] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 560.531084][ T8795] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 560.542809][T10820] device veth0_vlan entered promiscuous mode [ 560.555805][ T8795] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 560.565911][T10820] device veth1_macvtap entered promiscuous mode [ 560.577690][ T8795] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 560.598016][ T8795] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 560.642273][ T8676] device bridge_slave_1 left promiscuous mode [ 560.659524][ T8676] bridge0: port 2(bridge_slave_1) entered disabled state [ 560.968431][T10843] loop4: detected capacity change from 0 to 1024 [ 560.977465][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 560.977480][ T30] audit: type=1400 audit(560.948:8395): avc: denied { write } for pid=10844 comm="syz.6.2946" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 561.029590][ T30] audit: type=1400 audit(560.978:8396): avc: denied { ioctl } for pid=10844 comm="syz.6.2946" path="/dev/vhost-vsock" dev="devtmpfs" ino=264 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 561.068055][T10845] loop6: detected capacity change from 0 to 8192 [ 561.101568][T10850] loop3: detected capacity change from 0 to 128 [ 561.109365][T10843] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 561.121218][ T30] audit: type=1400 audit(561.098:8397): avc: denied { write } for pid=10842 comm="syz.4.2945" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 561.144010][T10843] EXT4-fs (loop4): shut down requested (0) [ 561.159708][T10850] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 561.177535][ T30] audit: type=1400 audit(561.098:8398): avc: denied { add_name } for pid=10842 comm="syz.4.2945" name="memory.swap.current" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 561.199088][ T30] audit: type=1400 audit(561.098:8399): avc: denied { create } for pid=10842 comm="syz.4.2945" name="memory.swap.current" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 561.220408][ T30] audit: type=1400 audit(561.118:8400): avc: denied { read append open } for pid=10842 comm="syz.4.2945" path="/17/file1/memory.swap.current" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 561.245125][ T30] audit: type=1400 audit(561.118:8401): avc: denied { map } for pid=10842 comm="syz.4.2945" path="/17/file1/memory.swap.current" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 561.269659][ T30] audit: type=1400 audit(561.118:8402): avc: denied { ioctl } for pid=10842 comm="syz.4.2945" path="/17/file1/blkio.bfq.io_queued" dev="loop4" ino=19 ioctlcmd=0x587d scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 561.296772][ T30] audit: type=1400 audit(561.178:8403): avc: denied { read } for pid=83 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 561.320549][ T30] audit: type=1400 audit(561.178:8404): avc: denied { search } for pid=83 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 561.433248][T10860] loop6: detected capacity change from 0 to 128 [ 561.601501][T10860] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 561.683816][T10864] loop2: detected capacity change from 0 to 128 [ 561.750435][T10864] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 562.018530][T10871] loop3: detected capacity change from 0 to 256 [ 562.550082][ T8676] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 562.816061][T10888] loop2: detected capacity change from 0 to 512 [ 562.890307][T10888] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 562.897540][T10888] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 562.906645][T10888] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 562.916061][T10888] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a043c01c, mo2=0002] [ 562.924235][T10888] System zones: 0-2, 18-18, 34-34 [ 562.933630][T10888] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1054: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 562.943343][T10891] overlayfs: statfs failed on './file0' [ 562.959134][T10888] EXT4-fs (loop2): 1 truncate cleaned up [ 562.979848][T10888] EXT4-fs (loop2): mounted filesystem without journal. Opts: nolazytime,abort,lazytime,mblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: none. [ 563.011076][T10893] loop3: detected capacity change from 0 to 1024 [ 563.020415][T10893] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 563.030764][T10893] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 563.042401][T10893] EXT4-fs (loop3): barriers disabled [ 563.047775][T10893] JBD2: no valid journal superblock found [ 563.053846][T10893] EXT4-fs (loop3): error