last executing test programs: 5.194778384s ago: executing program 4 (id=56): r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/keycreate\x00', 0x2, 0x0) write$selinux_attr(r0, 0x0, 0x0) setns(0xc9, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) syz_mount_image$f2fs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x200000, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x2, 0x553a, &(0x7f00000011c0)="$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") mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000006700)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000006740)=0x8) r3 = getpid() r4 = bpf$ITER_CREATE(0x21, &(0x7f0000006780), 0x8) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000067c0)=0x2) sched_setscheduler(r3, 0x1, &(0x7f0000006800)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000006840)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(r3, 0x0, 0x0) connect$unix(r5, &(0x7f0000006880)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000006900), 0x651, 0x0) recvmmsg(r5, &(0x7f0000006940), 0x4000087, 0x2, 0x0) r7 = syz_mount_image$vfat(&(0x7f0000006980), &(0x7f00000069c0)='./file0\x00', 0x18000, &(0x7f0000006a00)=ANY=[@ANYRES32=0x0, @ANYRES16, @ANYRESOCT, @ANYRES8=0x0, @ANYRES32=0x0, @ANYRES64, @ANYRESDEC=0x0], 0x1, 0x304, &(0x7f0000006a40)="$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") ioctl$XFS_IOC_START_COMMIT(r7, 0x80585882, &(0x7f0000000200)) socket$unix(0x1, 0x2, 0x0) epoll_create1(0x80000) socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x31, &(0x7f0000006d80)=""/93, &(0x7f0000006e00)=0x5d) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x18, r2, 0x321, 0x70bd2a, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x24044094}, 0x40000) 3.740892171s ago: executing program 1 (id=64): unshare(0x22020600) r0 = syz_mount_image$ext4(&(0x7f0000006580)='ext4\x00', &(0x7f00000065c0)='./file1\x00', 0x8005, &(0x7f0000006600)={[{@errors_remount}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4}}, {@noquota}]}, 0x1, 0x7d2, &(0x7f0000006640)="$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") ioctl$XFS_IOC_GOINGDOWN(r0, 0x8004587d, &(0x7f0000006e40)) r1 = openat(0xffffffffffffff9c, &(0x7f0000006e80)='.\x00', 0x0, 0xf6) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0x8004587d, &(0x7f0000006ec0)={@desc={0x1, 0x0, @auto="75bc16354dffa591"}}) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000006500)={&(0x7f00000076c0)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000007740)=@base={0x2, 0x4, 0x8, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, r2, 0x1, 0x3}, 0x50) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000077c0)={r3, &(0x7f0000007800)}, 0x20) r4 = socket(0x1, 0x5, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0x5) setreuid(r5, 0x0) read$FUSE(r1, &(0x7f00000000c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000007300)={0x3, 0x13, &(0x7f00000073c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c0000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000007480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x8f) keyctl$describe(0x6, 0x0, &(0x7f00000075c0)=""/247, 0xf7) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000074c0)={r7, 0x0, 0x10, 0x10, &(0x7f0000007540)="0000000012000000", &(0x7f0000007580)=""/8, 0xd00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002100), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002140)='./file0\x00', &(0x7f0000002180), 0x1, &(0x7f00000021c0)={{'fd', 0x3d, r8}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r8, &(0x7f0000007800)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r8, &(0x7f0000004280)={0x50, 0x0, r9, {0x7, 0x29, 0x0, 0x1400001, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0x50) syz_fuse_handle_req(r8, &(0x7f0000004300)="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", 0x2000, &(0x7f0000006300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000063c0)={0x90, 0x0, 0x7, {0x1, 0x0, 0xff, 0x1, 0x3, 0x9, {0x0, 0x5, 0x100, 0x9, 0x8, 0x7cd, 0x7ff, 0x6, 0x8481, 0xa000, 0x0, r10, r11, 0x2, 0x5}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000006480)={0x0, 0x0}, &(0x7f00000064c0)=0x5) setreuid(r13, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000006f00)={{{@in6=@remote, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@private}}, &(0x7f0000007000)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000007040)='.\x00', &(0x7f0000007080)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) setresuid(r15, r15, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000007100)={0x0, 0x0, 0x0}, &(0x7f0000007140)=0xc) getgroups(0x1, &(0x7f0000007180)=[0xee01]) getresgid(&(0x7f00000071c0)=0x0, &(0x7f0000007200), &(0x7f0000007240)) fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000007280)={{}, {0x1, 0x1}, [{0x2, 0x0, 0xffffffffffffffff}, {0x2, 0x3, r5}, {0x2, 0x5, r6}, {0x2, 0x2, r10}, {0x2, 0x0, r13}, {0x2, 0x7, r14}, {0x2, 0x1, r15}], {0x4, 0x4}, [{0x8, 0x0, r16}, {0x8, 0x0, r17}, {0x8, 0x7, r18}], {0x10, 0x6}, {0x20, 0x5}}, 0x74, 0x2) 3.05897342s ago: executing program 4 (id=71): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="12000000010000000400000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x16, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r1, 0x0, 0xe, 0x0, &(0x7f0000000400)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (fail_nth: 1) 3.027397203s ago: executing program 1 (id=72): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001000)=@base={0x5, 0x4, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x6, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000440)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @map_fd={0x18, 0x1, 0x1, 0x0, r2}, @generic={0x15, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r3}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f03, 0xe, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r4}, 0xc) 3.025455354s ago: executing program 1 (id=74): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="12000000010000000400000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x16, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r1, 0x0, 0xe, 0x0, &(0x7f0000000400)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.778793909s ago: executing program 1 (id=75): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@delchain={0x24, 0x5f, 0x333, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x5, 0x1}, {0x1, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x4020100}, 0x40000) r1 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1020, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x1, "", [{{0x9, 0x4, 0x0, 0xc, 0x2, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x11, 0x0, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0xfc, 0x1, 0x4}}}}}]}}]}}, 0x0) syz_open_dev$hiddev(&(0x7f0000000200), 0xfffffffffffffffe, 0x400) syz_usb_connect$uac1(0x3, 0x7d, &(0x7f0000000080)=ANY=[], &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_connect$uac3(0x2, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[], 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0022180000000501150025ff0904a1014de29c198c0508950129309102c0"], 0x0}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd2a, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x2, 0xfffffffffffffffe, 0x0, 0x5, 0xfffffffffffffffb}, {0x0, 0x40000000000000, 0x200000000000000}, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c004090) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB="b80000001900010000000000fcdbdf25e00000020000000000000000800000000000000100000000000000000000000000000000000000000a00200087", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbffffffffffffff000000000000000000000000000000000000000000000000000000000000000002"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="b8000000150001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000006000000000a00108000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000001000000000000000000000000000000000000000000000009000000000000000000000000000000ffffffff00"/78], 0xb8}}, 0x0) 2.725307104s ago: executing program 4 (id=77): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0e000000040000000400000007"], 0x50) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x808200, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x0, @any, 0x4}, 0x19) getpeername(r2, 0x0, &(0x7f0000000080)) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x6, &(0x7f0000001380)=ANY=[@ANYBLOB="0500"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0900000004000000080000000a"], 0x50) close(0x3) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x6, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="0100000004000000040000000001000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1, 0xc, &(0x7f0000000380)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @map_fd={0x18, 0x1, 0x1, 0x0, r5}, @generic={0x15, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r6}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x3) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000240)) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0xb, 0x7, 0x7ff, 0x9, 0x1, 0xffffffffffffffff, 0xfffffff8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1a, 0x14, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0xfffffffffffffec7, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x14, &(0x7f0000000700)=ANY=[], &(0x7f0000000740)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0xe, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0) syz_mount_image$erofs(&(0x7f0000000400), &(0x7f0000000700)='./file0\x00', 0x18000c0, &(0x7f0000000ac0)=ANY=[@ANYRES16=0x0, @ANYRES32, @ANYRES16=0x0, @ANYRES8], 0x0, 0x17d, &(0x7f0000000b00)="$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") mkdir(&(0x7f0000000c80)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000cc0)='./bus\x00', &(0x7f0000000d00), 0x0, &(0x7f0000000d40)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_on}]}) chdir(&(0x7f0000000d80)='./bus\x00') rename(&(0x7f0000000dc0)='./file2\x00', &(0x7f0000000e00)='./file1\x00') bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r4}, &(0x7f00000007c0), &(0x7f0000000800)=r7}, 0x20) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r7}, 0xc) ioctl$TUNSETIFF(r1, 0x400454da, &(0x7f0000000000)={'lo\x00', 0x10}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'ipvlan1\x00', 0x1}) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r0, &(0x7f0000001380), &(0x7f0000000000)=""/10, 0x2}, 0x20) close(0x4) 2.56547753s ago: executing program 4 (id=80): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) symlinkat(&(0x7f0000002300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') readlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) readlink(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 2.56477358s ago: executing program 4 (id=81): r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x204843, 0x0) r1 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000001000)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) pread64(r1, &(0x7f0000000040)=""/140, 0x8c, 0x4) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/oops_count', 0x40, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000680)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r5, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x87, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x8, 0x8, &(0x7f0000000800)}}, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x5, 0xe, 0x8, 0x40, 0xc0, 0x1, 0x0, '\x00', r6}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900), &(0x7f0000000940), 0x1003, r7}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000980)={r7, &(0x7f00000009c0), &(0x7f0000000a00)=""/40}, 0x20) pread64$ublk_ch(r4, &(0x7f0000001400), 0x1000, 0x3) r8 = openat$rnullb(0xffffffffffffff9c, &(0x7f00000001c0)={'/dev/syzrnull', 0x0}, 0x280440, 0x0) r9 = memfd_create(&(0x7f0000000400)='\'\x00', 0x2) ppoll(&(0x7f0000000440)=[{r8, 0x8004}, {r9, 0x320}], 0x2, &(0x7f0000000480)={0x77359400}, &(0x7f00000004c0)={[0x7ff]}, 0x8) r10 = socket(0x1, 0x803, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40110}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0x3, r11}]}, 0x40}}, 0x40000) readv(r1, &(0x7f00000013c0)=[{&(0x7f0000001300)=""/35, 0x23}, {0x0, 0x36}], 0x2) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x68, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0xa8}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x30, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_DATA={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x3, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x801, 0x0, 0x0, {0xa}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x158}}, 0x0) r13 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r13, 0x4068aea3, &(0x7f0000000200)={0x8f, 0x0, 0xe}) mount$9p_fd(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000580), 0x29080, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r10}, 0x2c, {[{@version_L}], [{@obj_role={'obj_role', 0x3d, 'exthdr\x00'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'bitwise\x00'}}, {@dont_hash}]}}) ioctl$KVM_CREATE_VCPU(r13, 0xae41, 0x0) 2.263577951s ago: executing program 4 (id=84): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) (async) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x180600, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000000080)) (async) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, 0x0, &(0x7f00000001c0)={0x0, 0x3, 0x49, @string={0x49, 0x3, "170c18f38c655c059f7866cc1dfbdbce2a9951e39fe08547cd0acabc7c16ad78d20a4ca9897f3ad3187bcbef0b43e20d9617b986712f53be4c44638c716e12c2bb150ab92adf25"}}, 0x0, 0x0, 0x0}, 0x0) (async) r2 = syz_open_dev$hiddev(&(0x7f0000000140), 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/cgroup.procs\x00', 0x28301, 0xc) write$binfmt_format(r3, &(0x7f0000000280)='-1\x00', 0x3) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000300000004000000ff"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000380), &(0x7f00000003c0), 0xce4, r4}, 0x38) (async) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000400)={0x0, &(0x7f0000000440)=""/152, &(0x7f0000000500), &(0x7f0000000540), 0x4, r4}, 0x38) ioctl$HIDIOCSREPORT(r2, 0x81044804, &(0x7f0000000180)={0x1, 0x8d6c30f34124690b, 0x55f}) 2.149834642s ago: executing program 2 (id=92): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b400000000000000691286000000000004000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x2, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48) 2.139799653s ago: executing program 2 (id=93): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000180)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x300}, 0x0, &(0x7f0000000240)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000280)='./file0\x00', 