last executing test programs: 3m54.328918631s ago: executing program 32 (id=9): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CAP_XEN_HVM(r1, 0x4068aea3, &(0x7f0000000040)={0x26, 0x0, 0x66}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000180)={0x1, 0x0, [{0xc0000000, 0x182e51a4, 0x0, 0x200, 0xfffffffc, 0xa9d, 0xfff}]}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000280)={0x9}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000000c0), 0x199201, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000140)) close_range(r3, 0xffffffffffffffff, 0x0) 3m37.545042981s ago: executing program 33 (id=115): openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x20c00, 0x0) memfd_create(&(0x7f00000000c0)=',\xea\xc9t\x8b\xb7\x04\x1d^s^\t5\xa1i\x01\x00\xd4\xd7\x02\x8dmbs\x0f3\x92\'\x94N\b\xe0m\xa4\x01\x00\xe5\x00\x00\x00\x00\x00-\xb3\x8d\xa1v\xe5\x8a0\x05\x00\xa4\xed\x94 \x15Y\x1f\xccY\xff\xb4\xa2\xa62:\xfa\xf9\xb7\x05q\xa4d\xda0y\xd3\xd6\x98\x9f\x11\n\xf44Q\xff\xff)\xb3|\x04\x00\x00\x80FD\xb8\xc2\x8a\x99Y\xf6:\xfeT\xa1', 0x4) writev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000100)="569534ab", 0x4}], 0x1) io_uring_enter(0xffffffffffffffff, 0x1f4b, 0xbacf, 0x42, &(0x7f0000000080)={[0x8000000000000000]}, 0x8) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) quotactl$Q_GETNEXTQUOTA(0xffffffff80000901, 0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='fdinfo/3\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x8000) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x8, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000500)={[0x101, 0xaec4, 0x6, 0x4000, 0x2, 0x4, 0xefffffffffffffff, 0x40000000000000, 0x0, 0x1fffffd, 0x20000, 0x1c, 0x0, 0x5, 0x1], 0x0, 0x41980}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3m5.583543332s ago: executing program 34 (id=343): openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x20c00, 0x0) memfd_create(&(0x7f00000000c0)=',\xea\xc9t\x8b\xb7\x04\x1d^s^\t5\xa1i\x01\x00\xd4\xd7\x02\x8dmbs\x0f3\x92\'\x94N\b\xe0m\xa4\x01\x00\xe5\x00\x00\x00\x00\x00-\xb3\x8d\xa1v\xe5\x8a0\x05\x00\xa4\xed\x94 \x15Y\x1f\xccY\xff\xb4\xa2\xa62:\xfa\xf9\xb7\x05q\xa4d\xda0y\xd3\xd6\x98\x9f\x11\n\xf44Q\xff\xff)\xb3|\x04\x00\x00\x80FD\xb8\xc2\x8a\x99Y\xf6:\xfeT\xa1', 0x4) writev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000100)="569534ab", 0x4}], 0x1) io_uring_enter(0xffffffffffffffff, 0x1f4b, 0xbacf, 0x42, &(0x7f0000000080)={[0x8000000000000000]}, 0x8) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200"], 0x48) quotactl$Q_GETNEXTQUOTA(0xffffffff80000901, &(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x8000) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x8, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000500)={[0x101, 0xaec4, 0x6, 0x4000, 0x2, 0x4, 0xefffffffffffffff, 0x40000000000000, 0x0, 0x1fffffd, 0x20000, 0x1c, 0x0, 0x5, 0x1], 0x0, 0x41980}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m48.541887627s ago: executing program 2 (id=546): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) recvmmsg(r0, &(0x7f0000003340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=""/64, 0x40}, 0x4}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003040)=""/243, 0xf3}, 0x1}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000032c0)=""/71, 0x47}, 0x7f}], 0x3, 0x40000002, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x108}, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score\x00') r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x901800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xa, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="7b87f20f", @ANYRES64=r4], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2m47.6050997s ago: executing program 35 (id=490): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) recvmmsg(r0, &(0x7f0000003340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=""/64, 0x40}, 0x4}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003040)=""/243, 0xf3}, 0x1}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000032c0)=""/71, 0x47}, 0x7f}], 0x3, 0x40000002, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x120}, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score\x00') openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x901800, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xa, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="7b87f20f", @ANYRES64=r2], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m47.59604866s ago: executing program 2 (id=548): openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=[@cred={{0x1c}}, @rights={{0x44, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x128}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x901800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xa, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="7b87f2", @ANYRES64=r4], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2m47.419272234s ago: executing program 2 (id=549): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x30, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="24000000190001000000000000c3b2000a0000000003c8000000000008000600ffffffff"], 0x24}, 0x1, 0x0, 0x0, 0x40080}, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) read$rfkill(r0, &(0x7f0000000040), 0x8) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) read$watch_queue(0xffffffffffffffff, 0x0, 0x0) 2m47.415649104s ago: executing program 2 (id=550): openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x20c00, 0x0) memfd_create(&(0x7f00000000c0)=',\xea\xc9t\x8b\xb7\x04\x1d^s^\t5\xa1i\x01\x00\xd4\xd7\x02\x8dmbs\x0f3\x92\'\x94N\b\xe0m\xa4\x01\x00\xe5\x00\x00\x00\x00\x00-\xb3\x8d\xa1v\xe5\x8a0\x05\x00\xa4\xed\x94 \x15Y\x1f\xccY\xff\xb4\xa2\xa62:\xfa\xf9\xb7\x05q\xa4d\xda0y\xd3\xd6\x98\x9f\x11\n\xf44Q\xff\xff)\xb3|\x04\x00\x00\x80FD\xb8\xc2\x8a\x99Y\xf6:\xfeT\xa1', 0x4) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x1f4b, 0xbacf, 0x42, &(0x7f0000000080)={[0x8000000000000000]}, 0x8) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004"], 0x48) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='fdinfo/3\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x8, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000500)={[0x101, 0xaec4, 0x6, 0x4000, 0x2, 0x4, 0xefffffffffffffff, 0x40000000000000, 0x0, 0x1fffffd, 0x20000, 0x1c, 0x0, 0x5, 0x1], 0x0, 0x41980}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m46.505919536s ago: executing program 2 (id=551): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x22, &(0x7f0000000300)=0x1, 0x4) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x16481, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_emit_ethernet(0x46, &(0x7f0000004700)={@random="89b72ae666f6", @empty, @void, {@ipv6={0x86dd, @icmpv6={0x7, 0x6, "8400c8", 0x10, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, @local, {[], @ndisc_ra={0x86, 0x0, 0x0, 0xff, 0x2, 0x7, 0x1, 0x3}}}}}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r3, &(0x7f0000000000)='3', 0x4e) r4 = openat(r3, &(0x7f0000000040)='./proc/thread-self/fail-nth\x00', 0x80, 0x2a) ioctl$UI_DEV_DESTROY(r4, 0x5502) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$pokeuser(0x6, r6, 0x388, 0x41d9fda7) r7 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r7) 2m46.453904208s ago: executing program 8 (id=547): syz_emit_ethernet(0x32, &(0x7f00000002c0)={@broadcast, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) read$FUSE(0xffffffffffffffff, &(0x7f0000000880)={0x2020, 0x0, 0x0, 0x0}, 0x2020) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000028c0)={{{@in=@remote, @in=@empty, 0x4e24, 0x0, 0x4e24, 0x742b, 0xa, 0x20, 0x160, 0x87, 0x0, r2}, {0x309d1cba, 0x2, 0x0, 0x9, 0x7ff, 0x0, 0x210, 0x9}, {0x5, 0x3b5, 0xe17, 0x1}, 0x5, 0x0, 0x2, 0x0, 0x2, 0x1}, {{@in=@private=0xa010101, 0x4d4, 0xff}, 0xa, @in6=@local, 0x0, 0x0, 0x1, 0x10, 0xe, 0x1, 0x7fff}}, 0xe8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) syz_genetlink_get_family_id$tipc(&(0x7f0000000b00), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xb4, 0x0, 0x8, 0x70bd27, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x2}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0xf}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x10}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x3}, @ETHTOOL_A_LINKMODES_HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x9}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x2}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x7c}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x9}]}, 0xb4}, 0x1, 0x0, 0x0, 0x48000}, 0x880) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x80) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000000)='./bus\x00', 0x10044c3, &(0x7f00000003c0)={[{@iocharset={'iocharset', 0x3d, 'maccyrillic'}}, {@uni_xlateno}, {@uni_xlate}, {@fat=@flush}, {@shortname_lower}, {@utf8}, {@uni_xlateno}, {@rodir}, {@utf8no}, {@rodir}, {@fat=@errors_remount}, {@fat=@codepage={'codepage', 0x3d, '866'}}, {@utf8no}, {@shortname_lower}, {@shortname_mixed}, {@iocharset={'iocharset', 0x3d, 'cp861'}}, {@uni_xlateno}]}, 0x13, 0x36b, &(0x7f0000000500)="$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") 2m45.464552891s ago: executing program 2 (id=552): bind$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e24, 0x1, @empty, 0x65}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc}, 0x1c}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x5}, 0x804) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000006680)={0x0, 0x0, &(0x7f0000006640)={&(0x7f0000000240)=ANY=[@ANYBLOB="580000000102"], 0x58}, 0x1, 0x0, 0x0, 0xc0}, 0x8d0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x102280}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x100, 0x5, 0x6, 0x4002, 0x9, 0x5, 0xefffffffffffffff, 0x0, 0xffffffffffffffff, 0x2000001, 0x0, 0x40000000001c, 0x1, 0xffffffffffffffff, 0x100], 0x0, 0x41801}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m45.128532179s ago: executing program 8 (id=553): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x22, &(0x7f0000000300)=0x1, 0x4) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x16481, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_emit_ethernet(0x46, &(0x7f0000004700)={@random="89b72ae666f6", @empty, @void, {@ipv6={0x86dd, @icmpv6={0x7, 0x6, "8400c8", 0x10, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, @local, {[], @ndisc_ra={0x86, 0x0, 0x0, 0xff, 0x2, 0x7, 0x1, 0x3}}}}}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r3, &(0x7f0000000000)='3', 0x4e) r4 = openat(r3, &(0x7f0000000040)='./proc/thread-self/fail-nth\x00', 0x80, 0x2a) ioctl$UI_DEV_DESTROY(r4, 0x5502) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) socket$nl_xfrm(0x10, 0x3, 0x6) r7 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r7) 2m44.184039302s ago: executing program 8 (id=554): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, 0x0}, 0x94) openat(0xffffffffffffff9c, 0x0, 0x401, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000000), 0x26, 0x756, &(0x7f00000002c0)="$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") mount$incfs(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000200), 0x80, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xc2c02e4d8eb3e456, 0x0) r1 = openat$incfs(r0, &(0x7f0000000280)='.pending_reads\x00', 0x1, 0x130) ioctl$TIOCL_GETKMSGREDIRECT(r1, 0xc058671e, &(0x7f00000000c0)) 2m44.178159682s ago: executing program 36 (id=512): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) recvmmsg(r0, &(0x7f0000003340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=""/64, 0x40}, 0x4}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003040)=""/243, 0xf3}, 0x1}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000032c0)=""/71, 0x47}, 0x7f}], 0x3, 0x40000002, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x120}, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score\x00') r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x901800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xa, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="7b87f20f", @ANYRES64=r4], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2m41.678149141s ago: executing program 37 (id=524): syz_emit_ethernet(0x32, &(0x7f00000002c0)={@broadcast, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) read$FUSE(0xffffffffffffffff, &(0x7f0000000880)={0x2020, 0x0, 0x0, 0x0}, 0x2020) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000028c0)={{{@in=@remote, @in=@empty, 0x4e24, 0x0, 0x4e24, 0x742b, 0xa, 0x20, 0x160, 0x87, 0x0, r2}, {0x309d1cba, 0x2, 0x0, 0x9, 0x7ff, 0x0, 0x210, 0x9}, {0x5, 0x3b5, 0xe17, 0x1}, 0x5, 0x0, 0x2, 0x0, 0x2, 0x1}, {{@in=@private=0xa010101, 0x4d4, 0xff}, 0xa, @in6=@local, 0x0, 0x0, 0x1, 0x10, 0xe, 0x1, 0x7fff}}, 0xe8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000b00), r3) sendmsg$TIPC_CMD_SET_NETID(r3, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000b40)={0x24, r4, 0x1, 0x70bd27, 0x25dfdbfd, {{}, {}, {0x8, 0x2, 0xfffffffb}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x40080) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_GET(r5, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000080)={0x28, r6, 0x1, 0x70bd2c, 0x3, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x28}}, 0x40000) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xb4, r6, 0x8, 0x70bd27, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x2}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0xf}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x10}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x3}, @ETHTOOL_A_LINKMODES_HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x9}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x2}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x7c}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x9}]}, 0xb4}, 0x1, 0x0, 0x0, 0x48000}, 0x880) prctl$PR_SET_SECCOMP(0x27, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x80) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000000)='./bus\x00', 0x10044c3, &(0x7f00000003c0)={[{@iocharset={'iocharset', 0x3d, 'maccyrillic'}}, {@uni_xlateno}, {@uni_xlate}, {@fat=@flush}, {@shortname_lower}, {@utf8}, {@uni_xlateno}, {@rodir}, {@utf8no}, {@rodir}, {@fat=@errors_remount}, {@fat=@codepage={'codepage', 0x3d, '866'}}, {@utf8no}, {@shortname_lower}, {@shortname_mixed}, {@iocharset={'iocharset', 0x3d, 'cp861'}}, {@uni_xlateno}]}, 0x13, 0x36b, &(0x7f0000000500)="$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") 2m38.677798513s ago: executing program 38 (id=536): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x22, &(0x7f0000000300)=0x1, 0x4) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x16481, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_emit_ethernet(0x46, &(0x7f0000004700)={@random="89b72ae666f6", @empty, @void, {@ipv6={0x86dd, @icmpv6={0x7, 0x6, "8400c8", 0x10, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, @local, {[], @ndisc_ra={0x86, 0x0, 0x0, 0xff, 0x2, 0x7, 0x1, 0x3}}}}}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r3, &(0x7f0000000000)='3', 0x4e) openat(r3, &(0x7f0000000040)='./proc/thread-self/fail-nth\x00', 0x80, 0x2a) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r5) 2m30.36057733s ago: executing program 39 (id=552): bind$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e24, 0x1, @empty, 0x65}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc}, 0x1c}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x5}, 0x804) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000006680)={0x0, 0x0, &(0x7f0000006640)={&(0x7f0000000240)=ANY=[@ANYBLOB="580000000102"], 0x58}, 0x1, 0x0, 0x0, 0xc0}, 0x8d0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x102280}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x100, 0x5, 0x6, 0x4002, 0x9, 0x5, 0xefffffffffffffff, 0x0, 0xffffffffffffffff, 0x2000001, 0x0, 0x40000000001c, 0x1, 0xffffffffffffffff, 0x100], 0x0, 0x41801}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m29.168781849s ago: executing program 40 (id=554): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, 0x0}, 0x94) openat(0xffffffffffffff9c, 0x0, 0x401, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000000), 0x26, 0x756, &(0x7f00000002c0)="$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") mount$incfs(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000200), 0x80, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xc2c02e4d8eb3e456, 0x0) r1 = openat$incfs(r0, &(0x7f0000000280)='.pending_reads\x00', 0x1, 0x130) ioctl$TIOCL_GETKMSGREDIRECT(r1, 0xc058671e, &(0x7f00000000c0)) 15.779356415s ago: executing program 5 (id=1660): syz_mount_image$vfat(&(0x7f0000001800), &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8, &(0x7f0000000980)=ANY=[], 0x4, 0x296, &(0x7f0000000580)="$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") r0 = socket(0x10, 0x3, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x300f401, 0x0, 0x2, 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') sendmmsg(r0, &(0x7f0000000000), 0x400000000000131, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000a80)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x846048, 0x0, 0x0, 0x0, 0x0) 15.523828111s ago: executing program 5 (id=1663): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x8000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x1) mlock(&(0x7f0000341000/0x4000)=nil, 0x4000) 14.924416115s ago: executing program 5 (id=1675): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/ttyS0\x00', 0x80502, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x1b) recvmsg(0xffffffffffffffff, 0x0, 0x40000020) 14.867029176s ago: executing program 5 (id=1679): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000001c0)='./file0\x00', 0x2048c5, &(0x7f0000001100)=ANY=[@ANYBLOB='uni_xlate=1,shortname=winnt,shortname=lower,nfs=nostale_ro,uni_xlate=1,uni_xlate=0,sys_immutable,shortname=mixed,fmask=00000000000000000001577,shortname=mixed,nonumtail=0,utf8=0,shortname=winnt,\x00'], 0x1, 0x2bd, &(0x7f0000001240)="$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") r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(0x0, 0x0, 0x0, 0x21d000, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f00000000c0)='./file0/../file0/../file0\x00') 14.803088338s ago: executing program 5 (id=1682): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) syz_emit_ethernet(0x4a, &(0x7f0000000300)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @multicast, @void, {@ipv6={0x86dd, @tcp={0x9, 0x6, '\x00', 0x14, 0x6, 0xff, @dev={0xfe, 0x80, '\x00', 0x39}, @local, {[], {{0x4e22, 0x4e24, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x10, 0x7, 0x0, 0x3}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000980)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3c}, @void, {@ipv6={0x86dd, @tcp={0x9, 0x6, "9eebf9", 0x14, 0x6, 0xff, @dev={0xfe, 0x80, '\x00', 0x39}, @local, {[], {{0x4e22, 0x4e24, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x10, 0xfbfd, 0x0, 0x94e}}}}}}}, 0x0) 14.679339331s ago: executing program 5 (id=1685): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x200000005c831, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0xf0ffffff) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 14.676509391s ago: executing program 41 (id=1685): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x200000005c831, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0xf0ffffff) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 11.198822334s ago: executing program 4 (id=1752): syz_read_part_table(0x106f, &(0x7f0000002100)="$eJzszz1KxVAQBeBzb16MaUJaq6xFECy0TWllobgAa92Dq7C0dQduwN5V2F2JP+AK9BXfBwMHZphhwr8aa3+cPGSrsynJPIw/vT676SstyfPLed5b62u5uGqtte+Zo3ldyvAZuyS70264/b2/3FwepGyHTl5T7t6u6333lJrkMMn6+Je/AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMC++ggAAP//NHITMA==") r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xa101, 0x0) write$binfmt_aout(r0, &(0x7f0000000100)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x3, 0x0, 0x15, "0062ba7d82000000000000000000f7fffeff00"}) r1 = syz_open_pts(r0, 0x8182) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000100), 0x18888, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) 10.887305681s ago: executing program 9 (id=1765): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r1 = openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000001c0), 0x12) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) 10.850332282s ago: executing program 9 (id=1767): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000180)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[], [{@dont_appraise}]}}, 