last executing test programs: 11.138200958s ago: executing program 2 (id=1128): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1d, 0x4, &(0x7f0000000040)=ANY=[@ANYRESDEC], 0x0, 0x4, 0xd0, &(0x7f0000000600)=""/208, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x6}, 0x8, 0x10, &(0x7f0000000000)={0xfffffffe, 0x4, 0x4, 0x6}, 0x10}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1f00000004000000ff7fffffb60000004e84b5e3", @ANYRES32, @ANYBLOB="fdffffff0700"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000050008000100"/20, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB], 0x50) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), r2) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x20, &(0x7f0000000580), &(0x7f00000005c0)=0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'vxcan0\x00'}) r3 = epoll_create1(0x0) r4 = epoll_create1(0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYRESOCT=r5], 0x48) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) syz_usb_connect$cdc_ncm(0x6, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000100)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r6, &(0x7f0000000400)={0xa}) epoll_pwait(r3, &(0x7f0000000080)=[{}], 0x1, 0x4c6, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="183dec761cc45afe8e000000000000519500080000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x1}, 0x94) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r2, &(0x7f00000004c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4048014}, 0x80) prlimit64(0x0, 0xe, 0x0, 0x0) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r8, 0xc0502100, &(0x7f0000000180)={0x0}) setsockopt$TIPC_IMPORTANCE(0xffffffffffffffff, 0x10f, 0x7f, &(0x7f0000000300)=0x4720d595, 0x4) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r8, 0xc0182101, &(0x7f00000000c0)={r9}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r8, 0xc0502100, &(0x7f0000002780)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r8, 0x40182103, &(0x7f0000000080)={r10, 0x3, r8, 0x5}) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000340)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB="0500"/12, @ANYRES32, @ANYBLOB="d8d1005c089f5cbc89ec4f7ca875f3c5ba1d81dba8ae5da3f4adf5928e6ca6567065bbaea9b8cf7dfbd7c2acd78265881f1529fc2236be452bc9800042c8d572cfc4bd491824f56a11d6", @ANYRES64=0x0], 0x10) r11 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r11, &(0x7f0000000180)=[{&(0x7f0000033a80)=""/102377, 0x18fe9}, {&(0x7f0000000000)=""/64, 0x40}, {&(0x7f00000001c0)=""/214, 0xd6}], 0x3, 0x0, 0x0) 8.151400701s ago: executing program 2 (id=1149): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYRES16=r1], 0x128}, 0x4004000) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}], 0xd8}, 0x40000020) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) prlimit64(0x0, 0xa, &(0x7f0000000140)={0xa, 0x8a}, 0x0) sched_setscheduler(r3, 0x1, &(0x7f0000000040)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs={0x1}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x0, 0x1) recvmmsg(r6, &(0x7f0000000480), 0x400034f, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0x10, &(0x7f0000000700)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r7}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d0000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) socket$inet6(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x7fffffff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x178, 0x11, 0x148, 0x178, 0x0, 0x250, 0x2a8, 0x2a8, 0x250, 0x2a8, 0x3, 0x0, {[{{@ip={@loopback, @private=0xa010100, 0x8000007f, 0xff, 'wg0\x00', 'xfrm0\x00', {0xff}, {0xff}, 0x33, 0x3, 0x14}, 0x0, 0x86, 0xb8, 0x0, {}, [@common=@unspec=@conntrack2={{}, {{@ipv4=@rand_addr=0x64010100, [0xffffffff, 0xffffff00], @ipv6=@ipv4={'\x00', '\xff\xff', @private=0xa010102}, [0xff000000, 0xffffff00, 0xff, 0xffffff00], @ipv6=@ipv4={'\x00', '\xff\xff', @private=0xa010102}, [0xffffffff, 0x0, 0xff000000, 0xffffff00], @ipv4=@multicast2, [0xff, 0xff, 0xffffffff, 0xffffff00], 0xfffffff8, 0x8, 0x1d, 0x4e20, 0x4e20, 0x4e22, 0x4e20, 0x1000, 0x8}, 0x100, 0x2}}, @inet=@rpfilter={{}, {0xd}}]}, @unspec}, {{@uncond, 0x0, 0xd0, 0x100}, @unspec=@CT1={0x0, 'CT\x00', 0x1, {0x9, 0xe96a, 0x6, 0x7, 'pptp\x00', 'syz0\x00', {0x2}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2fa) fsmount(0xffffffffffffffff, 0x0, 0x0) gettid() 7.03825626s ago: executing program 2 (id=1155): socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b40)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) ustat(0x9, &(0x7f0000000480)) r2 = memfd_create(&(0x7f00000001c0)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0\xbc]\x12\xc0D\x9f\x80\x8f\xfe\xf2\xc2)\xccm\xacz\xc1\xad\xe4\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a', 0x0) execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x17, 0x6, &(0x7f0000000140)=@raw=[@btf_id={0x18, 0x5, 0x3, 0x0, 0x2}, @jmp={0x5, 0x1, 0x4, 0x6, 0x3, 0xffffffffffffffc0, 0x8}, @exit, @map_idx={0x18, 0x1, 0x5, 0x0, 0xe}], &(0x7f0000000180)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000001c0)={0x0, 0xf, 0x1, 0x160726c8}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000200)=[0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], 0x0, 0x10, 0x2}, 0x94) 7.0339199s ago: executing program 1 (id=1158): r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, r0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0xb6, 0xff, &(0x7f0000000080)="0ae6c6eca90d0ca5f62ea87ba99b8f99c4a87d58f376bf4e86efd8af29fe20209cf80481bde486d3ee0c1840c0ab2779a8db391bf368fdf2d04e7d0209dfd085e178d797999b259728a886a4761a533124188e8766159bc29d4e77cbe93b586ace8911c69d459efd646a7da3dd6a8a7d5c02b4de8f973c0123f1885e74531747cd29156c325235e74bed9d5d4286db0168c86cf71fec39736116568854d55a4b1da96fa8a682f2f3fd03f55f781ff528bec4adbbbc2b", &(0x7f0000000140)=""/255, 0x6, 0x0, 0xf5, 0xf0, &(0x7f0000000240)="0747e358da77939ffabd89d5018e3d10f976260bb1b083828304ea19f111c416e76b5bf2e0ba1fc197125107d6ba41f56c137043b81bd086941356b16f6fc08ec82bf74d2dbf36a7605fd5424f43ad8236e2e905fb46e2c5da60b05ad21a6e63b3b105763b9bed372380b24d0044d94b464b7a2fedab52ed88eda39002a960b05b663a302c9f657643bbebae9c6c807cd750968a2f68791c34bfe968528bfeffb79e22c1a6e4529acebc1543e8fe41eccee772e716e08384be461e080f38cb469982665f5710c437b8b7b2c8cdfa23f83bb06f1b83ae91c5be50284a4b620d646286498fee9b3d2479bcba0c4fd8db2db5bbef7762", &(0x7f0000000340)="26e5d79872bfcd528c10f65319869ffcb69095b048eb8092ecb321570d03a39c17f8ae0fc9b566248c360bbac8da918f463f886cce179019653a98995d2fec7769426355732ed114889bc7bfa2ecdaee832b50d9191b211f3d7ed0586516f1a4c0ee3d41fc10fea1b4042af30ed9fc9fee0557b189ee0e806ecca9923a28b501926113b1b3205e6ba8ddf316fa96e3e5f6816f835a2907bc622ae70bf9dc9f9a9d4bad89b445238b629e3c40983b0d6f4adc3b9303e224c2a734f616386632d98aa76b3e41081edee4d26930cc9cb37190d787dfb336b17321d39e5ac85402958536b9bca79d7f0470124709b7a845ba", 0x1, 0x0, 0x10}, 0x50) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c0000001200010003050000000000000a0900000000000000000000000000000100ffffee9e000000000000000000000000ffff"], 0x4c}}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8101, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, 0x0, &(0x7f0000000040)) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0xa2) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r4, 0x0, 0x0) r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000500), r3) sendmsg$SMC_PNETID_DEL(r0, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x28, r5, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x0) 7.028619101s ago: executing program 1 (id=1159): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f0000000380)={[{@debug}, {@delalloc}, {@journal_ioprio}, {@test_dummy_encryption}, {@nodiscard}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}, {@acl}, {@init_itable}]}, 0x1, 0xbb4, &(0x7f00000017c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x4fc4) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="600000001800010000000000000000001d01000008000500", @ANYBLOB="05000d000100000008000a00", @ANYRES32=0x0, @ANYBLOB="15"], 0x60}}, 0x1) ioctl$BTRFS_IOC_WAIT_SYNC(r4, 0x40089416, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095642a2a8c3d0954ac79273c59ac920190886cc16726da93c92701b8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) clock_getres(0x2, 0x0) syz_mount_image$ext4(&(0x7f00000001c0)='ext2\x00', &(0x7f0000001000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x84, &(0x7f0000000100)={[{@abort}, {@user_xattr}]}, 0x2, 0x274, &(0x7f0000000280)="$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") r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r6, &(0x7f0000000140)='2', 0x1, 0x8000c61) ioctl$EXT4_IOC_MOVE_EXT(r6, 0x40305829, &(0x7f0000000080)={0x17c04, 0xffffffffffffffff, 0x4ffa1, 0x100000001}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000640)) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3001009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x2a080, &(0x7f0000000500)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}], [{@euid_lt}, {@appraise_type}, {@smackfsdef={'smackfsdef', 0x3d, '.#'}}, {@measure}]}) setxattr$security_ima(&(0x7f0000000080)='./file1\x00', &(0x7f0000000140), &(0x7f00000001c0)=ANY=[], 0x6d, 0x3) chdir(0x0) 6.922390452s ago: executing program 2 (id=1160): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e21, @remote}, 0x10) (async) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@ipv4_newaddr={0x34, 0x14, 0x1, 0x70bd2b, 0x25dfdbff, {0x2, 0x0, 0x0, 0xfd, r1}, [@IFA_LOCAL={0x8, 0x2, @empty}, @IFA_CACHEINFO={0x14, 0x6, {0x8, 0x8d22, 0x1000, 0x100}}]}, 0x34}}, 0x40010) (async) r2 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000100)='\b\x00', 0x2}, {&(0x7f0000000040)="963905000000", 0x6}], 0x2, &(0x7f00000001c0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}], 0x18}, 0x40010) (async) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000000)={0x200000000000001, 0x4}, 0x8) syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12011001e002b1108107010000020102030109021211583587100309046a0500643dc7fb"], 0x0) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) (async) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee3, 0x8031, 0xffffffffffffffff, 0x28f42000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) (async) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0200000044000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="0000000200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r9 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x34, r9, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x9}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x14) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r8}, 0x10) r10 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r10, 0x4018620d, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000d40)='./file0\x00', 0x92) 6.621568521s ago: executing program 2 (id=1161): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x0, 0x4000044) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1c, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1088d8b8588d72ec29c48f0af5f2d9f51c4b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465ad32b77a74e802a0dc6bf25cca242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767042361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae645ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1fb8f72cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa7956488bef241875f3b4b6ab7929a57affe760e797724f4fce1093b62d7e8c7123d890decacec55bf404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f870b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f154772f514216bdf57d2a40d40b51ab67903ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1594e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c471c784ae7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec30cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89f0000377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f0059161c5e0000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe34124172e436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f491d8e97c862e29e457060000007ac691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104ebc1581848f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426ca85e82ccf821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ad6acf5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18a6e452a31bdc4a60d637545ed4c8a1c649c3ce54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c5140200000054d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a3bc38613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f14eafe4b28ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1bfeef448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae0040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483f02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e9180100000000000000654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732e74dd690c57bdfdc1f069f9491bca7a8c59363799be70018c25ece5ad7307dc7a95c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272ab28a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece98c077b358e752b439132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae2676384ff799783f55d7e5a1a092a01b965dc99cb7a9d98440c355927629f2bcf9dc2396eb2f5d25829715b24327642ac48f1201014a95e0e65e12cdf27e19043e3c5d3e798375cead35b9a93190a52cdecaaccc854a1d41ef365303f0e9b4fc969c9dab6df5e8a795b140fcc09e8a7b694d12932917facd8ceaa4e2d0d16bb0b95387fcd5ff136d8abddf94daf442bbff744591931872a36cf921ad69f2127386e8b0f9afee4da8d3fbec809fbb3ca0fded2859cf25d4c6155d396c5b9bd1a928923123f63f4c40688eae69990a9419456247bbaeb7948de84d2ff875414883bb1e503d4bfebc01bc12a53ea06bf38e571157bd642dac25dbee7832c58378374a39483d6721eec96c28911db21c0c006b42afc90000000000000000000000700000000000000000008ce4ea442c1a207108b35511186c5e860278f6463f52f3990ce08b1bfccc3cff4b5ae27b610aa9ba11b47d4f94c439e055cdbb2b12c983885c93ea4ab4ca1e02d831ae162ee104"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffff32a}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) sched_setaffinity(r0, 0x8, &(0x7f00000001c0)=0xfffffbfffffffffe) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8c70e41c1b0e1d0bd25b373f73ec851"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={r0, 0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000280)='cgroup\x88H\xba\x1b\x00'}, 0x30) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="a61c54df42818e371474f50f7953821221b2b65a6246de8016f817f3a6f39f1fff5af4301a0ec7554f5965bc177cddc61a053b45e670fcf90582f4b29ae8f0cce410b5bbe7a110e316403f79e3c95576810338002330d0927091f9d5d7072f5675d0753687e58cec4c7a9b2b0aff46a72011b7b3b9e741c3be8af80e18fd5f8269811f33e8c8aaaee16771de53999d5f57f759003dcbff8f290fca7aa1b4"], 0x0) openat$cgroup_procs(r4, &(0x7f0000000480)='cgroup.threads\x00', 0x2, 0x0) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) r7 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r7, &(0x7f0000000040)={0xa, 0x1, 0x20000000, @dev={0xfe, 0x80, '\x00', 0x5}, 0x4}, 0x1c) sendmmsg$inet6(r7, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0xa}], 0x1, 0x4c005) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r6, 0x6628) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) 6.102324822s ago: executing program 3 (id=1167): fcntl$setpipe(0xffffffffffffffff, 0x407, 0x6) (async, rerun: 32) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) (async, rerun: 32) syz_usb_connect$cdc_ncm(0x4, 0xd1, 0x0, 0x0) (async) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0) (async) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x4c10, 0x0) (async) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0xa0, &(0x7f0000000700)=ANY=[], 0x1, 0x0, 0x0) (async) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_mount_image$fuse(0x0, &(0x7f0000000080)='./bus\x00', 0x10040d0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f0000000000), 0x10000, &(0x7f00000002c0)={[{@volatile}, {@xino_off}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c}) chdir(&(0x7f0000000140)='./file0\x00') (async) r2 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000a40)='.pending_reads\x00', 0x842, 0x0) ioctl$FICLONE(r2, 0x40049409, r2) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x5}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3}, &(0x7f0000000000), &(0x7f0000000040)=r4}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r4, r1}, 0x14) syz_emit_ethernet(0x15, &(0x7f0000000240)={@local, @empty, @val={@void, {0x8100, 0x0, 0x0, 0x2}}, {@llc={0x4, {@llc={0xe, 0xfc, "1b"}}}}}, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x4000000) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0103000000000000000032"], 0x40}}, 0x0) (async) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') pread64(r7, &(0x7f0000000080)=""/102356, 0x18fd4, 0x3) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000400)={0x4, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async, rerun: 64) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) (rerun: 64) 6.091402413s ago: executing program 3 (id=1168): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x200}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x2d) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x490, 0x360, 0xa, 0x148, 0x360, 0x60, 0x3f8, 0x2a8, 0x2a8, 0x3f8, 0x2a8, 0x3, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x2f8, 0x360, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x0, 0x0, 0x2, 0x0, 0x4, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x20, 0x8601, 0x6, './file0\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x1, 0x6, 0x3, 0x81, 'snmp_trap\x00', 'syz0\x00', {0x30f6a663}}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x4f0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r3 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000640), 0x2, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r3, 0x4040942c, &(0x7f0000000680)={0x0, 0x6, [0x1, 0x2, 0x0, 0x7, 0x8, 0x4]}) r4 = socket(0x10, 0x80003, 0x0) (async) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0xfff2, 0xf}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0000000000000000000100000e00"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) (async) syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0x0, 0x34f}, &(0x7f00000000c0), 0x0) (async) sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=ANY=[], 0x78}}, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80080) write$P9_RWSTAT(r7, &(0x7f0000000040)={0x7, 0x7f, 0x2}, 0x7) 6.066291945s ago: executing program 3 (id=1169): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7f, 0x8d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = openat$urandom(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$RNDGETENTCNT(r3, 0x80045200, &(0x7f0000000080)) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r5}, 0x18) r6 = socket$packet(0x11, 0x3, 0x300) syz_open_procfs(r0, &(0x7f0000000000)='net/xfrm_stat\x00') r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x12, 0x6, 0x4, 0x12}, 0x50) close(r7) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r8}, &(0x7f0000000500), &(0x7f0000000540)=r7}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r8}, &(0x7f0000000000), &(0x7f0000000080)=r7}, 0x20) ioctl$sock_SIOCGIFINDEX(r6, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', 0x0}) setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f0000000100)={r9, 0x2, 0x6, @random="2f89223e4981"}, 0x10) r10 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r10, 0x89a1, 0x0) 6.009811341s ago: executing program 1 (id=1170): socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b40)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) ustat(0x9, &(0x7f0000000480)) r2 = memfd_create(&(0x7f00000001c0)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0\xbc]\x12\xc0D\x9f\x80\x8f\xfe\xf2\xc2)\xccm\xacz\xc1\xad\xe4\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a', 0x0) execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x17, 0x6, &(0x7f0000000140)=@raw=[@btf_id={0x18, 0x5, 0x3, 0x0, 0x2}, @jmp={0x5, 0x1, 0x4, 0x6, 0x3, 0xffffffffffffffc0, 0x8}, @exit, @map_idx={0x18, 0x1, 0x5, 0x0, 0xe}], &(0x7f0000000180)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000001c0)={0x0, 0xf, 0x1, 0x160726c8}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000200)=[0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], 0x0, 0x10, 0x2}, 0x94) 5.936963908s ago: executing program 4 (id=1172): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="b40500000000000079108f0000000000070000000000000095000000000000000637f79d237f"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x22e, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r0 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$xdp(0x2c, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) lsetxattr$trusted_overlay_opaque(&(0x7f0000000040)='./file0\x00', &(0x7f0000000180), &(0x7f00000001c0), 0x2, 0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x3c, 0x3e9, 0x300, 0x70bd2b, 0x25dfdbfd, {0x40, 0x1, 0x1, 0x0, 0x0, 0x7, 0x8000, 0x3, 0x0, 0x2, 0x5de7}, ["", "", ""]}, 0x3c}}, 0x4000000) sendmmsg$unix(r2, &(0x7f00000bd000), 0x34f, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) flock(0xffffffffffffffff, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000540)='cachefiles_mark_inactive\x00', r4}, 0x18) bind$netlink(0xffffffffffffffff, 0x0, 0x0) syz_clone(0x41200100, 0x0, 0x0, 0x0, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000380), 0x500400, 0x0) r5 = socket(0x10, 0x3, 0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='mounts\x00') unshare(0x2040400) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10, 0xe}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x6, 0xffffffff}]}}]}, 0x38}}, 0x4048000) sendmsg(r0, &(0x7f0000000340)={&(0x7f0000000040)=@alg={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-sse2\x00'}, 0x80, &(0x7f00000002c0)=[{&(0x7f00000000c0)="272c778fc5e8f3fb7a0a864bce338c3908a1ffe4d423a39e0ec8e1fb0f8eccf88d333f", 0x23}, {&(0x7f0000000100)="9fe33476092b97e47fe1f07047d49ac4c83b7392edc988d41ea0d4017421971304f20289555d3cd696d14ad74312412349a2ca83b22bbf2e0b461154818622c96360a2cb6974fe5b4797d335e2f3", 0x4e}, {&(0x7f0000000180)="97dcd87294c19b6aa3d08e3e1b7affbe3824af6c22dbe6f3c754353ea0414de175ac71831deb2ef94a6121514a7d759b6a87c68babd1126a619f80f6555e7f00f8dd1d", 0x43}, {&(0x7f0000000200)="9036675644a01018eaaf605cde70c1dcb9c7679a2bb3ca00dda669e37ae36c5fda25944622ff41e1a55b93cf5937cee22e178a97487ab229f6e20f9fc0c3b9ef900142fca746e39284260d103f9309879a269a04c3582a61b5e1ce1c9c5a30e2c25acb0a04fd1c1356d2068da2a628804621a53644eab7216b422213b7a417c5df233975eb8976ed2f818e825800a3bddf52866d0d3826664f6ccc51d21e747e6fcfc49044cdfff891b0df60bf3e263447f854bfd51e18b5c1f6882c0eeedd8b", 0xc0}, {&(0x7f0000000600)="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", 0x1000}], 0x5, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], 0x1340}, 0x0) 2.839725731s ago: executing program 4 (id=1173): socket$netlink(0x10, 0x3, 0x8000000004) socket$nl_audit(0x10, 0x3, 0x9) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000018110000000000000004000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000700000001000500090000"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r4, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) openat(0xffffffffffffff9c, &(0x7f0000000680)='./file1\x00', 0x143041, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x89}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, 0x0, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x2b}, 0x0, @in=@empty}}, 0xe8) close(r0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="900000000002010400000000000000000a0000003c0003800c009f89225721913665e6ff028004000100000000002c00018014000300fe8000000000000000000000000000bb14000400fc0200800000000000000000000000003c0002802c00018014000300fc0000000000000000000000edffffff13000400ff0200000000000000000000000000010c0002800500010000000000040001", @ANYBLOB="350857616c6526ab6957176912ba683476c9241b1aa84c243db36dcfaac8535a3c79d3a142b6ea975291bd039337ee7eb1c48dfedf14e3200f2a415b401eb705414d7f033c451a43528abf2f4b3e60f3530aff0c61eea28793d23dff51a5a16f1d831aa39868ed4b167f0f10c34b026b0e18b2d07d1eb40b85c0e482eabe1e4f727a455175c78935d2bcebc2ee38cb71bf91a8bcb26a1b5a3b1948f6182818c4a12a4fc00810b735d68159a0a73cde9583eb3d4871212a08f5"], 0x90}}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000007c0)={&(0x7f000081a000/0x2000)=nil, &(0x7f00005ca000/0x4000)=nil, &(0x7f000087c000/0x2000)=nil, &(0x7f0000814000/0x1000)=nil, &(0x7f0000a91000/0x1000)=nil, &(0x7f000087a000/0x2000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000b12000/0x1000)=nil, &(0x7f000084f000/0x4000)=nil, &(0x7f0000dda000/0x3000)=nil, &(0x7f0000f43000/0x13000)=nil, &(0x7f0000000740)="ac0d69146f519cbf77222a40536c64bfc8b0036200a483d3e294e28662e92397d4891cb1a7d341ce6b494feb77d64132c5d890324b6403f83101a5b7e9275a0cee85aaab5ab6e4787e8bc7a06cbe6ac19b49bb730023d4378c3d2380b2a1e0b1f92abb2494611c6cebd449ac22d7c8c80bf5eaf8d54b", 0x76}, 0x68) 2.793144286s ago: executing program 3 (id=1174): socket$netlink(0x10, 0x3, 0x8000000004) socket$nl_audit(0x10, 0x3, 0x9) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000018110000000000000004000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010005000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r3, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) openat(0xffffffffffffff9c, &(0x7f0000000680)='./file1\x00', 0x143041, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x89}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, 0x0, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x2b}, 0x0, @in=@empty}}, 0xe8) close(0xffffffffffffffff) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="900000000002010400000000000000000a0000003c0003800c009f89225721913665e6ff028004000100000000002c00018014000300fe8000000000000000000000000000bb14000400fc0200800000000000000000000000003c0002802c00018014000300fc0000000000000000000000edffffff13000400ff0200000000000000000000000000010c0002800500010000000000040001", @ANYBLOB="350857616c6526ab6957176912ba683476c9241b1aa84c243db36dcfaac8535a3c79d3a142b6ea975291bd039337ee7eb1c48dfedf14e3200f2a415b401eb705414d7f033c451a43528abf2f4b3e60f3530aff0c61eea28793d23dff51a5a16f1d831aa39868ed4b167f0f10c34b026b0e18b2d07d1eb40b85c0e482eabe1e4f727a455175c78935d2bcebc2ee38cb71bf91a8bcb26a1b5a3b1948f6182818c4a12a4fc00810b735d68159a0a73cde9583eb3d4871212a08f5"], 0x90}}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000007c0)={&(0x7f000081a000/0x2000)=nil, &(0x7f00005ca000/0x4000)=nil, &(0x7f000087c000/0x2000)=nil, &(0x7f0000814000/0x1000)=nil, &(0x7f0000a91000/0x1000)=nil, &(0x7f000087a000/0x2000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000b12000/0x1000)=nil, &(0x7f000084f000/0x4000)=nil, &(0x7f0000dda000/0x3000)=nil, &(0x7f0000f43000/0x13000)=nil, &(0x7f0000000740)="ac0d69146f519cbf77222a40536c64bfc8b0036200a483d3e294e28662e92397d4891cb1a7d341ce6b494feb77d64132c5d890324b6403f83101a5b7e9275a0cee85aaab5ab6e4787e8bc7a06cbe6ac19b49bb730023d4378c3d2380b2a1e0b1f92abb2494611c6cebd449ac22d7c8c80bf5eaf8d54b", 0x76}, 0x68) 2.737673232s ago: executing program 2 (id=1175): r0 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCGSND(r0, 0x8040451a, &(0x7f0000000000)=""/38) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0xc000, 0x142) execve(&(0x7f0000000180)='./file0\x00', &(0x7f0000000280)={[&(0x7f00000001c0)='/dev/input/event#\x00', &(0x7f0000000200)='\xaa\xaa\xaa\xaa\xaa', &(0x7f0000000240)='[:\x00']}, &(0x7f0000000500)={[&(0x7f00000002c0)='\xaa\xaa\xaa\xaa\xaa', &(0x7f0000000300)='\x00', &(0x7f0000000340)='\xff\xff\xff\xff\xff\xff', &(0x7f0000000380)='\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='/\x00', &(0x7f0000000440)='[&\x00', &(0x7f0000000480)='/dev/input/event#\x00', &(0x7f00000004c0)=',)$\x00']}) write$evdev(r1, &(0x7f0000000640)=[{{0x77359400}, 0x1, 0x7f, 0x2}], 0x18) r2 = socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x80, &(0x7f0000001900)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "0000a0", 