0x88a, &(0x7f00000000c0)={[{@max_batch_time}, {@usrjquota, 0x22}, {@errors_continue}, {@noload}, {@nobarrier}, {@grpjquota, 0x22}, {@grpquota}, {@jqfmt_vfsold}, {@user_xattr}, {@min_batch_time}, {@errors_remount}]}, 0xfe, 0x467, &(0x7f0000001200)="$eJzs3M1vG0UbAPDHduw0bfMmbykfLS0ECqLiI2nSD3rgUgQSB5CQAKmIU0jSqtRtUBMkWlVQOJQjqsQdcUTiL+BCuSDghMQV7gipQrlQOCCjtXdTJ7GTOHbiUP9+0tYznt3OPLs76/GsNwH0rJHkn1zE7oj4JSKGatmlK4zUXm4vXJ36a+HqVC4qldf+yFXX+3Ph6lS2arbdrlqmUlml3utvRUyWyzOX0vzY/IV3x+YuX3nm3IXJszNnZy5OnDx57OjB0omJ423Fl09fB5O27v9g9sC+l9688crU6Rtv//BV0t7daXl9HJ0yUtu7DT3e6cq6bLAunevrYkNoSSEiksNVrPb/oSjEwGLZULz4cVcbB2yqSiVf+ad58bUKcBdLBuprK1WvFcDdJPugT77/ZssWDT22hVunYnEe43a61Er6FucOiul3pM0wEhGnr/39ebLEJs1DAADUu3kqIp5uNP7Lx3116/0vvTc0HBH/j4g9EXFPROyNiHsjquveHxEPtFj/8jskK8c/laENBbZOyfjvufTe1tLxXzb6i+FCmhusxl/MnTlXnjmS7pPDUexP8uOr1PHtCz9/2qysfvyXLEn92Vgwbcfvff1Lt5menJ9sJ+Z6tz6K2N/XKP7c4pg3GR/vi4j9G6zj3JNfHmhWtnb8q+jAoLzyRcQTteN/LZbFn8k1vT85/uyJieNjO6I8c2QsOytW+vGn6682q7+t+Dvg1s1K7MzO/4FoFP9wbkfE3OUr56v3a+dar+P6r580/U6z0fO/lHu9mi6l770/OT9/aTyilHt55fsTd7bN8tn6yfl/+FDj/r8n7uyJByMiOYkPRsRDEfFw2vZHIuLRiDi0SvzfP//YO63H37/K/9g5SfzTDa9/dcc/6o9/64nC+e++bj3+THL8j1VTh9N31nP9W28D29l3AAAA8F+Rr/4GPpcfXUzn86Ojtd/w742d+fLs3PxTZ2bfuzhd+638cBTz2UzXUN186Hg6N5zlJ5blj6bzxp8VBqr50anZ8nS3g4cet6tJ/0/8Vuh264BN53kt6F36P/Qu/R96l/4PvUv/h97VqP9/2IV2AFtvjc//ga1qB7D1jP+hd+n/0Lv0f+hJTZ+Nz7f1yH8vJd4YjNgGzaglvim197ca1p+I/EY335Gee9tjj22fRDEaFvVt9o7qb1jU5QsTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAh/wbAAD//0nX2c8=") 2.048261773s ago: executing program 3 (id=94): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05000000050000000200000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x14, &(0x7f0000000140)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000007000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000240)={r1, 0x0, 0x0}, 0x10) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f00000002c0)='./file0\x00', 0x10008, &(0x7f0000000300)={[{@nombcache}, {@nogrpid}]}, 0xff, 0x4a7, &(0x7f0000000500)="$eJzs3E1sFFUcAPD/7LallY9WRBQEraCR+NHSgsrBAxpNPGhiogc81rYgslBDawKk0WIMHg2Jd+PRxLMHEw9ejHowJl418WhIiPYCeKqZnRm6LbulW9qudH+/ZHffm4++9+a9t/tmXmcCaFv96VsSsSUifo+I3iy6cIP+7OP67PTojdnp0STm5t78O6lud212erTYtNhvcx45UIoofZLE0eTWdCfPXzg1UqmMn83jg1On3x+cPH/hmZOnR06Mnxg/M3zkyOFDQ88/N/zsqpQzLde13R9O7Nn16tuXXx89dvmdn75Os7Vzb7a+thy3daNOgeroT4/aP3NVi9c93kTe7wZba8JJRwszQlPKEZFWV2e1//dGOeYrrzde+bilmQPWVPrbtKnx6pk5YANLotU5AFqj+KFPz3+L1zoNPf4Xrr4Y0ZWHr89Oj16fnc6jHVHKAt+sZfr9EXFs5t8v0lc0ex0CAGAFOtO3p+uN/0qxs/qZzXVsy+dQ+iLi3ojYHhH3RcSOiLg/orrtAxHxYLbzXO8y0+9fFL91/FO6UjfPqyQd/70wP/arvvJ0i4++ch7bWi1/Z3L8ZGX8YH5MDkTnpjQ+tEQa37/822eN1tWO/9JXmn4xFswzcKVj0QW6sZGpkdU6CFcvRuzuqC1/MbeV3JwJSJfsiojdzf3pbUXg5JNf7Wm00e3Lv4RVmGea+zLiiaz+Z2JB/c/P8SVLz08Odkdl/OBg0Spu9fOvl95olP4dlX8VXN33UBaYb/+LtqhpaJXK+NnJ5tO49MenDc9pVtr+u5K3qn3yl3ezZedGpqbODkV0Ja9V48U5XXX58Py+50ametJ4sX3a/g/sr9//t+f7pPWfHqW0Ee+NiIcj4pE8749GxL6I2L9E+X986bH3lih/Ekm0rv4vRozV/f672f77ktr5+hUEyqd++LbRjPny6v9wzFS/azPV77/bWG4G7/DwAQAAwF2hFBFbIikNZOH+LVEqDQxk/8O/I+4pVSYmp546PvHBmbHsHoG+6CwVV7p6a66HDiUz+V/M4sP5teJi/aH8uvHn5Z5qfGB0ojLW4rJDu9u8sP9H0f9Tf5VbnTtgzblfC9rX4v5falE+gPW3nN9/5wKwMS3s/93pW0+r8gKsL+f/0L7q9f+PFsWN/2FjWtj/v4uIP+s8sg7YiIz/oX3p/9C+9H9oS83czh9HG63qjohmHgtQ3Cyw8qcKdC/7Dv92CRRPvFjLtHriwqmufEmUWlTScpONbUME0h6zvonOP0MFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgbvZfAAAA//9Mbt54") r2 = openat(0xffffffffffffff9c, &(0x7f00000009c0)='./file1\x00', 0x1cb842, 0x0) io_setup(0x66ea, &(0x7f0000000a00)=0x0) io_submit(r3, 0x1ffffffffffffcb5, &(0x7f0000000a40)=[&(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f0000000ac0), 0x1, 0x600, 0x0, 0x20000}]) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@struct={0x4, 0x0, 0x0, 0x4, 0x0, 0x7}]}, {0x0, [0x61, 0x0, 0x5f, 0x2e, 0x2e]}}, 0x0, 0x2b}, 0x28) 1.871013861s ago: executing program 3 (id=95): bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x2, 0x4, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x81}, [@call={0x85, 0x0, 0x0, 0x99}]}, &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.855733042s ago: executing program 3 (id=96): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001000)=@base={0x5, 0x4, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x6, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000440)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @map_fd={0x18, 0x1, 0x1, 0x0, r2}, @generic={0x15, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r3}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0xe, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) 1.620307786s ago: executing program 3 (id=97): bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x2, 0x4, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x81}, [@call={0x85, 0x0, 0x0, 0x99}]}, &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (fail_nth: 3) 1.416890516s ago: executing program 3 (id=99): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000380)={&(0x7f0000000580)=@hci, 0x80, &(0x7f0000000600)=[{&(0x7f0000002c00)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000002d00)={0x0, 0xfffffff5, &(0x7f0000002d40)=[{&(0x7f0000002d80)="a2", 0xfffffdef}], 0x1}, 0x0) timer_create(0x0, &(0x7f0000002dc0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000002e80)=0x8) r2 = getpid() bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x30000, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x1, &(0x7f0000003a00)=0x7) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000003a80)=ANY=[@ANYBLOB="0a00000002000000ff0f"], 0x50) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000003bc0)={r3}, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000003c00)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000003c40)=@abs={0x0, 0x0, 0x80}, 0x6e) sendmmsg$unix(r5, &(0x7f0000003cc0), 0x651, 0x0) recvmmsg(r4, &(0x7f0000003d00), 0x4000087, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) unshare(0x400) timer_settime(0x0, 0x1, &(0x7f0000003e40)={{}, {0x0, 0x989680}}, 0x0) 1.407828147s ago: executing program 0 (id=100): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x16, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0xfb1585202ff31891}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x10006, 0x0, 0x0, 0x41000, 0x60, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x279, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000dc0)={{r0}, &(0x7f0000000d40), &(0x7f0000000d80)}, 0x20) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) (fail_nth: 2) 881.447021ms ago: executing program 0 (id=101): bpf$MAP_CREATE(0x0, &(0x7f0000001980)=ANY=[@ANYBLOB="0e00000004000000080000000a"], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x6, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000611800000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000150802000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffff850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000c80)={{r1}, &(0x7f0000000cc0), &(0x7f0000000d00)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000880)={r2}, 0xc) 881.176181ms ago: executing program 2 (id=102): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) symlinkat(&(0x7f0000002300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') readlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) readlink(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 880.749201ms ago: executing program 0 (id=103): r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1b, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x88f}}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) 862.050703ms ago: executing program 2 (id=104): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0xc, 0xc, &(0x7f0000000e00)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000005000000850000000800000095"], &(0x7f0000000e80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000ec0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000f40)="29dd4c808f84a1688ccf6f00f805", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (fail_nth: 2) 555.886733ms ago: executing program 0 (id=105): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000028c0)=@bpf_lsm={0x12, 0x5, &(0x7f0000002980)=@framed={{0x55, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x1c}, [@initr0]}, &(0x7f00000029c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000002a00)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002a80)={0x4, 0xf, &(0x7f0000002b40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000002bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000002c00)={0x0, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000002c40)=r3, 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002c80)='memory.current\x00', 0x275a, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002cc0)={0x12, 0x2000035e, &(0x7f0000002d80)=ANY=[@ANYBLOB="18000000000000000000000000000000630120000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000002dc0), 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f0000002e40)={r4, &(0x7f0000002e80), &(0x7f0000002ec0)=""/73}, 0x70) mount$incfs(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='.\x00', &(0x7f0000000300), 0x1, &(0x7f0000000340)=ANY=[@ANYBLOB='read_timeout_ms=0']) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x5, @ipv4={'\x00', '\xff\xff', @empty}, 0x7}, 0x1c) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c) r5 = fcntl$dupfd(r1, 0x406, r1) getpeername$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000240)=0x1c) write$cgroup_pid(r5, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_lsm={0xd, 0x5, &(0x7f00000005c0)=@framed={{0xb5, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xc}, [@initr0]}, &(0x7f0000000600)='GPL\x00'}, 0x80) read$FUSE(r5, &(0x7f0000000840)={0x2020}, 0x2020) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000002880)={0x3, r5}) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_VDPA_SET_VRING_ENABLE(r0, 0x4008af75, &(0x7f0000000140)={0x2, 0xa}) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x1b, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000800000000000000000000001801000000646c2500000000002020207b1af8ff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007008500000004"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r6}, 0xc) 466.426213ms ago: executing program 2 (id=106): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0xc, 0xc, &(0x7f0000000e00)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000005000000850000000800000095"], &(0x7f0000000e80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000ec0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000f40)="29dd4c808f84a1688ccf6f00f805", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 463.851573ms ago: executing program 0 (id=107): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000540)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x2, 0x0, 0x4}}, 0x2e) ioctl$sock_SIOCETHTOOL(r1, 0x40047459, 0x0) r3 = syz_open_procfs(0x0, 0x0) ioctl$UBLK_U_CMD_GET_FEATURES(r3, 0x80207513, 0x0) socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0x11, &(0x7f0000000000)=0x203, 0x4) ioctl$sock_inet_udp_SIOCOUTQ(r3, 0x5411, 0x0) clock_settime(0x1, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='loginuid\x00') lseek(r4, 0x1, 0x2) getdents64(r4, 0xffffffffffffffff, 0x43) r5 = dup(0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_setup_queues(r5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r7, 0x4140aecd, &(0x7f00000003c0)) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000680)={{r3, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000300)='%pB \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000340)={r9, r8}, 0x4) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x16, 0x10, &(0x7f0000000500)=ANY=[@ANYRESDEC=r8, @ANYRES32=r8, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x32, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r10, 0x0, 0x3c, 0x0, &(0x7f00000000c0)="f4b84de4055d64244a17839e89713eb72ddff240497bf7e0d687f96a569b47296346939f750cd3948db922dee6e5adba13f111553742b373c5aba90e", 0x0, 0x401, 0x0, 0x0, 0xfffffffffffffe64, 0x0, 0x0, 0x5}, 0x50) 462.272983ms ago: executing program 3 (id=108): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newqdisc={0x434, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0xfff, 0x9, 0x3, 0x8, 0xa6, 0x7ff, 0x3, 0x4, 0x6, 0x5d01, 0x9, 0x9, 0x6, 0x1ff, 0x8000, 0x9, 0xfffffffa, 0x200, 0xfff, 0x1, 0x4, 0x6, 0x3, 0xb, 0x4, 0x5fe, 0x4, 0x9, 0x5, 0x7, 0x3, 0x4, 0xffffffff, 0x84, 0x400, 0x8000, 0x9, 0x2ff5, 0xffff, 0x7, 0x4, 0xd5, 0x4, 0x5, 0x8, 0x3ff, 0x4, 0x1, 0x8001, 0x8, 0xa85, 0x4, 0x7, 0x7, 0x1, 0x0, 0x8, 0xffff7fff, 0x1, 0xff, 0x7, 0x1, 0x5, 0x4, 0x0, 0xe6, 0x4, 0x1a, 0x1ff, 0xe, 0x55, 0x7, 0x6, 0x8000008, 0x400, 0x6, 0xffffffff, 0xfffffffe, 0x7, 0x0, 0x80000001, 0x400000, 0x6, 0x401, 0x3, 0x200, 0x1, 0x0, 0x6852, 0x10001, 0x0, 0x3, 0x4, 0xcb, 0xb0, 0xae, 0x8, 0x1, 0x80000000, 0x4, 0x0, 0x6, 0x8, 0x245, 0xfc, 0x8b, 0x80000000, 0x0, 0x5, 0x80000000, 0x5, 0x80000000, 0xa976362a, 0x9, 0x9, 0x8, 0xff, 0x80000000, 0x9, 0x8, 0xc869, 0xffff8001, 0xf7, 0x8, 0x40, 0x8, 0x1, 0xf1, 0x6, 0x7, 0x200, 0x2, 0x200, 0x8, 0x5, 0x8, 0x5, 0x7, 0x1, 0x9, 0x918, 0xc035, 0xe, 0x2, 0x3, 0x4, 0x5, 0x5, 0x7a60, 0x9d, 0x3, 0x1, 0x0, 0x5, 0x5, 0x1, 0x9, 0x8, 0x4, 0x6, 0xc93, 0x13e, 0xff, 0x4, 0x2, 0x7, 0xcd3, 0x6, 0x4, 0xe, 0xffffa776, 0x401, 0x4, 0x8000, 0x3, 0xdbf, 0x10001, 0x0, 0x4, 0x5683e473, 0x13, 0x81, 0xa187, 0x4, 0x1ff, 0x66c, 0x7ff, 0x3610, 0xfffffffd, 0x5, 0x0, 0x9, 0x5, 0xfffff801, 0x0, 0x81, 0xfffffffb, 0x401, 0x6, 0x6, 0xe, 0x101, 0x4, 0x9, 0x4, 0x97c, 0xdb, 0x1, 0x8, 0x7, 0x8, 0x4fbf, 0x160, 0x2, 0x1, 0x5, 0x3, 0x3, 0xfffffff9, 0x7, 0x8, 0x3, 0x4, 0xa, 0x4, 0x6, 0x400, 0x0, 0x9, 0x2d29, 0x1, 0xffffffff, 0x8001, 0x5, 0x7, 0x9, 0xa, 0xec, 0x5, 0x9, 0xffff8acb, 0x4, 0x9, 0x4, 0x2, 0xffffff35, 0x9, 0x8, 0x5, 0x9, 0x7fff, 0x1, 0x6b, 0x81, 0x1, 0x5]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x24000040}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="500000001000010000000000ec", @ANYRES32=r1, @ANYBLOB="0000000000000000300012800e0001006970366772657461700000001c00028006000f000000000006000e"], 0x50}}, 0x0) mount$9p_unix(&(0x7f0000000000)='\x00', &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)=ANY=[]) openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0), 0x100, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000700)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000740)=0x7) r2 = getpid() syz_emit_ethernet(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000780)=0x2) sched_setscheduler(r2, 0x2, &(0x7f00000007c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f00000008c0), 