last executing test programs: 42.715034403s ago: executing program 0 (id=381): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) creat(&(0x7f0000000000)='./file0\x00', 0x10) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000000002) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9c5c2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0xb}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={0xffffffffffffffff, 0x0, &(0x7f0000001700)=""/53}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = dup(0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000500)='9p_client_req\x00', r3}, 0x10) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x10, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfd', @ANYRESHEX=r4]) 41.481530891s ago: executing program 0 (id=385): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="04010000160001000000000000000000fe8000000000000000000000000000aaff010000000000000000000000000001000000000000001798bf7f1b625d7000", @ANYRES32=0x0, @ANYRES32], 0x104}}, 0x24000014) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) 41.049211084s ago: executing program 0 (id=388): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, 0x0, 0x4040) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0xffffffff00000000, &(0x7f0000000540), 0x1, 0x49c, &(0x7f0000000580)="$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") 40.845207585s ago: executing program 0 (id=390): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05004040840000000400"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000600)='./bus\x00', 0x80, &(0x7f00000010c0)=ANY=[@ANYBLOB="666c7573682c6e6f646f74732c646973636172642c646d61736b3d30303030303030303030303030303030303030303030322c646d61736b3d30303030303030303030303030303030303030303137372c646f74732c6e6f646f74732c71756965742c646f74732c0023c3cb4d2e3cbf18508098fe0de2af38db67d42d1bc4ab714d52f019082433fc9ca2d7174b2c4ece31c9f4c7a4d53914e100"/167], 0x1, 0x140, &(0x7f0000000000)="$eJzs27Fq21AUBuDj2m3ddvFcOgi6dDJtn6CluFAqaEnwkEwJOFnsYIgXJZMfJS8YCJ683ZAo2Imxhwy2IPq+RT/8CO4dpMMV6OjT2XAwnpyO/8+i3WhE60dkMW9EJ15FM0rTAABeknlKcZNSSm+n8e4qUkpVrwgA2DbzHwDqx/wHgPox/wGgfvYPDv/+zPPeXpa1I66nRb/ol9ey//0n733N7nWWd82Kot9c9N/KPnvav473D/33tf2b+PK57O+6X//ylf5DDLa/fQAAAKiFbraw9nzf7W7qy/To+8DK+b0VH1s72wYA8AyTi8vh8Wh0ci4IgrAIVb+ZgG1bPvRVrwQAAAAAAAAAAAAAANhkF78TVb1HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAWHUbAAD//0DvUik=") socketpair$unix(0x1, 0x2, 0x0, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x99501e, 0x0) mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0) mount$bind(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x887008, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r1, &(0x7f0000006b40)={0x2020}, 0x2020) prlimit64(0x0, 0xa, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=@ringbuf={{}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x368, 0x1d0, 0x11, 0x148, 0x0, 0x0, 0x2d0, 0x2a8, 0x2a8, 0x2d0, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x188, 0x1d0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x88000000, 0x3, 0x7}}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv4=@remote, [0xffffff00, 0xff, 0xffffff00], @ipv6=@dev={0xfe, 0x80, '\x00', 0xe}, [0x0, 0xffffff00], @ipv4=@private=0xa010100, [0xffffff00, 0x0, 0xffffff00], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xff000000, 0xff000000, 0xff], 0x8, 0x6, 0x5e, 0x4e21, 0x4e23, 0x4e24, 0x4e21}, 0x40, 0x8e0}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0xffffffff, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@addrtype={{0x30}, {0x242, 0x75f65a4e97d6873f, 0x1}}, @common=@unspec=@quota={{0x38}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x3, 0x6, 0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c8) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r0], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='tlb_flush\x00', r7}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xd, &(0x7f0000000040)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='tlb_flush\x00', r8}, 0x10) 38.912802098s ago: executing program 0 (id=398): r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x140, 0x19, 0x1, 0x0, 0x0, {0x1d, 0xd601, 0x9}, [@nested={0x50, 0x11, 0x0, 0x1, [@typed={0x49, 0x121, 0x0, 0x0, @binary="c9a7befe6f6d645a1a11b81b2c4b101c7510e19fee6bb49f6cc7a2c50fd57c06db1a75df432aa833928a0772ff8f5e9ed32d3b477d35b296674f1fe35663c0d236fd91d7ba"}]}, @nested={0xdc, 0x6, 0x0, 0x1, [@nested={0xd8, 0x75, 0x0, 0x1, [@nested={0x14, 0x105, 0x0, 0x1, [@typed={0x8, 0x22, 0x0, 0x0, @fd=r1}, @typed={0x8, 0x98, 0x0, 0x0, @pid}]}, @nested={0xc0, 0x14c, 0x0, 0x1, [@nested={0xbc, 0xe9, 0x0, 0x1, [@generic="6d978dc10a38e83c78f0d819d591bc751fdf04433d77b5da94a0c9ed722f107c2c62d113095929b58ee16dc7b6bff4709aac40b3ecbab7ca3b581ab6a58afeffc7cfd5721b1449fd69362b449257536737cff4edfcfcda88670692b1ad56a996ac1ce83eb215ca797fa188aa699baaf40b6d8002ad767c15bf8a923b3cab1f62f54062f8b002269e4ab4ae235ed26e613e698c08924ecac802fe81944cf9dfacf4cf63002706d3c1ec975d1fec62a40db12a5153ea672820"]}]}]}]}]}, 0x140}, 0x1, 0x0, 0x0, 0x5}, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000100)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x33, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7f1300000000c8cb5df954de67590100015100000000", @ANYRES32=0x0, @ANYBLOB="00000400a800010008001f0005000000"], 0x50}}, 0x40080) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10, 0xa8}, [@ldst={0x5, 0x2, 0x2}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x8, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) connect$can_bcm(r0, &(0x7f00000005c0), 0x10) read(r0, &(0x7f0000000000)=""/192, 0xc0) setsockopt$sock_int(r0, 0x1, 0x1d, &(0x7f0000000280)=0x2, 0x4) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x77359400}}, 0x0) 38.826179239s ago: executing program 0 (id=399): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) creat(&(0x7f0000000000)='./file0\x00', 0x10) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000000002) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9c5c2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0xb}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={0xffffffffffffffff, 0x0, &(0x7f0000001700)=""/53}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = dup(0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000500)='9p_client_req\x00', r3}, 0x10) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x10, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfd', @ANYRESHEX=r4]) 38.812497459s ago: executing program 32 (id=399): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) creat(&(0x7f0000000000)='./file0\x00', 0x10) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000000002) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9c5c2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0xb}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={0xffffffffffffffff, 0x0, &(0x7f0000001700)=""/53}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = dup(0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000500)='9p_client_req\x00', r3}, 0x10) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x10, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfd', @ANYRESHEX=r4]) 9.012666806s ago: executing program 4 (id=535): r0 = socket$inet6(0xa, 0x3, 0x2) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e24, 0x5, @empty}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x5ac38000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x20040600) unshare(0x22020400) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000020b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r6}, 0x18) unshare(0x20000600) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x0}, 0x20) syz_mount_image$erofs(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x1000801, &(0x7f0000000140)=ANY=[], 0x2, 0x232, &(0x7f0000000500)="$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") sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xc4, 0x19, 0x1, 0xfffffffe, 0x0, {{@in=@multicast1=0xe0000002, @in=@rand_addr=0x64010100, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}, 0x0, 0x0, 0x0, 0x1}, [@mark={0xc, 0x15, {0x350759, 0x82}}]}, 0xc4}}, 0x2c000010) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = syz_io_uring_setup(0x2d64, &(0x7f0000000100)={0x0, 0xb2fc, 0x8, 0x4, 0x42}, &(0x7f0000000400), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r7, 0x2, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0}, 0x20) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r7, 0x6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0), 0x0}, 0x20) 8.797077857s ago: executing program 1 (id=537): r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000100)='.log\x00', 0x20642, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x5421, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x21c0, 0x103) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008000}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080000000100000000000000", @ANYRES32, @ANYBLOB="0005c5c3f7a2ac566c5c68409800000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) listen(0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001500)={0x34, r7, 0x1, 0x4000, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES={0x8, 0x3, 0xa000000}]}, 0x34}}, 0x0) 7.904271844s ago: executing program 1 (id=551): r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x140, 0x19, 0x1, 0x0, 0x0, {0x1d, 0xd601, 0x9}, [@nested={0x50, 0x11, 0x0, 0x1, [@typed={0x49, 0x121, 0x0, 0x0, @binary="c9a7befe6f6d645a1a11b81b2c4b101c7510e19fee6bb49f6cc7a2c50fd57c06db1a75df432aa833928a0772ff8f5e9ed32d3b477d35b296674f1fe35663c0d236fd91d7ba"}]}, @nested={0xdc, 0x6, 0x0, 0x1, [@nested={0xd8, 0x75, 0x0, 0x1, [@nested={0x14, 0x105, 0x0, 0x1, [@typed={0x8, 0x22, 0x0, 0x0, @fd=r1}, @typed={0x8, 0x98, 0x0, 0x0, @pid}]}, @nested={0xc0, 0x14c, 0x0, 0x1, [@nested={0xbc, 0xe9, 0x0, 0x1, [@generic="6d978dc10a38e83c78f0d819d591bc751fdf04433d77b5da94a0c9ed722f107c2c62d113095929b58ee16dc7b6bff4709aac40b3ecbab7ca3b581ab6a58afeffc7cfd5721b1449fd69362b449257536737cff4edfcfcda88670692b1ad56a996ac1ce83eb215ca797fa188aa699baaf40b6d8002ad767c15bf8a923b3cab1f62f54062f8b002269e4ab4ae235ed26e613e698c08924ecac802fe81944cf9dfacf4cf63002706d3c1ec975d1fec62a40db12a5153ea672820"]}]}]}]}]}, 0x140}, 0x1, 0x0, 0x0, 0x5}, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000100)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x33, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7f1300000000c8cb5df954de67590100015100000000", @ANYRES32=0x0, @ANYBLOB="00000400a800010008001f0005000000"], 0x50}}, 0x40080) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10, 0xa8}, [@ldst={0x5, 0x2, 0x2}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x8, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) connect$can_bcm(r0, &(0x7f00000005c0), 0x10) read(r0, &(0x7f0000000000)=""/192, 0xc0) setsockopt$sock_int(r0, 0x1, 0x1d, &(0x7f0000000280)=0x2, 0x4) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x77359400}}, 0x0) 6.727890832s ago: executing program 1 (id=542): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000100)={[0x101]}, 0x8, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00'}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYRESOCT, @ANYRES32=0x0], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x2, &(0x7f0000000380)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}, {0x6, 0x7, 0x0, 0x40}]}) connect$unix(0xffffffffffffffff, 0x0, 0x0) lsetxattr$security_selinux(&(0x7f0000000340)='.\x00', &(0x7f0000000240), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x22, 0x0) socket(0x8, 0x5, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003"], 0x7c}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0200001900010000000000d8d4df25e000000100000000e300000000000000ac1414bb000000000000000000000000fffe000bffff00000a00800000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000800000000000000000000000000000000000000001000000000000000000000084010500ac1414aa000000000000000000000000000000003c00000000000000ffffffff000000000000000000000000ff34000000020000000000000000000003000000ac1414aa000000000000000000000000000000003c00000000000000ac1414bb0000000000000000000000000000000000000000000800000008000000000000fc020000000000000000000000000000000000003200000000000000e00000010000000000000000000000000335000001000000000000000000000000000000ac1e01010000000000000000000000000000000033000000000000000a010101000000000000000000000000043500000000010000000000bf0a00000000000000000000000000000000000000000001000004d43300000000000000e00000010000000000000000000000000300000000010800000000000000000000040000fc000000000000000000000000000001000000003200000000000000ff0200000000000000000000000000010000000001020000010000100000000000000000"], 0x23c}}, 0x0) r5 = io_uring_setup(0x1684, &(0x7f0000000ac0)={0x0, 0xdd95, 0x400, 0x0, 0x2, 0x0, r0}) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 6.464706054s ago: executing program 3 (id=543): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8914, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r1}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'wg2\x00', @multicast}) 6.302230655s ago: executing program 4 (id=547): r0 = socket$inet6(0xa, 0x3, 0x2) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e24, 0x5, @empty}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x5ac38000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x20040600) r5 = getpid() r6 = syz_pidfd_open(r5, 0x0) setns(r6, 0x24020000) connect$unix(r3, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000020b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r7}, 0x18) unshare(0x20000600) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x0}, 0x20) syz_mount_image$erofs(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x1000801, &(0x7f0000000140)=ANY=[], 0x2, 0x232, &(0x7f0000000500)="$eJzslbFrFEEUxr+Z3du7BA1YaGFzKQJGMHu7G5U0FrEXhETU8jCTcLrJhcsVSUBIsBHEWvwD7KwtUlnYaWVtoYJgYUobBUdmdvZ2Nrt78bhgk/eDm/vmzbyZN7Nv34IgiFPL1y8/Pz+/ubB8BcAZzKBu7N+dbA635n966dSMfLcx9fjAGmqohgGQMjO6x+zvAXi76AB7ybJSZt6vzb9acxkcM6Z/BxyXjb4LBj+NVWbeAgz3jfnhphycpjthRCzYg268stqJRaCaUDXRaudVLRefiv9wn2HFHFDtwKzxrZ3dR+0Y6CUiFqmoyXSfwlAqkpMBJUM5Mez+dHyLHDesK1DP697TJ/uq7xt7YN1fCI7Q6HkwLBm9gDp832+argit8190s/Wd5LEl7FXHXRSNUSaPL87N5SzTUEJl+HD3iVio055YGH/kkDn1kRdkJqu8XAqOEeGz8U+q4hjdizeLXl5xnYY5qLaIY16Sf9idHbUwOyUuHB68L3p9+29Je/IC5gLtoRfqoj5OxvGtUq/zOct0xSvj4awuCZUpkdQP5gKXrPrkWl+FVn99s7W1szvXWW+viTWxEUXz14OrQXAtaunanLR2uTtS/xq6Pk1a69cqaqXHPGy3+/1euA30e+GgHyWtlUxLb7o/tA/X9Y9j9reU6edFv3jph5Ll92Dmx/W/UrNObgKvCI4gCIIgCIIgCIIgCIIgCKKUX5ZuguHD1KAry3Gj23r4bwAAAP//c8NPrw==") sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xc4, 0x19, 0x1, 0xfffffffe, 0x0, {{@in=@multicast1=0xe0000002, @in=@rand_addr=0x64010100, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}, 0x0, 0x0, 0x0, 0x1}, [@mark={0xc, 0x15, {0x350759, 0x82}}]}, 0xc4}}, 0x2c000010) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = syz_io_uring_setup(0x2d64, &(0x7f0000000100)={0x0, 0xb2fc, 0x8, 0x4, 0x42}, &(0x7f0000000400), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r8, 0x2, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0}, 0x20) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r8, 0x6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0), 0x0}, 0x20) 4.602757227s ago: executing program 1 (id=549): r0 = openat$incfs(0xffffffffffffff9c, 0x0, 0x20642, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x5421, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000800000000101"], 0x50) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008000}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080000000100000000000000", @ANYRES32, @ANYBLOB="0005c5c3f7a2ac566c5c68409800000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x18) listen(0xffffffffffffffff, 0x0) connect$inet(r4, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001500)={0x34, r8, 0x1, 0x4000, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES={0x8, 0x3, 0xa000000}]}, 0x34}}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000020000004855b3000000000700000018120000", @ANYRESHEX=r1, @ANYBLOB="0000000000000000b703000000000000850000001b000000b7000000000000009500003ef86a2027f7dcde2d5fd70000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r9}, 0x18) 4.602052627s ago: executing program 4 (id=550): r0 = socket$inet6(0xa, 0x3, 0x2) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e24, 0x5, @empty}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x5ac38000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x20040600) unshare(0x22020400) r5 = getpid() r6 = syz_pidfd_open(r5, 0x0) setns(r6, 0x24020000) connect$unix(r3, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000020b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r7}, 0x18) unshare(0x20000600) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x0}, 0x20) syz_mount_image$erofs(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x1000801, &(0x7f0000000140)=ANY=[], 0x2, 0x232, &(0x7f0000000500)="$eJzslbFrFEEUxr+Z3du7BA1YaGFzKQJGMHu7G5U0FrEXhETU8jCTcLrJhcsVSUBIsBHEWvwD7KwtUlnYaWVtoYJgYUobBUdmdvZ2Nrt78bhgk/eDm/vmzbyZN7Nv34IgiFPL1y8/Pz+/ubB8BcAZzKBu7N+dbA635n966dSMfLcx9fjAGmqohgGQMjO6x+zvAXi76AB7ybJSZt6vzb9acxkcM6Z/BxyXjb4LBj+NVWbeAgz3jfnhphycpjthRCzYg268stqJRaCaUDXRaudVLRefiv9wn2HFHFDtwKzxrZ3dR+0Y6CUiFqmoyXSfwlAqkpMBJUM5Mez+dHyLHDesK1DP697TJ/uq7xt7YN1fCI7Q6HkwLBm9gDp832+argit8190s/Wd5LEl7FXHXRSNUSaPL87N5SzTUEJl+HD3iVio055YGH/kkDn1kRdkJqu8XAqOEeGz8U+q4hjdizeLXl5xnYY5qLaIY16Sf9idHbUwOyUuHB68L3p9+29Je/IC5gLtoRfqoj5OxvGtUq/zOct0xSvj4awuCZUpkdQP5gKXrPrkWl+FVn99s7W1szvXWW+viTWxEUXz14OrQXAtaunanLR2uTtS/xq6Pk1a69cqaqXHPGy3+/1euA30e+GgHyWtlUxLb7o/tA/X9Y9j9reU6edFv3jph5Ll92Dmx/W/UrNObgKvCI4gCIIgCIIgCIIgCIIgCKKUX5ZuguHD1KAry3Gj23r4bwAAAP//c8NPrw==") sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xc4, 0x19, 0x1, 0xfffffffe, 0x0, {{@in=@multicast1=0xe0000002, @in=@rand_addr=0x64010100, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}, 0x0, 0x0, 0x0, 0x1}, [@mark={0xc, 0x15, {0x350759, 0x82}}]}, 0xc4}}, 0x2c000010) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = syz_io_uring_setup(0x2d64, &(0x7f0000000100)={0x0, 0xb2fc, 0x8, 0x4, 0x42}, &(0x7f0000000400), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r8, 0x2, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0}, 0x20) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r8, 0x6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0), 0x0}, 0x20) 4.565480827s ago: executing program 3 (id=552): r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000100)='.log\x00', 0x20642, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x5421, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x21c0, 0x103) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008000}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080000000100000000000000", @ANYRES32, @ANYBLOB="0005c5c3f7a2ac566c5c68409800000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) listen(0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001500)={0x34, r7, 0x1, 0x4000, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES={0x8, 0x3, 0xa000000}]}, 0x34}}, 0x0) 4.11611439s ago: executing program 5 (id=553): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2a, 0xc0, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x9e, 0x6, 0x6, 0x7f}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x7, 0x5, 0x3, 0xfffffffffffffffe, 0x45, 0x4, 0xbdb], 0x1, 0x1c4213}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.841493182s ago: executing program 2 (id=554): r0 = syz_clone(0x20300000, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x8802, 0x0, 0x1, 0x0, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r6 = dup(r5) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000002c0), 0x4000, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[], [], 0x6b}}) utime(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={0x9, 0x5}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@array={0x0, 0x0, 0x0, 0x4, 0x3000000, {0x0, 0x9000000}}, @func_proto={0x0, 0x0, 0x0, 0xd, 0x2}]}}, 0xffffffffffffffff, 0x3e, 0xb1, 0x2}, 0x20) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, 0x0, 0x0) ptrace(0x10, r0) sync() 3.737645353s ago: executing program 5 (id=555): r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x140, 0x19, 0x1, 0x0, 0x0, {0x1d, 0xd601, 0x9}, [@nested={0x50, 0x11, 0x0, 0x1, [@typed={0x49, 0x121, 0x0, 0x0, @binary="c9a7befe6f6d645a1a11b81b2c4b101c7510e19fee6bb49f6cc7a2c50fd57c06db1a75df432aa833928a0772ff8f5e9ed32d3b477d35b296674f1fe35663c0d236fd91d7ba"}]}, @nested={0xdc, 0x6, 0x0, 0x1, [@nested={0xd8, 0x75, 0x0, 0x1, [@nested={0x14, 0x105, 0x0, 0x1, [@typed={0x8, 0x22, 0x0, 0x0, @fd=r1}, @typed={0x8, 0x98, 0x0, 0x0, @pid}]}, @nested={0xc0, 0x14c, 0x0, 0x1, [@nested={0xbc, 0xe9, 0x0, 0x1, [@generic="6d978dc10a38e83c78f0d819d591bc751fdf04433d77b5da94a0c9ed722f107c2c62d113095929b58ee16dc7b6bff4709aac40b3ecbab7ca3b581ab6a58afeffc7cfd5721b1449fd69362b449257536737cff4edfcfcda88670692b1ad56a996ac1ce83eb215ca797fa188aa699baaf40b6d8002ad767c15bf8a923b3cab1f62f54062f8b002269e4ab4ae235ed26e613e698c08924ecac802fe81944cf9dfacf4cf63002706d3c1ec975d1fec62a40db12a5153ea672820"]}]}]}]}]}, 0x140}, 0x1, 0x0, 0x0, 0x5}, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000100)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x33, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7f1300000000c8cb5df954de67590100015100000000", @ANYRES32=0x0, @ANYBLOB="00000400a800010008001f0005000000"], 0x50}}, 0x40080) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10, 0xa8}, [@ldst={0x5, 0x2, 0x2}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x8, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) connect$can_bcm(r0, &(0x7f00000005c0), 0x10) read(r0, &(0x7f0000000000)=""/192, 0xc0) setsockopt$sock_int(r0, 0x1, 0x1d, &(0x7f0000000280)=0x2, 0x4) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x77359400}}, 0x0) 3.247697077s ago: executing program 3 (id=565): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2a, 0xc0, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x9e, 0x6, 0x6, 0x7f}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x7, 0x5, 0x3, 0xfffffffffffffffe, 0x45, 0x4, 0xbdb], 0x1, 0x1c4213}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.956918599s ago: executing program 2 (id=556): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000b80)=ANY=[@ANYBLOB="8cff7cf9"], 0x10) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x8800, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe91, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x40000000000001, r3, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0xe, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x2, 0x0, 0x0, 0xc50e}}, &(0x7f0000000080)='syzkaller\x00'}, 0x94) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102392, 0x18ff8) sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000800)={&(0x7f0000000240)={0x20, 0x1, 0xa, 0x600, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x1) timer_settime(0x0, 0x1, 0x0, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000980)={0x0, @multicast2, @broadcast}, &(0x7f0000000900)=0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)=@getchain={0x34, 0x66, 0x0, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x8, 0xb}, {0x8, 0xa}, {0xffe0, 0x10}}, [{0x8, 0xb, 0x3bb8}, {0x8, 0xb, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x24054}, 0x4000) ioprio_get$pid(0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000006c0)={&(0x7f0000000780)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, &(0x7f0000000600)=""/152, 0x26, 0x98, 0x1}, 0x28) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r6 = io_uring_setup(0x510d, &(0x7f0000000100)={0x0, 0x8591, 0x10, 0x3, 0x1f5}) io_uring_register$IORING_UNREGISTER_BUFFERS(r6, 0x1, 0x2000000, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000a40), 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x8002, 0x9, @private1={0xfc, 0x1, '\x00', 0x1}, 0xe81}, 0x1c) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000140)={[{}, {@nodioread_nolock}, {@block_validity}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}]}, 0x1, 0x57c, &(0x7f0000000280)="$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") renameat2(0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file3\x00', 0x4) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) 2.956606869s ago: executing program 3 (id=557): r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x3c, 0x19, 0x1, 0x0, 0x0, {0x1d, 0xd601, 0x9}, [@nested={0x4, 0x11}, @nested={0x24, 0x6, 0x0, 0x1, [@nested={0x20, 0x75, 0x0, 0x1, [@nested={0x14, 0x105, 0x0, 0x1, [@typed={0x8, 0x22, 0x0, 0x0, @fd=r1}, @typed={0x8, 0x98, 0x0, 0x0, @pid}]}, @nested={0x8, 0x14c, 0x0, 0x1, [@nested={0x4, 0xe9, 0x0, 0x1, [@generic]}]}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x5}, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000100)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x33, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) connect$can_bcm(r0, &(0x7f00000005c0), 0x10) read(r0, &(0x7f0000000000)=""/192, 0xc0) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) 2.955946079s ago: executing program 1 (id=567): r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000100)='.log\x00', 0x20642, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x5421, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x50) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008000}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080000000100000000000000", @ANYRES32, @ANYBLOB="0005c5c3f7a2ac566c5c68409800000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x18) listen(0xffffffffffffffff, 0x0) connect$inet(r4, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001500)={0x34, r8, 0x1, 0x4000, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES={0x8, 0x3, 0xa000000}]}, 0x34}}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000020000004855b3000000000700000018120000", @ANYRESHEX=r1, @ANYBLOB="0000000000000000b703000000000000850000001b000000b7000000000000009500003ef86a2027f7dcde2d5fd70000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r9}, 0x18) 2.542001742s ago: executing program 2 (id=558): r0 = socket$inet6(0xa, 0x3, 0x2) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e24, 0x5, @empty}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x5ac38000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x22020400) r5 = getpid() r6 = syz_pidfd_open(r5, 0x0) setns(r6, 0x24020000) connect$unix(r3, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000020b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r7}, 0x18) unshare(0x20000600) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x0}, 0x20) syz_mount_image$erofs(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x1000801, &(0x7f0000000140)=ANY=[], 0x2, 0x232, &(0x7f0000000500)="$eJzslbFrFEEUxr+Z3du7BA1YaGFzKQJGMHu7G5U0FrEXhETU8jCTcLrJhcsVSUBIsBHEWvwD7KwtUlnYaWVtoYJgYUobBUdmdvZ2Nrt78bhgk/eDm/vmzbyZN7Nv34IgiFPL1y8/Pz+/ubB8BcAZzKBu7N+dbA635n966dSMfLcx9fjAGmqohgGQMjO6x+zvAXi76AB7ybJSZt6vzb9acxkcM6Z/BxyXjb4LBj+NVWbeAgz3jfnhphycpjthRCzYg268stqJRaCaUDXRaudVLRefiv9wn2HFHFDtwKzxrZ3dR+0Y6CUiFqmoyXSfwlAqkpMBJUM5Mez+dHyLHDesK1DP697TJ/uq7xt7YN1fCI7Q6HkwLBm9gDp832+argit8190s/Wd5LEl7FXHXRSNUSaPL87N5SzTUEJl+HD3iVio055YGH/kkDn1kRdkJqu8XAqOEeGz8U+q4hjdizeLXl5xnYY5qLaIY16Sf9idHbUwOyUuHB68L3p9+29Je/IC5gLtoRfqoj5OxvGtUq/zOct0xSvj4awuCZUpkdQP5gKXrPrkWl+FVn99s7W1szvXWW+viTWxEUXz14OrQXAtaunanLR2uTtS/xq6Pk1a69cqaqXHPGy3+/1euA30e+GgHyWtlUxLb7o/tA/X9Y9j9reU6edFv3jph5Ll92Dmx/W/UrNObgKvCI4gCIIgCIIgCIIgCIIgCKKUX5ZuguHD1KAry3Gj23r4bwAAAP//c8NPrw==") sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xc4, 0x19, 0x1, 0xfffffffe, 0x0, {{@in=@multicast1=0xe0000002, @in=@rand_addr=0x64010100, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}, 0x0, 0x0, 0x0, 0x1}, [@mark={0xc, 0x15, {0x350759, 0x82}}]}, 0xc4}}, 0x2c000010) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = syz_io_uring_setup(0x2d64, &(0x7f0000000100)={0x0, 0xb2fc, 0x8, 0x4, 0x42}, &(0x7f0000000400), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r8, 0x2, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0}, 0x20) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r8, 0x6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0), 0x0}, 0x20) 2.445680282s ago: executing program 5 (id=559): syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB='discard,nfs,dots,check=strict,uid=', @ANYRESHEX=0x0, @ANYBLOB="2c003a579da66b5c8b1eba83198de0855eeffdd30d734e2f8ae9290d5398a81393ef4b30b7050b551c2ef52a88c993b032d62634fe7877f07d881c98a580d3fdfeeedf901e5b45e43a5eeae8a314fd67dce3592212b2f38b3405da772948598507a55f7ebd1097370eb7412c24af39afb14d6de035be4de91b989e08177c2d75b64b8dd41197d24341d36a15980dd2a69888d9"], 0x1, 0x22d, &(0x7f0000000300)="$eJzs3b2KE1EYBuDP3exu2MatxWLAxiqodzDICuKAEJlCKwdWm10RZpvRKpfhNXhJXsZW6UbMhPwZbTQes/M8EOaFl8B3mpwU5yRv73+4vPh4/b799iWGwywGEZOYRpzFQRxG5878eTDLx7FqEgDAvhmPqzz1DOxWXefVUUSc/NSUX5MMBAAAAAAAAAAAwB9z/h8A+sf5/9uvrvPqdP79bZ3z/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEA607a92/7mlXo+AODvs/8DQP/Y/wGgf+z/ANA/r16/eZEXxfk4y4YRN5OmbMru2fXPnhfnj7KZs+W7bpqmPFz0j7s+W++P4nTeP9naH8fDB13/o3v6stjoT+Ji98sHAAAAAAAAAAAAAAAAAACA/8IoW9h6v380+lXfpZXfB9i4vz+Ie4N/tgwAAAAAAAAAAAAAAAAAAADYa9efPl9WV1fvakEQhEVI/ckEAAAAAAAAAAAAAAAAAAD9s7z0m3oSAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEhn+f//uwup1wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD0w/cAAAD//wu+k9A=") fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r2 = getpid() getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000000)=0x8000, &(0x7f0000000380)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000480)=@abs={0x0, 0x0, 0x8004e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffff05850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r5}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="180800000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100000001039500000000000000b509020002000000739a00fe00000000b509000000000000c39a04fe51000000bf8700000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_dev$evdev(&(0x7f0000000040), 0x4ee97ffd, 0x8e00) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x50) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'ip_vti0\x00'}) 950.174343ms ago: executing program 5 (id=560): bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000040), &(0x7f0000000280)='%pS \x00'}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00'}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000180)='percpu_create_chunk\x00', r2}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc00000000000000", @ANYRES32], 0x50) 949.523593ms ago: executing program 5 (id=561): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000009007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x12, 0x2, 0x8, 0xd0eb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x3) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='hrtimer_init\x00', r4}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) io_setup(0x3, &(0x7f0000000280)=0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) io_submit(r5, 0x0, &(0x7f0000000700)) socket$inet_udp(0x2, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) write$selinux_access(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a6c645f736f5f7420704a122f7362696e2f6468636c69656e742030"], 0x41) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) lstat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)) syz_usb_connect$hid(0x2, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x1000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) 948.191823ms ago: executing program 2 (id=562): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000280)={'wg2\x00'}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r1}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'wg2\x00', @multicast}) 897.362594ms ago: executing program 3 (id=563): r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x140, 0x19, 0x1, 0x0, 0x0, {0x1d, 0xd601, 0x9}, [@nested={0x50, 0x11, 0x0, 0x1, [@typed={0x49, 0x121, 0x0, 0x0, @binary="c9a7befe6f6d645a1a11b81b2c4b101c7510e19fee6bb49f6cc7a2c50fd57c06db1a75df432aa833928a0772ff8f5e9ed32d3b477d35b296674f1fe35663c0d236fd91d7ba"}]}, @nested={0xdc, 0x6, 0x0, 0x1, [@nested={0xd8, 0x75, 0x0, 0x1, [@nested={0x14, 0x105, 0x0, 0x1, [@typed={0x8, 0x22, 0x0, 0x0, @fd=r1}, @typed={0x8, 0x98, 0x0, 0x0, @pid}]}, @nested={0xc0, 0x14c, 0x0, 0x1, [@nested={0xbc, 0xe9, 0x0, 0x1, [@generic="6d978dc10a38e83c78f0d819d591bc751fdf04433d77b5da94a0c9ed722f107c2c62d113095929b58ee16dc7b6bff4709aac40b3ecbab7ca3b581ab6a58afeffc7cfd5721b1449fd69362b449257536737cff4edfcfcda88670692b1ad56a996ac1ce83eb215ca797fa188aa699baaf40b6d8002ad767c15bf8a923b3cab1f62f54062f8b002269e4ab4ae235ed26e613e698c08924ecac802fe81944cf9dfacf4cf63002706d3c1ec975d1fec62a40db12a5153ea672820"]}]}]}]}]}, 0x140}, 0x1, 0x0, 0x0, 0x5}, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000100)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x33, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7f1300000000c8cb5df954de67590100015100000000", @ANYRES32=0x0, @ANYBLOB="00000400a800010008001f0005000000"], 0x50}}, 0x40080) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10, 0xa8}, [@ldst={0x5, 0x2, 0x2}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x8, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) connect$can_bcm(r0, &(0x7f00000005c0), 0x10) read(r0, &(0x7f0000000000)=""/192, 0xc0) setsockopt$sock_int(r0, 0x1, 0x1d, &(0x7f0000000280)=0x2, 0x4) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x77359400}}, 0x0) 875.308714ms ago: executing program 2 (id=564): syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB='discard,nfs,dots,check=strict,uid=', @ANYRESHEX=0x0, @ANYBLOB="2c003a579da66b5c8b1eba83198de0855eeffdd30d734e2f8ae9290d5398a81393ef4b30b7050b551c2ef52a88c993b032d62634fe7877f07d881c98a580d3fdfeeedf901e5b45e43a5eeae8a314fd67dce3592212b2f38b3405da772948598507a55f7ebd1097370eb7412c24af39afb14d6de035be4de91b989e08177c2d75b64b8dd41197d24341d36a15980dd2a69888d9"], 0x1, 0x22d, &(0x7f0000000300)="$eJzs3b2KE1EYBuDP3exu2MatxWLAxiqodzDICuKAEJlCKwdWm10RZpvRKpfhNXhJXsZW6UbMhPwZbTQes/M8EOaFl8B3mpwU5yRv73+4vPh4/b799iWGwywGEZOYRpzFQRxG5878eTDLx7FqEgDAvhmPqzz1DOxWXefVUUSc/NSUX5MMBAAAAAAAAAAAwB9z/h8A+sf5/9uvrvPqdP79bZ3z/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEA607a92/7mlXo+AODvs/8DQP/Y/wGgf+z/ANA/r16/eZEXxfk4y4YRN5OmbMru2fXPnhfnj7KZs+W7bpqmPFz0j7s+W++P4nTeP9naH8fDB13/o3v6stjoT+Ji98sHAAAAAAAAAAAAAAAAAACA/8IoW9h6v380+lXfpZXfB9i4vz+Ie4N/tgwAAAAAAAAAAAAAAAAAAADYa9efPl9WV1fvakEQhEVI/ckEAAAAAAAAAAAAAAAAAAD9s7z0m3oSAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEhn+f//uwup1wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD0w/cAAAD//wu+k9A=") fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = getpid() getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000000)=0x8000, &(0x7f0000000380)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000480)=@abs={0x0, 0x0, 0x8004e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffff05850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_dev$evdev(&(0x7f0000000040), 0x4ee97ffd, 0x8e00) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x50) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'ip_vti0\x00'}) 748.245725ms ago: executing program 1 (id=566): accept$packet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x2, 0x300) socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x8910, &(0x7f0000000000)={'ip6_vti0\x00', 0x0}) ioctl$USBDEVFS_CLAIMINTERFACE(r2, 0x8004550f, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x6000003, 0x10, r0, 0xd05f2000) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x4, 0xfffffffffffffffd, 0x9323, 0xfffffffffffffffe, 0x7ff, 0x2}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x1, 0xb, 0x1007fffffff, 0x2}, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x110) keyctl$chown(0x4, 0x0, 0xee01, 0x0) 385.151327ms ago: executing program 4 (id=568): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2a, 0xc0, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x9e, 0x6, 0x6, 0x7f}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x7, 0x5, 0x3, 0xfffffffffffffffe, 0x45, 0x4, 0xbdb], 0x1, 0x1c4213}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 232.867808ms ago: executing program 4 (id=569): shutdown(0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="07000000040000000802000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000021000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYRES32], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r2}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'wg2\x00', @multicast}) 39.68285ms ago: executing program 3 (id=570): r0 = syz_clone(0x20300000, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x8802, 0x0, 0x1, 0x0, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r6 = dup(r5) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000002c0), 0x4000, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[], [], 0x6b}}) utime(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={0x9, 0x5}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@array={0x0, 0x0, 0x0, 0x4, 0x3000000, {0x0, 0x9000000}}, @func_proto={0x0, 0x0, 0x0, 0xd, 0x2}]}}, 0xffffffffffffffff, 0x3e, 0xb1, 0x2}, 0x20) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, 0x0, 0x0) ptrace(0x10, r0) sync() 39.38445ms ago: executing program 4 (id=571): r0 = socket$inet6(0xa, 0x3, 0x2) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e24, 0x5, @empty}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x5ac38000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x20040600) unshare(0x22020400) getpid() setns(0xffffffffffffffff, 0x24020000) connect$unix(r3, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000020b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r5}, 0x18) unshare(0x20000600) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x0}, 0x20) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xc4, 0x19, 0x1, 0xfffffffe, 0x0, {{@in=@multicast1=0xe0000002, @in=@rand_addr=0x64010100, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}, 0x0, 0x0, 0x0, 0x1}, [@mark={0xc, 0x15, {0x350759, 0x82}}]}, 0xc4}}, 0x2c000010) 11.03819ms ago: executing program 2 (id=572): r0 = syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4800, 0x0, 0x0, 0x0, &(0x7f0000000240)) chdir(0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x192) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000580)='./bus\x00', 0x88, &(0x7f0000000040)=ANY=[@ANYRESOCT, @ANYRES32, @ANYRESOCT=0x0, @ANYRESDEC=0x0, @ANYRESOCT=0x0, @ANYRES8=0x0], 0x3, 0x24a, &(0x7f0000000840)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRESOCT=r1, @ANYRESDEC=r0], 0xf8}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000072c42572f64a264410b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7800000000000000000000000050019000000000028001a"], 0x120}}, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000380)='./bus\x00', 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='nodiscard,io_bits=00000000000000000101,acl,alloc_mode=reuse,checkpoint=disable,nodiscard,mode=adaptive,noquota,fsync_mode=posix,user_xattr,noinline_dentry,mode=adaptive,inline_xattr_size=0x0000000000000001,prjjquota=fsync_mode=posix,fowner=', @ANYRESDEC, @ANYBLOB=',fowner=', @ANYRESDEC=0x0, @ANYBLOB="e9b949a1ac64ddc0832790bbee15512c3f6112df89643a2e258cd317512d56800875e7bc2ab89e0f0fbdd08819a0001c6790bb626092997e06380ec443316b2ae6ee50b6f9d9715acf772fbf7569aa7a06a68633c0617c87ec602cc68151d6b6717a2f4f7f2de182bdd76e2fb3c32ad8a64e5e78ebb4b0"], 