0x0, 0x0, 0x0) 10.795075363s ago: executing program 9 (id=1769): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225c380fac12f8205d182f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd1f539bd43007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711d7219ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29754f928c59306ce105ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc05bea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800000000000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351ba332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d96ee1b84bb64b14aebc6b5194c55dd6890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b07838a3ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a139d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fcc49a729f11ab377f7132c543d29646a9378eea0761b7ed9d2172e33ed87c6513c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828bf209d0ed9829dec16ab67a4f59a504e09f55ab82bbd405087a17a229a149c53ee9145500db213cb36489a10957739e481a756e65bde579bbbfb404213f661eeaaffacbcfbfd60b1a715c366da2b37ac7e9e3033f8ec04db1c2412e02ccd0617d9fb646c4897750d068c936c3558a94b05d7c65c0d458c0d70d0aa864bc1e324d3f69b1b4061627da875a4b5c2668ab0990623fe6f3b54cd1c79da4baf256f88750c18486330589473e267fa44e220cf40db662b570c2a2fbba9a34a3dd7bbd8368fe506daa62b45797d4b397905a69e58eb436c08cc78963197adb1b16ad83a1a9b4"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000180)={0x0, 0x0}, 0x0) r2 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r1, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r2, r0, 0x3e, r0}, 0x5) 10.794969463s ago: executing program 9 (id=1770): syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x88c8, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x9, 0x260, &(0x7f0000000a80)="$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") mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x4) mkdirat(0xffffffffffffff9c, 0x0, 0x79) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) wait4(r0, 0x0, 0x2, 0x0) ptrace$poke(0x5, r0, &(0x7f00000011c0), 0xfffffffffffffffb) 10.747112574s ago: executing program 9 (id=1771): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0xcc, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x639bb430}, @CTA_NAT_SRC={0x38, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @local}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @remote}]}]}, 0xcc}}, 0x0) 10.695557865s ago: executing program 9 (id=1773): bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000200)={0x0, 0x0}, 0x6) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=r0, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000000)={r1, 0x20, &(0x7f0000000280)={&(0x7f0000000080)=""/238, 0xffffffffffffff80, 0x0, 0x0}}, 0x1e) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f000012d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00005a4000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r2 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r2, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x6, &(0x7f0000000180)=0x80000001, 0x4) setsockopt$inet_int(r2, 0x0, 0xd, &(0x7f0000000000)=0x101, 0x4) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000001140)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x66, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x1, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) 10.670994566s ago: executing program 42 (id=1773): bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000200)={0x0, 0x0}, 0x6) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=r0, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000000)={r1, 0x20, &(0x7f0000000280)={&(0x7f0000000080)=""/238, 0xffffffffffffff80, 0x0, 0x0}}, 0x1e) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f000012d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00005a4000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r2 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r2, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x6, &(0x7f0000000180)=0x80000001, 0x4) setsockopt$inet_int(r2, 0x0, 0xd, &(0x7f0000000000)=0x101, 0x4) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000001140)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x66, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x1, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) 10.279254135s ago: executing program 4 (id=1778): ioprio_set$pid(0x2, 0x0, 0x4000) mprotect(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x3000002) unshare(0x22020600) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x8c, 0x200) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000100)=0x8) 10.225769047s ago: executing program 4 (id=1780): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB='\n\x00\x00\x00\v\x00\x00\x00B\x00\x00\x00>'], 0x50) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x4004032, 0xffffffffffffffff, 0xb06cb000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000280)}, 0x20) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xf, 0x4, 0x8, 0xb}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000340)='GPL\x00', 0x4, 0x1005, &(0x7f00000014c0)=""/4101, 0x0, 0x4e}, 0x94) 10.194181477s ago: executing program 4 (id=1781): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000001c0)='./file0\x00', 0x2048c5, &(0x7f0000001100)=ANY=[@ANYBLOB='uni_xlate=1,shortname=winnt,shortname=lower,nfs=nostale_ro,uni_xlate=1,uni_xlate=0,sys_immutable,shortname=mixed,fmask=00000000000000000001577,shortname=mixed,nonumtail=0,utf8=0,shortname=winnt,\x00'], 0x1, 0x2bd, &(0x7f0000001240)="$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") r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x21d000, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f00000000c0)='./file0/../file0/../file0\x00') 10.10329226s ago: executing program 4 (id=1782): ioprio_get$pid(0x2, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x44004) openat(0xffffffffffffff9c, 0x0, 0x2040, 0x0) socket$nl_route(0x10, 0x3, 0x0) 9.943155163s ago: executing program 4 (id=1786): r0 = syz_open_procfs(0x0, &(0x7f0000002300)='fdinfo\x00') fgetxattr(r0, &(0x7f0000000000)=@known='system.posix_acl_default\x00', 0x0, 0x0) 9.910277534s ago: executing program 43 (id=1786): r0 = syz_open_procfs(0x0, &(0x7f0000002300)='fdinfo\x00') fgetxattr(r0, &(0x7f0000000000)=@known='system.posix_acl_default\x00', 0x0, 0x0) 3.823260139s ago: executing program 7 (id=1917): r0 = epoll_create1(0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x800, 0x44) getdents(r1, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r2, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x100000000000000) 3.823082699s ago: executing program 7 (id=1919): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x2, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000200)={0x4c, r1, 0x1, 0x0, 0x8000000, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x2e, 0x33, @action={{{}, {}, @device_b}, @channel_switch={0x0, 0x4, {{0x25, 0x3, {0x0, 0xe}}, @val={0x3e, 0x1}, @val={0x76, 0x6, {0x0, 0x6, 0x3b, 0xf15d}}}}}}]}, 0x4c}}, 0x0) 3.80092552s ago: executing program 7 (id=1921): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x48080}, 0x20004450) ioctl(0xffffffffffffffff, 0xb8, &(0x7f0000000000)="15e0185428227964d1") r0 = openat$kvm(0xffffff9c, &(0x7f0000000280), 0x40, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000340)={0x1fe, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) capset(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff, 0x6}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000040)=0x1fe, 0x4) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000002480)={[0x8000000000000001, 0x9, 0xffffffff, 0x85, 0x2, 0x0, 0x4002004c8, 0x1004, 0x45c5, 0x5, 0x14000000000, 0xffffffffffffffff, 0x5, 0x8000000000000000, 0x80000004000000, 0x80000000000004], 0xeeee0000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.711282202s ago: executing program 7 (id=1922): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="36450f6fe3c74424020600000088442406000000000f01142466b87a000f00d066b876000f00d0400f9ce4660f38823d00300000410f01dfb9800000c00f3235000400000f3045f7b300000000430f21e3420f00d5", 0x56}], 0x1, 0x0, 0x0, 0xb7) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40280, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x6b, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.130259646s ago: executing program 3 (id=1934): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x18d042, 0x15) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) pwrite64(r0, &(0x7f0000000000)="ff", 0xf000, 0x5b000) 2.95514933s ago: executing program 3 (id=1936): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000007100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000002140)={0x50, 0x0, r2, {0x7, 0x2b, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}}, 0x50) read$FUSE(r0, &(0x7f000000cdc0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000000000)={0x10, 0xffffffffffffffda, r3}, 0x10) syz_fuse_handle_req(r0, &(0x7f0000002780)="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", 0x2000, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x9, {0x7, 0x0, 0x3, 0xfff}}, 0x0}) ioctl$FS_IOC_RESVSP(r1, 0x40086602, &(0x7f0000002740)={0x0, 0x1, 0x3}) 2.558822469s ago: executing program 7 (id=1950): timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) socketpair$unix(0x1, 0x2, 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x12, &(0x7f0000000040), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x13, 0x0, 0x0, 0x0}, 0x94) 2.153209189s ago: executing program 3 (id=1941): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r0, 0xc138fd03, &(0x7f0000000000)="0400000000000000000000c53801000000000000000000000000000000000000000000000000000000000000000000006d") ioctl(r0, 0xc138fd09, &(0x7f0000000000)="0400000000000000000000006e0100004601000001") 2.070169891s ago: executing program 3 (id=1943): r0 = socket(0x1, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setreuid(r1, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) 1.931218994s ago: executing program 3 (id=1945): r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="bcea"]) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000000000)={0x51, 0xff, 0x560c, {0x7ffd, 0x595}, {0xfffa, 0x2}, @rumble={0x5, 0x9}}) 1.560981953s ago: executing program 1 (id=1951): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000480)=[{0x6, 0x0, 0x0, 0x7ffffffb}]}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.409482197s ago: executing program 1 (id=1953): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0xc}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) pipe(&(0x7f0000000040)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000640)={r0, &(0x7f0000000000)='\x00', &(0x7f0000000600)=@udp=r1, 0x2}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000010000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r2, r4}, 0x14) syz_emit_ethernet(0x46, &(0x7f0000000700)={@local, @remote, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0x10, 0x2b, 0x0, @private2, @local, {[], {0x2100, 0x0, 0x10, 0x0, @gue={{0x2, 0x1, 0x3, 0x6, 0x100, @val=0x80}}}}}}}}, 0x0) 1.310051269s ago: executing program 1 (id=1955): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x3, 0x0, &(0x7f0000000140)="d510fa", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000480)=""/74, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000400)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, &(0x7f0000000140)=""/92}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001800)={0x1, 0x0, [{0x0, 0x2a, &(0x7f0000000100)=""/42}]}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x18, 0x0, 0x0, 0x0, 0x40003, 0x0, 0x0, 0x41100, 0xf, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=""/57, 0x0, &(0x7f0000000500)=""/4092}) openat(0xffffffffffffff9c, 0x0, 0x2, 0x1b8) 452.075009ms ago: executing program 0 (id=1973): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_CAP_X2APIC_API(r1, 0x4068aea3, &(0x7f0000002a80)={0x81, 0x0, 0x3}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x801) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0xff, 0x0, 0x0, 0x7, 0x3, 0x0, 0x2, 0x0, 0x0, 0x80, 0x8, 0x0, 0x0, 0x0, 0x0, 0xe, 0x2, 0x0, '\x00', 0x0, 0x8d}) 451.597819ms ago: executing program 1 (id=1974): r0 = epoll_create1(0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./mnt_trace\x00', 0x1ff) mount(0x0, &(0x7f0000001040)='./mnt_trace\x00', &(0x7f0000001080)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)={0x60002014}) 385.042561ms ago: executing program 1 (id=1976): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/md0\x00', 0x4002, 0x0) ioctl(r0, 0x928, 0x0) 378.779941ms ago: executing program 6 (id=1977): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000000380)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x40000, 0x57) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 354.413492ms ago: executing program 0 (id=1978): socket$inet_tcp(0x2, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff, 0x1f, 0x0, @val=@uprobe_multi={0x0, 0x0, &(0x7f0000000200)=[0x4], 0xfffffffffffffe00, 0x0, 0x1, 0xffffffffffffffff}}, 0x40) openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/tracing/trace_pipe\x00', 0x800, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 296.227983ms ago: executing program 1 (id=1979): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001180)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000640)="64b1de932e628eee8a0a89a94e5f750f399c7b1c35ac914dd6fc80d007beda93780f095b542decee786afeec8991e630bd7ebe6cdd3df5c82a54b9ba0f7e6f7cdd6729eb18e61f5296ad1df8ead0378b1cee4f7f6fef15d2b4b38d1e028e32d5584c080fcbe799a4eedfef7cbf95cb8435bf921ea828aaff4d73a74a44076e29eea4eab04413f2cc2081a0f05bec00b2ef34bd524f004ef0740ff6bc880b284742db25", 0xa3}, {&(0x7f0000000700)="6731a9da84a7f1d212561a21cd729eb4a2e7f2c859d2682f4601b2befc6bfd956ab32128d13f450ac5ef76ffcf2a43f71d5011ad9e4fd63b3648cb51d902fcd1b342c28ea583d0c1bf65a670b2911e63cdc6d7ed06f73cfff3675832fce4151730f7ef2c8becc88720661c5013e176dca9141e3db9acc3293f66963645623733b0f3b11aec36f59f89b36e0236a31d", 0x8f}], 0x2}}, {{0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f00000008c0)="1a4327465638b8670e9ef99039dc0f60eb2cde85b2639882576537b3beb8b09ca7dd2c4972f132eb493ac7a3dd19bf1a9b8aacd86b333646a9e5342d840708bcd9aa55104cfedd028566dffeaf06fdb5f2d372c586b0b89c64700b3d9abdadd9f9fc7a36e68d46b7c9f80f6bd975de3ed294ef", 0x73}, {&(0x7f0000000980)="70c12f0fa84f4fcbfdb9e33365085ad18b6b869d3b7d05d8f7610180cb11c7f13b66eeb4156bfbb3f635a7dfde1719e1f90fe56dbf21f901857a7eafcf9fde47342a2d78eeb82a302413a3bfdb1c939d405fa6a8234f082b80073226b42969805f104a28759b329d3b6afc406f0d36cbc7d0a61ccbfb631af5416206c4c57c76bd167a93d23cf3783c3febaf24be3685637891f8380306980cd8505739f0", 0x9e}, {&(0x7f0000000a40)="73778c0d766ea105fb79d14c301c6080916c289dc3cfad072f0c96f3fefe267e50eed86d9dfc2921cfe6832450c74b23b3053fb0b963449a26650154545ebfa628468dd509ed54f0aefa06c53ee50750a8f75171be2ccf7a0028f94b6aabf6840340d42157adb59b312e95fb21235f2218b20122fe6a70986f5898d64dfb232a5ed4b5e33d2fc3d4625f96ea7e33efc27bacf87905e1fa8220799ffd2e29c67f48e620a307ed4adb8877506211626dedb8faef37535e9ae3b631078ca2f380a3389ca59c8aa73a27651d4a56ac19950c4bd9d149dbb783b01ce1d8ea832b73847494cf5c32919a5f587996b7b7779762f30c", 0xf2}, {&(0x7f0000000b40)="abf5afe05d4f96614c55e2f4df6e339dbd36b34c6a2b15fd03bc0e53386f5afad3466fe4dc987d0d6f43b83de758521a3df4da6263843c6c3c449953489752d7d0dfc0a307b6413fb553528a04d888cb07cfb8b4698d47ab8d1627b4c6401e0ee5fdb4dcdbd98b78a17e8aa80d2e042f76dd6b22de5542bd5bdde2ce3e0878fe706cd036bcda", 0x86}, {&(0x7f0000000c00)="59a6ccfde72fa606722d721aada8234cd925b0c5b4b492432d79c736d25b702feb8b26ebb83614c28fd37b1df3d5e3bc707d4841f58c7d7ccb88ad1d67c9e8afd32e1dc7a33f871e5c54c6e99710", 0x4e}, {&(0x7f0000000c80)="9f9c29e5e85c1e9d55fbfaffee3d448faeb857fcc0f0036525836ae153f155331714de0748", 0x25}], 0x6, &(0x7f0000000e00)=ANY=[@ANYBLOB="d800"], 0xd8}}], 0x2, 0x2090) syz_usb_connect(0x0, 0x47, &(0x7f0000000380)=ANY=[@ANYBLOB="12010002ff0000405e04750700010102000109023500010100"], 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdf8, 0x4) writev(r0, &(0x7f0000000940)=[{&(0x7f0000000200)="135c15194fad5248c52ac1fc08d8399adf0d297ac3d2a1aa16f11eb8b8d820024c580e0de604fdbaed2ef90756c8be23ba639df0a47831c2d918315bfcf25597e99e8af1058c3fc9a3ff26a444a61320cc", 0x51}, {&(0x7f0000000400)="7f96b1c0057470ba3ad9c683aafbd45ff640c70156ed616124c8", 0x1a}], 0x2) write(r0, &(0x7f0000001e00)="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", 0x310) 296.066713ms ago: executing program 0 (id=1980): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@ipv4_newroute={0x34, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfc, 0x0, 0x0, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @ILA_ATTR_LOCATOR={0xc, 0x1, 0x7fffffff}}]}, 0x34}}, 0x0) 295.716803ms ago: executing program 6 (id=1981): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/kernel/mm/lru_gen/enabled\x00', 0x100141, 0xa) write(r0, &(0x7f00000001c0)='JxVN', 0x4) 215.211625ms ago: executing program 6 (id=1982): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'tunl0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x7, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0xd1, 0x0, 0x0, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000240)={'tunl0\x00', r1, 0x700, 0x7800, 0xffff, 0x8001, {{0x5, 0x4, 0x0, 0x28, 0x14, 0x68, 0x0, 0x10, 0x4, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) 215.018095ms ago: executing program 0 (id=1983): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x4}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc4}}, 0x0) 213.584675ms ago: executing program 0 (id=1984): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r0) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)={0x20, r1, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x8800}, 0x8040000) 180.436476ms ago: executing program 0 (id=1985): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xb, 0xa2b9, 0x6, 0x6, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x6, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x0, 0x8a, 0x79, 0x2, 0x10080, 0xfffffffe, 0x83f4, 0x129, 0x1, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0x0, 0x81, 0x9, 0xf9a6, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007b, 0xffffffff, 0x1, 0x2], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0xb, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x7, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffff7fff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x3ff], [0x2, 0xfffffffe, 0x9, 0xc, 0x0, 0x2e6bf783, 0x80000001, 0x5, 0x40000005, 0x491, 0x9, 0x200026, 0x7f, 0x403, 0x102, 0x1, 0x41, 0x6, 0xee4e, 0x2000104, 0x1, 0x9, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x9, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x3, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x80000000, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x2, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x2000000035, 0xfff, 0xfffffffffffffffe, 0x1, 0x2, 0x5, 0xf2, 0xd, 0x7fffffffffffe, 0xcd6, 0x5, 0xb, 0x7, 0xfffffffffffffffb, 0x9, 0xc], 0x25000, 0x81304}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c00000000010104010000000000000002000000180001801400018008000100ac"], 0x3c}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 155.961407ms ago: executing program 6 (id=1986): r0 = epoll_create1(0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./mnt_trace\x00', 0x1ff) mount(0x0, &(0x7f0000001040)='./mnt_trace\x00', &(0x7f0000001080)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)={0x60002014}) 79.109529ms ago: executing program 6 (id=1987): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x18d042, 0x15) pwrite64(r0, &(0x7f0000000000)="ff", 0x58200, 0x2000) 69.017578ms ago: executing program 7 (id=1988): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x2}}, 0x2e) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f00000000c0)) 32.208799ms ago: executing program 6 (id=1989): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) 0s ago: executing program 3 (id=1990): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0) ioctl$OCFS2_IOC_GROUP_EXTEND(r0, 0x5220, 0x0) kernel console output (not intermixed with test programs): 1517][ T5289] __should_failslab+0xa4/0xe0 [ 250.196307][ T5289] should_failslab+0x9/0x20 [ 250.200843][ T5289] slab_pre_alloc_hook+0x39/0xd0 [ 250.205801][ T5289] kmem_cache_alloc_trace+0x48/0x270 [ 250.211109][ T5289] ? __mmu_notifier_register+0xed/0x4b0 [ 250.216674][ T5289] __mmu_notifier_register+0xed/0x4b0 [ 250.222074][ T5289] mmu_notifier_register+0x71/0x100 [ 250.227289][ T5289] kvm_dev_ioctl+0xe34/0x1af0 [ 250.231991][ T5289] ? hardware_enable_nolock+0xe0/0xe0 [ 250.237384][ T5289] ? security_file_ioctl+0x84/0xa0 [ 250.242500][ T5289] ? hardware_enable_nolock+0xe0/0xe0 [ 250.247883][ T5289] __se_sys_ioctl+0x121/0x1a0 [ 250.252571][ T5289] __x64_sys_ioctl+0x7b/0x90 [ 250.257176][ T5289] x64_sys_call+0x2f/0x9a0 [ 250.261597][ T5289] do_syscall_64+0x4c/0xa0 [ 250.266065][ T5289] ? clear_bhb_loop+0x50/0xa0 [ 250.270751][ T5289] ? clear_bhb_loop+0x50/0xa0 [ 250.275430][ T5289] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 250.281324][ T5289] RIP: 0033:0x7f5e52d2e159 [ 250.285741][ T5289] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 250.305348][ T5289] RSP: 002b:00007f5e51745028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 250.313778][ T5289] RAX: ffffffffffffffda RBX: 00007f5e52fb6180 RCX: 00007f5e52d2e159 [ 250.321781][ T5289] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000007 [ 250.329786][ T5289] RBP: 00007f5e52dc5024 R08: 0000000000000000 R09: 0000000000000000 [ 250.337762][ T5289] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 250.345745][ T5289] R13: 00007f5e52fb6218 R14: 00007f5e52fb6180 R15: 00007ffcfdd394c8 [ 250.353740][ T5289] [ 250.370184][ T5291] FAULT_INJECTION: forcing a failure. [ 250.370184][ T5291] name failslab, interval 1, probability 0, space 0, times 0 [ 250.415786][ T5293] loop4: detected capacity change from 0 to 8192 [ 250.455402][ T5291] CPU: 1 PID: 5291 Comm: syz.1.1427 Tainted: G W syzkaller #0 [ 250.464212][ T5291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 250.474288][ T5291] Call Trace: [ 250.477582][ T5291] [ 250.480533][ T5291] __dump_stack+0x21/0x30 [ 250.484901][ T5291] dump_stack_lvl+0x110/0x170 [ 250.489629][ T5291] ? show_regs_print_info+0x20/0x20 [ 250.494850][ T5291] dump_stack+0x15/0x20 [ 250.499026][ T5291] should_fail+0x3ab/0x500 [ 250.503463][ T5291] __should_failslab+0xa4/0xe0 [ 250.508288][ T5291] should_failslab+0x9/0x20 [ 250.512823][ T5291] slab_pre_alloc_hook+0x39/0xd0 [ 250.517782][ T5291] kmem_cache_alloc_trace+0x48/0x270 [ 250.523084][ T5291] ? __kthread_create_on_node+0x148/0x570 [ 250.528824][ T5291] ? kvm_vm_create_worker_thread+0x260/0x260 [ 250.534823][ T5291] __kthread_create_on_node+0x148/0x570 [ 250.540381][ T5291] ? kthread_create_on_node+0x140/0x140 [ 250.545942][ T5291] ? kvm_vm_create_worker_thread+0x260/0x260 [ 250.551933][ T5291] ? kvm_vm_create_worker_thread+0x260/0x260 [ 250.557927][ T5291] kthread_create_on_node+0xe8/0x140 [ 250.563225][ T5291] ? tsk_fork_get_node+0x10/0x10 [ 250.568170][ T5291] ? _raw_spin_lock_irq+0x95/0xf0 [ 250.573198][ T5291] ? _raw_spin_lock_irqsave+0x130/0x130 [ 250.578748][ T5291] kvm_vm_create_worker_thread+0x159/0x260 [ 250.584566][ T5291] ? kvm_mmu_post_init_vm+0x80/0x80 [ 250.589775][ T5291] ? hardware_disable_nolock+0x80/0x80 [ 250.595250][ T5291] ? kvm_mmu_post_init_vm+0x80/0x80 [ 250.600457][ T5291] ? __kasan_check_read+0x11/0x20 [ 250.605490][ T5291] kvm_mmu_post_init_vm+0x31/0x80 [ 250.610525][ T5291] kvm_arch_post_init_vm+0x15/0x20 [ 250.615643][ T5291] kvm_dev_ioctl+0xe8f/0x1af0 [ 250.620327][ T5291] ? hardware_enable_nolock+0xe0/0xe0 [ 250.625713][ T5291] ? security_file_ioctl+0x84/0xa0 [ 250.630841][ T5291] ? hardware_enable_nolock+0xe0/0xe0 [ 250.636226][ T5291] __se_sys_ioctl+0x121/0x1a0 [ 250.640910][ T5291] __x64_sys_ioctl+0x7b/0x90 [ 250.645507][ T5291] x64_sys_call+0x2f/0x9a0 [ 250.649935][ T5291] do_syscall_64+0x4c/0xa0 [ 250.654352][ T5291] ? clear_bhb_loop+0x50/0xa0 [ 250.659043][ T5291] ? clear_bhb_loop+0x50/0xa0 [ 250.663723][ T5291] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 250.669637][ T5291] RIP: 0033:0x7ffab6858159 [ 250.674062][ T5291] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 250.693674][ T5291] RSP: 002b:00007ffab526f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 250.702101][ T5291] RAX: ffffffffffffffda RBX: 00007ffab6ae0180 RCX: 00007ffab6858159 [ 250.710083][ T5291] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000007 [ 250.718062][ T5291] RBP: 00007ffab68ef024 R08: 0000000000000000 R09: 0000000000000000 [ 250.726039][ T5291] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 250.734013][ T5291] R13: 00007ffab6ae0218 R14: 00007ffab6ae0180 R15: 00007fffb635eac8 [ 250.741996][ T5291] [ 250.898463][ T5305] loop4: detected capacity change from 0 to 8192 [ 251.248907][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 251.248946][ T30] audit: type=1400 audit(1788276438.442:484): avc: denied { read } for pid=5308 comm="syz.4.1432" name="rtc0" dev="devtmpfs" ino=259 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 251.430079][ T30] audit: type=1400 audit(1788276438.442:485): avc: denied { open } for pid=5308 comm="syz.4.1432" path="/dev/rtc0" dev="devtmpfs" ino=259 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 251.462769][ T30] audit: type=1400 audit(1788276438.442:486): avc: denied { ioctl } for pid=5308 comm="syz.4.1432" path="/dev/rtc0" dev="devtmpfs" ino=259 ioctlcmd=0x700a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 251.562961][ T30] audit: type=1400 audit(1788276438.442:487): avc: denied { mount } for pid=5308 comm="syz.4.1432" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 251.836981][ T30] audit: type=1400 audit(1788276439.042:488): avc: denied { unmount } for pid=2460 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 252.159398][ T5333] loop5: detected capacity change from 0 to 256 [ 252.237117][ T5333] FAT-fs (loop5): Directory bread(block 64) failed [ 252.243822][ T5333] FAT-fs (loop5): Directory bread(block 65) failed [ 252.250501][ T5333] FAT-fs (loop5): Directory bread(block 66) failed [ 252.257109][ T5333] FAT-fs (loop5): Directory bread(block 67) failed [ 252.263830][ T5333] FAT-fs (loop5): Directory bread(block 68) failed [ 252.270425][ T5333] FAT-fs (loop5): Directory bread(block 69) failed [ 252.277083][ T5333] FAT-fs (loop5): Directory bread(block 70) failed [ 252.283656][ T5333] FAT-fs (loop5): Directory bread(block 71) failed [ 252.290313][ T5333] FAT-fs (loop5): Directory bread(block 72) failed [ 252.296915][ T5333] FAT-fs (loop5): Directory bread(block 73) failed [ 253.350056][ T5360] FAULT_INJECTION: forcing a failure. [ 253.350056][ T5360] name failslab, interval 1, probability 0, space 0, times 0 [ 253.362758][ T5360] CPU: 1 PID: 5360 Comm: syz.1.1447 Tainted: G W syzkaller #0 [ 253.371542][ T5360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 253.381611][ T5360] Call Trace: [ 253.384906][ T5360] [ 253.387848][ T5360] __dump_stack+0x21/0x30 [ 253.392193][ T5360] dump_stack_lvl+0x110/0x170 [ 253.396888][ T5360] ? show_regs_print_info+0x20/0x20 [ 253.402217][ T5360] dump_stack+0x15/0x20 [ 253.406410][ T5360] should_fail+0x3ab/0x500 [ 253.410936][ T5360] __should_failslab+0xa4/0xe0 [ 253.415728][ T5360] should_failslab+0x9/0x20 [ 253.420247][ T5360] slab_pre_alloc_hook+0x39/0xd0 [ 253.425202][ T5360] ? __se_sys_fsopen+0xb4/0x330 [ 253.430170][ T5360] __kmalloc_track_caller+0x6c/0x2c0 [ 253.435498][ T5360] ? __se_sys_fsopen+0xb4/0x330 [ 253.440381][ T5360] ? strnlen_user+0x13b/0x1c0 [ 253.445091][ T5360] strndup_user+0x74/0x150 [ 253.449534][ T5360] __se_sys_fsopen+0xb4/0x330 [ 253.454229][ T5360] __x64_sys_fsopen+0x5b/0x70 [ 253.458925][ T5360] x64_sys_call+0x553/0x9a0 [ 253.463437][ T5360] do_syscall_64+0x4c/0xa0 [ 253.467867][ T5360] ? clear_bhb_loop+0x50/0xa0 [ 253.472553][ T5360] ? clear_bhb_loop+0x50/0xa0 [ 253.477237][ T5360] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 253.483135][ T5360] RIP: 0033:0x7ffab6858159 [ 253.487566][ T5360] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 253.507190][ T5360] RSP: 002b:00007ffab526f028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 253.515713][ T5360] RAX: ffffffffffffffda RBX: 00007ffab6ae0180 RCX: 00007ffab6858159 [ 253.523702][ T5360] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000080 [ 253.531739][ T5360] RBP: 00007ffab526f090 R08: 0000000000000000 R09: 0000000000000000 [ 253.539720][ T5360] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 253.547729][ T5360] R13: 00007ffab6ae0218 R14: 00007ffab6ae0180 R15: 00007fffb635eac8 [ 253.555742][ T5360] [ 254.226083][ T30] audit: type=1400 audit(1788276441.432:489): avc: denied { remount } for pid=5367 comm="syz.0.1450" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 254.263883][ T30] audit: type=1400 audit(1788276441.452:490): avc: denied { mounton } for pid=5367 comm="syz.0.1450" path="/161/file0" dev="ramfs" ino=86106 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 254.312034][ T5368] loop0: detected capacity change from 0 to 4096 [ 254.421264][ T5368] EXT4-fs (loop0): Test dummy encryption mode enabled [ 254.442840][ T5368] EXT4-fs (loop0): Ignoring removed orlov option [ 254.524497][ T5381] loop9: detected capacity change from 0 to 256 [ 254.679826][ T5381] FAT-fs (loop9): Directory bread(block 64) failed [ 254.686525][ T5381] FAT-fs (loop9): Directory bread(block 65) failed [ 254.693243][ T5381] FAT-fs (loop9): Directory bread(block 66) failed [ 254.699818][ T5381] FAT-fs (loop9): Directory bread(block 67) failed [ 254.706530][ T5381] FAT-fs (loop9): Directory bread(block 68) failed [ 254.713149][ T5381] FAT-fs (loop9): Directory bread(block 69) failed [ 254.719837][ T5381] FAT-fs (loop9): Directory bread(block 70) failed [ 254.726477][ T5381] FAT-fs (loop9): Directory bread(block 71) failed [ 254.733141][ T5381] FAT-fs (loop9): Directory bread(block 72) failed [ 254.739734][ T5381] FAT-fs (loop9): Directory bread(block 73) failed [ 254.792558][ T5368] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpid,debug_want_extra_isize=0x0000000000000010,nodioread_nolock,test_dummy_encryption,lazytime,stripe=0x0000000000000000,minixdf,orlov,,errors=continue. Quota mode: writeback. [ 255.005103][ T30] audit: type=1400 audit(1788276442.212:491): avc: denied { write } for pid=5367 comm="syz.0.1450" name="ptp0" dev="devtmpfs" ino=260 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 255.067851][ T30] audit: type=1400 audit(1788276442.242:492): avc: denied { mounton } for pid=5367 comm="syz.0.1450" path=2F3136312F66696C65302F131377C5FC35D41454D5D41D29AD1A6029598146E6BE166E41AD0DBD4054033C9F33BBDA8224A2F3D772E7636E48B33CBF708372E8F1B9933EC5127743BE2206209EF02DF9CBF2F6E880D3382F737973 dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 255.428849][ T5410] loop0: detected capacity change from 0 to 256 [ 255.501634][ T5410] FAT-fs (loop0): Directory bread(block 64) failed [ 255.508337][ T5410] FAT-fs (loop0): Directory bread(block 65) failed [ 255.515095][ T5410] FAT-fs (loop0): Directory bread(block 66) failed [ 255.521668][ T5410] FAT-fs (loop0): Directory bread(block 67) failed [ 255.528402][ T5410] FAT-fs (loop0): Directory bread(block 68) failed [ 255.534996][ T5410] FAT-fs (loop0): Directory bread(block 69) failed [ 255.541670][ T5410] FAT-fs (loop0): Directory bread(block 70) failed [ 255.548287][ T5410] FAT-fs (loop0): Directory bread(block 71) failed [ 255.554982][ T5410] FAT-fs (loop0): Directory bread(block 72) failed [ 255.561586][ T5410] FAT-fs (loop0): Directory bread(block 73) failed [ 256.352343][ T5430] loop0: detected capacity change from 0 to 256 [ 256.407966][ T5430] FAT-fs (loop0): Directory bread(block 64) failed [ 256.414983][ T5430] FAT-fs (loop0): Directory bread(block 65) failed [ 256.421542][ T5430] FAT-fs (loop0): Directory bread(block 66) failed [ 256.428110][ T5430] FAT-fs (loop0): Directory bread(block 67) failed [ 256.434783][ T5430] FAT-fs (loop0): Directory bread(block 68) failed [ 256.441327][ T5430] FAT-fs (loop0): Directory bread(block 69) failed [ 256.447884][ T5430] FAT-fs (loop0): Directory bread(block 70) failed [ 256.454426][ T5430] FAT-fs (loop0): Directory bread(block 71) failed [ 256.460979][ T5430] FAT-fs (loop0): Directory bread(block 72) failed [ 256.467527][ T5430] FAT-fs (loop0): Directory bread(block 73) failed [ 256.732822][ T5434] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 256.784024][ T5434] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 256.912943][ T30] audit: type=1400 audit(1788276444.122:493): avc: denied { create } for pid=5439 comm="syz.5.1469" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 256.956676][ T30] audit: type=1400 audit(1788276444.122:494): avc: denied { write } for pid=5439 comm="syz.5.1469" name="file0" dev="tmpfs" ino=877 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 256.980696][ T30] audit: type=1400 audit(1788276444.122:495): avc: denied { open } for pid=5439 comm="syz.5.1469" path="/161/file0" dev="tmpfs" ino=877 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 257.008142][ T30] audit: type=1400 audit(1788276444.122:496): avc: denied { ioctl } for pid=5439 comm="syz.5.1469" path="/161/file0" dev="tmpfs" ino=877 ioctlcmd=0x1278 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 257.032320][ T30] audit: type=1400 audit(1788276444.122:497): avc: denied { unlink } for pid=2486 comm="syz-executor" name="file0" dev="tmpfs" ino=877 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 257.321118][ T5456] loop1: detected capacity change from 0 to 256 [ 257.425501][ T5456] FAT-fs (loop1): Directory bread(block 64) failed [ 257.432140][ T5456] FAT-fs (loop1): Directory bread(block 65) failed [ 257.438864][ T5456] FAT-fs (loop1): Directory bread(block 66) failed [ 257.445503][ T5456] FAT-fs (loop1): Directory bread(block 67) failed [ 257.452220][ T5456] FAT-fs (loop1): Directory bread(block 68) failed [ 257.458843][ T5456] FAT-fs (loop1): Directory bread(block 69) failed [ 257.465542][ T5456] FAT-fs (loop1): Directory bread(block 70) failed [ 257.472110][ T5456] FAT-fs (loop1): Directory bread(block 71) failed [ 257.478846][ T5456] FAT-fs (loop1): Directory bread(block 72) failed [ 257.485595][ T5456] FAT-fs (loop1): Directory bread(block 73) failed [ 258.053402][ T5464] input: syz0 as /devices/virtual/input/input12 [ 258.896662][ T5477] overlayfs: workdir and upperdir must be separate subtrees [ 259.118686][ T5455] loop0: detected capacity change from 0 to 131072 [ 259.162444][ T5455] F2FS-fs (loop0): Invalid log sectorsize (67108873) [ 259.170890][ T5490] loop4: detected capacity change from 0 to 256 [ 259.272986][ T5455] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 259.335908][ T5455] F2FS-fs (loop0): invalid crc value [ 259.376270][ T5490] FAT-fs (loop4): Directory bread(block 64) failed [ 259.382842][ T5490] FAT-fs (loop4): Directory bread(block 65) failed [ 259.389407][ T5490] FAT-fs (loop4): Directory bread(block 66) failed [ 259.395950][ T5490] FAT-fs (loop4): Directory bread(block 67) failed [ 259.402515][ T5490] FAT-fs (loop4): Directory bread(block 68) failed [ 259.409079][ T5490] FAT-fs (loop4): Directory bread(block 69) failed [ 259.415631][ T5490] FAT-fs (loop4): Directory bread(block 70) failed [ 259.422155][ T5490] FAT-fs (loop4): Directory bread(block 71) failed [ 259.428910][ T5490] FAT-fs (loop4): Directory bread(block 72) failed [ 259.435495][ T5490] FAT-fs (loop4): Directory bread(block 73) failed [ 259.581596][ T5455] F2FS-fs (loop0): Found nat_bits in checkpoint [ 259.636963][ T5455] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 259.644343][ T5455] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 259.957741][ T30] audit: type=1400 audit(1788276447.162:498): avc: denied { connect } for pid=5509 comm="syz.5.1489" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 260.755730][ T5536] FAULT_INJECTION: forcing a failure. [ 260.755730][ T5536] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 260.784392][ T5536] CPU: 1 PID: 5536 Comm: syz.0.1498 Tainted: G W syzkaller #0 [ 260.793428][ T5536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 260.803539][ T5536] Call Trace: [ 260.806847][ T5536] [ 260.809827][ T5536] __dump_stack+0x21/0x30 [ 260.814199][ T5536] dump_stack_lvl+0x110/0x170 [ 260.819030][ T5536] ? show_regs_print_info+0x20/0x20 [ 260.824285][ T5536] dump_stack+0x15/0x20 [ 260.828476][ T5536] should_fail+0x3ab/0x500 [ 260.832918][ T5536] should_fail_usercopy+0x1a/0x20 [ 260.837963][ T5536] strncpy_from_user+0x24/0x2d0 [ 260.842866][ T5536] ? kmem_cache_alloc+0xf7/0x260 [ 260.847828][ T5536] getname_flags+0xf5/0x510 [ 260.852368][ T5536] getname+0x19/0x20 [ 260.856293][ T5536] do_sys_openat2+0xeb/0x7f0 [ 260.860920][ T5536] ? __se_sys_futex+0x135/0x330 [ 260.865805][ T5536] ? do_sys_open+0xe0/0xe0 [ 260.870274][ T5536] ? __x64_sys_futex+0x100/0x100 [ 260.875247][ T5536] ? ksys_write+0x1fa/0x260 [ 260.879796][ T5536] __x64_sys_openat+0x136/0x160 [ 260.884675][ T5536] x64_sys_call+0x219/0x9a0 [ 260.889212][ T5536] do_syscall_64+0x4c/0xa0 [ 260.893655][ T5536] ? clear_bhb_loop+0x50/0xa0 [ 260.898369][ T5536] ? clear_bhb_loop+0x50/0xa0 [ 260.903080][ T5536] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 260.909045][ T5536] RIP: 0033:0x7f5e52d2e159 [ 260.913499][ T5536] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 260.933139][ T5536] RSP: 002b:00007f5e51787028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 260.941594][ T5536] RAX: ffffffffffffffda RBX: 00007f5e52fb5fa0 RCX: 00007f5e52d2e159 [ 260.949593][ T5536] RDX: 0000000000000080 RSI: 0000200000000040 RDI: 0000000000000004 [ 260.957595][ T5536] RBP: 00007f5e52dc5024 R08: 0000000000000000 R09: 0000000000000000 [ 260.965618][ T5536] R10: 000000000000002a R11: 0000000000000246 R12: 0000000000000000 [ 260.973618][ T5536] R13: 00007f5e52fb6038 R14: 00007f5e52fb5fa0 R15: 00007ffcfdd394c8 [ 260.981644][ T5536] [ 261.457886][ T5554] SELinux: security_context_str_to_sid(ôa`yv©—-”|J+0lè8G[økT—ƒ_È×|nœÉUÓ5 [ 261.457886][ T5554] M9) failed for (dev ?, type ?) errno=-22 [ 261.502658][ T5554] SELinux: security_context_str_to_sid(ôa`yv©—-”|J+0lè8G[økT—ƒ_È×|nœÉUÓ5 [ 261.502658][ T5554] M9) failed for (dev ramfs, type ramfs) errno=-22 [ 261.531162][ T5554] loop5: detected capacity change from 0 to 256 [ 261.605085][ T5554] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 261.635348][ T5554] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 262.226752][ T5579] loop0: detected capacity change from 0 to 512 [ 262.968399][ T5589] FAULT_INJECTION: forcing a failure. [ 262.968399][ T5589] name failslab, interval 1, probability 0, space 0, times 0 [ 263.007068][ T5591] loop5: detected capacity change from 0 to 512 [ 263.011699][ T5589] CPU: 1 PID: 5589 Comm: syz.1.1513 Tainted: G W syzkaller #0 [ 263.022129][ T5589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 263.032297][ T5589] Call Trace: [ 263.035596][ T5589] [ 263.038557][ T5589] __dump_stack+0x21/0x30 [ 263.041578][ T5569] loop9: detected capacity change from 0 to 131072 [ 263.042919][ T5589] dump_stack_lvl+0x110/0x170 [ 263.042945][ T5589] ? show_regs_print_info+0x20/0x20 [ 263.059319][ T5589] dump_stack+0x15/0x20 [ 263.063494][ T5589] should_fail+0x3ab/0x500 [ 263.067920][ T5589] __should_failslab+0xa4/0xe0 [ 263.072700][ T5589] should_failslab+0x9/0x20 [ 263.077297][ T5589] slab_pre_alloc_hook+0x39/0xd0 [ 263.082242][ T5589] ? getname_flags+0xba/0x510 [ 263.086939][ T5589] kmem_cache_alloc+0x44/0x260 [ 263.091732][ T5589] getname_flags+0xba/0x510 [ 263.096244][ T5589] getname+0x19/0x20 [ 263.100229][ T5589] do_sys_openat2+0xeb/0x7f0 [ 263.104838][ T5589] ? __se_sys_futex+0x135/0x330 [ 263.109789][ T5589] ? do_sys_open+0xe0/0xe0 [ 263.114209][ T5589] ? __x64_sys_futex+0x100/0x100 [ 263.119170][ T5589] ? ksys_write+0x1fa/0x260 [ 263.123696][ T5589] __x64_sys_openat+0x136/0x160 [ 263.128561][ T5589] x64_sys_call+0x219/0x9a0 [ 263.133071][ T5589] do_syscall_64+0x4c/0xa0 [ 263.137491][ T5589] ? clear_bhb_loop+0x50/0xa0 [ 263.142181][ T5589] ? clear_bhb_loop+0x50/0xa0 [ 263.146861][ T5589] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 263.152759][ T5589] RIP: 0033:0x7ffab6858159 [ 263.157181][ T5589] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 263.176803][ T5589] RSP: 002b:00007ffab52b1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 263.185221][ T5589] RAX: ffffffffffffffda RBX: 00007ffab6adffa0 RCX: 00007ffab6858159 [ 263.193196][ T5589] RDX: 0000000000000080 RSI: 0000200000000040 RDI: 0000000000000004 [ 263.201177][ T5589] RBP: 00007ffab68ef024 R08: 0000000000000000 R09: 0000000000000000 [ 263.209161][ T5589] R10: 000000000000002a R11: 0000000000000246 R12: 0000000000000000 [ 263.217140][ T5589] R13: 