0x400000000000041, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b80)=ANY=[@ANYBLOB="28010000100007000000000000000000e0000002000000000000000000000000ac1414230000000000000000004000004e200c1a000000000000200002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc00000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000001000000000ffffffffffffffff03000000000000000000000000000000030000000000000000002000000000000700000000000000000000000000000000000400fdffffffe80a000000000000000000000a000200340000000000000014000e00fe8000000000000000000000000000bb2400090003000000000000000100000000000080b40000000000000005"], 0x128}}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000d40)=@newsa={0x104, 0x1a, 0x7, 0x70bd25, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in=@multicast1, 0xffff, 0x0, 0x4e22, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x5a, 0xb400, 0xffffffffffffffff, 0xfeffff7f00000001, 0x0, 0x60000}, {0x0, 0x200000, 0x7, 0xfffffffffffffffd}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000680)={'team_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x9d7, 0x10}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24c10}, 0x20040084) sendmsg$nl_route_sched(r7, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a80)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {0x1, 0xfff1}, {0x2, 0xfff1}, {0xffff, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x40098}, 0x4040000) recvmmsg(r3, &(0x7f0000000900), 0x10106, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r9 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r9, 0x0, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000ac0)=@newlink={0x34, 0x10, 0x439, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3}}}]}, 0x34}}, 0x0) 461.517143ms ago: executing program 2 (id=109): syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x14800, &(0x7f0000000140)={[{@noauto_da_alloc}, {@dioread_lock}, {@oldalloc}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x5b9, &(0x7f0000000680)="$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") (async) syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f00000005c0)='./file1\x00', 0x850ce, 0x0, 0x1, 0x0, &(0x7f0000000140)) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0xf76, 0x0, r0, 0x400, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x13, &(0x7f0000000c40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xb58, 0x0, 0x0, 0x0, 0x556}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@exit, @call={0x85, 0x0, 0x0, 0x2b}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x3}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f0000000400)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000500), 0x8, 0x10, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1}, 0x10}, 0x94) r2 = open(0x0, 0x94100, 0x19d) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000640)={'bridge_slave_0\x00', 0x0}) (async, rerun: 64) r5 = socket(0x10, 0x80002, 0x0) (rerun: 64) sendmsg$nl_route(r5, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000d80)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r4, @ANYBLOB="00000000100000001c001a80080002802d07420008000200", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) bind$bt_l2cap(r0, &(0x7f0000000580)={0x1f, 0x1, @none, 0x5, 0x2}, 0xe) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000003c0)=@o_path={&(0x7f0000000380)='./file0\x00', r0, 0x4000, r2}, 0x18) (async) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$setregs(0xd, r6, 0x0, &(0x7f00000001c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") (async, rerun: 32) ptrace$getregset(0x4205, r6, 0x2, &(0x7f0000000280)={0x0}) (rerun: 32) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 891.61µs ago: executing program 0 (id=110): bpf$PROG_LOAD(0x5, &(0x7f0000002e80)={0x12, 0x4, &(0x7f0000002f40)=ANY=[@ANYBLOB="18000000010000000000000000000000711238000000000095"], &(0x7f0000002f80)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @cgroup_sock_addr=0xb, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (fail_nth: 3) 278.24µs ago: executing program 1 (id=111): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0xc, 0xc, &(0x7f0000000e00)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020642500000000002020207b1af8ff0000000064384700000000000100000000000000b702000008000000b7030000000000008500000005000000850000000800000095"], &(0x7f0000000e80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000ec0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000f40)="29dd4c808f84a1688ccf6f00f805", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 0s ago: executing program 1 (id=112): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000000)=@x25, 0x80, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/126, 0x7e}, {&(0x7f0000000140)=""/79, 0x4f}], 0x2, &(0x7f0000000200)=""/47, 0x2f}, 0x8120) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000010000000000000000000000711815000000000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_usb_connect$printer(0x1, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x80, 0xa0, 0x4, "", [{{0x9, 0x4, 0x0, 0xa, 0x2, 0x7, 0x1, 0x2, 0x31, "", {{{0x9, 0x5, 0x1, 0x2, 0x10, 0x5, 0x9, 0x40}}, [{{0x9, 0x5, 0x82, 0x2, 0x20, 0xd4, 0x0, 0xd3}}]}}}]}}]}}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.112' (ED25519) to the list of known hosts. [ 18.970731][ T28] audit: type=1400 audit(1792955706.765:64): avc: denied { mounton } for pid=278 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 18.973957][ T278] cgroup: Unknown subsys name 'net' [ 18.993516][ T28] audit: type=1400 audit(1792955706.765:65): avc: denied { mount } for pid=278 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 19.020913][ T28] audit: type=1400 audit(1792955706.795:66): avc: denied { unmount } for pid=278 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 19.021219][ T278] cgroup: Unknown subsys name 'devices' [ 19.166386][ T278] cgroup: Unknown subsys name 'hugetlb' [ 19.172090][ T278] cgroup: Unknown subsys name 'rlimit' [ 19.276030][ T28] audit: type=1400 audit(1792955707.075:67): avc: denied { setattr } for pid=278 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 19.299332][ T28] audit: type=1400 audit(1792955707.075:68): avc: denied { mounton } for pid=278 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 19.324203][ T28] audit: type=1400 audit(1792955707.075:69): avc: denied { mount } for pid=278 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 19.345374][ T280] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 19.356153][ T28] audit: type=1400 audit(1792955707.155:70): avc: denied { relabelto } for pid=280 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 19.381548][ T28] audit: type=1400 audit(1792955707.155:71): avc: denied { write } for pid=280 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 19.394701][ T278] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 19.407670][ T28] audit: type=1400 audit(1792955707.185:72): avc: denied { read } for pid=278 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 19.441246][ T28] audit: type=1400 audit(1792955707.185:73): avc: denied { open } for pid=278 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.832898][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.840078][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 20.847536][ T290] device bridge_slave_0 entered promiscuous mode [ 20.854484][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.861526][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 20.868937][ T290] device bridge_slave_1 entered promiscuous mode [ 20.912067][ T286] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.919148][ T286] bridge0: port 1(bridge_slave_0) entered disabled state [ 20.926710][ T286] device bridge_slave_0 entered promiscuous mode [ 20.954237][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.961366][ T288] bridge0: port 1(bridge_slave_0) entered disabled state [ 20.968759][ T288] device bridge_slave_0 entered promiscuous mode [ 20.975418][ T286] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.982450][ T286] bridge0: port 2(bridge_slave_1) entered disabled state [ 20.989924][ T286] device bridge_slave_1 entered promiscuous mode [ 20.996501][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.003551][ T287] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.011006][ T287] device bridge_slave_0 entered promiscuous mode [ 21.020595][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.027738][ T287] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.035172][ T287] device bridge_slave_1 entered promiscuous mode [ 21.041722][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.048772][ T288] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.056157][ T288] device bridge_slave_1 entered promiscuous mode [ 21.145622][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.152653][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.160050][ T289] device bridge_slave_0 entered promiscuous mode [ 21.167133][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.174178][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.181868][ T289] device bridge_slave_1 entered promiscuous mode [ 21.274682][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.281837][ T290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.289131][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.296176][ T290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.314791][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.321841][ T287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.329125][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.336170][ T287] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.353779][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.360928][ T288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.368205][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.375245][ T288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.425881][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.433028][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.440336][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.447372][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.462014][ T286] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.469175][ T286] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.476475][ T286] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.483506][ T286] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.501875][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.509186][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.516824][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.523972][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.531331][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.538567][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 21.546267][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.553408][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.560645][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.567870][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.575084][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.608106][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 21.616376][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 21.625118][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 21.633302][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.640346][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.647905][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 21.655994][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 21.663378][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 21.671566][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.678598][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.685957][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 21.694053][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.701097][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.708442][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 21.716643][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.723653][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.731005][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 21.739223][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.746269][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.753606][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 21.761835][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.768878][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.776332][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 21.784535][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.791587][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.798938][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 21.807060][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.814068][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.848444][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 21.856910][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 21.864952][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 21.872914][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 21.883517][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 21.891626][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 21.899599][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 21.907696][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 21.915932][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 21.924154][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 21.932461][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 21.940527][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 21.948651][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 21.956714][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 21.964760][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 21.972729][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 21.980721][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 21.988746][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 22.001253][ T288] device veth0_vlan entered promiscuous mode [ 22.022453][ T287] device veth0_vlan entered promiscuous mode [ 22.032098][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 22.040643][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 22.048766][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 22.057340][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 22.065997][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 22.074373][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 22.082609][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 22.090902][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 22.099214][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 22.107127][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 22.115125][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 22.122916][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 22.131455][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 