0x1, 0x5505, &(0x7f0000002480)="$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") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x2000000000000228, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) r8 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) write$FUSE_NOTIFY_POLL(r8, &(0x7f0000000240)={0x18, 0x1, 0x0, {0xd3ce}}, 0x18) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000300)={&(0x7f00008a0000/0x3000)=nil, &(0x7f0000000000/0xc00000)=nil, &(0x7f00006f1000/0x3000)=nil, &(0x7f00005da000/0x3000)=nil, &(0x7f0000b43000/0x4000)=nil, &(0x7f0000581000/0x2000)=nil, &(0x7f00001d1000/0x4000)=nil, &(0x7f00007e6000/0x3000)=nil, &(0x7f00006a0000/0x4000)=nil, &(0x7f00006bd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0, r7}, 0x68) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@index_on}]}) openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x42, 0x8) pipe(&(0x7f0000000080)={0xffffffffffffffff}) tee(r9, 0xffffffffffffffff, 0xf3a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000003"], 0x48) 0s ago: executing program 5 (id=573): rt_sigprocmask(0x0, &(0x7f00000000c0)={[0xfffffeffffffffff]}, 0x0, 0x8) r0 = gettid() bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{0x1}, &(0x7f0000000140), &(0x7f0000000180)}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000180)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1a, 0xc, &(0x7f0000000200)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000000)='syzkaller\x00', 0x400, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2000}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1a, 0xc, &(0x7f0000000200)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000000)='syzkaller\x00', 0x400, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2000}, 0x94) timer_create(0x1, &(0x7f0000000800)={0x0, 0x12, 0x4, @tid=r0}, &(0x7f0000000380)=0x0) timer_settime(r2, 0x1, &(0x7f0000000080)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) gettid() (async) r3 = gettid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) tkill(r3, 0x16) kernel console output (not intermixed with test programs): [ T623] netlink: 12 bytes leftover after parsing attributes in process `syz.0.74'. [ 42.125353][ T611] loop4: detected capacity change from 0 to 40427 [ 42.154337][ T611] F2FS-fs (loop4): Fix alignment : done, start(4096) end(16896) block(12288) [ 42.183444][ T611] F2FS-fs (loop4): invalid crc value [ 42.190510][ T629] loop2: detected capacity change from 0 to 256 [ 42.198122][ T611] F2FS-fs (loop4): Current segment's next free block offset is inconsistent with bitmap, logtype:5, segno:2, type:0, next_blkoff:0, blkofs:1 [ 42.219732][ T611] F2FS-fs (loop4): Failed to initialize F2FS segment manager (-117) [ 42.745134][ T641] loop0: detected capacity change from 0 to 40427 [ 43.174368][ T641] F2FS-fs (loop0): Fix alignment : internally, start(4096) end(16896) block(12288) [ 43.187339][ T641] F2FS-fs (loop0): invalid crc value [ 43.214748][ T641] F2FS-fs (loop0): Found nat_bits in checkpoint [ 43.229279][ T644] loop1: detected capacity change from 0 to 512 [ 43.245961][ T641] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 43.261705][ T644] EXT4-fs: Ignoring removed nomblk_io_submit option [ 43.295644][ T644] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 43.303908][ T644] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e128, mo2=0002] [ 43.312477][ T644] EXT4-fs (loop1): orphan cleanup on readonly fs [ 43.318866][ T644] EXT4-fs warning (device loop1): ext4_enable_quotas:7055: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 43.358924][ T644] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 43.400062][ T644] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.81: bg 0: block 40: padding at end of block bitmap is not set [ 43.663310][ T644] EXT4-fs (loop1): Remounting filesystem read-only [ 43.670079][ T644] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6165: Corrupt filesystem [ 43.681420][ T644] EXT4-fs (loop1): Remounting filesystem read-only [ 43.688043][ T644] EXT4-fs (loop1): 1 truncate cleaned up [ 43.693778][ T644] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 43.724694][ T644] EXT4-fs (loop1): shut down requested (1) [ 43.731108][ T644] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=16 [ 43.740020][ T644] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=16 [ 43.837114][ T661] loop3: detected capacity change from 0 to 512 [ 43.860268][ T285] EXT4-fs (loop1): unmounting filesystem. [ 44.438990][ T670] syz.0.86[670] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 44.439060][ T670] syz.0.86[670] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 44.451977][ T670] netlink: 4 bytes leftover after parsing attributes in process `syz.0.86'. [ 45.005838][ T675] loop3: detected capacity change from 0 to 256 [ 45.091287][ T670] syz.0.86 (670) used greatest stack depth: 20256 bytes left [ 45.179168][ T680] input: syz0 as /devices/virtual/input/input5 [ 45.192206][ T683] binder: BC_ATTEMPT_ACQUIRE not supported [ 45.215295][ T682] input: syz0 as /devices/virtual/input/input6 [ 45.221761][ T683] binder: 677:683 ioctl c0306201 2000000003c0 returned -22 [ 45.232326][ T684] device wg2 entered promiscuous mode [ 45.259588][ T682] device wg2 entered promiscuous mode [ 45.326606][ T688] netlink: 4 bytes leftover after parsing attributes in process `syz.3.93'. [ 45.349616][ T688] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 45.356874][ T688] IPv6: NLM_F_CREATE should be set when creating new route [ 45.415256][ T696] loop2: detected capacity change from 0 to 1024 [ 45.417592][ T697] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 45.428861][ T697] IPv6: NLM_F_CREATE should be set when creating new route [ 45.436650][ T696] EXT4-fs: Ignoring removed i_version option [ 45.454089][ T696] EXT4-fs (loop2): Test dummy encryption mode enabled [ 45.476013][ T692] IPv6: ADDRCONF(NETDEV_CHANGE): ipip0: link becomes ready [ 45.494354][ T696] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 45.539261][ T696] fscrypt: AES-256-XTS using blk-crypto-fallback [ 45.550657][ T28] kauditd_printk_skb: 69 callbacks suppressed [ 45.550669][ T28] audit: type=1400 audit(1762275236.065:467): avc: denied { read append open } for pid=695 comm="syz.2.96" path="/20/file0/cpuset.effective_mems" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 45.617547][ T28] audit: type=1400 audit(1762275236.115:468): avc: denied { map } for pid=695 comm="syz.2.96" path="/20/file0/cpuset.effective_mems" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 45.621167][ T696] bridge0: port 3(vlan2) entered blocking state [ 45.686889][ T28] audit: type=1400 audit(1762275236.115:469): avc: denied { write } for pid=695 comm="syz.2.96" path="/20/file0/cpuset.effective_mems" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 45.709888][ T696] bridge0: port 3(vlan2) entered disabled state [ 45.821901][ T28] audit: type=1400 audit(1762275236.335:470): avc: denied { connect } for pid=704 comm="syz.3.97" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 45.823655][ T286] EXT4-fs (loop2): unmounting filesystem. [ 46.165426][ T724] netlink: 12 bytes leftover after parsing attributes in process `syz.4.101'. [ 46.209304][ T724] netlink: 12 bytes leftover after parsing attributes in process `syz.4.101'. [ 46.796948][ T734] capability: warning: `syz.1.103' uses 32-bit capabilities (legacy support in use) [ 46.813102][ T28] audit: type=1326 audit(1762275237.125:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=725 comm="syz.4.102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c2bd8f6c9 code=0x7ffc0000 [ 47.316116][ T736] netlink: 20 bytes leftover after parsing attributes in process `syz.4.104'. [ 47.346146][ T28] audit: type=1326 audit(1762275237.125:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=725 comm="syz.4.102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c2bd8f6c9 code=0x7ffc0000 [ 47.395728][ T741] netlink: 12 bytes leftover after parsing attributes in process `syz.0.106'. [ 47.405901][ T28] audit: type=1326 audit(1762275237.125:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=725 comm="syz.4.102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f6c2bd8f6c9 code=0x7ffc0000 [ 47.431706][ T28] audit: type=1326 audit(1762275237.125:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=725 comm="syz.4.102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c2bd8f6c9 code=0x7ffc0000 [ 47.455625][ T28] audit: type=1326 audit(1762275237.125:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=725 comm="syz.4.102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c2bd8f6c9 code=0x7ffc0000 [ 47.496596][ T28] audit: type=1326 audit(1762275237.135:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=725 comm="syz.4.102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=189 compat=0 ip=0x7f6c2bd8f6c9 code=0x7ffc0000 [ 47.576415][ T748] mmap: syz.0.108 (748) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 48.838420][ T767] FAULT_INJECTION: forcing a failure. [ 48.838420][ T767] name failslab, interval 1, probability 0, space 0, times 0 [ 48.851076][ T767] CPU: 0 PID: 767 Comm: syz.2.112 Not tainted syzkaller #0 [ 48.858268][ T767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 48.868314][ T767] Call Trace: [ 48.871592][ T767] [ 48.874514][ T767] __dump_stack+0x21/0x24 [ 48.878849][ T767] dump_stack_lvl+0xee/0x150 [ 48.883429][ T767] ? __cfi_dump_stack_lvl+0x8/0x8 [ 48.888446][ T767] ? __cfi_handle_mm_fault+0x10/0x10 [ 48.893729][ T767] ? down_read_trylock+0x273/0x640 [ 48.898838][ T767] dump_stack+0x15/0x24 [ 48.902983][ T767] should_fail_ex+0x3d4/0x520 [ 48.907654][ T767] ? io_submit_one+0x11c/0x1670 [ 48.912499][ T767] __should_failslab+0xac/0xf0 [ 48.917259][ T767] should_failslab+0x9/0x20 [ 48.921753][ T767] kmem_cache_alloc+0x3b/0x330 [ 48.926509][ T767] ? __kasan_check_write+0x14/0x20 [ 48.931611][ T767] io_submit_one+0x11c/0x1670 [ 48.936285][ T767] ? irqentry_exit+0x37/0x40 [ 48.940867][ T767] ? exc_page_fault+0x5e/0xb0 [ 48.945537][ T767] ? lookup_ioctx+0x2b0/0x2b0 [ 48.950206][ T767] ? asm_exc_page_fault+0x27/0x30 [ 48.955229][ T767] ? __get_user_4+0x1c/0x30 [ 48.959720][ T767] ? lookup_ioctx+0x1ab/0x2b0 [ 48.964389][ T767] __se_sys_io_submit+0x16e/0x3d0 [ 48.969404][ T767] ? __x64_sys_io_submit+0x90/0x90 [ 48.974507][ T767] ? ksys_write+0x1eb/0x240 [ 48.978999][ T767] ? __cfi_ksys_write+0x10/0x10 [ 48.983836][ T767] ? debug_smp_processor_id+0x17/0x20 [ 48.989209][ T767] __x64_sys_io_submit+0x7b/0x90 [ 48.994138][ T767] x64_sys_call+0x81d/0x9a0 [ 48.998632][ T767] do_syscall_64+0x4c/0xa0 [ 49.003039][ T767] ? clear_bhb_loop+0x30/0x80 [ 49.007709][ T767] ? clear_bhb_loop+0x30/0x80 [ 49.012380][ T767] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 49.018270][ T767] RIP: 0033:0x7f5b7ed8f6c9 [ 49.022677][ T767] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 49.042274][ T767] RSP: 002b:00007f5b7fb50038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 49.050689][ T767] RAX: ffffffffffffffda RBX: 00007f5b7efe6180 RCX: 00007f5b7ed8f6c9 [ 49.058656][ T767] RDX: 0000200000000400 RSI: 0000000000000002 RDI: 00007f5b7fb2f000 [ 49.066618][ T767] RBP: 00007f5b7fb50090 R08: 0000000000000000 R09: 0000000000000000 [ 49.074577][ T767] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 49.082540][ T767] R13: 00007f5b7efe6218 R14: 00007f5b7efe6180 R15: 00007ffcfbc74f38 [ 49.090509][ T767] [ 49.228856][ T776] Zero length message leads to an empty skb [ 49.291331][ T775] loop0: detected capacity change from 0 to 512 [ 49.322936][ T775] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 49.955193][ T775] ext4 filesystem being mounted at /28/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.978563][ T284] EXT4-fs (loop0): unmounting filesystem. [ 49.983960][ T783] loop4: detected capacity change from 0 to 256 [ 50.004243][ T783] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xd22393c8, utbl_chksum : 0xe619d30d) [ 50.092441][ T787] syz.3.116[787] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 50.092528][ T787] syz.3.116[787] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 50.835943][ T792] loop2: detected capacity change from 0 to 4096 [ 50.870738][ T792] EXT4-fs (loop2): Test dummy encryption mode enabled [ 50.922831][ T796] xt_bpf: check failed: parse error [ 50.974653][ T792] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 50.984982][ T796] loop4: detected capacity change from 0 to 128 [ 50.988454][ T800] loop0: detected capacity change from 0 to 4096 [ 50.996344][ T796] FAT-fs (loop4): Unrecognized mount option "184467440737095516151844674407370955161518446744073709551615" or missing value [ 51.033577][ T800] EXT4-fs (loop0): Test dummy encryption mode enabled [ 51.041027][ T28] kauditd_printk_skb: 80 callbacks suppressed [ 51.041041][ T28] audit: type=1400 audit(1762275241.525:557): avc: denied { write } for pid=789 comm="syz.1.120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 51.073491][ T800] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 51.912045][ T805] netlink: 12 bytes leftover after parsing attributes in process `syz.3.124'. [ 53.334837][ T28] audit: type=1400 audit(1762275243.055:558): avc: denied { read write } for pid=807 comm="syz.1.125" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 53.335187][ T286] EXT4-fs (loop2): unmounting filesystem. [ 53.364401][ T28] audit: type=1400 audit(1762275243.055:559): avc: denied { open } for pid=807 comm="syz.1.125" path="/dev/raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 53.413707][ T28] audit: type=1400 audit(1762275243.055:560): avc: denied { ioctl } for pid=807 comm="syz.1.125" path="/dev/raw-gadget" dev="devtmpfs" ino=258 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 53.530266][ T822] 9pnet_fd: Insufficient options for proto=fd [ 55.052050][ T28] audit: type=1400 audit(1762275245.565:561): avc: denied { bind } for pid=831 comm="syz.2.132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 55.082663][ T284] EXT4-fs (loop0): unmounting filesystem. [ 55.091748][ T832] netlink: 20 bytes leftover after parsing attributes in process `syz.2.132'. [ 55.094829][ T838] loop4: detected capacity change from 0 to 512 [ 55.107027][ T835] SELinux: policydb string length 0 does not match expected length 8 [ 55.119974][ T835] SELinux: failed to load policy [ 56.725085][ T844] syz.3.134[844] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 56.725287][ T844] syz.3.134[844] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 56.739477][ T844] loop3: detected capacity change from 0 to 16 [ 56.861663][ T835] loop1: detected capacity change from 0 to 1024 [ 56.900619][ T844] erofs: (device loop3): mounted with root inode @ nid 36. [ 57.131534][ T28] audit: type=1400 audit(1762275245.585:562): avc: denied { load_policy } for pid=834 comm="syz.1.133" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 57.168131][ T835] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 57.208764][ T285] EXT4-fs (loop1): unmounting filesystem. [ 57.266205][ T28] audit: type=1400 audit(1762275245.595:563): avc: denied { write } for pid=831 comm="syz.2.132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 57.399566][ T298] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 57.413303][ T28] audit: type=1400 audit(1762275245.635:564): avc: denied { write } for pid=834 comm="syz.1.133" path="socket:[17623]" dev="sockfs" ino=17623 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 57.437760][ T28] audit: type=1400 audit(1762275245.725:565): avc: denied { read } for pid=834 comm="syz.1.133" name="msr" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 57.461051][ T28] audit: type=1400 audit(1762275245.725:566): avc: denied { open } for pid=834 comm="syz.1.133" path="/dev/cpu/0/msr" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 57.485154][ T28] audit: type=1400 audit(1762275247.685:567): avc: denied { remove_name } for pid=834 comm="syz.1.133" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 57.508241][ T28] audit: type=1400 audit(1762275247.685:568): avc: denied { rename } for pid=834 comm="syz.1.133" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 57.530925][ T28] audit: type=1400 audit(1762275247.685:569): avc: denied { unlink } for pid=834 comm="syz.1.133" name="file3" dev="loop1" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 57.553467][ T28] audit: type=1400 audit(1762275247.685:570): avc: denied { read } for pid=834 comm="syz.1.133" name="file1" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 57.578435][ T861] netlink: 'syz.0.131': attribute type 27 has an invalid length. [ 57.587491][ T28] audit: type=1400 audit(1762275247.685:571): avc: denied { open } for pid=834 comm="syz.1.133" path="/23/file1/file1" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 57.733546][ T861] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.740789][ T861] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.772068][ T861] device wg2 left promiscuous mode [ 58.062535][ T866] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 58.163376][ T866] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.170494][ T866] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.903032][ T866] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.910138][ T866] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.107096][ T883] FAULT_INJECTION: forcing a failure. [ 59.107096][ T883] name failslab, interval 1, probability 0, space 0, times 0 [ 59.119830][ T883] CPU: 1 PID: 883 Comm: syz.1.142 Not tainted syzkaller #0 [ 59.127028][ T883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 59.137088][ T883] Call Trace: [ 59.140357][ T883] [ 59.143280][ T883] __dump_stack+0x21/0x24 [ 59.147611][ T883] dump_stack_lvl+0xee/0x150 [ 59.152211][ T883] ? __cfi_dump_stack_lvl+0x8/0x8 [ 59.157237][ T883] ? copy_from_user_nofault+0xe3/0x140 [ 59.162696][ T883] dump_stack+0x15/0x24 [ 59.166842][ T883] should_fail_ex+0x3d4/0x520 [ 59.171516][ T883] __should_failslab+0xac/0xf0 [ 59.176277][ T883] ? alloc_pipe_info+0xe7/0x4b0 [ 59.181133][ T883] should_failslab+0x9/0x20 [ 59.185637][ T883] __kmem_cache_alloc_node+0x3d/0x2c0 [ 59.191013][ T883] ? sysvec_reschedule_ipi+0x78/0x80 [ 59.194277][ T866] device veth0_vlan left promiscuous mode [ 59.196297][ T883] ? alloc_pipe_info+0xe7/0x4b0 [ 59.196323][ T883] kmalloc_trace+0x29/0xb0 [ 59.211244][ T883] alloc_pipe_info+0xe7/0x4b0 [ 59.215924][ T883] splice_direct_to_actor+0x956/0xb10 [ 59.220153][ T866] device veth0_vlan entered promiscuous mode [ 59.221304][ T883] ? selinux_file_permission+0x2a5/0x510 [ 59.221329][ T883] ? fsnotify_perm+0x67/0x5b0 [ 59.237538][ T883] ? security_file_permission+0x8a/0xb0 [ 59.243093][ T883] ? __cfi_direct_splice_actor+0x10/0x10 [ 59.248732][ T883] ? __cfi_splice_direct_to_actor+0x10/0x10 [ 59.254628][ T883] ? security_file_permission+0x94/0xb0 [ 59.256124][ T866] IPv6: ADDRCONF(NETDEV_CHANGE): ipip0: link becomes ready [ 59.260175][ T883] ? rw_verify_area+0xa7/0x1c0 [ 59.260201][ T883] do_splice_direct+0x1b3/0x2c0 [ 59.260221][ T883] ? avc_policy_seqno+0x1b/0x70 [ 59.281810][ T883] ? __cfi_do_splice_direct+0x10/0x10 [ 59.286747][ T865] loop3: detected capacity change from 0 to 40427 [ 59.287186][ T883] ? security_file_permission+0x94/0xb0 [ 59.299111][ T883] do_sendfile+0x5c6/0xeb0 [ 