00007ffab6ae0038 R14: 00007ffab6adffa0 R15: 00007fffb635eac8 [ 263.225118][ T5589] [ 263.382693][ T5594] pim6reg1: tun_chr_ioctl cmd 1074025681 [ 263.433360][ T5596] pim6reg1: tun_chr_ioctl cmd 2147767511 [ 263.452502][ T5597] loop1: detected capacity change from 0 to 512 [ 263.535922][ T5569] F2FS-fs (loop9): invalid crc value [ 263.590591][ T5569] F2FS-fs (loop9): Found nat_bits in checkpoint [ 263.628519][ T30] audit: type=1400 audit(1788276450.832:499): avc: denied { unlink } for pid=5606 comm="syz.1.1519" name="#5" dev="tmpfs" ino=1148 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 263.666109][ T5569] F2FS-fs (loop9): Cannot turn on quotas: -2 on 2 [ 263.692899][ T5569] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e4 [ 263.808708][ T5623] loop4: detected capacity change from 0 to 128 [ 263.902290][ T30] audit: type=1400 audit(1788276451.102:500): avc: denied { search } for pid=5627 comm="syz.4.1529" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 264.080893][ T5647] loop4: detected capacity change from 0 to 128 [ 264.104898][ T30] audit: type=1400 audit(1788276451.312:501): avc: denied { connect } for pid=5648 comm="syz.5.1539" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 264.137230][ T5652] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1523'. [ 264.180716][ T5657] loop9: detected capacity change from 0 to 256 [ 264.185771][ T5655] loop0: detected capacity change from 0 to 256 [ 264.196940][ T30] audit: type=1400 audit(1788276451.402:502): avc: denied { read write } for pid=5646 comm="syz.4.1538" name="control" dev="devtmpfs" ino=262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 264.220723][ T30] audit: type=1400 audit(1788276451.402:503): avc: denied { open } for pid=5646 comm="syz.4.1538" path="/209/dev/mapper/control" dev="devtmpfs" ino=262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 264.245868][ T5657] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 264.250126][ T30] audit: type=1400 audit(1788276451.402:504): avc: denied { ioctl } for pid=5646 comm="syz.4.1538" path="/209/dev/mapper/control" dev="devtmpfs" ino=262 ioctlcmd=0xfd04 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 264.306752][ T5659] ip_tables: iptables: counters copy to user failed while replacing table [ 264.372535][ T5661] loop4: detected capacity change from 0 to 8192 [ 264.413163][ T3406] loop4: p1 p2 p3 p4 [ 264.423602][ T3406] loop4: p3 start 117772289 is beyond EOD, truncated [ 264.430351][ T3406] loop4: p4 size 262144 extends beyond EOD, truncated [ 264.441129][ T5661] loop4: p1 p2 p3 p4 [ 264.448047][ T5661] loop4: p3 start 117772289 is beyond EOD, truncated [ 264.471220][ T5661] loop4: p4 size 262144 extends beyond EOD, truncated [ 264.564417][ T3406] udevd[3406]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 264.582236][ T339] udevd[339]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 264.589402][ T309] udevd[309]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 264.664014][ T30] audit: type=1400 audit(1788276451.872:505): avc: denied { setattr } for pid=5694 comm="syz.9.1559" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 264.686394][ T309] udevd[309]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 264.687197][ T339] udevd[339]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 264.701250][ T3406] udevd[3406]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 264.833613][ T30] audit: type=1400 audit(1788276452.042:506): avc: denied { write } for pid=5712 comm="syz.1.1565" name="set_event" dev="tracefs" ino=1038 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 264.917660][ T5726] FAT-fs (loop0): Directory bread(block 199916) failed [ 264.968433][ T5735] FAULT_INJECTION: forcing a failure. [ 264.968433][ T5735] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 264.981782][ T5726] FAT-fs (loop0): Directory bread(block 199917) failed [ 264.982695][ T5735] CPU: 1 PID: 5735 Comm: syz.9.1575 Tainted: G W syzkaller #0 [ 264.989485][ T5726] FAT-fs (loop0): Directory bread(block 199918) failed [ 264.997419][ T5735] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 264.997432][ T5735] Call Trace: [ 264.997438][ T5735] [ 264.997446][ T5735] __dump_stack+0x21/0x30 [ 264.997470][ T5735] dump_stack_lvl+0x110/0x170 [ 265.004974][ T5726] FAT-fs (loop0): Directory bread(block 199919) failed [ 265.014399][ T5735] ? show_regs_print_info+0x20/0x20 [ 265.014428][ T5735] dump_stack+0x15/0x20 [ 265.019040][ T5726] FAT-fs (loop0): Directory bread(block 199920) failed [ 265.020648][ T5735] should_fail+0x3ab/0x500 [ 265.025035][ T5726] FAT-fs (loop0): Directory bread(block 199921) failed [ 265.029650][ T5735] should_fail_alloc_page+0x55/0x80 [ 265.046640][ T5726] FAT-fs (loop0): Directory bread(block 199922) failed [ 265.052688][ T5735] prepare_alloc_pages+0x13f/0x590 [ 265.057565][ T5726] FAT-fs (loop0): Directory bread(block 199923) failed [ 265.063957][ T5735] ? __alloc_pages_bulk+0xab0/0xab0 [ 265.063987][ T5735] ? pcpu_chunk_refresh_hint+0x7f0/0x940 [ 265.098701][ T5735] __alloc_pages+0x11d/0x460 [ 265.103316][ T5735] ? prep_new_page+0x110/0x110 [ 265.108117][ T5735] pcpu_populate_chunk+0x184/0xcb0 [ 265.113226][ T5735] ? _find_next_bit+0x1b5/0x200 [ 265.118082][ T5735] pcpu_alloc+0xc8c/0x16f0 [ 265.122502][ T5735] __alloc_percpu_gfp+0x25/0x30 [ 265.127350][ T5735] bpf_map_alloc_percpu+0xc5/0x150 [ 265.132708][ T5735] array_map_alloc+0x35c/0x6c0 [ 265.137545][ T5735] ? array_map_alloc_check+0x2c2/0x390 [ 265.143002][ T5735] map_create+0x3f4/0x1fa0 [ 265.147416][ T5735] __sys_bpf+0x2ff/0x7d0 [ 265.151663][ T5735] ? bpf_link_show_fdinfo+0x330/0x330 [ 265.157037][ T5735] ? __kasan_check_write+0x14/0x20 [ 265.162159][ T5735] ? switch_fpu_return+0x15d/0x2c0 [ 265.167277][ T5735] __x64_sys_bpf+0x7c/0x90 [ 265.171708][ T5735] x64_sys_call+0x4b9/0x9a0 [ 265.176238][ T5735] do_syscall_64+0x4c/0xa0 [ 265.180653][ T5735] ? clear_bhb_loop+0x50/0xa0 [ 265.185331][ T5735] ? clear_bhb_loop+0x50/0xa0 [ 265.190016][ T5735] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 265.195904][ T5735] RIP: 0033:0x7f85772fb159 [ 265.200319][ T5735] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 265.219923][ T5735] RSP: 002b:00007f8575d54028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 265.228343][ T5735] RAX: ffffffffffffffda RBX: 00007f8577582fa0 RCX: 00007f85772fb159 [ 265.236327][ T5735] RDX: 0000000000000050 RSI: 0000200000000140 RDI: 2000000000000000 [ 265.244310][ T5735] RBP: 00007f8577392024 R08: 0000000000000000 R09: 0000000000000000 [ 265.252302][ T5735] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 265.260298][ T5735] R13: 00007f8577583038 R14: 00007f8577582fa0 R15: 00007ffc0e761bb8 [ 265.268281][ T5735] [ 265.283101][ T5738] FAULT_INJECTION: forcing a failure. [ 265.283101][ T5738] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 265.296966][ T5738] CPU: 0 PID: 5738 Comm: syz.5.1579 Tainted: G W syzkaller #0 [ 265.305769][ T5738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 265.317082][ T5738] Call Trace: [ 265.320382][ T5738] [ 265.323322][ T5738] __dump_stack+0x21/0x30 [ 265.327674][ T5738] dump_stack_lvl+0x110/0x170 [ 265.332364][ T5738] ? show_regs_print_info+0x20/0x20 [ 265.337574][ T5738] dump_stack+0x15/0x20 [ 265.341755][ T5738] should_fail+0x3ab/0x500 [ 265.346185][ T5738] should_fail_alloc_page+0x55/0x80 [ 265.351483][ T5738] prepare_alloc_pages+0x13f/0x590 [ 265.356600][ T5738] ? __alloc_pages_bulk+0xab0/0xab0 [ 265.361819][ T5738] ? release_pages+0x1264/0x12c0 [ 265.366840][ T5738] __alloc_pages+0x11d/0x460 [ 265.371449][ T5738] ? prep_new_page+0x110/0x110 [ 265.376223][ T5738] ? __this_cpu_preempt_check+0x13/0x20 [ 265.381916][ T5738] handle_pte_fault+0xee5/0x2770 [ 265.386917][ T5738] ? lru_cache_add+0x7e0/0x7e0 [ 265.391697][ T5738] ? fault_around_bytes_set+0xc0/0xc0 [ 265.397090][ T5738] do_handle_mm_fault+0x1b3b/0x1e30 [ 265.402326][ T5738] ? _raw_spin_unlock+0x4d/0x70 [ 265.407193][ T5738] ? follow_page_pte+0x3b7/0x980 [ 265.412159][ T5738] ? numa_migrate_prep+0xd0/0xd0 [ 265.417118][ T5738] ? follow_page_mask+0x7aa/0xf30 [ 265.422156][ T5738] __get_user_pages+0x80e/0x10c0 [ 265.427111][ T5738] ? populate_vma_page_range+0xf0/0xf0 [ 265.432585][ T5738] __mm_populate+0x324/0x470 [ 265.437196][ T5738] ? mlock_fixup+0x345/0x4b0 [ 265.441817][ T5738] ? check_vma_flags+0x2d0/0x2d0 [ 265.446793][ T5738] do_mlock+0x4a6/0x580 [ 265.450957][ T5738] ? __kasan_check_write+0x14/0x20 [ 265.456072][ T5738] __x64_sys_mlock+0x60/0x70 [ 265.460669][ T5738] x64_sys_call+0x27b/0x9a0 [ 265.465191][ T5738] do_syscall_64+0x4c/0xa0 [ 265.469614][ T5738] ? clear_bhb_loop+0x50/0xa0 [ 265.474302][ T5738] ? clear_bhb_loop+0x50/0xa0 [ 265.478998][ T5738] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 265.484922][ T5738] RIP: 0033:0x7f48a3b4e159 [ 265.489347][ T5738] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 265.508978][ T5738] RSP: 002b:00007f48a25a7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 265.517417][ T5738] RAX: ffffffffffffffda RBX: 00007f48a3dd5fa0 RCX: 00007f48a3b4e159 [ 265.525412][ T5738] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 0000200000000000 [ 265.533403][ T5738] RBP: 00007f48a3be5024 R08: 0000000000000000 R09: 0000000000000000 [ 265.541389][ T5738] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 265.549379][ T5738] R13: 00007f48a3dd6038 R14: 00007f48a3dd5fa0 R15: 00007ffec2b87548 [ 265.557380][ T5738] [ 265.575019][ T30] audit: type=1400 audit(1788276452.782:507): avc: denied { append } for pid=5724 comm="syz.0.1574" name="loop0" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 265.630258][ T30] audit: type=1400 audit(1788276452.812:508): avc: denied { map } for pid=5724 comm="syz.0.1574" path="/dev/loop0" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 265.810350][ T5763] FAULT_INJECTION: forcing a failure. [ 265.810350][ T5763] name failslab, interval 1, probability 0, space 0, times 0 [ 265.827823][ T5765] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 265.835431][ T5763] CPU: 1 PID: 5763 Comm: syz.9.1591 Tainted: G W syzkaller #0 [ 265.844317][ T5763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 265.854406][ T5763] Call Trace: [ 265.857706][ T5763] [ 265.860657][ T5763] __dump_stack+0x21/0x30 [ 265.865076][ T5763] dump_stack_lvl+0x110/0x170 [ 265.869781][ T5763] ? show_regs_print_info+0x20/0x20 [ 265.875001][ T5763] dump_stack+0x15/0x20 [ 265.879178][ T5763] should_fail+0x3ab/0x500 [ 265.883638][ T5763] __should_failslab+0xa4/0xe0 [ 265.888411][ T5763] should_failslab+0x9/0x20 [ 265.892920][ T5763] slab_pre_alloc_hook+0x39/0xd0 [ 265.897884][ T5763] ? __se_sys_mount+0xdf/0x390 [ 265.902686][ T5763] __kmalloc_track_caller+0x6c/0x2c0 [ 265.908006][ T5763] ? __se_sys_mount+0xdf/0x390 [ 265.912801][ T5763] ? strnlen_user+0x13b/0x1c0 [ 265.917510][ T5763] strndup_user+0x74/0x150 [ 265.921979][ T5763] __se_sys_mount+0xdf/0x390 [ 265.926592][ T5763] ? __x64_sys_mount+0xd0/0xd0 [ 265.931372][ T5763] ? __kasan_check_write+0x14/0x20 [ 265.936518][ T5763] __x64_sys_mount+0xbf/0xd0 [ 265.941151][ T5763] x64_sys_call+0x6bf/0x9a0 [ 265.945675][ T5763] do_syscall_64+0x4c/0xa0 [ 265.950114][ T5763] ? clear_bhb_loop+0x50/0xa0 [ 265.954824][ T5763] ? clear_bhb_loop+0x50/0xa0 [ 265.959533][ T5763] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 265.965543][ T5763] RIP: 0033:0x7f85772fb159 [ 265.969979][ T5763] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 265.989613][ T5763] RSP: 002b:00007f8575d54028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 265.998148][ T5763] RAX: ffffffffffffffda RBX: 00007f8577582fa0 RCX: 00007f85772fb159 [ 266.006151][ T5763] RDX: 0000200000000240 RSI: 0000000000000000 RDI: 00002000000001c0 [ 266.014127][ T5763] RBP: 00007f8577392024 R08: 0000000000000000 R09: 0000000000000000 [ 266.022098][ T5763] R10: 0000000000802008 R11: 0000000000000246 R12: 0000000000000000 [ 266.030068][ T5763] R13: 00007f8577583038 R14: 00007f8577582fa0 R15: 00007ffc0e761bb8 [ 266.038049][ T5763] [ 266.086032][ T5781] FAULT_INJECTION: forcing a failure. [ 266.086032][ T5781] name failslab, interval 1, probability 0, space 0, times 0 [ 266.098793][ T5781] CPU: 0 PID: 5781 Comm: syz.4.1599 Tainted: G W syzkaller #0 [ 266.107586][ T5781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 266.117658][ T5781] Call Trace: [ 266.120961][ T5781] [ 266.123927][ T5781] __dump_stack+0x21/0x30 [ 266.128377][ T5781] dump_stack_lvl+0x110/0x170 [ 266.133088][ T5781] ? show_regs_print_info+0x20/0x20 [ 266.138318][ T5781] dump_stack+0x15/0x20 [ 266.142530][ T5781] should_fail+0x3ab/0x500 [ 266.146976][ T5781] __should_failslab+0xa4/0xe0 [ 266.151783][ T5781] should_failslab+0x9/0x20 [ 266.156322][ T5781] slab_pre_alloc_hook+0x39/0xd0 [ 266.161308][ T5781] ? radix_tree_node_alloc+0x80/0x380 [ 266.166726][ T5781] kmem_cache_alloc+0x44/0x260 [ 266.171525][ T5781] ? map_create+0x1686/0x1fa0 [ 266.176241][ T5781] radix_tree_node_alloc+0x80/0x380 [ 266.181466][ T5781] idr_get_free+0x2b1/0xa90 [ 266.185987][ T5781] idr_alloc_cyclic+0x2a4/0x5f0 [ 266.190855][ T5781] ? idr_alloc+0x2f0/0x2f0 [ 266.195297][ T5781] ? __kasan_check_write+0x14/0x20 [ 266.200425][ T5781] ? _raw_spin_lock_bh+0x94/0xf0 [ 266.205378][ T5781] ? debug_smp_processor_id+0x17/0x20 [ 266.210786][ T5781] ? __radix_tree_preload+0x366/0x3e0 [ 266.216174][ T5781] bpf_map_alloc_id+0x44/0x140 [ 266.220953][ T5781] map_create+0x16a9/0x1fa0 [ 266.225469][ T5781] __sys_bpf+0x2ff/0x7d0 [ 266.229721][ T5781] ? bpf_link_show_fdinfo+0x330/0x330 [ 266.235113][ T5781] ? __kasan_check_write+0x14/0x20 [ 266.240238][ T5781] ? switch_fpu_return+0x15d/0x2c0 [ 266.245373][ T5781] __x64_sys_bpf+0x7c/0x90 [ 266.249809][ T5781] x64_sys_call+0x4b9/0x9a0 [ 266.254321][ T5781] do_syscall_64+0x4c/0xa0 [ 266.258760][ T5781] ? clear_bhb_loop+0x50/0xa0 [ 266.263450][ T5781] ? clear_bhb_loop+0x50/0xa0 [ 266.268136][ T5781] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 266.274040][ T5781] RIP: 0033:0x7f3014ea7159 [ 266.278478][ T5781] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 266.298104][ T5781] RSP: 002b:00007f3013900028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 266.306538][ T5781] RAX: ffffffffffffffda RBX: 00007f301512efa0 RCX: 00007f3014ea7159 [ 266.314525][ T5781] RDX: 0000000000000048 RSI: 0000200000000840 RDI: 0000000000000000 [ 266.322512][ T5781] RBP: 00007f3014f3e024 R08: 0000000000000000 R09: 0000000000000000 [ 266.330493][ T5781] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 266.338471][ T5781] R13: 00007f301512f038 R14: 00007f301512efa0 R15: 00007ffe4df5b498 [ 266.346456][ T5781] [ 266.370232][ T5783] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 266.379095][ T5783] FAT-fs (loop5): Filesystem has been set read-only [ 266.388714][ T5783] attempt to access beyond end of device [ 266.388714][ T5783] loop5: rw=524288, want=2073, limit=128 [ 266.400040][ T5783] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 266.409324][ T5783] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 266.458740][ T5797] FAULT_INJECTION: forcing a failure. [ 266.458740][ T5797] name failslab, interval 1, probability 0, space 0, times 0 [ 266.472248][ T5797] CPU: 1 PID: 5797 Comm: syz.0.1607 Tainted: G W syzkaller #0 [ 266.481090][ T5797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 266.491157][ T5797] Call Trace: [ 266.494458][ T5797] [ 266.497408][ T5797] __dump_stack+0x21/0x30 [ 266.501757][ T5797] dump_stack_lvl+0x110/0x170 [ 266.506446][ T5797] ? show_regs_print_info+0x20/0x20 [ 266.511669][ T5797] dump_stack+0x15/0x20 [ 266.515840][ T5797] should_fail+0x3ab/0x500 [ 266.520270][ T5797] __should_failslab+0xa4/0xe0 [ 266.525058][ T5797] should_failslab+0x9/0x20 [ 266.529574][ T5797] slab_pre_alloc_hook+0x39/0xd0 [ 266.534521][ T5797] ? __se_sys_add_key+0x1c0/0x410 [ 266.539563][ T5797] __kmalloc_track_caller+0x6c/0x2c0 [ 266.544865][ T5797] ? __se_sys_add_key+0x1c0/0x410 [ 266.549905][ T5797] ? strnlen_user+0xe8/0x1c0 [ 266.554505][ T5797] strndup_user+0x74/0x150 [ 266.558933][ T5797] __se_sys_add_key+0x1c0/0x410 [ 266.563801][ T5797] ? __x64_sys_add_key+0xd0/0xd0 [ 266.568755][ T5797] ? ksys_write+0x1fa/0x260 [ 266.573284][ T5797] ? __kasan_check_write+0x14/0x20 [ 266.578404][ T5797] __x64_sys_add_key+0xbf/0xd0 [ 266.583185][ T5797] x64_sys_call+0x713/0x9a0 [ 266.587706][ T5797] do_syscall_64+0x4c/0xa0 [ 266.592131][ T5797] ? clear_bhb_loop+0x50/0xa0 [ 266.596833][ T5797] ? clear_bhb_loop+0x50/0xa0 [ 266.601540][ T5797] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 266.607447][ T5797] RIP: 0033:0x7f5e52d2e159 [ 266.611868][ T5797] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 266.631495][ T5797] RSP: 002b:00007f5e51787028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 266.639916][ T5797] RAX: ffffffffffffffda RBX: 00007f5e52fb5fa0 RCX: 00007f5e52d2e159 [ 266.647892][ T5797] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000200000000140 [ 266.655903][ T5797] RBP: 00007f5e52dc5024 R08: fffffffffffffffe R09: 0000000000000000 [ 266.663889][ T5797] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 266.671868][ T5797] R13: 00007f5e52fb6038 R14: 00007f5e52fb5fa0 R15: 00007ffcfdd394c8 [ 266.679852][ T5797] [ 266.711903][ T5799] FAULT_INJECTION: forcing a failure. [ 266.711903][ T5799] name failslab, interval 1, probability 0, space 0, times 0 [ 266.727909][ T5795] set_capacity_and_notify: 6 callbacks suppressed [ 266.727946][ T5795] loop4: detected capacity change from 0 to 8192 [ 266.741637][ T5799] CPU: 0 PID: 5799 Comm: syz.5.1605 Tainted: G W syzkaller #0 [ 266.750436][ T5799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 266.760537][ T5799] Call Trace: [ 266.763825][ T5799] [ 266.766786][ T5799] __dump_stack+0x21/0x30 [ 266.771147][ T5799] dump_stack_lvl+0x110/0x170 [ 266.775832][ T5799] ? show_regs_print_info+0x20/0x20 [ 266.781041][ T5799] ? security_file_permission+0x79/0xa0 [ 266.786616][ T5799] dump_stack+0x15/0x20 [ 266.790798][ T5799] should_fail+0x3ab/0x500 [ 266.795224][ T5799] __should_failslab+0xa4/0xe0 [ 266.799994][ T5799] should_failslab+0x9/0x20 [ 266.804512][ T5799] slab_pre_alloc_hook+0x39/0xd0 [ 266.809456][ T5799] ? __se_sys_mount+0x9c/0x390 [ 266.814223][ T5799] __kmalloc_track_caller+0x6c/0x2c0 [ 266.819522][ T5799] ? mutex_unlock+0x8f/0x230 [ 266.824125][ T5799] ? __se_sys_mount+0x9c/0x390 [ 266.828945][ T5799] ? strnlen_user+0xe8/0x1c0 [ 266.833550][ T5799] strndup_user+0x74/0x150 [ 266.837976][ T5799] __se_sys_mount+0x9c/0x390 [ 266.842580][ T5799] ? __x64_sys_mount+0xd0/0xd0 [ 266.847357][ T5799] ? __kasan_check_write+0x14/0x20 [ 266.852497][ T5799] __x64_sys_mount+0xbf/0xd0 [ 266.857118][ T5799] x64_sys_call+0x6bf/0x9a0 [ 266.861659][ T5799] do_syscall_64+0x4c/0xa0 [ 266.866086][ T5799] ? clear_bhb_loop+0x50/0xa0 [ 266.870782][ T5799] ? clear_bhb_loop+0x50/0xa0 [ 266.875469][ T5799] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 266.881376][ T5799] RIP: 0033:0x7f48a3b4e159 [ 266.885834][ T5799] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 266.905464][ T5799] RSP: 002b:00007f48a25a7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 266.913895][ T5799] RAX: ffffffffffffffda RBX: 00007f48a3dd5fa0 RCX: 00007f48a3b4e159 [ 266.921886][ T5799] RDX: 00002000000000c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 266.929875][ T5799] RBP: 00007f48a3be5024 R08: 0000000000000000 R09: 0000000000000000 [ 266.937857][ T5799] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 266.945859][ T5799] R13: 00007f48a3dd6038 R14: 00007f48a3dd5fa0 R15: 00007ffec2b87548 [ 266.953845][ T5799] [ 266.964006][ T3406] loop4: p1 p2 p3 p4 [ 266.969493][ T3406] loop4: p3 start 117772289 is beyond EOD, truncated [ 266.989432][ T3406] loop4: p4 size 262144 extends beyond EOD, truncated [ 267.007075][ T5795] loop4: p1 p2 p3 p4 [ 267.012675][ T5811] FAULT_INJECTION: forcing a failure. [ 267.012675][ T5811] name failslab, interval 1, probability 0, space 0, times 0 [ 267.022016][ T5809] netlink: 'syz.1.1611': attribute type 15 has an invalid length. [ 267.026790][ T5811] CPU: 1 PID: 5811 Comm: syz.5.1612 Tainted: G W syzkaller #0 [ 267.042126][ T5811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 267.052201][ T5811] Call Trace: [ 267.055504][ T5811] [ 267.058462][ T5811] __dump_stack+0x21/0x30 [ 267.062827][ T5811] dump_stack_lvl+0x110/0x170 [ 267.067533][ T5811] ? show_regs_print_info+0x20/0x20 [ 267.072799][ T5811] dump_stack+0x15/0x20 [ 267.076992][ T5811] should_fail+0x3ab/0x500 [ 267.081460][ T5811] __should_failslab+0xa4/0xe0 [ 267.086278][ T5811] should_failslab+0x9/0x20 [ 267.090828][ T5811] slab_pre_alloc_hook+0x39/0xd0 [ 267.094214][ T5795] loop4: p3 start 117772289 is beyond EOD, [ 267.095808][ T5811] ? getname_flags+0xba/0x510 [ 267.095833][ T5795] truncated [ 267.095839][ T5795] loop4: p4 size 262144 extends beyond EOD, [ 267.101721][ T5811] kmem_cache_alloc+0x44/0x260 [ 267.101748][ T5811] getname_flags+0xba/0x510 [ 267.124821][ T5811] user_path_at_empty+0x2f/0x1c0 [ 267.129797][ T5811] __se_sys_mount+0x2eb/0x390 [ 267.134514][ T5811] ? __x64_sys_mount+0xd0/0xd0 [ 267.135163][ T5795] truncated [ 267.139327][ T5811] ? __kasan_check_write+0x14/0x20 [ 267.139355][ T5811] __x64_sys_mount+0xbf/0xd0 [ 267.152186][ T5811] x64_sys_call+0x6bf/0x9a0 [ 267.156750][ T5811] do_syscall_64+0x4c/0xa0 [ 267.161193][ T5811] ? clear_bhb_loop+0x50/0xa0 [ 267.165904][ T5811] ? clear_bhb_loop+0x50/0xa0 [ 267.170717][ T5811] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 267.176665][ T5811] RIP: 0033:0x7f48a3b4e159 [ 267.181106][ T5811] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 267.200816][ T5811] RSP: 002b:00007f48a25a7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 267.209250][ T5811] RAX: ffffffffffffffda RBX: 00007f48a3dd5fa0 RCX: 00007f48a3b4e159 [ 267.217240][ T5811] RDX: 0000200000000240 RSI: 0000000000000000 RDI: 00002000000001c0 [ 267.225220][ T5811] RBP: 00007f48a3be5024 R08: 0000000000000000 R09: 0000000000000000 [ 267.233208][ T5811] R10: 0000000000802008 R11: 0000000000000246 R12: 0000000000000000 [ 267.241197][ T5811] R13: 00007f48a3dd6038 R14: 00007f48a3dd5fa0 R15: 00007ffec2b87548 [ 267.249184][ T5811] [ 267.259601][ T5814] loop0: detected capacity change from 0 to 256 [ 267.317135][ T5814] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 267.339185][ T5814] FAT-fs (loop0): Filesystem has been set read-only [ 267.362815][ T5814] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 267.372163][ T5814] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 267.382296][ T339] udevd[339]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 267.384276][ T1168] udevd[1168]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 267.402280][ T5814] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 267.404227][ T3406] udevd[3406]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 267.423201][ T5814] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 267.431982][ T5814] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 267.440785][ T5814] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 267.449662][ T5814] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 267.468666][ T5814] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 267.481449][ T309] udevd[309]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 267.487658][ T5814] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 267.537420][ T5837] loop9: detected capacity change from 0 to 128 [ 267.680391][ T5865] loop9: detected capacity change from 0 to 512 [ 267.687115][ T5865] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 267.768160][ T5872] FAULT_INJECTION: forcing a failure. [ 267.768160][ T5872] name fail_futex, interval 1, probability 0, space 0, times 0 [ 267.786307][ T5872] CPU: 1 PID: 5872 Comm: syz.5.1638 Tainted: G W syzkaller #0 [ 267.795127][ T5872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 267.805217][ T5872] Call Trace: [ 267.808520][ T5872] [ 267.811472][ T5872] __dump_stack+0x21/0x30 [ 267.815821][ T5872] dump_stack_lvl+0x110/0x170 [ 267.820525][ T5872] ? show_regs_print_info+0x20/0x20 [ 267.825758][ T5872] dump_stack+0x15/0x20 [ 267.829932][ T5872] should_fail+0x3ab/0x500 [ 267.834361][ T5872] get_futex_key+0x143/0xb60 [ 267.838976][ T5872] ? futex_wait_restart+0x250/0x250 [ 267.844204][ T5872] futex_wake+0x133/0x8f0 [ 267.848549][ T5872] ? futex_wait+0x8f0/0x8f0 [ 267.853065][ T5872] ? __stack_depot_save+0x34/0x480 [ 267.858197][ T5872] ? path_openat+0x284f/0x2f80 [ 267.862975][ T5872] do_futex+0xd8d/0x27f0 [ 267.867229][ T5872] ? kasan_set_track+0x4a/0x70 [ 267.872022][ T5872] ? kmem_cache_free+0x100/0x320 [ 267.876993][ T5872] ? do_sys_openat2+0x6df/0x7f0 [ 267.881855][ T5872] ? x64_sys_call+0x219/0x9a0 [ 267.886554][ T5872] ? do_syscall_64+0x4c/0xa0 [ 267.891204][ T5872] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 267.897286][ T5872] ? _kstrtoull+0x3bb/0x4c0 [ 267.901798][ T5872] ? futex_exit_release+0x1e0/0x1e0 [ 267.907002][ T5872] ? kstrtouint_from_user+0x1c4/0x220 [ 267.912394][ T5872] ? kstrtol_from_user+0x2a0/0x2a0 [ 267.917512][ T5872] ? __kasan_check_write+0x14/0x20 [ 267.922630][ T5872] ? proc_fail_nth_write+0x180/0x200 [ 267.927951][ T5872] ? proc_fail_nth_read+0x220/0x220 [ 267.933165][ T5872] ? security_file_permission+0x79/0xa0 [ 267.938729][ T5872] ? vfs_write+0xc72/0xfd0 [ 267.943175][ T5872] ? file_end_write+0x1b0/0x1b0 [ 267.948039][ T5872] __se_sys_futex+0x135/0x330 [ 267.952730][ T5872] ? __x64_sys_futex+0x100/0x100 [ 267.957679][ T5872] __x64_sys_futex+0xe5/0x100 [ 267.962360][ T5872] x64_sys_call+0x251/0x9a0 [ 267.966864][ T5872] do_syscall_64+0x4c/0xa0 [ 267.971287][ T5872] ? clear_bhb_loop+0x50/0xa0 [ 267.975983][ T5872] ? clear_bhb_loop+0x50/0xa0 [ 267.980669][ T5872] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 267.986569][ T5872] RIP: 0033:0x7f48a3b4e159 [ 267.991003][ T5872] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 268.010624][ T5872] RSP: 002b:00007f48a25a70e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 268.019055][ T5872] RAX: ffffffffffffffda RBX: 00007f48a3dd5fa8 RCX: 00007f48a3b4e159 [ 268.027038][ T5872] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f48a3dd5fac [ 268.035027][ T5872] RBP: 00007f48a3dd5fa0 R08: 002b5f074b5a0076 R09: 0000000000000000 [ 268.043024][ T5872] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 268.051003][ T5872] R13: 00007f48a3dd6038 R14: 00007ffec2b87460 R15: 00007ffec2b87548 [ 268.059015][ T5872] [ 268.125456][ T5891] overlayfs: unrecognized mount option "/" or missing value [ 268.186297][ T5897] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 268.193595][ T5897] IPv6: NLM_F_CREATE should be set when creating new route [ 268.226536][ T5904] Illegal XDP return value 1905847820, expect packet loss! [ 268.250707][ T5912] FAULT_INJECTION: forcing a failure. [ 268.250707][ T5912] name failslab, interval 1, probability 0, space 0, times 0 [ 268.306309][ T5912] CPU: 1 PID: 5912 Comm: syz.1.1652 Tainted: G W syzkaller #0 [ 268.315129][ T5912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 268.325220][ T5912] Call Trace: [ 268.328525][ T5912] [ 268.331519][ T5912] __dump_stack+0x21/0x30 [ 268.335882][ T5912] dump_stack_lvl+0x110/0x170 [ 268.340600][ T5912] ? show_regs_print_info+0x20/0x20 [ 268.345838][ T5912] dump_stack+0x15/0x20 [ 268.350018][ T5912] should_fail+0x3ab/0x500 [ 268.354461][ T5912] __should_failslab+0xa4/0xe0 [ 268.359260][ T5912] should_failslab+0x9/0x20 [ 268.359549][ T5920] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 268.363799][ T5912] slab_pre_alloc_hook+0x39/0xd0 [ 268.363828][ T5912] kmem_cache_alloc_trace+0x48/0x270 [ 268.392216][ T5912] ? selinux_bpf_map_alloc+0x51/0x140 [ 268.397731][ T5912] selinux_bpf_map_alloc+0x51/0x140 [ 268.403027][ T5912] security_bpf_map_alloc+0x62/0x90 [ 268.408257][ T5912] map_create+0x1686/0x1fa0 [ 268.412811][ T5912] __sys_bpf+0x2ff/0x7d0 [ 268.417087][ T5912] ? bpf_link_show_fdinfo+0x330/0x330 [ 268.422515][ T5912] ? __kasan_check_write+0x14/0x20 [ 268.427717][ T5912] ? switch_fpu_return+0x15d/0x2c0 [ 268.432874][ T5912] __x64_sys_bpf+0x7c/0x90 [ 268.437329][ T5912] x64_sys_call+0x4b9/0x9a0 [ 268.441860][ T5912] do_syscall_64+0x4c/0xa0 [ 268.446313][ T5912] ? clear_bhb_loop+0x50/0xa0 [ 268.451011][ T5912] ? clear_bhb_loop+0x50/0xa0 [ 268.455711][ T5912] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 268.461644][ T5912] RIP: 0033:0x7ffab6858159 [ 268.466089][ T5912] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 268.485717][ T5912] RSP: 002b:00007ffab52b1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 268.494158][ T5912] RAX: ffffffffffffffda RBX: 00007ffab6adffa0 RCX: 00007ffab6858159 [ 268.502152][ T5912] RDX: 0000000000000050 RSI: 0000200000000180 RDI: 0000000000000000 [ 268.510149][ T5912] RBP: 00007ffab68ef024 R08: 0000000000000000 R09: 0000000000000000 [ 268.518137][ T5912] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 268.526297][ T5912] R13: 00007ffab6ae0038 R14: 00007ffab6adffa0 R15: 00007fffb635eac8 [ 268.534290][ T5912] [ 268.556546][ T5930] loop5: detected capacity change from 0 to 128 [ 268.588027][ T5930] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 268.612610][ T10] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 268.639109][ T5936] cgroup: Invalid name [ 268.693019][ T5943] FAULT_INJECTION: forcing a failure. [ 268.693019][ T5943] name failslab, interval 1, probability 0, space 0, times 0 [ 268.707736][ T5943] CPU: 0 PID: 5943 Comm: syz.5.1663 Tainted: G W syzkaller #0 [ 268.716548][ T5943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 268.726631][ T5943] Call Trace: [ 268.729933][ T5943] [ 268.732894][ T5943] __dump_stack+0x21/0x30 [ 268.737254][ T5943] dump_stack_lvl+0x110/0x170 [ 268.741975][ T5943] ? show_regs_print_info+0x20/0x20 [ 268.747202][ T5943] dump_stack+0x15/0x20 [ 268.751389][ T5943] should_fail+0x3ab/0x500 [ 268.755859][ T5943] __should_failslab+0xa4/0xe0 [ 268.760677][ T5943] should_failslab+0x9/0x20 [ 268.765222][ T5943] slab_pre_alloc_hook+0x39/0xd0 [ 268.770197][ T5943] ? vm_area_dup+0x26/0x210 [ 268.774843][ T5943] kmem_cache_alloc+0x44/0x260 [ 268.779648][ T5943] ? vfs_write+0xc72/0xfd0 [ 268.784095][ T5943] vm_area_dup+0x26/0x210 [ 268.788464][ T5943] __split_vma+0xac/0x3e0 [ 268.792815][ T5943] split_vma+0x7c/0xd0 [ 268.796911][ T5943] mlock_fixup+0x41d/0x4b0 [ 268.801347][ T5943] apply_vma_lock_flags+0x1b7/0x2a0 [ 268.806582][ T5943] do_mlock+0x42e/0x580 [ 268.810762][ T5943] ? __kasan_check_write+0x14/0x20 [ 268.815902][ T5943] __x64_sys_mlock+0x60/0x70 [ 268.820521][ T5943] x64_sys_call+0x27b/0x9a0 [ 268.825052][ T5943] do_syscall_64+0x4c/0xa0 [ 268.829496][ T5943] ? clear_bhb_loop+0x50/0xa0 [ 268.834201][ T5943] ? clear_bhb_loop+0x50/0xa0 [ 268.838911][ T5943] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 268.844835][ T5943] RIP: 0033:0x7f48a3b4e159 [ 268.849284][ T5943] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 268.851696][ T5957] FAULT_INJECTION: forcing a failure. [ 268.851696][ T5957] name fail_futex, interval 1, probability 0, space 0, times 0 [ 268.868918][ T5943] RSP: 002b:00007f48a25a7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 268.868944][ T5943] RAX: ffffffffffffffda RBX: 00007f48a3dd5fa0 RCX: 00007f48a3b4e159 [ 268.868960][ T5943] RDX: 0000000000000000 RSI: 0000000000004000 RDI: 0000200000341000 [ 268.868973][ T5943] RBP: 00007f48a3be5024 R08: 0000000000000000 R09: 0000000000000000 [ 268.868987][ T5943] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 268.869000][ T5943] R13: 00007f48a3dd6038 R14: 00007f48a3dd5fa0 R15: 00007ffec2b87548 [ 268.930050][ T5943] [ 268.935155][ T5957] CPU: 1 PID: 5957 Comm: syz.0.1673 Tainted: G W syzkaller #0 [ 268.943967][ T5957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 268.954037][ T5957] Call Trace: [ 268.957323][ T5957] [ 268.960261][ T5957] __dump_stack+0x21/0x30 [ 268.964610][ T5957] dump_stack_lvl+0x110/0x170 [ 268.969301][ T5957] ? show_regs_print_info+0x20/0x20 [ 268.974519][ T5957] ? __kasan_check_write+0x14/0x20 [ 268.979645][ T5957] dump_stack+0x15/0x20 [ 268.983837][ T5957] should_fail+0x3ab/0x500 [ 268.988278][ T5957] get_futex_key+0x170/0xb60 [ 268.992878][ T5957] ? futex_wait+0x8f0/0x8f0 [ 268.997390][ T5957] ? futex_wait_restart+0x250/0x250 [ 269.002600][ T5957] ? __stack_depot_save+0x34/0x480 [ 269.007722][ T5957] ? path_openat+0x284f/0x2f80 [ 269.012501][ T5957] do_futex+0x1b4f/0x27f0 [ 269.016839][ T5957] ? kasan_set_track+0x4a/0x70 [ 269.021608][ T5957] ? kmem_cache_free+0x100/0x320 [ 269.026559][ T5957] ? do_sys_openat2+0x6df/0x7f0 [ 269.031415][ T5957] ? x64_sys_call+0x219/0x9a0 [ 269.036097][ T5957] ? do_syscall_64+0x4c/0xa0 [ 269.040719][ T5957] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 269.046796][ T5957] ? _kstrtoull+0x3bb/0x4c0 [ 269.051317][ T5957] ? futex_exit_release+0x1e0/0x1e0 [ 269.056527][ T5957] ? kstrtouint_from_user+0x1c4/0x220 [ 269.061914][ T5957] ? __kasan_check_write+0x14/0x20 [ 269.067054][ T5957] ? proc_fail_nth_write+0x180/0x200 [ 269.072351][ T5957] ? security_file_permission+0x79/0xa0 [ 269.077937][ T5957] ? file_end_write+0x1b0/0x1b0 [ 269.082806][ T5957] ? __kasan_check_write+0x14/0x20 [ 269.087938][ T5957] ? mutex_unlock+0x8f/0x230 [ 269.092540][ T5957] __se_sys_futex+0x135/0x330 [ 269.097227][ T5957] ? __kasan_check_write+0x14/0x20 [ 269.102350][ T5957] ? __x64_sys_futex+0x100/0x100 [ 269.107297][ T5957] ? ksys_write+0x1fa/0x260 [ 269.111805][ T5957] ? __kasan_check_write+0x14/0x20 [ 269.116933][ T5957] __x64_sys_futex+0xe5/0x100 [ 269.121623][ T5957] x64_sys_call+0x251/0x9a0 [ 269.126142][ T5957] do_syscall_64+0x4c/0xa0 [ 269.130561][ T5957] ? clear_bhb_loop+0x50/0xa0 [ 269.135245][ T5957] ? clear_bhb_loop+0x50/0xa0 [ 269.139938][ T5957] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 269.145840][ T5957] RIP: 0033:0x7f5e52d2e159 [ 269.150289][ T5957] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 269.170141][ T5957] RSP: 002b:00007f5e51787028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 269.178616][ T5957] RAX: ffffffffffffffda RBX: 00007f5e52fb5fa0 RCX: 00007f5e52d2e159 [ 269.186626][ T5957] RDX: 0000000000000004 RSI: 000080000000000b RDI: 0000000000000000 [ 269.194635][ T5957] RBP: 00007f5e52dc5024 R08: 0000200000048000 R09: 0000000000000000 [ 269.202640][ T5957] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 269.210627][ T5957] R13: 00007f5e52fb6038 R14: 00007f5e52fb5fa0 R15: 00007ffcfdd394c8 [ 269.218623][ T5957] [ 269.313851][ T5971] loop5: detected capacity change from 0 to 128 [ 269.344223][ T2486] FAT-fs (loop5): error, corrupted directory (invalid entries) [ 269.351969][ T2486] FAT-fs (loop5): error, corrupted directory (invalid entries) [ 269.596647][ T5995] FAULT_INJECTION: forcing a failure. [ 269.596647][ T5995] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 269.617189][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 269.617204][ T30] audit: type=1400 audit(1788276456.822:516): avc: denied { mounton } for pid=5996 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 269.667657][ T5995] CPU: 0 PID: 5995 Comm: syz.1.1691 Tainted: G W syzkaller #0 [ 269.676479][ T5995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 269.686577][ T5995] Call Trace: [ 269.689907][ T5995] [ 269.692861][ T5995] __dump_stack+0x21/0x30 [ 269.697236][ T5995] dump_stack_lvl+0x110/0x170 [ 269.702031][ T5995] ? show_regs_print_info+0x20/0x20 [ 269.707271][ T5995] ? vfs_write+0xc72/0xfd0 [ 269.708276][ T6000] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1693'. [ 269.711741][ T5995] dump_stack+0x15/0x20 [ 269.724887][ T5995] should_fail+0x3ab/0x500 [ 269.729342][ T5995] should_fail_usercopy+0x1a/0x20 [ 269.734417][ T5995] _copy_from_user+0x20/0xd0 [ 269.739029][ T5995] do_seccomp+0x39f/0x1480 [ 269.743483][ T5995] ? __se_sys_futex+0x135/0x330 [ 269.748364][ T5995] ? __kasan_check_write+0x14/0x20 [ 269.753494][ T5995] ? prctl_set_seccomp+0x60/0x60 [ 269.758448][ T5995] ? __x64_sys_futex+0x100/0x100 [ 269.763398][ T5995] ? ksys_write+0x1fa/0x260 [ 269.767920][ T5995] ? __kasan_check_write+0x14/0x20 [ 269.773056][ T5995] ? switch_fpu_return+0x15d/0x2c0 [ 269.778178][ T5995] __x64_sys_seccomp+0x7b/0x90 [ 269.782959][ T5995] x64_sys_call+0x22e/0x9a0 [ 269.787466][ T5995] do_syscall_64+0x4c/0xa0 [ 269.791908][ T5995] ? clear_bhb_loop+0x50/0xa0 [ 269.796591][ T5995] ? clear_bhb_loop+0x50/0xa0 [ 269.801282][ T5995] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 269.807184][ T5995] RIP: 0033:0x7ffab6858159 [ 269.811607][ T5995] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 269.831250][ T5995] RSP: 002b:00007ffab52b1028 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 269.839676][ T5995] RAX: ffffffffffffffda RBX: 00007ffab6adffa0 RCX: 00007ffab6858159 [ 269.847662][ T5995] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 269.855636][ T5995] RBP: 00007ffab68ef024 R08: 0000000000000000 R09: 0000000000000000 [ 269.863616][ T5995] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 269.871593][ T5995] R13: 00007ffab6ae0038 R14: 00007ffab6adffa0 R15: 00007fffb635eac8 [ 269.879583][ T5995] [ 269.905578][ T6004] loop9: detected capacity change from 0 to 256 [ 269.942391][ T5996] bridge0: port 1(bridge_slave_0) entered blocking state [ 269.949541][ T6013] FAULT_INJECTION: forcing a failure. [ 269.949541][ T6013] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 269.949861][ T5996] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.962841][ T6013] CPU: 1 PID: 6013 Comm: syz.1.1698 Tainted: G W syzkaller #0 [ 269.978639][ T6013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 269.988712][ T6013] Call Trace: [ 269.992011][ T6013] [ 269.994970][ T6013] __dump_stack+0x21/0x30 [ 269.999324][ T6013] dump_stack_lvl+0x110/0x170 [ 270.004022][ T6013] ? show_regs_print_info+0x20/0x20 [ 270.009236][ T6013] ? compat_start_thread+0x20/0x20 [ 270.014393][ T6013] dump_stack+0x15/0x20 [ 270.018564][ T6013] should_fail+0x3ab/0x500 [ 270.022997][ T6013] should_fail_alloc_page+0x55/0x80 [ 270.028219][ T6013] prepare_alloc_pages+0x13f/0x590 [ 270.033360][ T6013] ? __alloc_pages_bulk+0xab0/0xab0 [ 270.038575][ T6013] __alloc_pages+0x11d/0x460 [ 270.043179][ T6013] ? unlock_page_memcg+0x114/0x130 [ 270.048404][ T6013] ? prep_new_page+0x110/0x110 [ 270.053182][ T6013] ? page_remove_rmap+0xc6d/0xf40 [ 270.058222][ T6013] ? page_add_file_rmap+0x700/0x700 [ 270.063437][ T6013] ? __kasan_check_write+0x14/0x20 [ 270.068570][ T6013] ? _raw_spin_lock+0x94/0xf0 [ 270.073269][ T6013] __get_free_pages+0x10/0x30 [ 270.077959][ T6013] __tlb_remove_page_size+0x18a/0x310 [ 270.083350][ T6013] unmap_page_range+0x1059/0x1e00 [ 270.088397][ T6013] ? mmu_notifier_invalidate_range_end+0xe0/0xe0 [ 270.094741][ T6013] ? lru_cache_add+0x7e0/0x7e0 [ 270.099517][ T6013] ? schedule_preempt_disabled+0x20/0x20 [ 270.105175][ T6013] unmap_vmas+0x26d/0x380 [ 270.109512][ T6013] ? unmap_page_range+0x1e00/0x1e00 [ 270.114758][ T6013] ? __kasan_check_write+0x14/0x20 [ 270.119895][ T6013] ? tlb_gather_mmu_fullmm+0x144/0x1c0 [ 270.125367][ T6013] exit_mmap+0x412/0x8b0 [ 270.129726][ T6013] ? vm_brk+0x30/0x30 [ 270.133724][ T6013] ? mutex_unlock+0x8f/0x230 [ 270.138344][ T6013] ? uprobe_clear_state+0x2c6/0x320 [ 270.143669][ T6013] __mmput+0x92/0x300 [ 270.147681][ T6013] mmput+0x50/0x150 [ 270.151499][ T6013] do_exit+0xacc/0x29a0 [ 270.155704][ T6013] ? put_task_struct+0x90/0x90 [ 270.160484][ T6013] ? __stack_depot_save+0x34/0x480 [ 270.165610][ T6013] ? __kasan_check_write+0x14/0x20 [ 270.170731][ T6013] ? _raw_spin_lock_irq+0x95/0xf0 [ 270.175764][ T6013] do_group_exit+0x149/0x310 [ 270.180391][ T6013] ? __kasan_check_write+0x14/0x20 [ 270.185515][ T6013] ? recalc_sigpending+0x1ac/0x230 [ 270.190643][ T6013] get_signal+0x64f/0x1430 [ 270.195069][ T6013] arch_do_signal_or_restart+0xe2/0x1100 [ 270.200716][ T6013] ? debug_smp_processor_id+0x17/0x20 [ 270.206115][ T6013] ? kasan_quarantine_put+0x34/0x190 [ 270.211414][ T6013] ? get_sigframe_size+0x10/0x10 [ 270.216360][ T6013] ? __se_sys_futex+0x135/0x330 [ 270.221231][ T6013] ? kfree+0xc4/0x270 [ 270.225229][ T6013] exit_to_user_mode_loop+0xa7/0xe0 [ 270.230439][ T6013] exit_to_user_mode_prepare+0x87/0xd0 [ 270.235907][ T6013] syscall_exit_to_user_mode+0x1a/0x30 [ 270.241381][ T6013] do_syscall_64+0x58/0xa0 [ 270.245900][ T6013] ? clear_bhb_loop+0x50/0xa0 [ 270.250595][ T6013] ? clear_bhb_loop+0x50/0xa0 [ 270.255287][ T6013] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 270.261195][ T6013] RIP: 0033:0x7ffab6858159 [ 270.265617][ T6013] Code: Unable to access opcode bytes at RIP 0x7ffab685812f. [ 270.272994][ T6013] RSP: 002b:00007ffab52b10e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 270.281421][ T6013] RAX: 0000000000000001 RBX: 00007ffab6adffa8 RCX: 00007ffab6858159 [ 270.289411][ T6013] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007ffab6adffac [ 270.297421][ T6013] RBP: 00007ffab6adffa0 R08: 0036199c73b4f712 R09: 0000000000000000 [ 270.305440][ T6013] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 270.313437][ T6013] R13: 00007ffab6ae0038 