22.139034][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 22.146420][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 22.153812][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 22.161391][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 22.169002][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 22.178698][ T289] device veth0_vlan entered promiscuous mode [ 22.188666][ T290] device veth0_vlan entered promiscuous mode [ 22.195162][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 22.203148][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 22.211331][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 22.219600][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 22.227188][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 22.234845][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 22.242261][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 22.251946][ T288] device veth1_macvtap entered promiscuous mode [ 22.269784][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 22.278521][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 22.286852][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.293889][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.301298][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 22.309697][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 22.318134][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 22.326518][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 22.334778][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.341789][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.349191][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 22.357762][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 22.370999][ T290] device veth1_macvtap entered promiscuous mode [ 22.386451][ T289] device veth1_macvtap entered promiscuous mode [ 22.393227][ T288] request_module fs-gadgetfs succeeded, but still no fs? [ 22.394030][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 22.409199][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 22.418429][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 22.426609][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 22.434147][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 22.442363][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 22.451366][ T287] device veth1_macvtap entered promiscuous mode [ 22.458449][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 22.466300][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 22.474324][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 22.485543][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 22.493770][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 22.513519][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 22.522260][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 22.531028][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 22.539398][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 22.547825][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 22.556725][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 22.567925][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 22.576471][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 22.582833][ T311] loop2: detected capacity change from 0 to 256 [ 22.597955][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 22.614035][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 22.617851][ T311] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 22.622848][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 22.642780][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 22.669785][ T311] device syzkaller0 entered promiscuous mode [ 22.692886][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 22.701648][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 22.727878][ T286] device veth0_vlan entered promiscuous mode [ 22.742469][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 22.754766][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 22.768343][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 22.796123][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 22.806445][ T286] device veth1_macvtap entered promiscuous mode [ 22.819022][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 22.827919][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 22.843446][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 22.851920][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 22.868457][ T329] loop1: detected capacity change from 0 to 256 [ 22.877677][ T329] ======================================================= [ 22.877677][ T329] WARNING: The mand mount option has been deprecated and [ 22.877677][ T329] and is ignored by this kernel. Remove the mand [ 22.877677][ T329] option from the mount to silence this warning. [ 22.877677][ T329] ======================================================= [ 22.925249][ T329] FAT-fs (loop1): Directory bread(block 64) failed [ 22.931821][ T329] FAT-fs (loop1): Directory bread(block 65) failed [ 22.938619][ T329] FAT-fs (loop1): Directory bread(block 66) failed [ 22.945511][ T329] FAT-fs (loop1): Directory bread(block 67) failed [ 22.952443][ T329] FAT-fs (loop1): Directory bread(block 68) failed [ 22.959636][ T329] FAT-fs (loop1): Directory bread(block 69) failed [ 22.971444][ T329] FAT-fs (loop1): Directory bread(block 70) failed [ 22.981588][ T316] Zero length message leads to an empty skb [ 22.987683][ T329] FAT-fs (loop1): Directory bread(block 71) failed [ 22.994387][ T329] FAT-fs (loop1): Directory bread(block 72) failed [ 23.001968][ T329] FAT-fs (loop1): Directory bread(block 73) failed [ 23.018339][ T329] syz.1.2: attempt to access beyond end of device [ 23.018339][ T329] loop1: rw=2049, sector=1768, nr_sectors = 136 limit=256 [ 23.032787][ T329] syz.1.2: attempt to access beyond end of device [ 23.032787][ T329] loop1: rw=2049, sector=1768, nr_sectors = 4 limit=256 [ 23.049179][ T329] Buffer I/O error on dev loop1, logical block 442, lost async page write [ 23.075493][ T335] FAULT_INJECTION: forcing a failure. [ 23.075493][ T335] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 23.098067][ T335] CPU: 0 PID: 335 Comm: syz.4.9 Not tainted syzkaller #0 [ 23.105120][ T335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 23.115227][ T335] Call Trace: [ 23.118517][ T335] [ 23.121456][ T335] __dump_stack+0x21/0x24 [ 23.125813][ T335] dump_stack_lvl+0x110/0x170 [ 23.130516][ T335] ? __cfi_dump_stack_lvl+0x8/0x8 [ 23.135552][ T335] dump_stack+0x15/0x24 [ 23.139830][ T335] should_fail_ex+0x3bf/0x510 [ 23.144521][ T335] should_fail+0xb/0x10 [ 23.148689][ T335] should_fail_usercopy+0x1a/0x20 [ 23.153737][ T335] _copy_to_user+0x1e/0x90 [ 23.158163][ T335] bpf_prog_test_run_raw_tp+0x513/0x6b0 [ 23.163734][ T335] ? __cfi_bpf_prog_test_run_raw_tp+0x10/0x10 [ 23.169841][ T335] ? __kasan_check_write+0x14/0x20 [ 23.174968][ T335] ? __cfi_bpf_prog_test_run_raw_tp+0x10/0x10 [ 23.181043][ T335] bpf_prog_test_run+0x3b4/0x5c0 [ 23.185996][ T335] ? bpf_prog_query+0x270/0x270 [ 23.190871][ T335] ? selinux_bpf+0xce/0xf0 [ 23.195300][ T335] ? security_bpf+0x93/0xb0 [ 23.199839][ T335] __sys_bpf+0x5ee/0x850 [ 23.204096][ T335] ? bpf_link_show_fdinfo+0x330/0x330 [ 23.209485][ T335] ? __cfi_ksys_write+0x10/0x10 [ 23.214350][ T335] ? debug_smp_processor_id+0x17/0x20 [ 23.219746][ T335] __x64_sys_bpf+0x7c/0x90 [ 23.224173][ T335] x64_sys_call+0x488/0x9a0 [ 23.228696][ T335] do_syscall_64+0x4c/0xa0 [ 23.233119][ T335] ? clear_bhb_loop+0x30/0x80 [ 23.237894][ T335] ? clear_bhb_loop+0x30/0x80 [ 23.242588][ T335] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 23.248502][ T335] RIP: 0033:0x7f8cac99f559 [ 23.252927][ T335] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 23.272545][ T335] RSP: 002b:00007f8cad918028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 23.280992][ T335] RAX: ffffffffffffffda RBX: 00007f8cacc25fa0 RCX: 00007f8cac99f559 [ 23.288975][ T335] RDX: 000000000000000c RSI: 0000200000000740 RDI: 000000000000000a [ 23.296947][ T335] RBP: 00007f8cad918090 R08: 0000000000000000 R09: 0000000000000000 [ 23.304919][ T335] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 23.312885][ T335] R13: 00007f8cacc26038 R14: 00007f8cacc25fa0 R15: 00007ffea1a170b8 [ 23.320859][ T335] [ 23.406414][ T349] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 23.458982][ T354] netlink: 4 bytes leftover after parsing attributes in process `syz.4.17'. [ 23.470204][ T354] netlink: 104 bytes leftover after parsing attributes in process `syz.4.17'. [ 23.484563][ T356] netlink: 'syz.3.18': attribute type 8 has an invalid length. [ 23.493917][ T356] loop3: detected capacity change from 0 to 256 [ 23.500618][ T356] exfat: Deprecated parameter 'namecase' [ 23.506613][ T356] exfat: Deprecated parameter 'namecase' [ 23.512374][ T356] exfat: Deprecated parameter 'namecase' [ 23.523328][ T356] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 23.611565][ T366] syz.3.22 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 23.632448][ T368] FAULT_INJECTION: forcing a failure. [ 23.632448][ T368] name failslab, interval 1, probability 0, space 0, times 1 [ 23.645145][ T368] CPU: 0 PID: 368 Comm: syz.2.23 Not tainted syzkaller #0 [ 23.652268][ T368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 23.662333][ T368] Call Trace: [ 23.665628][ T368] [ 23.668568][ T368] __dump_stack+0x21/0x24 [ 23.672912][ T368] dump_stack_lvl+0x110/0x170 [ 23.677620][ T368] ? __cfi_dump_stack_lvl+0x8/0x8 [ 23.682652][ T368] ? avc_has_perm+0x163/0x250 [ 23.687345][ T368] dump_stack+0x15/0x24 [ 23.691517][ T368] should_fail_ex+0x3bf/0x510 [ 23.696219][ T368] __should_failslab+0xac/0xf0 [ 23.701002][ T368] should_failslab+0x9/0x20 [ 23.705515][ T368] __kmem_cache_alloc_node+0x3d/0x2d0 [ 23.710915][ T368] ? __get_vm_area_node+0x12c/0x360 [ 23.716140][ T368] ? __get_vm_area_node+0x12c/0x360 [ 23.721350][ T368] kmalloc_node_trace+0x26/0xb0 [ 23.726214][ T368] __get_vm_area_node+0x12c/0x360 [ 23.731275][ T368] __vmalloc_node_range+0x326/0x1440 [ 23.736572][ T368] ? bpf_prog_alloc_no_stats+0x3e/0x3f0 [ 23.742139][ T368] ? __cfi_avc_has_perm_noaudit+0x10/0x10 [ 23.747878][ T368] ? __stack_depot_save+0x36/0x490 [ 23.753007][ T368] ? selinux_capable+0x2b6/0x3b0 [ 23.757960][ T368] ? _parse_integer_limit+0x18e/0x1d0 [ 23.763355][ T368] ? __cfi___vmalloc_node_range+0x10/0x10 [ 23.769093][ T368] ? avc_has_perm_noaudit+0x390/0x490 [ 23.774918][ T368] ? avc_has_perm_noaudit+0x390/0x490 [ 23.780314][ T368] ? bpf_prog_alloc_no_stats+0x3e/0x3f0 [ 23.785880][ T368] __vmalloc+0x79/0x90 [ 23.789969][ T368] ? bpf_prog_alloc_no_stats+0x3e/0x3f0 [ 23.795541][ T368] bpf_prog_alloc_no_stats+0x3e/0x3f0 [ 23.800933][ T368] bpf_prog_alloc+0x21/0x1c0 [ 23.805548][ T368] bpf_prog_load+0x811/0x1670 [ 23.810240][ T368] ? map_freeze+0x3a0/0x3a0 [ 23.814757][ T368] ? selinux_bpf+0xc7/0xf0 [ 23.819185][ T368] ? security_bpf+0x93/0xb0 [ 23.823693][ T368] __sys_bpf+0x57b/0x850 [ 23.827949][ T368] ? bpf_link_show_fdinfo+0x330/0x330 [ 23.833342][ T368] ? __cfi_ksys_write+0x10/0x10 [ 23.838204][ T368] ? do_user_addr_fault+0x9a5/0x1030 [ 23.843506][ T368] ? debug_smp_processor_id+0x17/0x20 [ 23.848901][ T368] __x64_sys_bpf+0x7c/0x90 [ 23.853322][ T368] x64_sys_call+0x488/0x9a0 [ 23.857837][ T368] do_syscall_64+0x4c/0xa0 [ 23.862266][ T368] ? clear_bhb_loop+0x30/0x80 [ 23.866956][ T368] ? clear_bhb_loop+0x30/0x80 [ 23.871651][ T368] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 23.877557][ T368] RIP: 0033:0x7ff2df39f559 [ 23.881977][ T368] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 23.901595][ T368] RSP: 002b:00007ff2e01ae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 23.910027][ T368] RAX: ffffffffffffffda RBX: 00007ff2df625fa0 RCX: 00007ff2df39f559 [ 23.918012][ T368] RDX: 0000000000000094 RSI: 0000200000000000 RDI: 0000000000000005 [ 23.926004][ T368] RBP: 00007ff2e01ae090 R08: 0000000000000000 R09: 0000000000000000 [ 23.933981][ T368] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 23.941968][ T368] R13: 00007ff2df626038 R14: 00007ff2df625fa0 R15: 00007ffccdf09f38 [ 23.949951][ T368] [ 23.954530][ T364] kworker/u4:5: attempt to access beyond end of device [ 23.954530][ T364] loop1: rw=1, sector=1768, nr_sectors = 4 limit=256 [ 23.970673][ T368] syz.2.23: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz2,mems_allowed=0 [ 23.986860][ T368] CPU: 0 PID: 368 Comm: syz.2.23 Not tainted syzkaller #0 [ 23.993979][ T368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 24.004035][ T368] Call Trace: [ 24.007314][ T368] [ 24.010338][ T368] __dump_stack+0x21/0x24 [ 24.014669][ T368] dump_stack_lvl+0x110/0x170 [ 24.019345][ T368] ? __cfi_dump_stack_lvl+0x8/0x8 [ 24.024365][ T368] ? pr_cont_kernfs_name+0x133/0x160 [ 24.029662][ T368] dump_stack+0x15/0x24 [ 24.033815][ T368] warn_alloc+0x1dc/0x200 [ 24.038155][ T368] ? should_failslab+0x9/0x20 [ 24.042919][ T368] ? __cfi_warn_alloc+0x10/0x10 [ 24.047786][ T368] ? kmalloc_node_trace+0x3d/0xb0 [ 24.052835][ T368] ? __get_vm_area_node+0x353/0x360 [ 24.058029][ T368] __vmalloc_node_range+0x34b/0x1440 [ 24.063314][ T368] ? __cfi_avc_has_perm_noaudit+0x10/0x10 [ 24.069037][ T368] ? __stack_depot_save+0x36/0x490 [ 24.074169][ T368] ? selinux_capable+0x2b6/0x3b0 [ 24.079112][ T368] ? _parse_integer_limit+0x18e/0x1d0 [ 24.084484][ T368] ? __cfi___vmalloc_node_range+0x10/0x10 [ 24.090210][ T368] ? avc_has_perm_noaudit+0x390/0x490 [ 24.095609][ T368] ? avc_has_perm_noaudit+0x390/0x490 [ 24.101068][ T368] ? bpf_prog_alloc_no_stats+0x3e/0x3f0 [ 24.106623][ T368] __vmalloc+0x79/0x90 [ 24.110696][ T368] ? bpf_prog_alloc_no_stats+0x3e/0x3f0 [ 24.116239][ T368] bpf_prog_alloc_no_stats+0x3e/0x3f0 [ 24.121613][ T368] bpf_prog_alloc+0x21/0x1c0 [ 24.126212][ T368] bpf_prog_load+0x811/0x1670 [ 24.130891][ T368] ? map_freeze+0x3a0/0x3a0 [ 24.135394][ T368] ? selinux_bpf+0xc7/0xf0 [ 24.139812][ T368] ? security_bpf+0x93/0xb0 [ 24.144322][ T368] __sys_bpf+0x57b/0x850 [ 24.148570][ T368] ? bpf_link_show_fdinfo+0x330/0x330 [ 24.153945][ T368] ? __cfi_ksys_write+0x10/0x10 [ 24.158807][ T368] ? do_user_addr_fault+0x9a5/0x1030 [ 24.164116][ T368] ? debug_smp_processor_id+0x17/0x20 [ 24.169504][ T368] __x64_sys_bpf+0x7c/0x90 [ 24.173919][ T368] x64_sys_call+0x488/0x9a0 [ 24.178424][ T368] do_syscall_64+0x4c/0xa0 [ 24.182834][ T368] ? clear_bhb_loop+0x30/0x80 [ 24.187512][ T368] ? clear_bhb_loop+0x30/0x80 [ 24.192185][ T368] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 24.198075][ T368] RIP: 0033:0x7ff2df39f559 [ 24.202490][ T368] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 24.222099][ T368] RSP: 002b:00007ff2e01ae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 24.230521][ T368] RAX: ffffffffffffffda RBX: 00007ff2df625fa0 RCX: 00007ff2df39f559 [ 24.238495][ T368] RDX: 0000000000000094 RSI: 0000200000000000 