loading journal [ 563.321110][T10906] loop3: detected capacity change from 0 to 1024 [ 563.363340][T10906] EXT4-fs (loop3): Ignoring removed orlov option [ 563.369809][T10906] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 563.984967][T10906] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 564.159271][T10916] loop6: detected capacity change from 0 to 128 [ 564.225657][T10916] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 564.234039][T10918] loop4: detected capacity change from 0 to 128 [ 564.239901][T10920] loop3: detected capacity change from 0 to 128 [ 564.249533][T10918] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 564.263832][T10920] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 564.318225][T10924] selinux_netlink_send: 55 callbacks suppressed [ 564.318240][T10924] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10924 comm=syz.4.2966 [ 565.038778][T10932] loop6: detected capacity change from 0 to 256 [ 565.921624][T10947] loop2: detected capacity change from 0 to 128 [ 565.952061][T10947] FAT-fs (loop2): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 566.025569][ T30] kauditd_printk_skb: 67 callbacks suppressed [ 566.025584][ T30] audit: type=1400 audit(565.998:8472): avc: denied { lock } for pid=10946 comm="syz.2.2974" path="socket:[43938]" dev="sockfs" ino=43938 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 566.205829][T10948] bridge0: port 1(bridge_slave_0) entered blocking state [ 566.213089][T10948] bridge0: port 1(bridge_slave_0) entered disabled state [ 566.227324][ T30] audit: type=1326 audit(566.198:8473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10953 comm="syz.3.2976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1806657929 code=0x7ffc0000 [ 566.255969][T10948] device bridge_slave_0 entered promiscuous mode [ 566.320747][ T30] audit: type=1326 audit(566.228:8474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10953 comm="syz.3.2976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=280 compat=0 ip=0x7f1806657929 code=0x7ffc0000 [ 566.332362][T10948] bridge0: port 2(bridge_slave_1) entered blocking state [ 566.343798][ T30] audit: type=1326 audit(566.228:8475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10953 comm="syz.3.2976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1806657929 code=0x7ffc0000 [ 566.350991][T10948] bridge0: port 2(bridge_slave_1) entered disabled state [ 566.351757][T10948] device bridge_slave_1 entered promiscuous mode [ 566.399073][ T30] audit: type=1326 audit(566.228:8476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10953 comm="syz.3.2976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1806657929 code=0x7ffc0000 [ 566.422108][ T30] audit: type=1326 audit(566.298:8477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10953 comm="syz.3.2976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1806657929 code=0x7ffc0000 [ 566.445183][ T30] audit: type=1326 audit(566.298:8478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10953 comm="syz.3.2976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1806657929 code=0x7ffc0000 [ 566.527789][T10948] bridge0: port 2(bridge_slave_1) entered blocking state [ 566.534843][T10948] bridge0: port 2(bridge_slave_1) entered forwarding state [ 566.542128][T10948] bridge0: port 1(bridge_slave_0) entered blocking state [ 566.549141][T10948] bridge0: port 1(bridge_slave_0) entered forwarding state [ 566.568581][ T8795] bridge0: port 1(bridge_slave_0) entered disabled state [ 566.576570][ T8795] bridge0: port 2(bridge_slave_1) entered disabled state [ 566.585399][ T8795] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 566.595575][ T8795] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 566.641423][T10965] fuse: Bad value for 'fd' [ 566.692534][ T8795] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 566.703066][ T8795] bridge0: port 1(bridge_slave_0) entered blocking state [ 566.710153][ T8795] bridge0: port 1(bridge_slave_0) entered forwarding state [ 566.740416][ T8795] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 566.748862][ T8795] bridge0: port 2(bridge_slave_1) entered blocking state [ 566.755932][ T8795] bridge0: port 2(bridge_slave_1) entered forwarding state [ 566.780075][ T8795] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 566.792990][ T8795] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 566.808810][ T8795] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 566.817495][ T8795] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 566.829087][ T8795] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 566.836630][T10969] loop6: detected capacity change from 0 to 128 [ 566.849555][ T8795] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 566.858748][T10948] device veth0_vlan entered promiscuous mode [ 566.870947][T10969] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 566.885056][ T8795] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 566.895648][T10948] device veth1_macvtap entered promiscuous mode [ 566.912731][ T30] audit: type=1400 audit(566.888:8479): avc: denied { write } for pid=10972 comm="syz.2.2979" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 566.937107][ T8795] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 566.953430][ T8795] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 567.103776][ T30] audit: type=1400 audit(567.078:8480): avc: denied { ioctl } for pid=10976 comm="syz.2.2982" path="/dev/kvm" dev="devtmpfs" ino=82 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 567.198571][T10981] loop2: detected capacity change from 0 to 512 [ 567.321774][T10981] EXT4-fs (loop2): Mount option "commit=0x0000000000000000" incompatible with ext2 [ 568.015745][T10991] loop3: detected capacity change from 0 to 1024 [ 568.090326][T10991] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 568.108726][T10991] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 568.126815][ T30] audit: type=1400 audit(568.088:8481): avc: denied { setattr } for pid=10976 comm="syz.2.2982" name="file0" dev="tmpfs" ino=76 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 568.190473][T10991] EXT4-fs (loop3): barriers disabled [ 568.195838][T10991] JBD2: no valid journal superblock found [ 568.256316][T10991] EXT4-fs (loop3): error loading journal [ 568.611578][T11001] loop2: detected capacity change from 0 to 512 [ 568.687400][T11001] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,nodelalloc,quota,. Quota mode: writeback. [ 569.211338][T11026] loop6: detected capacity change from 0 to 512 [ 569.240643][T11026] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 569.254034][T11026] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 569.266063][T11026] EXT4-fs (loop6): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 569.276550][T11026] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 569.285260][T11026] EXT4-fs (loop6): orphan cleanup on readonly fs [ 569.292550][T11026] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.2993: bg 0: block 34: padding at end of block bitmap is not set [ 569.307535][T11026] EXT4-fs error (device loop6): ext4_acquire_dquot:6195: comm syz.6.2993: Failed to acquire dquot type 1 [ 569.319566][T11026] EXT4-fs (loop6): 1 truncate cleaned up [ 569.325602][T11026] EXT4-fs (loop6): mounted filesystem without journal. Opts: minixdf,bsddf,nodioread_nolock,errors=continue,lazytime,noblock_validity,usrjquota=,nodelalloc,,errors=continue. Quota mode: writeback. [ 569.424129][ T6355] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 569.460799][T11033] loop6: detected capacity change from 0 to 128 [ 569.486858][T11033] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 569.559286][T11036] loop6: detected capacity change from 0 to 1024 [ 569.606801][T11036] EXT4-fs (loop6): Quota format mount options ignored when QUOTA feature is enabled [ 569.616821][T11036] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 569.625133][T11036] EXT4-fs (loop6): orphan cleanup on readonly fs [ 569.632225][T11036] EXT4-fs error (device loop6): __ext4_get_inode_loc:4352: comm syz.6.2998: Invalid inode table block 0 in block_group 0 [ 569.645693][T11036] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5866: Corrupt filesystem [ 569.655383][T11036] EXT4-fs error (device loop6): ext4_quota_write:6607: inode #3: comm syz.6.2998: mark_inode_dirty error [ 569.666873][T11036] EXT4-fs error (device loop6): ext4_acquire_dquot:6195: comm syz.6.2998: Failed to acquire dquot type 0 [ 569.678502][T11036] EXT4-fs error (device loop6): __ext4_get_inode_loc:4352: comm syz.6.2998: Invalid inode table block 0 in block_group 0 [ 569.691392][T11036] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5866: Corrupt filesystem [ 569.701070][T11036] EXT4-fs error (device loop6): ext4_ext_truncate:4454: inode #15: comm syz.6.2998: mark_inode_dirty error [ 569.712691][T11036] EXT4-fs error (device loop6): __ext4_get_inode_loc:4352: comm syz.6.2998: Invalid inode table block 0 in block_group 0 [ 569.726018][T11036] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5866: Corrupt filesystem [ 569.735683][T11036] EXT4-fs error (device loop6) in ext4_orphan_del:305: Corrupt filesystem [ 569.744490][T11036] EXT4-fs error (device