59.300051][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 59.303530][ T883] ? _raw_spin_unlock+0x4c/0x70 [ 59.315700][ T883] ? __cfi_push_rt_tasks+0x10/0x10 [ 59.320900][ T883] ? raw_irqentry_exit_cond_resched+0x29/0x30 [ 59.326958][ T883] ? do_preadv+0x330/0x330 [ 59.331359][ T883] ? __x64_sys_sendfile64+0x17d/0x1f0 [ 59.336720][ T883] __x64_sys_sendfile64+0x18f/0x1f0 [ 59.341905][ T883] ? __cfi___x64_sys_sendfile64+0x10/0x10 [ 59.347603][ T883] ? fpregs_restore_userregs+0x128/0x260 [ 59.353216][ T883] ? switch_fpu_return+0xe/0x10 [ 59.358049][ T883] x64_sys_call+0x62c/0x9a0 [ 59.362533][ T883] do_syscall_64+0x4c/0xa0 [ 59.366933][ T883] ? clear_bhb_loop+0x30/0x80 [ 59.371594][ T883] ? clear_bhb_loop+0x30/0x80 [ 59.376254][ T883] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 59.382130][ T883] RIP: 0033:0x7f3b1f98f6c9 [ 59.386535][ T883] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 59.406133][ T883] RSP: 002b:00007f3b207ad038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 59.414543][ T883] RAX: ffffffffffffffda RBX: 00007f3b1fbe6180 RCX: 00007f3b1f98f6c9 [ 59.422499][ T883] RDX: 0000000000000000 RSI: 000000000000000a RDI: 0000000000000009 [ 59.430452][ T883] RBP: 00007f3b207ad090 R08: 0000000000000000 R09: 0000000000000000 [ 59.438406][ T883] R10: 0000020000023896 R11: 0000000000000246 R12: 0000000000000001 [ 59.446366][ T883] R13: 00007f3b1fbe6218 R14: 00007f3b1fbe6180 R15: 00007ffdca6144c8 [ 59.454339][ T883] [ 59.459478][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 59.467914][ T865] F2FS-fs (loop3): fault_injection options not supported [ 59.474985][ T865] F2FS-fs (loop3): fault_type options not supported [ 59.478065][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 59.481863][ T865] F2FS-fs (loop3): Image doesn't support compression [ 59.494956][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 59.497174][ T865] F2FS-fs (loop3): invalid crc value [ 59.504873][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.510965][ T865] F2FS-fs (loop3): Found nat_bits in checkpoint [ 59.520287][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.532515][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 59.541786][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 59.548965][ T865] F2FS-fs (loop3): Start checkpoint disabled! [ 59.550129][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 59.556295][ T865] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 59.564298][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 59.580091][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 59.588235][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 59.596409][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 59.604423][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 59.612669][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 59.620700][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 59.628736][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 59.637188][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 59.701384][ T900] device wg2 left promiscuous mode [ 59.713350][ T900] input: syz0 as /devices/virtual/input/input9 [ 59.728497][ T900] device wg2 entered promiscuous mode [ 59.878567][ T906] random: crng reseeded on system resumption [ 59.906228][ T909] loop1: detected capacity change from 0 to 512 [ 60.945688][ T922] device ip6gre0 entered promiscuous mode [ 61.792375][ T932] loop0: detected capacity change from 0 to 128 [ 61.793544][ T930] loop4: detected capacity change from 0 to 512 [ 61.888837][ T930] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 61.915614][ T937] loop3: detected capacity change from 0 to 512 [ 61.922046][ T930] EXT4-fs error (device loop4): __ext4_fill_super:5391: inode #2: comm syz.4.156: iget: special inode unallocated [ 61.935694][ T930] EXT4-fs (loop4): get root inode failed [ 61.943590][ T930] EXT4-fs (loop4): mount failed [ 62.171842][ T937] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 62.184812][ T937] ext4 filesystem being mounted at /30/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.209106][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 62.209120][ T28] audit: type=1400 audit(1762275252.715:579): avc: denied { setopt } for pid=938 comm="syz.1.159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 62.280035][ T937] netlink: 'syz.3.155': attribute type 27 has an invalid length. [ 62.503183][ T937] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.510442][ T937] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.546512][ T937] device wg2 left promiscuous mode [ 62.556733][ T421] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 62.735969][ T956] loop4: detected capacity change from 0 to 512 [ 62.743411][ T421] usb 3-1: config 9 has an invalid interface number: 81 but max is 0 [ 62.755482][ T421] usb 3-1: config 9 has no interface number 0 [ 62.769918][ T421] usb 3-1: config 9 interface 81 altsetting 7 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 62.790030][ T421] usb 3-1: config 9 interface 81 has no altsetting 0 [ 62.835860][ T956] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 62.865172][ T956] ext4 filesystem being mounted at /31/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.926982][ T421] usb 3-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=f0.f4 [ 62.936283][ T421] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.945094][ T283] EXT4-fs (loop4): unmounting filesystem. [ 63.123214][ T421] usb 3-1: Product: syz [ 63.127406][ T421] usb 3-1: Manufacturer: syz [ 63.132027][ T421] usb 3-1: SerialNumber: syz [ 63.138874][ T934] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 63.162393][ T28] audit: type=1400 audit(1762275253.675:580): avc: denied { bpf } for pid=967 comm="syz.1.165" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 63.182842][ T28] audit: type=1400 audit(1762275253.675:581): avc: denied { prog_load } for pid=967 comm="syz.1.165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 63.201732][ T28] audit: type=1400 audit(1762275253.675:582): avc: denied { perfmon } for pid=967 comm="syz.1.165" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 63.238210][ T287] EXT4-fs (loop3): unmounting filesystem. [ 63.275987][ T28] audit: type=1400 audit(1762275253.675:583): avc: denied { prog_run } for pid=967 comm="syz.1.165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 63.294958][ T28] audit: type=1400 audit(1762275253.695:584): avc: denied { read write } for pid=283 comm="syz-executor" name="loop4" dev="devtmpfs" ino=122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 63.319376][ T28] audit: type=1400 audit(1762275253.695:585): avc: denied { open } for pid=283 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 63.347015][ T28] audit: type=1400 audit(1762275253.695:586): avc: denied { ioctl } for pid=283 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=122 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 64.084521][ T980] process 'syz.2.158' launched '~óR' with NULL argv: empty string added [ 64.212453][ T28] audit: type=1400 audit(1762275253.735:587): avc: denied { create } for pid=971 comm="syz.4.166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 64.232222][ T28] audit: type=1400 audit(1762275253.735:588): avc: denied { setopt } for pid=971 comm="syz.4.166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 64.861854][ T994] loop4: detected capacity change from 0 to 512 [ 64.888116][ T994] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 65.237460][ T994] EXT4-fs (loop4): orphan cleanup on readonly fs [ 65.246246][ T994] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.169: bg 0: block 248: padding at end of block bitmap is not set [ 65.261759][ T994] EXT4-fs error (device loop4): ext4_acquire_dquot:6803: comm syz.4.169: Failed to acquire dquot type 1 [ 65.275558][ T994] EXT4-fs (loop4): 1 truncate cleaned up [ 65.282435][ T994] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 66.391131][ T421] usbserial_generic 3-1:9.81: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 66.404051][ T421] usbserial_generic 3-1:9.81: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 66.415088][ T421] usbserial_generic 3-1:9.81: generic converter detected [ 66.423286][ T283] EXT4-fs (loop4): unmounting filesystem. [ 66.434097][ T421] usb 3-1: generic converter now attached to ttyUSB0 [ 66.493526][ T421] usb 3-1: generic converter now attached to ttyUSB1 [ 66.504045][ T421] usb 3-1: USB disconnect, device number 2 [ 66.513579][ T421] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 66.525597][ T421] generic ttyUSB1: generic converter now disconnected from ttyUSB1 [ 66.535667][ T421] usbserial_generic 3-1:9.81: device disconnected [ 66.605269][ T1013] loop4: detected capacity change from 0 to 512 [ 66.665448][ T1013] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 66.714254][ T1013] ext4 filesystem being mounted at /35/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.870998][ T283] EXT4-fs (loop4): unmounting filesystem. [ 67.440298][ T1030] FAULT_INJECTION: forcing a failure. [ 67.440298][ T1030] name failslab, interval 1, probability 0, space 0, times 0 [ 67.453035][ T1030] CPU: 1 PID: 1030 Comm: syz.1.180 Not tainted syzkaller #0 [ 67.460327][ T1030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 67.470375][ T1030] Call Trace: [ 67.473642][ T1030] [ 67.476552][ T1030] __dump_stack+0x21/0x24 [ 67.480865][ T1030] dump_stack_lvl+0xee/0x150 [ 67.485432][ T1030] ? __cfi_dump_stack_lvl+0x8/0x8 [ 67.490440][ T1030] ? number+0xd1d/0xf70 [ 67.494611][ T1030] dump_stack+0x15/0x24 [ 67.498754][ T1030] should_fail_ex+0x3d4/0x520 [ 67.503415][ T1030] __should_failslab+0xac/0xf0 [ 67.508169][ T1030] ? sidtab_sid2str_get+0x120/0x2c0 [ 67.513352][ T1030] should_failslab+0x9/0x20 [ 67.517859][ T1030] __kmem_cache_alloc_node+0x3d/0x2c0 [ 67.523239][ T1030] ? vsnprintf+0x186d/0x1960 [ 67.527832][ T1030] ? sidtab_sid2str_get+0x120/0x2c0 [ 67.528975][ T28] kauditd_printk_skb: 84 callbacks suppressed [ 67.528986][ T28] audit: type=1400 audit(1762275258.025:672): avc: denied { map } for pid=1027 comm="syz.2.179" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=17976 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 67.533024][ T1030] __kmalloc_node_track_caller+0xa0/0x1e0 [ 67.533050][ T1030] kmemdup+0x2b/0x60 [ 67.533069][ T1030] sidtab_sid2str_get+0x120/0x2c0 [ 67.533084][ T1030] security_sid_to_context_core+0x2ac/0x480 [ 67.540115][ T28] audit: type=1400 audit(1762275258.025:673): avc: denied { read write } for pid=1027 comm="syz.2.179" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=17976 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 67.563063][ T1030] security_sid_to_context+0x33/0x40 [ 67.563094][ T1030] avc_audit_post_callback+0x125/0x820 [ 67.563114][ T1030] ? rcu_read_unlock_special+0xab/0x480 [ 67.563133][ T1030] ? __cfi_avc_audit_post_callback+0x10/0x10 [ 67.630232][ T1030] ? __rcu_read_unlock+0xa0/0xa0 [ 67.635160][ T1030] ? __cfi_avc_audit_post_callback+0x10/0x10 [ 67.641137][ T1030] common_lsm_audit+0x12d7/0x16d0 [ 67.646145][ T1030] ? __cfi_avc_audit_post_callback+0x10/0x10 [ 67.652104][ T1030] ? __cfi_common_lsm_audit+0x10/0x10 [ 67.657452][ T1030] ? __kasan_check_write+0x14/0x20 [ 67.662539][ T1030] ? __cfi_call_rcu+0x10/0x10 [ 67.667196][ T1030] ? avc_alloc_node+0x433/0x4c0 [ 67.672037][ T1030] ? __kasan_check_write+0x14/0x20 [ 67.677134][ T1030] slow_avc_audit+0x1ac/0x220 [ 67.681793][ T1030] ? __cfi_slow_avc_audit+0x10/0x10 [ 67.686975][ T1030] audit_inode_permission+0x194/0x250 [ 67.692329][ T1030] ? may_link+0x540/0x540 [ 67.696640][ T1030] selinux_inode_permission+0x4e6/0x5c0 [ 67.702165][ T1030] ? __cfi_selinux_inode_permission+0x10/0x10 [ 67.708209][ T1030] ? step_into+0x427/0xf30 [ 67.712631][ T1030] ? __legitimize_mnt+0x7e/0x150 [ 67.717560][ T1030] security_inode_permission+0xb5/0x110 [ 67.723087][ T1030] inode_permission+0xef/0x4b0 [ 67.727828][ T1030] may_open+0x2a4/0x3f0 [ 67.731965][ T1030] path_openat+0x261d/0x2f50 [ 67.736530][ T1030] ? kasan_set_track+0x4b/0x70 [ 67.741272][ T1030] ? getname_flags+0xb9/0x500 [ 67.745925][ T1030] ? getname+0x19/0x20 [ 67.749972][ T1030] ? x64_sys_call+0x783/0x9a0 [ 67.754630][ T1030] ? do_syscall_64+0x4c/0xa0 [ 67.759198][ T1030] ? do_filp_open+0x3c0/0x3c0 [ 67.763853][ T1030] do_filp_open+0x1c1/0x3c0 [ 67.768331][ T1030] ? __cfi_do_filp_open+0x10/0x10 [ 67.773347][ T1030] ? alloc_fd+0x4e6/0x590 [ 67.777664][ T1030] do_sys_openat2+0x185/0x7e0 [ 67.782326][ T1030] ? __kasan_check_write+0x14/0x20 [ 67.787447][ T1030] ? do_sys_open+0xe0/0xe0 [ 67.791854][ T1030] ? ksys_write+0x1eb/0x240 [ 67.796357][ T1030] ? __cfi_ksys_write+0x10/0x10 [ 67.801188][ T1030] __x64_sys_openat+0x136/0x160 [ 67.806016][ T1030] x64_sys_call+0x783/0x9a0 [ 67.810497][ T1030] do_syscall_64+0x4c/0xa0 [ 67.814890][ T1030] ? clear_bhb_loop+0x30/0x80 [ 67.819545][ T1030] ? clear_bhb_loop+0x30/0x80 [ 67.824201][ T1030] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 67.830082][ T1030] RIP: 0033:0x7f3b1f98f6c9 [ 67.834478][ T1030] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 67.854066][ T1030] RSP: 002b:00007f3b207ef038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 67.862464][ T1030] RAX: ffffffffffffffda RBX: 00007f3b1fbe5fa0 RCX: 00007f3b1f98f6c9 [ 67.870421][ T1030] RDX: 0000000000020001 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 67.878375][ T1030] RBP: 00007f3b207ef090 R08: 0000000000000000 R09: 0000000000000000 [ 67.886341][ T1030] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 67.894291][ T1030] R13: 00007f3b1fbe6038 R14: 00007f3b1fbe5fa0 R15: 00007ffdca6144c8 [ 67.902243][ T1030] [ 67.944474][ T1030] random: crng reseeded on system resumption [ 67.951632][ T28] audit: type=1400 audit(1762275257.955:671): avc: denied { write } for pid=1029 comm="syz.1.180" name="snapshot" dev="devtmpfs" ino=91 ssid=135 tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 68.035732][ T1041] loop1: detected capacity change from 0 to 128 [ 68.042279][ T28] audit: type=1400 audit(1762275258.455:674): avc: denied { open } for pid=1029 comm="syz.1.180" path="/dev/snapshot" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 68.051775][ T1041] ext4: Unknown parameter 'dont_appraise' [ 68.071415][ T28] audit: type=1400 audit(1762275258.495:675): avc: denied { unmount } for pid=284 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 68.091355][ T28] audit: type=1400 audit(1762275258.495:676): avc: denied { append } for pid=1033 comm="syz.3.182" name="001" dev="devtmpfs" ino=164 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 68.114488][ T28] audit: type=1400 audit(1762275258.505:677): avc: denied { read write } for pid=1036 comm="syz.0.184" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 68.138038][ T28] audit: type=1400 audit(1762275258.505:678): avc: denied { open } for pid=1036 comm="syz.0.184" path="/dev/raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 68.144312][ T814] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 68.161494][ T28] audit: type=1400 audit(1762275258.505:679): avc: denied { ioctl } for pid=1036 comm="syz.0.184" path="/dev/raw-gadget" dev="devtmpfs" ino=258 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 68.542378][ T28] audit: type=1400 audit(1762275258.505:680): avc: denied { map } for pid=1033 comm="syz.3.182" path="socket:[17984]" dev="sockfs" ino=17984 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 68.661444][ T1049] FAULT_INJECTION: forcing a failure. [ 68.661444][ T1049] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 68.674572][ T1049] CPU: 0 PID: 1049 Comm: syz.1.186 Not tainted syzkaller #0 [ 68.681866][ T1049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 68.691902][ T1049] Call Trace: [ 68.695164][ T1049] [ 68.698078][ T1049] __dump_stack+0x21/0x24 [ 68.702389][ T1049] dump_stack_lvl+0xee/0x150 [ 68.706957][ T1049] ? __cfi_dump_stack_lvl+0x8/0x8 [ 68.711955][ T1049] ? getname_flags+0xb9/0x500 [ 68.716606][ T1049] ? mutex_unlock+0x89/0x220 [ 68.721177][ T1049] dump_stack+0x15/0x24 [ 68.725311][ T1049] should_fail_ex+0x3d4/0x520 [ 68.729968][ T1049] should_fail+0xb/0x10 [ 68.734101][ T1049] should_fail_usercopy+0x1a/0x20 [ 68.739102][ T1049] strncpy_from_user+0x24/0x2d0 [ 68.743928][ T1049] ? getname_flags+0xb9/0x500 [ 68.748580][ T1049] getname_flags+0xf4/0x500 [ 68.753057][ T1049] __x64_sys_rename+0x6e/0x90 [ 68.757712][ T1049] x64_sys_call+0x300/0x9a0 [ 68.762195][ T1049] do_syscall_64+0x4c/0xa0 [ 68.766586][ T1049] ? clear_bhb_loop+0x30/0x80 [ 68.771247][ T1049] ? clear_bhb_loop+0x30/0x80 [ 68.775901][ T1049] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 68.781771][ T1049] RIP: 0033:0x7f3b1f98f6c9 [ 68.786161][ T1049] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 68.805746][ T1049] RSP: 002b:00007f3b207ce038 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 68.814140][ T1049] RAX: ffffffffffffffda RBX: 00007f3b1fbe6090 RCX: 00007f3b1f98f6c9 [ 68.822089][ T1049] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000200000000100 [ 68.830049][ T1049] RBP: 00007f3b207ce090 R08: 0000000000000000 R09: 0000000000000000 [ 68.837999][ T1049] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 68.845950][ T1049] R13: 00007f3b1fbe6128 R14: 00007f3b1fbe6090 R15: 00007ffdca6144c8 [ 68.853905][ T1049] [ 68.870280][ T298] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 68.902618][ T1051] loop4: detected capacity change from 0 to 512 [ 68.917594][ T1051] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 68.926772][ T1051] ext4 filesystem being mounted at /39/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 68.953361][ T1053] syz.2.188[1053] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 68.953417][ T1053] syz.2.188[1053] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 68.960599][ T283] EXT4-fs (loop4): unmounting filesystem. [ 69.051051][ T298] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 69.068528][ T1064] loop2: detected capacity change from 0 to 128 [ 69.085007][ T298] usb 1-1: New USB device found, idVendor=046d, idProduct=c298, bcdDevice= 0.00 [ 69.094304][ T298] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.106113][ T298] usb 1-1: config 0 descriptor?? [ 69.111398][ T1037] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 69.523891][ T1037] syz.0.184 uses obsolete (PF_INET,SOCK_PACKET) [ 69.532685][ T298] logitech 0003:046D:C298.0001: hidraw0: USB HID v1.00 Device [HID 046d:c298] on usb-dummy_hcd.0-1/input0 [ 69.544180][ T298] logitech 0003:046D:C298.0001: no inputs found [ 69.568234][ T1076] device wg2 entered promiscuous mode [ 69.898932][ T768] usb 1-1: USB disconnect, device number 2 [ 70.026215][ T1088] loop4: detected capacity change from 0 to 512 [ 70.053979][ T1088] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 70.063083][ T1088] ext4 filesystem being mounted at /41/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 70.080832][ T283] EXT4-fs (loop4): unmounting filesystem. [ 70.144894][ T1094] syz.2.201[1094] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 70.144947][ T1094] syz.2.201[1094] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 70.357369][ T1109] syz.2.206[1109] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 70.368690][ T1109] syz.2.206[1109] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 70.454809][ T1112] device wg2 entered promiscuous mode [ 70.631917][ T1119] loop1: detected capacity change from 0 to 1024 [ 70.663569][ T1119] EXT4-fs (loop1): INFO: recovery required on readonly filesystem [ 70.671485][ T1119] EXT4-fs (loop1): write access will be enabled during recovery [ 70.679186][ T1119] EXT4-fs (loop1): barriers