0x4a, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @dev, @loopback, [{0x1, 0x3, "0aaaa6ea9302f143fb935792a0bd0000000000000000"}, {0x1, 0x1, "1b45972501b9edb1"}]}}}}}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = creat(&(0x7f0000000140)='./file0\x00', 0x18a) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000001200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3", @ANYRES8=r3, @ANYRES64=r2], 0x0) 2.668754248s ago: executing program 1 (id=1177): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000001f80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002a20702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$selinux_load(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x9ae6) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010328bd7000fedbdf251c0000000c00018008000100", @ANYRES32=r2], 0x20}}, 0x10) 2.65227185s ago: executing program 1 (id=1178): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async, rerun: 32) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) (rerun: 32) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async, rerun: 64) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) (rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='net\x00') getdents64(r4, &(0x7f0000002f40)=""/4098, 0x1002) (async) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f00000000c0)={[{@quota}, {@bsdgroups}, {@nouid32}, {@errors_remount}, {@jqfmt_vfsv1}, {@oldalloc}, {@bsdgroups}]}, 0x2, 0x46b, &(0x7f0000000580)="$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") (async) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000200000006110600000000000c6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1ad}, 0x48) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)=ANY=[@ANYRES32=r7, @ANYRES32=r6, @ANYBLOB="262337842a34751398e3000000275e", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x10) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'veth0_to_batadv\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x403, 0x70b525, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x8a1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x44}, 0x1, 0xba01, 0x0, 0x4004}, 0x810) 2.026130061s ago: executing program 1 (id=1179): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x278, 0xe0, 0xa, 0xd0e0000, 0xe0, 0x100, 0x1e0, 0x1d8, 0x1d8, 0x1e0, 0x1d8, 0x3, 0x0, {[{{@ip={@loopback, @private=0x8a010100, 0x0, 0x0, 'ip6tnl0\x00', 'rose0\x00', {0xff}, {}, 0x0, 0x0, 0x41}, 0x0, 0xc0, 0xe0, 0x0, {}, [@common=@unspec=@state={{0x28}, {0xfff}}, @common=@icmp={{0x28}, {0x10, "6ae4"}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x3202, 0xd8, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@set={{0x40}, {{0x3, [0x0, 0x0, 0x0, 0x2, 0x6], 0x2, 0x5}}}]}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2d8) syz_usb_connect(0x5, 0x2d, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201500285d5c2086004040031960154030109021b000100031003090458080119662194090586d7b2"], &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x2, &(0x7f0000000000)=@string={0x2}}, {0x5a, &(0x7f0000000040)=@string={0x5a, 0x3, "ebbab6610fbef25254bff3090cf37bc07017653e97801b438c487f170329512ba2d2f97ad6b8c435a4043faac53b7a81d3aaaf8333bbae489d3067a82517378978739a925f1d93f8ae1c6b4ff47b1d4068dad81b2dd3eea0"}}]}) syz_usb_connect(0x2, 0x7fb, &(0x7f0000000640)={{0x12, 0x1, 0x201, 0x20, 0x98, 0xa5, 0x8, 0xbb4, 0xa93, 0x9ad4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7e9, 0x4, 0x73, 0x5, 0x30, 0x3, [{{0x9, 0x4, 0xd0, 0x7f, 0x8, 0x1c, 0x43, 0x2a, 0x5, [@uac_control={{0xa, 0x24, 0x1, 0xc, 0xd}, [@extension_unit={0xa, 0x24, 0x8, 0x3, 0xfff7, 0x1d, "be62e5"}]}], [{{0x9, 0x5, 0x7, 0x10, 0x40, 0x5, 0xe9, 0xfc, [@generic={0x1e, 0x22, "3eb619ebe0ae8fd8832031e6b191b897e8b126b7387e491c7b42221d"}]}}, {{0x9, 0x5, 0x1, 0xc, 0x200, 0xb, 0xf, 0xa, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x8, 0xf800}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x7, 0xff}]}}, {{0x9, 0x5, 0x8, 0x10, 0x400, 0x8, 0x4, 0x1, [@generic={0xd4, 0xe, "15731598e0779c9302a5a6d508a2ec0f7f63512155164c0be220ea203f44fbd79550fef73ec374e1206ee404897b56113e9bd4c51c839fe63416484216f803fe63c9e90f95d88684336fc16cb2bb4a04f0f2e67d09ce9d074c43d4bebb1a9ffbc18e75eadbc3023fa8fd418f3914a063d867b35a7d2b696cb5de2508c20f98a22b233535311235b87d3d2674329e296f966c855d3bc5358e238e5e0d48d3ad3218d752770ccc4b9cbe2827d3ae43ca7c7dbe3a714ac66013d4a6e99d1284da9c5697d3ca5aab7d3a985b77f2b5dd85259c6e"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x4, 0x3}]}}, {{0x9, 0x5, 0x1, 0x2, 0x400, 0x5, 0x4, 0x6, [@generic={0x6, 0x8, "46428e0b"}, @generic={0xc2, 0xc, "06888817039602c851e359ac5e488bad672e4e848e68584795e81295bd5bf5cfcab35f80fc0403073267f6b346e56937e9206ca5f9548e69c0aac7a176e1d4b9f5dd6c28877aa0321b2b610df8d6f77787027a27bc7bc0060e1f2a97de8c36c204dd3eb05c8d6dfd4d0e4212de6c7fdb5be4c4ca58a73f3e71c66b18377bae2d44bf217c7ad51f37c4661781a1d88f8058901deda2ea1d4b51b9fbf53fb6d9c7b65dd73c9c70aec801ccf7ee50fe6556c1bc98619626790a06cb38fdb60b4dff"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x8, 0x9, 0x3, 0x6}}, {{0x9, 0x5, 0x4, 0x8, 0x20, 0x5, 0x40, 0x70}}, {{0x9, 0x5, 0xc, 0x10, 0x40, 0x3, 0x59, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x93, 0xffff}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x2, 0xff97}]}}, {{0x9, 0x5, 0xb, 0x10, 0x20, 0x5, 0xb, 0x6, [@generic={0x32, 0x4, "753bd57a61fbdf877c25e573d6af1446114076a7568e71336b48fec868abf12d11700829622b36135d28c8bda9ddf3df"}, @generic={0xcd, 0x36, "655a5fcda7693445e1c744f17a95b78a11649a1a74349a87d3f151dfd34ded3da5f5a7942391aa3a569159395ad5b24b3d97f1e3af036f05de61480beb47d50d9f927a1b01a34b73b5ce1c11d2862ae797e2490f169e628ee9a5f01febd8818c66c990b92a2c0314a09e4ec6406fe381d02fadbe97158d9cb2397aca8a1d71f808a7550efa678f25a4f69772848ca2117d942b5fddcdd95bcf77167c7aaccd8486a64f3ca8d143670bd5044236aa9e73ea9f8213b09c397f97222d0e0d6fb6a3cb0c85812ef63c1c04cf04"}]}}]}}, {{0x9, 0x4, 0xdd, 0x7, 0x3, 0x54, 0xc7, 0x3b, 0x1, [], [{{0x9, 0x5, 0xd, 0x10, 0x10, 0x1e, 0x99, 0x9, [@generic={0x89, 0xd, "3aa8d57cd6424fd756a53accaefd39eb046a6e11839224d15f78e2c5cc234307994f8f7f4c9e4af81e12beb4a8be2c234350d56a5cd30b2e59919a1962be39ca73305bff23cc03322836998e0894d130f5c859a94bf16a8cc09a88f7df853248746c601e274b3c1699f6df4dc5637f9c0729be5fe0b669c66b42d9cc409b075eb69127a349fefb"}, @generic={0xd6, 0x7, "bee82357fd2de12234ff599ea9bf3613f7f8110b01115607780c513511efa462a27bda0c3cf66591545873f1198d9d8212f1e8a061bb56a23af774c6e8cce16bd99882134b8286800af2d7f4ccf0c0f5fec9d013a8d196c0ce1876cfc9086cc31220e1f6a16dde810397f0a38bec90ef6184d3f163321a468c07286224308e8f48bd285e20f3328a79371b35c442ead2b34c004af68da97798a70e8c29d70d9aeb5d28c0c3ea949c1261ca03ebc518c755866e86e9c7849bc8d83784792075016917ee8c76917f61a35ed6baffe96762799a290e"}]}}, {{0x9, 0x5, 0x5, 0x0, 0x8, 0x9, 0x0, 0xfe}}, {{0x9, 0x5, 0x5, 0x10, 0x50, 0xc, 0x0, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xfb, 0x2}]}}]}}, {{0x9, 0x4, 0xd1, 0x9, 0x7, 0x9b, 0xf3, 0xc1, 0x6, [@hid_hid={0x9, 0x21, 0x9, 0x0, 0x1, {0x22, 0xa8e}}, @generic={0x59, 0x21, "686dcf9021f0654028a8b8421af9049694e972611c20d2cca22be21fe8133a7be6fb556f58a86ce3644902767121b7ad36638e2b6fa49ffdbd5388865f2953fcbecc2e30b60fbe3ef94563f0f8f52aeb2dc8d7e475819e"}], [{{0x9, 0x5, 0xc, 0x0, 0x3ff, 0x7, 0x4, 0xe}}, {{0x9, 0x5, 0x1, 0x0, 0x5ef, 0x7, 0x4, 0x6, [@generic={0x64, 0x21, "0c8e40d25a724922213bdc436e903bf3031cc0e8fc6849543637f0d59dfcf3e8be25bad208c3331d7a30fead9ca0b8b4bcdce2fe36d6b38e432220bbbe51b996f678c83fe3170fe930dba2ff5a1c65b58dddcf63430c96149e08355d519912aa4e22"}]}}, {{0x9, 0x5, 0x0, 0x4, 0x10, 0x0, 0x6, 0x10}}, {{0x9, 0x5, 0xa, 0xc, 0x20, 0xd3, 0x0, 0x1}}, {{0x9, 0x5, 0xb, 0x1, 0x8, 0x5, 0x81, 0x3}}, {{0x9, 0x5, 0x6, 0x0, 0x10, 0xbc, 0x40, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x7, 0xa}]}}, {{0x9, 0x5, 0x8, 0x0, 0x8, 0xce, 0x4, 0x1}}]}}, {{0x9, 0x4, 0x79, 0x7, 0x4, 0xa0, 0xce, 0xc5, 0x20, [@generic={0xf2, 0x30, "d9af5765d60714e17435b73934ac2209d779196510153be1c3f84d72e11bf72ab3dc7e9a5b64cdc98a2a88416af37b961cb61d0ff7fd491619a2ce085307a8b4a2b46d67dd09fc38415527605c7db18d0cea6cd43967430b21a4f11f8c5909239f6acab1ed9eaa7385cc4a3eaf1ab1ad694cd26a575ec9a2359d7b8692d98ab52160982b87c7a8150ef1ba44ff56f289359237ba0102d0d0e90a87e2e275997deb525bd5b9ac40ed99f3416933f850d3d138ea86ac5226b7a5c3b4b69ed600ff7c75427cf249abacccb1c80a6dbe34ecf94af22677b4a514a9d4fe568a6f46bb9a56425ad56dd31916b7fcce0ea540ba"}], [{{0x9, 0x5, 0xf, 0x2, 0x10, 0x6, 0x8, 0x9, [@generic={0xd4, 0xe, "19014cd6ef9790ebf5bbac41763bb977f9431c55c7e3d32378fc67a5991e1b955ad957cbfde2b3b4159cd1f9fa8ba032f04d33d98bca719c5bdfeb928a0a63d0f1ba5dfc2730248f9a2cbd0a980875f11c00e804a227f53fe74c45c0258903a735a1ec4d0b2e55be03e2880c4c2c86bd14577f0401bf9229ee28be56beeac59972f737dd445114ec6cc42b9908b29ad98b68f6bfa3eb31dbd3cebc94fad0ead1911890d62c68c9528402cbbc31bc81cf991658e62abc7c19029f4f6da1effd88d249cbdb90f1a48e86f793915b8fb620f5f8"}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x2, 0xbd}]}}, {{0x9, 0x5, 0x0, 0x2, 0x3ff, 0x4, 0x3, 0x9}}, {{0x9, 0x5, 0x8, 0x3, 0x3ff, 0x38, 0x4, 0xa, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x1, 0x4}]}}, {{0x9, 0x5, 0x88, 0x1, 0x3ff, 0x6, 0xbc, 0x2}}]}}]}}]}}, &(0x7f0000000300)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0x55, 0x7, 0xf, 0x10, 0x6}, 0x19, &(0x7f0000000100)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x10, "bd9507ce2300e89928b7a69de13b861f"}]}, 0x3, [{0xd8, &(0x7f0000000140)=@string={0xd8, 0x3, "cb4b5c9186f0de02e053a0e3f3f05d791129a8c80f0d75d77c010ab3f4ce4e5b1f2b308aac3dd5d96d3771611bd02f0db6bc23baa6fbf5d5ffd6553afe86afe4915893bf84f31f5e0d00f6a339db59ca5bec6ab3e472f5de3fb39fb25196ebe37ac0d6c3fe7432661699a705ffe5fb1f701f4db54aacfe0e4ba889990d90dde9a4babc732b79fd3cdeacc647d10145b31c12292017f3ef34c01949a7bbe9d241c2e2761548aac88bc857422a366d27199331bc761b1d070785187ef1221ac9226736226ce47c2eb0738e623069f13783479fe23335de"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x415}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x2c0a}}]}) 1.907251813s ago: executing program 4 (id=1180): bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x1, 0x4, 0x8, 0xd}, 0x50) r0 = openat2(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x44}, 0x18) sendmmsg$unix(r0, &(0x7f0000000740)=[{{&(0x7f00000002c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000340)="62cdd704b9b57ab41c4aba23b63329d26b973f21a267bd5327b6d8e7ec35df567eb63e1ad3ff936c854c20d99b61221144e0144bf255868e09d663f55c0372d5e92504949d43f0a1085f6acce77a208e80bb85a2267bda370d58d4b2c5c336ccd7c10459edfbeade96446bc2c2fc0d2e36728d7ca38ab5ec0f8756aca6b70a0445d9ae6163c3294a33a5750b9a8d9745122c8b6746142f4ff913cb4099198349e8cb577138e48b76b4cee687086752ca208e2db29ea4914c051d89e54a4ef3a3fd900a14fac2cdb744fb348088b252c556a04845f7a69f360d1752", 0xdb}, {&(0x7f0000000440)="a54f34f41c38fc0b30ca932e15cedab4151faaefe08d214fe5004a357b786874c759c108435d8c66cac151b7f397a987a6dec11513d7441c3db0ff831900b741c87d74a4b5031a6705f8c84810b06b667ef1beb7c1dc105f8e9baefce1c43d891c642ae4b192b39406ee7ed1522cd6c31959555f2c2e7f5a88592b869eb76981d8be", 0x82}, {&(0x7f0000000500)="1922eab88342a3a5360ea7b8b312e7237b0f6a4663a7f6f7dd3003ebed507a51b0d2757b79a90c789dccf82cbbcf260b52fac16e4e0f0673c7f622a7f24e3b35191326376b82ea7107ef8a88334dd1aa0ce8e248a07a881a7b603450e2e8974ac388eaa0da1fa4331c9861282f36df8465e85a4184fbadebdc8df642aaaf7683906ad570692802f1588eb735d19153aa75a803fdf9ef359364e3b0cd0a72252d70fd7300304bbab5b6fd15331d5ae38b271e7077e33ded6efe07136403bdbb3fde0acac3ab44f48795d701b601b32ae6825cf2e6f7380918", 0xd8}, {&(0x7f0000000780)="b65bab0bff421810f57c818df8935c89300f8412c9459cd25ab644a015585bac9f7b262d63e6e4fa0ea4a3e5a954eb93534455e8a57a80df3edf3a1b8a926bedfd376a5101f77aa2d7ccb0c7cf933f531530ce64c543065903854f0c02d5a13ecd15e0d3bba995ea6277ad79d25b4216b027aed4de5b94ee5e44c3569c", 0x7d}, {&(0x7f0000000680)="565ff4522a9808d3c1dfe5e64add786e6387547513ee4d3dd7b0617650dad4a2666e08e441e7", 0x26}], 0x5, 0x0, 0x0, 0x1}}], 0x1, 0x40) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000280)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x7}, @ldst={0x3, 0x2, 0x2, 0xa, 0x1, 0xc, 0xffffffffffffffff}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000800000000000000000000850000006d00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000180)='sys_enter\x00', r2}, 0x10) quotactl$Q_SETQUOTA(0xffffffff80000801, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) 1.905369723s ago: executing program 3 (id=1181): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r1, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x4, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="e000000000000000290000000b00000015"], 0xe0}}], 0x1, 0x0) setrlimit(0x2, &(0x7f0000000000)={0xef0, 0x8}) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_io_uring_setup(0x497, &(0x7f0000000180)={0x0, 0x4885, 0x100, 0x3, 0x1d}, 0x0, &(0x7f0000000600)) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x800810, &(0x7f0000000040)={[{@nobh}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4}}, {@data_err_ignore}]}, 0xff, 0x23f, &(0x7f0000000540)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x10) ioctl$EXT4_IOC_GROUP_EXTEND(r5, 0x40086607, &(0x7f00000000c0)) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r7}, 0x10) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r4, 0x16, &(0x7f0000000040)={&(0x7f0000002000)={[{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x0, 0x0, 0x2}]}, 0x3, 0x1}, 0x1) socket$nl_generic(0x10, 0x3, 0x10) io_uring_register$IORING_REGISTER_FILES2(0xffffffffffffffff, 0xd, &(0x7f0000000a40)={0x3, 0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000840)=""/15, 0xf}, {&(0x7f0000000880)=""/120, 0x78}, {&(0x7f0000000780)=""/174, 0xae}], &(0x7f0000000a00)=[0x8000000000000]}, 0x20) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000280)={'ip6tnl0\x00', &(0x7f00000003c0)={'syztnl1\x00', 0x0, 0x2f, 0x7f, 0xd3, 0x7ff, 0xd, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x48, 0x700, 0x400, 0xb47}}) 1.894089404s ago: executing program 4 (id=1182): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f0000000040)=0x5) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="280000006a00831300000000000000ffa6"], 0x28}, 0x1, 0x0, 0x0, 0x4009050}, 0x8050) r3 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000380)={[0x6, 0x9, 0xfffffffffffffffd, 0x0, 0x5, 0x0, 0x8, 0x1004, 0x6, 0xc595, 0x7, 0x8, 0xffffffffffffffff, 0x0, 0x80000004000000, 0x1c], 0x80a0000, 0x2010d3}) ioctl$KVM_GET_MSRS_cpu(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000100)={0x1, 0x0, [{0x34d}]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, 0x0}], 0x1, 0x4e, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000018000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, 0x0}], 0x1, 0x60, &(0x7f00000002c0)=[@cr0={0x0, 0x6}], 0x1) ioctl$KVM_RUN(r6, 0xae80, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1f, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="00000000000000000000000000000000180100002020702500000000002020207b1af8fefd000000bfa100060000000007010000f8ffffffb7030b0008000000b703000000658d47439ca542de00edbf2f0020850000007200", @ANYRESDEC=r6, @ANYBLOB="90e95d611e2b75abe0bbd16e5603e868a47cbad1bd32acf05d6e9208afce3a3fe28ecf659f3c39a5d93e3a50133844c7475d702017f7561944e0d729c1f420bc2860a868269720c486b869b4d93f5950e9"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r9}, 0x18) unshare(0x26020480) 959.979526ms ago: executing program 3 (id=1184): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000001200)={[{@nodiscard}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@nobarrier}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xeb}}, {@abort}, {@user_xattr}, {@bh}, {@errors_remount}]}, 0x1, 0x55f, &(0x7f0000000580)="$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") quotactl_fd$Q_SETQUOTA(0xffffffffffffffff, 0xffffffff80000800, 0x0, &(0x7f0000000140)={0x0, 0xa, 0x0, 0x0, 0x4, 0x401, 0x28ab, 0x0, 0x4}) lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000180), &(0x7f00000001c0)=ANY=[], 0x361, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000023000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_usb_connect$cdc_ecm(0x2, 0x56, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000102505a1a44000000001010902440001fd00000009040000ff0202ffff052406000005240000000d240f010000000000000000000905810320000000000905820220000000000905030208"], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) lsetxattr$security_ima(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000200)=ANY=[], 0x9, 0x1) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file1\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="0200000001000000000000000400000000000000100000000000000020"], 0x24, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8ab43, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000380)="36260f01c80f78b300a066b8010000000f01d966b92d0800000f32260f01cf0f59e71d1d833e51cc000f38f98c57faba200066b8eb25000066ef0f09", 0x3c}], 0x1, 0x40, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r3, 0x4048ae9b, &(0x7f00000005c0)={0x3, 0x0, {[0x5, 0x6, 0x3, 0x0, 0x6, 0x6, 0xb4, 0x2]}}) ioctl$KVM_RUN(r3, 0xae80, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000140)=ANY=[], 0xfe37, 0x2) 855.707336ms ago: executing program 4 (id=1185): r0 = socket(0x10, 0x80002, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec85"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000004cc0)=""/102395, 0x18ffb}], 0x1, 0x80000000, 0x8000) read$FUSE(r2, &(0x7f0000002c80)={0x2020}, 0xfffffdb2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x10000, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f000000a500)={0x2020}, 0x2020) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r3, 0x4004f50d, &(0x7f0000000180)=0xfffffff9) ioctl$UFFDIO_COPY(r3, 0xc028aa03, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x80}) write$FUSE_NOTIFY_RESEND(r3, &(0x7f0000000000)={0x14}, 0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff0700e831b685152bb15e"], 0x1c}}, 0x8040) 765.079355ms ago: executing program 0 (id=1186): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r0, &(0x7f0000002bc0)=[{{&(0x7f0000000340)={0xa, 0x4e24, 0x540d, @local, 0x9}, 0x1c, 0x0}}], 0x1, 0x20000880) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x3, &(0x7f0000001300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x3, &(0x7f0000001300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r1 = getpid() (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000001340)=@abs={0x0, 0x0, 0x4e22}, 0x6e) (async) getdents(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = syz_io_uring_setup(0x2a29, &(0x7f0000000000)={0x0, 0x57ae, 0x10, 0x2, 0x2bc}, &(0x7f0000000100), &(0x7f00000001c0)) io_uring_enter(r5, 0x2df1, 0x2204002, 0x4, 0x0, 0x0) (async) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) (async) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000000c0)='cubic', 0x4) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000280)='host1x_channel_submit\x00', 0xffffffffffffffff, 0x0, 0x7ff}, 0x18) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = dup(r6) write$UHID_INPUT(r7, &(0x7f0000004000)={0xf, {"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", 0xfffffffffffffe59}}, 0xfa) sendto$inet(r4, &(0x7f0000000000), 0x0, 0x2004c0c4, 0x0, 0x0) (async) ioctl$BTRFS_IOC_TREE_SEARCH(r5, 0xd0009411, &(0x7f0000000300)={{0x0, 0x8000, 0x25, 0x5, 0x8, 0x1, 0x9, 0x2, 0x41, 0x7, 0x4, 0x8, 0x9, 0x9, 0xd57}}) (async) r8 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) (async) fsmount(r8, 0x0, 0x0) 702.799521ms ago: executing program 0 (id=1187): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder1\x00', 0x402, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r1, 0x40046210, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0}, 0x0, &(0x7f0000000040)}, 0x20) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = dup(r3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000002240)='9p_client_req\x00', r4}, 0x10) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) 650.295626ms ago: executing program 0 (id=1188): socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b40)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) ustat(0x9, &(0x7f0000000480)) r2 = memfd_create(&(0x7f00000001c0)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0\xbc]\x12\xc0D\x9f\x80\x8f\xfe\xf2\xc2)\xccm\xacz\xc1\xad\xe4\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a', 0x0) execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x17, 0x6, &(0x7f0000000140)=@raw=[@btf_id={0x18, 0x5, 0x3, 0x0, 0x2}, @jmp={0x5, 0x1, 0x4, 0x6, 0x3, 0xffffffffffffffc0, 0x8}, @exit, @map_idx={0x18, 0x1, 0x5, 0x0, 0xe}], &(0x7f0000000180)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000001c0)={0x0, 0xf, 0x1, 0x160726c8}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000200)=[0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], 0x0, 0x10, 0x2}, 0x94) 553.485415ms ago: executing program 0 (id=1189): fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)={0x0, 0x0}) ptrace$ARCH_MAP_VDSO_32(0x1e, r0, 0x938, 0x2002) r1 = syz_open_dev$mouse(&(0x7f0000000080), 0x2, 0x309580) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='mm_migrate_pages\x00', r1, 0x0, 0x9}, 0x18) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000100)={0x1000, 0x9, 0x4, 0xfff7, 0x1, "dde660440a9c79d2"}) ioctl$GIO_FONT(r1, 0x4b60, &(0x7f0000000140)=""/153) ioctl$TCSETS2(r1, 0x402c542b, &(0x7f0000000200)={0x6, 0xc, 0x80000000, 0x1, 0x6, "b93965a25584b08d9f6cfe2025e7a6f87b8ff8", 0x73, 0x398}) sendmsg$nl_route(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=@ipv4_newrule={0x38, 0x20, 0x100, 0x70bd2a, 0x25dfdbfb, {0x2, 0x14, 0x0, 0x8, 0x4, 0x0, 0x0, 0x7, 0x1f}, [@FRA_FLOW={0x8}, @FRA_GENERIC_POLICY=@FRA_FWMARK={0x8, 0xa, 0x9}, @FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0xe612}]}, 0x38}, 0x1, 0x0, 0x0, 0x34}, 0x10) mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2) socketpair(0x1f, 0x40000, 0x80000001, &(0x7f0000000340)={0xffffffffffffffff}) fdatasync(r2) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000380), 0x4) openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000000, 0x810, r1, 0x12d20000) setsockopt$bt_BT_SECURITY(r2, 0x112, 0x4, &(0x7f0000000400)={0x0, 0x3}, 0x2) socket$nl_route(0x10, 0x3, 0x0) ioctl$TCSETS2(r1, 0x402c542b, &(0x7f0000000440)={0x78000000, 0x4, 0xb2e, 0x7f, 0xff, "5ba29fbb646410b95b8b3e7176f648e94f4a3c", 0xb8, 0x7}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_LISTALL(r3, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x28, r4, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x48804}, 0x40) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000005c0)=0xa) socket$nl_generic(0x10, 0x3, 0x10) ftruncate(r2, 0x7f) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000600)) ioctl$KVM_GET_SUPPORTED_HV_CPUID_sys(r1, 0xc008aec1, &(0x7f0000000640)={0x5, 0x0, [{0x40000001, 0x9, 0x3, 0xdd, 0x1, 0x40692fa1, 0x800}, {0x0, 0x100, 0x4, 0xfffffff9, 0x4, 0x7, 0x7f}, {0xc0000001, 0x7, 0x0, 0x4, 0x200, 0x2, 0x3ef}, {0x8000001a, 0x7, 0x1, 0x7, 0x1, 0x646e, 0x6}, {0x40000000, 0x7, 0x4, 0xfffffff0, 0x34, 0x9, 0x722c}]}) close(r1) symlinkat(&(0x7f0000000740)='./file0\x00', r1, &(0x7f0000000780)='./file0\x00') sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x24, 0x2, 0x3, 0x301, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x8}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x8800}, 0x8000) ioctl$BLKZEROOUT(r1, 0x127f, &(0x7f00000008c0)={0x200, 0x9}) openat$tun(0xffffffffffffff9c, &(0x7f0000000900), 0x200c1, 0x0) 539.279987ms ago: executing program 0 (id=1190): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffff00208500000070000000850000002a00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000008c0)={&(0x7f0000000040)='virtio_transport_alloc_pkt\x00', r3}, 0x10) bind$vsock_stream(r2, &(0x7f0000000440)={0x28, 0x0, 0x0, @local}, 0x10) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) ioctl$VT_RESIZEX(r5, 0x560a, &(0x7f0000000080)={0xd, 0x18, 0x3, 0x0, 0x0, 0x1000}) listen(r2, 0xa) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x1d64, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r7}, 0x18) close_range(r1, r6, 0x0) r8 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, 0x0}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r9, 0x80089419, &(0x7f0000000100)) r10 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r10, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) socket(0x11, 0x6, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000000300)=""/30, 0x1e}], 0x1, 0x80000001, 0x3) sendmsg$netlink(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="24000000220001062abd7000fcffffff14000000000000000000e7"], 0x24}], 0x1}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 470.386054ms ago: executing program 0 (id=1191): socket$netlink(0x10, 0x3, 0x8000000004) socket$nl_audit(0x10, 0x3, 0x9) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000018110000000000000004000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000700000001000500090000"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r4, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) openat(0xffffffffffffff9c, &(0x7f0000000680)='./file1\x00', 0x143041, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x89}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, 0x0, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x2b}, 0x0, @in=@empty}}, 0xe8) close(r0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="900000000002010400000000000000000a0000003c0003800c009f89225721913665e6ff028004000100000000002c00018014000300fe8000000000000000000000000000bb14000400fc0200800000000000000000000000003c0002802c00018014000300fc0000000000000000000000edffffff13000400ff0200000000000000000000000000010c0002800500010000000000040001", @ANYBLOB="350857616c6526ab6957176912ba683476c9241b1aa84c243db36dcfaac8535a3c79d3a142b6ea975291bd039337ee7eb1c48dfedf14e3200f2a415b401eb705414d7f033c451a43528abf2f4b3e60f3530aff0c61eea28793d23dff51a5a16f1d831aa39868ed4b167f0f10c34b026b0e18b2d07d1eb40b85c0e482eabe1e4f727a455175c78935d2bcebc2ee38cb71bf91a8bcb26a1b5a3b1948f6182818c4a12a4fc00810b735d68159a0a73cde9583eb3d4871212a08f5"], 0x90}}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000007c0)={&(0x7f000081a000/0x2000)=nil, &(0x7f00005ca000/0x4000)=nil, &(0x7f000087c000/0x2000)=nil, &(0x7f0000814000/0x1000)=nil, &(0x7f0000a91000/0x1000)=nil, &(0x7f000087a000/0x2000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000b12000/0x1000)=nil, &(0x7f000084f000/0x4000)=nil, &(0x7f0000dda000/0x3000)=nil, &(0x7f0000f43000/0x13000)=nil, &(0x7f0000000740)="ac0d69146f519cbf77222a40536c64bfc8b0036200a483d3e294e28662e92397d4891cb1a7d341ce6b494feb77d64132c5d890324b6403f83101a5b7e9275a0cee85aaab5ab6e4787e8bc7a06cbe6ac19b49bb730023d4378c3d2380b2a1e0b1f92abb2494611c6cebd449ac22d7c8c80bf5eaf8d54b", 0x76}, 0x68) 0s ago: executing program 4 (id=1192): socket$netlink(0x10, 0x3, 0x8000000004) socket$nl_audit(0x10, 0x3, 0x9) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000018110000000000000004000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010005000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r3, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) openat(0xffffffffffffff9c, &(0x7f0000000680)='./file1\x00', 0x143041, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x89}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, 0x0, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x2b}, 0x0, @in=@empty}}, 0xe8) close(0xffffffffffffffff) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="900000000002010400000000000000000a0000003c0003800c009f89225721913665e6ff028004000100000000002c00018014000300fe8000000000000000000000000000bb14000400fc0200800000000000000000000000003c0002802c00018014000300fc0000000000000000000000edffffff13000400ff0200000000000000000000000000010c0002800500010000000000040001", @ANYBLOB="350857616c6526ab6957176912ba683476c9241b1aa84c243db36dcfaac8535a3c79d3a142b6ea975291bd039337ee7eb1c48dfedf14e3200f2a415b401eb705414d7f033c451a43528abf2f4b3e60f3530aff0c61eea28793d23dff51a5a16f1d831aa39868ed4b167f0f10c34b026b0e18b2d07d1eb40b85c0e482eabe1e4f727a455175c78935d2bcebc2ee38cb71bf91a8bcb26a1b5a3b1948f6182818c4a12a4fc00810b735d68159a0a73cde9583eb3d4871212a08f5"], 