loop6): __ext4_get_inode_loc:4352: comm syz.6.2998: Invalid inode table block 0 in block_group 0 [ 569.757401][T11036] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5866: Corrupt filesystem [ 569.773732][T11036] EXT4-fs error (device loop6): ext4_truncate:4304: inode #15: comm syz.6.2998: mark_inode_dirty error [ 569.785153][T11036] EXT4-fs error (device loop6) in ext4_process_orphan:347: Corrupt filesystem [ 569.794848][T11036] EXT4-fs (loop6): 1 truncate cleaned up [ 569.801785][T11036] EXT4-fs (loop6): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000000,jqfmt=vfsv1,grpid,nojournal_checksum,journal_dev=0x0000000000000007,block_validity,minixdf,lazytime,,errors=continue. Quota mode: writeback. [ 569.810931][T11040] loop4: detected capacity change from 0 to 1024 [ 569.828793][T11036] EXT4-fs error (device loop6): __ext4_get_inode_loc:4352: comm syz.6.2998: Invalid inode table block 0 in block_group 0 [ 569.843886][ T6355] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 569.855480][ T6355] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 569.865372][ T6355] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 569.878632][ T6355] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 569.881391][T11040] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 569.888212][ T6355] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 569.889522][ T6355] usb 8-1: config 0 descriptor?? [ 569.908431][T11040] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 569.921595][T11040] EXT4-fs (loop4): barriers disabled [ 569.926910][T11040] JBD2: no valid journal superblock found [ 569.932852][T11040] EXT4-fs (loop4): error loading journal [ 570.139860][ T6363] usb 7-1: new full-speed USB device number 27 using dummy_hcd [ 570.181287][T11055] loop7: detected capacity change from 0 to 2048 [ 570.231393][T11055] EXT4-fs (loop7): mounted filesystem without journal. Opts: sysvgroups,usrjquota=,quota,norecovery,auto_da_alloc,noquota,grpquota,barrier=0x0000000000000000,grpjquota=,jqfmt=vfsold,,errors=continue. Quota mode: writeback. [ 570.252915][ T6367] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 570.260633][ T6355] usbhid 8-1:0.0: can't add hid device: -71 [ 570.268522][ T6355] usbhid: probe of 8-1:0.0 failed with error -71 [ 570.276612][ T6355] usb 8-1: USB disconnect, device number 2 [ 570.392929][T11055] EXT4-fs error (device loop7): ext4_validate_block_bitmap:438: comm syz.7.3005: bg 0: block 234: padding at end of block bitmap is not set [ 570.418193][T11055] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 570.431067][T11055] EXT4-fs (loop7): This should not happen!! Data will be lost [ 570.431067][T11055] [ 570.441180][T11055] EXT4-fs (loop7): Total free blocks count 0 [ 570.447247][T11055] EXT4-fs (loop7): Free/Dirty block details [ 570.453538][T11055] EXT4-fs (loop7): free_blocks=0 [ 570.458528][T11055] EXT4-fs (loop7): dirty_blocks=4176 [ 570.464139][T11055] EXT4-fs (loop7): Block reservation details [ 570.470483][T11055] EXT4-fs (loop7): i_reserved_data_blocks=261 [ 570.491653][ T8831] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 570.504398][ T8831] EXT4-fs (loop7): This should not happen!! Data will be lost [ 570.504398][ T8831] [ 570.539878][ T6367] usb 4-1: Using ep0 maxpacket: 16 [ 570.579900][ T6363] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 570.591232][ T6363] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 570.829908][ T6367] usb 4-1: config 0 has an invalid interface number: 81 but max is 0 [ 570.838012][ T6367] usb 4-1: config 0 has no interface number 0 [ 570.868892][T11067] loop7: detected capacity change from 0 to 256 [ 570.919910][ T6363] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 570.929140][ T6363] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 570.937329][ T6363] usb 7-1: Product: syz [ 570.941626][ T6363] usb 7-1: Manufacturer: syz [ 570.946239][ T6363] usb 7-1: SerialNumber: syz [ 571.024167][ T6367] usb 4-1: New USB device found, idVendor=07b8, idProduct=401a, bcdDevice=7b.f0 [ 571.033499][ T6367] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 571.042067][ T6367] usb 4-1: Product: syz [ 571.046228][ T6367] usb 4-1: Manufacturer: syz [ 571.050868][ T6367] usb 4-1: SerialNumber: syz [ 571.085948][ T6367] usb 4-1: config 0 descriptor?? [ 571.131747][ T6367] rtl8150 4-1:0.81: couldn't find required endpoints [ 571.139000][ T6367] rtl8150: probe of 4-1:0.81 failed with error -5 [ 571.441520][T11044] UDC core: couldn't find an available UDC or it's busy: -16 [ 571.449333][T11080] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3011'. [ 