disabled [ 70.690109][ T298] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 70.691769][ T1119] JBD2: no valid journal superblock found [ 70.705064][ T1119] EXT4-fs (loop1): error loading journal [ 70.989913][ T298] usb 5-1: Using ep0 maxpacket: 16 [ 70.996189][ T298] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 71.011462][ T298] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 71.027996][ T298] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 71.042250][ T298] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.056545][ T298] usb 5-1: Product: syz [ 71.063891][ T298] usb 5-1: Manufacturer: syz [ 71.072615][ T298] usb 5-1: SerialNumber: syz [ 71.293367][ T298] usb 5-1: 0:2 : does not exist [ 71.302342][ T298] usb 5-1: unit 9 not found! [ 71.327507][ T298] usb 5-1: USB disconnect, device number 2 [ 71.458254][ T1131] loop2: detected capacity change from 0 to 512 [ 71.542908][ T1133] syz.0.215[1133] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 71.542992][ T1133] syz.0.215[1133] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 71.558800][ T1131] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 71.596447][ T1141] loop0: detected capacity change from 0 to 512 [ 71.603926][ T1131] ext4 filesystem being mounted at /44/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 71.652830][ T1144] loop1: detected capacity change from 0 to 512 [ 71.677404][ T286] EXT4-fs (loop2): unmounting filesystem. [ 73.042870][ T1167] loop0: detected capacity change from 0 to 1024 [ 73.121860][ T1167] EXT4-fs (loop0): INFO: recovery required on readonly filesystem [ 73.129752][ T1167] EXT4-fs (loop0): write access will be enabled during recovery [ 73.137443][ T1167] EXT4-fs (loop0): barriers disabled [ 73.155144][ T1167] JBD2: no valid journal superblock found [ 73.161026][ T1167] EXT4-fs (loop0): error loading journal [ 73.370376][ T1175] loop2: detected capacity change from 0 to 512 [ 73.412083][ T1175] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 73.446115][ T1175] ext4 filesystem being mounted at /47/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.456879][ T28] kauditd_printk_skb: 83 callbacks suppressed [ 73.456892][ T28] audit: type=1326 audit(1762275263.945:764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1170 comm="syz.3.225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2952f8f6c9 code=0x7ffc0000 [ 73.476440][ T1182] syz.4.223[1182] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 73.506378][ T1182] syz.4.223[1182] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 73.519885][ T28] audit: type=1326 audit(1762275263.945:765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1170 comm="syz.3.225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2952f8f6c9 code=0x7ffc0000 [ 73.556323][ T1185] loop0: detected capacity change from 0 to 16 [ 73.567837][ T1185] erofs: (device loop0): mounted with root inode @ nid 36. [ 73.626510][ T28] audit: type=1326 audit(1762275263.955:766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1170 comm="syz.3.225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f2952f8f6c9 code=0x7ffc0000 [ 73.707376][ T28] audit: type=1326 audit(1762275263.955:767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1170 comm="syz.3.225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2952f8f6c9 code=0x7ffc0000 [ 73.770812][ T28] audit: type=1326 audit(1762275263.955:768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1170 comm="syz.3.225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2952f8f6c9 code=0x7ffc0000 [ 73.834576][ T28] audit: type=1326 audit(1762275263.955:769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1170 comm="syz.3.225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=189 compat=0 ip=0x7f2952f8f6c9 code=0x7ffc0000 [ 73.897983][ T28] audit: type=1326 audit(1762275263.955:770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1170 comm="syz.3.225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2952f8f6c9 code=0x7ffc0000 [ 73.954088][ T28] audit: type=1326 audit(1762275263.955:771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1170 comm="syz.3.225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2952f8f6c9 code=0x7ffc0000 [ 74.016312][ T28] audit: type=1326 audit(1762275263.955:772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1170 comm="syz.3.225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2952f8f6c9 code=0x7ffc0000 [ 74.078954][ T1190] loop3: detected capacity change from 0 to 128 [ 74.203580][ T1194] loop0: detected capacity change from 0 to 512 [ 74.217644][ T28] audit: type=1326 audit(1762275263.955:773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1170 comm="syz.3.225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2952f8f6c9 code=0x7ffc0000 [ 74.639355][ T1198] netlink: 'syz.0.231': attribute type 3 has an invalid length. [ 74.647655][ T1198] netlink: 'syz.0.231': attribute type 3 has an invalid length. [ 74.723419][ T286] EXT4-fs (loop2): unmounting filesystem. [ 74.760996][ T1203] loop2: detected capacity change from 0 to 512 [ 74.789546][ T1201] loop3: detected capacity change from 0 to 512 [ 74.844750][ T1201] EXT4-fs: Ignoring removed mblk_io_submit option [ 74.853282][ T1201] EXT4-fs: Ignoring removed mblk_io_submit option [ 74.866430][ T1201] EXT4-fs (loop3): Test dummy encryption mode enabled [ 74.878248][ T1201] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 75.512242][ T1201] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 75.532586][ T1201] EXT4-fs (loop3): 1 truncate cleaned up [ 75.542429][ T1201] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 75.818526][ T287] EXT4-fs (loop3): unmounting filesystem. [ 75.956585][ T1226] 9pnet_fd: Insufficient options for proto=fd [ 76.281599][ T1215] loop0: detected capacity change from 0 to 40427 [ 76.293929][ T1215] F2FS-fs (loop0): fault_injection options not supported [ 76.301397][ T1215] F2FS-fs (loop0): fault_type options not supported [ 76.308099][ T1215] F2FS-fs (loop0): Image doesn't support compression [ 76.321826][ T1215] F2FS-fs (loop0): invalid crc value [ 76.334825][ T1215] F2FS-fs (loop0): Found nat_bits in checkpoint [ 76.357098][ T1215] F2FS-fs (loop0): Start checkpoint disabled! [ 76.364249][ T1215] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 77.589423][ T1243] 9pnet_fd: Insufficient options for proto=fd [ 77.700812][ T1250] loop2: detected capacity change from 0 to 512 [ 77.709678][ T1250] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 77.791359][ T1250] EXT4-fs (loop2): orphan cleanup on readonly fs [ 77.798158][ T1250] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:511: comm syz.2.240: Block bitmap for bg 0 marked uninitialized [ 77.812148][ T1250] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6165: Corrupt filesystem [ 77.822768][ T1250] EXT4-fs (loop2): 1 orphan inode deleted [ 77.828573][ T1250] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 78.053399][ T1260] loop1: detected capacity change from 0 to 512 [ 78.780319][ T1267] loop0: detected capacity change from 0 to 1024 [ 78.787106][ T1267] EXT4-fs: Ignoring removed mblk_io_submit option [ 78.850330][ T28] kauditd_printk_skb: 82 callbacks suppressed [ 78.850438][ T28] audit: type=1400 audit(1762275269.285:856): avc: denied { read write } for pid=1257 comm="syz.0.246" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 78.966694][ T1267] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 79.082725][ T1267] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 79.608289][ T28] audit: type=1400 audit(1762275269.285:857): avc: denied { open } for pid=1257 comm="syz.0.246" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 79.673612][ T1278] loop4: detected capacity change from 0 to 128 [ 79.682832][ T28] audit: type=1400 audit(1762275269.635:858): avc: denied { read write } for pid=1257 comm="syz.0.246" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 79.726399][ T1278] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 79.745277][ T1278] ext4 filesystem being mounted at /50/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 79.759695][ T28] audit: type=1400 audit(1762275269.635:859): avc: denied { open } for pid=1257 comm="syz.0.246" path="/47/file1/file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 79.801315][ T28] audit: type=1400 audit(1762275269.665:860): avc: denied { setattr } for pid=1257 comm="syz.0.246" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 79.830245][ T28] audit: type=1400 audit(1762275270.305:861): avc: denied { create } for pid=1277 comm="syz.4.250" name="encrypted_dir" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 79.874388][ T28] audit: type=1400 audit(1762275270.305:862): avc: denied { write } for pid=1277 comm="syz.4.250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 79.890423][ T1281] bpf_get_probe_write_proto: 2 callbacks suppressed [ 79.890438][ T1281] syz.1.249[1281] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 79.901698][ T1281] syz.1.249[1281] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 79.902917][ T284] EXT4-fs (loop0): unmounting filesystem. [ 80.033659][ T1285] loop0: detected capacity change from 0 to 512 [ 80.085550][ T1285] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 80.092337][ T28] audit: type=1326 audit(1762275270.595:863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1282 comm="syz.3.252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2952f8f6c9 code=0x7ffc0000 [ 80.094921][ T24] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 80.125965][ T286] EXT4-fs (loop2): unmounting filesystem. [ 80.132037][ T1285] ext4 filesystem being mounted at /48/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.140335][ T28] audit: type=1326 audit(1762275270.595:864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1282 comm="syz.3.252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2952f8f6c9 code=0x7ffc0000 [ 80.194452][ T284] EXT4-fs (loop0): unmounting filesystem. [ 80.201892][ T28] audit: type=1326 audit(1762275270.595:865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1282 comm="syz.3.252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f2952f8f6c9 code=0x7ffc0000 [ 80.239462][ T1292] 9pnet_fd: Insufficient options for proto=fd [ 80.315419][ T1295] syz.0.255[1295] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 80.315522][ T1295] syz.0.255[1295] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 80.329028][ T1295] loop0: detected capacity change from 0 to 16 [ 80.370559][ T1295] erofs: (device loop0): mounted with root inode @ nid 36. [ 80.459907][ T1237] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 80.660090][ T1237] usb 3-1: Using ep0 maxpacket: 8 [ 80.667037][ T1237] usb 3-1: unable to get BOS descriptor or descriptor too short [ 80.675810][ T1237] usb 3-1: config 12 interface 0 altsetting 7 endpoint 0x3 has invalid maxpacket 28453, setting to 1024 [ 80.687222][ T1237] usb 3-1: config 12 interface 0 altsetting 7 bulk endpoint 0x3 has invalid maxpacket 1024 [ 80.697531][ T1237] usb 3-1: config 12 interface 0 has no altsetting 0 [ 80.705860][ T1237] usb 3-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5 [ 80.715190][ T1237] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.723369][ T1237] usb 3-1: Product: syz [ 80.727661][ T1237] usb 3-1: Manufacturer: syz [ 80.732477][ T1237] usb 3-1: SerialNumber: syz [ 80.750811][ T1290] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 80.754915][ T24] usb 5-1: config 1 has an invalid descriptor of length 31, skipping remainder of the config [ 80.813444][ T24] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 80.831217][ T24] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 80.840587][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 80.848704][ T24] usb 5-1: SerialNumber: syz [ 80.861891][ T1301] device wg2 left promiscuous mode [ 80.873826][ T1301] device wg2 entered promiscuous mode [ 80.894515][ T1305] loop3: detected capacity change from 0 to 128 [ 80.919902][ T857] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 81.061572][ T24] usb 5-1: 0:2 : does not exist [ 81.067819][ T24] usb 5-1: unit 5: unexpected type 0x0d [ 81.101193][ T24] usb 5-1: USB disconnect, device number 3 [ 81.330955][ T857] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 81.349874][ T857] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 81.369877][ T857] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 81.382815][ T857] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 81.391876][ T857] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.401550][ T857] usb 2-1: config 0 descriptor?? [ 81.410586][ T396] udevd[396]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 81.479910][ T345] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 81.699879][ T345] usb 4-1: Using ep0 maxpacket: 32 [ 81.706162][ T345] usb 4-1: config 0 has an invalid interface number: 196 but max is 0 [ 81.714523][ T345] usb 4-1: config 0 has no interface number 0 [ 81.720651][ T345] usb 4-1: config 0 interface 196 altsetting 1 endpoint 0x2 has invalid wMaxPacketSize 0 [ 81.730552][ T345] usb 4-1: config 0 interface 196 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 81.743643][ T345] usb 4-1: config 0 interface 196 has no altsetting 0 [ 81.751875][ T345] usb 4-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 81.760941][ T345] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.768921][ T345] usb 4-1: Product: syz [ 81.773104][ T345] usb 4-1: Manufacturer: syz [ 81.777776][ T345] usb 4-1: SerialNumber: syz [ 81.782954][ T345] usb 4-1: config 0 descriptor?? [ 81.796730][ T283] EXT4-fs (loop4): unmounting filesystem. [ 81.810930][ T857] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 81.818450][ T857] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 81.826173][ T857] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 81.833838][ T857] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 81.841487][ T857] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 81.849002][ T857] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 81.857442][ T857] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 81.865091][ T857] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 81.872730][ T857] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 81.880298][ T857] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 81.887741][ T857] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 81.895355][ T857] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 81.902842][ T857] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 81.910556][ T857] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 81.920290][ T857] plantronics 0003:047F:FFFF.0002: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 82.020203][ T1306] netlink: 'syz.3.260': attribute type 6 has an invalid length. [ 83.191859][ T1237] usb 3-1: selecting invalid altsetting 0 [ 83.207413][ T1237] usb 3-1: USB disconnect, device number 3 [ 83.302919][ T917] usb 2-1: reset high-speed USB device number 3 using dummy_hcd [ 83.320997][ T1332] loop2: detected capacity change from 0 to 512 [ 83.331786][ T1332] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 83.340867][ T1332] ext4 filesystem being mounted at /54/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 83.359738][ T286] EXT4-fs (loop2): unmounting filesystem. [ 83.421256][ T1336] syz.0.267[1336] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 83.421728][ T1336] syz.0.267[1336] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 83.933655][ T345] ipheth 4-1:0.196: Unable to find endpoints [ 83.957771][ T343] kworker/u4:4: attempt to access beyond end of device [ 83.957771][ T343] loop3: rw=1, sector=145, nr_sectors = 896 limit=128 [ 84.209655][ T345] usb 4-1: USB disconnect, device number 2 [ 84.282590][ T1351] netlink: 12 bytes leftover after parsing attributes in process `syz.1.274'. [ 84.292658][ T1351] netlink: 12 bytes leftover after parsing attributes in process `syz.1.274'. [ 84.315388][ T28] kauditd_printk_skb: 26 callbacks suppressed [ 84.315401][ T28] audit: type=1400 audit(1762275274.825:892): avc: denied { create } for pid=1353 comm="syz.4.275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 84.352031][ T28] audit: type=1326 audit(1762275274.855:893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1339 comm="syz.2.269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b7ed8f6c9 code=0x7ffc0000 [ 84.356807][ T1357] loop1: detected capacity change from 0 to 256 [ 84.375507][ T28] audit: type=1326 audit(1762275274.855:894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1339 comm="syz.2.269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b7ed8f6c9 code=0x7ffc0000 [ 84.440521][ T1357] FAT-fs (loop1): Directory bread(block 64) failed [ 84.441453][ T28] audit: type=1326 audit(1762275274.855:895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1339 comm="syz.2.269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f5b7ed8f6c9 code=0x7ffc0000 [ 84.479891][ T1357] FAT-fs (loop1): Directory bread(block 65) failed [ 84.486514][ T1357] FAT-fs (loop1): Directory bread(block 66) failed [ 84.496580][ T1357] FAT-fs (loop1): Directory bread(block 67) failed [ 84.505352][ T28] audit: type=1326 audit(1762275274.855:896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1339 comm="syz.2.269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b7ed8f6c9 code=0x7ffc0000 [ 84.512937][ T1357] FAT-fs (loop1): Directory bread(block 68) failed [ 84.544306][ T28] audit: type=1326 audit(1762275274.855:897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1339 comm="syz.2.269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b7ed8f6c9 code=0x7ffc0000 [ 84.559917][ T1357] FAT-fs (loop1): Directory bread(block 69) failed [ 84.593607][ T1366] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 84.601031][ T1357] FAT-fs (loop1): Directory bread(block 70) failed [ 84.601689][ T28] audit: type=1326 audit(1762275274.855:898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1339 comm="syz.2.269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=189 compat=0 ip=0x7f5b7ed8f6c9 code=0x7ffc0000 [ 84.615855][ T1357] FAT-fs (loop1): Directory bread(block 71) failed [ 84.632314][ T28] audit: type=1326 audit(1762275274.855:899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1339 comm="syz.2.269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b7ed8f6c9 code=0x7ffc0000 [ 84.643934][ T1357] FAT-fs (loop1): Directory bread(block 72) failed [ 84.661213][ T28] audit: type=1326 audit(1762275274.855:900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1339 comm="syz.2.269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b7ed8f6c9 code=0x7ffc0000 [ 84.667616][ T1357] FAT-fs (loop1): Directory bread(block 73) failed [ 84.691033][ T28] audit: type=1326 audit(1762275274.855:901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1339 comm="syz.2.269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5b7ed8f6c9 code=0x7ffc0000 [ 84.735614][ T1366] device veth0_vlan left promiscuous mode [ 84.741642][ T1366] device veth0_vlan entered promiscuous mode [ 84.748548][ T1366] device veth1_macvtap left promiscuous mode [ 84.755454][ T1366] device veth1_macvtap entered promiscuous mode [ 84.764308][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 84.772720][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 84.780336][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 84.788621][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.795683][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.803903][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 