0x90}}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000007c0)={&(0x7f000081a000/0x2000)=nil, &(0x7f00005ca000/0x4000)=nil, &(0x7f000087c000/0x2000)=nil, &(0x7f0000814000/0x1000)=nil, &(0x7f0000a91000/0x1000)=nil, &(0x7f000087a000/0x2000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000b12000/0x1000)=nil, &(0x7f000084f000/0x4000)=nil, &(0x7f0000dda000/0x3000)=nil, &(0x7f0000f43000/0x13000)=nil, &(0x7f0000000740)="ac0d69146f519cbf77222a40536c64bfc8b0036200a483d3e294e28662e92397d4891cb1a7d341ce6b494feb77d64132c5d890324b6403f83101a5b7e9275a0cee85aaab5ab6e4787e8bc7a06cbe6ac19b49bb730023d4378c3d2380b2a1e0b1f92abb2494611c6cebd449ac22d7c8c80bf5eaf8d54b", 0x76}, 0x68) kernel console output (not intermixed with test programs): -fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 135.788630][ T2426] syz.1.561[2426] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 135.788705][ T2426] syz.1.561[2426] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 135.801091][ T2426] netlink: 4 bytes leftover after parsing attributes in process `syz.1.561'. [ 136.686658][ T28] kauditd_printk_skb: 42 callbacks suppressed [ 136.686675][ T28] audit: type=1326 audit(1761463380.994:781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2415 comm="syz.3.559" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f243ab8efc9 code=0x0 [ 136.754074][ T284] EXT4-fs (loop3): unmounting filesystem. [ 137.600323][ T2443] loop3: detected capacity change from 0 to 512 [ 137.621693][ T28] audit: type=1400 audit(1761463382.494:782): avc: denied { remount } for pid=2439 comm="syz.3.563" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 137.654618][ T2442] netlink: 68 bytes leftover after parsing attributes in process `syz.1.564'. [ 137.672284][ T28] audit: type=1400 audit(1761463382.554:783): avc: denied { ioctl } for pid=2449 comm="syz.0.567" path="/dev/fuse" dev="devtmpfs" ino=93 ioctlcmd=0xe500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 137.717033][ T28] audit: type=1400 audit(1761463382.574:784): avc: denied { lock } for pid=2449 comm="syz.0.567" path="socket:[23460]" dev="sockfs" ino=23460 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 137.730129][ T515] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 139.239131][ T2485] netlink: 4 bytes leftover after parsing attributes in process `syz.4.576'. [ 139.261589][ T2486] netlink: 12 bytes leftover after parsing attributes in process `syz.4.576'. [ 139.310389][ T2477] loop3: detected capacity change from 0 to 40427 [ 139.319128][ T2490] loop4: detected capacity change from 0 to 512 [ 139.349649][ T2477] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 139.359246][ T2490] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.578: inode #1: comm syz.4.578: iget: illegal inode # [ 139.373375][ T2477] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 139.383153][ T2490] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.578: error while reading EA inode 1 err=-117 [ 139.406366][ T2477] F2FS-fs (loop3): invalid crc_offset: 33558524 [ 139.428797][ T2490] EXT4-fs (loop4): 1 orphan inode deleted [ 139.434708][ T2490] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 139.448077][ T2477] F2FS-fs (loop3): Found nat_bits in checkpoint [ 139.465976][ T2479] loop2: detected capacity change from 0 to 40427 [ 139.493264][ T28] audit: type=1400 audit(1761463384.374:785): avc: denied { write } for pid=2488 comm="syz.0.577" name="uinput" dev="devtmpfs" ino=262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 139.493572][ T288] EXT4-fs (loop4): unmounting filesystem. [ 139.522792][ T2495] input: syz0 as /devices/virtual/input/input5 [ 139.524414][ T2479] F2FS-fs (loop2): Invalid segment count (1) [ 139.538534][ T2479] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 139.555516][ T2477] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 139.562058][ T2479] F2FS-fs (loop2): Unrecognized mount option "whint_mode=off" or missing value [ 139.563369][ T2477] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 139.579505][ T28] audit: type=1400 audit(1761463384.414:786): avc: denied { ioctl } for pid=2488 comm="syz.0.577" path="/dev/uinput" dev="devtmpfs" ino=262 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 139.607003][ T28] audit: type=1400 audit(1761463384.424:787): avc: denied { ioctl } for pid=89 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=918 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 139.632239][ T28] audit: type=1400 audit(1761463384.454:788): avc: denied { append } for pid=2476 comm="syz.3.574" name="snapshot" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 139.797013][ T2513] loop3: detected capacity change from 0 to 512 [ 139.814343][ T2513] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 139.824934][ T2513] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e12c, mo2=0002] [ 139.832994][ T2513] System zones: 1-12 [ 139.841242][ T2513] EXT4-fs (loop3): orphan cleanup on readonly fs [ 139.848649][ T2513] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.580: bg 0: block 361: padding at end of block bitmap is not set [ 139.864039][ T2513] EXT4-fs (loop3): Remounting filesystem read-only [ 139.871599][ T2514] netlink: 68 bytes leftover after parsing attributes in process `syz.2.582'. [ 139.880552][ T2513] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6165: Corrupt filesystem [ 139.889805][ T2513] EXT4-fs (loop3): Remounting filesystem read-only [ 139.896478][ T2513] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.580: invalid indirect mapped block 12 (level 1) [ 139.909919][ T2513] EXT4-fs (loop3): Remounting filesystem read-only [ 139.916542][ T2513] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.580: invalid indirect mapped block 2 (level 2) [ 139.929892][ T2513] EXT4-fs (loop3): Remounting filesystem read-only [ 139.936622][ T2513] EXT4-fs (loop3): 1 truncate cleaned up [ 139.942416][ T2513] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 139.963450][ T284] EXT4-fs (loop3): unmounting filesystem. [ 140.152285][ T2521] loop3: detected capacity change from 0 to 256 [ 140.161017][ T2521] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 140.195604][ T2521] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 140.215663][ T2523] loop1: detected capacity change from 0 to 256 [ 140.230241][ T2523] FAT-fs (loop1): Directory bread(block 64) failed [ 140.236856][ T2523] FAT-fs (loop1): Directory bread(block 65) failed [ 140.243513][ T2523] FAT-fs (loop1): Directory bread(block 66) failed [ 140.250109][ T2523] FAT-fs (loop1): Directory bread(block 67) failed [ 140.256656][ T2523] FAT-fs (loop1): Directory bread(block 68) failed [ 140.263262][ T2523] FAT-fs (loop1): Directory bread(block 69) failed [ 140.269863][ T2523] FAT-fs (loop1): Directory bread(block 70) failed [ 140.276388][ T2523] FAT-fs (loop1): Directory bread(block 71) failed [ 140.283107][ T2523] FAT-fs (loop1): Directory bread(block 72) failed [ 140.289728][ T2523] FAT-fs (loop1): Directory bread(block 73) failed [ 140.321969][ T2521] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 140.358363][ T28] audit: type=1400 audit(1761463385.234:789): avc: denied { map } for pid=2519 comm="syz.3.584" path="socket:[23516]" dev="sockfs" ino=23516 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 141.536628][ T2539] loop0: detected capacity change from 0 to 4096 [ 141.649883][ T2539] EXT4-fs (loop0): Test dummy encryption mode enabled [ 141.808114][ T2539] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 142.004805][ T2539] System zones: 0-5 [ 142.154950][ T2544] loop3: detected capacity change from 0 to 2048 [ 142.295981][ T2539] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 142.621627][ T28] audit: type=1326 audit(1761463387.424:790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2538 comm="syz.0.590" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3ff2d8efc9 code=0x0 [ 142.742829][ T286] EXT4-fs (loop0): unmounting filesystem. [ 142.823985][ T28] audit: type=1400 audit(1761463387.704:791): avc: denied { wake_alarm } for pid=2577 comm="syz.1.598" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 142.888739][ T28] audit: type=1400 audit(1761463387.764:792): avc: denied { name_bind } for pid=2577 comm="syz.1.598" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 143.291666][ T28] audit: type=1400 audit(1761463388.144:793): avc: denied { remount } for pid=2590 comm="syz.3.601" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 145.200434][ T2616] loop4: detected capacity change from 0 to 512 [ 145.268413][ T2618] netlink: 64 bytes leftover after parsing attributes in process `syz.1.604'. [ 145.343779][ T2609] loop2: detected capacity change from 0 to 40427 [ 145.352350][ T515] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 145.357374][ T2621] loop0: detected capacity change from 0 to 4096 [ 145.368241][ T2609] F2FS-fs (loop2): Invalid Fs Meta Ino: node(1) meta(15) root(3) [ 145.385083][ T2609] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 145.416482][ T2621] EXT4-fs (loop0): Test dummy encryption mode enabled [ 145.423895][ T2609] F2FS-fs (loop2): invalid crc value [ 145.441583][ T2621] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 145.449820][ T2621] System zones: 0-5 [ 145.458988][ T2621] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 145.469077][ T2609] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241045588246331391) [ 145.482279][ T2609] F2FS-fs (loop2): NAT is corrupt, run fsck to fix it [ 145.489076][ T2609] F2FS-fs (loop2): Failed to initialize F2FS node manager (-22) [ 146.215084][ T28] audit: type=1326 audit(1761463391.094:794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2619 comm="syz.0.609" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3ff2d8efc9 code=0x0 [ 146.436231][ T286] EXT4-fs (loop0): unmounting filesystem. [ 146.703435][ T19] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 147.811454][ T19] usb 5-1: Using ep0 maxpacket: 32 [ 147.818761][ T19] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 147.842380][ T19] usb 5-1: config 0 has no interface number 0 [ 147.850607][ T19] usb 5-1: config 0 interface 184 has no altsetting 0 [ 147.885531][ T19] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 148.732597][ T2673] syz.2.620[2673] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 148.732669][ T2673] syz.2.620[2673] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 148.778700][ T2674] loop3: detected capacity change from 0 to 4096 [ 148.825810][ T2678] loop2: detected capacity change from 0 to 512 [ 148.842944][ T19] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.852149][ T19] usb 5-1: Product: syz [ 148.856420][ T19] usb 5-1: Manufacturer: syz [ 148.861058][ T19] usb 5-1: SerialNumber: syz [ 148.868006][ T19] usb 5-1: config 0 descriptor?? [ 148.879302][ T19] smsc75xx v1.0.0 [ 148.882989][ T19] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 148.900107][ T19] smsc75xx: probe of 5-1:0.184 failed with error -22 [ 148.928515][ T2674] EXT4-fs (loop3): Test dummy encryption mode enabled [ 148.989538][ T2674] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 149.001492][ T2674] System zones: 0-5 [ 149.012291][ T2674] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 149.246064][ T61] usb 5-1: USB disconnect, device number 10 [ 149.391455][ T28] audit: type=1326 audit(1761463394.234:795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2671 comm="syz.3.621" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f243ab8efc9 code=0x0 [ 149.571470][ T19] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 149.594824][ T284] EXT4-fs (loop3): unmounting filesystem. [ 149.811484][ T19] usb 2-1: Using ep0 maxpacket: 16 [ 149.817965][ T19] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 149.837786][ T19] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 149.856694][ T19] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 149.874377][ T19] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.888546][ T19] usb 2-1: Product: syz [ 149.898807][ T19] usb 2-1: Manufacturer: syz [ 149.903634][ T19] usb 2-1: SerialNumber: syz [ 149.972659][ T2705] netlink: 64 bytes leftover after parsing attributes in process `syz.3.625'. [ 150.008320][ T2706] overlayfs: failed to resolve './file1': -2 [ 150.161494][ T2709] netlink: 68 bytes leftover after parsing attributes in process `syz.4.629'. [ 150.335543][ T2680] loop1: detected capacity change from 0 to 40427 [ 150.352126][ T2680] F2FS-fs (loop1): Corrupted extension count (64 + 1 > 64) [ 150.359388][ T2680] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 150.371459][ T2680] F2FS-fs (loop1): invalid crc value [ 150.379107][ T2680] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 150.422698][ T2680] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 150.429969][ T2680] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 150.441345][ T2680] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.449892][ T2680] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.460477][ T19] usb 2-1: 0:2 : does not exist [ 150.468604][ T19] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 150.479863][ T19] usb 2-1: USB disconnect, device number 3 [ 150.692495][ T515] udevd[515]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 150.756100][ T2724] loop2: detected capacity change from 0 to 4096 [ 150.781930][ T2724] EXT4-fs (loop2): Test dummy encryption mode enabled [ 150.794232][ T2724] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 150.807485][ T2724] System zones: 0-5 [ 150.814402][ T2724] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 151.181508][ T28] audit: type=1326 audit(1761463395.984:796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2723 comm="syz.2.634" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f37ffb8efc9 code=0x0 [ 151.391236][ T2732] loop4: detected capacity change from 0 to 40427 [ 151.400505][ T2732] F2FS-fs (loop4): Unrecognized mount option "nodiscald" or missing value [ 151.520167][ T2744] loop3: detected capacity change from 0 to 1024 [ 151.646818][ T287] EXT4-fs (loop2): unmounting filesystem. [ 151.662440][ T2744] EXT4-fs: Ignoring removed nobh option [ 151.695346][ T2744] EXT4-fs: Ignoring removed bh option [ 151.701905][ T61] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 151.737552][ T2744] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 152.283835][ T61] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 152.312840][ T61] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 152.359017][ T2744] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 152.379554][ T61] usb 2-1: language id specifier not provided by device, defaulting to English [ 152.479653][ T61] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 152.520375][ T61] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.558263][ T61] usb 2-1: Manufacturer: ࠖ [ 152.568369][ T61] usb 2-1: SerialNumber: ᑣ [ 152.861855][ T61] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 153.529156][ T2774] fuse: Unknown parameter '' [ 153.671255][ T2780] netlink: 68 bytes leftover after parsing attributes in process `syz.2.647'. [ 153.683190][ T61] usb 4-1: config 0 has an invalid interface number: 64 but max is 0 [ 153.712132][ T61] usb 4-1: config 0 has an invalid descriptor of length 45, skipping remainder of the config [ 153.826903][ T61] usb 4-1: config 0 has no interface number 0 [ 153.884371][ T61] usb 4-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 153.963706][ T61] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.035927][ T61] usb 4-1: Product: syz [ 154.074110][ T61] usb 4-1: Manufacturer: syz [ 154.116000][ T61] usb 4-1: SerialNumber: syz [ 154.168653][ T61] usb 4-1: config 0 descriptor?? [ 154.496829][ T39] usb 2-1: USB disconnect, device number 4 [ 154.542233][ T2784] loop2: detected capacity change from 0 to 128 [ 154.567110][ T2784] EXT4-fs: Ignoring removed nobh option [ 154.588848][ T2784] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 154.624796][ T28] audit: type=1326 audit(1761463399.504:797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2743 comm="syz.3.639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f243ab8efc9 code=0x7ffc0000 [ 154.633124][ T2784] ext4 filesystem being mounted at /138/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 154.659122][ T2787] loop4: detected capacity change from 0 to 512 [ 154.685062][ T2789] loop1: detected capacity change from 0 to 4096 [ 154.696584][ T28] audit: type=1326 audit(1761463399.504:798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2743 comm="syz.3.639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f243ab8efc9 code=0x7ffc0000 [ 154.720418][ T28] audit: type=1326 audit(1761463399.504:799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2743 comm="syz.3.639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f243ab8efc9 code=0x7ffc0000 [ 154.744292][ T28] audit: type=1326 audit(1761463399.504:800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2743 comm="syz.3.639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f243ab8efc9 code=0x7ffc0000 [ 154.748009][ T2789] EXT4-fs (loop1): Test dummy encryption mode enabled [ 154.782958][ T28] audit: type=1326 audit(1761463399.504:801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2743 comm="syz.3.639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f243ab8efc9 code=0x7ffc0000 [ 154.815481][ T28] audit: type=1326 audit(1761463399.504:802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2743 comm="syz.3.639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f243ab8efc9 code=0x7ffc0000 [ 154.826197][ T2789] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 154.844377][ T28] audit: type=1326 audit(1761463399.574:803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2743 comm="syz.3.639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f243ab8efc9 code=0x7ffc0000 [ 154.853330][ T2789] System zones: 0-5 [ 154.872176][ T8] Bluetooth: hci0: Frame reassembly failed (-84) [ 154.881080][ T2784] netlink: 8 bytes leftover after parsing attributes in process `syz.2.648'. [ 154.882345][ T28] audit: type=1326 audit(1761463399.574:804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2743 comm="syz.3.639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f243ab8efc9 code=0x7ffc0000 [ 154.890833][ T2789] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 154.913289][ T28] audit: type=1326 audit(1761463399.634:805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2743 comm="syz.3.639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f243ab8efc9 code=0x7ffc0000 [ 154.923763][ T2784] netlink: 20 bytes leftover after parsing attributes in process `syz.2.648'. [ 154.945254][ T28] audit: type=1326 audit(1761463399.634:806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2743 comm="syz.3.639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f243ab8efc9 code=0x7ffc0000 [ 154.962866][ T2787] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 154.984245][ T2784] netlink: 20 bytes leftover after parsing attributes in process `syz.2.648'. [ 154.997855][ T2787] ext4 filesystem being mounted at /118/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 155.028717][ T287] EXT4-fs (loop2): unmounting filesystem. [ 155.102376][ T288] EXT4-fs (loop4): unmounting filesystem. [ 155.442165][ T2812] loop4: detected capacity change from 0 to 256 [ 155.451587][ T2812] exfat: Deprecated parameter 'utf8' [ 155.456990][ T2812] exfat: Deprecated parameter 'namecase' [ 155.467199][ T2812] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 155.519734][ T285] EXT4-fs (loop1): unmounting filesystem. [ 155.623428][ T2824] loop1: detected capacity change from 0 to 2048 [ 155.699258][ T2829] netlink: 'syz.2.656': attribute type 4 has an invalid length. [ 155.719224][ T2829] netlink: 'syz.2.656': attribute type 4 has an invalid length. [ 155.767775][ T2829] loop2: detected capacity change from 0 to 512 [ 155.779811][ T2829] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 155.901302][ T2829] EXT4-fs (loop2): orphan cleanup on readonly fs [ 155.911012][ T2829] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.656: bg 0: block 248: padding at end of block bitmap is not set [ 155.928239][ T2829] EXT4-fs error (device loop2): ext4_acquire_dquot:6803: comm syz.2.656: Failed to acquire dquot type 1 [ 155.943446][ T2829] EXT4-fs (loop2): 1 truncate cleaned up [ 156.014446][ T2824] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 156.418169][ T2824] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.657: bg 0: block 234: padding at end of block bitmap is not set [ 156.500839][ T2824] EXT4-fs (loop1): Remounting filesystem read-only [ 156.530169][ T2829] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 156.657283][ T285] EXT4-fs (loop1): unmounting filesystem. [ 156.707136][ T287] EXT4-fs (loop2): unmounting filesystem. [ 156.915609][ T45] Bluetooth: hci0: command 0x1003 tx timeout [ 156.915644][ T725] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 156.929147][ T61] usb 4-1: Found UVC 0.00 device syz (046d:0823) [ 156.935639][ T61] usb 4-1: No valid video chain found. [ 156.944518][ T61] usb 4-1: USB disconnect, device number 9 [ 156.979968][ T284] EXT4-fs (loop3): unmounting filesystem. [ 157.087343][ T2853] netlink: 64 bytes leftover after parsing attributes in process `syz.1.662'. [ 157.479390][ T2859] loop3: detected capacity change from 0 to 256 [ 157.486292][ T2859] FAT-fs (loop3): Unrecognized mount option "uoi_xlate=0" or missing value [ 157.532766][ T2859] device xfrm0 entered promiscuous mode [ 157.985600][ T2865] loop2: detected capacity change from 0 to 256 [ 158.106241][ T2865] exfat: Deprecated parameter 'utf8' [ 158.109535][ T2866] loop1: detected capacity change from 0 to 4096 [ 158.118672][ T2865] exfat: Deprecated parameter 'namecase' [ 158.118716][ T2866] EXT4-fs (loop1): Test dummy encryption mode enabled [ 158.137453][ T2865] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 158.150069][ T2866] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 158.169340][ T2866] System zones: 0-5 [ 158.194116][ T2866] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 158.542957][ T2897] netlink: 224 bytes leftover after parsing attributes in process `syz.2.674'. [ 158.563141][ T2897] netlink: 224 bytes leftover after parsing attributes in process `syz.2.674'. [ 158.574778][ T2897] netlink: 38 bytes leftover after parsing attributes in process `syz.2.674'. [ 159.311666][ T2902] netlink: 8 bytes leftover after parsing attributes in process `syz.0.677'. [ 159.320755][ T2902] netlink: 8 bytes leftover after parsing attributes in process `syz.0.677'. [ 159.329814][ T2902] netlink: 8 bytes leftover after parsing attributes in process `syz.0.677'. [ 159.338803][ T2902] netlink: 8 bytes leftover after parsing attributes in process `syz.0.677'. [ 159.347825][ T2902] netlink: 8 bytes leftover after parsing attributes in process `syz.0.677'. [ 159.356861][ T2902] netlink: 8 bytes leftover after parsing attributes in process `syz.0.677'. [ 159.357073][ T285] EXT4-fs (loop1): unmounting filesystem. [ 159.365874][ T2902] netlink: 8 bytes leftover after parsing attributes in process `syz.0.677'. [ 159.380410][ T2902] netlink: 8 bytes leftover after parsing attributes in process `syz.0.677'. [ 159.389476][ T2902] netlink: 8 bytes leftover after parsing attributes in process `syz.0.677'. [ 159.398847][ T2902] netlink: 8 bytes leftover after parsing attributes in process `syz.0.677'. [ 159.408271][ T2902] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 160.228582][ T2934] loop2: detected capacity change from 0 to 2048 [ 160.360030][ T2938] netlink: 'syz.1.685': attribute type 32 has an invalid length. [ 160.770253][ T2934] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 160.808000][ T287] EXT4-fs (loop2): unmounting filesystem. [ 160.846230][ T2958] loop4: detected capacity change from 0 to 512 [ 160.867174][ T2958] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 160.891475][ T2958] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 160.934964][ T2958] loop4: detected capacity change from 0 to 256 [ 160.951731][ T2958] exfat: Deprecated parameter 'utf8' [ 160.957121][ T2958] exfat: Deprecated parameter 'utf8' [ 160.983419][ T2958] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x23a77120, utbl_chksum : 0xe619d30d) [ 161.087544][ T2971] loop2: detected capacity change from 0 to 1024 [ 161.105148][ T2971] EXT4-fs: Ignoring removed i_version option [ 161.119410][ T2971] EXT4-fs (loop2): Test dummy encryption mode enabled [ 161.143815][ T2971] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 161.174138][ T28] kauditd_printk_skb: 213 callbacks suppressed [ 161.174151][ T28] audit: type=1326 audit(1761463406.054:1018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2969 comm="syz.2.696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37ffb8efc9 code=0x7ffc0000 [ 161.221500][ T28] audit: type=1326 audit(1761463406.074:1019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2969 comm="syz.2.696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37ffb8efc9 code=0x7ffc0000 [ 161.292183][ T2978] loop0: detected capacity change from 0 to 512 [ 161.317420][ T2978] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 161.339895][ T28] audit: type=1326 audit(1761463406.084:1020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2969 comm="syz.2.696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=218 compat=0 ip=0x7f37ffb8efc9 code=0x7ffc0000 [ 161.364531][ T287] EXT4-fs (loop2): unmounting filesystem. [ 161.389412][ T2978] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 546, start 22000003) [ 161.408740][ T28] audit: type=1326 audit(1761463406.084:1021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2969 comm="syz.2.696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37ffb8efc9 code=0x7ffc0000 [ 161.421440][ T2978] FAT-fs (loop0): Filesystem has been set read-only [ 161.436664][ T28] audit: type=1326 audit(1761463406.084:1022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2969 comm="syz.2.696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37ffb8efc9 code=0x7ffc0000 [ 161.460661][ T2978] FAT-fs (loop0): error, invalid access to FAT (entry 0x22000003) [ 161.480878][ T2949] loop3: detected capacity change from 0 to 131072 [ 161.496442][ T2949] F2FS-fs (loop3): Zoned block device path is missing [ 161.509872][ T2949] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 161.515232][ T28] audit: type=1326 audit(1761463406.084:1023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2969 comm="syz.2.696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f37ffb8efc9 code=0x7ffc0000 [ 161.528876][ T2949] F2FS-fs (loop3): invalid crc value [ 161.541922][ T28] audit: type=1326 audit(1761463406.084:1024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2969 comm="syz.2.696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37ffb8efc9 code=0x7ffc0000 [ 161.573686][ T28] audit: type=1326 audit(1761463406.084:1025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2969 comm="syz.2.696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37ffb8efc9 code=0x7ffc0000 [ 161.597368][ T28] audit: type=1326 audit(1761463406.084:1026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2969 comm="syz.2.696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f37ffb8efc9 code=0x7ffc0000 [ 161.620768][ T28] audit: type=1326 audit(1761463406.084:1027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2969 comm="syz.2.696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37ffb8efc9 code=0x7ffc0000 [ 161.645597][ T2949] F2FS-fs (loop3): Found nat_bits in checkpoint [ 161.767869][ T2949] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 161.777523][ T2949] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 161.924162][ T3006] loop3: detected capacity change from 0 to 128 [ 162.331511][ T19] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 162.511484][ T19] usb 4-1: Using ep0 maxpacket: 32 [ 162.517708][ T19] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 162.531620][ T3025] loop1: detected capacity change from 0 to 512 [ 162.540945][ T19] usb 4-1: config 0 has no interface number 0 [ 162.559865][ T3025] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 162.569216][ T3025] ext4 filesystem being mounted at /133/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 162.580919][ T19] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 162.847777][ T19] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.856092][ T19] usb 4-1: Product: syz [ 162.860600][ T19] usb 4-1: Manufacturer: syz [ 162.861744][ T285] EXT4-fs (loop1): unmounting filesystem. [ 162.865617][ T19] usb 4-1: SerialNumber: syz [ 162.877065][ T19] usb 4-1: config 0 descriptor?? [ 162.883183][ T19] smsc95xx v2.0.0 [ 162.887241][ T3031] SELinux: Context system_u:object_r:dhcp_state_t:s0 is not valid (left unmapped). [ 162.902012][ T3033] random: crng reseeded on system resumption [ 163.343576][ T3047] loop2: detected capacity change from 0 to 512 [ 163.350533][ T3047] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 163.358910][ T3047] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 2734686212)! [ 163.369925][ T3047] EXT4-fs (loop2): group descriptors corrupted! [ 163.493672][ T3009] loop3: detected capacity change from 0 to 1024 [ 163.501320][ T3009] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 163.509907][ T3009] EXT4-fs (loop3): orphan cleanup on readonly fs [ 163.516457][ T3009] EXT4-fs error (device loop3): ext4_free_blocks:6205: comm syz.3.703: Freeing blocks not in datazone - block = 0, count = 4096 [ 163.530018][ T3009] EXT4-fs (loop3): 1 orphan inode deleted [ 163.535778][ T3009] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 163.551513][ T19] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 163.565636][ T19] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 163.575807][ T19] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 163.591303][ T19] smsc95xx: probe of 4-1:0.67 failed with error -71 [ 163.608801][ T19] usb 4-1: USB disconnect, device number 10 [ 163.903901][ T3061] device veth0_vlan left promiscuous mode [ 164.183991][ T284] EXT4-fs (loop3): unmounting filesystem. [ 164.216138][ T3071] loop0: detected capacity change from 0 to 256 [ 164.219783][ T3072] loop3: detected capacity change from 0 to 512 [ 164.253695][ T3071] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d) [ 164.268787][ T3072] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 164.301589][ T3072] ext4 filesystem being mounted at /156/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 164.921681][ T284] EXT4-fs (loop3): unmounting filesystem. [ 165.039114][ T3085] loop4: detected capacity change from 0 to 4096 [ 165.137979][ T3086] __nla_validate_parse: 46 callbacks suppressed [ 165.138006][ T3086] netlink: 64 bytes leftover after parsing attributes in process `syz.3.724'. [ 165.162513][ T3085] EXT4-fs (loop4): Test dummy encryption mode enabled [ 165.327213][ T3085] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 165.341496][ T3085] System zones: 0-5 [ 165.351567][ T3085] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 165.393679][ T288] EXT4-fs (loop4): unmounting filesystem. [ 165.846293][ T3097] netlink: 68 bytes leftover after parsing attributes in process `syz.4.728'. [ 165.921574][ T3104] loop1: detected capacity change from 0 to 2048 [ 165.952157][ T3104] loop1: p3 < > p4 < > [ 165.956381][ T3104] loop1: partition table partially beyond EOD, truncated [ 165.963684][ T3104] loop1: p3 start 4284289 is beyond EOD, truncated [ 165.977697][ T104] loop1: p3 < > p4 < > [ 165.982609][ T104] loop1: partition table partially beyond EOD, truncated [ 165.989837][ T104] loop1: p3 start 4284289 is beyond EOD, truncated [ 166.040240][ T285] __loop_clr_fd: partition scan of loop1 failed (rc=-16) [ 166.045179][ T515] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 166.057411][ T515] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 166.067114][ T515] Buffer I/O error on dev loop1p4, logical block 0, async page read [ 166.086883][ T515] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 166.096211][ T515] Buffer I/O error on dev loop1p4, logical block 0, async page read [ 166.118451][ T515] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 166.128246][ T515] Buffer I/O error on dev loop1p4, logical block 0, async page read [ 166.136856][ T515] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 166.146704][ T515] Buffer I/O error on dev loop1p4, logical block 0, async page read [ 166.155144][ T515] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 166.164486][ T515] Buffer I/O error on dev loop1p4, logical block 0, async page read [ 166.185353][ T515] udevd[515]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 166.419180][ T3129] loop1: detected capacity change from 0 to 512 [ 166.478516][ T3129] EXT4-fs (loop1): 1 orphan inode deleted [ 166.484332][ T3129] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 166.502578][ T3129] ext4 filesystem being mounted at /140/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 166.577366][ T3137] netlink: 64 bytes leftover after parsing attributes in process `syz.2.740'. [ 166.740685][ T43] __quota_error: 35 callbacks suppressed [ 166.740703][ T43] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 166.762567][ T43] EXT4-fs error (device loop1): ext4_release_dquot:6839: comm kworker/u4:2: Failed to release dquot type 1 [ 166.775376][ T28] audit: type=1400 audit(1761463411.664:1063): avc: denied { map } for pid=3139 comm="syz.3.743" path="/dev/loop-control" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 166.921611][ T28] audit: type=1400 audit(1761463411.664:1064): avc: denied { execute } for pid=3139 comm="syz.3.743" path="/dev/loop-control" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 166.928262][ T3140] loop3: detected capacity change from 0 to 40427 [ 166.955691][ T3140] F2FS-fs (loop3): invalid crc value [ 166.973832][ T3140] F2FS-fs (loop3): Found nat_bits in checkpoint [ 167.007343][ T3140] F2FS-fs (loop3): Start checkpoint disabled! [ 167.023195][ T3140] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 167.143677][ T28] audit: type=1326 audit(1761463411.974:1065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3139 comm="syz.3.743" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f243ab8efc9 code=0x0 [ 167.168568][ T285] EXT4-fs (loop1): unmounting filesystem. [ 167.212752][ T3150] A link change request failed with some changes committed already. Interface veth1_to_batadv may have been left with an inconsistent configuration, please check. [ 167.280068][ T3158] loop2: detected capacity change from 0 to 256 [ 167.316485][ T3158] FAT-fs (loop2): Directory bread(block 64) failed [ 167.341844][ T3158] FAT-fs (loop2): Directory bread(block 65) failed [ 167.348546][ T3158] FAT-fs (loop2): Directory bread(block 66) failed [ 167.356449][ T3158] FAT-fs (loop2): Directory bread(block 67) failed [ 167.363709][ T3158] FAT-fs (loop2): Directory bread(block 68) failed [ 167.370428][ T3158] FAT-fs (loop2): Directory bread(block 69) failed [ 167.379042][ T3158] FAT-fs (loop2): Directory bread(block 70) failed [ 167.386555][ T3158] FAT-fs (loop2): Directory bread(block 71) failed [ 167.393788][ T3158] FAT-fs (loop2): Directory bread(block 72) failed [ 167.401068][ T28] audit: type=1400 audit(1761463412.274:1066): avc: denied { create } for pid=3160 comm="syz.0.750" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 167.427157][ T3158] FAT-fs (loop2): Directory bread(block 73) failed [ 167.436625][ T3161] device pim6reg1 entered promiscuous mode [ 167.802734][ T3169] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 168.188459][ T3176] netlink: 68 bytes leftover after parsing attributes in process `syz.3.751'. [ 168.361484][ T1382] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 168.541611][ T1382] usb 1-1: Using ep0 maxpacket: 16 [ 168.547854][ T1382] usb 1-1: config 0 interface 0 altsetting 13 endpoint 0x81 has invalid maxpacket 33620, setting to 1024 [ 168.559159][ T1382] usb 1-1: config 0 interface 0 has no altsetting 0 [ 168.565791][ T1382] usb 1-1: New USB device found, idVendor=056a, idProduct=00cc, bcdDevice= 0.00 [ 168.574984][ T1382] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.586042][ T1382] usb 1-1: config 0 descriptor?? [ 168.637503][ T3192] netlink: 64 bytes leftover after parsing attributes in process `syz.4.759'. [ 169.027149][ T3206] loop3: detected capacity change from 0 to 256 [ 169.034014][ T3206] FAT-fs (loop3): Unrecognized mount option "uoi_xlate=0" or missing value [ 169.094049][ T384] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 169.258372][ T1382] wacom 0003:056A:00CC.0002: hidraw0: USB HID v0.00 Device [HID 056a:00cc] on usb-dummy_hcd.0-1/input0 [ 169.354817][ T3211] loop4: detected capacity change from 0 to 512 [ 169.376800][ T3211] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 169.387763][ T3211] EXT4-fs (loop4): orphan cleanup on readonly fs [ 169.394851][ T3211] EXT4-fs (loop4): 1 orphan inode deleted [ 169.400870][ T3211] EXT4-fs (loop4): 1 truncate cleaned up [ 169.407510][ T3211] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 169.638515][ T3219] loop0: detected capacity change from 0 to 1024 [ 169.653036][ T3219] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 169.665314][ T3219] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 169.675949][ T3219] JBD2: no valid journal superblock found [ 169.682286][ T3219] EXT4-fs (loop0): error loading journal [ 169.728978][ T3221] netlink: 36 bytes leftover after parsing attributes in process `syz.3.765'. [ 169.805065][ T288] EXT4-fs (loop4): unmounting filesystem. [ 170.055106][ T3229] tc_dump_action: action bad kind [ 170.603007][ T3241] loop1: detected capacity change from 0 to 4096 [ 170.633511][ T3241] EXT4-fs (loop1): Test dummy encryption mode enabled [ 170.666652][ T3241] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 170.688095][ T3241] System zones: 0-5 [ 170.701260][ T3241] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 170.951532][ T28] audit: type=1326 audit(1761463415.784:1067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3240 comm="syz.1.770" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fde8cf8efc9 code=0x0 [ 171.034852][ T19] usb 1-1: USB disconnect, device number 7 [ 171.260925][ T3249] netlink: 68 bytes leftover after parsing attributes in process `syz.0.771'. [ 171.313662][ T3258] loop2: detected capacity change from 0 to 512 [ 171.341083][ T3258] EXT4-fs: Ignoring removed oldalloc option [ 171.372525][ T3258] EXT4-fs (loop2): 1 truncate cleaned up [ 171.378202][ T3258] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 171.419429][ T285] EXT4-fs (loop1): unmounting filesystem. [ 171.582331][ T287] EXT4-fs (loop2): unmounting filesystem. [ 171.616231][ T3266] netlink: 'syz.3.777': attribute type 1 has an invalid length. [ 171.651564][ T28] audit: type=1400 audit(1761463416.534:1068): avc: denied { validate_trans } for pid=3270 comm="syz.3.779" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 171.921692][ T28] audit: type=1400 audit(1761463416.804:1069): avc: denied { bind } for pid=3273 comm="syz.2.776" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 171.950596][ T28] audit: type=1400 audit(1761463416.824:1070): avc: denied { setopt } for pid=3273 comm="syz.2.776" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 172.041682][ T3285] SELinux: Context system_u:object_r:var_lib_t:s0 is not valid (left unmapped). [ 172.061553][ T28] audit: type=1400 audit(1761463416.924:1071): avc: denied { relabelfrom } for pid=3284 comm="syz.0.784" name="UDP" dev="sockfs" ino=27939 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 172.073637][ T3285] loop0: detected capacity change from 0 to 2048 [ 172.101516][ T19] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 172.116254][ T28] audit: type=1400 audit(1761463416.944:1072): avc: denied { relabelto } for pid=3284 comm="syz.0.784" name="UDP" dev="sockfs" ino=27939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=udp_socket permissive=1 trawcon="system_u:object_r:var_lib_t:s0" [ 172.208749][ T3285] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 172.217317][ T310] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 172.233378][ T28] audit: type=1400 audit(1761463417.114:1073): avc: denied { write } for pid=3284 comm="syz.0.784" path="socket:[27941]" dev="sockfs" ino=27941 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 172.311795][ T3291] syz.2.785[3291] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 172.312089][ T3291] syz.2.785[3291] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 173.952785][ T28] audit: type=1400 audit(1761463418.784:1074): avc: denied { rename } for pid=3284 comm="syz.0.784" name="file0" dev="loop0" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 174.022839][ T286] EXT4-fs (loop0): unmounting filesystem. [ 174.123104][ T19] usb 5-1: not running at top speed; connect to a high speed hub [ 174.132284][ T19] usb 5-1: config 14 has an invalid interface number: 21 but max is 0 [ 174.140478][ T19] usb 5-1: config 14 has no interface number 0 [ 174.148047][ T19] usb 5-1: config 14 interface 21 has no altsetting 0 [ 174.157738][ T19] usb 5-1: string descriptor 0 read error: -22 [ 174.160390][ T3299] loop0: detected capacity change from 0 to 4096 [ 174.164330][ T19] usb 5-1: New USB device found, idVendor=c880, idProduct=760e, bcdDevice=35.fc [ 174.245050][ T3302] loop1: detected capacity change from 0 to 512 [ 174.255947][ T3302] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 174.315291][ T3299] EXT4-fs (loop0): Test dummy encryption mode enabled [ 174.373587][ T3302] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 174.382953][ T3302] ext4 filesystem being mounted at /154/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 174.414233][ T28] audit: type=1400 audit(1761463419.284:1075): avc: denied { create } for pid=3295 comm="syz.1.787" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 174.520786][ T3299] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 174.588246][ T3299] System zones: 0-5 [ 174.617412][ T3299] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 175.468952][ T19] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.539686][ T310] usb 4-1: Using ep0 maxpacket: 8 [ 175.544981][ T28] audit: type=1326 audit(1761463419.894:1076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3298 comm="syz.0.786" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3ff2d8efc9 code=0x0 [ 175.600783][ T285] EXT4-fs (loop1): unmounting filesystem. [ 175.607495][ T286] EXT4-fs (loop0): unmounting filesystem. [ 175.619888][ T310] usb 4-1: device descriptor read/all, error -71 [ 175.630894][ T19] usb 5-1: can't set config #14, error -71 [ 175.638640][ T19] usb 5-1: USB disconnect, device number 11 [ 176.556944][ T3344] loop3: detected capacity change from 0 to 256 [ 176.572697][ T3344] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 176.581485][ T24] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 176.629753][ T3347] loop4: detected capacity change from 0 to 256 [ 176.644544][ T3347] exfat: Unknown parameter 'Igcharcromanian' [ 176.655710][ T28] audit: type=1400 audit(1761463421.534:1077): avc: denied { nlmsg_read } for pid=3346 comm="syz.4.800" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 176.706995][ T3351] loop4: detected capacity change from 0 to 512 [ 176.739714][ T3354] loop0: detected capacity change from 0 to 4096 [ 176.749244][ T515] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 176.771466][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 176.779857][ T24] usb 2-1: config 0 interface 0 has no altsetting 0 [ 176.794241][ T24] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 176.808376][ T3354] EXT4-fs (loop0): Test dummy encryption mode enabled [ 176.873864][ T3354] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 176.881463][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.882235][ T3354] System zones: 0-5 [ 176.900069][ T24] usb 2-1: config 0 descriptor?? [ 176.908542][ T3354] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 176.933369][ T3360] loop2: detected capacity change from 0 to 128 [ 176.994119][ T3362] netlink: 4 bytes leftover after parsing attributes in process `syz.4.801'. [ 177.008748][ T3362] netlink: 4 bytes leftover after parsing attributes in process `syz.4.801'. [ 177.025324][ T28] audit: type=1400 audit(1761463421.864:1078): avc: denied { create } for pid=3350 comm="syz.4.801" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 177.081224][ T3360] FAT-fs (loop2): Unrecognized mount option "uni_8late=1" or missing value [ 177.101563][ T28] audit: type=1400 audit(1761463421.864:1079): avc: denied { bind } for pid=3350 comm="syz.4.801" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 177.122057][ T28] audit: type=1400 audit(1761463421.874:1080): avc: denied { setopt } for pid=3350 comm="syz.4.801" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 177.148388][ T28] audit: type=1400 audit(1761463421.904:1081): avc: denied { setopt } for pid=3350 comm="syz.4.801" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 177.371587][ T28] audit: type=1326 audit(1761463422.204:1082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3353 comm="syz.0.802" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3ff2d8efc9 code=0x0 [ 177.409332][ T24] hid (null): global environment stack underflow [ 177.415842][ T24] hid (null): report_id 0 is invalid [ 177.423095][ T24] hid (null): global environment stack underflow [ 177.429640][ T24] hid (null): unknown global tag 0xc [ 177.435033][ T24] hid (null): report_id 25068 is invalid [ 177.440798][ T24] hid (null): report_id 0 is invalid [ 177.446274][ T24] hid (null): global environment stack overflow [ 177.454490][ T24] hid (null): unknown global tag 0xc [ 177.461667][ T24] hid (null): unknown global tag 0x58 [ 177.951194][ T286] EXT4-fs (loop0): unmounting filesystem. [ 178.731469][ T3391] netlink: 68 bytes leftover after parsing attributes in process `syz.2.812'. [ 178.948210][ T3394] loop4: detected capacity change from 0 to 512 [ 178.973747][ T3394] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 178.991649][ T28] audit: type=1400 audit(1761463423.874:1083): avc: denied { create } for pid=3393 comm="syz.4.813" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 179.040433][ T288] EXT4-fs (loop4): unmounting filesystem. [ 179.050066][ T24] usb 2-1: USB disconnect, device number 5 [ 180.341737][ T400] kernel write not supported for file /input/event2 (pid: 400 comm: kworker/0:4) [ 180.423163][ T3411] loop1: detected capacity change from 0 to 4096 [ 180.480909][ T3415] loop0: detected capacity change from 0 to 256 [ 180.487776][ T3415] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 180.498463][ T3415] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 180.508069][ T3415] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 180.733955][ T3411] EXT4-fs (loop1): Test dummy encryption mode enabled [ 180.736340][ T3418] loop4: detected capacity change from 0 to 128 [ 180.748027][ T3418] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 180.757893][ T3411] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 180.767528][ T3418] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 180.779428][ T3411] System zones: 0-5 [ 180.781683][ T3418] ext2 filesystem being mounted at /151/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 180.787346][ T3411] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 180.874074][ T288] EXT4-fs (loop4): unmounting filesystem. [ 181.602537][ T3442] netlink: 8 bytes leftover after parsing attributes in process `syz.4.825'. [ 181.681593][ T28] audit: type=1326 audit(1761463426.364:1084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3408 comm="syz.1.817" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fde8cf8efc9 code=0x0 [ 181.870962][ T285] EXT4-fs (loop1): unmounting filesystem. [ 181.899045][ T28] audit: type=1400 audit(1761463426.774:1085): avc: denied { ioctl } for pid=3446 comm="syz.2.826" path="socket:[28755]" dev="sockfs" ino=28755 ioctlcmd=0x8931 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 181.909122][ T3448] loop2: detected capacity change from 0 to 4096 [ 181.953820][ T3448] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 182.451697][ T28] audit: type=1400 audit(1761463427.334:1086): avc: denied { connect } for pid=3464 comm="syz.3.832" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 182.491715][ T28] audit: type=1400 audit(1761463427.354:1087): avc: denied { write } for pid=3464 comm="syz.3.832" laddr=fe80::a lport=1 faddr=fe80::bb scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 182.681505][ T28] audit: type=1400 audit(1761463427.514:1088): avc: denied { mounton } for pid=3464 comm="syz.3.832" path="/183/file0" dev="tmpfs" ino=1153 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 182.766324][ T3469] device wg2 entered promiscuous mode [ 182.809115][ T28] audit: type=1400 audit(1761463427.684:1089): avc: denied { map } for pid=3470 comm="syz.0.843" path="/dev/kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 182.832247][ T28] audit: type=1400 audit(1761463427.684:1090): avc: denied { execute } for pid=3470 comm="syz.0.843" path="/dev/kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 182.996522][ T3479] loop0: detected capacity change from 0 to 512 [ 183.068046][ T1382] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 183.111159][ T3479] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.837: inode #1: comm syz.0.837: iget: illegal inode # [ 183.124224][ T3485] netlink: 28 bytes leftover after parsing attributes in process `syz.2.838'. [ 183.124380][ T3479] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.837: error while reading EA inode 1 err=-117 [ 183.146627][ T3487] netlink: 28 bytes leftover after parsing attributes in process `syz.2.838'. [ 183.146738][ T3479] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.837: inode #1: comm syz.0.837: iget: illegal inode # [ 183.169537][ T3479] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.837: error while reading EA inode 1 err=-117 [ 183.183193][ T3479] EXT4-fs (loop0): 1 orphan inode deleted [ 183.189124][ T3479] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 183.244754][ T3488] netlink: 64 bytes leftover after parsing attributes in process `syz.1.836'. [ 183.411965][ T1382] usb 5-1: Using ep0 maxpacket: 16 [ 183.421764][ T1382] usb 5-1: config 0 interface 0 altsetting 13 endpoint 0x81 has invalid maxpacket 33620, setting to 1024 [ 183.433539][ T1382] usb 5-1: config 0 interface 0 has no altsetting 0 [ 183.434160][ T286] EXT4-fs (loop0): unmounting filesystem. [ 183.440176][ T1382] usb 5-1: New USB device found, idVendor=056a, idProduct=00cc, bcdDevice= 0.00 [ 183.470132][ T1382] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.526350][ T3496] loop2: detected capacity change from 0 to 4096 [ 183.543156][ T3496] EXT4-fs (loop2): Test dummy encryption mode enabled [ 183.556735][ T3496] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 183.572148][ T3496] System zones: 0-5 [ 183.582126][ T3496] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 183.683151][ T1382] usb 5-1: config 0 descriptor?? [ 183.753946][ T28] audit: type=1400 audit(1761463428.634:1091): avc: denied { execute } for pid=3493 comm="syz.0.840" dev="tmpfs" ino=1447 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 183.938030][ T3504] netlink: 64 bytes leftover after parsing attributes in process `syz.3.842'. [ 184.203418][ T28] audit: type=1326 audit(1761463428.884:1092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3494 comm="syz.2.841" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f37ffb8efc9 code=0x0 [ 184.227169][ T28] audit: type=1400 audit(1761463428.974:1093): avc: denied { execute_no_trans } for pid=3493 comm="syz.0.840" path=2F6D656D66643AA39F6EB4645204693502ACCEE1889D5B4038D7CE1F2039497F151D933DB5E75C274CE6D28EBC294A7454447181CF81BAE531F520C8103EC95C85174CBFCF91DF4DF3025E542A202864656C6574656429 dev="tmpfs" ino=1447 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 184.249300][ T1382] wacom 0003:056A:00CC.0004: hidraw0: USB HID v0.00 Device [HID 056a:00cc] on usb-dummy_hcd.4-1/input0 [ 184.356886][ T287] EXT4-fs (loop2): unmounting filesystem. [ 184.400168][ T3518] binder: 3517:3518 ioctl 89f8 200000000200 returned -22 [ 184.407025][ T3513] loop1: detected capacity change from 0 to 2048 [ 184.424297][ T3513] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 184.840028][ T3533] loop4: detected capacity change from 0 to 1024 [ 184.849209][ T3533] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 184.860495][ T3533] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 184.870587][ T3533] JBD2: no valid journal superblock found [ 184.876472][ T3533] EXT4-fs (loop4): error loading journal [ 185.129467][ T285] EXT4-fs (loop1): unmounting filesystem. [ 185.189043][ T28] audit: type=1326 audit(1761463430.064:1094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3536 comm="syz.0.852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ff2d8efc9 code=0x7ffc0000 [ 185.213128][ T28] audit: type=1326 audit(1761463430.084:1095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3536 comm="syz.0.852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ff2d8efc9 code=0x7ffc0000 [ 185.239558][ T3537] loop0: detected capacity change from 0 to 128 [ 185.254398][ T3537] device pim6reg1 entered promiscuous mode [ 185.310230][ T3539] netlink: 8 bytes leftover after parsing attributes in process `syz.1.851'. [ 185.336079][ T3541] serio: Serial port ptm0 [ 185.507986][ T3547] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 186.101183][ T400] usb 5-1: USB disconnect, device number 12 [ 186.136223][ T3559] loop4: detected capacity change from 0 to 4096 [ 186.152799][ T3559] EXT4-fs (loop4): Test dummy encryption mode enabled [ 186.164837][ T3559] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 186.174994][ T3559] System zones: 0-5 [ 186.179692][ T3559] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 186.923923][ T3569] loop3: detected capacity change from 0 to 128 [ 186.925579][ T3568] loop1: detected capacity change from 0 to 4096 [ 186.937815][ T3568] EXT4-fs (loop1): Test dummy encryption mode enabled [ 186.945695][ T3568] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 186.954089][ T3568] System zones: 0-5 [ 186.993442][ T3574] loop2: detected capacity change from 0 to 512 [ 187.201504][ T515] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 187.213603][ T3568] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 187.214543][ T288] EXT4-fs (loop4): unmounting filesystem. [ 187.229612][ T3574] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 187.239143][ T3574] ext4 filesystem being mounted at /185/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 187.296771][ T287] EXT4-fs (loop2): unmounting filesystem. [ 188.164665][ T28] kauditd_printk_skb: 82 callbacks suppressed [ 188.164703][ T28] audit: type=1326 audit(1761463433.004:1178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3566 comm="syz.1.860" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fde8cf8efc9 code=0x0 [ 188.208723][ T3589] loop2: detected capacity change from 0 to 4096 [ 188.239710][ T3589] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 188.325690][ T3589] input: syz1 as /devices/virtual/input/input13 [ 188.404227][ T3601] netlink: 132 bytes leftover after parsing attributes in process `syz.2.866'. [ 188.418212][ T285] EXT4-fs (loop1): unmounting filesystem. [ 188.534243][ T287] EXT4-fs (loop2): unmounting filesystem. [ 188.975153][ T3619] loop2: detected capacity change from 0 to 4096 [ 189.003562][ T28] audit: type=1400 audit(1761463433.884:1179): avc: denied { bind } for pid=3627 comm="syz.4.876" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 189.037244][ T3619] EXT4-fs (loop2): Test dummy encryption mode enabled [ 189.052043][ T28] audit: type=1400 audit(1761463433.884:1180): avc: denied { name_bind } for pid=3627 comm="syz.4.876" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 189.072737][ T28] audit: type=1400 audit(1761463433.884:1181): avc: denied { node_bind } for pid=3627 comm="syz.4.876" saddr=fe80::aa src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 189.146053][ T3619] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 189.155152][ T3619] System zones: 0-5 [ 189.442851][ T3619] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 189.684701][ T28] audit: type=1326 audit(1761463434.564:1182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3618 comm="syz.2.874" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f37ffb8efc9 code=0x0 [ 189.812462][ T3646] netlink: 68 bytes leftover after parsing attributes in process `syz.0.879'. [ 189.876075][ T287] EXT4-fs (loop2): unmounting filesystem. [ 189.911006][ T3652] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3652 comm=syz.1.883 [ 189.923940][ T3652] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 189.937142][ T3652] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.944564][ T3652] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.168449][ T3672] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 190.349851][ T3682] netlink: 64 bytes leftover after parsing attributes in process `syz.2.890'. [ 190.402648][ T3680] loop1: detected capacity change from 0 to 4096 [ 190.468882][ T310] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 190.501330][ T3680] EXT4-fs (loop1): Test dummy encryption mode enabled [ 190.517330][ T3680] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 190.525782][ T3680] System zones: 0-5 [ 190.530834][ T3685] xt_TPROXY: Can be used only with -p tcp or -p udp [ 190.538201][ T3680] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 190.652853][ T310] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 190.791659][ T28] audit: type=1326 audit(1761463435.624:1183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3679 comm="syz.1.893" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fde8cf8efc9 code=0x0 [ 190.882450][ T310] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 190.892315][ T310] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 190.905321][ T310] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 190.914428][ T310] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.923205][ T310] usb 5-1: config 0 descriptor?? [ 191.020849][ T3695] loop2: detected capacity change from 0 to 128 [ 191.127253][ T400] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 191.135620][ T285] EXT4-fs (loop1): unmounting filesystem. [ 191.312408][ T400] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 191.317442][ T3716] loop1: detected capacity change from 0 to 512 [ 191.323678][ T400] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 191.340023][ T400] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 191.353692][ T3716] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 191.354021][ T400] usb 1-1: New USB device found, idVendor=0eef, idProduct=72d0, bcdDevice= 0.00 [ 191.373121][ T400] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.377920][ T3716] EXT4-fs (loop1): 1 truncate cleaned up [ 191.382516][ T400] usb 1-1: config 0 descriptor?? [ 191.390973][ T3716] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 191.416473][ T3718] netlink: 8 bytes leftover after parsing attributes in process `syz.4.888'. [ 191.457311][ T285] EXT4-fs (loop1): unmounting filesystem. [ 191.803150][ T400] hid-multitouch 0003:0EEF:72D0.0005: hidraw0: USB HID v0.00 Device [HID 0eef:72d0] on usb-dummy_hcd.0-1/input0 [ 192.700604][ T3741] loop1: detected capacity change from 0 to 4096 [ 192.724561][ T3741] EXT4-fs (loop1): Test dummy encryption mode enabled [ 192.733497][ T3741] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 192.756935][ T3741] System zones: 0-5 [ 192.782534][ T3741] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 193.214088][ T28] audit: type=1326 audit(1761463437.934:1184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3740 comm="syz.1.909" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fde8cf8efc9 code=0x0 [ 193.255949][ T3750] loop4: detected capacity change from 0 to 512 [ 193.276060][ T3750] EXT4-fs: Ignoring removed oldalloc option [ 193.289253][ T3750] EXT4-fs: test_dummy_encryption requires encrypt feature [ 193.462910][ T310] usbhid 5-1:0.0: can't add hid device: -71 [ 193.470311][ T310] usbhid: probe of 5-1:0.0 failed with error -71 [ 193.478062][ T310] usb 5-1: USB disconnect, device number 13 [ 193.505768][ T285] EXT4-fs (loop1): unmounting filesystem. [ 193.523247][ T1382] usb 1-1: USB disconnect, device number 8 [ 193.534171][ T3755] loop2: detected capacity change from 0 to 2048 [ 193.553204][ T3762] loop0: detected capacity change from 0 to 16 [ 193.574863][ T3760] netlink: 12 bytes leftover after parsing attributes in process `syz.1.913'. [ 193.604364][ T3755] Alternate GPT is invalid, using primary GPT. [ 193.610704][ T3755] loop2: p1 p2 p3 [ 193.614864][ T3755] loop2: partition table partially beyond EOD, truncated [ 193.623037][ T384] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 193.639258][ T3765] FAULT_INJECTION: forcing a failure. [ 193.639258][ T3765] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 193.740216][ T3765] CPU: 1 PID: 3765 Comm: syz.3.915 Not tainted syzkaller #0 [ 193.747553][ T3765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 193.757612][ T3765] Call Trace: [ 193.760892][ T3765] [ 193.763823][ T3765] __dump_stack+0x21/0x24 [ 193.768169][ T3765] dump_stack_lvl+0xee/0x150 [ 193.772758][ T3765] ? __cfi_dump_stack_lvl+0x8/0x8 [ 193.777790][ T3765] ? kstrtoull+0x137/0x1d0 [ 193.782215][ T3765] dump_stack+0x15/0x24 [ 193.786379][ T3765] should_fail_ex+0x3d4/0x520 [ 193.791063][ T3765] should_fail+0xb/0x10 [ 193.795219][ T3765] should_fail_usercopy+0x1a/0x20 [ 193.800248][ T3765] _copy_from_user+0x1e/0xc0 [ 193.804838][ T3765] core_sys_select+0x45c/0x650 [ 193.809609][ T3765] ? __cfi_core_sys_select+0x10/0x10 [ 193.814898][ T3765] ? __cfi_set_user_sigmask+0x10/0x10 [ 193.820268][ T3765] ? __kasan_check_write+0x14/0x20 [ 193.825376][ T3765] ? mutex_unlock+0x89/0x220 [ 193.829968][ T3765] __se_sys_pselect6+0x287/0x310 [ 193.834897][ T3765] ? __x64_sys_pselect6+0x100/0x100 [ 193.840170][ T3765] ? ksys_write+0x1eb/0x240 [ 193.844653][ T3765] ? __cfi_ksys_write+0x10/0x10 [ 193.849495][ T3765] __x64_sys_pselect6+0xe5/0x100 [ 193.854459][ T3765] x64_sys_call+0x1b0/0x9a0 [ 193.858961][ T3765] do_syscall_64+0x4c/0xa0 [ 193.863376][ T3765] ? clear_bhb_loop+0x30/0x80 [ 193.868093][ T3765] ? clear_bhb_loop+0x30/0x80 [ 193.872775][ T3765] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 193.878663][ T3765] RIP: 0033:0x7f243ab8efc9 [ 193.883092][ T3765] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 193.902681][ T3765] RSP: 002b:00007f243bafc038 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 193.911082][ T3765] RAX: ffffffffffffffda RBX: 00007f243ade5fa0 RCX: 00007f243ab8efc9 [ 193.919041][ T3765] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000040 [ 193.927000][ T3765] RBP: 00007f243bafc090 R08: 0000000000000000 R09: 0000000000000000 [ 193.934962][ T3765] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000001 [ 193.942919][ T3765] R13: 00007f243ade6038 R14: 00007f243ade5fa0 R15: 00007ffd4ac72de8 [ 193.950887][ T3765] [ 193.989314][ T104] Alternate GPT is invalid, using primary GPT. [ 193.995707][ T104] loop2: p1 p2 p3 [ 193.999544][ T104] loop2: partition table partially beyond EOD, truncated [ 194.202947][ T3778] netlink: 68 bytes leftover after parsing attributes in process `syz.4.918'. [ 194.361444][ T1382] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 194.511480][ T1382] usb 1-1: device descriptor read/64, error -71 [ 194.781550][ T1382] usb 1-1: device descriptor read/64, error -71 [ 195.068448][ T1382] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 195.251554][ T1382] usb 1-1: device descriptor read/64, error -71 [ 195.521777][ T1382] usb 1-1: device descriptor read/64, error -71 [ 195.641677][ T1382] usb usb1-port1: attempt power cycle [ 195.809496][ T3792] loop3: detected capacity change from 0 to 4096 [ 195.820341][ T28] audit: type=1400 audit(1761463440.694:1185): avc: denied { write } for pid=3793 comm="syz.1.924" name="ptp0" dev="devtmpfs" ino=264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 195.855209][ T28] audit: type=1400 audit(1761463440.694:1186): avc: denied { lock } for pid=3793 comm="syz.1.924" path="/dev/fuse" dev="devtmpfs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 196.004004][ T3795] loop1: detected capacity change from 0 to 40427 [ 196.014357][ T3795] F2FS-fs (loop1): fault_injection options not supported [ 196.021449][ T3795] F2FS-fs (loop1): fault_type options not supported [ 196.028090][ T3795] F2FS-fs (loop1): Image doesn't support compression [ 196.035523][ T3795] F2FS-fs (loop1): invalid crc value [ 196.040975][ T3795] F2FS-fs (loop1): invalid crc value [ 196.046490][ T3795] F2FS-fs (loop1): Failed to get valid F2FS checkpoint [ 196.064282][ T3792] EXT4-fs (loop3): Test dummy encryption mode enabled [ 196.084668][ T3792] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 196.096520][ T3792] System zones: 0-5 [ 196.101172][ T3792] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 196.126956][ T1382] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 196.216139][ T384] I/O error, dev loop1, sector 40192 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 196.273107][ T1382] usb 1-1: device descriptor read/8, error -71 [ 196.326653][ T28] audit: type=1326 audit(1761463441.204:1187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3791 comm="syz.3.923" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f243ab8efc9 code=0x0 [ 196.432967][ T1382] usb 1-1: device descriptor read/8, error -71 [ 196.542722][ T3805] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3805 comm=syz.0.927 [ 196.618230][ T3807] serio: Serial port ptm0 [ 196.624105][ T284] EXT4-fs (loop3): unmounting filesystem. [ 196.659349][ T28] audit: type=1400 audit(1761463441.534:1188): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 196.744311][ T3819] xt_bpf: check failed: parse error [ 197.474870][ T3809] FAULT_INJECTION: forcing a failure. [ 197.474870][ T3809] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 197.562365][ T3809] CPU: 1 PID: 3809 Comm: syz.3.928 Not tainted syzkaller #0 [ 197.569695][ T3809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 197.579752][ T3809] Call Trace: [ 197.583033][ T3809] [ 197.585958][ T3809] __dump_stack+0x21/0x24 [ 197.590288][ T3809] dump_stack_lvl+0xee/0x150 [ 197.594872][ T3809] ? __cfi_dump_stack_lvl+0x8/0x8 [ 197.599879][ T3809] dump_stack+0x15/0x24 [ 197.604013][ T3809] should_fail_ex+0x3d4/0x520 [ 197.608670][ T3809] should_fail+0xb/0x10 [ 197.612802][ T3809] should_fail_usercopy+0x1a/0x20 [ 197.617805][ T3809] set_fd_set+0x2d/0x80 [ 197.621935][ T3809] core_sys_select+0x523/0x650 [ 197.626683][ T3809] ? __cfi_core_sys_select+0x10/0x10 [ 197.631950][ T3809] ? __cfi_set_user_sigmask+0x10/0x10 [ 197.637299][ T3809] ? __kasan_check_write+0x14/0x20 [ 197.642403][ T3809] ? mutex_unlock+0x89/0x220 [ 197.646973][ T3809] __se_sys_pselect6+0x287/0x310 [ 197.651891][ T3809] ? __x64_sys_pselect6+0x100/0x100 [ 197.657063][ T3809] ? ksys_write+0x1eb/0x240 [ 197.661538][ T3809] ? __cfi_ksys_write+0x10/0x10 [ 197.666368][ T3809] __x64_sys_pselect6+0xe5/0x100 [ 197.671280][ T3809] x64_sys_call+0x1b0/0x9a0 [ 197.675767][ T3809] do_syscall_64+0x4c/0xa0 [ 197.680166][ T3809] ? clear_bhb_loop+0x30/0x80 [ 197.685174][ T3809] ? clear_bhb_loop+0x30/0x80 [ 197.689833][ T3809] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 197.695699][ T3809] RIP: 0033:0x7f243ab8efc9 [ 197.700089][ T3809] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 197.719670][ T3809] RSP: 002b:00007f243bafc038 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 197.728062][ T3809] RAX: ffffffffffffffda RBX: 00007f243ade5fa0 RCX: 00007f243ab8efc9 [ 197.736012][ T3809] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000040 [ 197.743962][ T3809] RBP: 00007f243bafc090 R08: 0000000000000000 R09: 0000000000000000 [ 197.751909][ T3809] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000001 [ 197.759856][ T3809] R13: 00007f243ade6038 R14: 00007f243ade5fa0 R15: 00007ffd4ac72de8 [ 197.767811][ T3809] [ 198.606289][ T3832] netlink: 64 bytes leftover after parsing attributes in process `syz.0.933'. [ 199.589652][ T3848] loop3: detected capacity change from 0 to 2048 [ 199.611574][ T3855] loop1: detected capacity change from 0 to 4096 [ 199.631677][ T3855] EXT4-fs (loop1): Test dummy encryption mode enabled [ 199.655327][ T3855] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 199.665447][ T3855] System zones: 0-5 [ 199.670122][ T3855] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 200.036514][ T28] audit: type=1326 audit(1761463444.794:1189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3854 comm="syz.1.939" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fde8cf8efc9 code=0x0 [ 200.065012][ T3848] Alternate GPT is invalid, using primary GPT. [ 200.073341][ T3848] loop3: p1 p2 p3 [ 200.081215][ T3848] loop3: partition table partially beyond EOD, truncated [ 200.149551][ T3871] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1820 sclass=netlink_route_socket pid=3871 comm=syz.4.943 [ 200.212340][ T19] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 200.401435][ T19] usb 4-1: Using ep0 maxpacket: 16 [ 200.407802][ T19] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 200.591063][ T19] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 200.601453][ T19] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 200.610551][ T19] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.210155][ T19] usb 4-1: config 0 descriptor?? [ 201.512611][ T1382] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 202.514247][ T19] hid-generic 0003:04D8:00DD.0006: hidraw0: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 202.553014][ T285] EXT4-fs (loop1): unmounting filesystem. [ 202.590078][ T3879] loop1: detected capacity change from 0 to 512 [ 202.619689][ T3879] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 202.629799][ T3879] EXT4-fs (loop1): invalid journal inode [ 202.642533][ T3879] EXT4-fs (loop1): can't get journal size [ 202.650655][ T3879] EXT4-fs (loop1): 1 truncate cleaned up [ 202.656479][ T3879] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 202.662602][ T1382] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 202.675851][ T1382] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 204.851008][ T3887] netlink: 'syz.1.945': attribute type 3 has an invalid length. [ 204.858953][ T3887] netlink: 'syz.1.945': attribute type 3 has an invalid length. [ 204.878858][ T1382] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 204.888265][ T1382] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 204.936125][ T1382] usb 1-1: Manufacturer: syz [ 205.042013][ T400] usb 4-1: USB disconnect, device number 13 [ 205.043320][ T285] EXT4-fs (loop1): unmounting filesystem. [ 205.056876][ T1382] usb 1-1: config 0 descriptor?? [ 205.305757][ T1382] usb 1-1: can't set config #0, error -71 [ 205.440149][ T3903] loop4: detected capacity change from 0 to 512 [ 205.455030][ T1382] usb 1-1: USB disconnect, device number 13 [ 205.469279][ T3903] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 205.492457][ T3903] EXT4-fs (loop4): warning: checktime reached, running e2fsck is recommended [ 206.134939][ T3903] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 206.145160][ T3903] ext4 filesystem being mounted at /173/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 206.227849][ T3917] loop2: detected capacity change from 0 to 4096 [ 206.270604][ T3917] EXT4-fs (loop2): Test dummy encryption mode enabled [ 206.292524][ T3917] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 206.308975][ T3917] System zones: 0-5 [ 206.319555][ T3917] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 206.538598][ T28] audit: type=1326 audit(1761463451.414:1190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3916 comm="syz.2.956" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f37ffb8efc9 code=0x0 [ 206.761447][ T400] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 206.961443][ T400] usb 2-1: Using ep0 maxpacket: 8 [ 206.967870][ T400] usb 2-1: unable to get BOS descriptor or descriptor too short [ 206.992147][ T400] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 207.012894][ T400] usb 2-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 207.031443][ T400] usb 2-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 207.051452][ T400] usb 2-1: Product: syz [ 207.055675][ T400] usb 2-1: Manufacturer: syz [ 207.060263][ T400] usb 2-1: SerialNumber: syz [ 207.070964][ T287] EXT4-fs (loop2): unmounting filesystem. [ 207.077644][ T400] usb 2-1: config 0 descriptor?? [ 207.108978][ T3931] loop3: detected capacity change from 0 to 2048 [ 207.134165][ T3934] loop2: detected capacity change from 0 to 4096 [ 207.140737][ T3935] loop0: detected capacity change from 0 to 128 [ 207.143099][ T3931] loop3: p1 < > p3 [ 207.151700][ T28] audit: type=1400 audit(1761463452.034:1191): avc: denied { write } for pid=3932 comm="syz.0.961" name="/" dev="configfs" ino=13756 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 207.183731][ T3934] EXT4-fs (loop2): Test dummy encryption mode enabled [ 207.191316][ T3931] loop3: p3 size 54016 extends beyond EOD, truncated [ 207.202644][ T3934] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 207.210876][ T3934] System zones: 0-5 [ 207.215367][ T767] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 207.224931][ T28] audit: type=1400 audit(1761463452.094:1192): avc: denied { watch } for pid=3932 comm="syz.0.961" path="/" dev="configfs" ino=13756 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 207.235762][ T3934] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 207.371733][ T3939] fuse: Bad value for 'group_id' [ 207.439225][ T3941] overlayfs: './file0' not a directory [ 207.447543][ T28] audit: type=1400 audit(1761463452.314:1193): avc: denied { mounton } for pid=3930 comm="syz.3.960" path="/dev/loop3p1" dev="devtmpfs" ino=1256 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 207.487278][ T288] EXT4-fs (loop4): unmounting filesystem. [ 207.505845][ T3941] loop3: detected capacity change from 0 to 128 [ 207.570956][ T28] audit: type=1326 audit(1761463452.444:1194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3933 comm="syz.2.959" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f37ffb8efc9 code=0x0 [ 207.615071][ T3920] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 207.626742][ T3920] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 207.953634][ T3950] fuse: Bad value for 'fd' [ 207.975679][ T287] EXT4-fs (loop2): unmounting filesystem. [ 208.035022][ T3958] loop2: detected capacity change from 0 to 512 [ 208.041926][ T3958] EXT4-fs: Ignoring removed oldalloc option [ 208.053257][ T3958] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 208.062301][ T3958] ext4 filesystem being mounted at /206/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 208.075514][ T3958] EXT4-fs error (device loop2): ext4_lookup:1858: inode #12: comm syz.2.966: iget: bad i_size value: 2533274857506816 [ 208.145104][ T3961] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.966: bg 0: block 217: padding at end of block bitmap is not set [ 208.164743][ T3961] EXT4-fs error (device loop2): ext4_lookup:1858: inode #12: comm syz.2.966: iget: bad i_size value: 2533274857506816 [ 208.165296][ T400] usb 2-1: USB disconnect, device number 6 [ 208.211568][ T28] audit: type=1400 audit(1761463453.084:1195): avc: denied { setattr } for pid=3957 comm="syz.2.966" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 208.247630][ T1382] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 208.272465][ T3965] loop1: detected capacity change from 0 to 1024 [ 208.292508][ T3965] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802c118, mo2=0002] [ 208.300660][ T3965] System zones: 0-1, 3-12 [ 208.305535][ T3965] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 208.593697][ T1382] usb 4-1: Using ep0 maxpacket: 8 [ 208.600004][ T1382] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 208.611309][ T1382] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 208.620389][ T1382] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.628439][ T1382] usb 4-1: Product: syz [ 208.632622][ T1382] usb 4-1: Manufacturer: syz [ 208.637227][ T1382] usb 4-1: SerialNumber: syz [ 208.708297][ T3976] loop4: detected capacity change from 0 to 4096 [ 208.718666][ T3976] EXT4-fs (loop4): Test dummy encryption mode enabled [ 208.726945][ T3976] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 208.735323][ T3976] System zones: 0-5 [ 208.740369][ T3976] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 208.849414][ T285] EXT4-fs (loop1): unmounting filesystem. [ 208.849855][ T1382] cdc_ncm 4-1:1.0: bind() failure [ 208.861281][ T1382] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 208.868269][ T1382] cdc_ncm 4-1:1.1: bind() failure [ 209.280095][ T28] audit: type=1326 audit(1761463454.134:1196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3975 comm="syz.4.970" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5c4bf8efc9 code=0x0 [ 209.363756][ T287] EXT4-fs (loop2): unmounting filesystem. [ 209.421129][ T1382] usb 4-1: USB disconnect, device number 14 [ 209.435204][ T3989] loop3: detected capacity change from 0 to 8192 [ 209.452085][ T3989] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 209.493167][ T3993] futex_wake_op: syz.2.972 tries to shift op by 32; fix this program [ 209.538890][ T288] EXT4-fs (loop4): unmounting filesystem. [ 209.595985][ T4004] netlink: 4 bytes leftover after parsing attributes in process `syz.3.975'. [ 209.608918][ T28] audit: type=1400 audit(1761463454.484:1197): avc: denied { create } for pid=3995 comm="syz.3.975" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 209.688095][ T3998] 9pnet_fd: Insufficient options for proto=fd [ 210.292525][ T4015] netlink: 12 bytes leftover after parsing attributes in process `syz.4.979'. [ 210.313478][ T4015] device xfrm1 entered promiscuous mode [ 210.319194][ T4015] netlink: 12 bytes leftover after parsing attributes in process `syz.4.979'. [ 210.400969][ T4020] netlink: 16 bytes leftover after parsing attributes in process `syz.4.979'. [ 210.681443][ T310] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 210.863067][ T310] usb 4-1: unable to get BOS descriptor or descriptor too short [ 210.871600][ T310] usb 4-1: not running at top speed; connect to a high speed hub [ 210.880225][ T310] usb 4-1: config 219 has an invalid descriptor of length 0, skipping remainder of the config [ 210.890986][ T310] usb 4-1: config 219 has 1 interface, different from the descriptor's value: 2 [ 210.900332][ T310] usb 4-1: config 219 interface 0 has no altsetting 0 [ 210.907644][ T310] usb 4-1: config 219 interface 0 has no altsetting 1 [ 210.916352][ T310] usb 4-1: New USB device found, idVendor=2b73, idProduct=0017, bcdDevice=a2.0e [ 210.925789][ T310] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.934234][ T310] usb 4-1: Product: syz [ 210.938591][ T310] usb 4-1: Manufacturer: syz [ 210.943668][ T310] usb 4-1: SerialNumber: syz [ 211.161105][ T310] snd-usb-audio: probe of 4-1:219.0 failed with error -22 [ 211.183553][ T515] udevd[515]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:219.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 211.200638][ T310] usb 4-1: USB disconnect, device number 15 [ 211.328627][ T4031] IPv6: NLM_F_REPLACE set, but no existing node found! [ 211.347794][ T4036] loop1: detected capacity change from 0 to 1024 [ 211.354548][ T4036] EXT4-fs: Ignoring removed nobh option [ 211.430188][ T4036] EXT4-fs: Ignoring removed bh option [ 211.440176][ T4036] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 211.451942][ T28] audit: type=1400 audit(1761463456.294:1198): avc: denied { create } for pid=4027 comm="syz.4.984" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 211.498745][ T4036] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 211.547200][ T285] EXT4-fs (loop1): unmounting filesystem. [ 211.569920][ T4041] loop1: detected capacity change from 0 to 4096 [ 211.578083][ T4041] EXT4-fs (loop1): Test dummy encryption mode enabled [ 211.585782][ T4041] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 211.594558][ T4041] System zones: 0-5 [ 211.599002][ T4041] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 211.601672][ T19] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 211.827881][ T28] audit: type=1326 audit(1761463456.704:1199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4040 comm="syz.1.987" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fde8cf8efc9 code=0x0 [ 211.882875][ T19] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 211.893941][ T19] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 211.903827][ T19] usb 1-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 211.913153][ T19] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.921725][ T19] usb 1-1: config 0 descriptor?? [ 212.322553][ T1382] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 212.330072][ T19] isku 0003:1E7D:319C.0007: item fetching failed at offset 5/7 [ 212.341274][ T19] isku 0003:1E7D:319C.0007: parse failed [ 212.348101][ T19] isku: probe of 0003:1E7D:319C.0007 failed with error -22 [ 212.475548][ T285] EXT4-fs (loop1): unmounting filesystem. [ 212.568086][ T19] usb 1-1: USB disconnect, device number 14 [ 212.945765][ T28] audit: type=1400 audit(1761463457.824:1200): avc: denied { read } for pid=4060 comm="syz.1.991" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 213.002954][ T1382] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 213.032311][ T1382] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 213.076911][ T1382] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 213.117487][ T1382] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 213.126632][ T1382] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.147072][ T1382] usb 4-1: config 0 descriptor?? [ 213.768845][ T4073] netlink: 64 bytes leftover after parsing attributes in process `syz.0.995'. [ 214.041581][ T541] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 214.178746][ T1382] plantronics 0003:047F:FFFF.0008: No inputs registered, leaving [ 214.194875][ T1382] plantronics 0003:047F:FFFF.0008: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 214.301432][ T541] usb 5-1: Using ep0 maxpacket: 32 [ 214.308782][ T541] usb 5-1: config 0 has an invalid interface number: 85 but max is 0 [ 214.326792][ T541] usb 5-1: config 0 has no interface number 0 [ 214.333111][ T541] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 214.344343][ T541] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 214.355769][ T541] usb 5-1: config 0 interface 85 has no altsetting 0 [ 214.364417][ T541] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 214.374104][ T541] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.388599][ T541] usb 5-1: Product: syz [ 214.414005][ T541] usb 5-1: Manufacturer: syz [ 214.436643][ T541] usb 5-1: SerialNumber: syz [ 214.543865][ T541] usb 5-1: config 0 descriptor?? [ 214.754829][ C0] plantronics 0003:047F:FFFF.0008: hid_field_extract() called with n (132) > 32! (syz.1.996) [ 214.771768][ T4053] loop3: detected capacity change from 0 to 512 [ 214.778778][ T28] audit: type=1400 audit(1761463459.654:1201): avc: denied { append } for pid=4090 comm="syz.2.999" name="random" dev="devtmpfs" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 214.802179][ T4053] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 214.814816][ T4053] EXT4-fs (loop3): orphan cleanup on readonly fs [ 214.821822][ T4053] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.989: bg 0: block 248: padding at end of block bitmap is not set [ 214.836300][ T4053] Quota error (device loop3): write_blk: dquota write failed [ 214.843861][ T4053] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 214.853878][ T4053] EXT4-fs error (device loop3): ext4_acquire_dquot:6803: comm syz.3.989: Failed to acquire dquot type 1 [ 214.866013][ T4053] EXT4-fs (loop3): 1 truncate cleaned up [ 214.872076][ T4053] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 214.888206][ T4053] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 214.896954][ T4053] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 214.912088][ T4102] loop1: detected capacity change from 0 to 4096 [ 214.920613][ T4102] EXT4-fs (loop1): Test dummy encryption mode enabled [ 214.928724][ T4102] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 214.937087][ T4102] System zones: 0-5 [ 214.943226][ T4102] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 215.502909][ T28] audit: type=1326 audit(1761463460.064:1202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4101 comm="syz.1.1001" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fde8cf8efc9 code=0x0 [ 215.671594][ T19] usb 4-1: reset high-speed USB device number 16 using dummy_hcd [ 215.752024][ T285] EXT4-fs (loop1): unmounting filesystem. [ 216.312275][ T4131] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1008'. [ 216.331043][ T284] EXT4-fs (loop3): unmounting filesystem. [ 216.356609][ T541] usb 5-1: USB disconnect, device number 14 [ 216.435689][ T1382] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 216.796346][ T1382] usb 2-1: Using ep0 maxpacket: 16 [ 216.803497][ T1382] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 216.812546][ T1382] usb 2-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 216.822274][ T1382] usb 2-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 217.515846][ T1382] usb 2-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 217.528403][ T1382] usb 2-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 217.538669][ T1382] usb 2-1: config 1 interface 0 has no altsetting 0 [ 217.546190][ T1382] usb 2-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 217.555851][ T1382] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.648197][ T1382] ums-sddr09 2-1:1.0: USB Mass Storage device detected [ 217.847677][ T310] usb 4-1: USB disconnect, device number 16 [ 217.865882][ T1382] scsi host1: usb-storage 2-1:1.0 [ 217.900991][ T4160] loop4: detected capacity change from 0 to 256 [ 217.922789][ T4160] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x4ec6003b, utbl_chksum : 0xe619d30d) [ 218.016352][ T4172] 9pnet: p9_errstr2errno: server reported unknown error 00000000000000000000005D [ 218.113500][ T310] usb 2-1: USB disconnect, device number 7 [ 218.251444][ T4150] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 218.265784][ T4185] loop0: detected capacity change from 0 to 128 [ 218.272641][ T4185] ext4: Unknown parameter 'audit' [ 218.431434][ T4150] usb 5-1: Using ep0 maxpacket: 16 [ 218.438970][ T4150] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 218.450105][ T4150] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 218.460006][ T4150] usb 5-1: config 0 interface 0 has no altsetting 0 [ 218.466790][ T4150] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 218.475970][ T4150] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.488467][ T4150] usb 5-1: config 0 descriptor?? [ 218.935341][ T4150] hid (null): invalid report_size 24934 [ 218.946517][ T4150] hid (null): invalid report_size 1953394281 [ 219.256062][ T4150] hid (null): unknown global tag 0xc [ 220.438295][ T4150] hid (null): unknown global tag 0xc [ 220.443920][ T4150] hid (null): global environment stack underflow [ 220.452384][ T4150] usb 5-1: USB disconnect, device number 15 [ 220.496316][ T4205] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1024'. [ 220.581348][ T4215] loop3: detected capacity change from 0 to 4096 [ 220.629271][ T4217] loop0: detected capacity change from 0 to 512 [ 220.739515][ T4215] EXT4-fs (loop3): Test dummy encryption mode enabled [ 220.781792][ T19] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 220.816035][ T4217] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 220.824239][ T4217] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 220.835842][ T4217] EXT4-fs (loop0): 1 truncate cleaned up [ 220.841562][ T4217] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 220.938206][ T4215] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 220.981556][ T19] usb 2-1: Using ep0 maxpacket: 16 [ 220.988997][ T19] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 221.027953][ T19] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 221.062815][ T4215] System zones: 0-5 [ 221.093913][ T4215] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 221.221025][ T19] usb 2-1: config 0 has no interface number 0 [ 221.389294][ T19] usb 2-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 222.394811][ T19] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.403258][ T19] usb 2-1: Product: syz [ 222.407434][ T19] usb 2-1: Manufacturer: syz [ 222.412280][ T19] usb 2-1: SerialNumber: syz [ 222.420694][ T19] usb 2-1: config 0 descriptor?? [ 222.455747][ T286] EXT4-fs (loop0): unmounting filesystem. [ 222.532835][ T4238] IPv6: Can't replace route, no match found [ 222.572942][ T28] audit: type=1400 audit(1761463467.454:1203): avc: denied { accept } for pid=4237 comm="syz.0.1033" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 222.603547][ T284] EXT4-fs (loop3): unmounting filesystem. [ 222.629631][ T4246] loop3: detected capacity change from 0 to 128 [ 222.642749][ T4246] EXT4-fs: journaled quota format not specified [ 222.650118][ T61] usb 2-1: USB disconnect, device number 8 [ 222.695150][ T4246] loop3: detected capacity change from 0 to 256 [ 222.737353][ T4243] loop4: detected capacity change from 0 to 40427 [ 222.746002][ T4243] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 222.754567][ T4243] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 222.764388][ T4243] F2FS-fs (loop4): invalid crc value [ 222.770911][ T4243] F2FS-fs (loop4): Found nat_bits in checkpoint [ 222.793159][ T4243] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 222.800264][ T4243] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 223.242941][ T4259] loop1: detected capacity change from 0 to 512 [ 223.257021][ T4259] ext2: Unknown parameter 'uid<00000000000000000000' [ 223.846995][ T4277] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1042'. [ 224.123825][ T4293] tipc: Enabling of bearer rejected, failed to enable media [ 224.207975][ T4301] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1046'. [ 224.339158][ T4297] loop3: detected capacity change from 0 to 1024 [ 224.356317][ T4297] EXT4-fs: Ignoring removed i_version option [ 224.363911][ T4297] ext4: Bad value for 'auto_da_alloc' [ 224.451494][ T541] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 224.559066][ T28] audit: type=1400 audit(1761463469.404:1204): avc: denied { getopt } for pid=4309 comm="syz.0.1053" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 224.620180][ T4317] tipc: Started in network mode [ 224.625143][ T4317] tipc: Node identity f6e1709dc7e9, cluster identity 4711 [ 224.633484][ T4317] tipc: Enabled bearer , priority 0 [ 224.640691][ T4317] device syzkaller0 entered promiscuous mode [ 224.683657][ T541] usb 2-1: Using ep0 maxpacket: 16 [ 224.691069][ T541] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 224.706938][ T541] usb 2-1: config 0 has no interface number 0 [ 224.724062][ T541] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 224.735758][ T541] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 225.444071][ T541] usb 2-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 225.626239][ T541] usb 2-1: New USB device found, idVendor=04d9, idProduct=a072, bcdDevice= 0.00 [ 225.642224][ T541] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.651095][ T541] usb 2-1: config 0 descriptor?? [ 225.887861][ T19] tipc: Node number set to 822636701 [ 225.898439][ T4335] loop4: detected capacity change from 0 to 512 [ 225.912089][ T28] audit: type=1400 audit(1761463470.614:1205): avc: denied { watch } for pid=4325 comm="syz.2.1058" path="/224/file0" dev="tmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 225.955695][ T4335] EXT4-fs (loop4): orphan cleanup on readonly fs [ 225.962868][ T4335] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.1057: bg 0: block 248: padding at end of block bitmap is not set [ 225.978195][ T4335] Quota error (device loop4): write_blk: dquota write failed [ 225.985844][ T4335] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 225.995947][ T4335] EXT4-fs error (device loop4): ext4_acquire_dquot:6803: comm syz.4.1057: Failed to acquire dquot type 1 [ 226.008208][ T4335] EXT4-fs (loop4): 1 truncate cleaned up [ 226.015288][ T4335] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 226.032378][ T4328] EXT4-fs error (device loop4): ext4_lookup:1858: inode #15: comm syz.4.1057: iget: bad i_size value: 360287970189639690 [ 226.046111][ T4328] EXT4-fs error (device loop4): ext4_lookup:1862: inode #2: comm syz.4.1057: deleted inode referenced: 12 [ 226.157147][ T541] holtek_mouse 0003:04D9:A072.000A: unknown main item tag 0x0 [ 226.165125][ T541] holtek_mouse 0003:04D9:A072.000A: unknown main item tag 0x0 [ 226.172979][ T541] holtek_mouse 0003:04D9:A072.000A: unknown main item tag 0x0 [ 226.176343][ T4341] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1061'. [ 226.180867][ T541] holtek_mouse 0003:04D9:A072.000A: unknown main item tag 0x0 [ 226.201871][ T541] holtek_mouse 0003:04D9:A072.000A: hidraw0: USB HID v0.00 Device [HID 04d9:a072] on usb-dummy_hcd.1-1/input1 [ 226.329733][ T288] EXT4-fs (loop4): unmounting filesystem. [ 226.373989][ T4346] loop3: detected capacity change from 0 to 512 [ 226.382658][ T4346] EXT4-fs: Ignoring removed bh option [ 226.405037][ T4346] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 226.414328][ T4346] ext4 filesystem being mounted at /227/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 226.453134][ T19] usb 2-1: USB disconnect, device number 9 [ 226.472923][ T4360] fuse: Unknown parameter 'default_permissions_dequeue' [ 226.513668][ T28] audit: type=1400 audit(1761463471.394:1206): avc: denied { create } for pid=4363 comm="syz.2.1066" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 226.549520][ T28] audit: type=1400 audit(1761463471.394:1207): avc: denied { sys_admin } for pid=4363 comm="syz.2.1066" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 226.578242][ T28] audit: type=1400 audit(1761463471.454:1208): avc: denied { execmem } for pid=4368 comm="syz.2.1068" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 226.739892][ T4374] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1068'. [ 227.656095][ T4398] loop2: detected capacity change from 0 to 512 [ 227.681183][ T4398] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 227.726685][ T4398] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 227.752409][ T4398] ext4 filesystem being mounted at /230/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 227.850181][ T287] EXT4-fs (loop2): unmounting filesystem. [ 227.868245][ T4406] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 227.898833][ T4406] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 228.191607][ T28] audit: type=1400 audit(1761463473.044:1209): avc: denied { create } for pid=4407 comm="syz.2.1078" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 228.320010][ T19] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 228.429743][ T28] audit: type=1400 audit(1761463473.304:1210): avc: denied { write } for pid=4411 comm="syz.1.1079" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 228.429824][ T4414] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1079'. [ 228.471447][ T28] audit: type=1400 audit(1761463473.304:1211): avc: denied { nlmsg_write } for pid=4411 comm="syz.1.1079" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 228.677475][ T4418] loop0: detected capacity change from 0 to 512 [ 228.693106][ T4418] EXT4-fs: Ignoring removed mblk_io_submit option [ 228.702299][ T4418] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13 [ 228.710763][ T4418] EXT4-fs error (device loop0): ext4_clear_blocks:883: inode #13: comm syz.0.1081: attempt to clear invalid blocks 2 len 1 [ 228.724146][ T4418] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 228.738723][ T4418] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.1081: invalid indirect mapped block 1819239214 (level 0) [ 228.753103][ T4418] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.1081: invalid indirect mapped block 1819239214 (level 1) [ 228.767796][ T4418] EXT4-fs (loop0): 1 truncate cleaned up [ 228.773547][ T4418] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 228.983718][ T4429] EXT4-fs (loop0): Quota file not on filesystem root. Journaled quota will not work [ 228.996288][ T28] audit: type=1400 audit(1761463473.874:1212): avc: denied { quotaon } for pid=4417 comm="syz.0.1081" name="file0" dev="loop0" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 229.190839][ T4433] loop1: detected capacity change from 0 to 128 [ 229.246629][ T515] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 229.290880][ T4434] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1085'. [ 229.471735][ T284] EXT4-fs (loop3): unmounting filesystem. [ 229.574523][ T286] EXT4-fs (loop0): unmounting filesystem. [ 229.617507][ T4448] loop4: detected capacity change from 0 to 128 [ 229.635427][ T4446] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1090'. [ 229.669800][ T4448] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 229.691514][ T4448] ext4 filesystem being mounted at /198/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 229.779081][ T288] EXT4-fs (loop4): unmounting filesystem. [ 230.031333][ T28] audit: type=1400 audit(1761463474.884:1213): avc: denied { create } for pid=4457 comm="syz.3.1094" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 231.306398][ T4478] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1101'. [ 231.352484][ T28] audit: type=1400 audit(1761463476.234:1214): avc: denied { connect } for pid=4476 comm="syz.4.1101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 231.374126][ T4478] sch_tbf: burst 6 is lower than device ip6gre0 mtu (1448) ! [ 231.569658][ T4485] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1097'. [ 231.593996][ T4475] loop2: detected capacity change from 0 to 40427 [ 231.608832][ T4475] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504) [ 231.622795][ T4475] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 231.641869][ T4475] F2FS-fs (loop2): invalid crc value [ 231.660031][ T4475] F2FS-fs (loop2): Found nat_bits in checkpoint [ 231.757494][ T4475] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 231.765972][ T4483] loop4: detected capacity change from 0 to 40427 [ 231.769315][ T4475] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 231.777166][ T4483] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 231.788478][ T4483] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 231.802317][ T4483] F2FS-fs (loop4): invalid crc value [ 231.817523][ T4483] F2FS-fs (loop4): Found nat_bits in checkpoint [ 231.818091][ T28] audit: type=1400 audit(1761463476.694:1215): avc: denied { map } for pid=4474 comm="syz.2.1100" path="/proc/809/fdinfo" dev="proc" ino=33181 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 231.899988][ T4483] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 231.911924][ T4483] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 232.335941][ T4504] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1108'. [ 232.566699][ T4502] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1107'. [ 232.610439][ T28] audit: type=1400 audit(1761463477.484:1216): avc: denied { rename } for pid=4481 comm="syz.4.1103" name="file1" dev="loop4" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 232.612817][ T4519] netlink: 'syz.3.1109': attribute type 50 has an invalid length. [ 232.666510][ T4524] overlayfs: missing 'lowerdir' [ 232.691479][ T4527] kvm: MWAIT instruction emulated as NOP! [ 232.794008][ T28] audit: type=1400 audit(1761463477.674:1217): avc: denied { remount } for pid=4522 comm="syz.3.1113" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 232.817787][ T4526] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 232.990587][ T4541] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1117'. [ 233.080241][ T4541] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.087492][ T4541] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.227145][ T4543] tipc: Started in network mode [ 233.232287][ T4543] tipc: Node identity 3224bfca0b2d, cluster identity 4711 [ 233.253887][ T4554] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1119'. [ 233.289604][ T4543] tipc: Enabled bearer , priority 10 [ 233.412208][ T4566] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1120'. [ 233.480262][ T4573] 9pnet_fd: Insufficient options for proto=fd [ 233.541020][ T4579] loop0: detected capacity change from 0 to 256 [ 233.562510][ T4579] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d) [ 233.598354][ T104] udevd[104]: worker [515] terminated by signal 33 (Unknown signal 33) [ 233.607095][ T104] udevd[104]: worker [515] failed while handling '/devices/virtual/block/loop0' [ 233.652743][ T104] udevd[104]: worker [384] terminated by signal 33 (Unknown signal 33) [ 233.661702][ T104] udevd[104]: worker [384] failed while handling '/devices/virtual/block/loop0' [ 233.860215][ T4589] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1127'. [ 234.211452][ T398] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 234.242838][ T4594] tipc: Enabling of bearer rejected, already enabled [ 234.281658][ T4559] tipc: Node number set to 956940234 [ 234.318039][ T4608] loop4: detected capacity change from 0 to 512 [ 234.351846][ T4608] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #15: comm syz.4.1133: casefold flag without casefold feature [ 234.364945][ T4608] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.1133: couldn't read orphan inode 15 (err -117) [ 234.377674][ T4608] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 234.396452][ T398] usb 2-1: Using ep0 maxpacket: 8 [ 234.407905][ T398] usb 2-1: unable to get BOS descriptor or descriptor too short [ 234.416892][ T398] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 234.427442][ T398] usb 2-1: config 0 has no interfaces? [ 234.434909][ T398] usb 2-1: New USB device found, idVendor=6d79, idProduct=4f80, bcdDevice=d7.15 [ 234.444474][ T398] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.455640][ T398] usb 2-1: Product: syz [ 234.459853][ T398] usb 2-1: Manufacturer: syz [ 234.464843][ T398] usb 2-1: SerialNumber: syz [ 234.470219][ T398] usb 2-1: config 0 descriptor?? [ 234.560238][ T4616] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1134'. [ 234.797664][ T4619] loop0: detected capacity change from 0 to 512 [ 234.806372][ T4619] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 234.826391][ T4619] EXT4-fs (loop0): 1 truncate cleaned up [ 234.832188][ T4619] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 234.842569][ T4619] capability: warning: `syz.0.1135' uses deprecated v2 capabilities in a way that may be insecure [ 234.871356][ T286] EXT4-fs (loop0): unmounting filesystem. [ 235.174907][ T288] EXT4-fs (loop4): unmounting filesystem. [ 236.301436][ T398] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 236.492945][ T398] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 236.568184][ T4658] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1145'. [ 236.729911][ T398] usb 5-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 236.739224][ T398] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.750755][ T398] usb 5-1: config 0 descriptor?? [ 236.956664][ T581] usb 2-1: USB disconnect, device number 10 [ 236.958056][ T4654] loop4: detected capacity change from 0 to 128 [ 236.984522][ T4654] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 236.993674][ T4654] ext4 filesystem being mounted at /211/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 237.003724][ T4664] loop1: detected capacity change from 0 to 512 [ 237.010855][ T4664] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 237.029282][ T4664] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF [ 237.048438][ T4654] fscrypt: loop4: 1 inode(s) still busy after removing key with identifier 69b2f6edeee720cce0577937eb8a6751, including ino 12 [ 237.065759][ T28] audit: type=1400 audit(1761463481.944:1218): avc: denied { ioctl } for pid=4665 comm="syz.1.1148" path="socket:[33393]" dev="sockfs" ino=33393 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 237.069841][ T4667] input: syz1 as /devices/virtual/input/input15 [ 237.269303][ T398] lenovo 0003:17EF:6047.000B: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.4-1/input0 [ 237.371793][ T28] audit: type=1400 audit(1761463482.224:1219): avc: denied { read } for pid=4678 comm="syz.3.1152" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 237.890946][ T4684] loop3: detected capacity change from 0 to 512 [ 238.269529][ T4702] loop1: detected capacity change from 0 to 4096 [ 238.277982][ T4702] EXT4-fs (loop1): Test dummy encryption mode enabled [ 238.327542][ T4702] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 238.450483][ T4702] System zones: 0-5 [ 238.458143][ T4702] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 238.585738][ T398] lenovo 0003:17EF:6047.000B: Fn-lock setting failed: -71 [ 238.593826][ T398] lenovo 0003:17EF:6047.000B: Sensitivity setting failed: -71 [ 238.602910][ T398] usb 5-1: USB disconnect, device number 17 [ 238.665781][ T4716] fido_id[4716]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 238.751573][ T28] audit: type=1326 audit(1761463483.624:1220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4701 comm="syz.1.1159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde8cf8efc9 code=0x7ffc0000 [ 238.835957][ T28] audit: type=1326 audit(1761463483.624:1221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4701 comm="syz.1.1159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde8cf8efc9 code=0x7ffc0000 [ 238.864278][ T28] audit: type=1326 audit(1761463483.624:1222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4701 comm="syz.1.1159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=229 compat=0 ip=0x7fde8cf8efc9 code=0x7ffc0000 [ 238.889077][ T28] audit: type=1326 audit(1761463483.624:1223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4701 comm="syz.1.1159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde8cf8efc9 code=0x7ffc0000 [ 238.912755][ T28] audit: type=1326 audit(1761463483.624:1224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4701 comm="syz.1.1159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde8cf8efc9 code=0x7ffc0000 [ 238.936522][ T28] audit: type=1326 audit(1761463483.624:1225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4701 comm="syz.1.1159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fde8cf8efc9 code=0x7ffc0000 [ 238.960870][ T28] audit: type=1326 audit(1761463483.624:1226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4701 comm="syz.1.1159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fde8cf8f003 code=0x7ffc0000 [ 238.984432][ T28] audit: type=1326 audit(1761463483.624:1227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4701 comm="syz.1.1159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fde8cf8da7f code=0x7ffc0000 [ 239.013749][ T288] EXT4-fs (loop4): unmounting filesystem. [ 239.074655][ T4724] loop0: detected capacity change from 0 to 1024 [ 239.102869][ T4724] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 239.186841][ T4742] xt_bpf: check failed: parse error [ 239.207849][ T285] EXT4-fs (loop1): unmounting filesystem. [ 239.245642][ T4753] syz.4.1171[4753] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 239.245711][ T4753] syz.4.1171[4753] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 242.431544][ T28] kauditd_printk_skb: 14 callbacks suppressed [ 242.431562][ T28] audit: type=1326 audit(1761463485.574:1242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4722 comm="syz.0.1163" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3ff2d8efc9 code=0x0 [ 242.505442][ T28] audit: type=1400 audit(1761463486.534:1243): avc: denied { execute } for pid=4722 comm="syz.0.1163" path="/225/bus/cpuacct.usage_percpu" dev="loop0" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 242.592400][ T286] EXT4-fs (loop0): unmounting filesystem. [ 242.609515][ T4776] loop0: detected capacity change from 0 to 256 [ 242.620920][ T4776] FAT-fs (loop0): Unrecognized mount option "0x0000000000000003" or missing value [ 242.671378][ T4781] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1174'. [ 242.739349][ T4782] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1173'. [ 243.204606][ T4788] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 243.772367][ T4801] loop3: detected capacity change from 0 to 128 [ 243.779475][ T4801] EXT4-fs: Ignoring removed nobh option [ 244.053345][ T4559] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 244.065063][ T4801] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 244.073714][ T4801] ext4 filesystem being mounted at /253/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 244.308284][ T284] EXT4-fs (loop3): unmounting filesystem. [ 244.338245][ T4808] loop3: detected capacity change from 0 to 1024 [ 244.345251][ T4808] EXT4-fs: Ignoring removed bh option [ 244.351478][ T4559] usb 2-1: Using ep0 maxpacket: 8 [ 244.360369][ T4808] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 244.363797][ T4559] usb 2-1: unable to get BOS descriptor or descriptor too short [ 244.378057][ T4559] usb 2-1: config 0 has an invalid interface number: 88 but max is 0 [ 244.386459][ T4559] usb 2-1: config 0 has no interface number 0 [ 244.394069][ T4559] usb 2-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 244.406281][ T4559] usb 2-1: config 0 interface 88 has no altsetting 0 [ 244.414102][ T4559] usb 2-1: language id specifier not provided by device, defaulting to English [ 244.424466][ T4559] usb 2-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 244.471645][ T4559] usb 2-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 244.496680][ T4559] usb 2-1: Product: syz [ 244.500889][ T4559] usb 2-1: Manufacturer: 뫫憶븏勲뽔৳쁻ᝰ㹥肗䌛䢌᝿⤃⭑튢竹룖㗄Ҥ꨿㯅腺꫓莯묳䢮ゝꡧᜥ褷獸銚ᵟᲮ佫篴䀝ᯘ팭ꃮ [ 244.516593][ T4559] usb 2-1: SerialNumber: syz [ 244.530001][ T28] audit: type=1400 audit(1761463489.404:1244): avc: denied { append } for pid=4820 comm="syz.0.1187" name="binder1" dev="binder" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 244.551884][ T4559] usb 2-1: config 0 descriptor?? [ 244.558374][ T4821] binder: 4820:4821 ioctl 40046210 0 returned -14 [ 244.641448][ T400] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 244.763046][ T4788] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 244.772778][ T4788] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 244.823075][ T4559] input: 뫫憶븏勲뽔৳쁻ᝰ㹥肗䌛䢌᝿⤃⭑튢竹룖㗄Ҥ꨿㯅腺꫓莯묳䢮ゝꡧᜥ褷獸銚ᵟᲮ佫篴䀝ᯘ팭 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.88/input/input16 [ 244.853524][ T400] usb 4-1: too many endpoints for config 253 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 244.856630][ T4559] usb 2-1: USB disconnect, device number 11 [ 244.866245][ T400] usb 4-1: config 253 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 244.888883][ T400] usb 4-1: config 253 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 28680, setting to 64 [ 244.960952][ T4832] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1191'. [ 245.066395][ T400] usb 4-1: config 253 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 245.080902][ T400] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 245.090034][ T400] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 245.098184][ T400] usb 4-1: SerialNumber: syz [ 245.328634][ T4834] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1192'. [ 245.335692][ T4808] ================================================================== [ 245.345664][ T4808] BUG: KASAN: out-of-bounds in ext4_xattr_set_entry+0x1a71/0x21d0 [ 245.353478][ T4808] Read of size 18446744073709550592 at addr ffff888112dff400 by task syz.3.1184/4808 [ 245.362925][ T4808] [ 245.365231][ T4808] CPU: 0 PID: 4808 Comm: syz.3.1184 Not tainted syzkaller #0 [ 245.372579][ T4808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 245.382619][ T4808] Call Trace: [ 245.385880][ T4808] [ 245.388792][ T4808] __dump_stack+0x21/0x24 [ 245.393108][ T4808] dump_stack_lvl+0xee/0x150 [ 245.397679][ T4808] ? __cfi_dump_stack_lvl+0x8/0x8 [ 245.402690][ T4808] ? ext4_xattr_block_set+0x9dc/0x3270 [ 245.408135][ T4808] ? __vfs_setxattr+0x3f2/0x440 [ 245.412966][ T4808] ? ext4_xattr_set_entry+0x1a71/0x21d0 [ 245.418586][ T4808] print_address_description+0x71/0x200 [ 245.424169][ T4808] print_report+0x4a/0x60 [ 245.428505][ T4808] kasan_report+0x122/0x150 [ 245.433019][ T4808] ? ext4_xattr_set_entry+0x1a71/0x21d0 [ 245.438561][ T4808] ? ext4_xattr_set_entry+0x1a71/0x21d0 [ 245.444096][ T4808] kasan_check_range+0x280/0x290 [ 245.449030][ T4808] memmove+0x2d/0x70 [ 245.452935][ T4808] ext4_xattr_set_entry+0x1a71/0x21d0 [ 245.458324][ T4808] ext4_xattr_block_set+0xada/0x3270 [ 245.463622][ T4808] ? dquot_free_inode+0x75f/0x940 [ 245.468642][ T4808] ? __kasan_check_write+0x14/0x20 [ 245.473735][ T4808] ? iput+0x620/0x670 [ 245.477702][ T4808] ? ext4_xattr_block_find+0x310/0x310 [ 245.483215][ T4808] ext4_xattr_set_handle+0xbd5/0x12b0 [ 245.488576][ T4808] ? __cfi_ext4_xattr_set_handle+0x10/0x10 [ 245.494364][ T4808] ? __kasan_check_read+0x11/0x20 [ 245.499385][ T4808] ? __ext4_journal_start_sb+0x2ed/0x4a0 [ 245.504994][ T4808] ext4_xattr_set+0x22a/0x320 [ 245.509662][ T4808] ? __cfi_ext4_xattr_set+0x10/0x10 [ 245.514840][ T4808] ? selinux_inode_setxattr+0x5aa/0xba0 [ 245.520470][ T4808] ext4_xattr_trusted_set+0x3c/0x50 [ 245.525938][ T4808] ? __cfi_ext4_xattr_trusted_set+0x10/0x10 [ 245.532009][ T4808] __vfs_setxattr+0x3f2/0x440 [ 245.536682][ T4808] __vfs_setxattr_noperm+0x12a/0x5e0 [ 245.541999][ T4808] __vfs_setxattr_locked+0x212/0x230 [ 245.547308][ T4808] vfs_setxattr+0x168/0x2f0 [ 245.551793][ T4808] ? __cfi_vfs_setxattr+0x10/0x10 [ 245.556886][ T4808] ? copy_user_enhanced_fast_string+0xa/0x40 [ 245.562854][ T4808] setxattr+0x2b2/0x2d0 [ 245.567116][ T4808] ? path_setxattr+0x280/0x280 [ 245.571876][ T4808] ? __mnt_want_write+0x1e6/0x260 [ 245.576900][ T4808] ? mnt_want_write+0x220/0x300 [ 245.581737][ T4808] path_setxattr+0x142/0x280 [ 245.586343][ T4808] ? simple_xattr_list_add+0x120/0x120 [ 245.591840][ T4808] ? __kasan_check_write+0x14/0x20 [ 245.596957][ T4808] ? fpregs_restore_userregs+0x128/0x260 [ 245.602603][ T4808] __x64_sys_lsetxattr+0xc2/0xe0 [ 245.607538][ T4808] x64_sys_call+0x8b7/0x9a0 [ 245.612031][ T4808] do_syscall_64+0x4c/0xa0 [ 245.616525][ T4808] ? clear_bhb_loop+0x30/0x80 [ 245.621214][ T4808] ? clear_bhb_loop+0x30/0x80 [ 245.625883][ T4808] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 245.631766][ T4808] RIP: 0033:0x7f243ab8efc9 [ 245.636204][ T4808] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 245.655797][ T4808] RSP: 002b:00007f243bafc038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 245.664201][ T4808] RAX: ffffffffffffffda RBX: 00007f243ade5fa0 RCX: 00007f243ab8efc9 [ 245.672159][ T4808] RDX: 0000200000000140 RSI: 00002000000000c0 RDI: 0000200000000100 [ 245.680292][ T4808] RBP: 00007f243ac11f91 R08: 0000000000000002 R09: 0000000000000000 [ 245.688336][ T4808] R10: 000000000000fe37 R11: 0000000000000246 R12: 0000000000000000 [ 245.696294][ T4808] R13: 00007f243ade6038 R14: 00007f243ade5fa0 R15: 00007ffd4ac72de8 [ 245.704338][ T4808] [ 245.707350][ T4808] [ 245.709664][ T4808] Allocated by task 4808: [ 245.713967][ T4808] kasan_set_track+0x4b/0x70 [ 245.718555][ T4808] kasan_save_alloc_info+0x25/0x30 [ 245.723652][ T4808] __kasan_kmalloc+0x95/0xb0 [ 245.728235][ T4808] __kmalloc_node_track_caller+0xb1/0x1e0 [ 245.733944][ T4808] kmemdup+0x2b/0x60 [ 245.737827][ T4808] ext4_xattr_block_set+0x9dc/0x3270 [ 245.743099][ T4808] ext4_xattr_set_handle+0xbd5/0x12b0 [ 245.748456][ T4808] ext4_xattr_set+0x22a/0x320 [ 245.753120][ T4808] ext4_xattr_trusted_set+0x3c/0x50 [ 245.758306][ T4808] __vfs_setxattr+0x3f2/0x440 [ 245.763408][ T4808] __vfs_setxattr_noperm+0x12a/0x5e0 [ 245.768681][ T4808] __vfs_setxattr_locked+0x212/0x230 [ 245.773959][ T4808] vfs_setxattr+0x168/0x2f0 [ 245.778452][ T4808] setxattr+0x2b2/0x2d0 [ 245.782596][ T4808] path_setxattr+0x142/0x280 [ 245.787348][ T4808] __x64_sys_lsetxattr+0xc2/0xe0 [ 245.792280][ T4808] x64_sys_call+0x8b7/0x9a0 [ 245.796949][ T4808] do_syscall_64+0x4c/0xa0 [ 245.801364][ T4808] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 245.807246][ T4808] [ 245.809565][ T4808] The buggy address belongs to the object at ffff888112dff000 [ 245.809565][ T4808] which belongs to the cache kmalloc-1k of size 1024 [ 245.823689][ T4808] The buggy address is located 0 bytes to the right of [ 245.823689][ T4808] 1024-byte region [ffff888112dff000, ffff888112dff400) [ 245.837904][ T4808] [ 245.840220][ T4808] The buggy address belongs to the physical page: [ 245.846609][ T4808] page:ffffea00044b7e00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x112df8 [ 245.856923][ T4808] head:ffffea00044b7e00 order:3 compound_mapcount:0 compound_pincount:0 [ 245.865240][ T4808] flags: 0x4000000000010200(slab|head|zone=1) [ 245.871324][ T4808] raw: 4000000000010200 0000000000000000 dead000000000001 ffff888100043080 [ 245.879892][ T4808] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 245.888456][ T4808] page dumped because: kasan: bad access detected [ 245.894856][ T4808] page_owner tracks the page as allocated [ 245.900562][ T4808] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 104, tgid 104 (udevd), ts 4469978237, free_ts 0 [ 245.920268][ T4808] post_alloc_hook+0x1f5/0x210 [ 245.925554][ T4808] prep_new_page+0x1c/0x110 [ 245.930045][ T4808] get_page_from_freelist+0x2c7b/0x2cf0 [ 245.935578][ T4808] __alloc_pages+0x1c3/0x450 [ 245.940186][ T4808] alloc_slab_page+0x6e/0xf0 [ 245.944766][ T4808] new_slab+0x98/0x3d0 [ 245.948829][ T4808] ___slab_alloc+0x6bd/0xb20 [ 245.953403][ T4808] __slab_alloc+0x5e/0xa0 [ 245.957721][ T4808] __kmem_cache_alloc_node+0x203/0x2c0 [ 245.963947][ T4808] __kmalloc_node_track_caller+0xa0/0x1e0 [ 245.969656][ T4808] __alloc_skb+0x236/0x4b0 [ 245.974088][ T4808] netlink_sendmsg+0x626/0xbc0 [ 245.978920][ T4808] ____sys_sendmsg+0x5a9/0x990 [ 245.983665][ T4808] ___sys_sendmsg+0x21c/0x290 [ 245.988322][ T4808] __x64_sys_sendmsg+0x1f0/0x2c0 [ 245.993244][ T4808] x64_sys_call+0x171/0x9a0 [ 245.997739][ T4808] page_owner free stack trace missing [ 246.003086][ T4808] [ 246.005389][ T4808] Memory state around the buggy address: [ 246.011006][ T4808] ffff888112dff300: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 246.019047][ T4808] ffff888112dff380: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 246.027186][ T4808] >ffff888112dff400: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 246.035227][ T4808] ^ [ 246.039277][ T4808] ffff888112dff480: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 246.047326][ T4808] ffff888112dff500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 246.055379][ T4808] ================================================================== [ 246.069855][ T4808] Disabling lock debugging due to kernel taint [ 246.077258][ T4831] general protection fault, probably for non-canonical address 0xdffffc000000000d: 0000 [#1] PREEMPT SMP KASAN [ 246.089005][ T4831] KASAN: null-ptr-deref in range [0x0000000000000068-0x000000000000006f] [ 246.097393][ T4831] CPU: 0 PID: 4831 Comm: syz.0.1191 Tainted: G B syzkaller #0 [ 246.106210][ T4831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 246.116241][ T4831] RIP: 0010:bpf_get_current_cgroup_id+0x8c/0xb0 [ 246.122471][ T4831] Code: 01 00 00 4c 03 33 4c 89 f0 48 c1 e8 03 42 80 3c 38 00 74 08 4c 89 f7 e8 e2 e2 2b 00 49 8b 1e 48 83 c3 68 48 89 d8 48 c1 e8 03 <42> 80 3c 38 00 74 08 48 89 df e8 c5 e2 2b 00 48 8b 1b e8 9d 21 d4 [ 246.142069][ T4831] RSP: 0018:ffffc9000dd8f7c8 EFLAGS: 00010202 [ 246.148152][ T4831] RAX: 000000000000000d RBX: 0000000000000068 RCX: dffffc0000000000 [ 246.156105][ T4831] RDX: 0000000000000000 RSI: ffffc90001241050 RDI: ffffc9000dd8f840 [ 246.164250][ T4831] RBP: ffffc9000dd8f7e0 R08: dffffc0000000000 R09: ffffed10242f4f08 [ 246.172205][ T4831] R10: ffffed10242f4f08 R11: 1ffff110242f4f07 R12: ffffc90001241028 [ 246.180199][ T4831] R13: ffffc9000dd8f840 R14: ffff88811305a118 R15: dffffc0000000000 [ 246.188150][ T4831] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 246.197056][ T4831] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 246.203628][ T4831] CR2: 0000001b2eb22ff8 CR3: 0000000006e0f000 CR4: 00000000003526b0 [ 246.211594][ T4831] Call Trace: [ 246.214873][ T4831] [ 246.217789][ T4831] bpf_prog_6ed612a5be17c55a+0x17/0x19 [ 246.223263][ T4831] bpf_trace_run2+0xff/0x250 [ 246.227865][ T4831] ? __cfi_exit_mmap+0x10/0x10 [ 246.232642][ T4831] ? __cfi_bpf_trace_run2+0x10/0x10 [ 246.237924][ T4831] ? kvfree+0x35/0x40 [ 246.241973][ T4831] ? __kasan_check_write+0x14/0x20 [ 246.247133][ T4831] ? _raw_spin_lock+0x8e/0xe0 [ 246.251839][ T4831] ? kvfree+0x35/0x40 [ 246.255826][ T4831] __bpf_trace_kfree+0x6f/0x90 [ 246.260584][ T4831] ? kvfree+0x35/0x40 [ 246.264559][ T4831] kfree+0xc9/0xf0 [ 246.268259][ T4831] kvfree+0x35/0x40 [ 246.272056][ T4831] put_files_struct+0x289/0x330 [ 246.276890][ T4831] exit_files+0x80/0xa0 [ 246.281025][ T4831] do_exit+0x9ee/0x2650 [ 246.285161][ T4831] ? __cfi_do_exit+0x10/0x10 [ 246.289724][ T4831] ? plist_del+0x3df/0x3f0 [ 246.294115][ T4831] ? _raw_spin_unlock+0x4c/0x70 [ 246.298940][ T4831] ? futex_unqueue+0x126/0x160 [ 246.303679][ T4831] ? __kasan_check_write+0x14/0x20 [ 246.308762][ T4831] ? _raw_spin_lock_irq+0x8f/0xe0 [ 246.313762][ T4831] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 246.319286][ T4831] do_group_exit+0x210/0x2d0 [ 246.323856][ T4831] ? __kasan_check_write+0x14/0x20 [ 246.328948][ T4831] get_signal+0x13b5/0x1520 [ 246.333467][ T4831] arch_do_signal_or_restart+0xb0/0x1030 [ 246.339108][ T4831] ? do_futex+0x2dc/0x420 [ 246.343455][ T4831] ? __cfi_do_futex+0x10/0x10 [ 246.348146][ T4831] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 246.354285][ T4831] ? __se_sys_futex+0x273/0x2e0 [ 246.359153][ T4831] exit_to_user_mode_loop+0x7a/0xb0 [ 246.364337][ T4831] exit_to_user_mode_prepare+0x5a/0xa0 [ 246.369774][ T4831] syscall_exit_to_user_mode+0x1a/0x30 [ 246.375213][ T4831] do_syscall_64+0x58/0xa0 [ 246.379618][ T4831] ? clear_bhb_loop+0x30/0x80 [ 246.384292][ T4831] ? clear_bhb_loop+0x30/0x80 [ 246.388955][ T4831] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 246.394845][ T4831] RIP: 0033:0x7f3ff2d8efc9 [ 246.399264][ T4831] Code: Unable to access opcode bytes at 0x7f3ff2d8ef9f. [ 246.406255][ T4831] RSP: 002b:00007f3ff3cf90e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 246.414643][ T4831] RAX: fffffffffffffe00 RBX: 00007f3ff2fe6098 RCX: 00007f3ff2d8efc9 [ 246.422592][ T4831] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f3ff2fe6098 [ 246.430539][ T4831] RBP: 00007f3ff2fe6090 R08: 0000000000000000 R09: 0000000000000000 [ 246.438489][ T4831] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 246.446437][ T4831] R13: 00007f3ff2fe6128 R14: 00007ffd748515d0 R15: 00007ffd748516b8 [ 246.454389][ T4831] [ 246.457405][ T4831] Modules linked in: [ 246.461315][ C1] general protection fault, probably for non-canonical address 0xdffffc000000002d: 0000 [#2] PREEMPT SMP KASAN [ 246.473275][ C1] KASAN: null-ptr-deref in range [0x0000000000000168-0x000000000000016f] [ 246.481918][ C1] CPU: 1 PID: 0 Comm: Tainted: G B D syzkaller #0 [ 246.490123][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 246.500413][ C1] RIP: 0010:account_system_index_time+0x71/0x1a0 [ 246.506992][ C1] Code: 00 00 4c 89 e0 48 c1 e8 03 42 80 3c 38 00 74 08 4c 89 e7 e8 a1 f6 63 00 4d 8b 2c 24 4d 8d a5 68 01 00 00 4c 89 e0 48 c1 e8 03 <42> 0f b6 04 38 84 c0 0f 85 fc 00 00 00 41 83 3c 24 00 74 3d 4d 8d [ 246.527283][ C1] RSP: 0018:ffffc900001b0b70 EFLAGS: 00010006 [ 246.533427][ C1] RAX: 000000000000002d RBX: 0000000000954677 RCX: dffffc0000000000 [ 246.541389][ C1] RDX: 0000000000000002 RSI: 0000000000954677 RDI: ffff8881137e57e8 [ 246.549344][ C1] RBP: ffffc900001b0ba0 R08: 0000000000000004 R09: 0000000000000003 [ 246.557475][ C1] R10: 0000000000000000 R11: ffffffff812e2000 R12: 0000000000000168 [ 246.565437][ C1] R13: 0000000000000000 R14: ffff8881137e5100 R15: dffffc0000000000 [ 246.573383][ C1] FS: 00007f243bafc6c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 246.582284][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 246.588838][ C1] CR2: 000000110c316f8c CR3: 000000011aec7000 CR4: 00000000003526a0 [ 246.596783][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 246.604724][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 246.612672][ C1] Call Trace: [ 246.615925][ C1] [ 246.618748][ C1] irqtime_account_process_tick+0x107/0x4b0 [ 246.624627][ C1] account_process_tick+0xeb/0x620 [ 246.629713][ C1] ? timekeeping_advance+0x621/0x7b0 [ 246.634980][ C1] ? __cfi__raw_spin_lock+0x10/0x10 [ 246.640175][ C1] ? __cfi_account_process_tick+0x10/0x10 [ 246.645906][ C1] ? update_wall_time+0x25/0x30 [ 246.650749][ C1] ? tick_do_update_jiffies64+0x1ad/0x240 [ 246.656566][ C1] update_process_times+0x23/0x1b0 [ 246.661676][ C1] tick_sched_timer+0x17c/0x240 [ 246.666515][ C1] ? __cfi_tick_sched_timer+0x10/0x10 [ 246.671886][ C1] __hrtimer_run_queues+0x3cd/0x9f0 [ 246.677119][ C1] ? hrtimer_interrupt+0x8c0/0x8c0 [ 246.682261][ C1] ? ktime_get_update_offsets_now+0x30c/0x320 [ 246.688304][ C1] hrtimer_interrupt+0x3c7/0x8c0 [ 246.693243][ C1] __sysvec_apic_timer_interrupt+0x11e/0x440 [ 246.699323][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 246.704956][ C1] WARNING: kernel stack frame pointer at ffffc900001b0fe8 in :0 has bad value ffffc90000ae7318 [ 246.704985][ C1] unwind stack type:0 next_sp:ffffc90000ae7308 mask:0x4 graph_idx:0 [ 246.704993][ C1] ffffc900001b0ba0: ffffc900001b0bf0 (0xffffc900001b0bf0) [ 246.705007][ C1] ffffc900001b0ba8: ffffffff8150a637 (irqtime_account_process_tick+0x107/0x4b0) [ 246.705026][ C1] ffffc900001b0bb0: 0000000000000000 ... [ 246.705031][ C1] ffffc900001b0bb8: ffff8881137e5100 (0xffff8881137e5100) [ 246.705039][ C1] ffffc900001b0bc0: 0000000000000001 (0x1) [ 246.705045][ C1] ffffc900001b0bc8: 1ffff92000036184 (0x1ffff92000036184) [ 246.705052][ C1] ffffc900001b0bd0: 0000000000000001 (0x1) [ 246.705058][ C1] ffffc900001b0bd8: ffff8881137e5100 (0xffff8881137e5100) [ 246.705065][ C1] ffffc900001b0be0: 0000000000000000 ... [ 246.705069][ C1] ffffc900001b0be8: ffff8881f7137d80 (0xffff8881f7137d80) [ 246.705076][ C1] ffffc900001b0bf0: ffffc900001b0cc0 (0xffffc900001b0cc0) [ 246.705083][ C1] ffffc900001b0bf8: ffffffff81509ffb (account_process_tick+0xeb/0x620) [ 246.705097][ C1] ffffc900001b0c00: ffffc900001b0c70 (0xffffc900001b0c70) [ 246.705105][ C1] ffffc900001b0c08: ffffffff8162b3c1 (timekeeping_advance+0x621/0x7b0) [ 246.705117][ C1] ffffc900001b0c10: ffffffff84f41900 (__cfi__raw_spin_lock+0x10/0x10) [ 246.705129][ C1] ffffc900001b0c18: 1ffff11021a4a7f8 (0x1ffff11021a4a7f8) [ 246.705137][ C1] ffffc900001b0c20: 0000000041b58ab3 (0x41b58ab3) [ 246.705144][ C1] ffffc900001b0c28: ffffffff8645b359 (linux_banner+0x5a33f9/0x5d69c0) [ 246.705156][ C1] ffffc900001b0c30: ffffffff81509f10 (__cfi_account_process_tick+0x10/0x10) [ 246.705170][ C1] ffffc900001b0c38: 1ffff11021a4a7a5 (0x1ffff11021a4a7a5) [ 246.705178][ C1] ffffc900001b0c40: ffff888100000001 (0xffff888100000001) [ 246.705185][ C1] ffffc900001b0c48: 0000000000000001 (0x1) [ 246.705192][ C1] ffffc900001b0c50: 0000000000000001 (0x1) [ 246.705200][ C1] ffffc900001b0c58: dffffc0000000000 (0xdffffc0000000000) [ 246.705211][ C1] ffffc900001b0c60: e6880ef698031600 (0xe6880ef698031600) [ 246.705220][ C1] ffffc900001b0c68: dffffc0000000000 (0xdffffc0000000000) [ 246.705228][ C1] ffffc900001b0c70: ffffc900001b0c80 (0xffffc900001b0c80) [ 246.705235][ C1] ffffc900001b0c78: ffffffff8162ad95 (update_wall_time+0x25/0x30) [ 246.705245][ C1] ffffc900001b0c80: ffffc900001b0ca8 (0xffffc900001b0ca8) [ 246.705253][ C1] ffffc900001b0c88: ffffffff8165bc2d (tick_do_update_jiffies64+0x1ad/0x240) [ 246.705268][ C1] ffffc900001b0c90: 000000394a51bedc (0x394a51bedc) [ 246.705275][ C1] ffffc900001b0c98: 0000000000000000 ... [ 246.705279][ C1] ffffc900001b0ca8: dffffc0000000000 (0xdffffc0000000000) [ 246.705286][ C1] ffffc900001b0cb0: 000000394a51bedc (0x394a51bedc) [ 246.705293][ C1] ffffc900001b0cb8: 0000000000000000 ... [ 246.705297][ C1] ffffc900001b0cc0: ffffc900001b0cf8 (0xffffc900001b0cf8) [ 246.705304][ C1] ffffc900001b0cc8: ffffffff8161a283 (update_process_times+0x23/0x1b0) [ 246.705316][ C1] ffffc900001b0cd0: ffff8881f712a310 (0xffff8881f712a310) [ 246.705323][ C1] ffffc900001b0cd8: 0000000000000000 ... [ 246.705327][ C1] ffffc900001b0ce0: dffffc0000000000 (0xdffffc0000000000) [ 246.705334][ C1] ffffc900001b0ce8: 000000394a51bedc (0x394a51bedc) [ 246.705340][ C1] ffffc900001b0cf0: 0000000000000000 ... [ 246.705344][ C1] ffffc900001b0cf8: ffffc900001b0d30 (0xffffc900001b0d30) [ 246.705351][ C1] ffffc900001b0d00: ffffffff8165b11c (tick_sched_timer+0x17c/0x240) [ 246.705363][ C1] ffffc900001b0d08: dffffc0000000000 (0xdffffc0000000000) [ 246.705370][ C1] ffffc900001b0d10: ffff8881f712a310 (0xffff8881f712a310) [ 246.705377][ C1] ffffc900001b0d18: 1ffff1103ee25469 (0x1ffff1103ee25469) [ 246.705384][ C1] ffffc900001b0d20: ffff8881f712a338 (0xffff8881f712a338) [ 246.705391][ C1] ffffc900001b0d28: ffffffff8165afa0 (__cfi_tick_sched_timer+0x10/0x10) [ 246.705404][ C1] ffffc900001b0d30: ffffc900001b0e90 (0xffffc900001b0e90) [ 246.705411][ C1] ffffc900001b0d38: ffffffff816224dd (__hrtimer_run_queues+0x3cd/0x9f0) [ 246.705424][ C1] ffffc900001b0d40: 1ffffffff0f2d40b (0x1ffffffff0f2d40b) [ 246.705432][ C1] ffffc900001b0d48: 1ffffffff0f2d40b (0x1ffffffff0f2d40b) [ 246.705439][ C1] ffffc900001b0d50: ffff8881f7129d90 (0xffff8881f7129d90) [ 246.705446][ C1] ffffc900001b0d58: ffff8881f7129d98 (0xffff8881f7129d98) [ 246.705453][ C1] ffffc900001b0d60: ffff8881f712a348 (0xffff8881f712a348) [ 246.705460][ C1] ffffc900001b0d68: ffff8881f7129da8 (0xffff8881f7129da8) [ 246.705467][ C1] ffffc900001b0d70: 1ffff1103ee253b2 (0x1ffff1103ee253b2) [ 246.705475][ C1] ffffc900001b0d78: ffff8881f7129d88 (0xffff8881f7129d88) [ 246.705482][ C1] ffffc900001b0d80: ffff8881f7129d40 (0xffff8881f7129d40) [ 246.705489][ C1] ffffc900001b0d88: 1ffff1103ee253b3 (0x1ffff1103ee253b3) [ 246.705496][ C1] ffffc900001b0d90: 000000018796a05d (0x18796a05d) [ 246.705503][ C1] ffffc900001b0d98: ffff8881f7129d80 (0xffff8881f7129d80) [ 246.705510][ C1] ffffc900001b0da0: 1ffffffff0edf40e (0x1ffffffff0edf40e) [ 246.705517][ C1] ffffc900001b0da8: 1ffffffff0edf3fc (0x1ffffffff0edf3fc) [ 246.705524][ C1] ffffc900001b0db0: 1ffffffff0edf405 (0x1ffffffff0edf405) [ 246.705531][ C1] ffffc900001b0db8: 1ffff920000361c0 (0x1ffff920000361c0) [ 246.705538][ C1] ffffc900001b0dc0: ffff8881f7129d80 (0xffff8881f7129d80) [ 246.705545][ C1] ffffc900001b0dc8: 000000394a51bae3 (0x394a51bae3) [ 246.705552][ C1] ffffc900001b0dd0: 0000000000000000 ... [ 246.705556][ C1] ffffc900001b0dd8: ffff8881f7129da0 (0xffff8881f7129da0) [ 246.705563][ C1] ffffc900001b0de0: 0000000000000802 (0x802) [ 246.705570][ C1] ffffc900001b0de8: 1ffff1103ee253b0 (0x1ffff1103ee253b0) [ 246.705577][ C1] ffffc900001b0df0: 1ffff1103ee253b5 (0x1ffff1103ee253b5) [ 246.705584][ C1] ffffc900001b0df8: 0000000000000001 (0x1) [ 246.705590][ C1] ffffc900001b0e00: 0000000041b58ab3 (0x41b58ab3) [ 246.705599][ C1] ffffc900001b0e08: ffffffff8645b5e9 (linux_banner+0x5a3689/0x5d69c0) [ 246.705610][ C1] ffffc900001b0e10: ffffffff81622110 (hrtimer_interrupt+0x8c0/0x8c0) [ 246.705623][ C1] ffffc900001b0e18: ffffffff8162bb9c (ktime_get_update_offsets_now+0x30c/0x320) [ 246.705634][ C1] ffffc900001b0e20: 000000394a51bae3 (0x394a51bae3) [ 246.705641][ C1] ffffc900001b0e28: ffff8881f7129e38 (0xffff8881f7129e38) [ 246.705648][ C1] ffffc900001b0e30: 1ffff1103ee253c7 (0x1ffff1103ee253c7) [ 246.705655][ C1] ffffc900001b0e38: 1ffff1103ee253cf (0x1ffff1103ee253cf) [ 246.705662][ C1] ffffc900001b0e40: e6880ef698031600 (0xe6880ef698031600) [ 246.705669][ C1] ffffc900001b0e48: 1ffff1103ee253bf (0x1ffff1103ee253bf) [ 246.705676][ C1] ffffc900001b0e50: ffff8881f7129df8 (0xffff8881f7129df8) [ 246.705684][ C1] ffffc900001b0e58: ffff8881f7129e78 (0xffff8881f7129e78) [ 246.705691][ C1] ffffc900001b0e60: ffff8881f7129d4c (0xffff8881f7129d4c) [ 246.705698][ C1] ffffc900001b0e68: ffff8881f7129d40 (0xffff8881f7129d40) [ 246.705705][ C1] ffffc900001b0e70: 0000000000000002 (0x2) [ 246.705710][ C1] ffffc900001b0e78: 0000000000000001 (0x1) [ 246.705716][ C1] ffffc900001b0e80: ffff8881f7129d50 (0xffff8881f7129d50) [ 246.705724][ C1] ffffc900001b0e88: 0000000000000002 (0x2) [ 246.705729][ C1] ffffc900001b0e90: ffffc900001b0fb0 (0xffffc900001b0fb0) [ 246.705737][ C1] ffffc900001b0e98: ffffffff81621c17 (hrtimer_interrupt+0x3c7/0x8c0) [ 246.705750][ C1] ffffc900001b0ea0: ffff8881f7129df8 (0xffff8881f7129df8) [ 246.705757][ C1] ffffc900001b0ea8: ffff8881f7129d4c (0xffff8881f7129d4c) [ 246.705764][ C1] ffffc900001b0eb0: 1ffff1103ee253bf (0x1ffff1103ee253bf) [ 246.705771][ C1] ffffc900001b0eb8: ffff8881f7129ef8 (0xffff8881f7129ef8) [ 246.705778][ C1] ffffc900001b0ec0: 1ffff1103ee253df (0x1ffff1103ee253df) [ 246.705785][ C1] ffffc900001b0ec8: 1ffff1103ee253c7 (0x1ffff1103ee253c7) [ 246.705792][ C1] ffffc900001b0ed0: ffff8881f7129f38 (0xffff8881f7129f38) [ 246.705799][ C1] ffffc900001b0ed8: 1ffff1103ee253e7 (0x1ffff1103ee253e7) [ 246.705807][ C1] ffffc900001b0ee0: 1ffff1103ee253cf (0x1ffff1103ee253cf) [ 246.705814][ C1] ffffc900001b0ee8: ffff8881f7129f78 (0xffff8881f7129f78) [ 246.705821][ C1] ffffc900001b0ef0: 1ffff1103ee253ef (0x1ffff1103ee253ef) [ 246.705828][ C1] ffffc900001b0ef8: 1ffff1103ee253ab (0x1ffff1103ee253ab) [ 246.705835][ C1] ffffc900001b0f00: ffff8881f7129d78 (0xffff8881f7129d78) [ 246.705842][ C1] ffffc900001b0f08: ffff8881f7129d68 (0xffff8881f7129d68) [ 246.705849][ C1] ffffc900001b0f10: 1ffff1103ee253af (0x1ffff1103ee253af) [ 246.705856][ C1] ffffc900001b0f18: 1ffff1103ee253ad (0x1ffff1103ee253ad) [ 246.705863][ C1] ffffc900001b0f20: ffff8881f7129d60 (0xffff8881f7129d60) [ 246.705870][ C1] ffffc900001b0f28: 1ffff1103ee253ac (0x1ffff1103ee253ac) [ 246.705878][ C1] ffffc900001b0f30: ffff8881f7129d40 (0xffff8881f7129d40) [ 246.705885][ C1] ffffc900001b0f38: 000000394a51bae3 (0x394a51bae3) [ 246.705891][ C1] ffffc900001b0f40: 1ffff1103ee253ae (0x1ffff1103ee253ae) [ 246.705898][ C1] ffffc900001b0f48: ffff8881f7129e38 (0xffff8881f7129e38) [ 246.705906][ C1] ffffc900001b0f50: ffff8881f7129e78 (0xffff8881f7129e78) [ 246.705913][ C1] ffffc900001b0f58: ffff8881f7129d70 (0xffff8881f7129d70) [ 246.705920][ C1] ffffc900001b0f60: ffff8881f7129d58 (0xffff8881f7129d58) [ 246.705927][ C1] ffffc900001b0f68: 0000000000000802 (0x802) [ 246.705933][ C1] ffffc900001b0f70: 000000394a51bae3 (0x394a51bae3) [ 246.705940][ C1] ffffc900001b0f78: 1ffff1103ee253aa (0x1ffff1103ee253aa) [ 246.705947][ C1] ffffc900001b0f80: ffff8881f7129d50 (0xffff8881f7129d50) [ 246.705954][ C1] ffffc900001b0f88: ffff8881f7126f40 (0xffff8881f7126f40) [ 246.705968][ C1] ffffc900001b0f90: 0000000000000000 ... [ 246.705972][ C1] ffffc900001b0f98: dffffc0000000000 (0xdffffc0000000000) [ 246.705978][ C1] ffffc900001b0fa0: 1ffff1103ee24de8 (0x1ffff1103ee24de8) [ 246.705985][ C1] ffffc900001b0fa8: 0000000000000000 ... [ 246.705989][ C1] ffffc900001b0fb0: ffffc900001b0fe8 (0xffffc900001b0fe8) [ 246.705997][ C1] ffffc900001b0fb8: ffffffff813308de (__sysvec_apic_timer_interrupt+0x11e/0x440) [ 246.706011][ C1] ffffc900001b0fc0: ffffc90000ae7328 (0xffffc90000ae7328) [ 246.706018][ C1] ffffc900001b0fc8: 0000000000000000 ... [ 246.706022][ C1] ffffc900001b0fe8: ffffc90000ae7318 (0xffffc90000ae7318) [ 246.706032][ C1] ffffc900001b0ff0: ffffffff84ed6724 (sysvec_apic_timer_interrupt+0xa4/0xc0) [ 246.706046][ C1] ffffc900001b0ff8: ffffc90000ae7308 (0xffffc90000ae7308) [ 246.706055][ C1] [ 247.703011][ C1] Modules linked in: [ 247.707011][ C1] ---[ end trace 0000000000000000 ]--- [ 247.707040][ C0] general protection fault, probably for non-canonical address 0xdffffc0000000002: 0000 [#3] PREEMPT SMP KASAN [ 247.712452][ C1] RIP: 0010:bpf_get_current_cgroup_id+0x8c/0xb0 [ 247.724155][ C0] KASAN: null-ptr-deref in range [0x0000000000000010-0x0000000000000017] [ 247.730391][ C1] Code: 01 00 00 4c 03 33 4c 89 f0 48 c1 e8 03 42 80 3c 38 00 74 08 4c 89 f7 e8 e2 e2 2b 00 49 8b 1e 48 83 c3 68 48 89 d8 48 c1 e8 03 <42> 80 3c 38 00 74 08 48 89 df e8 c5 e2 2b 00 48 8b 1b e8 9d 21 d4 [ 247.738791][ C0] CPU: 0 PID: 4831 Comm: syz.0.1191 Tainted: G B D syzkaller #0 [ 247.759175][ C1] RSP: 0018:ffffc9000dd8f7c8 EFLAGS: 00010202 [ 247.768385][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 247.768397][ C0] RIP: 0010:cpuacct_charge+0x74/0x180 [ 247.774449][ C1] RAX: 000000000000000d RBX: 0000000000000068 RCX: dffffc0000000000 [ 247.786414][ C0] Code: 49 81 c7 00 0a 00 00 4c 89 f8 48 c1 e8 03 80 3c 18 00 74 08 4c 89 ff e8 0a b8 62 00 4d 8b 3f 49 83 c7 10 4c 89 f8 48 c1 e8 03 <80> 3c 18 00 74 08 4c 89 ff e8 ee b7 62 00 4d 8b 3f 4d 85 ff 0f 84 [ 247.791779][ C1] RDX: 0000000000000000 RSI: ffffc90001241050 RDI: ffffc9000dd8f840 [ 247.799741][ C0] RSP: 0018:ffffc900000075f0 EFLAGS: 00010002 [ 247.819329][ C1] RBP: ffffc9000dd8f7e0 R08: dffffc0000000000 R09: ffffed10242f4f08 [ 247.827292][ C0] [ 247.827298][ C0] RAX: 0000000000000002 RBX: dffffc0000000000 RCX: 0000000000000000 [ 247.833333][ C1] R10: ffffed10242f4f08 R11: 1ffff110242f4f07 R12: ffffc90001241028 [ 247.841307][ C0] RDX: 0000d108cc6eaaf7 RSI: 0000003442331bdf RDI: ffff8881137e5100 [ 247.843619][ C1] R13: ffffc9000dd8f840 R14: ffff88811305a118 R15: dffffc0000000000 [ 247.851572][ C0] RBP: ffffc90000007628 R08: dffffc0000000000 R09: fffffbfff0de1f87 [ 247.859620][ C1] FS: 00007f243bafc6c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 247.867573][ C0] R10: 0000000000000000 R11: ffffffff814e5a30 R12: dffffc0000000000 [ 247.875887][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 247.884467][ C0] R13: ffff8881137e5180 R14: ffff8881137e5114 R15: 0000000000000010 [ 247.893557][ C1] CR2: 000000110c316f8c CR3: 000000011aec7000 CR4: 00000000003526a0 [ 247.901601][ C0] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 247.908292][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 247.916943][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 247.924914][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 247.934125][ C0] CR2: 0000001b2eb22ff8 CR3: 0000000006e0f000 CR4: 00000000003526b0 [ 247.942125][ C1] Kernel panic - not syncing: Fatal exception in interrupt [ 247.948703][ C0] Call Trace: [ 247.948712][ C0] [ 247.948722][ C0] update_curr+0x2f6/0x5e0 [ 247.948751][ C0] enqueue_task_fair+0x39d/0x1d10 [ 247.948777][ C0] ? __cfi_enqueue_task_fair+0x10/0x10 [ 247.948802][ C0] enqueue_task+0x190/0xfe0 [ 247.948831][ C0] ? kvm_sched_clock_read+0x18/0x40 [ 247.948853][ C0] ? sched_clock+0x9/0x10 [ 247.948871][ C0] ? sched_clock_cpu+0x6e/0x250 [ 247.948888][ C0] ? activate_task+0xa0/0xa0 [ 247.948904][ C0] ? __cfi_sched_clock_cpu+0x10/0x10 [ 247.948920][ C0] ? __kasan_check_write+0x14/0x20 [ 247.948935][ C0] ? _raw_spin_lock+0x8e/0xe0 [ 247.948952][ C0] ttwu_do_activate+0x155/0x280 [ 247.948970][ C0] try_to_wake_up+0x5c0/0x1220 [ 247.948989][ C0] default_wake_function+0x43/0x50 [ 247.949010][ C0] autoremove_wake_function+0x16/0x110 [ 247.949031][ C0] __wake_up_common+0x26e/0x470 [ 247.949052][ C0] ? _raw_spin_unlock_irqrestore+0x5a/0x80 [ 247.949069][ C0] __wake_up+0x10e/0x190 [ 247.949246][ C0] ? __cfi___wake_up+0x10/0x10 [ 247.949273][ C0] ? __this_cpu_preempt_check+0x13/0x20 [ 247.949300][ C0] wake_up_klogd_work_func+0x97/0xa0 [ 247.949321][ C0] irq_work_run_list+0x18b/0x2b0 [ 247.949342][ C0] ? irq_work_run+0xf0/0xf0 [ 247.949359][ C0] ? __cfi_rcu_sched_clock_irq+0x10/0x10 [ 247.949380][ C0] irq_work_tick+0x129/0x160 [ 247.949398][ C0] update_process_times+0x170/0x1b0 [ 247.949419][ C0] tick_sched_timer+0x17c/0x240 [ 247.949439][ C0] ? __cfi_tick_sched_timer+0x10/0x10 [ 247.949459][ C0] __hrtimer_run_queues+0x3cd/0x9f0 [ 247.949483][ C0] ? hrtimer_interrupt+0x8c0/0x8c0 [ 247.949503][ C0] ? ktime_get_update_offsets_now+0x30c/0x320 [ 247.949521][ C0] ? __this_cpu_preempt_check+0x13/0x20 [ 247.949544][ C0] hrtimer_interrupt+0x3c7/0x8c0 [ 247.949570][ C0] __sysvec_apic_timer_interrupt+0x11e/0x440 [ 247.949592][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 247.949614][ C0] [ 247.949619][ C0] [ 247.949624][ C0] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 247.949645][ C0] RIP: 0010:oops_exit+0x0/0x30 [ 247.949668][ C0] Code: c1 0f 8c 0f ff ff ff 48 89 df e8 4b 82 cb fc e9 02 ff ff ff 66 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 b8 0c 67 40 a5 <55> 48 89 e5 e8 67 13 87 fc e8 d2 4d 58 fc 48 c7 c7 20 e4 48 85 31 [ 247.949682][ C0] RSP: 0018:ffffc9000dd8f600 EFLAGS: 00000206 [ 247.949699][ C0] RAX: 0000000000000000 RBX: 000000000000000b RCX: ffff88811d91bcc0 [ 247.949710][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff87957f60 [ 247.949721][ C0] RBP: ffffc9000dd8f618 R08: dffffc0000000000 R09: fffffbfff0f2d8fd [ 247.949733][ C0] R10: fffffbfff0f2d8fd R11: 1ffffffff0f2d8fc R12: ffffc9000dd8f670 [ 247.949745][ C0] R13: dffffc000000000d R14: 0000000000000293 R15: 0000000000000000 [ 247.949759][ C0] ? oops_end+0x46/0xd0 [ 247.949776][ C0] die_addr+0x61/0x70 [ 247.949793][ C0] exc_general_protection+0x13a/0x1e0 [ 247.949814][ C0] asm_exc_general_protection+0x27/0x30 [ 247.949832][ C0] RIP: 0010:bpf_get_current_cgroup_id+0x8c/0xb0 [ 247.949853][ C0] Code: 01 00 00 4c 03 33 4c 89 f0 48 c1 e8 03 42 80 3c 38 00 74 08 4c 89 f7 e8 e2 e2 2b 00 49 8b 1e 48 83 c3 68 48 89 d8 48 c1 e8 03 <42> 80 3c 38 00 74 08 48 89 df e8 c5 e2 2b 00 48 8b 1b e8 9d 21 d4 [ 247.949865][ C0] RSP: 0018:ffffc9000dd8f7c8 EFLAGS: 00010202 [ 247.949878][ C0] RAX: 000000000000000d RBX: 0000000000000068 RCX: dffffc0000000000 [ 247.949888][ C0] RDX: 0000000000000000 RSI: ffffc90001241050 RDI: ffffc9000dd8f840 [ 247.949899][ C0] RBP: ffffc9000dd8f7e0 R08: dffffc0000000000 R09: ffffed10242f4f08 [ 247.949911][ C0] R10: ffffed10242f4f08 R11: 1ffff110242f4f07 R12: ffffc90001241028 [ 247.949922][ C0] R13: ffffc9000dd8f840 R14: ffff88811305a118 R15: dffffc0000000000 [ 247.949937][ C0] ? bpf_get_current_cgroup_id+0x1d/0xb0 [ 247.949955][ C0] bpf_prog_6ed612a5be17c55a+0x17/0x19 [ 247.949982][ C0] bpf_trace_run2+0xff/0x250 [ 247.950003][ C0] ? __cfi_exit_mmap+0x10/0x10 [ 247.950024][ C0] ? __cfi_bpf_trace_run2+0x10/0x10 [ 247.950044][ C0] ? kvfree+0x35/0x40 [ 247.950066][ C0] ? __kasan_check_write+0x14/0x20 [ 247.950080][ C0] ? _raw_spin_lock+0x8e/0xe0 [ 247.950095][ C0] ? kvfree+0x35/0x40 [ 247.950115][ C0] __bpf_trace_kfree+0x6f/0x90 [ 247.950136][ C0] ? kvfree+0x35/0x40 [ 247.950156][ C0] kfree+0xc9/0xf0 [ 247.950177][ C0] kvfree+0x35/0x40 [ 247.950197][ C0] put_files_struct+0x289/0x330 [ 247.950222][ C0] exit_files+0x80/0xa0 [ 247.950243][ C0] do_exit+0x9ee/0x2650 [ 247.950266][ C0] ? __cfi_do_exit+0x10/0x10 [ 247.950285][ C0] ? plist_del+0x3df/0x3f0 [ 247.950303][ C0] ? _raw_spin_unlock+0x4c/0x70 [ 247.950318][ C0] ? futex_unqueue+0x126/0x160 [ 247.950340][ C0] ? __kasan_check_write+0x14/0x20 [ 247.950353][ C0] ? _raw_spin_lock_irq+0x8f/0xe0 [ 247.950368][ C0] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 247.950384][ C0] do_group_exit+0x210/0x2d0 [ 247.950404][ C0] ? __kasan_check_write+0x14/0x20 [ 247.950419][ C0] get_signal+0x13b5/0x1520 [ 247.950443][ C0] arch_do_signal_or_restart+0xb0/0x1030 [ 247.950463][ C0] ? do_futex+0x2dc/0x420 [ 247.950476][ C0] ? __cfi_do_futex+0x10/0x10 [ 247.950491][ C0] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 247.950508][ C0] ? __se_sys_futex+0x273/0x2e0 [ 247.950526][ C0] exit_to_user_mode_loop+0x7a/0xb0 [ 247.950542][ C0] exit_to_user_mode_prepare+0x5a/0xa0 [ 247.950558][ C0] syscall_exit_to_user_mode+0x1a/0x30 [ 247.950579][ C0] do_syscall_64+0x58/0xa0 [ 247.950593][ C0] ? clear_bhb_loop+0x30/0x80 [ 247.950612][ C0] ? clear_bhb_loop+0x30/0x80 [ 247.950631][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 247.950650][ C0] RIP: 0033:0x7f3ff2d8efc9 [ 247.950661][ C0] Code: Unable to access opcode bytes at 0x7f3ff2d8ef9f. [ 247.950668][ C0] RSP: 002b:00007f3ff3cf90e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 247.950683][ C0] RAX: fffffffffffffe00 RBX: 00007f3ff2fe6098 RCX: 00007f3ff2d8efc9 [ 247.950695][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f3ff2fe6098 [ 247.950704][ C0] RBP: 00007f3ff2fe6090 R08: 0000000000000000 R09: 0000000000000000 [ 247.950713][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 247.950722][ C0] R13: 00007f3ff2fe6128 R14: 00007ffd748515d0 R15: 00007ffd748516b8 [ 247.950736][ C0] [ 247.950741][ C0] Modules linked in: [ 247.958821][ C0] ---[ end trace 0000000000000000 ]--- [ 247.958839][ C0] RIP: 0010:bpf_get_current_cgroup_id+0x8c/0xb0 [ 247.958874][ C0] Code: 01 00 00 4c 03 33 4c 89 f0 48 c1 e8 03 42 80 3c 38 00 74 08 4c 89 f7 e8 e2 e2 2b 00 49 8b 1e 48 83 c3 68 48 89 d8 48 c1 e8 03 <42> 80 3c 38 00 74 08 48 89 df e8 c5 e2 2b 00 48 8b 1b e8 9d 21 d4 [ 247.958887][ C0] RSP: 0018:ffffc9000dd8f7c8 EFLAGS: 00010202 [ 247.958903][ C0] RAX: 000000000000000d RBX: 0000000000000068 RCX: dffffc0000000000 [ 247.958914][ C0] RDX: 0000000000000000 RSI: ffffc90001241050 RDI: ffffc9000dd8f840 [ 247.958925][ C0] RBP: ffffc9000dd8f7e0 R08: dffffc0000000000 R09: ffffed10242f4f08 [ 247.958936][ C0] R10: ffffed10242f4f08 R11: 1ffff110242f4f07 R12: ffffc90001241028 [ 247.958948][ C0] R13: ffffc9000dd8f840 R14: ffff88811305a118 R15: dffffc0000000000 [ 247.958959][ C0] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 247.958973][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 247.958984][ C0] CR2: 0000001b2eb22ff8 CR3: 0000000006e0f000 CR4: 00000000003526b0 [ 249.068707][ C1] Shutting down cpus with NMI [ 249.803758][ C0] ------------[ cut here ]------------ [ 249.803767][ C0] kvm: vmclear failed: 0000000000000000/778000000000 err=2 [ 249.803797][ C0] WARNING: CPU: 0 PID: 4831 at arch/x86/kvm/vmx/vmx.c:464 vmclear_error+0xb0/0x1e0 [ 249.803827][ C0] Modules linked in: [ 249.803836][ C0] CPU: 0 PID: 4831 Comm: syz.0.1191 Tainted: G B D syzkaller #0 [ 249.803852][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 249.803862][ C0] RIP: 0010:vmclear_error+0xb0/0x1e0 [ 249.803879][ C0] Code: 00 b8 00 44 00 00 41 0f 78 c7 0f 86 96 00 00 00 e8 e5 9a 50 00 48 c7 c7 a0 8d 44 85 4c 89 f6 48 89 da 44 89 f9 e8 70 d6 21 00 <0f> 0b e9 6b ff ff ff e8 c4 9a 50 00 eb 5f 80 3d 10 b4 4f 06 01 0f [ 249.803893][ C0] RSP: 0018:fffffe0000011cf8 EFLAGS: 00010046 [ 249.803906][ C0] RAX: b836e65231227100 RBX: 0000778000000000 RCX: ffff88811d91bcc0 [ 249.803919][ C0] RDX: 0000000000120000 RSI: 0000000000000000 RDI: 0000000000000002 [ 249.803928][ C0] RBP: fffffe0000011d10 R08: dffffc0000000000 R09: ffffed103ee04eb4 [ 249.803940][ C0] R10: ffffed103ee04eb4 R11: 1ffff1103ee04eb3 R12: 0000000000000000 [ 249.803951][ C0] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000002 [ 249.803961][ C0] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 249.803974][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 249.803986][ C0] CR2: 0000001b2eb22ff8 CR3: 0000000006e0f000 CR4: 00000000003526b0 [ 249.804001][ C0] Call Trace: [ 249.804007][ C0] [ 249.804015][ C0] vmx_emergency_disable+0x28c/0x3e0 [ 249.804038][ C0] ? __cfi_vmx_emergency_disable+0x10/0x10 [ 249.804062][ C0] cpu_emergency_disable_virtualization+0x28/0x130 [ 249.804085][ C0] smp_stop_nmi_callback+0x32/0x40 [ 249.804100][ C0] nmi_handle+0xff/0x2d0 [ 249.804119][ C0] ? panic_smp_self_stop+0xb/0x30 [ 249.804135][ C0] default_do_nmi+0x67/0x170 [ 249.804157][ C0] exc_nmi+0xae/0x110 [ 249.804175][ C0] end_repeat_nmi+0x16/0x31 [ 249.804196][ C0] RIP: 0010:panic_smp_self_stop+0xb/0x30 [ 249.804211][ C0] Code: 00 00 cc cc 00 00 cc cc 00 00 cc cc 00 00 cc 90 90 90 90 90 90 90 90 90 90 90 b8 0c 67 40 a5 55 48 89 e5 e8 07 cd 2e 00 f3 90 fc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 b8 22 6a 57 f3 55 [ 249.804225][ C0] RSP: 0018:ffffc90000007330 EFLAGS: 00000006 [ 249.804237][ C0] RAX: ffffffff81415119 RBX: ffffffff863d5900 RCX: ffff88811d91bcc0 [ 249.804249][ C0] RDX: 0000000000010000 RSI: 0000000000000000 RDI: 0000000000000001 [ 249.804259][ C0] RBP: ffffc90000007330 R08: 0000000000000004 R09: 0000000000000003 [ 249.804269][ C0] R10: fffffbfff0ddd568 R11: 1ffffffff0ddd568 R12: 0000000000000001 [ 249.804281][ C0] R13: dffffc0000000001 R14: ffffc900000073a0 R15: 0000000000000000 [ 249.804293][ C0] ? panic_smp_self_stop+0x9/0x30 [ 249.804311][ C0] ? panic_smp_self_stop+0xb/0x30 [ 249.804325][ C0] ? panic_smp_self_stop+0xb/0x30 [ 249.804339][ C0] [ 249.804344][ C0] [ 249.804349][ C0] panic+0x131/0x698 [ 249.804370][ C0] ? __cfi_panic+0x8/0x8 [ 249.804388][ C0] ? __show_regs+0x3a5/0x500 [ 249.804407][ C0] oops_end+0xc0/0xd0 [ 249.804423][ C0] die_addr+0x61/0x70 [ 249.804442][ C0] exc_general_protection+0x13a/0x1e0 [ 249.804463][ C0] asm_exc_general_protection+0x27/0x30 [ 249.804482][ C0] RIP: 0010:cpuacct_charge+0x74/0x180 [ 249.804500][ C0] Code: 49 81 c7 00 0a 00 00 4c 89 f8 48 c1 e8 03 80 3c 18 00 74 08 4c 89 ff e8 0a b8 62 00 4d 8b 3f 49 83 c7 10 4c 89 f8 48 c1 e8 03 <80> 3c 18 00 74 08 4c 89 ff e8 ee b7 62 00 4d 8b 3f 4d 85 ff 0f 84 [ 249.804513][ C0] RSP: 0018:ffffc900000075f0 EFLAGS: 00010002 [ 249.804525][ C0] RAX: 0000000000000002 RBX: dffffc0000000000 RCX: 0000000000000000 [ 249.804535][ C0] RDX: 0000d108cc6eaaf7 RSI: 0000003442331bdf RDI: ffff8881137e5100 [ 249.804547][ C0] RBP: ffffc90000007628 R08: dffffc0000000000 R09: fffffbfff0de1f87 [ 249.804559][ C0] R10: 0000000000000000 R11: ffffffff814e5a30 R12: dffffc0000000000 [ 249.804570][ C0] R13: ffff8881137e5180 R14: ffff8881137e5114 R15: 0000000000000010 [ 249.804582][ C0] ? __cfi_enqueue_task_fair+0x10/0x10 [ 249.804608][ C0] update_curr+0x2f6/0x5e0 [ 249.804629][ C0] enqueue_task_fair+0x39d/0x1d10 [ 249.804655][ C0] ? __cfi_enqueue_task_fair+0x10/0x10 [ 249.804680][ C0] enqueue_task+0x190/0xfe0 [ 249.804696][ C0] ? kvm_sched_clock_read+0x18/0x40 [ 249.804718][ C0] ? sched_clock+0x9/0x10 [ 249.804745][ C0] ? sched_clock_cpu+0x6e/0x250 [ 249.804762][ C0] ? activate_task+0xa0/0xa0 [ 249.804777][ C0] ? __cfi_sched_clock_cpu+0x10/0x10 [ 249.804794][ C0] ? __kasan_check_write+0x14/0x20 [ 249.804809][ C0] ? _raw_spin_lock+0x8e/0xe0 [ 249.804826][ C0] ttwu_do_activate+0x155/0x280 [ 249.804844][ C0] try_to_wake_up+0x5c0/0x1220 [ 249.804864][ C0] default_wake_function+0x43/0x50 [ 249.804885][ C0] autoremove_wake_function+0x16/0x110 [ 249.804907][ C0] __wake_up_common+0x26e/0x470 [ 249.804928][ C0] ? _raw_spin_unlock_irqrestore+0x5a/0x80 [ 249.804946][ C0] __wake_up+0x10e/0x190 [ 249.804966][ C0] ? __cfi___wake_up+0x10/0x10 [ 249.804986][ C0] ? __this_cpu_preempt_check+0x13/0x20 [ 249.805011][ C0] wake_up_klogd_work_func+0x97/0xa0 [ 249.805032][ C0] irq_work_run_list+0x18b/0x2b0 [ 249.805054][ C0] ? irq_work_run+0xf0/0xf0 [ 249.805071][ C0] ? __cfi_rcu_sched_clock_irq+0x10/0x10 [ 249.805093][ C0] irq_work_tick+0x129/0x160 [ 249.805111][ C0] update_process_times+0x170/0x1b0 [ 249.805132][ C0] tick_sched_timer+0x17c/0x240 [ 249.805154][ C0] ? __cfi_tick_sched_timer+0x10/0x10 [ 249.805173][ C0] __hrtimer_run_queues+0x3cd/0x9f0 [ 249.805199][ C0] ? hrtimer_interrupt+0x8c0/0x8c0 [ 249.805219][ C0] ? ktime_get_update_offsets_now+0x30c/0x320 [ 249.805238][ C0] ? __this_cpu_preempt_check+0x13/0x20 [ 249.805262][ C0] hrtimer_interrupt+0x3c7/0x8c0 [ 249.805287][ C0] __sysvec_apic_timer_interrupt+0x11e/0x440 [ 249.805309][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 249.805331][ C0] [ 249.805336][ C0] [ 249.805341][ C0] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 249.805361][ C0] RIP: 0010:oops_exit+0x0/0x30 [ 249.805381][ C0] Code: c1 0f 8c 0f ff ff ff 48 89 df e8 4b 82 cb fc e9 02 ff ff ff 66 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 b8 0c 67 40 a5 <55> 48 89 e5 e8 67 13 87 fc e8 d2 4d 58 fc 48 c7 c7 20 e4 48 85 31 [ 249.805393][ C0] RSP: 0018:ffffc9000dd8f600 EFLAGS: 00000206 [ 249.805406][ C0] RAX: 0000000000000000 RBX: 000000000000000b RCX: ffff88811d91bcc0 [ 249.805416][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff87957f60 [ 249.805426][ C0] RBP: ffffc9000dd8f618 R08: dffffc0000000000 R09: fffffbfff0f2d8fd [ 249.805438][ C0] R10: fffffbfff0f2d8fd R11: 1ffffffff0f2d8fc R12: ffffc9000dd8f670 [ 249.805449][ C0] R13: dffffc000000000d R14: 0000000000000293 R15: 0000000000000000 [ 249.805462][ C0] ? oops_end+0x46/0xd0 [ 249.805478][ C0] die_addr+0x61/0x70 [ 249.805496][ C0] exc_general_protection+0x13a/0x1e0 [ 249.805517][ C0] asm_exc_general_protection+0x27/0x30 [ 249.805536][ C0] RIP: 0010:bpf_get_current_cgroup_id+0x8c/0xb0 [ 249.805555][ C0] Code: 01 00 00 4c 03 33 4c 89 f0 48 c1 e8 03 42 80 3c 38 00 74 08 4c 89 f7 e8 e2 e2 2b 00 49 8b 1e 48 83 c3 68 48 89 d8 48 c1 e8 03 <42> 80 3c 38 00 74 08 48 89 df e8 c5 e2 2b 00 48 8b 1b e8 9d 21 d4 [ 249.805567][ C0] RSP: 0018:ffffc9000dd8f7c8 EFLAGS: 00010202 [ 249.805579][ C0] RAX: 000000000000000d RBX: 0000000000000068 RCX: dffffc0000000000 [ 249.805590][ C0] RDX: 0000000000000000 RSI: ffffc90001241050 RDI: ffffc9000dd8f840 [ 249.805604][ C0] RBP: ffffc9000dd8f7e0 R08: dffffc0000000000 R09: ffffed10242f4f08 [ 249.805616][ C0] R10: ffffed10242f4f08 R11: 1ffff110242f4f07 R12: ffffc90001241028 [ 249.805627][ C0] R13: ffffc9000dd8f840 R14: ffff88811305a118 R15: dffffc0000000000 [ 249.805642][ C0] ? bpf_get_current_cgroup_id+0x1d/0xb0 [ 249.805660][ C0] bpf_prog_6ed612a5be17c55a+0x17/0x19 [ 249.805676][ C0] bpf_trace_run2+0xff/0x250 [ 249.805697][ C0] ? __cfi_exit_mmap+0x10/0x10 [ 249.805718][ C0] ? __cfi_bpf_trace_run2+0x10/0x10 [ 249.805742][ C0] ? kvfree+0x35/0x40 [ 249.805764][ C0] ? __kasan_check_write+0x14/0x20 [ 249.805778][ C0] ? _raw_spin_lock+0x8e/0xe0 [ 249.805793][ C0] ? kvfree+0x35/0x40 [ 249.805813][ C0] __bpf_trace_kfree+0x6f/0x90 [ 249.805834][ C0] ? kvfree+0x35/0x40 [ 249.805854][ C0] kfree+0xc9/0xf0 [ 249.805876][ C0] kvfree+0x35/0x40 [ 249.805897][ C0] put_files_struct+0x289/0x330 [ 249.805921][ C0] exit_files+0x80/0xa0 [ 249.805943][ C0] do_exit+0x9ee/0x2650 [ 249.805965][ C0] ? __cfi_do_exit+0x10/0x10 [ 249.805986][ C0] ? plist_del+0x3df/0x3f0 [ 249.806004][ C0] ? _raw_spin_unlock+0x4c/0x70 [ 249.806019][ C0] ? futex_unqueue+0x126/0x160 [ 249.806041][ C0] ? __kasan_check_write+0x14/0x20 [ 249.806054][ C0] ? _raw_spin_lock_irq+0x8f/0xe0 [ 249.806070][ C0] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 249.806086][ C0] do_group_exit+0x210/0x2d0 [ 249.806108][ C0] ? __kasan_check_write+0x14/0x20 [ 249.806123][ C0] get_signal+0x13b5/0x1520 [ 249.806148][ C0] arch_do_signal_or_restart+0xb0/0x1030 [ 249.806168][ C0] ? do_futex+0x2dc/0x420 [ 249.806182][ C0] ? __cfi_do_futex+0x10/0x10 [ 249.806197][ C0] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 249.806215][ C0] ? __se_sys_futex+0x273/0x2e0 [ 249.806233][ C0] exit_to_user_mode_loop+0x7a/0xb0 [ 249.806250][ C0] exit_to_user_mode_prepare+0x5a/0xa0 [ 249.806266][ C0] syscall_exit_to_user_mode+0x1a/0x30 [ 249.806287][ C0] do_syscall_64+0x58/0xa0 [ 249.806302][ C0] ? clear_bhb_loop+0x30/0x80 [ 249.806321][ C0] ? clear_bhb_loop+0x30/0x80 [ 249.806341][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 249.806360][ C0] RIP: 0033:0x7f3ff2d8efc9 [ 249.806370][ C0] Code: Unable to access opcode bytes at 0x7f3ff2d8ef9f. [ 249.806379][ C0] RSP: 002b:00007f3ff3cf90e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 249.806394][ C0] RAX: fffffffffffffe00 RBX: 00007f3ff2fe6098 RCX: 00007f3ff2d8efc9 [ 249.806405][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f3ff2fe6098 [ 249.806415][ C0] RBP: 00007f3ff2fe6090 R08: 0000000000000000 R09: 0000000000000000 [ 249.806425][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 249.806435][ C0] R13: 00007f3ff2fe6128 R14: 00007ffd748515d0 R15: 00007ffd748516b8 [ 249.806449][ C0] [ 249.806454][ C0] ---[ end trace 0000000000000000 ]--- [ 249.806464][ C0] kvm: vmclear failed: 0000000000000000/778000000000 err=2 [ 249.806482][ C0] BUG: unable to handle page fault for address: ffffffffffffffc8 [ 249.806491][ C0] #PF: supervisor read access in kernel mode [ 249.806499][ C0] #PF: error_code(0x0000) - not-present page [ 249.806517][ C0] PGD 6e12067 P4D 6e12067 PUD 6e14067 PMD 0 [ 249.806540][ C0] Oops: 0000 [#4] PREEMPT SMP KASAN [ 249.806552][ C0] CPU: 0 PID: 4831 Comm: syz.0.1191 Tainted: G B D W syzkaller #0 [ 249.806568][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 249.806576][ C0] RIP: 0010:vmx_emergency_disable+0x152/0x3e0 [ 249.806599][ C0] Code: e0 60 02 00 48 01 c8 49 39 c7 0f 84 7f 01 00 00 4d 8d 67 c8 4c 89 e0 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 e7 e8 fe b1 93 00 <4d> 8b 24 24 48 b8 ff ff ff 7f ff ff ff ff 49 39 c4 76 26 e8 96 42 [ 249.806612][ C0] RSP: 0018:fffffe0000011d20 EFLAGS: 00010046 [ 249.806625][ C0] RAX: 1ffffffffffffff9 RBX: 1ffffffff0c92934 RCX: 00000000000260e0 [ 249.806636][ C0] RDX: 0000000000120000 RSI: 0000000080120006 RDI: 0000000000000000 [ 249.806647][ C0] RBP: fffffe0000011df0 R08: dffffc0000000000 R09: ffffed103ee04eb4 [ 249.806659][ C0] R10: ffffed103ee04eb4 R11: 1ffff1103ee04eb3 R12: ffffffffffffffc8 [ 249.806670][ C0] R13: dffffc0000000000 R14: ffffffff864949a0 R15: 0000000000000000 [ 249.806682][ C0] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 249.806695][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 249.806707][ C0] CR2: ffffffffffffffc8 CR3: 0000000006e0f000 CR4: 00000000003526b0 [ 249.806721][ C0] Call Trace: [ 249.806725][ C0] [ 249.806731][ C0] ? __cfi_vmx_emergency_disable+0x10/0x10 [ 249.806761][ C0] cpu_emergency_disable_virtualization+0x28/0x130 [ 249.806783][ C0] smp_stop_nmi_callback+0x32/0x40 [ 249.806797][ C0] nmi_handle+0xff/0x2d0 [ 249.806815][ C0] ? panic_smp_self_stop+0xb/0x30 [ 249.806829][ C0] default_do_nmi+0x67/0x170 [ 249.806848][ C0] exc_nmi+0xae/0x110 [ 249.806866][ C0] end_repeat_nmi+0x16/0x31 [ 249.806885][ C0] RIP: 0010:panic_smp_self_stop+0xb/0x30 [ 249.806901][ C0] Code: 00 00 cc cc 00 00 cc cc 00 00 cc cc 00 00 cc 90 90 90 90 90 90 90 90 90 90 90 b8 0c 67 40 a5 55 48 89 e5 e8 07 cd 2e 00 f3 90 fc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 b8 22 6a 57 f3 55 [ 249.806913][ C0] RSP: 0018:ffffc90000007330 EFLAGS: 00000006 [ 249.806925][ C0] RAX: ffffffff81415119 RBX: ffffffff863d5900 RCX: ffff88811d91bcc0 [ 249.806937][ C0] RDX: 0000000000010000 RSI: 0000000000000000 RDI: 0000000000000001 [ 249.806947][ C0] RBP: ffffc90000007330 R08: 0000000000000004 R09: 0000000000000003 [ 249.806957][ C0] R10: fffffbfff0ddd568 R11: 1ffffffff0ddd568 R12: 0000000000000001 [ 249.806968][ C0] R13: dffffc0000000001 R14: ffffc900000073a0 R15: 0000000000000000 [ 249.806980][ C0] ? panic_smp_self_stop+0x9/0x30 [ 249.806996][ C0] ? panic_smp_self_stop+0xb/0x30 [ 249.807011][ C0] ? panic_smp_self_stop+0xb/0x30 [ 249.807025][ C0] [ 249.807030][ C0] [ 249.807034][ C0] panic+0x131/0x698 [ 249.807054][ C0] ? __cfi_panic+0x8/0x8 [ 249.807072][ C0] ? __show_regs+0x3a5/0x500 [ 249.807091][ C0] oops_end+0xc0/0xd0 [ 249.807107][ C0] die_addr+0x61/0x70 [ 249.807125][ C0] exc_general_protection+0x13a/0x1e0 [ 249.807146][ C0] asm_exc_general_protection+0x27/0x30 [ 249.807165][ C0] RIP: 0010:cpuacct_charge+0x74/0x180 [ 249.807182][ C0] Code: 49 81 c7 00 0a 00 00 4c 89 f8 48 c1 e8 03 80 3c 18 00 74 08 4c 89 ff e8 0a b8 62 00 4d 8b 3f 49 83 c7 10 4c 89 f8 48 c1 e8 03 <80> 3c 18 00 74 08 4c 89 ff e8 ee b7 62 00 4d 8b 3f 4d 85 ff 0f 84 [ 249.807195][ C0] RSP: 0018:ffffc900000075f0 EFLAGS: 00010002 [ 249.807207][ C0] RAX: 0000000000000002 RBX: dffffc0000000000 RCX: 0000000000000000 [ 249.807217][ C0] RDX: 0000d108cc6eaaf7 RSI: 0000003442331bdf RDI: ffff8881137e5100 [ 249.807229][ C0] RBP: ffffc90000007628 R08: dffffc0000000000 R09: fffffbfff0de1f87 [ 249.807238][ C0] R10: 0000000000000000 R11: ffffffff814e5a30 R12: dffffc0000000000 [ 249.807247][ C0] R13: ffff8881137e5180 R14: ffff8881137e5114 R15: 0000000000000010 [ 249.807260][ C0] ? __cfi_enqueue_task_fair+0x10/0x10 [ 249.807286][ C0] update_curr+0x2f6/0x5e0 [ 249.807308][ C0] enqueue_task_fair+0x39d/0x1d10 [ 249.807334][ C0] ? __cfi_enqueue_task_fair+0x10/0x10 [ 249.807359][ C0] enqueue_task+0x190/0xfe0 [ 249.807375][ C0] ? kvm_sched_clock_read+0x18/0x40 [ 249.807396][ C0] ? sched_clock+0x9/0x10 [ 249.807414][ C0] ? sched_clock_cpu+0x6e/0x250 [ 249.807431][ C0] ? activate_task+0xa0/0xa0 [ 249.807446][ C0] ? __cfi_sched_clock_cpu+0x10/0x10 [ 249.807463][ C0] ? __kasan_check_write+0x14/0x20 [ 249.807477][ C0] ? _raw_spin_lock+0x8e/0xe0 [ 249.807493][ C0] ttwu_do_activate+0x155/0x280 [ 249.807512][ C0] try_to_wake_up+0x5c0/0x1220 [ 249.807531][ C0] default_wake_function+0x43/0x50 [ 249.807552][ C0] autoremove_wake_function+0x16/0x110 [ 249.807574][ C0] __wake_up_common+0x26e/0x470 [ 249.807595][ C0] ? _raw_spin_unlock_irqrestore+0x5a/0x80 [ 249.807613][ C0] __wake_up+0x10e/0x190 [ 249.807633][ C0] ? __cfi___wake_up+0x10/0x10 [ 249.807654][ C0] ? __this_cpu_preempt_check+0x13/0x20 [ 249.807678][ C0] wake_up_klogd_work_func+0x97/0xa0 [ 249.807698][ C0] irq_work_run_list+0x18b/0x2b0 [ 249.807717][ C0] ? irq_work_run+0xf0/0xf0 [ 249.807734][ C0] ? __cfi_rcu_sched_clock_irq+0x10/0x10 [ 249.807758][ C0] irq_work_tick+0x129/0x160 [ 249.807776][ C0] update_process_times+0x170/0x1b0 [ 249.807795][ C0] tick_sched_timer+0x17c/0x240 [ 249.807815][ C0] ? __cfi_tick_sched_timer+0x10/0x10 [ 249.807835][ C0] __hrtimer_run_queues+0x3cd/0x9f0 [ 249.807860][ C0] ? hrtimer_interrupt+0x8c0/0x8c0 [ 249.807880][ C0] ? ktime_get_update_offsets_now+0x30c/0x320 [ 249.807898][ C0] ? __this_cpu_preempt_check+0x13/0x20 [ 249.807921][ C0] hrtimer_interrupt+0x3c7/0x8c0 [ 249.807946][ C0] __sysvec_apic_timer_interrupt+0x11e/0x440 [ 249.807968][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 249.807988][ C0] [ 249.807993][ C0] [ 249.807998][ C0] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 249.808018][ C0] RIP: 0010:oops_exit+0x0/0x30 [ 249.808037][ C0] Code: c1 0f 8c 0f ff ff ff 48 89 df e8 4b 82 cb fc e9 02 ff ff ff 66 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 b8 0c 67 40 a5 <55> 48 89 e5 e8 67 13 87 fc e8 d2 4d 58 fc 48 c7 c7 20 e4 48 85 31 [ 249.808050][ C0] RSP: 0018:ffffc9000dd8f600 EFLAGS: 00000206 [ 249.808062][ C0] RAX: 0000000000000000 RBX: 000000000000000b RCX: ffff88811d91bcc0 [ 249.808072][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff87957f60 [ 249.808082][ C0] RBP: ffffc9000dd8f618 R08: dffffc0000000000 R09: fffffbfff0f2d8fd [ 249.808093][ C0] R10: fffffbfff0f2d8fd R11: 1ffffffff0f2d8fc R12: ffffc9000dd8f670 [ 249.808105][ C0] R13: dffffc000000000d R14: 0000000000000293 R15: 0000000000000000 [ 249.808118][ C0] ? oops_end+0x46/0xd0 [ 249.808134][ C0] die_addr+0x61/0x70 [ 249.808152][ C0] exc_general_protection+0x13a/0x1e0 [ 249.808173][ C0] asm_exc_general_protection+0x27/0x30 [ 249.808192][ C0] RIP: 0010:bpf_get_current_cgroup_id+0x8c/0xb0 [ 249.808210][ C0] Code: 01 00 00 4c 03 33 4c 89 f0 48 c1 e8 03 42 80 3c 38 00 74 08 4c 89 f7 e8 e2 e2 2b 00 49 8b 1e 48 83 c3 68 48 89 d8 48 c1 e8 03 <42> 80 3c 38 00 74 08 48 89 df e8 c5 e2 2b 00 48 8b 1b e8 9d 21 d4 [ 249.808223][ C0] RSP: 0018:ffffc9000dd8f7c8 EFLAGS: 00010202 [ 249.808235][ C0] RAX: 000000000000000d RBX: 0000000000000068 RCX: dffffc0000000000 [ 249.808245][ C0] RDX: 0000000000000000 RSI: ffffc90001241050 RDI: ffffc9000dd8f840 [ 249.808256][ C0] RBP: ffffc9000dd8f7e0 R08: dffffc0000000000 R09: ffffed10242f4f08 [ 249.808268][ C0] R10: ffffed10242f4f08 R11: 1ffff110242f4f07 R12: ffffc90001241028 [ 249.808279][ C0] R13: ffffc9000dd8f840 R14: ffff88811305a118 R15: dffffc0000000000 [ 249.808294][ C0] ? bpf_get_current_cgroup_id+0x1d/0xb0 [ 249.808312][ C0] bpf_prog_6ed612a5be17c55a+0x17/0x19 [ 249.808327][ C0] bpf_trace_run2+0xff/0x250 [ 249.808346][ C0] ? __cfi_exit_mmap+0x10/0x10 [ 249.808367][ C0] ? __cfi_bpf_trace_run2+0x10/0x10 [ 249.808388][ C0] ? kvfree+0x35/0x40 [ 249.808408][ C0] ? __kasan_check_write+0x14/0x20 [ 249.808422][ C0] ? _raw_spin_lock+0x8e/0xe0 [ 249.808437][ C0] ? kvfree+0x35/0x40 [ 249.808457][ C0] __bpf_trace_kfree+0x6f/0x90 [ 249.808477][ C0] ? kvfree+0x35/0x40 [ 249.808497][ C0] kfree+0xc9/0xf0 [ 249.808518][ C0] kvfree+0x35/0x40 [ 249.808538][ C0] put_files_struct+0x289/0x330 [ 249.808562][ C0] exit_files+0x80/0xa0 [ 249.808583][ C0] do_exit+0x9ee/0x2650 [ 249.808606][ C0] ? __cfi_do_exit+0x10/0x10 [ 249.808626][ C0] ? plist_del+0x3df/0x3f0 [ 249.808643][ C0] ? _raw_spin_unlock+0x4c/0x70 [ 249.808658][ C0] ? futex_unqueue+0x126/0x160 [ 249.808680][ C0] ? __kasan_check_write+0x14/0x20 [ 249.808694][ C0] ? _raw_spin_lock_irq+0x8f/0xe0 [ 249.808709][ C0] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 249.808726][ C0] do_group_exit+0x210/0x2d0 [ 249.808751][ C0] ? __kasan_check_write+0x14/0x20 [ 249.808766][ C0] get_signal+0x13b5/0x1520 [ 249.808790][ C0] arch_do_signal_or_restart+0xb0/0x1030 [ 249.808809][ C0] ? do_futex+0x2dc/0x420 [ 249.808823][ C0] ? __cfi_do_futex+0x10/0x10 [ 249.808838][ C0] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 249.808856][ C0] ? __se_sys_futex+0x273/0x2e0 [ 249.808875][ C0] exit_to_user_mode_loop+0x7a/0xb0 [ 249.808891][ C0] exit_to_user_mode_prepare+0x5a/0xa0 [ 249.808907][ C0] syscall_exit_to_user_mode+0x1a/0x30 [ 249.808928][ C0] do_syscall_64+0x58/0xa0 [ 249.808943][ C0] ? clear_bhb_loop+0x30/0x80 [ 249.808963][ C0] ? clear_bhb_loop+0x30/0x80 [ 249.808983][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 249.809001][ C0] RIP: 0033:0x7f3ff2d8efc9 [ 249.809012][ C0] Code: Unable to access opcode bytes at 0x7f3ff2d8ef9f. [ 249.809020][ C0] RSP: 002b:00007f3ff3cf90e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 249.809034][ C0] RAX: fffffffffffffe00 RBX: 00007f3ff2fe6098 RCX: 00007f3ff2d8efc9 [ 249.809046][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f3ff2fe6098 [ 249.809056][ C0] RBP: 00007f3ff2fe6090 R08: 0000000000000000 R09: 0000000000000000 [ 249.809066][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 249.809076][ C0] R13: 00007f3ff2fe6128 R14: 00007ffd748515d0 R15: 00007ffd748516b8 [ 249.809090][ C0] [ 249.809095][ C0] Modules linked in: [ 249.809103][ C0] CR2: ffffffffffffffc8 [ 249.814639][ C0] ---[ end trace 0000000000000000 ]--- [ 249.814648][ C0] RIP: 0010:bpf_get_current_cgroup_id+0x8c/0xb0 [ 249.814670][ C0] Code: 01 00 00 4c 03 33 4c 89 f0 48 c1 e8 03 42 80 3c 38 00 74 08 4c 89 f7 e8 e2 e2 2b 00 49 8b 1e 48 83 c3 68 48 89 d8 48 c1 e8 03 <42> 80 3c 38 00 74 08 48 89 df e8 c5 e2 2b 00 48 8b 1b e8 9d 21 d4 [ 249.814683][ C0] RSP: 0018:ffffc9000dd8f7c8 EFLAGS: 00010202 [ 249.814696][ C0] RAX: 000000000000000d RBX: 0000000000000068 RCX: dffffc0000000000 [ 249.814707][ C0] RDX: 0000000000000000 RSI: ffffc90001241050 RDI: ffffc9000dd8f840 [ 249.814718][ C0] RBP: ffffc9000dd8f7e0 R08: dffffc0000000000 R09: ffffed10242f4f08 [ 249.814730][ C0] R10: ffffed10242f4f08 R11: 1ffff110242f4f07 R12: ffffc90001241028 [ 249.814765][ C0] R13: ffffc9000dd8f840 R14: ffff88811305a118 R15: dffffc0000000000 [ 249.814777][ C0] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 249.814791][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 249.814803][ C0] CR2: ffffffffffffffc8 CR3: 0000000006e0f000 CR4: 00000000003526b0 [ 249.815257][ C1] Kernel Offset: disabled [ 251.926361][ C1] Rebooting in 86400 seconds..