571.449846][T11044] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 571.479124][ T6355] usb 4-1: USB disconnect, device number 7 [ 571.501533][T11084] loop2: detected capacity change from 0 to 1024 [ 571.518782][T11084] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 571.528796][T11084] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 571.540176][T11084] EXT4-fs (loop2): barriers disabled [ 571.545529][T11084] JBD2: no valid journal superblock found [ 571.551350][T11084] EXT4-fs (loop2): error loading journal [ 571.560236][ T6363] usb 7-1: 0:2 : does not exist [ 571.649532][ T6363] usb 7-1: USB disconnect, device number 27 [ 571.844183][T11088] fuse: Bad value for 'fd' [ 572.089041][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 572.089065][ T30] audit: type=1400 audit(572.048:8488): avc: denied { read } for pid=86 comm="acpid" name="mouse0" dev="devtmpfs" ino=1277 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 572.117144][ T30] audit: type=1400 audit(572.048:8489): avc: denied { open } for pid=86 comm="acpid" path="/dev/input/mouse0" dev="devtmpfs" ino=1277 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 572.155040][ T30] audit: type=1400 audit(572.048:8490): avc: denied { ioctl } for pid=86 comm="acpid" path="/dev/input/mouse0" dev="devtmpfs" ino=1277 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 572.195265][ T30] audit: type=1400 audit(572.058:8491): avc: denied { watch watch_reads } for pid=11093 comm="syz.6.3016" path="/311" dev="tmpfs" ino=1770 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 572.884584][T11109] loop2: detected capacity change from 0 to 128 [ 573.085495][T11111] incfs: Backing dir is not set, filesystem can't be mounted. [ 573.093335][T11111] incfs: mount failed -2 [ 573.244855][T11109] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 573.277598][ T30] audit: type=1400 audit(573.248:8492): avc: denied { create } for pid=11100 comm="syz.6.3019" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 573.351343][T11116] loop3: detected capacity change from 0 to 128 [ 573.364821][T11114] loop4: detected capacity change from 0 to 2048 [ 573.385370][T11116] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 573.470974][ T30] audit: type=1326 audit(573.448:8493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11119 comm="syz.7.3026" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff50ceb7929 code=0x0 [ 573.770512][T11114] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 573.811735][ T30] audit: type=1400 audit(573.788:8494): avc: denied { read } for pid=11113 comm="syz.4.3023" name="file2" dev="loop4" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 574.052839][T11134] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 574.059606][ T8795] Bluetooth: hci0: Frame reassembly failed (-84) [ 574.114922][T11138] loop6: detected capacity change from 0 to 256 [ 574.458852][ T30] audit: type=1400 audit(574.428:8495): avc: denied { read } for pid=11153 comm="syz.3.3034" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 574.543314][T11156] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 574.839839][ T6367] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 574.876584][ T30] audit: type=1400 audit(574.848:8496): avc: denied { write } for pid=11158 comm="syz.4.3035" name="kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 574.980557][T11159] 9pnet: Insufficient options for proto=fd [ 575.249869][ T6361] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 575.259882][ T6367] usb 4-1: unable to get BOS descriptor or descriptor too short [ 575.379929][ T6367] usb 4-1: config 129 has an invalid interface number: 135 but max is 0 [ 575.388287][ T6367] usb 4-1: config 129 has an invalid interface number: 5 but max is 0 [ 575.397156][ T6367] usb 4-1: config 129 has an invalid descriptor of length 0, skipping remainder of the config [ 575.407697][ T6367] usb 4-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 575.417556][ T6367] usb 4-1: config 129 has no interface number 0 [ 575.425443][ T6367] usb 4-1: config 129 has no interface number 1 [ 575.432494][ T6367] usb 4-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 575.446909][ T6367] usb 4-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 575.458937][ T6367] usb 4-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 575.495453][T11169] fuse: Bad value for 'fd' [ 575.539451][ T6367] usb 4-1: config 129 interface 135 has no altsetting 0 [ 575.547747][ T6367] usb 4-1: config 129 interface 5 has no altsetting 0 [ 575.560312][ T6361] usb 5-1: Using ep0 maxpacket: 16 [ 575.810074][ T6361] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 