R14: 00007fffb635e9e0 R15: 00007fffb635eac8 [ 270.321464][ T6013] [ 270.348941][ T5996] device bridge_slave_0 entered promiscuous mode [ 270.367446][ T5996] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.375083][ T5996] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.383351][ T5996] device bridge_slave_1 entered promiscuous mode [ 270.545352][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 270.553328][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 270.589195][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 270.597890][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 270.606900][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.614005][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 270.622056][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 270.631668][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 270.640113][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.647222][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 270.677592][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 270.686976][ T30] audit: type=1400 audit(1788276457.892:517): avc: denied { audit_write } for pid=6036 comm="syz.1.1707" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 270.713138][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 270.726664][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 270.734608][ T30] audit: type=1107 audit(1788276457.892:518): pid=6036 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 270.749140][ T6039] FAULT_INJECTION: forcing a failure. [ 270.749140][ T6039] name failslab, interval 1, probability 0, space 0, times 0 [ 270.762215][ T6035] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 270.774131][ T6039] CPU: 1 PID: 6039 Comm: syz.1.1708 Tainted: G W syzkaller #0 [ 270.782961][ T6039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 270.793041][ T6039] Call Trace: [ 270.796353][ T6039] [ 270.799309][ T6039] __dump_stack+0x21/0x30 [ 270.803674][ T6039] dump_stack_lvl+0x110/0x170 [ 270.808407][ T6039] ? show_regs_print_info+0x20/0x20 [ 270.813644][ T6039] ? number+0xc99/0xef0 [ 270.817831][ T6039] dump_stack+0x15/0x20 [ 270.822022][ T6039] should_fail+0x3ab/0x500 [ 270.826471][ T6039] __should_failslab+0xa4/0xe0 [ 270.831265][ T6039] should_failslab+0x9/0x20 [ 270.835802][ T6039] slab_pre_alloc_hook+0x39/0xd0 [ 270.840779][ T6039] ? kasprintf+0xdf/0x130 [ 270.845166][ T6039] __kmalloc_track_caller+0x6c/0x2c0 [ 270.850513][ T6039] ? kasprintf+0xdf/0x130 [ 270.854879][ T6039] kvasprintf+0xe3/0x1a0 [ 270.859155][ T6039] ? bust_spinlocks+0xe0/0xe0 [ 270.863870][ T6039] kasprintf+0xdf/0x130 [ 270.864448][ T6042] loop4: detected capacity change from 0 to 512 [ 270.868057][ T6039] ? kvasprintf_const+0x240/0x240 [ 270.879373][ T6039] ? kmem_cache_alloc_trace+0x119/0x270 [ 270.879387][ T6042] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 270.896678][ T6039] alloc_bprm+0x154/0x740 [ 270.901033][ T6039] ? __check_object_size+0x2dd/0x3b0 [ 270.906346][ T6039] do_execveat_common+0x1aa/0xab0 [ 270.911393][ T6039] __x64_sys_execveat+0xce/0xf0 [ 270.916262][ T6039] x64_sys_call+0x5c3/0x9a0 [ 270.920782][ T6039] do_syscall_64+0x4c/0xa0 [ 270.925218][ T6039] ? clear_bhb_loop+0x50/0xa0 [ 270.929919][ T6039] ? clear_bhb_loop+0x50/0xa0 [ 270.934615][ T6039] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 270.940531][ T6039] RIP: 0033:0x7ffab6858159 [ 270.944979][ T6039] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 270.964602][ T6039] RSP: 002b:00007ffab52b1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 270.973040][ T6039] RAX: ffffffffffffffda RBX: 00007ffab6adffa0 RCX: 00007ffab6858159 [ 270.981059][ T6039] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: ffffffffffffffff [ 270.989054][ T6039] RBP: 00007ffab68ef024 R08: 0000000000000800 R09: 0000000000000000 [ 270.997040][ T6039] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 271.005029][ T6039] R13: 00007ffab6ae0038 R14: 00007ffab6adffa0 R15: 00007fffb635eac8 [ 271.013026][ T6039] [ 271.019354][ T713] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 271.059409][ T713] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 271.073165][ T713] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 271.099235][ T713] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 271.109535][ T30] audit: type=1400 audit(1788276458.312:519): avc: denied { mount } for pid=6046 comm="syz.1.1711" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 271.151837][ T5996] device veth0_vlan entered promiscuous mode [ 271.174866][ T30] audit: type=1400 audit(1788276458.312:520): avc: denied { watch watch_reads } for pid=6046 comm="syz.1.1711" path="/249/file0" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:devpts_t tclass=dir permissive=1 [ 271.200458][ T713] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 271.217502][ T5996] device veth1_macvtap entered promiscuous mode [ 271.224816][ T30] audit: type=1400 audit(1788276458.372:521): avc: denied { unmount } for pid=2326 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 271.249104][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 271.267402][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 271.292630][ T6050] loop1: detected capacity change from 0 to 8192 [ 271.316270][ T30] audit: type=1400 audit(1788276458.522:522): avc: denied { mounton } for pid=5996 comm="syz-executor" path="/root/syzkaller.w23DrG/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 271.399569][ T6059] overlayfs: unrecognized mount option "/" or missing value [ 271.435051][ T6067] FAULT_INJECTION: forcing a failure. [ 271.435051][ T6067] name failslab, interval 1, probability 0, space 0, times 0 [ 271.448548][ T6067] CPU: 1 PID: 6067 Comm: syz.0.1718 Tainted: G W syzkaller #0 [ 271.457375][ T6067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 271.467484][ T6067] Call Trace: [ 271.470787][ T6067] [ 271.473742][ T6067] __dump_stack+0x21/0x30 [ 271.478130][ T6067] dump_stack_lvl+0x110/0x170 [ 271.482847][ T6067] ? show_regs_print_info+0x20/0x20 [ 271.488096][ T6067] dump_stack+0x15/0x20 [ 271.492285][ T6067] should_fail+0x3ab/0x500 [ 271.496742][ T6067] __should_failslab+0xa4/0xe0 [ 271.501740][ T6067] should_failslab+0x9/0x20 [ 271.506287][ T6067] slab_pre_alloc_hook+0x39/0xd0 [ 271.511273][ T6067] ? vm_area_dup+0x26/0x210 [ 271.515826][ T6067] kmem_cache_alloc+0x44/0x260 [ 271.520634][ T6067] ? vfs_write+0xc72/0xfd0 [ 271.525085][ T6067] vm_area_dup+0x26/0x210 [ 271.529457][ T6067] __split_vma+0xac/0x3e0 [ 271.533847][ T6067] split_vma+0x7c/0xd0 [ 271.537966][ T6067] mlock_fixup+0x41d/0x4b0 [ 271.542432][ T6067] apply_vma_lock_flags+0x1b7/0x2a0 [ 271.547681][ T6067] do_mlock+0x42e/0x580 [ 271.551906][ T6067] ? __kasan_check_write+0x14/0x20 [ 271.557069][ T6067] __x64_sys_mlock+0x60/0x70 [ 271.561693][ T6067] x64_sys_call+0x27b/0x9a0 [ 271.566235][ T6067] do_syscall_64+0x4c/0xa0 [ 271.570677][ T6067] ? clear_bhb_loop+0x50/0xa0 [ 271.575377][ T6067] ? clear_bhb_loop+0x50/0xa0 [ 271.580074][ T6067] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 271.585990][ T6067] RIP: 0033:0x7f5e52d2e159 [ 271.590424][ T6067] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 271.610055][ T6067] RSP: 002b:00007f5e51787028 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 271.618494][ T6067] RAX: ffffffffffffffda RBX: 00007f5e52fb5fa0 RCX: 00007f5e52d2e159 [ 271.626494][ T6067] RDX: 0000000000000000 RSI: 0000000000004000 RDI: 0000200000341000 [ 271.634494][ T6067] RBP: 00007f5e52dc5024 R08: 0000000000000000 R09: 0000000000000000 [ 271.642486][ T6067] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 271.650485][ T6067] R13: 00007f5e52fb6038 R14: 00007f5e52fb5fa0 R15: 00007ffcfdd394c8 [ 271.658708][ T6067] [ 271.681842][ T6073] FAULT_INJECTION: forcing a failure. [ 271.681842][ T6073] name failslab, interval 1, probability 0, space 0, times 0 [ 271.698269][ T6073] CPU: 0 PID: 6073 Comm: syz.4.1720 Tainted: G W syzkaller #0 [ 271.707088][ T6073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 271.717179][ T6073] Call Trace: [ 271.720494][ T6073] [ 271.723468][ T6073] __dump_stack+0x21/0x30 [ 271.727851][ T6073] dump_stack_lvl+0x110/0x170 [ 271.732557][ T6073] ? show_regs_print_info+0x20/0x20 [ 271.737784][ T6073] dump_stack+0x15/0x20 [ 271.741974][ T6073] should_fail+0x3ab/0x500 [ 271.746427][ T6073] __should_failslab+0xa4/0xe0 [ 271.751234][ T6073] should_failslab+0x9/0x20 [ 271.755775][ T6073] slab_pre_alloc_hook+0x39/0xd0 [ 271.760753][ T6073] ? anon_vma_clone+0xb7/0x4c0 [ 271.765553][ T6073] kmem_cache_alloc+0x44/0x260 [ 271.770359][ T6073] anon_vma_clone+0xb7/0x4c0 [ 271.775011][ T6073] __split_vma+0x187/0x3e0 [ 271.779479][ T6073] split_vma+0x7c/0xd0 [ 271.783598][ T6073] mprotect_fixup+0x530/0x7d0 [ 271.788319][ T6073] ? change_protection+0x1510/0x1510 [ 271.793651][ T6073] ? security_file_mprotect+0x84/0xa0 [ 271.799068][ T6073] do_mprotect_pkey+0x72c/0xad0 [ 271.803966][ T6073] ? prot_none_test+0x10/0x10 [ 271.808701][ T6073] ? __kasan_check_write+0x14/0x20 [ 271.813890][ T6073] ? switch_fpu_return+0x15d/0x2c0 [ 271.819051][ T6073] __x64_sys_mprotect+0x80/0x90 [ 271.823946][ T6073] x64_sys_call+0x912/0x9a0 [ 271.828523][ T6073] do_syscall_64+0x4c/0xa0 [ 271.832974][ T6073] ? clear_bhb_loop+0x50/0xa0 [ 271.837680][ T6073] ? clear_bhb_loop+0x50/0xa0 [ 271.842397][ T6073] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 271.848318][ T6073] RIP: 0033:0x7f3014ea7159 [ 271.852773][ T6073] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 271.872423][ T6073] RSP: 002b:00007f3013900028 EFLAGS: 00000246 ORIG_RAX: 000000000000000a [ 271.880886][ T6073] RAX: ffffffffffffffda RBX: 00007f301512efa0 RCX: 00007f3014ea7159 [ 271.888897][ T6073] RDX: 0000000000000000 RSI: 0000000000002000 RDI: 0000200000ffd000 [ 271.896907][ T6073] RBP: 00007f3014f3e024 R08: 0000000000000000 R09: 0000000000000000 [ 271.904929][ T6073] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 271.912943][ T6073] R13: 00007f301512f038 R14: 00007f301512efa0 R15: 00007ffe4df5b498 [ 271.920956][ T6073] [ 271.977376][ T6086] loop9: detected capacity change from 0 to 256 [ 272.011365][ T30] audit: type=1400 audit(1788276459.212:523): avc: denied { mount } for pid=6092 comm="syz.4.1729" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 272.044738][ T30] audit: type=1400 audit(1788276459.242:524): avc: denied { unmount } for pid=2460 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 272.141559][ T6110] FAULT_INJECTION: forcing a failure. [ 272.141559][ T6110] name failslab, interval 1, probability 0, space 0, times 0 [ 272.164571][ T45] device bridge_slave_1 left promiscuous mode [ 272.169325][ T6112] loop1: detected capacity change from 0 to 256 [ 272.172059][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.184870][ T45] device bridge_slave_0 left promiscuous mode [ 272.191191][ T6110] CPU: 0 PID: 6110 Comm: syz.0.1738 Tainted: G W syzkaller #0 [ 272.198835][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.199991][ T6110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 272.200010][ T6110] Call Trace: [ 272.220410][ T6110] [ 272.223374][ T6110] __dump_stack+0x21/0x30 [ 272.227754][ T6110] dump_stack_lvl+0x110/0x170 [ 272.232481][ T6110] ? show_regs_print_info+0x20/0x20 [ 272.237729][ T6110] dump_stack+0x15/0x20 [ 272.241930][ T6110] should_fail+0x3ab/0x500 [ 272.246392][ T6110] __should_failslab+0xa4/0xe0 [ 272.251172][ T6110] should_failslab+0x9/0x20 [ 272.255692][ T6110] slab_pre_alloc_hook+0x39/0xd0 [ 272.260635][ T6110] kmem_cache_alloc_trace+0x48/0x270 [ 272.265924][ T6110] ? btf_new_fd+0x1ae/0x930 [ 272.270535][ T6110] btf_new_fd+0x1ae/0x930 [ 272.274885][ T6110] bpf_btf_load+0x6f/0x90 [ 272.279220][ T6110] __sys_bpf+0x577/0x7d0 [ 272.283484][ T6110] ? bpf_link_show_fdinfo+0x330/0x330 [ 272.288921][ T6110] ? __kasan_check_write+0x14/0x20 [ 272.294097][ T6110] ? switch_fpu_return+0x15d/0x2c0 [ 272.299227][ T6110] __x64_sys_bpf+0x7c/0x90 [ 272.303652][ T6110] x64_sys_call+0x4b9/0x9a0 [ 272.308161][ T6110] do_syscall_64+0x4c/0xa0 [ 272.312587][ T6110] ? clear_bhb_loop+0x50/0xa0 [ 272.317259][ T6110] ? clear_bhb_loop+0x50/0xa0 [ 272.321931][ T6110] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 272.327830][ T6110] RIP: 0033:0x7f5e52d2e159 [ 272.332257][ T6110] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 272.351892][ T6110] RSP: 002b:00007f5e51787028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 272.360307][ T6110] RAX: ffffffffffffffda RBX: 00007f5e52fb5fa0 RCX: 00007f5e52d2e159 [ 272.368293][ T6110] RDX: 0000000000000028 RSI: 00002000000003c0 RDI: 0000000000000012 [ 272.376260][ T6110] RBP: 00007f5e52dc5024 R08: 0000000000000000 R09: 0000000000000000 [ 272.384318][ T6110] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 272.392291][ T6110] R13: 00007f5e52fb6038 R14: 00007f5e52fb5fa0 R15: 00007ffcfdd394c8 [ 272.400269][ T6110] [ 272.405092][ T45] device veth1_macvtap left promiscuous mode [ 272.411230][ T45] device veth0_vlan left promiscuous mode [ 272.428400][ T6119] FAULT_INJECTION: forcing a failure. [ 272.428400][ T6119] name failslab, interval 1, probability 0, space 0, times 0 [ 272.435612][ T6112] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 272.441476][ T6119] CPU: 0 PID: 6119 Comm: syz.0.1741 Tainted: G W syzkaller #0 [ 272.461495][ T6119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 272.471590][ T6119] Call Trace: [ 272.474898][ T6119] [ 272.477872][ T6119] __dump_stack+0x21/0x30 [ 272.482260][ T6119] dump_stack_lvl+0x110/0x170 [ 272.486971][ T6119] ? show_regs_print_info+0x20/0x20 [ 272.492205][ T6119] dump_stack+0x15/0x20 [ 272.496400][ T6119] should_fail+0x3ab/0x500 [ 272.500850][ T6119] __should_failslab+0xa4/0xe0 [ 272.505638][ T6119] should_failslab+0x9/0x20 [ 272.510162][ T6119] slab_pre_alloc_hook+0x39/0xd0 [ 272.515116][ T6119] ? prepare_creds+0x2f/0x610 [ 272.519825][ T6119] kmem_cache_alloc+0x44/0x260 [ 272.524607][ T6119] prepare_creds+0x2f/0x610 [ 272.529137][ T6119] ? fpu_clone+0x26d/0x4e0 [ 272.533577][ T6119] copy_creds+0xe4/0x640 [ 272.537842][ T6119] copy_process+0x7d5/0x3280 [ 272.542464][ T6119] ? _raw_spin_lock_bh+0x94/0xf0 [ 272.547428][ T6119] ? _raw_spin_unlock_bh+0x51/0x60 [ 272.552557][ T6119] ? sock_setsockopt+0x1b96/0x2470 [ 272.557790][ T6119] ? __pidfd_prepare+0x150/0x150 [ 272.562777][ T6119] ? selinux_socket_setsockopt+0x282/0x360 [ 272.568606][ T6119] kernel_clone+0x233/0x960 [ 272.573151][ T6119] ? __fget_files+0x2e1/0x340 [ 272.577838][ T6119] ? create_io_thread+0x170/0x170 [ 272.582880][ T6119] __x64_sys_clone+0x198/0x210 [ 272.587674][ T6119] ? __ia32_sys_vfork+0x130/0x130 [ 272.592713][ T6119] ? __kasan_check_write+0x14/0x20 [ 272.597845][ T6119] ? switch_fpu_return+0x15d/0x2c0 [ 272.602975][ T6119] x64_sys_call+0x41f/0x9a0 [ 272.607500][ T6119] do_syscall_64+0x4c/0xa0 [ 272.611943][ T6119] ? clear_bhb_loop+0x50/0xa0 [ 272.616635][ T6119] ? clear_bhb_loop+0x50/0xa0 [ 272.621330][ T6119] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 272.627235][ T6119] RIP: 0033:0x7f5e52d2e159 [ 272.631659][ T6119] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 272.651269][ T6119] RSP: 002b:00007f5e51786fd8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 272.659696][ T6119] RAX: ffffffffffffffda RBX: 00007f5e52fb5fa0 RCX: 00007f5e52d2e159 [ 272.667681][ T6119] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 272.675669][ T6119] RBP: 00007f5e52dc5024 R08: 0000000000000000 R09: 0000000000000000 [ 272.683648][ T6119] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 272.691624][ T6119] R13: 00007f5e52fb6038 R14: 00007f5e52fb5fa0 R15: 00007ffcfdd394c8 [ 272.699754][ T6119] [ 272.714389][ T6112] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 272.851114][ T30] audit: type=1400 audit(1788276460.052:525): avc: denied { watch } for pid=6130 comm="syz.1.1746" path="/252/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 272.901514][ T6124] bridge: RTM_DELNEIGH with unconfigured vlan 3 on bridge_slave_0 [ 272.959377][ T6141] overlayfs: failed to create directory ./file0/work (errno: 22); mounting read-only [ 273.038718][ T6143] loop4: detected capacity change from 0 to 8192 [ 273.068231][ T6158] loop9: detected capacity change from 0 to 128 [ 273.098223][ T3406] loop4: p1[EZD] p3 p4 [ 273.103758][ T3406] loop4: p3 start 150994944 is beyond EOD, truncated [ 273.122460][ T6143] loop4: p1[EZD] p3 p4 [ 273.137317][ T6143] loop4: p3 start 150994944 is beyond EOD, truncated [ 273.203741][ T6164] loop1: detected capacity change from 0 to 512 [ 273.248176][ T6164] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 273.299995][ T6176] overlayfs: failed to create directory ./file0/work (errno: 22); mounting read-only [ 273.330034][ T6180] fuse: Unknown parameter 'dont_appraise' [ 273.347545][ T6183] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 273.380319][ T6187] loop9: detected capacity change from 0 to 512 [ 273.573817][ T6190] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.580876][ T6190] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.588557][ T6190] device bridge_slave_0 entered promiscuous mode [ 273.595648][ T6190] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.602815][ T6190] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.610244][ T6190] device bridge_slave_1 entered promiscuous mode [ 273.657472][ T6190] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.664574][ T6190] bridge0: port 2(bridge_slave_1) entered forwarding state [ 273.671871][ T6190] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.678934][ T6190] bridge0: port 1(bridge_slave_0) entered forwarding state [ 273.710368][ T6197] device bridge1 entered promiscuous mode [ 273.772392][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 273.779961][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.787261][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.796306][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 273.804584][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.811641][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 273.829228][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 273.837864][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.845016][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 273.858660][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 273.906452][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 273.915701][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 273.922546][ T6202] loop0: detected capacity change from 0 to 8192 [ 273.926615][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 273.940063][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 273.951599][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 273.962975][ T6190] device veth0_vlan entered promiscuous mode [ 273.971670][ T420] device veth1_macvtap left promiscuous mode [ 273.987342][ T420] device veth0_vlan left promiscuous mode [ 273.996363][ T6209] loop4: detected capacity change from 0 to 128 [ 274.027002][ T2460] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 274.035504][ T2460] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 274.157106][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 274.166091][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 274.175930][ T6190] device veth1_macvtap entered promiscuous mode [ 274.193289][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 274.220341][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 274.243512][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 274.251900][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 274.273154][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 274.293349][ T6218] overlayfs: missing 'lowerdir' [ 274.302368][ T6221] loop3: detected capacity change from 0 to 128 [ 274.436510][ T6224] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.443936][ T6224] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.445485][ T6236] FAULT_INJECTION: forcing a failure. [ 274.445485][ T6236] name failslab, interval 1, probability 0, space 0, times 0 [ 274.452264][ T6224] device bridge_slave_0 entered promiscuous mode [ 274.472250][ T6224] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.479948][ T6224] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.487951][ T6224] device bridge_slave_1 entered promiscuous mode [ 274.499492][ T6236] CPU: 0 PID: 6236 Comm: syz.3.1792 Tainted: G W syzkaller #0 [ 274.508293][ T6236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 274.518379][ T6236] Call Trace: [ 274.521696][ T6236] [ 274.524650][ T6236] __dump_stack+0x21/0x30 [ 274.529017][ T6236] dump_stack_lvl+0x110/0x170 [ 274.533727][ T6236] ? show_regs_print_info+0x20/0x20 [ 274.538979][ T6236] dump_stack+0x15/0x20 [ 274.543172][ T6236] should_fail+0x3ab/0x500 [ 274.547627][ T6236] __should_failslab+0xa4/0xe0 [ 274.552429][ T6236] should_failslab+0x9/0x20 [ 274.556982][ T6236] slab_pre_alloc_hook+0x39/0xd0 [ 274.561952][ T6236] kmem_cache_alloc_trace+0x48/0x270 [ 274.567269][ T6236] ? btf_new_fd+0x1ae/0x930 [ 274.571812][ T6236] btf_new_fd+0x1ae/0x930 [ 274.576183][ T6236] bpf_btf_load+0x6f/0x90 [ 274.580539][ T6236] __sys_bpf+0x577/0x7d0 [ 274.584807][ T6236] ? bpf_link_show_fdinfo+0x330/0x330 [ 274.590244][ T6236] ? __kasan_check_write+0x14/0x20 [ 274.595390][ T6236] ? switch_fpu_return+0x15d/0x2c0 [ 274.600555][ T6236] __x64_sys_bpf+0x7c/0x90 [ 274.605011][ T6236] x64_sys_call+0x4b9/0x9a0 [ 274.609550][ T6236] do_syscall_64+0x4c/0xa0 [ 274.614001][ T6236] ? clear_bhb_loop+0x50/0xa0 [ 274.618715][ T6236] ? clear_bhb_loop+0x50/0xa0 [ 274.623431][ T6236] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 274.629361][ T6236] RIP: 0033:0x7fbc83df4159 [ 274.633912][ T6236] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 274.653638][ T6236] RSP: 002b:00007fbc8284d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 274.662087][ T6236] RAX: ffffffffffffffda RBX: 00007fbc8407bfa0 RCX: 00007fbc83df4159 [ 274.670229][ T6236] RDX: 0000000000000028 RSI: 00002000000003c0 RDI: 0000000000000012 [ 274.678240][ T6236] RBP: 00007fbc83e8b024 R08: 0000000000000000 R09: 0000000000000000 [ 274.686261][ T6236] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 274.694261][ T6236] R13: 00007fbc8407c038 R14: 00007fbc8407bfa0 R15: 00007ffdce0e4778 [ 274.702325][ T6236] [ 274.729506][ T6245] FAULT_INJECTION: forcing a failure. [ 274.729506][ T6245] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 274.744160][ T6245] CPU: 1 PID: 6245 Comm: syz.1.1797 Tainted: G W syzkaller #0 [ 274.752972][ T6245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 274.763065][ T6245] Call Trace: [ 274.766372][ T6245] [ 274.769324][ T6245] __dump_stack+0x21/0x30 [ 274.773688][ T6245] dump_stack_lvl+0x110/0x170 [ 274.778398][ T6245] ? show_regs_print_info+0x20/0x20 [ 274.783633][ T6245] dump_stack+0x15/0x20 [ 274.787816][ T6245] should_fail+0x3ab/0x500 [ 274.792282][ T6245] should_fail_usercopy+0x1a/0x20 [ 274.797338][ T6245] _copy_to_user+0x20/0x90 [ 274.801784][ T6245] simple_read_from_buffer+0xe9/0x160 [ 274.807213][ T6245] proc_fail_nth_read+0x1a6/0x220 [ 274.812267][ T6245] ? proc_fault_inject_write+0x310/0x310 [ 274.817938][ T6245] ? security_file_permission+0x83/0xa0 [ 274.823531][ T6245] ? proc_fault_inject_write+0x310/0x310 [ 274.829201][ T6245] vfs_read+0x28c/0xc20 [ 274.833383][ T6245] ? kernel_read+0x1f0/0x1f0 [ 274.838011][ T6245] ? __kasan_check_write+0x14/0x20 [ 274.843160][ T6245] ? mutex_lock+0x9b/0x1c0 [ 274.847606][ T6245] ? wait_for_completion_killable_timeout+0x10/0x10 [ 274.854223][ T6245] ? __fget_files+0x2e1/0x340 [ 274.858940][ T6245] ? __fdget_pos+0x2d2/0x380 [ 274.863562][ T6245] ? ksys_read+0x70/0x260 [ 274.867919][ T6245] ksys_read+0x14a/0x260 [ 274.872186][ T6245] ? vfs_write+0xfd0/0xfd0 [ 274.876745][ T6245] ? __kasan_check_write+0x14/0x20 [ 274.881887][ T6245] ? switch_fpu_return+0x15d/0x2c0 [ 274.887031][ T6245] __x64_sys_read+0x7b/0x90 [ 274.891583][ T6245] x64_sys_call+0x96d/0x9a0 [ 274.896125][ T6245] do_syscall_64+0x4c/0xa0 [ 274.899040][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 274.899079][ T30] audit: type=1400 audit(1788276462.102:530): avc: denied { ioctl } for pid=6248 comm="syz.3.1800" path="socket:[91627]" dev="sockfs" ino=91627 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 274.900567][ T6245] ? clear_bhb_loop+0x50/0xa0 [ 274.936900][ T6245] ? clear_bhb_loop+0x50/0xa0 [ 274.941600][ T6245] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 274.947498][ T6245] RIP: 0033:0x7ffab6858159 [ 274.951929][ T6245] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 274.971550][ T6245] RSP: 002b:00007ffab52b1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 274.979976][ T6245] RAX: ffffffffffffffda RBX: 00007ffab6adffa0 RCX: 00007ffab6858159 [ 274.987949][ T6245] RDX: 00000000000000a0 RSI: 0000200000000240 RDI: 0000000000000003 [ 274.995920][ T6245] RBP: 00007ffab68ef024 R08: 0000000000000000 R09: 0000000000000000 [ 275.003895][ T6245] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 275.011963][ T6245] R13: 00007ffab6ae0038 R14: 00007ffab6adffa0 R15: 00007fffb635eac8 [ 275.019944][ T6245] [ 275.088273][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 275.103005][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 275.120618][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 275.129109][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 275.137383][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.144481][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 275.162936][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 275.194512][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 275.208430][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 275.223651][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.230721][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 275.270233][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 275.284133][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 275.295134][ T6267] loop3: detected capacity change from 0 to 8192 [ 275.313391][ T6044] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 275.342693][ T6044] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 275.380573][ T713] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 275.388776][ T30] audit: type=1400 audit(1788276462.582:531): avc: denied { read } for pid=6275 comm="syz.1.1812" name="/" dev="configfs" ino=13261 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 275.389040][ T30] audit: type=1400 audit(1788276462.592:532): avc: denied { open } for pid=6275 comm="syz.1.1812" path="/" dev="configfs" ino=13261 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 275.414815][ T713] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 275.454377][ T6224] device veth0_vlan entered promiscuous mode [ 275.462229][ T713] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 275.470771][ T713] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 275.489433][ T6224] device veth1_macvtap entered promiscuous mode [ 275.510706][ T713] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 275.520382][ T713] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 275.529253][ T6284] erofs: (device loop1): check_layout_compatibility: unidentified incompatible feature 70, please upgrade kernel version [ 275.537497][ T713] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 275.555619][ T713] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 275.564069][ T713] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 275.593807][ T6288] device veth0_vlan left promiscuous mode [ 275.599873][ T6288] device veth0_vlan entered promiscuous mode [ 275.610536][ T6288] device veth1_macvtap left promiscuous mode [ 275.617547][ T6288] device veth1_macvtap entered promiscuous mode [ 275.626452][ T713] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 275.638417][ T713] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 275.646655][ T713] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 275.656693][ T713] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 275.665596][ T713] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 275.674015][ T713] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 275.682347][ T713] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 275.690459][ T713] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 275.698625][ T713] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 275.706699][ T713] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 275.714969][ T713] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 275.723234][ T713] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 275.731336][ T713] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 275.739472][ T713] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 275.747581][ T713] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 275.755834][ T713] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 275.764328][ T713] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 275.772552][ T713] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 275.780951][ T713] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 275.788902][ T713] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 275.797101][ T713] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 275.806441][ T713] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 275.814673][ T713] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 275.823018][ T713] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 275.831332][ T713] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 275.839455][ T713] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 275.847359][ T713] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 275.854843][ T713] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 275.862965][ T713] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 275.871071][ T713] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 275.882825][ T420] device bridge_slave_1 left promiscuous mode [ 275.889024][ T420] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.896540][ T420] device bridge_slave_0 left promiscuous mode [ 275.903136][ T420] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.911060][ T420] device veth1_macvtap left promiscuous mode [ 275.917317][ T420] device veth0_vlan left promiscuous mode [ 275.988341][ T713] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 275.996654][ T713] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 276.005196][ T713] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 276.013735][ T713] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 276.042619][ T6288] syz.0.1816 (6288) used greatest stack depth: 20640 bytes left [ 276.212166][ T6310] FAULT_INJECTION: forcing a failure. [ 276.212166][ T6310] name failslab, interval 1, probability 0, space 0, times 0 [ 276.228133][ T6310] CPU: 1 PID: 6310 Comm: syz.0.1824 Tainted: G W syzkaller #0 [ 276.236977][ T6310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 276.247059][ T6310] Call Trace: [ 276.250366][ T6310] [ 276.253332][ T6310] __dump_stack+0x21/0x30 [ 276.257693][ T6310] dump_stack_lvl+0x110/0x170 [ 276.262407][ T6310] ? show_regs_print_info+0x20/0x20 [ 276.267634][ T6310] dump_stack+0x15/0x20 [ 276.271832][ T6310] should_fail+0x3ab/0x500 [ 276.276280][ T6310] __should_failslab+0xa4/0xe0 [ 276.281163][ T6310] should_failslab+0x9/0x20 [ 276.285691][ T6310] slab_pre_alloc_hook+0x39/0xd0 [ 276.290667][ T6310] ? sk_prot_alloc+0x5f/0x320 [ 276.295389][ T6310] kmem_cache_alloc+0x44/0x260 [ 276.300199][ T6310] ? should_failslab+0x9/0x20 [ 276.304913][ T6310] sk_prot_alloc+0x5f/0x320 [ 276.309455][ T6310] sk_alloc+0x38/0x430 [ 276.313560][ T6310] inet_create+0x5c0/0xdd0 [ 276.318053][ T6310] __sock_create+0x38d/0x7a0 [ 276.322696][ T6310] __sys_socket+0xec/0x190 [ 276.327162][ T6310] __x64_sys_socket+0x7a/0x90 [ 276.332041][ T6310] x64_sys_call+0x8c5/0x9a0 [ 276.336577][ T6310] do_syscall_64+0x4c/0xa0 [ 276.341025][ T6310] ? clear_bhb_loop+0x50/0xa0 [ 276.345742][ T6310] ? clear_bhb_loop+0x50/0xa0 [ 276.350458][ T6310] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 276.356382][ T6310] RIP: 0033:0x7f5e52d2e159 [ 276.360833][ T6310] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 276.380467][ T6310] RSP: 002b:00007f5e51787028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 276.388918][ T6310] RAX: ffffffffffffffda RBX: 00007f5e52fb5fa0 RCX: 00007f5e52d2e159 [ 276.396929][ T6310] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000002 [ 276.404955][ T6310] RBP: 00007f5e52dc5024 R08: 0000000000000000 R09: 0000000000000000 [ 276.412973][ T6310] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 276.420972][ T6310] R13: 00007f5e52fb6038 R14: 00007f5e52fb5fa0 R15: 00007ffcfdd394c8 [ 276.428980][ T6310] [ 276.547510][ T30] audit: type=1400 audit(1788276463.752:533): avc: denied { nlmsg_read } for pid=6342 comm="syz.0.1837" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 276.577176][ T6348] FAULT_INJECTION: forcing a failure. [ 276.577176][ T6348] name failslab, interval 1, probability 0, space 0, times 0 [ 276.589948][ T6348] CPU: 1 PID: 6348 Comm: syz.0.1838 Tainted: G W syzkaller #0 [ 276.598765][ T6348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 276.608939][ T6348] Call Trace: [ 276.612238][ T6348] [ 276.615212][ T6348] __dump_stack+0x21/0x30 [ 276.619549][ T6348] dump_stack_lvl+0x110/0x170 [ 276.624232][ T6348] ? show_regs_print_info+0x20/0x20 [ 276.629434][ T6348] dump_stack+0x15/0x20 [ 276.633593][ T6348] should_fail+0x3ab/0x500 [ 276.638010][ T6348] __should_failslab+0xa4/0xe0 [ 276.642781][ T6348] should_failslab+0x9/0x20 [ 276.647294][ T6348] slab_pre_alloc_hook+0x39/0xd0 [ 276.652239][ T6348] ? __d_alloc+0x2d/0x690 [ 276.656584][ T6348] kmem_cache_alloc+0x44/0x260 [ 276.661353][ T6348] __d_alloc+0x2d/0x690 [ 276.665531][ T6348] d_alloc+0x48/0x260 [ 276.669524][ T6348] ? lookup_one_qstr_excl+0xb6/0x250 [ 276.674827][ T6348] lookup_one_qstr_excl+0xcb/0x250 [ 276.679948][ T6348] filename_create+0x23d/0x440 [ 276.684738][ T6348] ? kern_path_create+0x1b0/0x1b0 [ 276.689769][ T6348] do_mknodat+0xdb/0x790 [ 276.694019][ T6348] ? getname_flags+0x205/0x510 [ 276.698786][ T6348] __x64_sys_mknodat+0xa9/0xc0 [ 276.703549][ T6348] x64_sys_call+0x194/0x9a0 [ 276.708052][ T6348] do_syscall_64+0x4c/0xa0 [ 276.712472][ T6348] ? clear_bhb_loop+0x50/0xa0 [ 276.717160][ T6348] ? clear_bhb_loop+0x50/0xa0 [ 276.721867][ T6348] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 276.727783][ T6348] RIP: 0033:0x7f5e52d2e159 [ 276.732196][ T6348] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 276.751911][ T6348] RSP: 002b:00007f5e51787028 EFLAGS: 00000246 ORIG_RAX: 0000000000000103 [ 276.760328][ T6348] RAX: ffffffffffffffda RBX: 00007f5e52fb5fa0 RCX: 00007f5e52d2e159 [ 276.768303][ T6348] RDX: 0000000000000001 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 276.776302][ T6348] RBP: 00007f5e52dc5024 R08: 0000000000000000 R09: 0000000000000000 [ 276.784282][ T6348] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 276.792263][ T6348] R13: 00007f5e52fb6038 R14: 00007f5e52fb5fa0 R15: 00007ffcfdd394c8 [ 276.800245][ T6348] [ 276.877904][ T6360] FAULT_INJECTION: forcing a failure. [ 276.877904][ T6360] name failslab, interval 1, probability 0, space 0, times 0 [ 276.890657][ T6360] CPU: 1 PID: 6360 Comm: syz.1.1845 Tainted: G W syzkaller #0 [ 276.899449][ T6360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 276.909509][ T6360] Call Trace: [ 276.912788][ T6360] [ 276.915740][ T6360] __dump_stack+0x21/0x30 [ 276.920096][ T6360] dump_stack_lvl+0x110/0x170 [ 276.924780][ T6360] ? show_regs_print_info+0x20/0x20 [ 276.930009][ T6360] dump_stack+0x15/0x20 [ 276.934162][ T6360] should_fail+0x3ab/0x500 [ 276.938589][ T6360] __should_failslab+0xa4/0xe0 [ 276.943348][ T6360] should_failslab+0x9/0x20 [ 276.947851][ T6360] slab_pre_alloc_hook+0x39/0xd0 [ 276.952801][ T6360] ? sk_prot_alloc+0x5f/0x320 [ 276.957481][ T6360] kmem_cache_alloc+0x44/0x260 [ 276.962264][ T6360] sk_prot_alloc+0x5f/0x320 [ 276.966768][ T6360] sk_alloc+0x38/0x430 [ 276.970839][ T6360] inet_create+0x5c0/0xdd0 [ 276.975264][ T6360] __sock_create+0x38d/0x7a0 [ 276.979876][ T6360] __sys_socket+0xec/0x190 [ 276.984311][ T6360] __x64_sys_socket+0x7a/0x90 [ 276.988999][ T6360] x64_sys_call+0x8c5/0x9a0 [ 276.993523][ T6360] do_syscall_64+0x4c/0xa0 [ 276.997955][ T6360] ? clear_bhb_loop+0x50/0xa0 [ 277.002653][ T6360] ? clear_bhb_loop+0x50/0xa0 [ 277.007347][ T6360] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 277.013255][ T6360] RIP: 0033:0x7ffab6858159 [ 277.017692][ T6360] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 277.037319][ T6360] RSP: 002b:00007ffab52b1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 277.045840][ T6360] RAX: ffffffffffffffda RBX: 00007ffab6adffa0 RCX: 00007ffab6858159 [ 277.053838][ T6360] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000002 [ 277.061824][ T6360] RBP: 00007ffab68ef024 R08: 0000000000000000 R09: 0000000000000000 [ 277.069806][ T6360] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 277.077793][ T6360] R13: 00007ffab6ae0038 R14: 00007ffab6adffa0 R15: 00007fffb635eac8 [ 277.085793][ T6360] [ 277.089923][ T30] audit: type=1326 audit(1788276464.292:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6349 comm="syz.6.1839" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc01be4f159 code=0x7fc00000 [ 277.382783][ C0] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 277.657642][ T30] audit: type=1326 audit(1788276464.862:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6349 comm="syz.6.1839" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc01be4f159 code=0x7fc00000 [ 277.706982][ T30] audit: type=1326 audit(1788276464.862:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6349 comm="syz.6.1839" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc01be4f159 code=0x7fc00000 [ 277.732296][ T30] audit: type=1326 audit(1788276464.862:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6349 comm="syz.6.1839" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc01be4f159 code=0x7fc00000 [ 277.769855][ T30] audit: type=1326 audit(1788276464.862:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6349 comm="syz.6.1839" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc01be4f159 code=0x7fc00000 [ 277.804894][ T30] audit: type=1326 audit(1788276464.862:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6349 comm="syz.6.1839" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc01be4f159 code=0x7fc00000 [ 277.831404][ T6377] netlink: 592 bytes leftover after parsing attributes in process `syz.6.1850'. [ 277.949338][ T6386] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1854'. [ 278.027113][ T6390] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 278.129607][ T6395] set_capacity_and_notify: 2 callbacks suppressed [ 278.129628][ T6395] loop0: detected capacity change from 0 to 8192 [ 278.394785][ T6422] loop1: detected capacity change from 0 to 8192 [ 278.475261][ T6426] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1871'. [ 278.734547][ T6440] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 278.761514][ T6442] loop1: detected capacity change from 0 to 128 [ 278.846780][ T6442] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 278.938795][ T6448] FAULT_INJECTION: forcing a failure. [ 278.938795][ T6448] name fail_futex, interval 1, probability 0, space 0, times 0 [ 278.952044][ T6448] CPU: 0 PID: 6448 Comm: syz.1.1882 Tainted: G W syzkaller #0 [ 278.960851][ T6448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 278.970967][ T6448] Call Trace: [ 278.974277][ T6448] [ 278.977234][ T6448] __dump_stack+0x21/0x30 [ 278.981609][ T6448] dump_stack_lvl+0x110/0x170 [ 278.986328][ T6448] ? show_regs_print_info+0x20/0x20 [ 278.991557][ T6448] ? preempt_schedule_common+0xbe/0xf0 [ 278.997079][ T6448] dump_stack+0x15/0x20 [ 279.001272][ T6448] should_fail+0x3ab/0x500 [ 279.005718][ T6448] get_futex_key+0x143/0xb60 [ 279.010356][ T6448] ? try_to_wake_up+0x632/0x1150 [ 279.015340][ T6448] ? futex_wait_restart+0x250/0x250 [ 279.020620][ T6448] ? __kasan_check_write+0x14/0x20 [ 279.025778][ T6448] futex_wake+0x133/0x8f0 [ 279.030150][ T6448] ? futex_wait+0x8f0/0x8f0 [ 279.034694][ T6448] ? __kasan_check_read+0x11/0x20 [ 279.039760][ T6448] ? __rb_reserve_next+0x734/0xc90 [ 279.044919][ T6448] do_futex+0xd8d/0x27f0 [ 279.049208][ T6448] ? futex_exit_release+0x1e0/0x1e0 [ 279.054435][ T6448] ? __kasan_check_read+0x11/0x20 [ 279.059492][ T6448] ? __rb_reserve_next+0x734/0xc90 [ 279.064665][ T6448] ? ring_buffer_lock_reserve+0xbd5/0xf60 [ 279.070420][ T6448] ? __kasan_check_read+0x11/0x20 [ 279.075474][ T6448] ? rb_commit+0x75a/0x7b0 [ 279.079934][ T6448] ? __kasan_check_read+0x11/0x20 [ 279.084991][ T6448] ? ring_buffer_unlock_commit+0x46f/0x5d0 [ 279.090833][ T6448] __se_sys_futex+0x135/0x330 [ 279.095548][ T6448] ? __x64_sys_futex+0x100/0x100 [ 279.100525][ T6448] ? trace_event_raw_event_sys_enter+0x127/0x140 [ 279.106903][ T6448] __x64_sys_futex+0xe5/0x100 [ 279.111629][ T6448] x64_sys_call+0x251/0x9a0 [ 279.116179][ T6448] do_syscall_64+0x4c/0xa0 [ 279.120634][ T6448] ? clear_bhb_loop+0x50/0xa0 [ 279.125340][ T6448] ? clear_bhb_loop+0x50/0xa0 [ 279.130066][ T6448] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 279.135987][ T6448] RIP: 0033:0x7ffab6858159 [ 279.140428][ T6448] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 279.160061][ T6448] RSP: 002b:00007ffab52b10e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 279.162485][ T6452] FAULT_INJECTION: forcing a failure. [ 279.162485][ T6452] name fail_futex, interval 1, probability 0, space 0, times 0 [ 279.168506][ T6448] RAX: ffffffffffffffda RBX: 00007ffab6adffa8 RCX: 00007ffab6858159 [ 279.168525][ T6448] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007ffab6adffac [ 279.168550][ T6448] RBP: 00007ffab6adffa0 R08: 003581069a205764 R09: 0000000000000000 [ 279.205326][ T6448] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 279.213334][ T6448] R13: 00007ffab6ae0038 R14: 00007fffb635e9e0 R15: 00007fffb635eac8 [ 279.221335][ T6448] [ 279.224377][ T6452] CPU: 1 PID: 6452 Comm: syz.0.1883 Tainted: G W syzkaller #0 [ 279.233174][ T6452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 279.243266][ T6452] Call Trace: [ 279.246568][ T6452] [ 279.249528][ T6452] __dump_stack+0x21/0x30 [ 279.253900][ T6452] dump_stack_lvl+0x110/0x170 [ 279.258623][ T6452] ? show_regs_print_info+0x20/0x20 [ 279.263910][ T6452] dump_stack+0x15/0x20 [ 279.268115][ T6452] should_fail+0x3ab/0x500 [ 279.272577][ T6452] get_futex_key+0x143/0xb60 [ 279.277206][ T6452] ? futex_wait_restart+0x250/0x250 [ 279.282441][ T6452] ? unwind_get_return_address+0x4d/0x90 [ 279.288171][ T6452] futex_wake+0x133/0x8f0 [ 279.292527][ T6452] ? futex_wait+0x8f0/0x8f0 [ 279.297063][ T6452] ? kasan_set_track+0x5b/0x70 [ 279.301854][ T6452] ? kasan_set_track+0x4a/0x70 [ 279.306632][ T6452] do_futex+0xd8d/0x27f0 [ 279.310893][ T6452] ? __sys_bpf+0x577/0x7d0 [ 279.315327][ T6452] ? futex_exit_release+0x1e0/0x1e0 [ 279.320543][ T6452] ? __kasan_check_read+0x11/0x20 [ 279.325590][ T6452] ? __rb_reserve_next+0x734/0xc90 [ 279.330845][ T6452] ? ring_buffer_lock_reserve+0xbd5/0xf60 [ 279.336599][ T6452] ? __kasan_check_read+0x11/0x20 [ 279.341658][ T6452] ? rb_commit+0x75a/0x7b0 [ 279.346094][ T6452] ? __kasan_check_read+0x11/0x20 [ 279.351170][ T6452] ? ring_buffer_unlock_commit+0x46f/0x5d0 [ 279.357007][ T6452] __se_sys_futex+0x135/0x330 [ 279.361713][ T6452] ? __x64_sys_futex+0x100/0x100 [ 279.366676][ T6452] ? trace_event_raw_event_sys_enter+0x127/0x140 [ 279.373026][ T6452] __x64_sys_futex+0xe5/0x100 [ 279.377725][ T6452] x64_sys_call+0x251/0x9a0 [ 279.382250][ T6452] do_syscall_64+0x4c/0xa0 [ 279.386683][ T6452] ? clear_bhb_loop+0x50/0xa0 [ 279.391376][ T6452] ? clear_bhb_loop+0x50/0xa0 [ 279.396073][ T6452] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 279.401991][ T6452] RIP: 0033:0x7f5e52d2e159 [ 279.406426][ T6452] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 279.426074][ T6452] RSP: 002b:00007f5e517870e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 279.434519][ T6452] RAX: ffffffffffffffda RBX: 00007f5e52fb5fa8 RCX: 00007f5e52d2e159 [ 279.442509][ T6452] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f5e52fb5fac [ 279.450492][ T6452] RBP: 00007f5e52fb5fa0 R08: 0007032b9e32ea68 R09: 0000000000000000 [ 279.458485][ T6452] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 279.466475][ T6452] R13: 00007f5e52fb6038 R14: 00007ffcfdd393e0 R15: 00007ffcfdd394c8 [ 279.474472][ T6452] [ 279.522910][ T6456] loop7: detected capacity change from 0 to 256 [ 279.573445][ T6456] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 279.673404][ T6470] loop3: detected capacity change from 0 to 128 [ 279.739565][ T6472] loop0: detected capacity change from 0 to 8192 [ 280.118314][ T6512] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1908'. [ 280.602445][ T30] kauditd_printk_skb: 25 callbacks suppressed [ 280.602465][ T30] audit: type=1400 audit(1788276467.802:565): avc: denied { write } for pid=6546 comm="syz.0.1923" name="b_vendor_code" dev="configfs" ino=92472 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 280.633608][ T30] audit: type=1400 audit(1788276467.802:566): avc: denied { open } for pid=6546 comm="syz.0.1923" path="/257/config/usb_gadget/g1/os_desc/b_vendor_code" dev="configfs" ino=92472 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 280.777625][ T30] audit: type=1400 audit(1788276467.982:567): avc: denied { read } for pid=6552 comm="syz.0.1926" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 280.786343][ T6553] binder: 6552:6553 ioctl c0306201 200000000040 returned -22 [ 280.823241][ T30] audit: type=1400 audit(1788276467.982:568): avc: denied { open } for pid=6552 comm="syz.0.1926" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 280.858563][ T30] audit: type=1400 audit(1788276467.982:569): avc: denied { write } for pid=6552 comm="syz.0.1926" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 280.887306][ T30] audit: type=1400 audit(1788276467.992:570): avc: denied { ioctl } for pid=6552 comm="syz.0.1926" path="/dev/binderfs/binder0" dev="binder" ino=7 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 280.967968][ T6557] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 281.228354][ T6579] FAULT_INJECTION: forcing a failure. [ 281.228354][ T6579] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 281.241766][ T6579] CPU: 1 PID: 6579 Comm: syz.6.1938 Tainted: G W syzkaller #0 [ 281.250698][ T6579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 281.260795][ T6579] Call Trace: [ 281.264108][ T6579] [ 281.267069][ T6579] __dump_stack+0x21/0x30 [ 281.271431][ T6579] dump_stack_lvl+0x110/0x170 [ 281.276138][ T6579] ? show_regs_print_info+0x20/0x20 [ 281.281371][ T6579] dump_stack+0x15/0x20 [ 281.285569][ T6579] should_fail+0x3ab/0x500 [ 281.290030][ T6579] should_fail_alloc_page+0x55/0x80 [ 281.295265][ T6579] prepare_alloc_pages+0x13f/0x590 [ 281.300409][ T6579] ? __alloc_pages_bulk+0xab0/0xab0 [ 281.305659][ T6579] __alloc_pages+0x11d/0x460 [ 281.310319][ T6579] ? unlock_page_memcg+0x114/0x130 [ 281.315470][ T6579] ? prep_new_page+0x110/0x110 [ 281.320272][ T6579] ? page_remove_rmap+0xc6d/0xf40 [ 281.325359][ T6579] ? page_add_file_rmap+0x700/0x700 [ 281.330582][ T6579] ? __kasan_check_write+0x14/0x20 [ 281.335726][ T6579] ? _raw_spin_lock+0x94/0xf0 [ 281.340414][ T6579] __get_free_pages+0x10/0x30 [ 281.345123][ T6579] __tlb_remove_page_size+0x18a/0x310 [ 281.350520][ T6579] unmap_page_range+0x1059/0x1e00 [ 281.355580][ T6579] ? mmu_notifier_invalidate_range_end+0xe0/0xe0 [ 281.361927][ T6579] ? lru_cache_add+0x7e0/0x7e0 [ 281.366713][ T6579] unmap_vmas+0x26d/0x380 [ 281.371056][ T6579] ? unmap_page_range+0x1e00/0x1e00 [ 281.376278][ T6579] ? __kasan_check_write+0x14/0x20 [ 281.381497][ T6579] ? tlb_gather_mmu_fullmm+0x144/0x1c0 [ 281.386973][ T6579] exit_mmap+0x412/0x8b0 [ 281.391241][ T6579] ? vm_brk+0x30/0x30 [ 281.395244][ T6579] ? mutex_unlock+0x8f/0x230 [ 281.399871][ T6579] ? uprobe_clear_state+0x2c6/0x320 [ 281.405095][ T6579] __mmput+0x92/0x300 [ 281.409099][ T6579] mmput+0x50/0x150 [ 281.412921][ T6579] do_exit+0xacc/0x29a0 [ 281.417092][ T6579] ? put_task_struct+0x90/0x90 [ 281.421870][ T6579] ? trace_event_raw_event_signal_deliver+0x334/0x470 [ 281.428787][ T6579] do_group_exit+0x149/0x310 [ 281.433397][ T6579] ? __kasan_check_write+0x14/0x20 [ 281.438519][ T6579] ? recalc_sigpending+0x1ac/0x230 [ 281.443645][ T6579] get_signal+0x64f/0x1430 [ 281.448097][ T6579] arch_do_signal_or_restart+0xe2/0x1100 [ 281.453806][ T6579] ? __kasan_check_read+0x11/0x20 [ 281.458861][ T6579] ? ring_buffer_unlock_commit+0x46f/0x5d0 [ 281.464690][ T6579] ? get_sigframe_size+0x10/0x10 [ 281.469662][ T6579] ? trace_event_buffer_commit+0x252/0x880 [ 281.475490][ T6579] ? trace_event_raw_event_sys_exit+0xae/0xc0 [ 281.481695][ T6579] exit_to_user_mode_loop+0xa7/0xe0 [ 281.486927][ T6579] exit_to_user_mode_prepare+0x87/0xd0 [ 281.492405][ T6579] syscall_exit_to_user_mode+0x1a/0x30 [ 281.497882][ T6579] do_syscall_64+0x58/0xa0 [ 281.502314][ T6579] ? clear_bhb_loop+0x50/0xa0 [ 281.507006][ T6579] ? clear_bhb_loop+0x50/0xa0 [ 281.511696][ T6579] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 281.517608][ T6579] RIP: 0033:0x7fc01be4f159 [ 281.522043][ T6579] Code: Unable to access opcode bytes at RIP 0x7fc01be4f12f. [ 281.529420][ T6579] RSP: 002b:00007fc01a8a80e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 281.537866][ T6579] RAX: 0000000000000001 RBX: 00007fc01c0d6fa8 RCX: 00007fc01be4f159 [ 281.545857][ T6579] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fc01c0d6fac [ 281.553868][ T6579] RBP: 00007fc01c0d6fa0 R08: 000b2f4944849782 R09: 0000000000000000 [ 281.561869][ T6579] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 281.569861][ T6579] R13: 00007fc01c0d7038 R14: 00007ffcf76657d0 R15: 00007ffcf76658b8 [ 281.577846][ T6579] [ 281.652875][ T293] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 281.902804][ T293] usb 1-1: Using ep0 maxpacket: 16 [ 281.931205][ C0] hrtimer: interrupt took 62232 ns [ 282.022889][ T293] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 44, changing to 9 [ 282.050640][ T293] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26223, setting to 1024 [ 282.072367][ T293] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 282.092972][ T293] usb 1-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 282.102241][ T293] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.133255][ T293] usb 1-1: config 0 descriptor?? [ 282.157344][ T6570] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 282.472994][ T293] usbhid 1-1:0.0: can't add hid device: -71 [ 282.479182][ T293] usbhid: probe of 1-1:0.0 failed with error -71 [ 282.504091][ T293] usb 1-1: USB disconnect, device number 10 [ 282.542957][ T613] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 282.719475][ T30] audit: type=1400 audit(1788276469.922:571): avc: denied { read write } for pid=6613 comm="syz.6.1952" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 282.762847][ T30] audit: type=1400 audit(1788276469.952:572): avc: denied { ioctl open } for pid=6613 comm="syz.6.1952" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 282.832796][ T613] usb 4-1: Using ep0 maxpacket: 8 [ 282.973308][ T613] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 283.006220][ T613] usb 4-1: config 179 has no interface number 0 [ 283.012533][ T613] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 283.059501][ T613] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 283.087632][ T613] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 283.102860][ T613] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 283.115780][ T613] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 283.129877][ T613] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 283.139489][ T613] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.202883][ T6600] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 283.410675][ T30] audit: type=1400 audit(1788276470.612:573): avc: denied { write } for pid=6652 comm="syz.6.1966" path="socket:[93942]" dev="sockfs" ino=93942 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 283.453934][ T6] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input13 [ 283.644940][ T613] usb 4-1: USB disconnect, device number 10 [ 283.652786][ C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 283.662992][ T613] xpad 4-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 284.173915][ C0] ================================================================== [ 284.182046][ C0] BUG: KASAN: use-after-free in rcu_cblist_dequeue+0x6c/0xb0 [ 284.189567][ C0] Read of size 8 at addr ffff88811af97190 by task kworker/u4:4/420 [ 284.197510][ C0] [ 284.199944][ C0] CPU: 0 PID: 420 Comm: kworker/u4:4 Tainted: G W syzkaller #0 [ 284.208862][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 284.218953][ C0] Workqueue: 0x0 (events_unbound) [ 284.223074][ T26] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 284.224118][ C0] Call Trace: [ 284.224128][ C0] [ 284.224137][ C0] __dump_stack+0x21/0x30 [ 284.242120][ C0] dump_stack_lvl+0x110/0x170 [ 284.246838][ C0] ? show_regs_print_info+0x20/0x20 [ 284.252068][ C0] ? load_image+0x3f0/0x3f0 [ 284.256616][ C0] print_address_description+0x7f/0x2c0 [ 284.262203][ C0] ? rcu_cblist_dequeue+0x6c/0xb0 [ 284.267264][ C0] kasan_report+0x10f/0x150 [ 284.271785][ C0] ? rcu_cblist_dequeue+0x6c/0xb0 [ 284.276854][ C0] __asan_report_load8_noabort+0x14/0x20 [ 284.282521][ C0] rcu_cblist_dequeue+0x6c/0xb0 [ 284.287414][ C0] rcu_do_batch+0x47d/0xbf0 [ 284.291979][ C0] ? local_bh_enable+0x20/0x20 [ 284.296775][ C0] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 284.302619][ C0] ? note_gp_changes+0x140/0x220 [ 284.307585][ C0] rcu_core+0x4a3/0xef0 [ 284.311779][ C0] ? rcu_cpu_kthread_park+0x90/0x90 [ 284.317000][ C0] ? irqtime_account_irq+0x76/0x390 [ 284.322222][ C0] rcu_core_si+0x9/0x10 [ 284.326433][ C0] handle_softirqs+0x250/0x560 [ 284.331215][ C0] __irq_exit_rcu+0x52/0xf0 [ 284.335749][ C0] irq_exit_rcu+0x9/0x10 [ 284.340011][ C0] common_interrupt+0xbe/0xe0 [ 284.344704][ C0] [ 284.347647][ C0] [ 284.350589][ C0] asm_common_interrupt+0x27/0x40 [ 284.355658][ C0] RIP: 0010:finish_task_switch+0x173/0x790 [ 284.361528][ C0] Code: 80 3c 2b 00 74 08 4c 89 f7 e8 69 9c 60 00 4d 8b 2e 4d 85 ed 0f 85 cd 00 00 00 4c 89 e7 e8 45 87 6b 03 fb 49 8d 9f 38 0b 00 00 <48> 89 d8 48 c1 e8 03 49 bd 00 00 00 00 00 fc ff df 42 0f b6 04 28 [ 284.381150][ C0] RSP: 0018:ffffc90007a3fc48 EFLAGS: 00000282 [ 284.387245][ C0] RAX: 0000000080000001 RBX: ffff88810f021ef8 RCX: 0000000000000000 [ 284.395238][ C0] RDX: 0000000000000001 RSI: ffffffff85638320 RDI: 00000000ffffffff [ 284.403227][ C0] RBP: ffffc90007a3fc90 R08: ffff888111b813c7 R09: 1ffff11022370278 [ 284.411217][ C0] R10: dffffc0000000000 R11: ffffed1022370279 R12: ffff8881f70378c0 [ 284.419205][ C0] R13: 0000000000000000 R14: ffff8881f7038408 R15: ffff88810f0213c0 [ 284.427220][ C0] ? finish_task_switch+0x16b/0x790 [ 284.432445][ C0] ? switch_mm_irqs_off+0x32d/0x960 [ 284.437779][ C0] __schedule+0xbd7/0x14a0 [ 284.442215][ C0] ? release_firmware_map_entry+0x190/0x190 [ 284.448132][ C0] ? kthread_data+0x50/0xc0 [ 284.452649][ C0] ? wq_worker_sleeping+0x60/0x200 [ 284.457819][ C0] schedule+0x11e/0x1e0 [ 284.462032][ C0] worker_thread+0xf18/0x1250 [ 284.466721][ C0] ? __kasan_check_read+0x11/0x20 [ 284.471754][ C0] kthread+0x3f5/0x4f0 [ 284.475826][ C0] ? worker_clr_flags+0x190/0x190 [ 284.480950][ C0] ? kthread_blkcg+0xd0/0xd0 [ 284.485545][ C0] ret_from_fork+0x1f/0x30 [ 284.489966][ C0] [ 284.492992][ C0] [ 284.495317][ C0] Allocated by task 6703: [ 284.499710][ C0] __kasan_kmalloc+0xd4/0x100 [ 284.504438][ C0] __kmalloc+0x13d/0x2c0 [ 284.508710][ C0] l2tp_session_create+0x39/0xb60 [ 284.513857][ C0] pppol2tp_connect+0xbf5/0x1640 [ 284.518816][ C0] __sys_connect+0x3cb/0x450 [ 284.523419][ C0] __x64_sys_connect+0x7a/0x90 [ 284.528198][ C0] x64_sys_call+0x7c/0x9a0 [ 284.532634][ C0] do_syscall_64+0x4c/0xa0 [ 284.537059][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 284.542979][ C0] [ 284.545307][ C0] Freed by task 420: [ 284.549202][ C0] kasan_set_track+0x4a/0x70 [ 284.553845][ C0] kasan_set_free_info+0x23/0x40 [ 284.558790][ C0] ____kasan_slab_free+0x125/0x160 [ 284.563912][ C0] __kasan_slab_free+0x11/0x20 [ 284.568692][ C0] slab_free_freelist_hook+0xc2/0x190 [ 284.574105][ C0] kfree+0xc4/0x270 [ 284.577938][ C0] l2tp_session_put+0xaf/0x1a0 [ 284.582725][ C0] l2tp_session_delete+0x3a9/0x4a0 [ 284.587860][ C0] l2tp_tunnel_del_work+0x180/0x3d0 [ 284.593083][ C0] process_one_work+0x6c8/0xbb0 [ 284.597965][ C0] worker_thread+0xaa0/0x1250 [ 284.602664][ C0] kthread+0x3f5/0x4f0 [ 284.606761][ C0] ret_from_fork+0x1f/0x30 [ 284.611198][ C0] [ 284.613532][ C0] Last potentially related work creation: [ 284.619250][ C0] kasan_save_stack+0x3a/0x60 [ 284.623964][ C0] __kasan_record_aux_stack+0xd2/0x100 [ 284.629440][ C0] kasan_record_aux_stack_noalloc+0xb/0x10 [ 284.635251][ C0] call_rcu+0x10b/0xf60 [ 284.639422][ C0] pppol2tp_release+0x1e3/0x2b0 [ 284.644300][ C0] sock_close+0xb8/0x200 [ 284.648553][ C0] __fput+0x22b/0x900 [ 284.652552][ C0] ____fput+0x15/0x20 [ 284.656552][ C0] task_work_run+0x127/0x190 [ 284.661186][ C0] exit_to_user_mode_loop+0xd0/0xe0 [ 284.666412][ C0] exit_to_user_mode_prepare+0x87/0xd0 [ 284.671932][ C0] syscall_exit_to_user_mode+0x1a/0x30 [ 284.677415][ C0] do_syscall_64+0x58/0xa0 [ 284.681843][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 284.687758][ C0] [ 284.690091][ C0] The buggy address belongs to the object at ffff88811af97000 [ 284.690091][ C0] which belongs to the cache kmalloc-512 of size 512 [ 284.704176][ C0] The buggy address is located 400 bytes inside of [ 284.704176][ C0] 512-byte region [ffff88811af97000, ffff88811af97200) [ 284.717467][ C0] The buggy address belongs to the page: [ 284.723120][ C0] page:ffffea00046be500 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x11af94 [ 284.733374][ C0] head:ffffea00046be500 order:2 compound_mapcount:0 compound_pincount:0 [ 284.741707][ C0] flags: 0x4000000000010200(slab|head|zone=1) [ 284.747805][ C0] raw: 4000000000010200 0000000000000000 0000000100000001 ffff888100042f00 [ 284.756400][ C0] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 284.765014][ C0] page dumped because: kasan: bad access detected [ 284.771431][ C0] page_owner tracks the page as allocated [ 284.777151][ C0] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 420, ts 274103792030, free_ts 270724659770 [ 284.797741][ C0] post_alloc_hook+0x192/0x1b0 [ 284.802516][ C0] prep_new_page+0x1c/0x110 [ 284.807024][ C0] get_page_from_freelist+0x2c3a/0x2cd0 [ 284.812577][ C0] __alloc_pages+0x1a2/0x460 [ 284.817179][ C0] new_slab+0xa0/0x4d0 [ 284.821261][ C0] ___slab_alloc+0x3ac/0x840 [ 284.825868][ C0] __slab_alloc+0x49/0x90 [ 284.830205][ C0] __kmalloc_track_caller+0x169/0x2c0 [ 284.835602][ C0] __alloc_skb+0x210/0x730 [ 284.840030][ C0] inet_netconf_notify_devconf+0x169/0x220 [ 284.845843][ C0] inetdev_event+0x7b0/0x1060 [ 284.850528][ C0] raw_notifier_call_chain+0x90/0x100 [ 284.855919][ C0] unregister_netdevice_many+0x103d/0x1a00 [ 284.861819][ C0] default_device_exit_batch+0x35e/0x3c0 [ 284.867461][ C0] cleanup_net+0x605/0xae0 [ 284.871927][ C0] process_one_work+0x6c8/0xbb0 [ 284.876791][ C0] page last free stack trace: [ 284.881464][ C0] free_unref_page_prepare+0x5fa/0x600 [ 284.886952][ C0] free_unref_page+0xae/0x540 [ 284.891642][ C0] free_compound_page+0x78/0xa0 [ 284.896507][ C0] __put_compound_page+0x77/0xb0 [ 284.901454][ C0] __put_page+0xbc/0xe0 [ 284.905624][ C0] skb_release_data+0x37c/0xa20 [ 284.910482][ C0] __kfree_skb+0x50/0x70 [ 284.914737][ C0] tcp_recvmsg_locked+0x13d1/0x24f0 [ 284.919963][ C0] tcp_recvmsg+0x233/0x770 [ 284.924382][ C0] inet6_recvmsg+0x13a/0x470 [ 284.929071][ C0] __sys_recvfrom+0x396/0x510 [ 284.933754][ C0] __x64_sys_recvfrom+0xe5/0x100 [ 284.938720][ C0] x64_sys_call+0x6e/0x9a0 [ 284.943149][ C0] do_syscall_64+0x4c/0xa0 [ 284.947584][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 284.953484][ C0] [ 284.955811][ C0] Memory state around the buggy address: [ 284.961456][ C0] ffff88811af97080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 284.969528][ C0] ffff88811af97100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 284.977592][ C0] >ffff88811af97180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 284.985659][ C0] ^ [ 284.990250][ C0] ffff88811af97200: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 284.998315][ C0] ffff88811af97280: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 285.006398][ C0] ================================================================== [ 285.014471][ C0] Disabling lock debugging due to kernel taint [ 285.090399][ T30] audit: type=1400 audit(1788276472.292:574): avc: denied { read } for pid=83 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 285.262960][ T26] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 285.273453][ T26] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 285.402961][ T26] usb 2-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice= 1.00 [ 285.412543][ T26] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 285.420989][ T26] usb 2-1: Product: syz [ 285.425734][ T26] usb 2-1: Manufacturer: syz [ 286.891065][ T20] usb 2-1: USB disconnect, device number 9