RDI: 0000000000000005 [ 24.246462][ T368] RBP: 00007ff2e01ae090 R08: 0000000000000000 R09: 0000000000000000 [ 24.254430][ T368] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 24.262394][ T368] R13: 00007ff2df626038 R14: 00007ff2df625fa0 R15: 00007ffccdf09f38 [ 24.270363][ T368] [ 24.289911][ T368] Mem-Info: [ 24.293816][ T368] active_anon:5356 inactive_anon:0 isolated_anon:0 [ 24.293816][ T368] active_file:5958 inactive_file:3039 isolated_file:0 [ 24.293816][ T368] unevictable:0 dirty:396 writeback:0 [ 24.293816][ T368] slab_reclaimable:7204 slab_unreclaimable:72610 [ 24.293816][ T368] mapped:29116 shmem:175 pagetables:567 [ 24.293816][ T368] sec_pagetables:0 bounce:0 [ 24.293816][ T368] kernel_misc_reclaimable:0 [ 24.293816][ T368] free:1537842 free_pcp:10050 free_cma:0 [ 24.330616][ T381] netlink: 8 bytes leftover after parsing attributes in process `syz.1.25'. [ 24.339988][ T368] Node 0 active_anon:21724kB inactive_anon:0kB active_file:23832kB inactive_file:12156kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:116364kB dirty:1584kB writeback:0kB shmem:700kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:4076kB pagetables:2368kB sec_pagetables:0kB all_unreclaimable? no [ 24.357494][ T381] netlink: 'syz.1.25': attribute type 2 has an invalid length. [ 24.387925][ T368] DMA32 free:2966484kB boost:0kB min:31276kB low:39092kB high:46908kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2971856kB mlocked:0kB bounce:0kB free_pcp:5372kB local_pcp:56kB free_cma:0kB [ 24.412265][ T28] kauditd_printk_skb: 82 callbacks suppressed [ 24.412292][ T28] audit: type=1400 audit(1792955712.205:156): avc: denied { create } for pid=382 comm="syz.0.29" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 24.444527][ T381] device bridge1 entered promiscuous mode [ 24.472754][ T28] audit: type=1400 audit(1792955712.235:157): avc: denied { read write } for pid=384 comm="syz.3.28" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 24.477440][ T368] lowmem_reserve[]: [ 24.508871][ T381] loop1: detected capacity change from 0 to 1024 [ 24.517815][ T368] 0 3932 3932 3932 [ 24.521334][ T381] ext4: Unknown parameter 'euid<00000000000000000255' [ 24.530275][ T28] audit: type=1400 audit(1792955712.235:158): avc: denied { setopt } for pid=382 comm="syz.0.29" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 24.553594][ T381] netlink: 40 bytes leftover after parsing attributes in process `syz.1.25'. [ 24.558517][ T368] Normal free:3181860kB boost:0kB min:42448kB low:53060kB high:63672kB reserved_highatomic:0KB active_anon:25724kB inactive_anon:0kB active_file:26732kB inactive_file:9256kB unevictable:0kB writepending:1584kB present:5242880kB managed:4026400kB mlocked:0kB bounce:0kB free_pcp:33392kB local_pcp:10520kB free_cma:0kB [ 24.598455][ T28] audit: type=1400 audit(1792955712.245:159): avc: denied { open } for pid=384 comm="syz.3.28" path="/dev/raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 24.646023][ T397] FAULT_INJECTION: forcing a failure. [ 24.646023][ T397] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 24.659753][ T28] audit: type=1400 audit(1792955712.255:160): avc: denied { ioctl } for pid=384 comm="syz.3.28" path="/dev/raw-gadget" dev="devtmpfs" ino=258 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 24.675469][ T368] lowmem_reserve[]: [ 24.684523][ T397] CPU: 1 PID: 397 Comm: syz.4.32 Not tainted syzkaller #0 [ 24.695447][ T397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 24.705520][ T397] Call Trace: [ 24.708810][ T397] [ 24.711748][ T397] __dump_stack+0x21/0x24 [ 24.716115][ T397] dump_stack_lvl+0x110/0x170 [ 24.717812][ T368] 0 0 0 [ 24.720800][ T397] ? __cfi_dump_stack_lvl+0x8/0x8 [ 24.720820][ T397] ? kvmalloc_node+0x28a/0x460 [ 24.723679][ T368] 0 [ 24.728699][ T397] ? __kmalloc_node+0x11f/0x1e0 [ 24.728718][ T397] dump_stack+0x15/0x24 [ 24.728734][ T397] should_fail_ex+0x3bf/0x510 [ 24.749645][ T397] should_fail+0xb/0x10 [ 24.753825][ T397] should_fail_usercopy+0x1a/0x20 [ 24.758873][ T397] _copy_from_user+0x1e/0xc0 [ 24.761260][ T368] DMA32: 3*4kB [ 24.763516][ T397] ___bpf_copy_key+0xb6/0x110 [ 24.763527][ T368] (M) [ 24.763541][ T397] map_update_elem+0x2b6/0x6a0 [ 24.777775][ T368] 1*8kB (M) [ 24.779652][ T397] ? selinux_bpf+0xce/0xf0 [ 24.784711][ T368] 2*16kB (M) 3*32kB [ 24.787363][ T397] __sys_bpf+0x4af/0x850 [ 24.795490][ T397] ? bpf_link_show_fdinfo+0x330/0x330 [ 24.800865][ T397] ? __cfi_ksys_write+0x10/0x10 [ 24.805738][ T397] ? debug_smp_processor_id+0x17/0x20 [ 24.811124][ T397] __x64_sys_bpf+0x7c/0x90 [ 24.815549][ T397] x64_sys_call+0x488/0x9a0 [ 24.820054][ T397] do_syscall_64+0x4c/0xa0 [ 24.824470][ T397] ? clear_bhb_loop+0x30/0x80 [ 24.829163][ T397] ? clear_bhb_loop+0x30/0x80 [ 24.833839][ T397] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 24.839730][ T397] RIP: 0033:0x7f8cac99f559 [ 24.844142][ T397] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 24.863745][ T397] RSP: 002b:00007f8cad918028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 24.872157][ T397] RAX: ffffffffffffffda RBX: 00007f8cacc25fa0 RCX: 00007f8cac99f559 [ 24.880124][ T397] RDX: 0000000000000020 RSI: 00002000000001c0 RDI: 0000000000000002 [ 24.888087][ T397] RBP: 00007f8cad918090 R08: 0000000000000000 R09: 0000000000000000 [ 24.896057][ T397] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 24.904028][ T397] R13: 00007f8cacc26038 R14: 00007f8cacc25fa0 R15: 00007ffea1a170b8 [ 24.911999][ T397] [ 24.915523][ T313] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 24.920797][ T368] (M) 3*64kB (M) 3*128kB (M) 3*256kB (M) 3*512kB (M) 2*1024kB (UM) 2*2048kB (M) 722*4096kB (M) = 2966484kB [ 24.925362][ T28] audit: type=1400 audit(1792955712.345:161): avc: denied { create } for pid=380 comm="syz.1.25" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 24.946343][ T368] Normal: 1*4kB (U) 0*8kB 1*16kB (M) 1*32kB (M) 0*64kB 2*128kB (ME) 1*256kB (U) 3*512kB (UME) 0*1024kB 3*2048kB (UME) [ 24.956697][ T399] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Dropping request. Check SNMP counters. [ 24.962654][ T28] audit: type=1400 audit(1792955712.345:162): avc: denied { bind } for pid=380 comm="syz.1.25" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 24.982177][ T28] audit: type=1400 audit(1792955712.345:163): avc: denied { name_bind } for pid=380 comm="syz.1.25" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 25.010231][ T368] 771*4096kB (M) = 3166260kB [ 25.037881][ T368] 13243 total pagecache pages [ 25.042663][ T368] 0 pages in swap cache [ 25.043098][ T28] audit: type=1400 audit(1792955712.345:164): avc: denied { node_bind } for pid=380 comm="syz.1.25" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 25.047129][ T368] Free swap = 124996kB [ 25.094445][ T368] Total swap = 124996kB [ 25.097680][ T28] audit: type=1400 audit(1792955712.345:165): avc: denied { connect } for pid=380 comm="syz.1.25" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 25.098632][ T368] 2097051 pages RAM [ 25.098639][ T368] 0 pages HighMem/MovableOnly [ 25.134555][ T313] usb 4-1: device descriptor read/64, error -71 [ 25.164410][ T368] 347487 pages reserved [ 25.168601][ T368] 0 pages cma reserved [ 25.193728][ T409] netlink: 188 bytes leftover after parsing attributes in process `syz.2.36'. [ 25.215267][ T409] loop2: detected capacity change from 0 to 256 [ 25.245772][ T409] netlink: 'syz.2.36': attribute type 11 has an invalid length. [ 25.263363][ T409] netlink: 36 bytes leftover after parsing attributes in process `syz.2.36'. [ 25.276363][ T417] netlink: 188 bytes leftover after parsing attributes in process `syz.2.36'. [ 25.299617][ T292] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 25.310122][ T430] loop4: detected capacity change from 0 to 512 [ 25.317110][ T428] netlink: 'syz.2.36': attribute type 11 has an invalid length. [ 25.334373][ T428] netlink: 36 bytes leftover after parsing attributes in process `syz.2.36'. [ 25.351004][ T430] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 25.414406][ T313] usb 4-1: device descriptor read/64, error -71 [ 25.439526][ T441] FAULT_INJECTION: forcing a failure. [ 25.439526][ T441] name failslab, interval 1, probability 0, space 0, times 0 [ 25.458161][ T441] CPU: 1 PID: 441 Comm: syz.2.44 Not tainted syzkaller #0 [ 25.465307][ T441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 25.475410][ T441] Call Trace: [ 25.478729][ T441] [ 25.481672][ T441] __dump_stack+0x21/0x24 [ 25.486015][ T441] dump_stack_lvl+0x110/0x170 [ 25.490726][ T441] ? __cfi_dump_stack_lvl+0x8/0x8 [ 25.495762][ T441] ? avc_has_perm+0x163/0x250 [ 25.500457][ T441] dump_stack+0x15/0x24 [ 25.504625][ T441] should_fail_ex+0x3bf/0x510 [ 25.509319][ T441] __should_failslab+0xac/0xf0 [ 25.514116][ T441] should_failslab+0x9/0x20 [ 25.518639][ T441] __kmem_cache_alloc_node+0x3d/0x2d0 [ 25.524030][ T441] ? __get_vm_area_node+0x12c/0x360 [ 25.529238][ T441] ? __get_vm_area_node+0x12c/0x360 [ 25.534474][ T441] kmalloc_node_trace+0x26/0xb0 [ 25.539343][ T441] __get_vm_area_node+0x12c/0x360 [ 25.544384][ T441] __vmalloc_node_range+0x326/0x1440 [ 25.549681][ T441] ? bpf_prog_alloc_no_stats+0x3e/0x3f0 [ 25.555243][ T441] ? __cfi_avc_has_perm_noaudit+0x10/0x10 [ 25.560988][ T441] ? __stack_depot_save+0x36/0x490 [ 25.566129][ T441] ? selinux_capable+0x2b6/0x3b0 [ 25.571094][ T441] ? _parse_integer_limit+0x18e/0x1d0 [ 25.576483][ T441] ? __cfi___vmalloc_node_range+0x10/0x10 [ 25.582225][ T441] ? avc_has_perm_noaudit+0x390/0x490 [ 25.587611][ T441] ? avc_has_perm_noaudit+0x390/0x490 [ 25.593002][ T441] ? bpf_prog_alloc_no_stats+0x3e/0x3f0 [ 25.598656][ T441] __vmalloc+0x79/0x90 [ 25.602736][ T441] ? bpf_prog_alloc_no_stats+0x3e/0x3f0 [ 25.608302][ T441] bpf_prog_alloc_no_stats+0x3e/0x3f0 [ 25.613693][ T441] bpf_prog_alloc+0x21/0x1c0 [ 25.617770][ T447] FAULT_INJECTION: forcing a failure. [ 25.617770][ T447] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 25.618302][ T441] bpf_prog_load+0x811/0x1670 [ 25.618327][ T441] ? map_freeze+0x3a0/0x3a0 [ 25.640481][ T441] ? selinux_bpf+0xc7/0xf0 [ 25.644905][ T441] ? security_bpf+0x93/0xb0 [ 25.649406][ T441] __sys_bpf+0x57b/0x850 [ 25.653650][ T441] ? bpf_link_show_fdinfo+0x330/0x330 [ 25.659028][ T441] ? __cfi_ksys_write+0x10/0x10 [ 25.663890][ T441] ? do_user_addr_fault+0x9a5/0x1030 [ 25.669183][ T441] ? debug_smp_processor_id+0x17/0x20 [ 25.674580][ T441] __x64_sys_bpf+0x7c/0x90 [ 25.678998][ T441] x64_sys_call+0x488/0x9a0 [ 25.683501][ T441] do_syscall_64+0x4c/0xa0 [ 25.687915][ T441] ? clear_bhb_loop+0x30/0x80 [ 25.692600][ T441] ? clear_bhb_loop+0x30/0x80 [ 25.697279][ T441] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 25.703183][ T441] RIP: 0033:0x7ff2df39f559 [ 25.707604][ T441] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 25.727220][ T441] RSP: 002b:00007ff2e01ae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 25.735645][ T441] RAX: ffffffffffffffda RBX: 00007ff2df625fa0 RCX: 00007ff2df39f559 [ 25.743623][ T441] RDX: 0000000000000094 RSI: 00002000000008c0 RDI: 0000000000000005 [ 25.751703][ T441] RBP: 00007ff2e01ae090 R08: 0000000000000000 R09: 0000000000000000 [ 25.754499][ T313] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 25.759690][ T441] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 25.759705][ T441] R13: 00007ff2df626038 R14: 00007ff2df625fa0 R15: 00007ffccdf09f38 [ 25.783113][ T441] [ 25.786169][ T447] CPU: 0 PID: 447 Comm: syz.0.46 Not tainted syzkaller #0 [ 25.793300][ T447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 25.803401][ T447] Call Trace: [ 25.806693][ T447] [ 25.809626][ T447] __dump_stack+0x21/0x24 [ 25.813955][ T447] dump_stack_lvl+0x110/0x170 [ 25.818626][ T447] ? __cfi_dump_stack_lvl+0x8/0x8 [ 25.823646][ T447] dump_stack+0x15/0x24 [ 25.827821][ T447] should_fail_ex+0x3bf/0x510 [ 25.832509][ T447] should_fail+0xb/0x10 [ 25.836679][ T447] should_fail_usercopy+0x1a/0x20 [ 25.841711][ T447] _copy_to_user+0x1e/0x90 [ 25.846126][ T447] simple_read_from_buffer+0xe9/0x160 [ 25.851497][ T447] proc_fail_nth_read+0x1a6/0x220 [ 25.856523][ T447] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 25.862067][ T447] ? security_file_permission+0x94/0xb0 [ 25.867619][ T447] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 25.873366][ T447] vfs_read+0x286/0x930 [ 25.877528][ T447] ? __cfi_vfs_read+0x10/0x10 [ 25.882200][ T447] ? __kasan_check_write+0x14/0x20 [ 25.887312][ T447] ? mutex_lock+0x93/0x1b0 [ 25.891728][ T447] ? __cfi_mutex_lock+0x10/0x10 [ 25.896579][ T447] ? __fdget_pos+0x2cd/0x380 [ 25.901169][ T447] ? ksys_read+0x70/0x260 [ 25.905498][ T447] ksys_read+0x14a/0x260 [ 25.909746][ T447] ? __cfi_ksys_read+0x10/0x10 [ 25.914603][ T447] ? debug_smp_processor_id+0x17/0x20 [ 25.919981][ T447] __x64_sys_read+0x7b/0x90 [ 25.924486][ T447] x64_sys_call+0x2f/0x9a0 [ 25.928901][ T447] do_syscall_64+0x4c/0xa0 [ 25.933320][ T447] ? clear_bhb_loop+0x30/0x80 [ 25.938125][ T447] ? clear_bhb_loop+0x30/0x80 [ 25.942806][ T447] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 25.948694][ T447] RIP: 0033:0x7f0e5635fd8e [ 25.953102][ T447] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 25.972705][ T447] RSP: 002b:00007f0e57296fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 25.981118][ T447] RAX: ffffffffffffffda RBX: 00007f0e572976c0 RCX: 00007f0e5635fd8e [ 25.989085][ T447] RDX: 000000000000000f RSI: 00007f0e572970a0 RDI: 0000000000000005 [ 25.997053][ T447] RBP: 00007f0e57297090 R08: 0000000000000000 R09: 0000000000000000 [ 26.005020][ T447] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 26.012985][ T447] R13: 00007f0e56626038 R14: 00007f0e56625fa0 R15: 00007ffc063887b8 [ 26.020968][ T447] [ 26.031209][ T292] usb 2-1: config 0 has an invalid interface number: 64 but max is 0 [ 26.042277][ T292] usb 2-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 26.052743][ T292] usb 2-1: config 0 has no interface number 0 [ 26.062952][ T451] FAULT_INJECTION: forcing a failure. [ 26.062952][ T451] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 26.076240][ T451] CPU: 1 PID: 451 Comm: syz.0.48 Not tainted syzkaller #0 [ 26.083368][ T451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 26.093433][ T451] Call Trace: [ 26.096738][ T451] [ 26.099685][ T451] __dump_stack+0x21/0x24 [ 26.104024][ T451] dump_stack_lvl+0x110/0x170 [ 26.108713][ T451] ? __cfi_dump_stack_lvl+0x8/0x8 [ 26.113743][ T451] ? __kasan_kmalloc+0x95/0xb0 [ 26.118525][ T451] ? kvmalloc_node+0x28a/0x460 [ 26.123302][ T451] ? __kmalloc_node+0xb2/0x1e0 [ 26.128096][ T451] dump_stack+0x15/0x24 [ 26.132263][ T451] should_fail_ex+0x3bf/0x510 [ 26.134675][ T313] usb 4-1: device descriptor read/64, error -71 [ 26.136947][ T451] should_fail+0xb/0x10 [ 26.136968][ T451] should_fail_usercopy+0x1a/0x20 [ 26.152375][ T451] _copy_from_user+0x1e/0xc0 [ 26.156973][ T451] generic_map_delete_batch+0x294/0x510 [ 26.162555][ T451] ? __cfi_generic_map_delete_batch+0x10/0x10 [ 26.168639][ T451] ? __cfi_generic_map_delete_batch+0x10/0x10 [ 26.174718][ T451] bpf_map_do_batch+0x498/0x610 [ 26.179578][ T451] __sys_bpf+0x6ba/0x850 [ 26.183826][ T451] ? bpf_link_show_fdinfo+0x330/0x330 [ 26.189227][ T451] ? __cfi_ksys_write+0x10/0x10 [ 26.194087][ T451] ? debug_smp_processor_id+0x17/0x20 [ 26.199475][ T451] __x64_sys_bpf+0x7c/0x90 [ 26.203906][ T451] x64_sys_call+0x488/0x9a0 [ 26.208426][ T451] do_syscall_64+0x4c/0xa0 [ 26.213224][ T451] ? clear_bhb_loop+0x30/0x80 [ 26.217935][ T451] ? clear_bhb_loop+0x30/0x80 [ 26.222641][ T451] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 26.228545][ T451] RIP: 0033:0x7f0e5639f559 [ 26.232971][ T451] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 26.252811][ T451] RSP: 002b:00007f0e57297028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 26.261241][ T451] RAX: ffffffffffffffda RBX: 00007f0e56625fa0 RCX: 00007f0e5639f559 [ 26.269584][ T451] RDX: 0000000000000038 RSI: 0000200000001340 RDI: 000000000000001b [ 26.277575][ T451] RBP: 00007f0e57297090 R08: 0000000000000000 R09: 0000000000000000 [ 26.285570][ T451] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 26.293567][ T451] R13: 00007f0e56626038 R14: 00007f0e56625fa0 R15: 00007ffc063887b8 [ 26.301561][ T451] [ 26.305581][ T292] usb 2-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 26.314998][ T292] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 26.323601][ T290] EXT4-fs (loop4): unmounting filesystem. [ 26.325056][ T292] usb 2-1: Product: syz [ 26.334520][ T292] usb 2-1: Manufacturer: syz [ 26.339432][ T292] usb 2-1: SerialNumber: syz [ 26.352948][ T292] usb 2-1: config 0 descriptor?? [ 26.388004][ T449] loop2: detected capacity change from 0 to 40427 [ 26.396921][ T459] FAULT_INJECTION: forcing a failure. [ 26.396921][ T459] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 26.411747][ T449] F2FS-fs (loop2): invalid crc value [ 26.417537][ T459] CPU: 1 PID: 459 Comm: syz.0.52 Not tainted syzkaller #0 [ 26.424672][ T459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 26.434747][ T459] Call Trace: [ 26.438039][ T459] [ 26.440993][ T459] __dump_stack+0x21/0x24 [ 26.445337][ T459] dump_stack_lvl+0x110/0x170 [ 26.450041][ T459] ? __cfi_dump_stack_lvl+0x8/0x8 [ 26.455101][ T459] dump_stack+0x15/0x24 [ 26.459280][ T459] should_fail_ex+0x3bf/0x510 [ 26.463973][ T459] should_fail+0xb/0x10 [ 26.468162][ T459] should_fail_usercopy+0x1a/0x20 [ 26.473231][ T459] _copy_from_user+0x1e/0xc0 [ 26.475440][ T313] usb 4-1: device descriptor read/64, error -71 [ 26.477841][ T459] bpf_prog_test_run_skb+0x263/0x18a0 [ 26.489448][ T459] ? __fget_files+0x2d1/0x330 [ 26.494142][ T459] ? __cfi_bpf_prog_test_run_skb+0x10/0x10 [ 26.499976][ T459] bpf_prog_test_run+0x3b4/0x5c0 [ 26.504931][ T459] ? bpf_prog_query+0x270/0x270 [ 26.509796][ T459] ? selinux_bpf+0xce/0xf0 [ 26.514232][ T459] ? security_bpf+0x93/0xb0 [ 26.518762][ T459] __sys_bpf+0x5ee/0x850 [ 26.523032][ T459] ? bpf_link_show_fdinfo+0x330/0x330 [ 26.528434][ T459] ? __cfi_ksys_write+0x10/0x10 [ 26.528816][ T449] F2FS-fs (loop2): Found nat_bits in checkpoint [ 26.533309][ T459] ? debug_smp_processor_id+0x17/0x20 [ 26.544937][ T459] __x64_sys_bpf+0x7c/0x90 [ 26.549388][ T459] x64_sys_call+0x488/0x9a0 [ 26.553911][ T459] do_syscall_64+0x4c/0xa0 [ 26.558338][ T459] ? clear_bhb_loop+0x30/0x80 [ 26.563039][ T459] ? clear_bhb_loop+0x30/0x80 [ 26.567730][ T459] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 26.573636][ T459] RIP: 0033:0x7f0e5639f559 [ 26.578057][ T459] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 26.597660][ T459] RSP: 002b:00007f0e57297028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 26.606074][ T459] RAX: ffffffffffffffda RBX: 00007f0e56625fa0 RCX: 00007f0e5639f559 [ 26.614044][ T459] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 26.622021][ T459] RBP: 00007f0e57297090 R08: 0000000000000000 R09: 0000000000000000 [ 26.629986][ T459] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 26.637950][ T459] R13: 00007f0e56626038 R14: 00007f0e56625fa0 R15: 00007ffc063887b8 [ 26.645924][ T459] [ 26.649424][ T313] usb usb4-port1: attempt power cycle [ 26.679937][ T449] F2FS-fs (loop2): Start checkpoint disabled! [ 26.690079][ T449] F2FS-fs (loop2): f2fs_disable_checkpoint() finish, err:0 [ 26.701514][ T449] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 26.704560][ T474] FAULT_INJECTION: forcing a failure. [ 26.704560][ T474] name failslab, interval 1, probability 0, space 0, times 0 [ 26.728787][ T474] CPU: 0 PID: 474 Comm: syz.0.57 Not tainted syzkaller #0 [ 26.735943][ T474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 26.746014][ T474] Call Trace: [ 26.749299][ T474] [ 26.752235][ T474] __dump_stack+0x21/0x24 [ 26.756596][ T474] dump_stack_lvl+0x110/0x170 [ 26.761279][ T474] ? __cfi_dump_stack_lvl+0x8/0x8 [ 26.766306][ T474] ? avc_has_perm+0x163/0x250 [ 26.771000][ T474] dump_stack+0x15/0x24 [ 26.775178][ T474] should_fail_ex+0x3bf/0x510 [ 26.779879][ T474] __should_failslab+0xac/0xf0 [ 26.784674][ T474] should_failslab+0x9/0x20 [ 26.789186][ T474] __kmem_cache_alloc_node+0x3d/0x2d0 [ 26.794576][ T474] ? __get_vm_area_node+0x12c/0x360 [ 26.799791][ T474] ? __get_vm_area_node+0x12c/0x360 [ 26.805006][ T474] kmalloc_node_trace+0x26/0xb0 [ 26.810121][ T474] __get_vm_area_node+0x12c/0x360 [ 26.815161][ T474] __vmalloc_node_range+0x326/0x1440 [ 26.820458][ T474] ? bpf_prog_alloc_no_stats+0x3e/0x3f0 [ 26.826026][ T474] ? __cfi_avc_has_perm_noaudit+0x10/0x10 [ 26.831770][ T474] ? __stack_depot_save+0x36/0x490 [ 26.836917][ T474] ? selinux_capable+0x2b6/0x3b0 [ 26.841879][ T474] ? _parse_integer_limit+0x18e/0x1d0 [ 26.847268][ T474] ? __cfi___vmalloc_node_range+0x10/0x10 [ 26.853020][ T474] ? avc_has_perm_noaudit+0x390/0x490 [ 26.858417][ T474] ? avc_has_perm_noaudit+0x390/0x490 [ 26.858749][ T292] usb 2-1: Found UVC 0.00 device syz (046d:0823) [ 26.863802][ T474] ? bpf_prog_alloc_no_stats+0x3e/0x3f0 [ 26.863830][ T474] __vmalloc+0x79/0x90 [ 26.877652][ T292] usb 2-1: No valid video chain found. [ 26.879744][ T474] ? bpf_prog_alloc_no_stats+0x3e/0x3f0 [ 26.890736][ T474] bpf_prog_alloc_no_stats+0x3e/0x3f0 [ 26.896128][ T474] bpf_prog_alloc+0x21/0x1c0 [ 26.898185][ T292] usb 2-1: USB disconnect, device number 2 [ 26.900736][ T474] bpf_prog_load+0x811/0x1670 [ 26.911218][ T474] ? map_freeze+0x3a0/0x3a0 [ 26.915742][ T474] ? selinux_bpf+0xc7/0xf0 [ 26.920175][ T474] ? security_bpf+0x93/0xb0 [ 26.924691][ T474] __sys_bpf+0x57b/0x850 [ 26.928942][ T474] ? bpf_link_show_fdinfo+0x330/0x330 [ 26.934326][ T474] ? __cfi_ksys_write+0x10/0x10 [ 26.939193][ T474] ? do_user_addr_fault+0x9a5/0x1030 [ 26.944512][ T474] ? debug_smp_processor_id+0x17/0x20 [ 26.949908][ T474] __x64_sys_bpf+0x7c/0x90 [ 26.954353][ T474] x64_sys_call+0x488/0x9a0 [ 26.958874][ T474] do_syscall_64+0x4c/0xa0 [ 26.963291][ T474] ? clear_bhb_loop+0x30/0x80 [ 26.968007][ T474] ? clear_bhb_loop+0x30/0x80 [ 26.972703][ T474] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 26.978614][ T474] RIP: 0033:0x7f0e5639f559 [ 26.983034][ T474] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 27.002641][ T474] RSP: 002b:00007f0e57297028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 27.011375][ T474] RAX: ffffffffffffffda RBX: 00007f0e56625fa0 RCX: 00007f0e5639f559 [ 27.019358][ T474] RDX: 0000000000000094 RSI: 0000200000000040 RDI: 0000000000000005 [ 27.027335][ T474] RBP: 00007f0e57297090 R08: 0000000000000000 R09: 0000000000000000 [ 27.034215][ T475] syz.2.47: attempt to access beyond end of device [ 27.034215][ T475] loop2: rw=2049, sector=77824, nr_sectors = 4096 limit=40427 [ 27.049092][ T474] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 27.049106][ T474] R13: 00007f0e56626038 R14: 00007f0e56625fa0 R15: 00007ffc063887b8 [ 27.049124][ T474] [ 27.076717][ T475] syz.2.47: attempt to access beyond end of device [ 27.076717][ T475] loop2: rw=2049, sector=49152, nr_sectors = 632 limit=40427 [ 27.104056][ T478] loop0: detected capacity change from 0 to 16 [ 27.112623][ T478] erofs: (device loop0): mounted with root inode @ nid 36. [ 27.173479][ T471] loop4: detected capacity change from 0 to 40427 [ 27.188084][ T471] F2FS-fs (loop4): invalid crc value [ 27.196189][ T471] F2FS-fs (loop4): Found nat_bits in checkpoint [ 27.208569][ T8] kworker/u4:0: attempt to access beyond end of device [ 27.208569][ T8] loop2: rw=1, sector=49784, nr_sectors = 3112 limit=40427 [ 27.223839][ T8] kworker/u4:0: attempt to access beyond end of device [ 27.223839][ T8] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 27.283930][ T471] F2FS-fs (loop4): Start checkpoint disabled! [ 27.302176][ T481] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 27.312116][ T481] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -37 in[64, 4032] out[1851] [ 27.323069][ T481] erofs: (device loop0): z_erofs_read_folio: failed to read, err [-117] [ 27.332476][ T481] FAULT_INJECTION: forcing a failure. [ 27.332476][ T481] name failslab, interval 1, probability 0, space 0, times 0 [ 27.345126][ T481] CPU: 1 PID: 481 Comm: syz.0.58 Not tainted syzkaller #0 [ 27.352245][ T481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 27.362309][ T481] Call Trace: [ 27.365607][ T481] [ 27.368553][ T481] __dump_stack+0x21/0x24 [ 27.372895][ T481] dump_stack_lvl+0x110/0x170 [ 27.377580][ T481] ? __cfi_dump_stack_lvl+0x8/0x8 [ 27.382615][ T481] dump_stack+0x15/0x24 [ 27.386785][ T481] should_fail_ex+0x3bf/0x510 [ 27.391485][ T481] ? getname_flags+0xba/0x510 [ 27.396181][ T481] __should_failslab+0xac/0xf0 [ 27.400965][ T481] should_failslab+0x9/0x20 [ 27.405485][ T481] kmem_cache_alloc+0x3b/0x320 [ 27.410267][ T481] getname_flags+0xba/0x510 [ 27.414781][ T481] getname+0x19/0x20 [ 27.418679][ T481] do_sys_openat2+0xeb/0x820 [ 27.423280][ T481] ? do_sys_open+0xe0/0xe0 [ 27.427712][ T481] ? ksys_write+0x1fa/0x260 [ 27.432230][ T481] __x64_sys_openat+0x136/0x160 [ 27.437094][ T481] x64_sys_call+0x783/0x9a0 [ 27.441616][ T481] do_syscall_64+0x4c/0xa0 [ 27.446042][ T481] ? clear_bhb_loop+0x30/0x80 [ 27.450730][ T481] ? clear_bhb_loop+0x30/0x80 [ 27.455419][ T481] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 27.461320][ T481] RIP: 0033:0x7f0e5635fd8e [ 27.465740][ T481] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 27.485358][ T481] RSP: 002b:00007f0e57254ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 27.493780][ T481] RAX: ffffffffffffffda RBX: 00007f0e572556c0 RCX: 00007f0e5635fd8e [ 27.501758][ T481] RDX: 0000000000000002 RSI: 00007f0e57254f90 RDI: ffffffffffffff9c [ 27.509737][ T481] RBP: 00007f0e57255090 R08: 0000000000000000 R09: 0000000000000000 [ 27.517708][ T481] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 27.525685][ T481] R13: 00007f0e56626218 R14: 00007f0e56626180 R15: 00007ffc063887b8 [ 27.533696][ T481] [ 27.763140][ T481] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 27.772978][ T481] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -37 in[64, 4032] out[1851] [ 27.783900][ T481] erofs: (device loop0): z_erofs_read_folio: failed to read, err [-117] [ 27.877127][ T471] F2FS-fs (loop4): f2fs_disable_checkpoint() finish, err:0 [ 27.918118][ T399] syz.1.33 (399) used greatest stack depth: 21992 bytes left [ 27.939390][ T481] syz.0.58 (481) used greatest stack depth: 19240 bytes left [ 27.976243][ T471] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 28.164610][ T488] loop0: detected capacity change from 0 to 512 [ 28.409440][ T490] loop1: detected capacity change from 0 to 2048 [ 28.419748][ T488] EXT4-fs (loop0): Test dummy encryption mode enabled [ 28.467257][ T488] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 28.476837][ T490] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 28.499287][ T488] EXT4-fs error (device loop0): htree_dirblock_to_tree:1083: inode #2: comm syz.0.63: Directory hole found for htree leaf block 0 [ 28.544016][ T490] EXT4-fs (loop1): shut down requested (0) [ 28.573887][ T488] EXT4-fs (loop0): Remounting filesystem read-only [ 28.628155][ T490] EXT4-fs (loop1): unmounting filesystem. [ 28.680572][ T519] loop2: detected capacity change from 0 to 1024 [ 28.703772][ T519] EXT4-fs: Ignoring removed orlov option [ 28.735622][ T519] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 28.854366][ T529] loop3: detected capacity change from 0 to 512 [ 28.874605][ T533] FAULT_INJECTION: forcing a failure. [ 28.874605][ T533] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 28.887973][ T533] CPU: 0 PID: 533 Comm: syz.4.71 Not tainted syzkaller #0 [ 28.895120][ T533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 28.905195][ T533] Call Trace: [ 28.908472][ T533] [ 28.911404][ T533] __dump_stack+0x21/0x24 [ 28.915736][ T533] dump_stack_lvl+0x110/0x170 [ 28.920418][ T533] ? __cfi_dump_stack_lvl+0x8/0x8 [ 28.925444][ T533] dump_stack+0x15/0x24 [ 28.929605][ T533] should_fail_ex+0x3bf/0x510 [ 28.934282][ T533] should_fail+0xb/0x10 [ 28.938435][ T533] should_fail_usercopy+0x1a/0x20 [ 28.943461][ T533] _copy_from_user+0x1e/0xc0 [ 28.948062][ T533] __sys_bpf+0x2a0/0x850 [ 28.952324][ T533] ? bpf_link_show_fdinfo+0x330/0x330 [ 28.957736][ T533] ? __cfi_ksys_write+0x10/0x10 [ 28.962589][ T533] ? debug_smp_processor_id+0x17/0x20 [ 28.967966][ T533] __x64_sys_bpf+0x7c/0x90 [ 28.972412][ T533] x64_sys_call+0x488/0x9a0 [ 28.976929][ T533] do_syscall_64+0x4c/0xa0 [ 28.981355][ T533] ? clear_bhb_loop+0x30/0x80 [ 28.986038][ T533] ? clear_bhb_loop+0x30/0x80 [ 28.990719][ T533] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 28.996612][ T533] RIP: 0033:0x7f8cac99f559 [ 29.001029][ T533] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 29.020656][ T533] RSP: 002b:00007f8cad918028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 29.029085][ T533] RAX: ffffffffffffffda RBX: 00007f8cacc25fa0 RCX: 00007f8cac99f559 [ 29.037059][ T533] RDX: 0000000000000050 RSI: 0000200000000380 RDI: 000000000000000a [ 29.045035][ T533] RBP: 00007f8cad918090 R08: 0000000000000000 R09: 0000000000000000 [ 29.053010][ T533] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 29.061010][ T533] R13: 00007f8cacc26038 R14: 00007f8cacc25fa0 R15: 00007ffea1a170b8 [ 29.069000][ T533] [ 29.075926][ T529] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 29.092523][ T289] EXT4-fs (loop0): unmounting filesystem. [ 29.132056][ T536] loop4: detected capacity change from 0 to 16 [ 29.145021][ T536] erofs: (device loop4): mounted with root inode @ nid 36. [ 29.159518][ T529] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 29.185391][ T529] ext4 filesystem being mounted at /14/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 29.250542][ T547] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=7444 sclass=netlink_route_socket pid=547 comm=syz.0.79 [ 29.264394][ T547] loop0: detected capacity change