575.819637][ T6361] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 575.831061][ T6361] usb 5-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 575.842215][ T6361] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 575.852104][ T6361] usb 5-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 575.861941][ T6361] usb 5-1: config 1 interface 0 has no altsetting 0 [ 575.868712][ T6361] usb 5-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 575.877802][ T6361] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 575.920289][ T6361] ums-sddr09 5-1:1.0: USB Mass Storage device detected [ 576.059876][ T6365] Bluetooth: hci0: command 0x1003 tx timeout [ 576.065934][T11136] Bluetooth: hci0: sending frame failed (-49) [ 576.140746][ T6361] scsi host1: usb-storage 5-1:1.0 [ 576.160045][ T6367] usb 4-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.62 [ 576.169233][ T6367] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 576.177724][ T6367] usb 4-1: Product: ဇ [ 576.217467][ T30] audit: type=1400 audit(576.188:8497): avc: denied { create } for pid=11177 comm="syz.7.3039" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 576.341928][ T6370] usb 5-1: USB disconnect, device number 3 [ 576.573571][ T6367] usb 4-1: MIDIStreaming interface descriptor not found [ 576.656454][ T6367] usb 4-1: USB disconnect, device number 8 [ 576.886644][T11187] loop4: detected capacity change from 0 to 1024 [ 576.940352][ T9611] udevd[9611]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:129.5/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 577.023996][T11187] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 577.034275][T11187] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 577.045313][T11187] EXT4-fs (loop4): barriers disabled [ 577.050682][T11187] JBD2: no valid journal superblock found [ 577.056429][T11187] EXT4-fs (loop4): error loading journal [ 577.190793][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 577.190807][ T30] audit: type=1400 audit(577.168:8499): avc: denied { read } for pid=11197 comm="syz.4.3045" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 577.241357][ T30] audit: type=1400 audit(577.198:8500): avc: denied { open } for pid=11197 comm="syz.4.3045" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 577.352506][T11203] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3046'. [ 577.362435][T11203] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3046'. [ 577.460357][T11206] loop4: detected capacity change from 0 to 512 [ 577.492925][T11206] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 577.500262][T11206] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 577.710405][T11206] EXT4-fs (loop4): 1 truncate cleaned up [ 577.716305][T11206] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpjquota=,mblk_io_submit,debug_want_extra_isize=0x0000000000000068,lazytime,discard,grpquota,,errors=continue. Quota mode: writeback. [ 578.140061][ T6367] Bluetooth: hci0: command 0x1001 tx timeout [ 578.170282][T11136] Bluetooth: hci0: sending frame failed (-49) [ 578.225616][T11218] loop7: detected capacity change from 0 to 512 [ 578.418520][T11218] EXT4-fs (loop7): orphan cleanup on readonly fs [ 578.426346][T11218] EXT4-fs (loop7): 1 orphan inode deleted [ 578.433179][T11218] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 578.572449][T11225] incfs: Backing dir is not set, filesystem can't be mounted. [ 578.580231][T11225] incfs: mount failed -2 [ 578.724001][T11227] loop3: detected capacity change from 0 to 512 [ 578.760636][T11227] EXT4-fs (loop3): Ignoring removed oldalloc option [ 578.769107][T11227] EXT4-fs error (device loop3): ext4_xattr_inode_iget:400: comm syz.3.3052: Parent and EA inode have the same ino 15 [ 578.781786][T11227] EXT4-fs error (device loop3): ext4_xattr_inode_iget:400: comm syz.3.3052: Parent and EA inode have the same ino 15 [ 578.794458][T11227] EXT4-fs (loop3): 1 orphan inode deleted [ 578.800370][T11227] EXT4-fs (loop3): mounted filesystem without journal. Opts: bsdgroups,abort,debug_want_extra_isize=0x000000000000005e,noauto_da_alloc,block_validity,oldalloc,journal_dev=0x0000000000000077,,errors=continue. Quota mode: none. [ 578.831442][ T9965] EXT4-fs error (device loop3): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 578.853123][ T9965] ------------[ cut here ]------------ [ 578.858495][ T6370] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 578.859012][ T9965] kernel BUG at fs/namei.c:2933! [ 578.871724][ T9965] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 578.877793][ T9965] CPU: 1 PID: 9965 Comm: syz-executor Tainted: G W 5.15.185-syzkaller-00032-g0d918fa8e88d #0 [ 578.889250][ T9965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 578.899308][ T9965] RIP: 0010:may_delete+0x701/0x710 [ 578.900066][ T30] audit: type=1400 audit(578.828:8501): avc: denied { unlink } for pid=9965 comm="syz-executor" name="lost+found" dev="loop3" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 [ 578.904425][ T9965] Code: ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 84 fe ff ff 48 89 df e8 10 52 f5 ff e9 77 fe ff ff e8 b6 db b6 ff 0f 0b e8 af db b6 ff <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 55 48 89 e5 41 56 53 [ 578.946574][ T9965] RSP: 0018:ffffc90000bb7c90 EFLAGS: 00010293 [ 578.952640][ T9965] RAX: ffffffff81b1cc31 RBX: ffff8881114fe550 RCX: ffff8881213362c0 [ 578.960593][ T9965] RDX: 0000000000000000 RSI: 0000000000200000 RDI: 0000000000000000 [ 578.968546][ T9965] RBP: ffffc90000bb7cf8 R08: 0000000000000004 R09: 0000000000000003 [ 578.976515][ T9965] R10: fffff52000176f74 R11: 1ffff92000176f74 R12: dffffc0000000000 [ 578.984484][ T9965] R13: 0000000000000001 R14: ffff88813e4f2e00 R15: 1ffff1102229fcaa [ 578.992450][ T9965] FS: 000055558af18500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 579.001369][ T9965] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 579.007945][ T9965] CR2: 000055558af43528 CR3: 000000010d850000 CR4: 00000000003506a0 [ 579.016100][ T9965] Call Trace: [ 579.019358][ T9965] [ 579.022277][ T9965] vfs_rmdir+0x32/0x460 [ 579.026419][ T9965] incfs_kill_sb+0x105/0x220 [ 579.031079][ T9965] deactivate_locked_super+0xa0/0x100 [ 579.036435][ T9965] deactivate_super+0xaf/0xe0 [ 579.041185][ T9965] cleanup_mnt+0x446/0x500 [ 579.045580][ T9965] __cleanup_mnt+0x19/0x20 [ 579.049997][ T9965] task_work_run+0x127/0x190 [ 579.054567][ T9965] exit_to_user_mode_loop+0xd0/0xe0 [ 579.059760][ T9965] exit_to_user_mode_prepare+0x5a/0xa0 [ 579.065217][ T9965] syscall_exit_to_user_mode+0x1a/0x30 [ 579.070658][ T9965] do_syscall_64+0x58/0xa0 [ 579.075065][ T9965] ? clear_bhb_loop+0x50/0xa0 [ 579.079724][ T9965] ? clear_bhb_loop+0x50/0xa0 [ 579.084549][ T9965] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 579.090418][ T9965] RIP: 0033:0x7f1806658c57 [ 579.094814][ T9965] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 579.114404][ T9965] RSP: 002b:00007ffd126f02d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 579.122812][ T9965] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f1806658c57 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 579.130777][ T9965] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd126f0390 [ 579.138903][ T9965] RBP: 00007ffd126f0390 R08: 0000000000000000 R09: 0000000000000000 [ 579.146853][ T9965] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd126f1480 [ 579.154807][ T9965] R13: 00007f18066d9925 R14: 000000000008d496 R15: 00007ffd126f2550 [ 579.162766][ T9965] [ 579.165763][ T9965] Modules linked in: [ 579.174315][ T9965] ---[ end trace 3e175dc0f751f80b ]--- [ 579.180852][ T9965] RIP: 0010:may_delete+0x701/0x710 [ 579.185979][ T9965] Code: ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 84 fe ff ff 48 89 df e8 10 52 f5 ff e9 77 fe ff ff e8 b6 db b6 ff 0f 0b e8 af db b6 ff <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 55 48 89 e5 41 56 53 [ 579.209696][ T9965] RSP: 0018:ffffc90000bb7c90 EFLAGS: 00010293 [ 579.239883][ T30] audit: type=1400 audit(579.148:8502): avc: denied { write } for pid=273 comm="syz-executor" path="pipe:[14842]" dev="pipefs" ino=14842 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 579.251856][ T9965] RAX: ffffffff81b1cc31 RBX: ffff8881114fe550 RCX: ffff8881213362c0 [ 579.272258][ T9965] RDX: 0000000000000000 RSI: 0000000000200000 RDI: 0000000000000000 [ 579.280474][ T9965] RBP: ffffc90000bb7cf8 R08: 0000000000000004 R09: 0000000000000003 [ 579.347861][ T9965] R10: fffff52000176f74 R11: 1ffff92000176f74 R12: dffffc0000000000 [ 579.355922][ T9965] R13: 0000000000000001 R14: ffff88813e4f2e00 R15: 1ffff1102229fcaa [ 579.364043][ T9965] FS: 000055558af18500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 579.373492][ T9965] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 579.381181][ T9965] CR2: 00007fa801ea3d60 CR3: 000000010d850000 CR4: 00000000003506a0 [ 579.389211][ T9965] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 579.397230][ T6370] usb 3-1: Using ep0 maxpacket: 16 [ 579.397234][ T9965] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 579.397250][ T9965] Kernel panic - not syncing: Fatal exception [ 579.416611][ T9965] Kernel Offset: disabled [ 579.420920][ T9965] Rebooting in 86400 seconds..