84.812351][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 84.820588][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.827605][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.834995][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 84.843463][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 84.851694][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 84.859881][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 84.867956][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 84.876190][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 84.884314][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 84.892484][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 84.900697][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 84.910697][ T24] usb 2-1: USB disconnect, device number 3 [ 84.939069][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 84.960319][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 84.968660][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 84.985287][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 85.008988][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 85.021968][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 85.030230][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 85.038289][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 85.046508][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 85.056713][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 85.065259][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 85.073762][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 85.088382][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 85.096701][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 85.104440][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 85.113723][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 85.122326][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 85.133506][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 85.196086][ T1377] 9pnet_fd: Insufficient options for proto=fd [ 85.509037][ T1390] syz.1.283[1390] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 85.509361][ T1390] syz.1.283[1390] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 85.550343][ T1387] loop4: detected capacity change from 0 to 512 [ 85.713913][ T1387] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 85.723683][ T1387] ext4 filesystem being mounted at /56/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.260909][ T283] EXT4-fs (loop4): unmounting filesystem. [ 86.746234][ T1418] 9pnet_fd: Insufficient options for proto=fd [ 87.330600][ T1426] loop4: detected capacity change from 0 to 512 [ 87.350729][ T1433] 9pnet_fd: Insufficient options for proto=fd [ 87.351437][ T1433] 9pnet_fd: Insufficient options for proto=fd [ 87.358738][ T1426] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 88.074940][ T1426] ext4 filesystem being mounted at /58/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.162262][ T1440] loop2: detected capacity change from 0 to 40427 [ 88.176919][ T283] EXT4-fs (loop4): unmounting filesystem. [ 88.244092][ T1445] FAULT_INJECTION: forcing a failure. [ 88.244092][ T1445] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 88.257218][ T1445] CPU: 1 PID: 1445 Comm: syz.1.301 Not tainted syzkaller #0 [ 88.264500][ T1445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 88.274544][ T1445] Call Trace: [ 88.277817][ T1445] [ 88.280740][ T1445] __dump_stack+0x21/0x24 [ 88.285069][ T1445] dump_stack_lvl+0xee/0x150 [ 88.289649][ T1445] ? __cfi_dump_stack_lvl+0x8/0x8 [ 88.294668][ T1445] ? __cfi___switch_to+0x10/0x10 [ 88.299604][ T1445] ? tracing_record_taskinfo_sched_switch+0x80/0x3a0 [ 88.306276][ T1445] dump_stack+0x15/0x24 [ 88.310425][ T1445] should_fail_ex+0x3d4/0x520 [ 88.315099][ T1445] should_fail+0xb/0x10 [ 88.319253][ T1445] should_fail_usercopy+0x1a/0x20 [ 88.324282][ T1445] _copy_from_user+0x1e/0xc0 [ 88.328875][ T1445] __copy_msghdr+0x3e3/0x5c0 [ 88.333467][ T1445] ___sys_sendmsg+0x1a2/0x290 [ 88.338150][ T1445] ? __sys_sendmsg+0x270/0x270 [ 88.342925][ T1445] ? __kasan_check_read+0x11/0x20 [ 88.347947][ T1445] ? preempt_schedule_irq+0xbb/0x110 [ 88.353236][ T1445] ? raw_irqentry_exit_cond_resched+0x29/0x30 [ 88.359313][ T1445] ? irqentry_exit+0x37/0x40 [ 88.363915][ T1445] ? __fdget+0x19c/0x220 [ 88.368164][ T1445] __sys_sendmmsg+0x274/0x460 [ 88.372846][ T1445] ? __cfi___sys_sendmmsg+0x10/0x10 [ 88.378059][ T1445] ? fpregs_restore_userregs+0x128/0x260 [ 88.383694][ T1445] __x64_sys_sendmmsg+0xa0/0xb0 [ 88.388556][ T1445] x64_sys_call+0x3f5/0x9a0 [ 88.393061][ T1445] do_syscall_64+0x4c/0xa0 [ 88.397476][ T1445] ? clear_bhb_loop+0x30/0x80 [ 88.402154][ T1445] ? clear_bhb_loop+0x30/0x80 [ 88.406833][ T1445] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 88.412728][ T1445] RIP: 0033:0x7f3b1f98f6c9 [ 88.417144][ T1445] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 88.436748][ T1445] RSP: 002b:00007f3b207ad038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 88.445255][ T1445] RAX: ffffffffffffffda RBX: 00007f3b1fbe6180 RCX: 00007f3b1f98f6c9 [ 88.453239][ T1445] RDX: 0000000000000001 RSI: 0000200000000ac0 RDI: 0000000000000003 [ 88.461212][ T1445] RBP: 00007f3b207ad090 R08: 0000000000000000 R09: 0000000000000000 [ 88.469190][ T1445] R10: 0000000020080058 R11: 0000000000000246 R12: 0000000000000001 [ 88.477159][ T1445] R13: 00007f3b1fbe6218 R14: 00007f3b1fbe6180 R15: 00007ffdca6144c8 [ 88.485123][ T1445] [ 88.494243][ T1440] F2FS-fs (loop2): Found nat_bits in checkpoint [ 88.532926][ T1440] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 88.622204][ T1453] loop4: detected capacity change from 0 to 512 [ 88.661356][ T1453] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 88.671062][ T1453] ext4 filesystem being mounted at /59/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.912302][ T1462] syz.1.304[1462] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 88.912395][ T1462] syz.1.304[1462] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 89.079398][ T1464] loop0: detected capacity change from 0 to 512 [ 89.100771][ T283] EXT4-fs (loop4): unmounting filesystem. [ 89.533947][ T28] kauditd_printk_skb: 48 callbacks suppressed [ 89.533964][ T28] audit: type=1326 audit(1762275279.915:950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1465 comm="syz.4.306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c2bd8f6c9 code=0x7ffc0000 [ 89.569501][ T1471] netlink: 12 bytes leftover after parsing attributes in process `syz.3.307'. [ 89.579172][ T28] audit: type=1326 audit(1762275279.915:951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1465 comm="syz.4.306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c2bd8f6c9 code=0x7ffc0000 [ 89.615716][ T28] audit: type=1326 audit(1762275279.925:952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1465 comm="syz.4.306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f6c2bd8f6c9 code=0x7ffc0000 [ 89.639023][ T28] audit: type=1326 audit(1762275279.925:953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1465 comm="syz.4.306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c2bd8f6c9 code=0x7ffc0000 [ 89.662390][ T28] audit: type=1326 audit(1762275279.925:954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1465 comm="syz.4.306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c2bd8f6c9 code=0x7ffc0000 [ 89.686852][ T28] audit: type=1326 audit(1762275279.935:955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1465 comm="syz.4.306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=189 compat=0 ip=0x7f6c2bd8f6c9 code=0x7ffc0000 [ 89.723328][ T28] audit: type=1326 audit(1762275279.935:956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1465 comm="syz.4.306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c2bd8f6c9 code=0x7ffc0000 [ 89.746979][ T28] audit: type=1326 audit(1762275279.935:957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1465 comm="syz.4.306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c2bd8f6c9 code=0x7ffc0000 [ 89.770532][ T28] audit: type=1326 audit(1762275279.945:958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1465 comm="syz.4.306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6c2bd8f6c9 code=0x7ffc0000 [ 89.793957][ T28] audit: type=1326 audit(1762275279.945:959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1465 comm="syz.4.306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c2bd8f6c9 code=0x7ffc0000 [ 90.041046][ T1482] overlayfs: missing 'lowerdir' [ 90.972242][ T1506] device wireguard0 entered promiscuous mode [ 91.038402][ T1512] netlink: 12 bytes leftover after parsing attributes in process `syz.4.318'. [ 91.413087][ T1522] syz.1.321[1522] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 91.413258][ T1522] syz.1.321[1522] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 92.539928][ T1237] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 92.696228][ T1545] netlink: 20 bytes leftover after parsing attributes in process `syz.3.328'. [ 92.731088][ T1551] netlink: 12 bytes leftover after parsing attributes in process `syz.4.330'. [ 92.741148][ T1237] usb 1-1: config 160 has an invalid interface number: 200 but max is 0 [ 92.741175][ T1237] usb 1-1: config 160 has no interface number 0 [ 92.741199][ T1237] usb 1-1: config 160 interface 200 has no altsetting 0 [ 92.742579][ T1237] usb 1-1: New USB device found, idVendor=21bb, idProduct=2070, bcdDevice=87.0b [ 92.742605][ T1237] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.742625][ T1237] usb 1-1: Product: syz [ 92.742637][ T1237] usb 1-1: Manufacturer: syz [ 92.742650][ T1237] usb 1-1: SerialNumber: syz [ 92.802476][ T1549] loop1: detected capacity change from 0 to 512 [ 92.870002][ T1549] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 92.878586][ T1561] loop3: detected capacity change from 0 to 256 [ 92.879108][ T1549] ext4 filesystem being mounted at /63/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 92.940009][ T1563] 9pnet_fd: Insufficient options for proto=fd [ 93.209283][ T1561] FAT-fs (loop3): Directory bread(block 64) failed [ 93.270977][ T1561] FAT-fs (loop3): Directory bread(block 65) failed [ 93.305852][ T1561] FAT-fs (loop3): Directory bread(block 66) failed [ 93.333781][ T285] EXT4-fs (loop1): unmounting filesystem. [ 93.334932][ T1561] FAT-fs (loop3): Directory bread(block 67) failed [ 93.346219][ T1561] FAT-fs (loop3): Directory bread(block 68) failed [ 93.353297][ T1561] FAT-fs (loop3): Directory bread(block 69) failed [ 93.359987][ T1561] FAT-fs (loop3): Directory bread(block 70) failed [ 93.366619][ T1561] FAT-fs (loop3): Directory bread(block 71) failed [ 93.373505][ T1237] usb 1-1: MIDIStreaming interface descriptor not found [ 93.380718][ T1561] FAT-fs (loop3): Directory bread(block 72) failed [ 93.389406][ T1237] usb 1-1: USB disconnect, device number 3 [ 93.399371][ T1561] FAT-fs (loop3): Directory bread(block 73) failed [ 93.638908][ T396] udevd[396]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:160.200/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 93.845231][ T1579] loop3: detected capacity change from 0 to 512 [ 93.891568][ T1577] tap0: tun_chr_ioctl cmd 1074025681 [ 93.909259][ T1579] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 93.918299][ T1579] ext4 filesystem being mounted at /73/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.102748][ T1595] syz.4.340[1595] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 94.103112][ T1595] syz.4.340[1595] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 94.442295][ T287] EXT4-fs (loop3): unmounting filesystem. [ 94.605589][ T28] kauditd_printk_skb: 133 callbacks suppressed [ 94.605609][ T28] audit: type=1400 audit(1762275285.115:1093): avc: denied { rmdir } for pid=287 comm="syz-executor" name="file1" dev="tmpfs" ino=419 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 94.816021][ T1604] loop1: detected capacity change from 0 to 512 [ 95.239813][ T1604] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 95.289735][ T1604] ext4 filesystem being mounted at /65/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.505797][ T285] EXT4-fs (loop1): unmounting filesystem. [ 95.633819][ T1623] 9pnet_fd: Insufficient options for proto=fd [ 96.109287][ T28] audit: type=1400 audit(1762275286.615:1094): avc: denied { getopt } for pid=1628 comm="syz.3.351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 96.161451][ T1634] FAULT_INJECTION: forcing a failure. [ 96.161451][ T1634] name failslab, interval 1, probability 0, space 0, times 0 [ 96.179913][ T1634] CPU: 0 PID: 1634 Comm: syz.4.353 Not tainted syzkaller #0 [ 96.187221][ T1634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 96.197276][ T1634] Call Trace: [ 96.200551][ T1634] [ 96.203475][ T1634] __dump_stack+0x21/0x24 [ 96.207805][ T1634] dump_stack_lvl+0xee/0x150 [ 96.212391][ T1634] ? __cfi_dump_stack_lvl+0x8/0x8 [ 96.217411][ T1634] dump_stack+0x15/0x24 [ 96.221568][ T1634] should_fail_ex+0x3d4/0x520 [ 96.226258][ T1634] ? vm_area_alloc+0x24/0x1a0 [ 96.230936][ T1634] __should_failslab+0xac/0xf0 [ 96.235709][ T1634] should_failslab+0x9/0x20 [ 96.240208][ T1634] kmem_cache_alloc+0x3b/0x330 [ 96.244975][ T1634] vm_area_alloc+0x24/0x1a0 [ 96.249476][ T1634] mmap_region+0xf9f/0x2290 [ 96.253980][ T1634] ? __cfi_mmap_region+0x10/0x10 [ 96.258916][ T1634] ? cap_mmap_addr+0x165/0x2e0 [ 96.263675][ T1634] ? __kasan_slab_free+0x11/0x20 [ 96.268609][ T1634] ? slab_free_freelist_hook+0xc2/0x190 [ 96.274152][ T1634] ? __kmem_cache_free+0xb7/0x1b0 [ 96.279156][ T1634] ? get_unmapped_area+0x313/0x380 [ 96.284244][ T1634] do_mmap+0x843/0xdc0 [ 96.288291][ T1634] ? __cfi_do_mmap+0x10/0x10 [ 96.292855][ T1634] vm_mmap_pgoff+0x1f5/0x3f0 [ 96.297420][ T1634] ? ____kasan_slab_free+0x13d/0x180 [ 96.302682][ T1634] ? __cfi_vm_mmap_pgoff+0x10/0x10 [ 96.307766][ T1634] ? __se_sys_memfd_create+0x339/0x3b0 [ 96.313202][ T1634] ? __kmem_cache_free+0xb7/0x1b0 [ 96.318203][ T1634] ksys_mmap_pgoff+0xf6/0x1d0 [ 96.322858][ T1634] __x64_sys_mmap+0xfa/0x110 [ 96.327430][ T1634] x64_sys_call+0x8fd/0x9a0 [ 96.331937][ T1634] do_syscall_64+0x4c/0xa0 [ 96.336352][ T1634] ? clear_bhb_loop+0x30/0x80 [ 96.341036][ T1634] ? clear_bhb_loop+0x30/0x80 [ 96.345713][ T1634] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 96.351606][ T1634] RIP: 0033:0x7f6c2bd8f703 [ 96.356020][ T1634] Code: f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 41 89 ca 41 f7 c1 ff 0f 00 00 75 14 b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 25 c3 0f 1f 40 00 48 c7 c0 a8 ff ff ff 64 c7 [ 96.375623][ T1634] RSP: 002b:00007f6c2ccd2e18 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 96.384035][ T1634] RAX: ffffffffffffffda RBX: 000000000000049a RCX: 00007f6c2bd8f703 [ 96.392010][ T1634] RDX: 0000000000000003 RSI: 0000000008400000 RDI: 0000000000000000 [ 96.399973][ T1634] RBP: 0000200000000582 R08: 00000000ffffffff R09: 0000000000000000 [ 96.407942][ T1634] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000007 [ 96.415901][ T1634] R13: 00007f6c2ccd2ef0 R14: 00007f6c2ccd2eb0 R15: 0000200000000540 [ 96.423869][ T1634] [ 97.077995][ T28] audit: type=1326 audit(1762275287.085:1095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1635 comm="syz.3.355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2952f8f6c9 code=0x7ffc0000 [ 97.102195][ T28] audit: type=1326 audit(1762275287.085:1096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1635 comm="syz.3.355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2952f8f6c9 code=0x7ffc0000 [ 97.172890][ T28] audit: type=1326 audit(1762275287.085:1097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1635 comm="syz.3.355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f2952f8f6c9 code=0x7ffc0000 [ 97.377086][ T1655] loop3: detected capacity change from 0 to 512 [ 97.446694][ T28] audit: type=1326 audit(1762275287.085:1098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1635 comm="syz.3.355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2952f8f6c9 code=0x7ffc0000 [ 97.470276][ T28] audit: type=1326 audit(1762275287.085:1099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1635 comm="syz.3.355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2952f8f6c9 code=0x7ffc0000 [ 97.493610][ T28] audit: type=1326 audit(1762275287.095:1100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1635 comm="syz.3.355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=189 compat=0 ip=0x7f2952f8f6c9 code=0x7ffc0000 [ 97.497977][ T1651] loop1: detected capacity change from 0 to 512 [ 97.516902][ T28] audit: type=1326 audit(1762275287.095:1101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1635 comm="syz.3.355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2952f8f6c9 code=0x7ffc0000 [ 97.516929][ T28] audit: type=1326 audit(1762275287.095:1102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1635 comm="syz.3.355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2952f8f6c9 code=0x7ffc0000 [ 97.576005][ T1660] netlink: 8 bytes leftover after parsing attributes in process `syz.0.359'. [ 97.614892][ T1651] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 97.633199][ T1651] ext4 filesystem being mounted at /67/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.692661][ T285] EXT4-fs (loop1): unmounting filesystem. [ 98.379179][ T1660] syz.0.359 (1660) used greatest stack depth: 19168 bytes left [ 98.917741][ T1684] 9pnet_fd: Insufficient options for proto=fd [ 99.687561][ T28] kauditd_printk_skb: 20 callbacks suppressed [ 99.687659][ T28] audit: type=1326 audit(1762275289.385:1123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1677 comm="syz.3.368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2952f8f6c9 code=0x7ffc0000 [ 99.875609][ T28] audit: type=1326 audit(1762275289.385:1124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1677 comm="syz.3.368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2952f8f6c9 code=0x7ffc0000 [ 99.901633][ T28] audit: type=1326 audit(1762275289.425:1125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1677 comm="syz.3.368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f2952f8f6c9 code=0x7ffc0000 [ 99.924915][ T28] audit: type=1326 audit(1762275289.425:1126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1677 comm="syz.3.368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2952f8f6c9 code=0x7ffc0000 [ 99.949098][ T28] audit: type=1326 audit(1762275289.425:1127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1677 comm="syz.3.368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2952f8f6c9 code=0x7ffc0000 [ 100.033718][ T28] audit: type=1326 audit(1762275289.425:1128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1677 comm="syz.3.368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=189 compat=0 ip=0x7f2952f8f6c9 code=0x7ffc0000 [ 100.053987][ T1696] loop0: detected capacity change from 0 to 128 [ 100.074948][ T28] audit: type=1326 audit(1762275289.425:1129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1677 comm="syz.3.368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2952f8f6c9 code=0x7ffc0000 [ 100.099060][ T1702] device wg2 left promiscuous mode [ 100.107191][ T1702] device wg2 entered promiscuous mode [ 100.139480][ T28] audit: type=1326 audit(1762275289.425:1130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1677 comm="syz.3.368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2952f8f6c9 code=0x7ffc0000 [ 100.173486][ T28] audit: type=1326 audit(1762275289.425:1131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1677 comm="syz.3.368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2952f8f6c9 