from 0 to 16 [ 29.275696][ T547] erofs: (device loop0): mounted with root inode @ nid 36. [ 29.340899][ T286] EXT4-fs (loop3): unmounting filesystem. [ 29.370958][ T557] FAULT_INJECTION: forcing a failure. [ 29.370958][ T557] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 29.386387][ T557] CPU: 1 PID: 557 Comm: syz.3.83 Not tainted syzkaller #0 [ 29.393541][ T557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 29.403621][ T557] Call Trace: [ 29.406912][ T557] [ 29.409862][ T557] __dump_stack+0x21/0x24 [ 29.414225][ T557] dump_stack_lvl+0x110/0x170 [ 29.418913][ T557] ? __cfi_dump_stack_lvl+0x8/0x8 [ 29.423952][ T557] ? __kasan_kmalloc+0x95/0xb0 [ 29.428755][ T557] ? kvmalloc_node+0x28a/0x460 [ 29.433558][ T557] ? __kmalloc_node+0xb2/0x1e0 [ 29.438341][ T557] dump_stack+0x15/0x24 [ 29.442512][ T557] should_fail_ex+0x3bf/0x510 [ 29.447201][ T557] should_fail+0xb/0x10 [ 29.451389][ T557] should_fail_usercopy+0x1a/0x20 [ 29.456436][ T557] _copy_from_user+0x1e/0xc0 [ 29.461045][ T557] vmemdup_user+0x63/0xe0 [ 29.465392][ T557] map_get_next_key+0x222/0x4f0 [ 29.470299][ T557] ? security_bpf+0x93/0xb0 [ 29.474827][ T557] __sys_bpf+0x429/0x850 [ 29.479093][ T557] ? bpf_link_show_fdinfo+0x330/0x330 [ 29.484480][ T557] ? __cfi_ksys_write+0x10/0x10 [ 29.489344][ T557] ? debug_smp_processor_id+0x17/0x20 [ 29.494747][ T557] __x64_sys_bpf+0x7c/0x90 [ 29.499174][ T557] x64_sys_call+0x488/0x9a0 [ 29.503701][ T557] do_syscall_64+0x4c/0xa0 [ 29.508134][ T557] ? clear_bhb_loop+0x30/0x80 [ 29.512841][ T557] ? clear_bhb_loop+0x30/0x80 [ 29.517550][ T557] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 29.523467][ T557] RIP: 0033:0x7fb2bf39f559 [ 29.527904][ T557] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 29.547523][ T557] RSP: 002b:00007fb2c033e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 29.555947][ T557] RAX: ffffffffffffffda RBX: 00007fb2bf625fa0 RCX: 00007fb2bf39f559 [ 29.563918][ T557] RDX: 0000000000000020 RSI: 0000200000000300 RDI: 0000000000000004 [ 29.571885][ T557] RBP: 00007fb2c033e090 R08: 0000000000000000 R09: 0000000000000000 [ 29.579852][ T557] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 29.587817][ T557] R13: 00007fb2bf626038 R14: 00007fb2bf625fa0 R15: 00007ffc0dcd7168 [ 29.595790][ T557] [ 29.598994][ T292] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 29.664840][ T28] kauditd_printk_skb: 45 callbacks suppressed [ 29.664853][ T28] audit: type=1400 audit(1792956485.441:211): avc: denied { append } for pid=571 comm="syz.3.90" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 29.699563][ T288] EXT4-fs (loop2): unmounting filesystem. [ 29.732335][ T28] audit: type=1400 audit(1792956485.511:212): avc: denied { mount } for pid=578 comm="syz.2.93" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 29.769972][ T581] loop3: detected capacity change from 0 to 512 [ 29.780254][ T581] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: inode #2: comm syz.3.94: missing EA_INODE flag [ 29.789515][ T292] usb 2-1: config 0 interface 0 altsetting 12 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 29.796680][ T583] loop2: detected capacity change from 0 to 512 [ 29.802924][ T292] usb 2-1: config 0 interface 0 altsetting 12 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 29.809348][ T313] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 29.822190][ T581] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.94: error while reading EA inode 2 err=-117 [ 29.841657][ T292] usb 2-1: config 0 interface 0 has no altsetting 0 [ 29.845182][ T583] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 29.848522][ T292] usb 2-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00 [ 29.865700][ T581] EXT4-fs (loop3): 1 orphan inode deleted [ 29.871616][ T581] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 29.886000][ T292] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 29.892668][ T583] EXT4-fs (loop2): invalid journal inode [ 29.899717][ T583] EXT4-fs (loop2): can't get journal size [ 29.899719][ T292] usb 2-1: config 0 descriptor?? [ 29.900157][ T538] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 29.907074][ T583] EXT4-fs error (device loop2): ext4_protect_reserved_inode:182: inode #2: comm syz.2.93: blocks 4-4 from inode overlap system zone [ 29.931417][ T583] EXT4-fs (loop2): Remounting filesystem read-only [ 29.937954][ T583] EXT4-fs (loop2): failed to initialize system zone (-117) [ 29.945771][ T583] EXT4-fs (loop2): mount failed [ 29.996039][ T286] EXT4-fs (loop3): unmounting filesystem. [ 30.033373][ T590] FAULT_INJECTION: forcing a failure. [ 30.033373][ T590] name failslab, interval 1, probability 0, space 0, times 0 [ 30.047017][ T590] CPU: 1 PID: 590 Comm: syz.3.97 Not tainted syzkaller #0 [ 30.051268][ T313] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 30.054162][ T590] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 30.054175][ T590] Call Trace: [ 30.054181][ T590] [ 30.075833][ T313] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 30.078352][ T590] __dump_stack+0x21/0x24 [ 30.081401][ T313] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 30.092127][ T590] dump_stack_lvl+0x110/0x170 [ 30.092149][ T590] ? __cfi_dump_stack_lvl+0x8/0x8 [ 30.092165][ T590] ? avc_has_perm+0x163/0x250 [ 30.096730][ T313] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 30.106190][ T590] dump_stack+0x15/0x24 [ 30.106210][ T590] should_fail_ex+0x3bf/0x510 [ 30.106229][ T590] __should_failslab+0xac/0xf0 [ 30.106251][ T590] should_failslab+0x9/0x20 [ 30.106269][ T590] __kmem_cache_alloc_node+0x3d/0x2d0 [ 30.106291][ T590] ? __get_vm_area_node+0x12c/0x360 [ 30.106310][ T590] ? __get_vm_area_node+0x12c/0x360 [ 30.121787][ T313] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 30.133572][ T590] kmalloc_node_trace+0x26/0xb0 [ 30.133596][ T590] __get_vm_area_node+0x12c/0x360 [ 30.137948][ T313] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 30.142429][ T590] __vmalloc_node_range+0x326/0x1440 [ 30.142451][ T590] ? bpf_prog_alloc_no_stats+0x3e/0x3f0 [ 30.147227][ T313] usb 5-1: Manufacturer: syz [ 30.151688][ T590] ? __cfi_avc_has_perm_noaudit+0x10/0x10 [ 30.151712][ T590] ? __stack_depot_save+0x36/0x490 [ 30.151736][ T590] ? selinux_capable+0x2b6/0x3b0 [ 30.225452][ T590] ? _parse_integer_limit+0x18e/0x1d0 [ 30.230849][ T590] ? __cfi___vmalloc_node_range+0x10/0x10 [ 30.236568][ T590] ? avc_has_perm_noaudit+0x390/0x490 [ 30.241938][ T590] ? avc_has_perm_noaudit+0x390/0x490 [ 30.247324][ T590] ? bpf_prog_alloc_no_stats+0x3e/0x3f0 [ 30.252878][ T590] __vmalloc+0x79/0x90 [ 30.256944][ T590] ? bpf_prog_alloc_no_stats+0x3e/0x3f0 [ 30.262488][ T590] bpf_prog_alloc_no_stats+0x3e/0x3f0 [ 30.267871][ T590] bpf_prog_alloc+0x21/0x1c0 [ 30.272464][ T590] bpf_prog_load+0x811/0x1670 [ 30.277139][ T590] ? map_freeze+0x3a0/0x3a0 [ 30.281645][ T590] ? selinux_bpf+0xc7/0xf0 [ 30.286072][ T590] ? security_bpf+0x93/0xb0 [ 30.290568][ T590] __sys_bpf+0x57b/0x850 [ 30.294810][ T590] ? bpf_link_show_fdinfo+0x330/0x330 [ 30.300183][ T590] ? __cfi_ksys_write+0x10/0x10 [ 30.305032][ T590] ? do_user_addr_fault+0x9a5/0x1030 [ 30.310318][ T590] ? debug_smp_processor_id+0x17/0x20 [ 30.315701][ T590] __x64_sys_bpf+0x7c/0x90 [ 30.320111][ T590] x64_sys_call+0x488/0x9a0 [ 30.324614][ T590] do_syscall_64+0x4c/0xa0 [ 30.329028][ T590] ? clear_bhb_loop+0x30/0x80 [ 30.333705][ T590] ? clear_bhb_loop+0x30/0x80 [ 30.338382][ T590] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 30.344278][ T590] RIP: 0033:0x7fb2bf39f559 [ 30.348731][ T590] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 30.368330][ T590] RSP: 002b:00007fb2c033e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 30.376741][ T590] RAX: ffffffffffffffda RBX: 00007fb2bf625fa0 RCX: 00007fb2bf39f559 [ 30.384716][ T590] RDX: 0000000000000094 RSI: 0000200000000400 RDI: 0000000000000005 [ 30.392688][ T590] RBP: 00007fb2c033e090 R08: 0000000000000000 R09: 0000000000000000 [ 30.400653][ T590] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 30.408616][ T590] R13: 00007fb2bf626038 R14: 00007fb2bf625fa0 R15: 00007ffc0dcd7168 [ 30.416600][ T590] [ 30.421103][ T313] usb 5-1: config 0 descriptor?? [ 30.430786][ T28] audit: type=1400 audit(1792956486.198:213): avc: denied { name_bind } for pid=591 comm="syz.0.98" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 30.452762][ T538] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 30.465440][ T538] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 30.475770][ T597] FAULT_INJECTION: forcing a failure. [ 30.475770][ T597] name failslab, interval 1, probability 0, space 0, times 0 [ 30.478100][ T28] audit: type=1400 audit(1792956486.248:214): avc: denied { create } for pid=594 comm="syz.3.99" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 30.488902][ T597] CPU: 1 PID: 597 Comm: syz.0.100 Not tainted syzkaller #0 [ 30.508230][ T28] audit: type=1400 audit(1792956486.248:215): avc: denied { read } for pid=594 comm="syz.3.99" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 30.514735][ T597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 30.514746][ T597] Call Trace: [ 30.514751][ T597] [ 30.514757][ T597] __dump_stack+0x21/0x24 [ 30.545684][ T28] audit: type=1400 audit(1792956486.268:216): avc: denied { write } for pid=594 comm="syz.3.99" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 30.546976][ T597] dump_stack_lvl+0x110/0x170 [ 30.577889][ T597] ? __cfi_dump_stack_lvl+0x8/0x8 [ 30.582927][ T597] ? kasan_set_track+0x60/0x70 [ 30.587717][ T597] ? kasan_save_alloc_info+0x1f/0x30 [ 30.593031][ T597] ? __kasan_slab_alloc+0x72/0x80 [ 30.598083][ T597] ? slab_post_alloc_hook+0x4f/0x2d0 [ 30.603388][ T597] ? security_inode_alloc+0x33/0x120 [ 30.608700][ T597] ? inode_init_always+0x6ee/0x950 [ 30.613833][ T597] dump_stack+0x15/0x24 [ 30.618007][ T597] should_fail_ex+0x3bf/0x510 [ 30.622697][ T597] __should_failslab+0xac/0xf0 [ 30.627480][ T597] should_failslab+0x9/0x20 [ 30.631996][ T597] kmem_cache_alloc_node+0x42/0x330 [ 30.632709][ T313] appleir 0003:05AC:8243.0001: unknown main item tag 0x0 [ 30.637210][ T597] ? __alloc_skb+0xe8/0x4a0 [ 30.648736][ T597] __alloc_skb+0xe8/0x4a0 [ 30.651861][ T313] appleir 0003:05AC:8243.0001: No inputs registered, leaving [ 30.653081][ T597] alloc_skb_with_frags+0xa8/0x620 [ 30.665564][ T597] ? memcpy+0x56/0x70 [ 30.669569][ T597] sock_alloc_send_pskb+0x87f/0x9a0 [ 30.674787][ T597] ? __cfi_sock_alloc_send_pskb+0x10/0x10 [ 30.676496][ T313] appleir 0003:05AC:8243.0001: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 30.680531][ T597] ? __kasan_check_write+0x14/0x20 [ 30.680553][ T597] ? _raw_spin_lock+0x94/0xf0 [ 30.701401][ T597] ? __cfi__raw_spin_lock+0x10/0x10 [ 30.706613][ T597] unix_dgram_sendmsg+0x5c1/0x1710 [ 30.711742][ T597] ? selinux_socket_sendmsg+0x22f/0x340 [ 30.712918][ T538] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 30.717298][ T597] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 30.731757][ T597] ? __cfi_selinux_socket_sendmsg+0x10/0x10 [ 30.737695][ T597] ? __cfi_unix_dgram_sendmsg+0x10/0x10 [ 30.740685][ T538] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 30.743257][ T597] ? stack_trace_save+0xa6/0xf0 [ 30.755822][ T597] ? __stack_depot_save+0x36/0x490 [ 30.760977][ T597] ? security_socket_sendmsg+0x93/0xb0 [ 30.766453][ T597] ? __cfi_unix_dgram_sendmsg+0x10/0x10 [ 30.772022][ T597] ____sys_sendmsg+0x5fb/0x9c0 [ 30.776814][ T597] ? __sys_sendmsg_sock+0x40/0x40 [ 30.781848][ T597] ? import_iovec+0x7c/0xb0 [ 30.786364][ T597] ___sys_sendmsg+0x2a2/0x360 [ 30.791067][ T597] ? __sys_sendmsg+0x290/0x290 [ 30.795845][ T597] ? __kasan_check_write+0x14/0x20 [ 30.800982][ T597] ? proc_fail_nth_write+0x180/0x200 [ 30.806297][ T597] ? vfs_write+0xa51/0xd00 [ 30.810743][ T597] ? __fdget+0x19c/0x220 [ 30.815007][ T597] __x64_sys_sendmsg+0x20d/0x2e0 [ 30.819970][ T597] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 30.825447][ T597] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 30.831529][ T597] x64_sys_call+0x171/0x9a0 [ 30.836067][ T597] do_syscall_64+0x4c/0xa0 [ 30.840493][ T597] ? clear_bhb_loop+0x30/0x80 [ 30.845197][ T597] ? clear_bhb_loop+0x30/0x80 [ 30.849888][ T597] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 30.855808][ T597] RIP: 0033:0x7f0e5639f559 [ 30.860230][ T597] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 30.879843][ T597] RSP: 002b:00007f0e57297028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 30.888293][ T597] RAX: ffffffffffffffda RBX: 00007f0e56625fa0 RCX: 00007f0e5639f559 [ 30.896300][ T597] RDX: 0000000020000000 RSI: 0000200000000100 RDI: 0000000000000006 [ 30.904276][ T597] RBP: 00007f0e57297090 R08: 0000000000000000 R09: 0000000000000000 [ 30.912255][ T597] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 30.920232][ T597] R13: 00007f0e56626038 R14: 00007f0e56625fa0 R15: 00007ffc063887b8 [ 30.928228][ T597] [ 30.938426][ T292] belkin 0003:1020:0006.0002: ignoring exceeding usage max [ 30.945051][ T28] audit: type=1400 audit(1792956486.716:217): avc: denied { unmount } for pid=288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 30.979514][ T292] belkin 0003:1020:0006.0002: No inputs registered, leaving [ 30.991273][ T292] belkin 0003:1020:0006.0002: hidraw1: USB HID v0.11 Joystick [HID 1020:0006] on usb-dummy_hcd.1-1/input0 [ 31.019621][ T617] FAULT_INJECTION: forcing a failure. [ 31.019621][ T617] name failslab, interval 1, probability 0, space 0, times 0 [ 31.036237][ T617] CPU: 1 PID: 617 Comm: syz.2.104 Not tainted syzkaller #0 [ 31.043495][ T617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 31.053574][ T617] Call Trace: [ 31.056874][ T617] [ 31.059830][ T617] __dump_stack+0x21/0x24 [ 31.064198][ T617] dump_stack_lvl+0x110/0x170 [ 31.068906][ T617] ? __cfi_dump_stack_lvl+0x8/0x8 [ 31.073964][ T617] ? _parse_integer_limit+0x18e/0x1d0 [ 31.079363][ T617] dump_stack+0x15/0x24 [ 31.083550][ T617] should_fail_ex+0x3bf/0x510 [ 31.088243][ T617] __should_failslab+0xac/0xf0 [ 31.093080][ T617] should_failslab+0x9/0x20 [ 31.097631][ T617] __kmem_cache_alloc_node+0x3d/0x2d0 [ 31.103039][ T617] ? bpf_prog_test_run_skb+0x230/0x18a0 [ 31.108637][ T617] ? __cfi_avc_has_perm_noaudit+0x10/0x10 [ 31.114387][ T617] ? kstrtouint_from_user+0x113/0x170 [ 31.119818][ T617] ? bpf_prog_test_run_skb+0x230/0x18a0 [ 31.125397][ T617] __kmalloc+0xa4/0x1e0 [ 31.128659][ T28] audit: type=1400 audit(1792956486.865:218): avc: denied { read write } for pid=619 comm="syz.0.105" name="vhost-vsock" dev="devtmpfs" ino=268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 31.129577][ T617] bpf_prog_test_run_skb+0x230/0x18a0 [ 31.158639][ T620] incfs: Error accessing: ./file0. [ 31.158720][ T617] ? __fget_files+0x2d1/0x330 [ 31.164102][ T620] incfs: mount failed -2 [ 31.168490][ T617] ? __kasan_check_write+0x14/0x20 [ 31.168513][ T617] ? __cfi_bpf_prog_test_run_skb+0x10/0x10 [ 31.183624][ T617] bpf_prog_test_run+0x3b4/0x5c0 [ 31.188352][ T28] audit: type=1400 audit(1792956486.865:219): avc: denied { open } for pid=619 comm="syz.0.105" path="/dev/vhost-vsock" dev="devtmpfs" ino=268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 31.188574][ T617] ? bpf_prog_query+0x270/0x270 [ 31.217111][ T617] ? selinux_bpf+0xce/0xf0 [ 31.217871][ T538] netlink: 104 bytes leftover after parsing attributes in process `syz.1.75'. [ 31.221570][ T617] ? security_bpf+0x93/0xb0 [ 31.221592][ T617] __sys_bpf+0x5ee/0x850 [ 31.230660][ T28] audit: type=1400 audit(1792956486.935:220): avc: denied { write } for pid=619 comm="syz.0.105" path="socket:[16877]" dev="sockfs" ino=16877 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 31.234911][ T617] ? bpf_link_show_fdinfo+0x330/0x330 [ 31.234936][ T617] ? __cfi_ksys_write+0x10/0x10 [ 31.244056][ T313] usb 2-1: USB disconnect, device number 3 [ 31.262250][ T617] ? debug_smp_processor_id+0x17/0x20 [ 31.262287][ T617] __x64_sys_bpf+0x7c/0x90 [ 31.288065][ T617] x64_sys_call+0x488/0x9a0 [ 31.292583][ T617] do_syscall_64+0x4c/0xa0 [ 31.297007][ T617] ? clear_bhb_loop+0x30/0x80 [ 31.301678][ T617] ? clear_bhb_loop+0x30/0x80 [ 31.306352][ T617] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 31.312251][ T617] RIP: 0033:0x7ff2df39f559 [ 31.316681][ T617] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 31.336293][ T617] RSP: 002b:00007ff2e01ae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 31.344721][ T617] RAX: ffffffffffffffda RBX: 00007ff2df625fa0 RCX: 00007ff2df39f559 [ 31.352696][ T617] RDX: 0000000000000050 RSI: 0000200000000ec0 RDI: 000000000000000a [ 31.360702][ T617] RBP: 00007ff2e01ae090 R08: 0000000000000000 R09: 0000000000000000 [ 31.368678][ T617] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 31.376652][ T617] R13: 00007ff2df626038 R14: 00007ff2df625fa0 R15: 00007ffccdf09f38 [ 31.384640][ T617] [ 31.410925][ T630] netlink: 48 bytes leftover after parsing attributes in process `syz.3.108'. [ 31.421898][ T630] 9pnet_virtio: no channels available for device [ 31.438866][ T632] loop2: detected capacity change from 0 to 513 [ 31.542525][ T638] netlink: 4 bytes leftover after parsing attributes in process `syz.3.108'. [ 31.554880][ T640] FAULT_INJECTION: forcing a failure. [ 31.554880][ T640] name failslab, interval 1, probability 0, space 0, times 0 [ 31.567573][ T640] CPU: 1 PID: 640 Comm: syz.0.110 Not tainted syzkaller #0 [ 31.574785][ T640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 31.584859][ T640] Call Trace: [ 31.588141][ T640] [ 31.591061][ T640] __dump_stack+0x21/0x24 [ 31.595380][ T640] dump_stack_lvl+0x110/0x170 [ 31.600045][ T640] ? __cfi_dump_stack_lvl+0x8/0x8 [ 31.605053][ T640] ? avc_has_perm+0x163/0x250 [ 31.609746][ T640] dump_stack+0x15/0x24 [ 31.613890][ T640] should_fail_ex+0x3bf/0x510 [ 31.618561][ T640] __should_failslab+0xac/0xf0 [ 31.623341][ T640] should_failslab+0x9/0x20 [ 31.627831][ T640] __kmem_cache_alloc_node+0x3d/0x2d0 [ 31.633201][ T640] ? __get_vm_area_node+0x12c/0x360 [ 31.638405][ T640] ? __get_vm_area_node+0x12c/0x360 [ 31.643627][ T640] kmalloc_node_trace+0x26/0xb0 [ 31.648469][ T640] __get_vm_area_node+0x12c/0x360 [ 31.653485][ T640] __vmalloc_node_range+0x326/0x1440 [ 31.658764][ T640] ? bpf_prog_alloc_no_stats+0x3e/0x3f0 [ 31.664328][ T640] ? __cfi_avc_has_perm_noaudit+0x10/0x10 [ 31.670072][ T640] ? __stack_depot_save+0x36/0x490 [ 31.675193][ T640] ? selinux_capable+0x2b6/0x3b0 [ 31.680144][ T640] ? _parse_integer_limit+0x18e/0x1d0 [ 31.685509][ T640] ? __cfi___vmalloc_node_range+0x10/0x10 [ 31.691221][ T640] ? avc_has_perm_noaudit+0x390/0x490 [ 31.696584][ T640] ? avc_has_perm_noaudit+0x390/0x490 [ 31.701958][ T640] ? bpf_prog_alloc_no_stats+0x3e/0x3f0 [ 31.707501][ T640] __vmalloc+0x79/0x90 [ 31.711569][ T640] ? bpf_prog_alloc_no_stats+0x3e/0x3f0 [ 31.717109][ T640] bpf_prog_alloc_no_stats+0x3e/0x3f0 [ 31.722496][ T640] bpf_prog_alloc+0x21/0x1c0 [ 31.727077][ T640] bpf_prog_load+0x811/0x1670 [ 31.731760][ T640] ? map_freeze+0x3a0/0x3a0 [ 31.736259][ T640] ? selinux_bpf+0xc7/0xf0 [ 31.740676][ T640] ? security_bpf+0x93/0xb0 [ 31.745174][ T640] __sys_bpf+0x57b/0x850 [ 31.749429][ T640] ? bpf_link_show_fdinfo+0x330/0x330 [ 31.754789][ T640] ? __cfi_ksys_write+0x10/0x10 [ 31.759630][ T640] ? debug_smp_processor_id+0x17/0x20 [ 31.765003][ T640] __x64_sys_bpf+0x7c/0x90 [ 31.769408][ T640] x64_sys_call+0x488/0x9a0 [ 31.773905][ T640] do_syscall_64+0x4c/0xa0 [ 31.778305][ T640] ? clear_bhb_loop+0x30/0x80 [ 31.782978][ T640] ? clear_bhb_loop+0x30/0x80 [ 31.787677][ T640] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 31.793586][ T640] RIP: 0033:0x7f0e5639f559 [ 31.798006][ T640] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 31.817625][ T640] RSP: 002b:00007f0e57297028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 31.826053][ T640] RAX: ffffffffffffffda RBX: 00007f0e56625fa0 RCX: 00007f0e5639f559 [ 31.834041][ T640] RDX: 0000000000000094 RSI: 0000200000002e80 RDI: 0000000000000005 [ 31.842036][ T640] RBP: 00007f0e57297090 R08: 0000000000000000 R09: 0000000000000000 [ 31.850023][ T640] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 31.858002][ T640] R13: 00007f0e56626038 R14: 00007f0e56625fa0 R15: 00007ffc063887b8 [ 31.865997][ T640] [ 31.875463][ T634] ================================================================== [ 31.883628][ T634] BUG: KASAN: use-after-free in rcu_segcblist_enqueue+0x9c/0xb0 [ 31.891282][ T634] Write of size 8 at addr ffff88810f927590 by task syz.0.107/634 [ 31.898995][ T634] [ 31.901304][ T634] CPU: 1 PID: 634 Comm: syz.0.107 Not tainted syzkaller #0 [ 31.908507][ T634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 31.918586][ T634] Call Trace: [ 31.921900][ T634] [ 31.924837][ T634] __dump_stack+0x21/0x24 [ 31.929166][ T634] dump_stack_lvl+0x110/0x170 [ 31.933857][ T634] ? __cfi_dump_stack_lvl+0x8/0x8 [ 31.938876][ T634] ? rcu_segcblist_enqueue+0x9c/0xb0 [ 31.944201][ T634] print_address_description+0x71/0x200 [ 31.949771][ T634] print_report+0x4a/0x60 [ 31.954108][ T634] kasan_report+0x122/0x150 [ 31.958618][ T634] ? rcu_segcblist_enqueue+0x9c/0xb0 [ 31.963903][ T634] __asan_report_store8_noabort+0x17/0x20 [ 31.969617][ T634] rcu_segcblist_enqueue+0x9c/0xb0 [ 31.974727][ T634] call_rcu+0x554/0xf50 [ 31.978881][ T634] ? __cfi_call_rcu+0x10/0x10 [ 31.983558][ T634] ? __kasan_check_write+0x14/0x20 [ 31.988659][ T634] ? selinux_inode_free_security+0x21f/0x230 [ 31.994648][ T634] security_inode_free+0xc5/0xe0 [ 31.999593][ T634] __destroy_inode+0x175/0x500 [ 32.004357][ T634] evict+0x777/0x8c0 [ 32.008256][ T634] ? proc_nr_inodes+0x2f0/0x2f0 [ 32.013108][ T634] ? _raw_spin_lock+0x94/0xf0 [ 32.017780][ T634] ? __cfi__raw_spin_lock+0x10/0x10 [ 32.022981][ T634] ? preempt_schedule+0xbc/0xd0 [ 32.027841][ T634] ? __cfi_preempt_schedule+0x10/0x10 [ 32.033225][ T634] ? __kasan_check_write+0x14/0x20 [ 32.038348][ T634] iput+0x633/0x690 [ 32.042162][ T634] dentry_unlink_inode+0x346/0x3f0 [ 32.047274][ T634] __dentry_kill+0x46c/0x680 [ 32.051883][ T634] dentry_kill+0xc0/0x2a0 [ 32.056228][ T634] dput+0x42/0x80 [ 32.059866][ T634] __fput+0x5c0/0x8f0 [ 32.063863][ T634] ____fput+0x15/0x20 [ 32.067851][ T634] task_work_run+0x1e1/0x250 [ 32.072448][ T634] ? __cfi_task_work_run+0x10/0x10 [ 32.077560][ T634] ? __kasan_check_write+0x14/0x20 [ 32.082666][ T634] do_exit+0xb0d/0x29f0 [ 32.086827][ T634] ? __cfi_do_exit+0x10/0x10 [ 32.091423][ T634] ? xfd_validate_state+0x70/0x150 [ 32.096550][ T634] ? __kasan_check_write+0x14/0x20 [ 32.101662][ T634] __x64_sys_exit+0x40/0x40 [ 32.106183][ T634] x64_sys_call+0x67/0x9a0 [ 32.110607][ T634] do_syscall_64+0x4c/0xa0 [ 32.115023][ T634] ? clear_bhb_loop+0x30/0x80 [ 32.119710][ T634] ? clear_bhb_loop+0x30/0x80 [ 32.124389][ T634] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 32.130278][ T634] RIP: 0033:0x7f0e5639f559 [ 32.134692][ T634] Code: Unable to access opcode bytes at 0x7f0e5639f52f. [ 32.141702][ T634] RSP: 002b:00007f0e57296fd8 EFLAGS: 00000246 ORIG_RAX: 000000000000003c [ 32.150114][ T634] RAX: ffffffffffffffda RBX: 00007f0e56625fa0 RCX: 00007f0e5639f559 [ 32.158084][ T634] RDX: 00007f0e572979c8 RSI: 0000000000000000 RDI: 0000000000000000 [ 32.166050][ T634] RBP: 00007f0e56436b20 R08: 0000000000000000 R09: 0000000000000000 [ 32.174019][ T634] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 32.181995][ T634] R13: 00007f0e56626038 R14: 00007f0e56625fa0 R15: 00007ffc063887b8 [ 32.189982][ T634] [ 32.192999][ T634] [ 32.195339][ T634] Allocated by task 629: [ 32.199580][ T634] kasan_set_track+0x4b/0x70 [ 32.204186][ T634] kasan_save_alloc_info+0x1f/0x30 [ 32.209315][ T634] __kasan_kmalloc+0x95/0xb0 [ 32.213918][ T634] __kmalloc+0xb4/0x1e0 [ 32.218087][ T634] l2tp_session_create+0x38/0xbd0 [ 32.223127][ T634] pppol2tp_connect+0xbf5/0x1640 [ 32.228069][ T634] __sys_connect+0x3da/0x460 [ 32.232664][ T634] __x64_sys_connect+0x7a/0x90 [ 32.237427][ T634] x64_sys_call+0x88d/0x9a0 [ 32.241927][ T634] do_syscall_64+0x4c/0xa0 [ 32.246341][ T634] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 32.252243][ T634] [ 32.254574][ T634] Freed by task 8: [ 32.258304][ T634] kasan_set_track+0x4b/0x70 [ 32.262911][ T634] kasan_save_free_info+0x2b/0x40 [ 32.267953][ T634] ____kasan_slab_free+0x132/0x180 [ 32.273090][ T634] __kasan_slab_free+0x11/0x20 [ 32.277865][ T634] slab_free_freelist_hook+0xc2/0x190 [ 32.283244][ T634] __kmem_cache_free+0xb7/0x1b0 [ 32.288112][ T634] kfree+0x6f/0xf0 [ 32.291844][ T634] l2tp_session_put+0xaf/0x1a0 [ 32.296619][ T634] l2tp_session_delete+0x3df/0x4d0 [ 32.301756][ T634] l2tp_tunnel_del_work+0x199/0x410 [ 32.306952][ T634] process_one_work+0x717/0xc30 [ 32.311809][ T634] worker_thread+0xa4d/0x11d0 [ 32.316495][ T634] kthread+0x281/0x320 [ 32.320560][ T634] ret_from_fork+0x1f/0x30 [ 32.324972][ T634] [ 32.327300][ T634] Last potentially related work creation: [ 32.333003][ T634] kasan_save_stack+0x3a/0x60 [ 32.337680][ T634] __kasan_record_aux_stack+0xb6/0xc0 [ 32.343047][ T634] kasan_record_aux_stack_noalloc+0xb/0x10 [ 32.348848][ T634] call_rcu+0xcf/0xf50 [ 32.352920][ T634] pppol2tp_release+0x1e3/0x2b0 [ 32.357771][ T634] sock_close+0xc9/0x220 [ 32.362012][ T634] __fput+0x1fd/0x8f0 [ 32.365997][ T634] ____fput+0x15/0x20 [ 32.369997][ T634] task_work_run+0x1e1/0x250 [ 32.374588][ T634] do_exit+0xb0d/0x29f0 [ 32.378754][ T634] __cfi___ia32_sys_exit+0x0/0x10 [ 32.383792][ T634] x64_sys_call+0x67/0x9a0 [ 32.388213][ T634] do_syscall_64+0x4c/0xa0 [ 32.392630][ T634] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 32.398518][ T634] [ 32.400835][ T634] The buggy address belongs to the object at ffff88810f927400 [ 32.400835][ T634] which belongs to the cache kmalloc-512 of size 512 [ 32.414880][ T634] The buggy address is located 400 bytes inside of [ 32.414880][ T634] 512-byte region [ffff88810f927400, ffff88810f927600) [ 32.428164][ T634] [ 32.430481][ T634] The buggy address belongs to the physical page: [ 32.436884][ T634] page:ffffea00043e4900 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x10f924 [ 32.447135][ T634] head:ffffea00043e4900 order:2 compound_mapcount:0 compound_pincount:0 [ 32.455450][ T634] flags: 0x4000000000010200(slab|head|zone=1) [ 32.461521][ T634] raw: 4000000000010200 0000000000000000 dead000000000122 ffff888100042f00 [ 32.470098][ T634] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 32.478675][ T634] page dumped because: kasan: bad access detected [ 32.485083][ T634] page_owner tracks the page as allocated [ 32.490790][ T634] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 91, tgid 91 (klogd), ts 31388709591, free_ts 21102076237 [ 32.512586][ T634] post_alloc_hook+0x1f5/0x210 [ 32.517357][ T634] prep_new_page+0x1c/0x110 [ 32.521866][ T634] get_page_from_freelist+0x2ca9/0x2d20 [ 32.527413][ T634] __alloc_pages+0x1fa/0x610 [ 32.532006][ T634] alloc_slab_page+0x6e/0xf0 [ 32.536601][ T634] new_slab+0x98/0x3e0 [ 32.540676][ T634] ___slab_alloc+0x70f/0xb70 [ 32.545268][ T634] __slab_alloc+0x5e/0xa0 [ 32.549605][ T634] __kmem_cache_alloc_node+0x204/0x2d0 [ 32.555073][ T634] __kmalloc_node_track_caller+0xa1/0x1e0 [ 32.560802][ T634] __alloc_skb+0x226/0x4a0 [ 32.565230][ T634] alloc_skb_with_frags+0xa8/0x620 [ 32.570343][ T634] sock_alloc_send_pskb+0x87f/0x9a0 [ 32.575537][ T634] unix_dgram_sendmsg+0x5c1/0x1710 [ 32.580645][ T634] __sys_sendto+0x4ac/0x660 [ 32.585152][ T634] __x64_sys_sendto+0xe5/0x100 [ 32.589923][ T634] page last free stack trace: [ 32.594587][ T634] free_unref_page_prepare+0x81b/0x820 [ 32.600049][ T634] free_unref_page+0x93/0x530 [ 32.604727][ T634] __free_pages+0x67/0x100 [ 32.609144][ T634] __free_slab+0xc7/0x1a0 [ 32.613468][ T634] discard_slab+0x29/0x40 [ 32.617794][ T634] __slab_free+0x201/0x280 [ 32.622218][ T634] ___cache_free+0xbf/0xd0 [ 32.626632][ T634] qlist_free_all+0xc6/0x140 [ 32.631226][ T634] kasan_quarantine_reduce+0x14a/0x170 [ 32.636695][ T634] __kasan_slab_alloc+0x24/0x80 [ 32.641559][ T634] slab_post_alloc_hook+0x4f/0x2d0 [ 32.646672][ T634] kmem_cache_alloc_node+0x179/0x330 [ 32.651956][ T634] __alloc_skb+0xe8/0x4a0 [ 32.656295][ T634] netlink_ack+0x373/0x1160 [ 32.660804][ T634] netlink_rcv_skb+0x27e/0x450 [ 32.665565][ T634] rtnetlink_rcv+0x1c/0x20 [ 32.669993][ T634] [ 32.672312][ T634] Memory state around the buggy address: [ 32.677930][ T634] ffff88810f927480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 32.685981][ T634] ffff88810f927500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 32.694035][ T634] >ffff88810f927580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 32.702085][ T634] ^ [ 32.706669][ T634] ffff88810f927600: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 32.714730][ T634] ffff88810f927680: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 32.722783][ T634] ================================================================== [ 32.730834][ T634] Disabling lock debugging due to kernel taint [ 32.799417][ T19] usb 5-1: reset high-speed USB device number 2 using dummy_hcd [ 32.809568][ T313] usb 2-1: new low-speed USB device number 4 using dummy_hcd [ 32.991220][ T313] usb 2-1: config 1 interface 0 altsetting 10 endpoint 0x1 is Bulk; changing to Interrupt [ 33.001196][ T313] usb 2-1: config 1 interface 0 altsetting 10 endpoint 0x82 is Bulk; changing to Interrupt [ 33.011332][ T313] usb 2-1: config 1 interface 0 has no altsetting 0 [ 33.019933][ T313] usb 2-1: string descriptor 0 read error: -22 [ 33.026170][ T313] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 33.035242][ T313] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.044239][ T644] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 33.051482][ T644] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 33.261236][ T313] usb 2-1: USB disconnect, device number 4 [ 33.622733][ T6] usb 5-1: USB disconnect, device number 2