code=0x7ffc0000 [ 101.854106][ T1726] loop1: detected capacity change from 0 to 512 [ 101.897162][ T28] audit: type=1326 audit(1762275289.425:1132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1677 comm="syz.3.368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2952f8f6c9 code=0x7ffc0000 [ 102.622094][ T1741] 9pnet_fd: Insufficient options for proto=fd [ 103.546864][ T1763] netlink: 12 bytes leftover after parsing attributes in process `syz.0.385'. [ 103.561014][ T1745] loop4: detected capacity change from 0 to 1024 [ 103.567711][ T1745] EXT4-fs: Ignoring removed i_version option [ 103.574049][ T1745] EXT4-fs (loop4): Test dummy encryption mode enabled [ 103.578834][ T1770] loop0: detected capacity change from 0 to 512 [ 103.652904][ T396] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 103.682071][ T1745] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 103.741360][ T1777] loop0: detected capacity change from 0 to 128 [ 103.889716][ T1779] loop1: detected capacity change from 0 to 512 [ 103.989679][ T1775] loop3: detected capacity change from 0 to 4096 [ 104.081754][ T1779] EXT4-fs (loop1): 1 orphan inode deleted [ 104.087549][ T1779] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 104.098425][ T1779] ext4 filesystem being mounted at /72/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 104.245746][ T1775] EXT4-fs (loop3): Test dummy encryption mode enabled [ 104.481977][ T1775] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 104.510671][ T1775] System zones: 0-5 [ 104.522585][ T1775] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 104.657007][ T582] EXT4-fs error (device loop1): ext4_release_dquot:6839: comm kworker/u4:5: Failed to release dquot type 1 [ 104.669319][ T285] EXT4-fs (loop1): unmounting filesystem. [ 104.675703][ T283] EXT4-fs (loop4): unmounting filesystem. [ 104.805001][ T28] kauditd_printk_skb: 102 callbacks suppressed [ 104.805062][ T28] audit: type=1326 audit(1762275295.275:1234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1774 comm="syz.3.389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2952f8f6c9 code=0x7ffc0000 [ 104.805085][ T540] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 104.897924][ T28] audit: type=1326 audit(1762275295.275:1235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1774 comm="syz.3.389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2952f8f6c9 code=0x7ffc0000 [ 104.930045][ T28] audit: type=1326 audit(1762275295.275:1236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1774 comm="syz.3.389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=229 compat=0 ip=0x7f2952f8f6c9 code=0x7ffc0000 [ 104.955704][ T1790] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 104.965849][ T1792] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 104.986248][ T1796] xt_hashlimit: max too large, truncated to 1048576 [ 104.992914][ T28] audit: type=1326 audit(1762275295.275:1237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1774 comm="syz.3.389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2952f8f6c9 code=0x7ffc0000 [ 105.052713][ T540] usb 3-1: Using ep0 maxpacket: 8 [ 105.058817][ T540] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 105.071901][ T540] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.091695][ T1799] loop4: detected capacity change from 0 to 512 [ 105.113392][ T540] usb 3-1: config 0 descriptor?? [ 105.120247][ T28] audit: type=1326 audit(1762275295.275:1238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1774 comm="syz.3.389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2952f8f6c9 code=0x7ffc0000 [ 105.150932][ T287] EXT4-fs (loop3): unmounting filesystem. [ 105.154347][ T28] audit: type=1326 audit(1762275295.285:1239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1774 comm="syz.3.389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f2952f8f6c9 code=0x7ffc0000 [ 105.180616][ T28] audit: type=1326 audit(1762275295.285:1240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1774 comm="syz.3.389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2952f8f6c9 code=0x7ffc0000 [ 105.204141][ T28] audit: type=1326 audit(1762275295.285:1241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1774 comm="syz.3.389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2952f8f6c9 code=0x7ffc0000 [ 105.228055][ T28] audit: type=1326 audit(1762275295.305:1242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1774 comm="syz.3.389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2952f8f6c9 code=0x7ffc0000 [ 105.251459][ T28] audit: type=1326 audit(1762275295.305:1243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1774 comm="syz.3.389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2952f8f6c9 code=0x7ffc0000 [ 105.304571][ T1804] device wg2 left promiscuous mode [ 105.320291][ T1804] device wg2 entered promiscuous mode [ 106.031869][ T1817] loop1: detected capacity change from 0 to 512 [ 106.053948][ T1817] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 106.063668][ T1813] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.065420][ T1817] ext4 filesystem being mounted at /75/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.070788][ T1813] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.089096][ T1813] device bridge_slave_0 entered promiscuous mode [ 106.098821][ T1813] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.105975][ T1813] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.115613][ T1813] device bridge_slave_1 entered promiscuous mode [ 106.325704][ T285] EXT4-fs (loop1): unmounting filesystem. [ 106.378447][ T1813] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.385544][ T1813] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.392841][ T1813] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.399875][ T1813] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.437319][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 106.442947][ T1786] loop2: detected capacity change from 0 to 256 [ 106.451067][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.451806][ T1786] FAT-fs (loop2): Unrecognized mount option "000000000000000000030x0000000000000000" or missing value [ 106.484265][ T1786] loop2: detected capacity change from 0 to 256 [ 106.491621][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.664006][ T1786] FAT-fs (loop2): Directory bread(block 64) failed [ 106.720616][ T1786] FAT-fs (loop2): Directory bread(block 65) failed [ 106.727250][ T1786] FAT-fs (loop2): Directory bread(block 66) failed [ 106.733849][ T1786] FAT-fs (loop2): Directory bread(block 67) failed [ 106.758589][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 106.770936][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.778016][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.785865][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 106.794309][ T1786] FAT-fs (loop2): Directory bread(block 68) failed [ 106.802971][ T1786] FAT-fs (loop2): Directory bread(block 69) failed [ 106.810813][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.817874][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.825392][ T1786] FAT-fs (loop2): Directory bread(block 70) failed [ 106.832008][ T1786] FAT-fs (loop2): Directory bread(block 71) failed [ 106.838627][ T1786] FAT-fs (loop2): Directory bread(block 72) failed [ 106.845326][ T1786] FAT-fs (loop2): Directory bread(block 73) failed [ 106.863035][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 106.878126][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 106.886513][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 106.896707][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 106.904602][ T540] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 106.940276][ T540] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 106.955988][ T846] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 106.964420][ T846] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 106.969305][ T540] asix: probe of 3-1:0.0 failed with error -71 [ 106.984235][ T1813] device veth0_vlan entered promiscuous mode [ 106.991018][ T846] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 106.999169][ T846] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 107.014004][ T1813] device veth1_macvtap entered promiscuous mode [ 107.031219][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 107.050446][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 107.057989][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 107.067942][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 107.076391][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 107.092275][ T540] usb 3-1: USB disconnect, device number 4 [ 107.101023][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 107.114151][ T396] udevd[396]: setting mode of /dev/bus/usb/003/004 to 020664 failed: No such file or directory [ 107.115051][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 107.135731][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 107.141468][ T396] udevd[396]: setting owner of /dev/bus/usb/003/004 to uid=0, gid=0 failed: No such file or directory [ 107.144269][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 107.232448][ T1849] device wg2 entered promiscuous mode [ 107.326318][ T1853] syz.5.400[1853] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 107.326646][ T1853] syz.5.400[1853] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 107.736544][ T582] device bridge_slave_1 left promiscuous mode [ 107.787312][ T1858] netlink: 12 bytes leftover after parsing attributes in process `syz.1.410'. [ 107.946613][ T1858] netlink: 12 bytes leftover after parsing attributes in process `syz.1.410'. [ 107.967459][ T582] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.264643][ T582] device bridge_slave_0 left promiscuous mode [ 108.270866][ T582] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.278983][ T582] device veth0_vlan left promiscuous mode [ 108.683192][ T1869] loop4: detected capacity change from 0 to 40427 [ 108.695254][ T1869] F2FS-fs (loop4): fault_injection options not supported [ 108.710605][ T1869] F2FS-fs (loop4): invalid crc value [ 108.723746][ T1869] F2FS-fs (loop4): Found nat_bits in checkpoint [ 108.743054][ T1881] device wg2 entered promiscuous mode [ 108.759034][ T1869] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 108.767727][ T1869] FAULT_INJECTION: forcing a failure. [ 108.767727][ T1869] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 108.781101][ T1869] CPU: 1 PID: 1869 Comm: syz.4.414 Not tainted syzkaller #0 [ 108.788381][ T1869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 108.798423][ T1869] Call Trace: [ 108.801695][ T1869] [ 108.804615][ T1869] __dump_stack+0x21/0x24 [ 108.808937][ T1869] dump_stack_lvl+0xee/0x150 [ 108.813505][ T1869] ? __cfi_dump_stack_lvl+0x8/0x8 [ 108.818521][ T1869] ? kasan_set_track+0x60/0x70 [ 108.823268][ T1869] ? kasan_save_alloc_info+0x25/0x30 [ 108.828532][ T1869] ? __kasan_slab_alloc+0x72/0x80 [ 108.833536][ T1869] ? slab_post_alloc_hook+0x4f/0x2d0 [ 108.838803][ T1869] ? security_inode_alloc+0x33/0x120 [ 108.844066][ T1869] ? inode_init_always+0x6fc/0x960 [ 108.849162][ T1869] ? new_inode_pseudo+0xa2/0x1f0 [ 108.854081][ T1869] dump_stack+0x15/0x24 [ 108.858215][ T1869] should_fail_ex+0x3d4/0x520 [ 108.862873][ T1869] should_fail_alloc_page+0x61/0x90 [ 108.868053][ T1869] prepare_alloc_pages+0x148/0x5f0 [ 108.873144][ T1869] ? __alloc_pages_bulk+0x9c0/0x9c0 [ 108.878323][ T1869] ? avc_has_perm_noaudit+0x2f4/0x460 [ 108.883682][ T1869] __alloc_pages+0x124/0x450 [ 108.888255][ T1869] ? __cfi___alloc_pages+0x10/0x10 [ 108.893345][ T1869] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 108.898787][ T1869] __folio_alloc+0x12/0x40 [ 108.903183][ T1869] __filemap_get_folio+0x6ec/0x980 [ 108.908271][ T1869] ? 0xffffffffa0000664 [ 108.912412][ T1869] ? __cfi___filemap_get_folio+0x10/0x10 [ 108.918023][ T1869] pagecache_get_page+0x2b/0x110 [ 108.922942][ T1869] f2fs_get_read_data_page+0x17c/0x840 [ 108.928379][ T1869] ? __cfi_f2fs_get_read_data_page+0x10/0x10 [ 108.934340][ T1869] ? kasan_save_alloc_info+0x25/0x30 [ 108.939604][ T1869] ? __kasan_slab_alloc+0x72/0x80 [ 108.944605][ T1869] ? slab_post_alloc_hook+0x4f/0x2d0 [ 108.949867][ T1869] ? kmem_cache_alloc_lru+0x104/0x280 [ 108.955216][ T1869] ? __d_alloc+0x34/0x6c0 [ 108.959524][ T1869] f2fs_find_data_page+0x198/0x3a0 [ 108.964613][ T1869] __f2fs_find_entry+0x720/0xdb0 [ 108.969538][ T1869] ? __cfi___f2fs_find_entry+0x10/0x10 [ 108.974974][ T1869] ? generic_set_encrypted_ci_d_ops+0xce/0x100 [ 108.981106][ T1869] f2fs_lookup+0x19b/0xab0 [ 108.985502][ T1869] ? __cfi_f2fs_lookup+0x10/0x10 [ 108.990413][ T1869] ? _raw_spin_lock+0x8e/0xe0 [ 108.995064][ T1869] ? __cfi__raw_spin_lock+0x10/0x10 [ 109.000239][ T1869] ? _raw_spin_unlock+0x4c/0x70 [ 109.005065][ T1869] ? d_alloc+0x199/0x1d0 [ 109.009286][ T1869] lookup_one_qstr_excl+0x125/0x270 [ 109.014457][ T1869] filename_create+0x219/0x450 [ 109.019201][ T1869] ? kasan_save_alloc_info+0x25/0x30 [ 109.024467][ T1869] ? kern_path_create+0x1b0/0x1b0 [ 109.029471][ T1869] do_mkdirat+0x5c/0x4c0 [ 109.033690][ T1869] ? getname_flags+0x206/0x500 [ 109.038432][ T1869] __x64_sys_mkdirat+0x89/0xa0 [ 109.043173][ T1869] x64_sys_call+0x73d/0x9a0 [ 109.047656][ T1869] do_syscall_64+0x4c/0xa0 [ 109.052047][ T1869] ? clear_bhb_loop+0x30/0x80 [ 109.056704][ T1869] ? clear_bhb_loop+0x30/0x80 [ 109.061359][ T1869] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 109.067233][ T1869] RIP: 0033:0x7f6c2bd8de17 [ 109.071646][ T1869] Code: 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 109.091226][ T1869] RSP: 002b:00007f6c2ccd2e68 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 109.099615][ T1869] RAX: ffffffffffffffda RBX: 00007f6c2ccd2ef0 RCX: 00007f6c2bd8de17 [ 109.107562][ T1869] RDX: 00000000000001ff RSI: 0000200000000040 RDI: 00000000ffffff9c [ 109.115515][ T1869] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 109.123459][ T1869] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000040 [ 109.131405][ T1869] R13: 00007f6c2ccd2eb0 R14: 0000000000000000 R15: 0000000000000000 [ 109.139357][ T1869] [ 109.159383][ T1886] loop5: detected capacity change from 0 to 256 [ 109.205729][ T1886] FAT-fs (loop5): Directory bread(block 64) failed [ 109.212521][ T1886] FAT-fs (loop5): Directory bread(block 65) failed [ 109.234498][ T1886] FAT-fs (loop5): Directory bread(block 66) failed [ 109.242928][ T1886] FAT-fs (loop5): Directory bread(block 67) failed [ 109.249473][ T1886] FAT-fs (loop5): Directory bread(block 68) failed [ 109.256053][ T1886] FAT-fs (loop5): Directory bread(block 69) failed [ 109.263609][ T1886] FAT-fs (loop5): Directory bread(block 70) failed [ 109.270177][ T1886] FAT-fs (loop5): Directory bread(block 71) failed [ 109.276698][ T1886] FAT-fs (loop5): Directory bread(block 72) failed [ 109.293183][ T1893] device wg2 entered promiscuous mode [ 109.299098][ T1886] FAT-fs (loop5): Directory bread(block 73) failed [ 109.361039][ T1895] netlink: 12 bytes leftover after parsing attributes in process `syz.1.422'. [ 109.370880][ T1895] netlink: 12 bytes leftover after parsing attributes in process `syz.1.422'. [ 110.605460][ T1897] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 111.396751][ T1908] loop3: detected capacity change from 0 to 1024 [ 111.418654][ T1908] EXT4-fs: Ignoring removed i_version option [ 111.430233][ T1908] EXT4-fs (loop3): Test dummy encryption mode enabled [ 111.444599][ T1908] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 111.516941][ T1919] syz.2.426[1919] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 111.517027][ T1919] syz.2.426[1919] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 112.234527][ T1923] device wg2 left promiscuous mode [ 112.251121][ T1925] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 112.340551][ T1923] device wg2 entered promiscuous mode [ 112.354176][ T287] EXT4-fs (loop3): unmounting filesystem. [ 114.069252][ T1936] netlink: 12 bytes leftover after parsing attributes in process `syz.2.433'. [ 114.174202][ T1936] netlink: 12 bytes leftover after parsing attributes in process `syz.2.433'. [ 114.200317][ T1940] loop2: detected capacity change from 0 to 128 [ 114.210575][ T28] kauditd_printk_skb: 77 callbacks suppressed [ 114.210589][ T28] audit: type=1400 audit(1762275304.725:1321): avc: denied { wake_alarm } for pid=1939 comm="syz.2.435" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 114.248868][ T1942] fuse: Unknown parameter 'rotmode' [ 114.255910][ T1943] 9pnet_fd: Insufficient options for proto=fd [ 116.772473][ T1945] loop5: detected capacity change from 0 to 40427 [ 116.939887][ T60] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 116.973826][ T1945] F2FS-fs (loop5): Found nat_bits in checkpoint [ 116.982574][ T1955] FAULT_INJECTION: forcing a failure. [ 116.982574][ T1955] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 117.000419][ T1955] CPU: 1 PID: 1955 Comm: syz.3.439 Not tainted syzkaller #0 [ 117.007712][ T1955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 117.017757][ T1955] Call Trace: [ 117.021021][ T1955] [ 117.023938][ T1955] __dump_stack+0x21/0x24 [ 117.028258][ T1955] dump_stack_lvl+0xee/0x150 [ 117.032834][ T1955] ? __cfi_dump_stack_lvl+0x8/0x8 [ 117.037839][ T1955] dump_stack+0x15/0x24 [ 117.041974][ T1955] should_fail_ex+0x3d4/0x520 [ 117.046646][ T1955] should_fail+0xb/0x10 [ 117.050783][ T1955] should_fail_usercopy+0x1a/0x20 [ 117.055796][ T1955] _copy_to_user+0x1e/0x90 [ 117.060202][ T1955] simple_read_from_buffer+0xe9/0x160 [ 117.065555][ T1955] proc_fail_nth_read+0x19a/0x210 [ 117.070558][ T1955] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 117.076087][ T1955] ? security_file_permission+0x94/0xb0 [ 117.081613][ T1955] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 117.087137][ T1955] vfs_read+0x26e/0x8c0 [ 117.091277][ T1955] ? __cfi_vfs_read+0x10/0x10 [ 117.095941][ T1955] ? __kasan_check_write+0x14/0x20 [ 117.101032][ T1955] ? mutex_lock+0x8d/0x1a0 [ 117.105431][ T1955] ? __cfi_mutex_lock+0x10/0x10 [ 117.110265][ T1955] ? __fdget_pos+0x2cd/0x380 [ 117.114835][ T1955] ? ksys_read+0x71/0x240 [ 117.119151][ T1955] ksys_read+0x140/0x240 [ 117.123375][ T1955] ? __cfi_ksys_read+0x10/0x10 [ 117.128120][ T1955] ? debug_smp_processor_id+0x17/0x20 [ 117.133469][ T1955] __x64_sys_read+0x7b/0x90 [ 117.137951][ T1955] x64_sys_call+0x2f/0x9a0 [ 117.142350][ T1955] do_syscall_64+0x4c/0xa0 [ 117.146746][ T1955] ? clear_bhb_loop+0x30/0x80 [ 117.151407][ T1955] ? clear_bhb_loop+0x30/0x80 [ 117.156069][ T1955] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 117.161942][ T1955] RIP: 0033:0x7f2952f8e0dc [ 117.166335][ T1955] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 117.185916][ T1955] RSP: 002b:00007f2953e1e030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 117.194395][ T1955] RAX: ffffffffffffffda RBX: 00007f29531e5fa0 RCX: 00007f2952f8e0dc [ 117.202348][ T1955] RDX: 000000000000000f RSI: 00007f2953e1e0a0 RDI: 0000000000000004 [ 117.210296][ T1955] RBP: 00007f2953e1e090 R08: 0000000000000000 R09: 0000000000000000 [ 117.218245][ T1955] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 117.226194][ T1955] R13: 00007f29531e6038 R14: 00007f29531e5fa0 R15: 00007ffc3501d408 [ 117.234148][ T1955] [ 117.243959][ T1945] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 117.757612][ T1974] netlink: 12 bytes leftover after parsing attributes in process `syz.2.445'. [ 118.676325][ T1974] netlink: 12 bytes leftover after parsing attributes in process `syz.2.445'. [ 118.689942][ T60] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 118.844631][ T1981] device wg2 left promiscuous mode [ 118.948162][ T1981] device wg2 entered promiscuous mode [ 119.331036][ T60] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 119.342002][ T60] usb 2-1: New USB device found, idVendor=056a, idProduct=0064, bcdDevice= 0.00 [ 119.351359][ T60] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.366275][ T60] usb 2-1: config 0 descriptor?? [ 119.371946][ T1952] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 119.443487][ T1988] 9pnet_fd: Insufficient options for proto=fd [ 119.446719][ T1990] loop3: detected capacity change from 0 to 512 [ 119.463658][ T1992] device wg2 left promiscuous mode [ 119.477379][ T28] audit: type=1400 audit(1762275309.985:1322): avc: denied { ioctl } for pid=1991 comm="syz.5.449" path="/dev/uinput" dev="devtmpfs" ino=262 ioctlcmd=0x5564 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 119.506352][ T1992] input: syz0 as /devices/virtual/input/input11 [ 119.513752][ T28] audit: type=1400 audit(1762275310.025:1323): avc: denied { read } for pid=88 comm="acpid" name="event3" dev="devtmpfs" ino=906 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 119.551853][ T1992] device wg2 entered promiscuous mode [ 119.559740][ T28] audit: type=1400 audit(1762275310.025:1324): avc: denied { open } for pid=88 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=906 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 119.584792][ T28] audit: type=1400 audit(1762275310.025:1325): avc: denied { ioctl } for pid=88 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=906 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 119.631416][ T1995] loop5: detected capacity change from 0 to 512 [ 119.887977][ T60] usbhid 2-1:0.0: can't add hid device: -71 [ 119.896013][ T60] usbhid: probe of 2-1:0.0 failed with error -71 [ 119.907086][ T60] usb 2-1: USB disconnect, device number 5 [ 119.953143][ T2002] loop2: detected capacity change from 0 to 256 [ 119.972279][ T2002] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 119.989787][ T2002] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 120.007531][ T2002] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 120.028219][ T28] audit: type=1400 audit(1762275310.535:1326): avc: denied { setattr } for pid=2001 comm="syz.2.453" name="file0" dev="loop2" ino=1048625 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 120.053535][ T28] audit: type=1400 audit(1762275310.535:1327): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 120.106657][ T28] audit: type=1400 audit(1762275310.565:1328): avc: denied { ioctl } for pid=2003 comm="syz.4.454" path="socket:[21907]" dev="sockfs" ino=21907 ioctlcmd=0x8902 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 120.270535][ T2006] device wg2 left promiscuous mode [ 120.279091][ T2009] device wg2 entered promiscuous mode [ 120.393903][ T2016] netlink: 12 bytes leftover after parsing attributes in process `syz.2.458'. [ 120.409450][ T2016] netlink: 12 bytes leftover after parsing attributes in process `syz.2.458'. [ 120.527908][ T2020] device wg2 left promiscuous mode [ 120.535119][ T2020] device wg2 entered promiscuous mode [ 120.565499][ T2024] loop5: detected capacity change from 0 to 512 [ 121.692283][ T2041] device wg2 left promiscuous mode [ 121.757754][ T2044] 9pnet_fd: Insufficient options for proto=fd [ 121.764430][ T2041] device wg2 entered promiscuous mode [ 122.427407][ T2048] netlink: 12 bytes leftover after parsing attributes in process `syz.1.469'. [ 122.447091][ T2048] netlink: 12 bytes leftover after parsing attributes in process `syz.1.469'. [ 122.749697][ T28] audit: type=1326 audit(1762275313.035:1329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2042 comm="syz.4.468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c2bd8f6c9 code=0x7ffc0000 [ 122.773566][ T28] audit: type=1326 audit(1762275313.035:1330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2042 comm="syz.4.468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c2bd8f6c9 code=0x7ffc0000 [ 122.810923][ T28] audit: type=1326 audit(1762275313.045:1331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2042 comm="syz.4.468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f6c2bd8f6c9 code=0x7ffc0000 [ 122.834366][ T2055] device wg2 left promiscuous mode [ 122.901035][ T2055] device wg2 entered promiscuous mode [ 122.954083][ T2038] loop3: detected capacity change from 0 to 40427 [ 122.963279][ T2038] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 122.973947][ T2060] netlink: 4 bytes leftover after parsing attributes in process `syz.5.470'. [ 122.995946][ T2057] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 123.003191][ T2057] IPv6: NLM_F_CREATE should be set when creating new route [ 123.011427][ T2057] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 123.018636][ T2057] IPv6: NLM_F_CREATE should be set when creating new route [ 123.206243][ T814] I/O error, dev loop3, sector 40192 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 124.562060][ T2038] loop3: detected capacity change from 0 to 512 [ 125.195402][ T2083] loop5: detected capacity change from 0 to 2048 [ 125.556049][ T2083] loop5: p1 < > p4 [ 125.590551][ T2083] loop5: p4 size 8388608 extends beyond EOD, truncated [ 125.615083][ T2097] loop4: detected capacity change from 0 to 4096 [ 125.625652][ T2097] EXT4-fs (loop4): Test dummy encryption mode enabled [ 125.660749][ T2097] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 125.862665][ T2106] netlink: 12 bytes leftover after parsing attributes in process `syz.5.484'. [ 125.871995][ T2106] netlink: 12 bytes leftover after parsing attributes in process `syz.5.484'. [ 127.751836][ T28] kauditd_printk_skb: 43 callbacks suppressed [ 127.751854][ T28] audit: type=1326 audit(1762275317.365:1375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2110 comm="syz.5.486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee68f8f6c9 code=0x7ffc0000 [ 127.794978][ T2121] netlink: 12 bytes leftover after parsing attributes in process `syz.1.489'. [ 127.817744][ T2121] netlink: 12 bytes leftover after parsing attributes in process `syz.1.489'. [ 127.838480][ T283] EXT4-fs (loop4): unmounting filesystem. [ 127.839119][ T28] audit: type=1326 audit(1762275317.365:1376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2110 comm="syz.5.486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee68f8f6c9 code=0x7ffc0000 [ 127.867559][ T28] audit: type=1326 audit(1762275317.365:1377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2110 comm="syz.5.486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fee68f8f6c9 code=0x7ffc0000 [ 127.967261][ T28] audit: type=1326 audit(1762275317.365:1378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2110 comm="syz.5.486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee68f8f6c9 code=0x7ffc0000 [ 128.022852][ T28] audit: type=1326 audit(1762275317.365:1379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2110 comm="syz.5.486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee68f8f6c9 code=0x7ffc0000 [ 128.339907][ T28] audit: type=1326 audit(1762275317.475:1380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2110 comm="syz.5.486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=189 compat=0 ip=0x7fee68f8f6c9 code=0x7ffc0000 [ 128.410676][ T28] audit: type=1326 audit(1762275317.475:1381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2110 comm="syz.5.486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee68f8f6c9 code=0x7ffc0000 [ 128.549905][ T28] audit: type=1326 audit(1762275317.475:1382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2110 comm="syz.5.486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee68f8f6c9 code=0x7ffc0000 [ 128.618084][ T28] audit: type=1326 audit(1762275317.575:1383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2110 comm="syz.5.486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fee68f8f6c9 code=0x7ffc0000 [ 128.642099][ T28] audit: type=1326 audit(1762275317.575:1384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2110 comm="syz.5.486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee68f8f6c9 code=0x7ffc0000 [ 128.800268][ T2145] netlink: 12 bytes leftover after parsing attributes in process `syz.3.496'. [ 128.829901][ T2140] loop1: detected capacity change from 0 to 40427 [ 128.837184][ T2145] netlink: 12 bytes leftover after parsing attributes in process `syz.3.496'. [ 128.848906][ T2140] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 128.858567][ T2140] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 128.905926][ T2142] loop2: detected capacity change from 0 to 40427 [ 128.914770][ T2140] F2FS-fs (loop1): invalid crc_offset: 33558524 [ 128.932621][ T2142] F2FS-fs (loop2): fault_injection options not supported [ 128.951407][ T2153] loop4: detected capacity change from 0 to 512 [ 128.959660][ T2142] F2FS-fs (loop2): fault_type options not supported [ 128.966373][ T2142] F2FS-fs (loop2): FLUSH_MERGE not compatible with readonly mode [ 128.978520][ T2142] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=19 sclass=netlink_audit_socket pid=2142 comm=syz.2.495 [ 129.233347][ T2140] F2FS-fs (loop1): Found nat_bits in checkpoint [ 129.263561][ T2153] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 129.312302][ T2153] ext4 filesystem being mounted at /110/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 129.344103][ T2140] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 129.351398][ T2140] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 130.569553][ T283] EXT4-fs (loop4): unmounting filesystem. [ 130.616798][ T2179] loop3: detected capacity change from 0 to 512 [ 132.028668][ T2219] loop1: detected capacity change from 0 to 512 [ 132.066075][ T2219] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 132.075163][ T2219] ext4 filesystem being mounted at /96/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 134.308670][ T2250] syz.3.518[2250] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 134.309042][ T2250] syz.3.518[2250] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 134.441136][ T2250] loop3: detected capacity change from 0 to 16 [ 134.469291][ T2250] erofs: (device loop3): mounted with root inode @ nid 36. [ 134.610103][ T285] EXT4-fs (loop1): unmounting filesystem. [ 134.735683][ T28] kauditd_printk_skb: 83 callbacks suppressed [ 134.735720][ T28] audit: type=1326 audit(1762275325.175:1468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2252 comm="syz.4.526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c2bd8f6c9 code=0x7ffc0000 [ 134.852924][ T28] audit: type=1326 audit(1762275325.175:1469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2252 comm="syz.4.526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f6c2bd8f6c9 code=0x7ffc0000 [ 134.892402][ T28] audit: type=1326 audit(1762275325.185:1470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2252 comm="syz.4.526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c2bd8f6c9 code=0x7ffc0000 [ 134.935944][ T28] audit: type=1326 audit(1762275325.185:1471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2252 comm="syz.4.526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=189 compat=0 ip=0x7f6c2bd8f6c9 code=0x7ffc0000 [ 134.959551][ T28] audit: type=1326 audit(1762275325.185:1472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2252 comm="syz.4.526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c2bd8f6c9 code=0x7ffc0000 [ 134.989437][ T28] audit: type=1326 audit(1762275325.185:1473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2252 comm="syz.4.526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6c2bd8f6c9 code=0x7ffc0000 [ 135.048232][ T28] audit: type=1326 audit(1762275325.185:1474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2252 comm="syz.4.526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c2bd8f6c9 code=0x7ffc0000 [ 135.073225][ T28] audit: type=1326 audit(1762275325.195:1475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2252 comm="syz.4.526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f6c2bd8f6c9 code=0x7ffc0000 [ 135.096772][ T28] audit: type=1326 audit(1762275325.195:1476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2252 comm="syz.4.526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c2bd8f6c9 code=0x7ffc0000 [ 135.120276][ T28] audit: type=1326 audit(1762275325.195:1477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2252 comm="syz.4.526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6c2bd8f6c9 code=0x7ffc0000 [ 135.883838][ T2293] syz.4.535[2293] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 135.884178][ T2293] syz.4.535[2293] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 136.060048][ T2293] loop4: detected capacity change from 0 to 16 [ 136.145313][ T2293] erofs: (device loop4): mounted with root inode @ nid 36. [ 136.775200][ T2307] SELinux: policydb string length 0 does not match expected length 8 [ 136.783555][ T2307] SELinux: failed to load policy [ 137.770105][ T2312] loop3: detected capacity change from 0 to 1024 [ 137.942472][ T2312] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 137.995197][ T287] EXT4-fs (loop3): unmounting filesystem. [ 138.315266][ T2324] loop5: detected capacity change from 0 to 512 [ 138.450752][ T2324] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 138.459698][ T2324] ext4 filesystem being mounted at /29/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 138.716170][ T2337] syz.4.547[2337] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 138.716258][ T2337] syz.4.547[2337] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 138.729640][ T2337] loop4: detected capacity change from 0 to 16 [ 138.780879][ T2337] erofs: (device loop4): mounted with root inode @ nid 36. [ 139.876642][ T2339] loop2: detected capacity change from 0 to 512 [ 140.492533][ T1813] EXT4-fs (loop5): unmounting filesystem. [ 140.642272][ T2358] syz.4.550[2358] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 140.642360][ T2358] syz.4.550[2358] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 140.654907][ T2358] loop4: detected capacity change from 0 to 16 [ 140.673283][ T2358] erofs: (device loop4): mounted with root inode @ nid 36. [ 141.668417][ T2380] SELinux: policydb string length 0 does not match expected length 8 [ 141.676732][ T2380] SELinux: failed to load policy [ 141.900172][ T2381] loop2: detected capacity change from 0 to 1024 [ 141.994642][ T2381] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 142.045632][ T286] EXT4-fs (loop2): unmounting filesystem. [ 142.167809][ T2391] loop5: detected capacity change from 0 to 512 [ 142.516150][ T2396] syz.2.558[2396] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 142.516350][ T2396] syz.2.558[2396] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 142.532378][ T2396] loop2: detected capacity change from 0 to 16 [ 142.857350][ T2396] erofs: (device loop2): mounted with root inode @ nid 36. [ 143.672090][ T2405] device wg2 left promiscuous mode [ 143.698571][ T2405] device wg2 entered promiscuous mode [ 143.717178][ T2403] netlink: 'syz.5.561': attribute type 27 has an invalid length. [ 143.747874][ T2409] loop2: detected capacity change from 0 to 512 [ 143.757448][ T2403] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.764638][ T2403] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.810782][ T2403] device wg2 left promiscuous mode [ 144.632331][ T2433] loop2: detected capacity change from 0 to 16 [ 144.664245][ T2433] erofs: Unknown parameter '01777777777777777777777ÿÿÿÿ000000000000000000000000000000000000000000000000000000000000000000' [ 144.796396][ T2438] syz.4.571[2438] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 144.796489][ T2438] syz.4.571[2438] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 145.216355][ T2433] netlink: 8 bytes leftover after parsing attributes in process `syz.2.572'. [ 145.236636][ T28] kauditd_printk_skb: 55 callbacks suppressed [ 145.236679][ T28] audit: type=1400 audit(1762275335.725:1533): avc: denied { nlmsg_read } for pid=2431 comm="syz.2.572" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 145.402831][ T2433] loop2: detected capacity change from 0 to 40427 [ 145.412130][ T2433] ================================================================================ [ 145.421439][ T2433] UBSAN: shift-out-of-bounds in fs/f2fs/super.c:942:5 [ 145.428227][ T2433] shift exponent 65 is too large for 64-bit type 'unsigned long' [ 145.435987][ T2433] CPU: 1 PID: 2433 Comm: syz.2.572 Not tainted syzkaller #0 [ 145.443272][ T2433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 145.453314][ T2433] Call Trace: [ 145.456577][ T2433] [ 145.459495][ T2433] __dump_stack+0x21/0x24 [ 145.463811][ T2433] dump_stack_lvl+0xee/0x150 [ 145.468384][ T2433] ? __cfi_dump_stack_lvl+0x8/0x8 [ 145.473386][ T2433] ? __kasan_slab_free+0x11/0x20 [ 145.478309][ T2433] dump_stack+0x15/0x24 [ 145.482448][ T2433] ubsan_epilogue+0xe/0x40 [ 145.486847][ T2433] __ubsan_handle_shift_out_of_bounds+0x37c/0x400 [ 145.493242][ T2433] ? match_int+0x13c/0x190 [ 145.497643][ T2433] parse_options+0x4a10/0x4a20 [ 145.502401][ T2433] ? default_options+0xcb0/0xcb0 [ 145.507326][ T2433] ? f2fs_fill_super+0x2245/0x6c70 [ 145.512420][ T2433] ? memcpy+0x56/0x70 [ 145.516384][ T2433] f2fs_fill_super+0x2281/0x6c70 [ 145.521310][ T2433] ? __cfi_f2fs_fill_super+0x10/0x10 [ 145.526577][ T2433] ? mutex_unlock+0x89/0x220 [ 145.531153][ T2433] ? set_blocksize+0x1df/0x360 [ 145.535901][ T2433] ? sb_set_blocksize+0xaa/0xf0 [ 145.540735][ T2433] ? __cfi_f2fs_fill_super+0x10/0x10 [ 145.546002][ T2433] mount_bdev+0x2bc/0x3f0 [ 145.550315][ T2433] ? __cfi_f2fs_fill_super+0x10/0x10 [ 145.555585][ T2433] f2fs_mount+0x34/0x40 [ 145.559727][ T2433] legacy_get_tree+0xfe/0x1a0 [ 145.564386][ T2433] ? __cfi_f2fs_mount+0x10/0x10 [ 145.569221][ T2433] vfs_get_tree+0x9a/0x270 [ 145.573619][ T2433] do_new_mount+0x25a/0xa20 [ 145.578199][ T2433] path_mount+0x675/0x1010 [ 145.582606][ T2433] ? user_path_at_empty+0x161/0x1c0 [ 145.587797][ T2433] __se_sys_mount+0x318/0x380 [ 145.592492][ T2433] ? do_mkdirat+0x459/0x4c0 [ 145.596986][ T2433] ? __x64_sys_mount+0xd0/0xd0 [ 145.601742][ T2433] __x64_sys_mount+0xbf/0xd0 [ 145.606319][ T2433] x64_sys_call+0x65d/0x9a0 [ 145.610810][ T2433] do_syscall_64+0x4c/0xa0 [ 145.615213][ T2433] ? clear_bhb_loop+0x30/0x80 [ 145.619876][ T2433] ? clear_bhb_loop+0x30/0x80 [ 145.624627][ T2433] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 145.630510][ T2433] RIP: 0033:0x7f5b7ed90e6a [ 145.634921][ T2433] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 145.654518][ T2433] RSP: 002b:00007f5b7fb91e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 145.662922][ T2433] RAX: ffffffffffffffda RBX: 00007f5b7fb91ef0 RCX: 00007f5b7ed90e6a [ 145.670881][ T2433] RDX: 0000200000000140 RSI: 0000200000000380 RDI: 00007f5b7fb91eb0 [ 145.678846][ T2433] RBP: 0000200000000140 R08: 00007f5b7fb91ef0 R09: 0000000000000000 [ 145.686800][ T2433] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000380 [ 145.694751][ T2433] R13: 00007f5b7fb91eb0 R14: 0000000000005505 R15: 0000200000000bc0 [ 145.702712][ T2433] [ 145.705762][ C1] sched: RT throttling activated [ 145.705943][ T2433] ================================================================================ [ 145.720212][ T2433] F2FS-fs (loop2): Not support 2, larger than 256 [ 145.812985][ T2440] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 145.821969][ T2440] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 145.830265][ T2440] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent