last executing test programs: 1m41.070921093s ago: executing program 0 (id=73): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0x0) open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file0\x00', 0x8100) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x18) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x2) readv(r3, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0x940}], 0x1) r4 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setsig(r4, 0xa, 0x13) fcntl$setlease(r4, 0x400, 0x0) timer_create(0x0, &(0x7f00000005c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) timer_settime(r5, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) 1m40.171879681s ago: executing program 0 (id=80): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x1d64, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r3}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000940)) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) unshare(0x24020400) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r4, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) ioctl$HIDIOCSFEATURE(r5, 0xc0404806, &(0x7f0000000040)) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r6, 0xffffffffffffffff, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') r8 = syz_open_dev$evdev(&(0x7f0000000080), 0x7fffffffffffffff, 0x0) ioctl$EVIOCGUNIQ(r8, 0x80404508, &(0x7f00000004c0)=""/225) pread64(r7, &(0x7f0000001240)=""/102400, 0x200000, 0x0) connect$unix(r7, &(0x7f0000000200)=@abs={0x0, 0x0, 0x4e24}, 0x6e) 1m34.415240629s ago: executing program 0 (id=85): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd, @generic, @initr0, @exit, @alu, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x2}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222}, 0x21) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000004000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kfree\x00', r3}, 0x18) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) sendmsg$inet(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x800) 1m33.88992862s ago: executing program 0 (id=90): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1600000000000000040000000100000000000000", @ANYRES32=0x1, @ANYBLOB="000000204102008000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYRES16=r0], 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f00000008c0)={[{@init_itable}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6e}}, {@journal_dev={'journal_dev', 0x3d, 0x4}}, {@lazytime}, {@quota}]}, 0x3, 0x441, &(0x7f0000000440)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x80843, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x2}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000000d40)={0x0, 0x7000000, &(0x7f00000023c0)=[{&(0x7f0000000b40)='?', 0x1}, {0x0, 0x1}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x20001) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r1, 0x0) pipe2$9p(&(0x7f0000000540), 0x0) socket$nl_generic(0x10, 0x3, 0x10) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000940)={0x3, 0xc, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYBLOB="2dec0587ec2f87a43a5746a0af7d48430180d8d6e16cae5df4c2", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f6b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) syz_mount_image$ext4(&(0x7f0000000800)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x2040d0, &(0x7f0000000c40)={[{@jqfmt_vfsv0}, {@nojournal_checksum}, {@barrier}, {@barrier}, {@test_dummy_encryption}, {@nomblk_io_submit}]}, 0xff, 0x4ab, &(0x7f0000000080)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x535b01, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x181) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r7, &(0x7f0000000200)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r8 = dup(r7) write$FUSE_DIRENTPLUS(r8, &(0x7f0000002c00)=ANY=[@ANYBLOB="b0"], 0xb0) getresuid(&(0x7f0000000340), &(0x7f00000000c0), &(0x7f00000004c0)=0x0) write$FUSE_CREATE_OPEN(r8, &(0x7f0000000380)={0xa0, 0x0, 0x0, {{0x20, 0x1, 0x8, 0x6, 0x9, 0x8, {0x1, 0x2, 0x8, 0x0, 0xffffffffffff15ef, 0x9, 0x2, 0x7fff, 0x7, 0x4000, 0xd, r9, 0x0, 0x1, 0x10000}}, {0x0, 0x1}}}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r8, @ANYBLOB=',privport,access=', @ANYRESDEC=r9]) shutdown(r8, 0xf7a5b0df764cda2a) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) 1m30.784660566s ago: executing program 0 (id=100): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./bus\x00', 0x4000, &(0x7f0000000500)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRES64, @ANYRES32, @ANYRESHEX, @ANYRESDEC], 0x1, 0x2cb, &(0x7f0000000ac0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000010000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000400000000000000000318110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) pivot_root(&(0x7f0000000240)='./file0\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) socket$netlink(0x10, 0x3, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r3, 0x7, 0xe, 0x0, &(0x7f0000000040)="24c2afc3a2e05271070000541650", 0x0, 0xffb0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m21.40859447s ago: executing program 0 (id=107): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) waitid(0x2, r0, &(0x7f0000000140), 0x80000000, &(0x7f0000000540)) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18080000000000000000000000000002850000000f000000850000002a00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) r5 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x4008000, &(0x7f0000000280)={0xa, 0x4e22, 0x0, @mcast2, 0x7}, 0x30) sendto$inet6(r5, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c) setsockopt$inet6_mtu(r5, 0x29, 0x17, &(0x7f0000000040)=0x3, 0x4) setsockopt$inet6_udp_int(r5, 0x11, 0x1, &(0x7f0000000080), 0x4) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000003c0), 0x1, 0x540, &(0x7f0000002140)="$eJzs3e9rJGcdAPDvzGbT3F3qblXkLNgWW7kreruXxrZRpK0gCkJBre/PmOyFcJvskd3USyia4ltBEFHBP8A3gr4UBOmfIEJB34uKInrVl7UjMztbL8nuJSab23bz+cBknmeemfk+z2R3dn48zARwbj0RES9FRCUino6IWjk9LYcbeWavP99bd19byYcksuyVfySRlNMG68rzMxFxqb9IzEXE174U8c3kcNzuzu6t5Xa7tVXmm72N283uzu619Y3ltdZaa3NxceG5peeXnl26npVO1c56RLzwhb/86Ps/++ILv/nUt/54429Xv51X63Mf6dc7IlZOFWCE/rqrxbYYyLfR1lkEm5C8PdXK8LIvf++U/zgAAMYqP8b/YER8vDj+r0WlOJoDAAAApkn24ny8nURkWfarSjECAAAApk0aEfORpI2yL8B8pGmj0e/D++G4mLY73d4nb3a2N1fzsoh6VNOb6+3W9bKvcD2qSZ5fKPvYDvLPHMgvRsQjEfHD2oUi31jptFcnffEDAAAAzolLj+8///93LS3SAAAAwJSpj8wAAAAA08IpPwAAAEw/5/8AAAAw1b7y8sv5kA3e47366s72rc6r11Zb3VuNje2Vxkpn63ZjrdNZK57Zt3HU+tqdzu1Px+b2nWav1e01uzu7NzY625u9G+v7XoENAAAAPECPPP7GH5KI2PvshWKI8jmAAPv8edIVAMapMukKABMzM+kKABNTPXIOewiYdskR5UXnnX0XBvvXCuO3x4/x9i/77xw9QfUAAIAxuPLRw/f/Z8uyo68NAO9n+voAwPnj7h6cX9WT9gC8PO6aAJPygf7ooVHlIx/ecYz7//1rDO77AwDApM0XQ5I2yuP0+UjTRiPi4eK1ANXk5nq7db08P/h9rfpQnl8olkyO7DMMAAAAAAAAAAAAAAAAAAAAAAAAAPRlWRIZAAAAMNUi0r8mxdP8I67Unprff3XgwFu/fvrKj+8s93pbCxGzyT9r+aTZiOj9pJz+TOaVAAAAAPAe0D9PL8cLk64NAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANPmrbuvrQyGBxn375+PiPqw+DMxV4znohoRF/+VxMw9yyURURlD/L3XI+LysPhJvJNlWb2sxbD4F844fr3YNPfGz2qD5dKIuDSG+HCevZHvf14a9v1L44liPPz7P1MOpzV6/5e+u/+rjNj/PHwgP8qjb/6iOTL+6xGPzgzf/wziJ/34+0LkmSeP2cZvfH139+C06oH8sPj3xmr2Nm43uzu719Y3ltdaa63NxcWF55aeX3p26Xrz5nq7Vf4dGv8HH/v1O/dr/8UR8ev7239o+z91rNZn8Z8379z90PBmF/GvPjn89/fyiPhp+dv3iTKdl18ZpPf66Xs99vPfPXa/9q+OaP/cEe2/eqz2x2ee/up3/zS05NDWAAAehO7O7q3ldru1dZ/E3DHmOdNExMEpL747T37wNrGKjUjMnmCpeK9UfjKJ7Dv9z+Pp1jPuT0J2msVnYgzVmD30Pa3E/7+eC0UiidjL13XMDyQAADBl/nfQf787SAAAAAAAAAAAAAAAAAAAAMBZOuFjyebi8DP5RiYOxtyLmJ1MawEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAARvtvAAAA//9VB9Z2") 1m21.40817359s ago: executing program 32 (id=107): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) waitid(0x2, r0, &(0x7f0000000140), 0x80000000, &(0x7f0000000540)) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18080000000000000000000000000002850000000f000000850000002a00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) r5 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x4008000, &(0x7f0000000280)={0xa, 0x4e22, 0x0, @mcast2, 0x7}, 0x30) sendto$inet6(r5, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c) setsockopt$inet6_mtu(r5, 0x29, 0x17, &(0x7f0000000040)=0x3, 0x4) setsockopt$inet6_udp_int(r5, 0x11, 0x1, &(0x7f0000000080), 0x4) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000003c0), 0x1, 0x540, &(0x7f0000002140)="$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") 38.581665359s ago: executing program 1 (id=254): syz_mount_image$vfat(&(0x7f0000000500), &(0x7f0000000040)='./control\x00', 0x0, &(0x7f0000001a40)=ANY=[@ANYBLOB="757466383d302c756d61736b3d303030303030303030303030303030303031373537372c73686f72746e616d653d6d697865642c636865636b3d7374726963742c636f6465706167653d3836362c696f636861727365743d6b6f69382d722c756e695f786c6174653d312c756e695f786c6174653d302c756e695f786c6174653d312c696f636861727365743d6370313235302c73686f72746e616d653d77696e6e742c756e695f786c6174653d302c6e6f6e756d7461696c3d302c756e695f786c6174653d302c73686f72746e616d653d6c6f7765722c726f6469722c00aba802c3e47903d002c04a84e760d78856d7e1a4699e49176d69514048bf46f8f430"], 0x26, 0x35d, &(0x7f0000000540)="$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") bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x141842, 0x9) 35.392126464s ago: executing program 1 (id=262): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000600)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000400), 0x12) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000300)='kmem_cache_free\x00', r3}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000180)=ANY=[@ANYBLOB="4b46bd66c0806a2b271c0a5bcea9a2645d08e64351557d55d56c854237d67b3bce66ee0a8486574744400d", @ANYBLOB="0000000000000000b708000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000088}, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000032680)=""/102400, 0x19000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000180000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'bridge0\x00'}) 34.10818969s ago: executing program 1 (id=263): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000008c00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000180)="50558c", 0x3}], 0x1}}, {{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000a80)="fb24ba96", 0xc3fd}, {0x0, 0x11}], 0x2}}], 0x2, 0x20004810) r0 = socket(0x1e, 0x4, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r4}, &(0x7f0000000040), &(0x7f0000000280)}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) 33.087471s ago: executing program 1 (id=268): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000000700), 0xff, 0x49b, &(0x7f0000001040)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}, {@metacopy_on}], [], 0x2c}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffffffff}, [@printk={@ld}, @call={0x85, 0x0, 0x0, 0x7d}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000500000000040000cd00000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r2, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r1}, 0x18) syz_clone(0x500, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x8800, 0x8) syz_mount_image$fuse(0x0, &(0x7f0000000580)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x0, 0x0, 0x0) renameat2(r0, &(0x7f0000000380)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r4, &(0x7f0000000040)='./file1\x00', 0x2) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0xa0, &(0x7f0000000700)=ANY=[], 0x1, 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f00000007c0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000680)='./file1\x00', 0x2) 29.810684543s ago: executing program 1 (id=276): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r2}, 0x10) mincore(&(0x7f0000f0c000/0x3000)=nil, 0x3000, 0x0) 29.02858962s ago: executing program 1 (id=278): r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000080)={0x42, 0x1, 0x2}, 0x10) mkdir(&(0x7f0000000040)='./file0\x00', 0x6c) mount$incfs(&(0x7f0000000580)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000005c0), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r3 = eventfd(0x1) r4 = fcntl$dupfd(r3, 0x0, r3) write$FUSE_ATTR(r4, &(0x7f0000000240)={0x40, 0xffffffffffffffda, 0x0, {0x9, 0x0, 0x0, {0x0, 0x0, 0x6, 0x0, 0x6c3000000, 0xb, 0x200000, 0xb0, 0xfffffffc, 0x2000, 0x8, 0x0, 0x0, 0x3000000, 0x1000}}}, 0x78) writev(r4, &(0x7f0000002480)=[{&(0x7f0000002400)="3151549062641a31", 0x8}], 0x1) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000680)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = openat$incfs(r1, &(0x7f00000001c0)='.pending_reads\x00', 0x0, 0x0) ioctl$TIOCL_GETKMSGREDIRECT(r6, 0xc0386723, 0x0) 29.013287772s ago: executing program 33 (id=278): r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000080)={0x42, 0x1, 0x2}, 0x10) mkdir(&(0x7f0000000040)='./file0\x00', 0x6c) mount$incfs(&(0x7f0000000580)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000005c0), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r3 = eventfd(0x1) r4 = fcntl$dupfd(r3, 0x0, r3) write$FUSE_ATTR(r4, &(0x7f0000000240)={0x40, 0xffffffffffffffda, 0x0, {0x9, 0x0, 0x0, {0x0, 0x0, 0x6, 0x0, 0x6c3000000, 0xb, 0x200000, 0xb0, 0xfffffffc, 0x2000, 0x8, 0x0, 0x0, 0x3000000, 0x1000}}}, 0x78) writev(r4, &(0x7f0000002480)=[{&(0x7f0000002400)="3151549062641a31", 0x8}], 0x1) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000680)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = openat$incfs(r1, &(0x7f00000001c0)='.pending_reads\x00', 0x0, 0x0) ioctl$TIOCL_GETKMSGREDIRECT(r6, 0xc0386723, 0x0) 9.247888139s ago: executing program 5 (id=380): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xb, 0x8, 0xc, 0xffffbffb, 0x1, 0x1}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000000010"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc"], 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mincore(&(0x7f0000f0c000/0x3000)=nil, 0x3000, 0x0) 8.869389116s ago: executing program 5 (id=383): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x0, &(0x7f0000000640), 0x1, 0x5b3, &(0x7f0000000680)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$netlink(0x10, 0x3, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000b00)={0x1c, 0x5e, 0xe25, 0x0, 0x0, "", [@nested={0xc, 0x80, 0x0, 0x1, [@typed={0x8, 0x33, 0x0, 0x0, @fd}]}]}, 0x1c}], 0x1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000074"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x18) r7 = socket(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=@newlink={0x6c, 0x10, 0xffffffffffffffff, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x13497, 0x2021}, [@IFLA_LINK={0x8, 0x5, r9}, @IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x34, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}, @IFLA_VLAN_INGRESS_QOS={0x28, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffff7, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x6, 0x6}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x6}}]}]}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r10, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) dup(r10) 7.610250721s ago: executing program 3 (id=388): socket$pppl2tp(0x18, 0x1, 0x1) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0xffffffffffffffff, 0xce8}, 0x23) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xff48, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e27, 0xffffffff, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 7.444512767s ago: executing program 3 (id=389): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000300000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x3, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1600ea5e08e9cb9fdbafeab9ff", @ANYRESOCT=r0], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/249, 0xf9}], 0x1}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0b00000007000000010001004900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r5, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) socket$can_bcm(0x1d, 0x2, 0x2) r7 = open(&(0x7f0000000000)='./file0\x00', 0x1607c0, 0x78e22799f4a46ffe) flock(r7, 0x5) r8 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fcntl$lock(r8, 0x25, &(0x7f00000002c0)) close_range(r3, 0xffffffffffffffff, 0x0) 7.30811233s ago: executing program 3 (id=391): r0 = userfaultfd(0x801) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) r3 = syz_clone3(&(0x7f0000000280)={0x141048400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x46) r4 = socket$nl_generic(0x10, 0x3, 0x10) fcntl$lock(r4, 0x24, &(0x7f0000000900)={0x1, 0x0, 0x2e, 0xfffffffffffffffc, r3}) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b708000000000010000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e8500000001000000950000000000", @ANYRESOCT=r0, @ANYRESDEC=r5], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r9, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000300)='./file0\x00', 0x2204080, &(0x7f0000000040)=ANY=[@ANYBLOB="6e6f646f74732c73686f77657865632c6e6f646f74732c6e66733d6e6f7374616c655f726f2c0030a66d3a1127e03fc4ec7721f7c77d616ce2d9a9b0ef6cf77d486df06aac6920f6f13474bc77836cb851c86e0cc5dc8611db21e0dafe4caa2c5b34"], 0x1, 0x28d, &(0x7f0000000640)="$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") write$P9_RLERRORu(r9, &(0x7f0000000040)=ANY=[@ANYBLOB='S\x00\x00\x00\a\x00\x00F\x00', @ANYRESOCT, @ANYRES8=r7], 0xa6) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x2004000, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r9}, 0x2c, {[], [], 0x6b}}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r5}, &(0x7f0000000380), &(0x7f00000003c0)=r6}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) r10 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r10, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000, 0x4}, 0x20) 6.427833257s ago: executing program 3 (id=396): setresgid(0x0, 0x0, 0xee01) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000700)=ANY=[@ANYBLOB="05000000000000000400000000000000000000fcecf9e336e20a87838d1493dc65a4fbd66c25dfe161acf54444a5e8601194b606b50c11784291ac127685804b6d247d"]) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800"/14, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = openat$selinux_relabel(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$selinux_access(r3, &(0x7f0000000680)=ANY=[@ANYBLOB="73797374676d5f753a6f626a6563745f603a6370755f6f6e6c69d2d03f6e655f743a73302073797374656d5f753a73797374656d5f723a2b65726e656c5f743a73302030"], 0x55) sync() socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00xg\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00'], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000880)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0fff8ffffffbfa400000000000007040000f0ffffffb7020000080000001823000000000000000000000000000000000000e46c68ade46a2a57bc8c14b61375714d4b8efbd610396dd548a8de941b86de235cb0eb79663c2aab26b5301904d265f7d95ccdd41f1f4407699c66986da3ad804298a86798cd89844851301205ad160a22e07c99e28289e43d81aa81c049f1a6617f6c6863abb037d2f5725653", @ANYRES32=r4, @ANYBLOB="0000000000000000b70400000800000085000000950000009500000000000000"], 0x0, 0xfffffffc, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r5, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000005a0000008500000022000000180100002020702500000000002020200100000000000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff"], 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r6}, 0x10) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r7, &(0x7f0000000180), 0x40010) setsockopt$inet6_MCAST_MSFILTER(r5, 0x29, 0x30, &(0x7f00000007c0)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000ffff00000000000000bd0000000000000000000000e4ec01000000004000000000fc00000000000000000000000000013da51fd47aa2e2f70000000000000000000000000000000000000000000000000000000000000006000000000000000005"], 0x310) setsockopt$inet6_group_source_req(r5, 0x29, 0x2b, &(0x7f00000005c0)={0x1, {{0xa, 0x0, 0x1, @mcast1, 0x8000}}, {{0xa, 0x0, 0xb53, @empty, 0x80}}}, 0x108) r8 = syz_io_uring_setup(0x4f0e, &(0x7f00000003c0)={0x0, 0x0, 0x1}, &(0x7f0000000080)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x40, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00'}, 0x18) sync() io_uring_enter(r8, 0x62dd, 0x0, 0x0, 0x0, 0x0) 6.290977731s ago: executing program 4 (id=398): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff0000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file0\x00', 0x8100) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x18) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x2) readv(r3, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0x940}], 0x1) r4 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setsig(r4, 0xa, 0x13) fcntl$setlease(r4, 0x400, 0x0) timer_create(0x0, &(0x7f00000005c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) timer_settime(r5, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) 6.1968063s ago: executing program 3 (id=399): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet_udplite(0x2, 0x2, 0x88) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(0x0, 0x0) r6 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r8, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000480)={'ip6tnl0\x00', &(0x7f0000000540)={'syztnl2\x00', 0x0, 0x2f, 0x9, 0x0, 0x8, 0x2, @private1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8, 0xc63365e9b9a8f59f, 0x80000000, 0x3b21}}) r9 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) sendfile(r9, 0xffffffffffffffff, 0x0, 0x8) r10 = syz_btf_id_by_name$bpf_lsm(&(0x7f00000001c0)='bpf_lsm_inode_rmdir\x00') bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000540)={{r7}, &(0x7f00000004c0), 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x3a, 0x13, &(0x7f00000003c0)=@raw=[@printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffc01}}, @call={0x85, 0x0, 0x0, 0xae}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @map_val={0x18, 0xb, 0x2, 0x0, r7, 0x0, 0x0, 0x0, 0x9}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r7}}, @call={0x85, 0x0, 0x0, 0xd2}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x6}], &(0x7f00000000c0)='GPL\x00', 0x6, 0x15, &(0x7f0000000100)=""/21, 0x41000, 0x2, '\x00', 0x0, @fallback=0x24, r6, 0x8, &(0x7f00000001c0)={0x6, 0x1}, 0x8, 0x10, 0x0, 0x0, r10, r7, 0x1, &(0x7f0000000580), &(0x7f00000005c0)=[{0x0, 0x5, 0xb, 0x7}], 0x10, 0x2000000}, 0x94) sendfile(r0, r7, &(0x7f0000000180)=0x2, 0x2001001) 5.27832307s ago: executing program 6 (id=401): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000300000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x3, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1600ea5e08e9cb9fdbafeab9ff", @ANYRESOCT=r0], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/249, 0xf9}], 0x1}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0b00000007000000010001004900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r5, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) socket$can_bcm(0x1d, 0x2, 0x2) r7 = open(&(0x7f0000000000)='./file0\x00', 0x1607c0, 0x78e22799f4a46ffe) flock(r7, 0x5) r8 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fcntl$lock(r8, 0x25, &(0x7f00000002c0)) close_range(r3, 0xffffffffffffffff, 0x0) 5.249559693s ago: executing program 4 (id=402): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='.\x00', 0x0, &(0x7f0000002a00)=ANY=[@ANYBLOB="ae9043979191048239ea3a2ab5d2268ab0079c2c1778098c1a2be54127977cebfd0f53df19758ac5778888fe3e745a", @ANYRESHEX=0x0, @ANYRES16=0x0], 0x1, 0x37c, &(0x7f0000001680)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x800000, &(0x7f00000012c0)={[{@shortname_mixed}, {@iocharset={'iocharset', 0x3d, 'cp775'}}, {@iocharset={'iocharset', 0x3d, 'cp865'}}, {@shortname_win95}, {@fat=@codepage={'codepage', 0x3d, '949'}}, {@shortname_winnt}, {@shortname_lower}, {@uni_xlateno}, {@uni_xlate}, {@iocharset={'iocharset', 0x3d, 'cp869'}}, {@utf8no}, {@utf8no}]}, 0x26, 0x34c, &(0x7f0000001740)="$eJzs3T9oJGUUAPC3mU12EziTQji0Wu0EOS4RC21MOE44TKEni/8aFy7nn+wqZHEhFtlLo1gqNoJWdldoebVYiNhZ2HqCnIqN1x3c4cjuTHY3mcn9EbOn3u9XhJf3fW++byZDdhKSt6+uxua52Th/9eqVqNcrUV09tRrXKrEUM5FE5kIAAP8n19I0/kgzw8RTN5v90ULMZtHcVHYHAByF4ev/a8fGidrd3A0AMA2Fn//LPVuaffvItgUAHKHC6//D+4YP/Jq/OvqbAADgv+v5l15+Zm094myjUY/ovN9r9prx5Hh87Xy8Ee3YiJOxGDcisgeF7Glh8PHpM+unTzYGflmK5qCi14zo9HvN7ElhLRnW12I5FmMpr09H9cmgfnlY34iIC/3h+tGp9JqzsZCv/+NCbMRKLMb9hfqIM+unVxr5AZqdvfp+xG7U905isP8TsRjfzww/OReD2uxYg8zOcqNxKl3fV9+7WBvOAwAAAAAAAAAAAAAAAAAAAACAo3BiPvLuOY2lUf+btNPvvXc2n9Aojg/7+2TDeX+g3aw/UFrb687zQXKwP9D+/jy9ZjVm7uqZAwAAAAAAAAAAAAAAAAAAwL9Hd3suWu32xlZ3+93NcTDX7k9k3vr2i6/n4+CcN5NxJqrZ4fbNyXMxUZXEqDwdlafJvjl5kETkkyvRunhptOPJObXRWRTKB0GtMFTJ99Rqt4899POnZVV/jjNJjIbqpUtU8vUnhjr3Zamy/dw8qHS3V24x53KapoeV73xSrIp6RLXwhfsngm+uvP7AY93jj3cr1c3WV3nTh0ceXXzh8sef/7bZakd+adrtua3ujfRvr5VM3D+V/DpXSu6E8mB3nNnd6m63kh9+f/HBD787MDkpv3/Sycw7h6/15cHMXBYMtnk7ZzpbcvOXB69cH929d34xj3+22rq089OvexfzVlUT3yQ06gAAAAAAAAAAAAAAAAAAgKmY+F/xO/DEc0e3IwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACYvvH7/08Eu4XM7QTX+1Ecqm1sdQ9dfH6qpwoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwD3srwAAAP//JT9zjQ==") bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffff0001}, [@call={0x85, 0x0, 0x0, 0x7d}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) readlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=""/146, 0x92) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000400)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r4 = inotify_init1(0x0) r5 = inotify_add_watch(r4, &(0x7f0000000200)='.\x00', 0x10000a0) r6 = dup(r4) inotify_rm_watch(r6, r5) sendmsg$AUDIT_TRIM(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x3f6, 0x200, 0x70bd28, 0x25dfdbfd, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5.241863894s ago: executing program 3 (id=403): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000", @ANYRES32=0x0, @ANYRES32=0x0], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r4 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x4008000, &(0x7f0000000280)={0xa, 0x4e22, 0x0, @mcast2, 0x7}, 0x30) sendto$inet6(r4, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c) 5.201852388s ago: executing program 2 (id=404): socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{}, &(0x7f0000000800), &(0x7f0000000840)=r0}, 0x20) r1 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$inet6_udp_int(r1, 0x11, 0xb, &(0x7f0000000100)=0x7, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace5ffb2e9fc603dd282100000002ff02000000000000000000000000000104004e200023b0"], 0x0) 5.156603822s ago: executing program 2 (id=405): connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) munlock(&(0x7f0000777000/0x800000)=nil, 0x800000) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x13, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0xfffffff9}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x38, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0xea}, @IFLA_XFRM_LINK={0x8, 0x1, 0x3}]}}}, @IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}]}, 0x58}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002480), 0x0, 0x20, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net/netfilter\x00') fchdir(r3) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) exit(0xffff) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) 5.115852136s ago: executing program 6 (id=406): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff00", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file0\x00', 0x8100) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x18) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x2) readv(r3, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0x940}], 0x1) r4 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setsig(r4, 0xa, 0x13) fcntl$setlease(r4, 0x400, 0x0) timer_create(0x0, &(0x7f00000005c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) timer_settime(r5, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) 4.134751933s ago: executing program 5 (id=407): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1c, 0x1b0, &(0x7f0000001880)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x3800, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xa0) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) ioctl$FIGETBSZ(r1, 0x2, &(0x7f0000000080)) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000500)='maps\x00') r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TCSETSF(r3, 0x5457, &(0x7f0000000000)={0x0, 0x629, 0xffffffff, 0x0, 0x7, "7a58bea88a00"}) ioctl$TCSETSF(r3, 0x5404, &(0x7f00000001c0)={0xc9a, 0x101, 0xfffffc00, 0x2, 0xa, "54d2f6b4bdf74000000000000000e907d53db1"}) pread64(r2, &(0x7f0000001240)=""/102400, 0x19000, 0xfffff7ff8) mprotect(&(0x7f0000fec000/0x11000)=nil, 0x11000, 0x1) r4 = creat(&(0x7f0000000240)='./file0\x00', 0x40) close(r4) r5 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x3000)=nil, 0x930, 0x6000002, 0x4018831, r4, 0x0) r6 = userfaultfd(0x80801) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x400}) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f0000000200)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) r7 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r2}, 0x8) close(r7) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={r0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x80000001}, 0x50) syz_clone(0x48808000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000009c0)={r7, 0x0, 0x0}, 0x10) syz_memcpy_off$KVM_EXIT_HYPERCALL(r5, 0x20, &(0x7f0000000180)="5e73663bf4082f7c6c9ecbf09d6dd7be5a06dfd645630500c1a303434a36bfc45a7badc8faed24bb77c848723a43602d1fe0d236c062e105ec77ffdc0fb243c3111dda42112650cc", 0x0, 0x48) syz_memcpy_off$KVM_EXIT_HYPERCALL(r5, 0x20, &(0x7f0000000280)="b7bb28010677f20293eae24fa9cbc2a8e476c0d318075cc7c7cf494e4bd8734ef2ba7edd73c599aee7ded91db16a6e870841f1e7f4f151816eb9533b65f9610b24581d22f3ecb416", 0x0, 0x48) ioctl$UFFDIO_UNREGISTER(r4, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xb, &(0x7f0000000100)=0x7, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d0000001827d4c1ad1127a53e6465bcc05501000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='sys_enter\x00', r4}, 0x18) 4.101510366s ago: executing program 2 (id=408): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xb, 0x8, 0xc, 0xffffbffb, 0x1, 0x1}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000000010"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mincore(&(0x7f0000f0c000/0x3000)=nil, 0x3000, 0x0) 4.073128579s ago: executing program 6 (id=409): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x16, 0x17, &(0x7f0000000400)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) socketpair$nbd(0x1, 0x1, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) recvmmsg(r2, &(0x7f0000000480), 0x400034f, 0x2, 0x0) mknod$loop(&(0x7f0000000380)='./file1\x00', 0xc000, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) ioctl$UI_SET_PHYS(r5, 0x4008556c, &(0x7f0000000600)='syz1\x00') ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000980)={'syztnl2\x00', &(0x7f0000000940)={'ip_vti0\x00', 0x0, 0x80, 0x7800, 0x5, 0x401, {{0x8, 0x4, 0x1, 0x9, 0x20, 0x68, 0x0, 0x6, 0x2f, 0x0, @multicast2, @remote, {[@generic={0x86, 0x5, 'qk:'}, @ra={0x94, 0x4}]}}}}}) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r7}, 0x18) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a40)=@bpf_lsm={0x1d, 0x2f, &(0x7f00000006c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7bc, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@ldst={0x2, 0x2, 0x1, 0x0, 0xf497e3322d70bd92, 0xfffffffffffffff8, 0xfffffffffffffff0}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8a8}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r5}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r5}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @ringbuf_output={{}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000840)='GPL\x00', 0x0, 0x8a, &(0x7f0000000880)=""/138, 0x40f00, 0x2, '\x00', r6, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000009c0)={0x8, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=[r5], 0x0, 0x10, 0x2}, 0x94) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1008413, &(0x7f0000000000), 0x0, 0x518, &(0x7f00000000c0)="$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") 3.967990319s ago: executing program 4 (id=410): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet_udplite(0x2, 0x2, 0x88) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(0x0, 0x0) r6 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r8, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000480)={'ip6tnl0\x00', &(0x7f0000000540)={'syztnl2\x00', 0x0, 0x2f, 0x9, 0x0, 0x8, 0x2, @private1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8, 0xc63365e9b9a8f59f, 0x80000000, 0x3b21}}) r9 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) sendfile(r9, 0xffffffffffffffff, 0x0, 0x8) r10 = syz_btf_id_by_name$bpf_lsm(&(0x7f00000001c0)='bpf_lsm_inode_rmdir\x00') bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000540)={{r7, 0xffffffffffffffff}, &(0x7f00000004c0), 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x3a, 0x13, &(0x7f00000003c0)=@raw=[@printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffc01}}, @call={0x85, 0x0, 0x0, 0xae}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @map_val={0x18, 0xb, 0x2, 0x0, r7, 0x0, 0x0, 0x0, 0x9}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r7}}, @call={0x85, 0x0, 0x0, 0xd2}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x6}], &(0x7f00000000c0)='GPL\x00', 0x6, 0x15, &(0x7f0000000100)=""/21, 0x41000, 0x2, '\x00', 0x0, @fallback=0x24, r6, 0x8, &(0x7f00000001c0)={0x6, 0x1}, 0x8, 0x10, 0x0, 0x0, r10, r7, 0x1, &(0x7f0000000580)=[r11, r1, r7], &(0x7f00000005c0)=[{0x0, 0x5, 0xb, 0x7}], 0x10, 0x2000000}, 0x94) sendfile(r0, r7, &(0x7f0000000180)=0x2, 0x2001001) 3.948138631s ago: executing program 2 (id=411): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) waitid(0x2, 0x0, &(0x7f0000000140), 0x80000000, &(0x7f0000000540)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000", @ANYRES32=0x0, @ANYRES32=0x0], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) r4 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x4008000, &(0x7f0000000280)={0xa, 0x4e22, 0x0, @mcast2, 0x7}, 0x30) sendto$inet6(r4, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c) setsockopt$inet6_mtu(r4, 0x29, 0x17, &(0x7f0000000040)=0x3, 0x4) setsockopt$inet6_udp_int(r4, 0x11, 0x1, &(0x7f0000000080), 0x4) 2.857258339s ago: executing program 4 (id=412): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000680)='ns/cgroup\x00') r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000c"], 0x48) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x14b040, 0x0) ioctl$ASHMEM_SET_SIZE(r3, 0x40087703, 0xfffffff3) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r3, 0x0) ioctl$ASHMEM_SET_NAME(r3, 0x40087708, &(0x7f0000000540)='\x00\x00\x03\x01\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x02\x00g\x00\x00\x00\x80\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-\xac\x99\xb8\xd2\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc4\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0HdO\xb9\xa2\x1d\x13\x8fCha\xb3\x95wl},\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80Z\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9\x13f=\xbd\x03\xe8\xbex:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13\xba\x00|g]7\xdc\xe9=\"\xe4\xb3\x0f\xc6\x8f\x85fGGV&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xd0d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146\'Z\x83H\xabF\x18<\x86h\x01=\x03\\\xc4\t\x8e/\x12\a\xdf\xe7zU\xcc\x02\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&@\x00\x00\x00rT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\xd7c\t(\xf2\x93\x8d\\\x91\xef\xab(Jck\xdf\xa3 \x16\x9bH=\x01\x7f\x02\x1dF3\x7f\xd15\xa8\xd2\x94\xa7\xe9\xbd\xdc\x16\xe1Z\x9c\xe3\xeb9\x8f\xfdC\x0e\xd3]\xb5\xfdB\\\xd2\xfe\xf6H\x8ai}kDM\xbd\xfcJ{T{@i/\xb7x\xef\x1f\xf0t\xf5\xaf\xb21F\x01\xe0\x86\xde\x88\xb8\x8f \xfc\xcd\xba\xea\x16\xc1J\xb7\xe3\x04m\x0e\xaf\xd6X\xba\x8a\xdb\xeda\x83.H\xe3\x86\x03\t\xcb\xdc\x80\xee\x0ec\x12\x8a\x92\x11\xb6\xcc#\x10\xec\xfd\xbb\xd3\\\xc8\x88\x04,\'\x14\xbf\x84\x16\xb3\x8f,6\xc6D\xae\xa1\xf9\xe7@\xac\xaa\x104\x8b\x8eQ8\x11\xa7|\x87\xe2\xccrj%\xc4r&\r\a\xa7\xda\xf5\'V\x89\xe6\xa4\x05\xde\xf5\xaa@\xec\xe2\xf6\xb5x\xa1w\n\xda\xf2\xd67\xc6%\x0f[sF\xb6\xaeS>\xe9^\xd4\xf03\xe9.\xc4\xd5\xe0\r\xa1Q\xa8\xf2\xa2`zs\'k\xd4pV\xab&%\xf8\x8a\x80\x9d\"\xf3\xcc\xd2i\xc8\xd8\xc6\xbeD\xda\x86?\xf9\x13\xe5L`R\xe8Vq\xa3\nD\x9f\xe4M\xe6\xab\xdd!=%\x06z$\x99\';O\xfc\xf0u\x83\v\x83\a8\xfe<\x9e\xa8\xfe\xca`D\x91\x81!QT$\x05T\x85\xd6\xe9!\xb9wfL\x12\xa8\xb0\xb0\x86\xc2\xa1\xf7\x05i\xf5\xf0\r\xe7h\xdaD\xcb\xd4\x87\x84\xe5\xc7r;.\xf0\xed\x17\x83Nn\xb7\x0f!u}J)\xa1\xa1\x16\xc5`Z,\xa3\xcf\xfdy\aH\x06\x14l\x92x\xdbB=\xcc\xcdf\xe5\x04=HQ\xeaE-v\x02\x0eY\x8e\xbf\xec\x16\xc4G\xea\x8bS\x8e\xd5f\xdcj\xe1\x86\xf9s\x90\xe5\xf9\x89\xc0\xf3\xcd;r4j]\x9b\xdf\xf5\xe9\x82\xe1\xdb\x11\xb3\b\xa2Y\xdb\\\xc1H\xc3\xcf\xb1W\xe9(\xee\x18\xca\xda\xf5p,\x16\xbc\x17\xfe\xd8\n\xe1\xa1&=+)\xf9Vd\x11\xf6hX\xbe\x85O=\xe2\x9f~I\xc4\"\xa9\xd9\x19\xa2\\\xb8>f\xe2Jh+u\x90\x13\x94\x12\xc8X\xd7\xb4\xf1JS0FN\xa0\xda\xb6ez`\x9a\xea\xcf^\xa5\x17{\v\xe8n\xe9 \xc0/D\t\x7f\xd8\xad\xf2e\xff\x8b\x16p\x0f\xe4\x1a/\xe1\x96\xd2\xae\x94\x0e5\xb0b+\xac\x14\xaa\xb0\xb7\xa5.\x15\x8a\xca\xb5~=D-\x90\xc1\xbf\x05\xb9\xd5\x86\xeb\xd2#\xda\xc132\'\xfc!%\x94\x1f\xbfL)\xc2c\xa8\xef\x152\x8d\xef\xde\xbe\xab\xf5g\x80\x02G>\xf5\x04a-\xff\x06X+\xc1\xd3\xb1\xcdn\x15p\xdf\xd8.\x89\x95{\xb6+:`\x9c\xcf2\x01\x1d1\xf7\xe6\x7f\x1f\xf5\xb0\xb9\t2\x14\x81\x99\xb8@7y\xb4\xce\xf1]\a\x03y\xc5F\xfa\xae\xd1Ov7\xa7\xc1\xb2.~B\xe8@G\xd1\xd9R~\x1b\xf7\xa8\x86\xa7\xc1\b\x9ej\x01\xf4\xb7\xd2\x0e\xc2\x15S\x19\xd7\xd4\xe6\xaf!\xf8_\x8aEOp@>4\xd7\xcf\x11\xe0;\x99}QmE\xdd\xa69)Q\x9e\xb9\'\x97\x9b\xe7\xa4?Ed\x9c\x7fE\xba5\x90\xc07\x96S\x9d\xe1\x84\xfa\x1a\xd6\x9a\x15\xd1o \xc0\xd28\x01\xa7\x99\x85q\xbd\x80\x00\x00\x00\x00\x00\x00\x00H\x0f\xbbT\xd5\xb3\xf4\xcd<\x8a\x01\x19\xd0|B\f0\xf8i\xd3\x1bJke\t\x8b7Q\x1dQ&\x96H\x05\xec\x80\xf0\xab\x8f\x94{\x9d+\xefs\x1c\xfck\xf7q\x10\xf6\x16\xbc\xe7\x93\x0f\x7f\xcd\xa7b\xbe\x88\xcc\xb6^\x93\xa9P\xf3\xa3\xe4Az=\xe0+Q\x9e\xb5\x01\xb3\xc1\xa8P0+\xc9\xa1\xdbU~J$\xa4\x03\x11\x1aa~\x9du\x8f\x8d\xbcI\x85k\xa0\xae\xf6\xa0\x94r\xfb\xe3\xaa\xd4\xf0\x99\x06\xe1i\x1f\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x13\\\xb2/R\xedI2e5\x88(\xc0+^\xe7G\x17\x03^\xd7g\xb9n\x8c2\xb3\x12\x91\x86b\t\xd0R\x01\xda$Y\x85\x02&\x95FC\xc8\xd9\x00\x00\x00\xb6u\xbb\n{\x90\xfd>\xd0-\xfa\xa9\xfd{\x95E\r\x81j\x12\xb7\xd0k\xc2\xdc\xcdK\xc1\xe6\xf7\xb8@\xe0D') ioctl$ASHMEM_SET_NAME(r3, 0x40087707, &(0x7f0000000040)='\x00\x00\x03\x06\x00\x00\x00\x05\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|c\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b7\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Xd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84x\x00\x00X\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~~\x84\\\xe4\x00') ioctl$ASHMEM_SET_NAME(r3, 0x40087707, &(0x7f0000001d80)='\x00\x00\x00\x00\x00\x00\x00\x1f\x00x\x85\x1c \xf3\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\x00\x00\x00\x000Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xc9\x91\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\t\x00\x00\x00\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\x89]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8CoB\xdc\xc26\x06\x10\x92\xc7\xa55\x9f\x04\x00*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03\xae\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\xedo\x92\xae\r\x05\xfa\x99\x15\x87\x14\x13$\t\x01\x00\x00\x00\x00\x00\x00\x00\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\f\x03\xbb\x14\xa7\xda\x19M\xa3!\x95\xa0\x9a\x05\x06\x00\x00\x00\xf2\xd5\b^[D~\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00f\x8a\x9b\xe2\xa7k9\xd9`=}\t\x82\nw!y\x91\xbeM\xdck=\xcc\xef\x16vt\x1d\x1c\xa3\xee\x13\x16\xdbb0\b`/c\x9f\x8c\xee\xb1\x1a\xcf\x8ba\x11Oh\xc7\xb8\x8e#\xeeAh\xd9\x15\xc6\xe7>\x95\xe2\xdaQ\x0e\xc0E\xdd\xc3^7Y\xd2\xf0\xf7DZ\x12\xce\xba\vI$[v\x00\x830p\xd4\xbf\xa3\xf28\xab\xd4e\xc9z\xff\xfc\xeb\x04\xff\x98\xda\x01.gT\xcb7!W\x98\xc4\xa5\xb4\xc3\xd8\x94\xe6\xd7\x9e\xed\x1f\xafBF\xd6\xbfu5=.\x92\xc8-\xcc~6Y\xa7K\xd5=v\xdctJ\xba\x17\x18\xc8x\x95\xd8\xb2\xd6\x10)\xcfs\xaf\xf5E\x18\xa2*\x82\tU\xd3\xf7Y\x1d\x175\x04X2\xa3K\xab\x14\xec\xc9\x9c?\xa9\xc4\xc7\xe3{\xbfA\x16\xfcY\nR\x93\xb3\xcd\x0fg\xf6L3\xe87\x8aX\x82Y\x95\v\xbf%\xef\x83\x02\xc1\xd5c}\x18(\x13\x9e\xe7\xb2$\xee\xc4\x94\x00\xf6S9\xb7\xbcu\xb9\xad\xc6$=D\xb9\x82\x15yM\xa8\xf1N\xaeB\xf8.q\x90\x8a\xb57_\x98\x7f\xf2b\xbd\x97\xfc\xefN\xc6\xad\x99IJW\'\xd6m\xf0[WO\xf3\xd0\x9e\xda\xbd8\xd5FVA>\xa8p\vp*\xd1\xd9\v\xa3\xb2\x1b)E/\xbb\x90\xcct_K\x8d\xa3\xd2\xad,y\xa7\x8b\xa3\xb8\x86\xa9Q~\x1f\xbf\xa3(,\x91') r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x0, 0x11, 0x148, 0x0, 0x0, 0x440, 0x2a8, 0x2a8, 0x440, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x88000000, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x81}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x9cb3ce4731392a25) setns(r0, 0x0) 2.500686103s ago: executing program 5 (id=413): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) open_tree(0xffffffffffffff9c, 0x0, 0x8100) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x18) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x2) readv(r3, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0x940}], 0x1) r4 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setsig(r4, 0xa, 0x13) fcntl$setlease(r4, 0x400, 0x0) timer_create(0x0, &(0x7f00000005c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) timer_settime(r5, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) 2.499889664s ago: executing program 4 (id=414): syz_mount_image$exfat(&(0x7f00000005c0), &(0x7f0000000240)='./file0\x00', 0x3800052, &(0x7f0000000600)=ANY=[], 0x1, 0x14fe, &(0x7f0000002180)="$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") chdir(&(0x7f0000000240)='./file0\x00') mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x141842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1c1002, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x40001) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x181) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000d00000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r5}, 0x18) io_pgetevents(0x0, 0x9, 0x0, 0x0, 0x0, 0x0) write$P9_RVERSION(r3, &(0x7f0000000200)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r6 = dup(r3) write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x9}}, 0x18) write$FUSE_DIRENTPLUS(r6, &(0x7f0000002c00)=ANY=[@ANYBLOB="b0"], 0xb0) getresuid(&(0x7f0000000340), &(0x7f00000000c0), &(0x7f00000004c0)=0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r8}, 0x10) write$FUSE_CREATE_OPEN(r6, &(0x7f0000000380)={0xa0, 0x0, 0x0, {{0x20, 0x1, 0x8, 0x6, 0x1000, 0x8, {0x1, 0x2, 0x65ce, 0x0, 0xffffffffffff15ef, 0x9, 0x2, 0x7fff, 0x7, 0x4000, 0xd, r7, 0xee00, 0x1, 0x10000}}, {0x0, 0x1}}}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r6, @ANYBLOB=',privport,access=', @ANYRESDEC=r7]) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x2a0000a, 0x0, 0x0, 0x0, 0x0) 2.314185662s ago: executing program 6 (id=415): r0 = socket$inet6(0xa, 0x1, 0x0) r1 = syz_create_resource$binfmt(&(0x7f0000000380)='./file1\x00') r2 = openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff) syz_mount_image$fuse(0x0, &(0x7f0000000080)='./bus\x00', 0x10040d0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c}) r3 = openat$binfmt(0xffffffffffffff9c, r1, 0x2, 0x0) copy_file_range(r2, 0x0, r3, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x7, 0x4, 0x208, 0x1}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYBLOB="0000000000000000b703000021000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x18) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x3, 0x0) r10 = io_uring_setup(0x5f4f, &(0x7f00000003c0)={0x0, 0x804, 0x2, 0x1000000}) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r10, 0xf, &(0x7f0000000540)={0x1002, 0x0, 0x0, 0x0, 0x28}, 0x20) getsockname$packet(r9, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r11, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000000)=0xcb1f, 0x4) bind$inet6(r0, 0x0, 0x0) 2.23649403s ago: executing program 2 (id=416): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) r4 = accept4$inet6(r2, 0x0, &(0x7f0000000180), 0x800) setsockopt$inet6_group_source_req(r4, 0x29, 0x2b, &(0x7f0000000440)={0x8, {{0xa, 0x4e22, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}, 0xffffffff}}, {{0xa, 0x4e23, 0x10000, @private1, 0x8}}}, 0x108) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f000030f000/0x4000)=nil, 0x4000, 0x1, 0x100010, r6, 0xdfa4f000) preadv(r7, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r9}, 0x10) socket$packet(0x11, 0xa, 0x300) setsockopt$MRT6_ADD_MFC_PROXY(r4, 0x29, 0xd2, &(0x7f0000000280)={{0xa, 0x4e24, 0xfffffff9, @private0={0xfc, 0x0, '\x00', 0x1}, 0x100}, {0xa, 0x4e24, 0x30000000, @mcast2, 0x5}, 0x0, {[0x0, 0x0, 0x8, 0x0, 0x5, 0x1, 0x400, 0x3]}}, 0x5c) r10 = socket$pppl2tp(0x18, 0x1, 0x1) r11 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r11, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x28}, 0x1c) connect$pppl2tp(r10, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r11, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x32) writev(r10, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x180204}], 0x1) syz_emit_ethernet(0x4e, &(0x7f0000001480)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb88a801008100050086dd60122d9200103aff000000001500000000000000bbff0200000000000000000000000000018600907800000000000000000000000000000009ea167505aec2768a2423b355398ddd7102d09bcf5e5fa43a1187471ecea29a8e2af37f32be132ead7075934856f52a808a1356658aa90ed24eb865a6820834253f2d2b91494276e0ec548122a73f1ec5629d2d7def502db319bb20feaf511c8f969c97fd4c36d4b29106c4d627d115235ea340f240a5a6939c6b27f8d2788915af37"], 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r7, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) r12 = open$dir(&(0x7f0000000100)='./file0\x00', 0x40000400000002c2, 0x0) copy_file_range(r12, &(0x7f0000000000)=0xffffffffffffffff, r12, &(0x7f0000000080)=0x8, 0x5, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) 1.62794902s ago: executing program 5 (id=417): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8082, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) r4 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000080000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000003c60000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10) ioctl$sock_inet_SIOCSIFADDR(r4, 0x891c, &(0x7f0000000540)={'batadv_slave_1\x00', {0x2, 0x0, @broadcast}}) ioctl$KVM_CLEAR_DIRTY_LOG(r2, 0xc018aec0, &(0x7f0000000040)={0x1, 0x3c0, 0xc0, 0x0}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_GET_XSAVE(r3, 0x9000aea4, &(0x7f0000000c80)) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'rose0\x00', 0x112}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.12032018s ago: executing program 6 (id=418): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="80000000000101040002000000000000020000002400018014000180080001000000000008000200ac1414000c0002800500010000000000240002800c00028005000100000000001400018008000100e0000002080002000000000008000740000000001c000f"], 0x80}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000013000000850000008600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x18) clock_getres(0x1, 0x0) 432.627827ms ago: executing program 6 (id=419): connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) munlock(&(0x7f0000777000/0x800000)=nil, 0x800000) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x13, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0xfffffff9}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x38, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0xea}, @IFLA_XFRM_LINK={0x8, 0x1, 0x3}]}}}, @IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}]}, 0x58}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002480), 0x0, 0x20, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net/netfilter\x00') fchdir(r3) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) exit(0xffff) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) 432.126637ms ago: executing program 2 (id=420): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='.\x00', 0x0, &(0x7f0000002a00)=ANY=[@ANYBLOB="ae9043979191048239ea3a2ab5d2268ab0079c2c1778098c1a2be54127977cebfd0f53df19758ac5778888fe3e745a", @ANYRESHEX=0x0, @ANYRES16=0x0], 0x1, 0x37c, &(0x7f0000001680)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x800000, &(0x7f00000012c0)={[{@shortname_mixed}, {@iocharset={'iocharset', 0x3d, 'cp775'}}, {@iocharset={'iocharset', 0x3d, 'cp865'}}, {@shortname_win95}, {@fat=@codepage={'codepage', 0x3d, '949'}}, {@shortname_winnt}, {@shortname_lower}, {@uni_xlateno}, {@uni_xlate}, {@iocharset={'iocharset', 0x3d, 'cp869'}}, {@utf8no}, {@utf8no}]}, 0x26, 0x34c, &(0x7f0000001740)="$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") bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffff0001}, [@call={0x85, 0x0, 0x0, 0x7d}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) readlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=""/146, 0x92) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000400)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r4 = inotify_init1(0x0) r5 = inotify_add_watch(r4, &(0x7f0000000200)='.\x00', 0x10000a0) r6 = dup(r4) inotify_rm_watch(r6, r5) sendmsg$AUDIT_TRIM(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x3f6, 0x200, 0x70bd28, 0x25dfdbfd, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 217.050779ms ago: executing program 5 (id=421): r0 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setsig(r0, 0xa, 0x13) fcntl$setlease(r0, 0x400, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) 0s ago: executing program 4 (id=422): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x16, 0x17, &(0x7f0000000400)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) socketpair$nbd(0x1, 0x1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) mknod$loop(&(0x7f0000000380)='./file1\x00', 0xc000, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) ioctl$UI_SET_PHYS(r4, 0x4008556c, &(0x7f0000000600)='syz1\x00') ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000980)={'syztnl2\x00', &(0x7f0000000940)={'ip_vti0\x00', 0x0, 0x80, 0x7800, 0x5, 0x401, {{0x8, 0x4, 0x1, 0x9, 0x20, 0x68, 0x0, 0x6, 0x2f, 0x0, @multicast2, @remote, {[@generic={0x86, 0x5, 'qk:'}, @ra={0x94, 0x4}]}}}}}) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r5}, 0x18) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0x20, &(0x7f0000000100)={&(0x7f0000000480)=""/141, 0x8d, 0x0, &(0x7f0000000300)=""/84, 0x54}}, 0x10) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000580)={r5, 0xffffffffffffffff, 0x11, 0x0, @val=@tracing={r6, 0x7}}, 0x20) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1008413, &(0x7f0000000000), 0x0, 0x518, &(0x7f00000000c0)="$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") kernel console output (not intermixed with test programs): 00000๘‡X_wB0^`5฿h๎W^ร๔บ๖t„.XY—ธภํฦLท_ๆ_ใงฅRาM er$Q<ธ]ช ั๔แ" or missing value [ 39.345280][ T467] APIC base relocation is unsupported by KVM [ 39.354478][ T424] attempt to access beyond end of device [ 39.354478][ T424] loop0: rw=2049, want=40976, limit=40427 [ 39.902810][ T30] kauditd_printk_skb: 50 callbacks suppressed [ 39.902829][ T30] audit: type=1326 audit(1760817201.036:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=450 comm="syz.2.31" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f44daffcfc9 code=0x7ffc0000 [ 39.980908][ T487] netlink: 'syz.1.42': attribute type 4 has an invalid length. [ 40.001597][ T30] audit: type=1326 audit(1760817201.036:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=450 comm="syz.2.31" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44daffcfc9 code=0x7ffc0000 [ 40.014179][ T491] loop0: detected capacity change from 0 to 16 [ 40.031403][ T30] audit: type=1326 audit(1760817201.036:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=450 comm="syz.2.31" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44daffcfc9 code=0x7ffc0000 [ 40.055633][ T30] audit: type=1326 audit(1760817201.036:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=450 comm="syz.2.31" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f44daffcfc9 code=0x7ffc0000 [ 40.085233][ T30] audit: type=1326 audit(1760817201.036:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=450 comm="syz.2.31" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44daffcfc9 code=0x7ffc0000 [ 40.109412][ T30] audit: type=1326 audit(1760817201.036:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=450 comm="syz.2.31" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44daffcfc9 code=0x7ffc0000 [ 40.132896][ T496] capability: warning: `syz.2.43' uses deprecated v2 capabilities in a way that may be insecure [ 40.143879][ T30] audit: type=1326 audit(1760817201.036:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=450 comm="syz.2.31" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f44daffcfc9 code=0x7ffc0000 [ 40.170186][ T491] erofs: (device loop0): mounted with root inode @ nid 36. [ 40.182873][ T30] audit: type=1326 audit(1760817201.036:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=450 comm="syz.2.31" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44daffcfc9 code=0x7ffc0000 [ 40.207163][ T499] loop1: detected capacity change from 0 to 128 [ 40.214655][ T30] audit: type=1326 audit(1760817201.036:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=450 comm="syz.2.31" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44daffcfc9 code=0x7ffc0000 [ 40.238189][ T30] audit: type=1326 audit(1760817201.046:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=450 comm="syz.2.31" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f44daffcfc9 code=0x7ffc0000 [ 40.282306][ T499] FAT-fs (loop1): Unrecognized mount option "ฎC—‘‘‚9๊:*ตา&Šฐœ" or missing value [ 40.637191][ T505] fuse: blksize only supported for fuseblk [ 41.286343][ T506] loop1: detected capacity change from 0 to 256 [ 41.533932][ T506] FAT-fs (loop1): Directory bread(block 64) failed [ 41.540681][ T506] FAT-fs (loop1): Directory bread(block 65) failed [ 41.547505][ T506] FAT-fs (loop1): Directory bread(block 66) failed [ 41.554180][ T506] FAT-fs (loop1): Directory bread(block 67) failed [ 41.561033][ T506] FAT-fs (loop1): Directory bread(block 68) failed [ 41.567659][ T506] FAT-fs (loop1): Directory bread(block 69) failed [ 41.574502][ T506] FAT-fs (loop1): Directory bread(block 70) failed [ 41.581156][ T506] FAT-fs (loop1): Directory bread(block 71) failed [ 41.588012][ T506] FAT-fs (loop1): Directory bread(block 72) failed [ 41.594687][ T506] FAT-fs (loop1): Directory bread(block 73) failed [ 42.494607][ T503] loop3: detected capacity change from 0 to 512 [ 42.509365][ T509] loop4: detected capacity change from 0 to 16 [ 42.546635][ T503] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 42.564450][ T511] loop2: detected capacity change from 0 to 256 [ 42.617001][ T509] erofs: (device loop4): mounted with root inode @ nid 36. [ 42.637087][ T511] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1000 sclass=netlink_route_socket pid=511 comm=syz.2.48 [ 42.672448][ T503] EXT4-fs error (device loop3): ext4_ext_check_inode:501: inode #4: comm syz.3.44: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 4095(4095) [ 42.798242][ T514] loop1: detected capacity change from 0 to 512 [ 42.816154][ T503] EXT4-fs error (device loop3): ext4_quota_enable:6411: comm syz.3.44: Bad quota inode: 4, type: 1 [ 42.837890][ T503] EXT4-fs warning (device loop3): ext4_enable_quotas:6452: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 42.855224][ T503] EXT4-fs (loop3): mount failed [ 42.934270][ T514] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 43.267185][ T514] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsv1,,errors=continue. Quota mode: writeback. [ 43.346321][ T514] ext4 filesystem being mounted at /15/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.832574][ T533] binder: BINDER_SET_CONTEXT_MGR already set [ 43.838717][ T533] binder: 527:533 ioctl 4018620d 200000000240 returned -16 [ 44.244856][ T535] tipc: Started in network mode [ 44.250087][ T535] tipc: Node identity , cluster identity 4711 [ 44.256287][ T535] tipc: Failed to set node id, please configure manually [ 44.263748][ T535] tipc: Enabling of bearer rejected, failed to enable media [ 45.440657][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 45.440676][ T30] audit: type=1400 audit(1760817205.916:277): avc: denied { bind } for pid=529 comm="syz.2.53" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 45.480281][ T538] loop2: detected capacity change from 0 to 128 [ 45.493021][ T536] loop0: detected capacity change from 0 to 512 [ 45.567171][ T30] audit: type=1400 audit(1760817205.926:278): avc: denied { name_bind } for pid=529 comm="syz.2.53" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 45.620937][ T538] FAT-fs (loop2): Unrecognized mount option "ฎC—‘‘‚9๊:*ตา&Šฐœ" or missing value [ 45.655100][ T536] EXT4-fs error (device loop0): ext4_ext_check_inode:501: inode #4: comm syz.0.50: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 4095(4095) [ 45.690671][ T30] audit: type=1400 audit(1760817205.926:279): avc: denied { node_bind } for pid=529 comm="syz.2.53" saddr=fe80::aa src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 45.874139][ T30] audit: type=1400 audit(1760817207.216:280): avc: denied { unmount } for pid=284 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 45.995480][ T542] loop2: detected capacity change from 0 to 256 [ 47.042159][ T536] EXT4-fs error (device loop0): ext4_quota_enable:6411: comm syz.0.50: Bad quota inode: 4, type: 1 [ 47.053232][ T536] EXT4-fs warning (device loop0): ext4_enable_quotas:6452: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 47.088560][ T542] FAT-fs (loop2): Directory bread(block 64) failed [ 47.095212][ T542] FAT-fs (loop2): Directory bread(block 65) failed [ 47.101822][ T542] FAT-fs (loop2): Directory bread(block 66) failed [ 47.108471][ T542] FAT-fs (loop2): Directory bread(block 67) failed [ 47.115091][ T542] FAT-fs (loop2): Directory bread(block 68) failed [ 47.121647][ T542] FAT-fs (loop2): Directory bread(block 69) failed [ 47.128233][ T542] FAT-fs (loop2): Directory bread(block 70) failed [ 47.134974][ T542] FAT-fs (loop2): Directory bread(block 71) failed [ 47.141570][ T542] FAT-fs (loop2): Directory bread(block 72) failed [ 47.148101][ T542] FAT-fs (loop2): Directory bread(block 73) failed [ 47.226134][ T536] EXT4-fs (loop0): mount failed [ 47.484471][ T551] netlink: 4 bytes leftover after parsing attributes in process `syz.1.57'. [ 47.502265][ T551] netlink: 12 bytes leftover after parsing attributes in process `syz.1.57'. [ 47.600636][ T30] audit: type=1400 audit(1760817208.926:281): avc: denied { read } for pid=547 comm="syz.1.57" name="ppp" dev="devtmpfs" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 48.478051][ T555] netlink: 4 bytes leftover after parsing attributes in process `syz.2.58'. [ 48.488072][ T555] netlink: 12 bytes leftover after parsing attributes in process `syz.2.58'. [ 48.761280][ T30] audit: type=1400 audit(1760817208.926:282): avc: denied { open } for pid=547 comm="syz.1.57" path="/dev/ppp" dev="devtmpfs" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 51.564566][ T564] binder: BINDER_SET_CONTEXT_MGR already set [ 51.570690][ T564] binder: 558:564 ioctl 4018620d 200000000240 returned -16 [ 52.641817][ T30] audit: type=1400 audit(1760817214.106:283): avc: denied { unlink } for pid=566 comm="syz.3.61" name="#1" dev="tmpfs" ino=63 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 52.860489][ T30] audit: type=1400 audit(1760817214.136:284): avc: denied { mount } for pid=566 comm="syz.3.61" name="/" dev="overlay" ino=58 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 53.058263][ T30] audit: type=1400 audit(1760817214.446:285): avc: denied { name_bind } for pid=566 comm="syz.3.61" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 54.181952][ T30] audit: type=1400 audit(1760817214.446:286): avc: denied { node_bind } for pid=566 comm="syz.3.61" saddr=::1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 54.664467][ T30] audit: type=1400 audit(1760817216.106:287): avc: denied { read } for pid=586 comm="syz.1.67" dev="nsfs" ino=4026532550 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 54.898436][ T30] audit: type=1400 audit(1760817216.106:288): avc: denied { open } for pid=586 comm="syz.1.67" path="net:[4026532550]" dev="nsfs" ino=4026532550 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 54.932795][ T30] audit: type=1400 audit(1760817216.116:289): avc: denied { setopt } for pid=586 comm="syz.1.67" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 54.952246][ T6] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 54.985655][ T30] audit: type=1400 audit(1760817216.126:290): avc: denied { write } for pid=586 comm="syz.1.67" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 55.269861][ T596] loop0: detected capacity change from 0 to 512 [ 55.408965][ T596] EXT4-fs (loop0): orphan cleanup on readonly fs [ 55.418415][ T596] Quota error (device loop0): find_block_dqentry: Quota for id 0 referenced but not present [ 55.428857][ T596] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 55.438315][ T596] EXT4-fs error (device loop0): ext4_acquire_dquot:6200: comm syz.0.69: Failed to acquire dquot type 1 [ 55.454146][ T596] EXT4-fs (loop0): 1 truncate cleaned up [ 55.460529][ T596] EXT4-fs (loop0): mounted filesystem without journal. Opts: noinit_itable,,errors=continue. Quota mode: writeback. [ 57.179319][ T610] serio: Serial port ptm0 [ 57.267670][ T6] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 57.277299][ T6] usb 3-1: can't read configurations, error -71 [ 57.389022][ T618] fuse: blksize only supported for fuseblk [ 57.737244][ T620] netlink: 4 bytes leftover after parsing attributes in process `syz.2.76'. [ 57.906412][ T622] loop2: detected capacity change from 0 to 128 [ 57.936124][ T30] kauditd_printk_skb: 37 callbacks suppressed [ 57.936141][ T30] audit: type=1400 audit(1760817219.396:328): avc: denied { connect } for pid=623 comm="syz.1.78" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 57.972242][ T622] FAT-fs (loop2): Unrecognized mount option "ฎC—‘‘‚9๊:*ตา&Šฐœ" or missing value [ 58.005346][ T30] audit: type=1400 audit(1760817219.466:329): avc: denied { write } for pid=623 comm="syz.1.78" path="socket:[16028]" dev="sockfs" ino=16028 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 60.170837][ T636] netlink: 292 bytes leftover after parsing attributes in process `syz.3.82'. [ 60.208204][ T30] audit: type=1400 audit(1760817221.636:330): avc: denied { nlmsg_write } for pid=631 comm="syz.3.82" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 60.482145][ T642] loop1: detected capacity change from 0 to 512 [ 63.448883][ T641] loop2: detected capacity change from 0 to 256 [ 63.524402][ T642] EXT4-fs: failed to create workqueue [ 63.529853][ T642] EXT4-fs (loop1): mount failed [ 63.663526][ T641] FAT-fs (loop2): Directory bread(block 64) failed [ 63.670159][ T641] FAT-fs (loop2): Directory bread(block 65) failed [ 63.676760][ T641] FAT-fs (loop2): Directory bread(block 66) failed [ 63.683319][ T641] FAT-fs (loop2): Directory bread(block 67) failed [ 63.689867][ T641] FAT-fs (loop2): Directory bread(block 68) failed [ 63.696412][ T641] FAT-fs (loop2): Directory bread(block 69) failed [ 63.702982][ T641] FAT-fs (loop2): Directory bread(block 70) failed [ 63.709670][ T641] FAT-fs (loop2): Directory bread(block 71) failed [ 63.716412][ T641] FAT-fs (loop2): Directory bread(block 72) failed [ 63.722978][ T641] FAT-fs (loop2): Directory bread(block 73) failed [ 63.736998][ T647] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 63.745834][ T647] overlayfs: missing 'lowerdir' [ 63.774275][ T30] audit: type=1400 audit(1760817225.226:331): avc: denied { read } for pid=648 comm="syz.3.84" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 63.930245][ T30] audit: type=1400 audit(1760817225.386:332): avc: denied { mounton } for pid=654 comm="syz.4.87" path="/17/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 63.972512][ T655] incfs_lookup_dentry err:-5 [ 63.977683][ T655] incfs: Can't find or create .index dir in ./file0 [ 63.984448][ T655] incfs: mount failed -5 [ 64.019867][ T652] netlink: 'syz.0.85': attribute type 4 has an invalid length. [ 64.030195][ T30] audit: type=1400 audit(1760817225.486:333): avc: denied { create } for pid=648 comm="syz.3.84" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 64.066789][ T30] audit: type=1400 audit(1760817225.486:334): avc: denied { connect } for pid=648 comm="syz.3.84" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 64.112866][ T661] binder: BINDER_SET_CONTEXT_MGR already set [ 64.118978][ T661] binder: 656:661 ioctl 4018620d 200000000240 returned -16 [ 64.169978][ T662] xt_hashlimit: max too large, truncated to 1048576 [ 64.401290][ T30] audit: type=1326 audit(1760817225.856:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=658 comm="syz.4.88" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f684853ffc9 code=0x7ffc0000 [ 64.828381][ T669] fuse: blksize only supported for fuseblk [ 65.561564][ T668] loop0: detected capacity change from 0 to 512 [ 65.585508][ T30] audit: type=1326 audit(1760817225.916:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=658 comm="syz.4.88" exe="/root/syz-executor" sig=0 arch=c000003e syscall=196 compat=0 ip=0x7f684853ffc9 code=0x7ffc0000 [ 66.509619][ T680] loop3: detected capacity change from 0 to 256 [ 66.518055][ T30] audit: type=1326 audit(1760817225.926:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=658 comm="syz.4.88" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f684853ffc9 code=0x7ffc0000 [ 66.542164][ T30] audit: type=1326 audit(1760817225.936:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=658 comm="syz.4.88" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f684853ffc9 code=0x7ffc0000 [ 66.606652][ T668] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 66.640189][ T680] FAT-fs (loop3): Directory bread(block 64) failed [ 66.649057][ T682] loop4: detected capacity change from 0 to 16 [ 66.984768][ T30] audit: type=1400 audit(1760817227.156:339): avc: denied { write } for pid=670 comm="syz.2.91" name="001" dev="devtmpfs" ino=184 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 67.008719][ T680] FAT-fs (loop3): Directory bread(block 65) failed [ 67.053592][ T682] erofs: (device loop4): mounted with root inode @ nid 36. [ 67.069088][ T680] FAT-fs (loop3): Directory bread(block 66) failed [ 67.111374][ T680] FAT-fs (loop3): Directory bread(block 67) failed [ 67.118013][ T680] FAT-fs (loop3): Directory bread(block 68) failed [ 67.124884][ T680] FAT-fs (loop3): Directory bread(block 69) failed [ 67.130860][ T668] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1147: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 67.131575][ T680] FAT-fs (loop3): Directory bread(block 70) failed [ 67.152396][ T680] FAT-fs (loop3): Directory bread(block 71) failed [ 67.159086][ T680] FAT-fs (loop3): Directory bread(block 72) failed [ 67.165718][ T680] FAT-fs (loop3): Directory bread(block 73) failed [ 67.175764][ T668] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2825: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 67.206389][ T668] EXT4-fs (loop0): 1 truncate cleaned up [ 67.215596][ T668] EXT4-fs (loop0): mounted filesystem without journal. Opts: init_itable,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006e,journal_dev=0x0000000000000004,lazytime,quota,,errors=continue. Quota mode: writeback. [ 67.260746][ T30] audit: type=1400 audit(1760817228.726:340): avc: denied { mounton } for pid=679 comm="syz.3.94" path="/12/control/file0" dev="loop3" ino=1048601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=file permissive=1 [ 67.284703][ T680] fuse: Bad value for 'fd' [ 67.302523][ T668] syz.0.90[668] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 67.347399][ T668] incfs_lookup_dentry err:-5 [ 67.366714][ T668] incfs: Can't find or create .index dir in ./file0 [ 67.380720][ T668] incfs: mount failed -5 [ 67.426019][ T281] EXT4-fs error (device loop0): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /12/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 67.486430][ T281] EXT4-fs error (device loop0): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 67.526002][ T698] binder: BINDER_SET_CONTEXT_MGR already set [ 67.532265][ T698] binder: 690:698 ioctl 4018620d 200000000240 returned -16 [ 67.577415][ T281] EXT4-fs error (device loop0): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /12/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 67.602740][ T281] EXT4-fs error (device loop0): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 67.646165][ T281] EXT4-fs error (device loop0): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /12/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 73.176175][ T281] EXT4-fs error (device loop0): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 73.208609][ T281] EXT4-fs error (device loop0): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /12/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 73.241104][ T281] EXT4-fs error (device loop0): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 73.262001][ T281] EXT4-fs error (device loop0): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /12/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 73.283924][ T281] EXT4-fs error (device loop0): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 73.365126][ T706] binder: BINDER_SET_CONTEXT_MGR already set [ 73.371422][ T706] binder: 702:706 ioctl 4018620d 200000000240 returned -16 [ 73.934809][ T714] netlink: 24 bytes leftover after parsing attributes in process `syz.4.102'. [ 76.146375][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 76.146390][ T30] audit: type=1326 audit(1760817237.606:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=707 comm="syz.2.103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44daffcfc9 code=0x7ffc0000 [ 76.178965][ T281] EXT4-fs error (device loop0): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /12/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 76.219203][ T718] serio: Serial port ptm1 [ 76.232678][ T721] netlink: 'syz.1.104': attribute type 4 has an invalid length. [ 76.275410][ T281] EXT4-fs error (device loop0): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 76.303951][ T30] audit: type=1326 audit(1760817237.636:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=707 comm="syz.2.103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44daffcfc9 code=0x7ffc0000 [ 76.336922][ T281] EXT4-fs error (device loop0): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /12/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 76.358502][ T30] audit: type=1326 audit(1760817237.666:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=707 comm="syz.2.103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f44daffcfc9 code=0x7ffc0000 [ 76.382392][ T281] EXT4-fs error (device loop0): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 76.410189][ T30] audit: type=1326 audit(1760817237.666:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=707 comm="syz.2.103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44daffcfc9 code=0x7ffc0000 [ 76.433995][ T281] EXT4-fs error (device loop0): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /12/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 76.450508][ T30] audit: type=1326 audit(1760817237.666:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=707 comm="syz.2.103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44daffcfc9 code=0x7ffc0000 [ 76.479097][ T30] audit: type=1326 audit(1760817237.666:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=707 comm="syz.2.103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f44daffcfc9 code=0x7ffc0000 [ 76.489999][ T723] loop3: detected capacity change from 0 to 512 [ 76.502747][ T30] audit: type=1326 audit(1760817237.666:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=707 comm="syz.2.103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44daffcfc9 code=0x7ffc0000 [ 76.531905][ T30] audit: type=1326 audit(1760817237.666:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=707 comm="syz.2.103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44daffcfc9 code=0x7ffc0000 [ 76.531905][ T336] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 76.531938][ T30] audit: type=1326 audit(1760817237.666:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=707 comm="syz.2.103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f44daffcfc9 code=0x7ffc0000 [ 76.586070][ T30] audit: type=1326 audit(1760817237.666:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=707 comm="syz.2.103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44daffcfc9 code=0x7ffc0000 [ 76.610641][ T723] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 76.632473][ T723] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsv1,,errors=continue. Quota mode: writeback. [ 76.645051][ T723] ext4 filesystem being mounted at /16/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.903018][ T730] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.910201][ T730] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.920218][ T730] device bridge_slave_0 entered promiscuous mode [ 76.930550][ T336] usb 3-1: config 0 has an invalid interface number: 92 but max is 3 [ 76.938873][ T730] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.945103][ T336] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 4 [ 76.946604][ T730] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.962596][ T730] device bridge_slave_1 entered promiscuous mode [ 76.963845][ T336] usb 3-1: config 0 has no interface number 0 [ 76.984421][ T737] netlink: 'syz.3.110': attribute type 4 has an invalid length. [ 76.992235][ T336] usb 3-1: config 0 interface 92 has no altsetting 0 [ 77.009697][ T739] loop4: detected capacity change from 0 to 512 [ 77.016148][ T336] usb 3-1: New USB device found, idVendor=1a0a, idProduct=0101, bcdDevice=54.c3 [ 77.025355][ T336] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.034287][ T336] usb 3-1: config 0 descriptor?? [ 77.105772][ T739] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 77.172303][ T739] ext4 filesystem being mounted at /23/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 79.483472][ T336] usb 3-1: string descriptor 0 read error: -71 [ 79.486693][ T730] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.496774][ T730] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.499740][ T336] usb_ehset_test: probe of 3-1:0.92 failed with error -32 [ 79.504123][ T730] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.518247][ T730] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.544581][ T336] usb 3-1: USB disconnect, device number 4 [ 79.621749][ T764] EXT4-fs (loop4): Unrecognized mount option "" or missing value [ 79.666560][ T346] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.677795][ T346] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.845448][ T768] loop2: detected capacity change from 0 to 16 [ 79.875283][ T768] erofs: (device loop2): mounted with root inode @ nid 36. [ 79.922399][ T649] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 79.930251][ T649] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 79.953431][ T45] device bridge_slave_1 left promiscuous mode [ 79.967221][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.974928][ T45] device bridge_slave_0 left promiscuous mode [ 79.981298][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.989391][ T45] device veth1_macvtap left promiscuous mode [ 79.995530][ T45] device veth0_vlan left promiscuous mode [ 80.092868][ T649] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 80.101497][ T649] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 80.109731][ T649] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.116812][ T649] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.124264][ T649] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 80.132695][ T649] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 80.140879][ T649] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.147931][ T649] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.155345][ T649] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 80.163564][ T649] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 80.171609][ T649] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 80.179703][ T649] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 80.206149][ T649] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 80.215186][ T649] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 80.229062][ T730] device veth0_vlan entered promiscuous mode [ 80.235927][ T649] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 80.244787][ T649] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 80.259995][ T730] device veth1_macvtap entered promiscuous mode [ 80.268122][ T649] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 80.276447][ T649] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 80.284644][ T649] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 80.301661][ T649] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 80.320399][ T649] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 80.353926][ T649] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 80.381123][ T649] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 80.391879][ T649] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 80.411809][ T649] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 80.544160][ T786] serio: Serial port ptm0 [ 81.268029][ T796] netlink: 24 bytes leftover after parsing attributes in process `syz.3.121'. [ 81.586316][ T30] kauditd_printk_skb: 32 callbacks suppressed [ 81.586332][ T30] audit: type=1400 audit(1760817243.046:390): avc: denied { read } for pid=797 comm="syz.4.124" name="rtc0" dev="devtmpfs" ino=259 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 83.421592][ T30] audit: type=1400 audit(1760817244.886:391): avc: denied { open } for pid=797 comm="syz.4.124" path="/dev/rtc0" dev="devtmpfs" ino=259 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 83.480771][ T817] loop5: detected capacity change from 0 to 1024 [ 83.542334][ T817] EXT4-fs (loop5): Ignoring removed orlov option [ 83.566721][ T819] binder: BINDER_SET_CONTEXT_MGR already set [ 83.572944][ T819] binder: 811:819 ioctl 4018620d 200000000240 returned -16 [ 84.050676][ T817] EXT4-fs (loop5): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,noload,orlov,,errors=continue. Quota mode: none. [ 84.592228][ T817] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.892142][ T833] overlayfs: failed to resolve './file1': -2 [ 85.320557][ T30] audit: type=1400 audit(1760817246.696:392): avc: denied { create } for pid=832 comm="syz.1.133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 85.409766][ T30] audit: type=1400 audit(1760817246.706:393): avc: denied { bind } for pid=832 comm="syz.1.133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 85.826085][ T844] binder: BINDER_SET_CONTEXT_MGR already set [ 85.832286][ T844] binder: 838:844 ioctl 4018620d 200000000240 returned -16 [ 86.161865][ T848] loop4: detected capacity change from 0 to 16 [ 86.252842][ T848] erofs: (device loop4): mounted with root inode @ nid 36. [ 87.015728][ T857] loop3: detected capacity change from 0 to 256 [ 87.060332][ T859] netlink: 16 bytes leftover after parsing attributes in process `syz.5.139'. [ 87.082369][ T857] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 87.108049][ T857] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 87.133335][ T859] serio: Serial port ptm0 [ 87.143677][ T857] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 87.311495][ T30] audit: type=1400 audit(1760817248.776:394): avc: denied { create } for pid=864 comm="syz.4.140" dev="anon_inodefs" ino=18551 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 87.412360][ T867] xt_CT: No such helper "pptp" [ 87.479317][ T30] audit: type=1400 audit(1760817248.936:395): avc: denied { ioctl } for pid=864 comm="syz.4.140" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=18551 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 87.608417][ T868] loop4: detected capacity change from 0 to 512 [ 87.669611][ T875] serio: Serial port ptm1 [ 87.695738][ T865] 9pnet: p9_errstr2errno: server reported unknown error 01777777777777777777777e_ro, [ 87.747684][ T30] audit: type=1400 audit(1760817249.206:396): avc: denied { create } for pid=864 comm="syz.4.140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 87.760300][ T865] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 87.767151][ T30] audit: type=1400 audit(1760817249.216:397): avc: denied { setopt } for pid=864 comm="syz.4.140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 87.824540][ T878] serio: Serial port ptm2 [ 88.162386][ T892] loop5: detected capacity change from 0 to 512 [ 93.163390][ T30] audit: type=1400 audit(1760817253.676:398): avc: denied { bind } for pid=884 comm="syz.5.148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 93.405302][ T30] audit: type=1400 audit(1760817253.686:399): avc: denied { bind } for pid=884 comm="syz.5.148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 93.475956][ T30] audit: type=1400 audit(1760817253.696:400): avc: denied { listen } for pid=884 comm="syz.5.148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 93.495402][ T30] audit: type=1400 audit(1760817253.716:401): avc: denied { connect } for pid=884 comm="syz.5.148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 93.516520][ T30] audit: type=1400 audit(1760817253.776:402): avc: denied { write } for pid=884 comm="syz.5.148" path="socket:[17516]" dev="sockfs" ino=17516 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 93.539854][ T30] audit: type=1400 audit(1760817253.786:403): avc: denied { accept } for pid=884 comm="syz.5.148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 93.566878][ T30] audit: type=1400 audit(1760817253.866:404): avc: denied { setopt } for pid=884 comm="syz.5.148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 93.586674][ T30] audit: type=1400 audit(1760817254.766:405): avc: denied { write } for pid=897 comm="syz.5.150" name="event0" dev="devtmpfs" ino=256 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 93.609817][ T30] audit: type=1400 audit(1760817254.766:406): avc: denied { open } for pid=897 comm="syz.5.150" path="/dev/input/event0" dev="devtmpfs" ino=256 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 93.651534][ T919] loop4: detected capacity change from 0 to 256 [ 93.660280][ T30] audit: type=1400 audit(1760817254.766:407): avc: denied { read } for pid=897 comm="syz.5.150" name="event0" dev="devtmpfs" ino=256 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 93.688739][ T902] loop1: detected capacity change from 0 to 8192 [ 93.750667][ T921] netlink: 4 bytes leftover after parsing attributes in process `syz.3.157'. [ 93.762619][ T921] netlink: 12 bytes leftover after parsing attributes in process `syz.3.157'. [ 93.844085][ T921] loop3: detected capacity change from 0 to 512 [ 93.864276][ T919] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 93.913968][ T902] loop1: p1 p2[DM] p4 [ 93.919200][ T902] loop1: p1 size 196608 extends beyond EOD, truncated [ 99.404255][ T902] loop1: p2 start 4292936063 is beyond EOD, truncated [ 99.420011][ T902] loop1: p4 size 50331648 extends beyond EOD, truncated [ 99.647989][ T929] loop5: detected capacity change from 0 to 256 [ 100.309159][ T929] FAT-fs (loop5): Directory bread(block 64) failed [ 100.480501][ T929] FAT-fs (loop5): Directory bread(block 65) failed [ 100.487126][ T929] FAT-fs (loop5): Directory bread(block 66) failed [ 100.496016][ T937] loop3: detected capacity change from 0 to 128 [ 100.501785][ T939] loop4: detected capacity change from 0 to 128 [ 100.511895][ T937] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 100.531491][ T941] serio: Serial port ptm0 [ 100.540061][ T744] udevd[744]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 100.549930][ T929] FAT-fs (loop5): Directory bread(block 67) failed [ 100.556986][ T937] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 100.571894][ T703] udevd[703]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 100.582627][ T929] FAT-fs (loop5): Directory bread(block 68) failed [ 100.589197][ T929] FAT-fs (loop5): Directory bread(block 69) failed [ 100.610751][ T939] FAT-fs (loop4): Unrecognized mount option "ฎC—‘‘‚9๊:*ตา&Šฐœ" or missing value [ 100.632706][ T929] FAT-fs (loop5): Directory bread(block 70) failed [ 100.640166][ T929] FAT-fs (loop5): Directory bread(block 71) failed [ 100.646905][ T929] FAT-fs (loop5): Directory bread(block 72) failed [ 100.653599][ T929] FAT-fs (loop5): Directory bread(block 73) failed [ 100.706737][ T929] fuse: Bad value for 'fd' [ 100.751174][ T45] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 100.907028][ T955] loop4: detected capacity change from 0 to 256 [ 101.017959][ T955] FAT-fs (loop4): Directory bread(block 64) failed [ 101.024777][ T955] FAT-fs (loop4): Directory bread(block 65) failed [ 101.031724][ T955] FAT-fs (loop4): Directory bread(block 66) failed [ 101.038349][ T955] FAT-fs (loop4): Directory bread(block 67) failed [ 101.045199][ T955] FAT-fs (loop4): Directory bread(block 68) failed [ 101.051849][ T955] FAT-fs (loop4): Directory bread(block 69) failed [ 101.058695][ T955] FAT-fs (loop4): Directory bread(block 70) failed [ 101.065339][ T955] FAT-fs (loop4): Directory bread(block 71) failed [ 101.072106][ T955] FAT-fs (loop4): Directory bread(block 72) failed [ 101.078744][ T955] FAT-fs (loop4): Directory bread(block 73) failed [ 102.996879][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 102.996896][ T30] audit: type=1400 audit(1760817263.776:412): avc: denied { ioctl } for pid=960 comm="syz.1.171" path="/dev/rtc0" dev="devtmpfs" ino=259 ioctlcmd=0x7007 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 103.170926][ T975] UDC core: couldn't find an available UDC or it's busy: -16 [ 103.209299][ T983] loop4: detected capacity change from 0 to 128 [ 103.225854][ T975] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 103.298713][ T975] loop2: detected capacity change from 0 to 256 [ 103.353068][ T975] FAT-fs (loop2): Unrecognized mount option "shortname=lowe" or missing value [ 103.430504][ T336] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 103.810547][ T336] usb 3-1: device descriptor read/64, error -71 [ 103.839538][ T983] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 103.920544][ T30] audit: type=1326 audit(1760817265.336:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=987 comm="syz.3.179" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc9cc7c0fc9 code=0x0 [ 104.431304][ T983] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 104.509462][ T1003] loop1: detected capacity change from 0 to 512 [ 104.523253][ T1001] serio: Serial port ptm0 [ 104.581589][ T1003] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.183: inode #1: comm syz.1.183: iget: illegal inode # [ 104.650872][ T1003] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.183: error while reading EA inode 1 err=-117 [ 104.663989][ T45] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 104.680365][ T1003] EXT4-fs (loop1): 1 orphan inode deleted [ 104.686344][ T1003] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 104.700996][ T1003] SELinux: Context system_u:object_r:hwdata_t:s0 is not valid (left unmapped). [ 104.723965][ T30] audit: type=1400 audit(1760817266.166:414): avc: denied { relabelto } for pid=1002 comm="syz.1.183" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:hwdata_t:s0" [ 105.057756][ T1018] loop4: detected capacity change from 0 to 1024 [ 105.132180][ T1018] EXT4-fs (loop4): Ignoring removed orlov option [ 105.163621][ T1018] EXT4-fs (loop4): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,noload,orlov,,errors=continue. Quota mode: none. [ 105.205780][ T1018] ext4 filesystem being mounted at /40/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 105.394250][ T1023] loop5: detected capacity change from 0 to 512 [ 105.515708][ T1023] bridge: RTM_NEWNEIGH with invalid ether address [ 105.905126][ T1038] netlink: 40 bytes leftover after parsing attributes in process `syz.3.191'. [ 106.962252][ T30] audit: type=1400 audit(1760817268.426:415): avc: denied { write } for pid=1046 comm="syz.4.196" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 107.103993][ T30] audit: type=1326 audit(1760817268.566:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1051 comm="syz.3.197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9cc7c0fc9 code=0x7ffc0000 [ 107.334999][ T1048] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.342309][ T1048] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.376548][ T30] audit: type=1326 audit(1760817268.596:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1051 comm="syz.3.197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=132 compat=0 ip=0x7fc9cc7c0fc9 code=0x7ffc0000 [ 107.484993][ T1070] loop2: detected capacity change from 0 to 2048 [ 107.500530][ T30] audit: type=1326 audit(1760817268.596:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1051 comm="syz.3.197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9cc7c0fc9 code=0x7ffc0000 [ 107.698614][ T1070] EXT4-fs (loop2): mounted filesystem without journal. Opts: min_batch_time=0x000000000000000d,mb_optimize_scan=0x0000000000000001,noblock_validity,,errors=continue. Quota mode: none. [ 107.739512][ T30] audit: type=1326 audit(1760817268.606:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1051 comm="syz.3.197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc9cc7c0fc9 code=0x7ffc0000 [ 108.145212][ T30] audit: type=1326 audit(1760817268.606:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1051 comm="syz.3.197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9cc7c0fc9 code=0x7ffc0000 [ 108.175063][ T30] audit: type=1326 audit(1760817268.616:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1051 comm="syz.3.197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fc9cc7c0fc9 code=0x7ffc0000 [ 108.203092][ T30] audit: type=1326 audit(1760817268.626:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1051 comm="syz.3.197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9cc7c0fc9 code=0x7ffc0000 [ 108.228356][ T30] audit: type=1326 audit(1760817268.646:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1051 comm="syz.3.197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fc9cc7c0fc9 code=0x7ffc0000 [ 108.274765][ T30] audit: type=1326 audit(1760817268.646:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1051 comm="syz.3.197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9cc7c0fc9 code=0x7ffc0000 [ 108.298737][ T30] audit: type=1326 audit(1760817268.656:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1051 comm="syz.3.197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fc9cc7c0fc9 code=0x7ffc0000 [ 108.324899][ T30] audit: type=1326 audit(1760817268.656:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1051 comm="syz.3.197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9cc7c0fc9 code=0x7ffc0000 [ 108.348976][ T30] audit: type=1326 audit(1760817268.656:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1051 comm="syz.3.197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9cc7c0fc9 code=0x7ffc0000 [ 108.386005][ T30] audit: type=1326 audit(1760817268.656:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1051 comm="syz.3.197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fc9cc7c0fc9 code=0x7ffc0000 [ 108.413206][ T1085] FAULT_INJECTION: forcing a failure. [ 108.413206][ T1085] name failslab, interval 1, probability 0, space 0, times 1 [ 108.426030][ T1085] CPU: 1 PID: 1085 Comm: syz.1.203 Not tainted syzkaller #0 [ 108.433348][ T1085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 108.443446][ T1085] Call Trace: [ 108.446750][ T1085] [ 108.449711][ T1085] __dump_stack+0x21/0x30 [ 108.454093][ T1085] dump_stack_lvl+0xee/0x150 [ 108.458721][ T1085] ? show_regs_print_info+0x20/0x20 [ 108.463953][ T1085] dump_stack+0x15/0x20 [ 108.468123][ T1085] should_fail+0x3c1/0x510 [ 108.472555][ T1085] __should_failslab+0xa4/0xe0 [ 108.477338][ T1085] should_failslab+0x9/0x20 [ 108.481961][ T1085] slab_pre_alloc_hook+0x3b/0xe0 [ 108.486914][ T1085] ? shmem_alloc_inode+0x1a/0x30 [ 108.491861][ T1085] kmem_cache_alloc+0x44/0x260 [ 108.496634][ T1085] ? preempt_schedule_common+0xbe/0xf0 [ 108.502099][ T1085] ? shmem_match+0x160/0x160 [ 108.506703][ T1085] shmem_alloc_inode+0x1a/0x30 [ 108.511476][ T1085] new_inode_pseudo+0x62/0x210 [ 108.516252][ T1085] new_inode+0x28/0x1e0 [ 108.520421][ T1085] shmem_get_inode+0x34a/0x9e0 [ 108.525197][ T1085] __shmem_file_setup+0x113/0x2b0 [ 108.530235][ T1085] shmem_file_setup+0x2f/0x40 [ 108.534931][ T1085] __se_sys_memfd_create+0x1e6/0x3b0 [ 108.540234][ T1085] __x64_sys_memfd_create+0x5b/0x70 [ 108.545446][ T1085] x64_sys_call+0x473/0x9a0 [ 108.549969][ T1085] do_syscall_64+0x4c/0xa0 [ 108.554420][ T1085] ? clear_bhb_loop+0x50/0xa0 [ 108.559111][ T1085] ? clear_bhb_loop+0x50/0xa0 [ 108.563795][ T1085] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 108.569727][ T1085] RIP: 0033:0x7f4c6d9c7fc9 [ 108.574153][ T1085] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 108.593782][ T1085] RSP: 002b:00007f4c6c3ede18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 108.602343][ T1085] RAX: ffffffffffffffda RBX: 000000000000051b RCX: 00007f4c6d9c7fc9 [ 108.610343][ T1085] RDX: 00007f4c6c3edef0 RSI: 0000000000000000 RDI: 00007f4c6da4b960 [ 108.618334][ T1085] RBP: 0000200000001200 R08: 00007f4c6c3edbb7 R09: 00007f4c6c3ede40 [ 108.626316][ T1085] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000640 [ 108.634294][ T1085] R13: 00007f4c6c3edef0 R14: 00007f4c6c3edeb0 R15: 0000200000000000 [ 108.642287][ T1085] [ 109.023530][ T1090] loop2: detected capacity change from 0 to 256 [ 109.149020][ T1093] loop4: detected capacity change from 0 to 16 [ 109.167857][ T1090] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 109.361575][ T30] audit: type=1326 audit(1760817268.656:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1051 comm="syz.3.197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9cc7c0fc9 code=0x7ffc0000 [ 109.440828][ T1093] erofs: (device loop4): mounted with root inode @ nid 36. [ 109.459043][ T1097] loop1: detected capacity change from 0 to 256 [ 109.484878][ T1090] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 109.696144][ T1097] FAT-fs (loop1): Directory bread(block 64) failed [ 109.718287][ T1090] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62d793a, utbl_chksum : 0xe619d30d) [ 110.181927][ T1097] FAT-fs (loop1): Directory bread(block 65) failed [ 110.188858][ T1097] FAT-fs (loop1): Directory bread(block 66) failed [ 110.201239][ T1097] FAT-fs (loop1): Directory bread(block 67) failed [ 110.230529][ T1097] FAT-fs (loop1): Directory bread(block 68) failed [ 110.240769][ T1097] FAT-fs (loop1): Directory bread(block 69) failed [ 110.247688][ T1097] FAT-fs (loop1): Directory bread(block 70) failed [ 110.254318][ T1097] FAT-fs (loop1): Directory bread(block 71) failed [ 110.366212][ T1097] FAT-fs (loop1): Directory bread(block 72) failed [ 110.382787][ T1097] FAT-fs (loop1): Directory bread(block 73) failed [ 110.410336][ T1099] tipc: Started in network mode [ 110.415438][ T1099] tipc: Node identity ac14140f, cluster identity 4711 [ 110.422650][ T1099] tipc: New replicast peer: 255.255.255.83 [ 110.428766][ T1099] tipc: Enabled bearer , priority 10 [ 110.450623][ T1097] fuse: Bad value for 'fd' [ 110.476351][ T1102] loop3: detected capacity change from 0 to 512 [ 110.499314][ T1102] EXT4-fs (loop3): Test dummy encryption mode enabled [ 110.514549][ T1102] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 110.515242][ T1108] loop1: detected capacity change from 0 to 128 [ 110.577525][ T1102] EXT4-fs error (device loop3): ext4_orphan_get:1427: comm syz.3.209: bad orphan inode 131083 [ 110.588792][ T1102] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable,noload,,errors=continue. Quota mode: none. [ 110.603441][ T1108] FAT-fs (loop1): Unrecognized mount option "ฎC—‘‘‚9๊:*ตา&Šฐœ" or missing value [ 110.647639][ T1114] netlink: 12 bytes leftover after parsing attributes in process `syz.4.213'. [ 110.664538][ T1114] loop4: detected capacity change from 0 to 512 [ 111.583345][ T685] tipc: Node number set to 2886997007 [ 111.699933][ T1126] loop1: detected capacity change from 0 to 256 [ 111.730442][ T1126] FAT-fs (loop1): Directory bread(block 64) failed [ 111.737162][ T1126] FAT-fs (loop1): Directory bread(block 65) failed [ 111.743994][ T1126] FAT-fs (loop1): Directory bread(block 66) failed [ 111.750645][ T1126] FAT-fs (loop1): Directory bread(block 67) failed [ 111.757473][ T1126] FAT-fs (loop1): Directory bread(block 68) failed [ 111.764136][ T1126] FAT-fs (loop1): Directory bread(block 69) failed [ 111.770950][ T1126] FAT-fs (loop1): Directory bread(block 70) failed [ 111.777574][ T1126] FAT-fs (loop1): Directory bread(block 71) failed [ 111.784408][ T1126] FAT-fs (loop1): Directory bread(block 72) failed [ 111.791057][ T1126] FAT-fs (loop1): Directory bread(block 73) failed [ 112.148605][ T1114] EXT4-fs warning (device loop4): ext4_enable_quotas:6452: Failed to enable quota tracking (type=0, err=-13, ino=3). Please run e2fsck to fix. [ 112.163853][ T1114] EXT4-fs (loop4): mount failed [ 112.213996][ T1134] loop2: detected capacity change from 0 to 16 [ 112.314183][ T1136] xt_bpf: check failed: parse error [ 112.693029][ T1134] erofs: (device loop2): mounted with root inode @ nid 36. [ 112.731005][ T1141] loop4: detected capacity change from 0 to 1024 [ 112.796822][ T1141] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:476: comm syz.4.221: Invalid block bitmap block 0 in block_group 0 [ 112.810640][ T1141] EXT4-fs error (device loop4): ext4_acquire_dquot:6200: comm syz.4.221: Failed to acquire dquot type 0 [ 112.822138][ T1141] EXT4-fs error (device loop4): ext4_free_blocks:6218: comm syz.4.221: Freeing blocks not in datazone - block = 0, count = 4096 [ 112.836595][ T1141] EXT4-fs error (device loop4): ext4_read_inode_bitmap:140: comm syz.4.221: Invalid inode bitmap blk 0 in block_group 0 [ 112.849373][ T424] EXT4-fs error (device loop4): ext4_release_dquot:6236: comm kworker/u4:4: Failed to release dquot type 0 [ 112.860794][ T1141] EXT4-fs error (device loop4) in ext4_free_inode:362: Corrupt filesystem [ 112.861058][ T1141] EXT4-fs (loop4): 1 orphan inode deleted [ 112.875449][ T1141] EXT4-fs (loop4): mounted filesystem without journal. Opts: €; ,errors=continue. Quota mode: writeback. [ 113.052107][ T1159] FAULT_INJECTION: forcing a failure. [ 113.052107][ T1159] name failslab, interval 1, probability 0, space 0, times 0 [ 113.090604][ T1159] CPU: 0 PID: 1159 Comm: syz.1.225 Not tainted syzkaller #0 [ 113.097958][ T1159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 113.108047][ T1159] Call Trace: [ 113.111351][ T1159] [ 113.114323][ T1159] __dump_stack+0x21/0x30 [ 113.118686][ T1159] dump_stack_lvl+0xee/0x150 [ 113.123312][ T1159] ? show_regs_print_info+0x20/0x20 [ 113.128625][ T1159] ? avc_denied+0x1b0/0x1b0 [ 113.133163][ T1159] dump_stack+0x15/0x20 [ 113.137354][ T1159] should_fail+0x3c1/0x510 [ 113.141800][ T1159] __should_failslab+0xa4/0xe0 [ 113.146601][ T1159] should_failslab+0x9/0x20 [ 113.151148][ T1159] slab_pre_alloc_hook+0x3b/0xe0 [ 113.156104][ T1159] __kmalloc+0x6d/0x2c0 [ 113.160274][ T1159] ? kvmalloc_node+0x206/0x300 [ 113.165137][ T1159] kvmalloc_node+0x206/0x300 [ 113.169730][ T1159] ? cap_capable+0x1aa/0x230 [ 113.174331][ T1159] ? vm_mmap+0xb0/0xb0 [ 113.178404][ T1159] xt_alloc_table_info+0x3b/0xa0 [ 113.183353][ T1159] do_ip6t_set_ctl+0x86a/0xcf0 [ 113.188138][ T1159] ? __switch_to+0x51d/0xe20 [ 113.192748][ T1159] ? ip6t_unregister_table_exit+0x220/0x220 [ 113.198643][ T1159] ? compat_start_thread+0x20/0x20 [ 113.203770][ T1159] ? __this_cpu_preempt_check+0x13/0x20 [ 113.209320][ T1159] ? tracing_record_taskinfo_sched_switch+0x80/0x3a0 [ 113.216004][ T1159] ? __kasan_check_write+0x14/0x20 [ 113.221128][ T1159] ? mutex_unlock+0x89/0x220 [ 113.225721][ T1159] ? __mutex_lock_slowpath+0x10/0x10 [ 113.231007][ T1159] ? _raw_spin_lock_bh+0x8e/0xe0 [ 113.235949][ T1159] ? _raw_spin_lock_irq+0xe0/0xe0 [ 113.241003][ T1159] nf_setsockopt+0x272/0x2a0 [ 113.245601][ T1159] ipv6_setsockopt+0x2555/0x38a0 [ 113.250546][ T1159] ? ipv6_update_options+0x410/0x410 [ 113.256095][ T1159] ? 0xffffffffa00288e4 [ 113.260246][ T1159] ? is_bpf_text_address+0x177/0x190 [ 113.265540][ T1159] ? __kernel_text_address+0xa0/0x100 [ 113.270913][ T1159] ? unwind_get_return_address+0x4d/0x90 [ 113.276551][ T1159] ? stack_trace_save+0xe0/0xe0 [ 113.281402][ T1159] ? arch_stack_walk+0xee/0x140 [ 113.286275][ T1159] ? stack_trace_save+0x98/0xe0 [ 113.291136][ T1159] ? __stack_depot_save+0x34/0x480 [ 113.296296][ T1159] ? memcpy+0x56/0x70 [ 113.300294][ T1159] ? avc_has_perm_noaudit+0x2f4/0x460 [ 113.305675][ T1159] ? x64_sys_call+0x219/0x9a0 [ 113.310357][ T1159] ? avc_denied+0x1b0/0x1b0 [ 113.314872][ T1159] ? kstrtouint_from_user+0x1a0/0x200 [ 113.320289][ T1159] ? avc_has_perm+0x158/0x240 [ 113.324971][ T1159] ? avc_has_perm_noaudit+0x460/0x460 [ 113.330352][ T1159] ? proc_fail_nth_write+0x17a/0x1f0 [ 113.335645][ T1159] ? proc_fail_nth_read+0x210/0x210 [ 113.340850][ T1159] ? security_file_permission+0x79/0xa0 [ 113.346408][ T1159] ? selinux_socket_setsockopt+0x21c/0x300 [ 113.352227][ T1159] ? selinux_socket_getsockopt+0x2e0/0x2e0 [ 113.358043][ T1159] ? vfs_write+0xc17/0xf70 [ 113.362465][ T1159] ? __fget_files+0x2c4/0x320 [ 113.367148][ T1159] udpv6_setsockopt+0x92/0xb0 [ 113.371834][ T1159] sock_common_setsockopt+0xa0/0xb0 [ 113.377043][ T1159] ? sock_common_recvmsg+0x1b0/0x1b0 [ 113.382512][ T1159] __sys_setsockopt+0x2f0/0x460 [ 113.387371][ T1159] ? __kasan_check_write+0x14/0x20 [ 113.392509][ T1159] ? __ia32_sys_recv+0xb0/0xb0 [ 113.397283][ T1159] ? ksys_write+0x1eb/0x240 [ 113.401791][ T1159] ? __ia32_sys_read+0x90/0x90 [ 113.406563][ T1159] __x64_sys_setsockopt+0xbf/0xd0 [ 113.411592][ T1159] x64_sys_call+0x982/0x9a0 [ 113.416114][ T1159] do_syscall_64+0x4c/0xa0 [ 113.420537][ T1159] ? clear_bhb_loop+0x50/0xa0 [ 113.425219][ T1159] ? clear_bhb_loop+0x50/0xa0 [ 113.429906][ T1159] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 113.435804][ T1159] RIP: 0033:0x7f4c6d9c7fc9 [ 113.440225][ T1159] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 113.459839][ T1159] RSP: 002b:00007f4c6c3ee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 113.468253][ T1159] RAX: ffffffffffffffda RBX: 00007f4c6dc1f180 RCX: 00007f4c6d9c7fc9 [ 113.476231][ T1159] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 000000000000000a [ 113.484213][ T1159] RBP: 00007f4c6c3ee090 R08: 00000000000003f8 R09: 0000000000000000 [ 113.492195][ T1159] R10: 0000200000000780 R11: 0000000000000246 R12: 0000000000000001 [ 113.500171][ T1159] R13: 00007f4c6dc1f218 R14: 00007f4c6dc1f180 R15: 00007ffcaadfc3b8 [ 113.508156][ T1159] [ 113.581118][ T1163] loop4: detected capacity change from 0 to 256 [ 113.657441][ T1163] FAT-fs (loop4): Directory bread(block 64) failed [ 113.706728][ T1163] FAT-fs (loop4): Directory bread(block 65) failed [ 113.713760][ T1163] FAT-fs (loop4): Directory bread(block 66) failed [ 113.722279][ T1163] FAT-fs (loop4): Directory bread(block 67) failed [ 113.729784][ T1163] FAT-fs (loop4): Directory bread(block 68) failed [ 113.737005][ T1163] FAT-fs (loop4): Directory bread(block 69) failed [ 113.744006][ T1163] FAT-fs (loop4): Directory bread(block 70) failed [ 114.035989][ T1163] FAT-fs (loop4): Directory bread(block 71) failed [ 114.060640][ T1163] FAT-fs (loop4): Directory bread(block 72) failed [ 114.067348][ T1163] FAT-fs (loop4): Directory bread(block 73) failed [ 114.113648][ T1163] FAULT_INJECTION: forcing a failure. [ 114.113648][ T1163] name failslab, interval 1, probability 0, space 0, times 0 [ 114.130703][ T1163] CPU: 1 PID: 1163 Comm: syz.4.228 Not tainted syzkaller #0 [ 114.138056][ T1163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 114.148133][ T1163] Call Trace: [ 114.151429][ T1163] [ 114.154367][ T1163] __dump_stack+0x21/0x30 [ 114.158720][ T1163] dump_stack_lvl+0xee/0x150 [ 114.163327][ T1163] ? show_regs_print_info+0x20/0x20 [ 114.168551][ T1163] dump_stack+0x15/0x20 [ 114.172736][ T1163] should_fail+0x3c1/0x510 [ 114.177180][ T1163] __should_failslab+0xa4/0xe0 [ 114.181969][ T1163] should_failslab+0x9/0x20 [ 114.186493][ T1163] slab_pre_alloc_hook+0x3b/0xe0 [ 114.191451][ T1163] ? __alloc_file+0x28/0x2a0 [ 114.191906][ T1176] loop3: detected capacity change from 0 to 128 [ 114.196065][ T1163] kmem_cache_alloc+0x44/0x260 [ 114.196095][ T1163] __alloc_file+0x28/0x2a0 [ 114.211531][ T1163] alloc_empty_file+0x97/0x180 [ 114.216322][ T1163] path_openat+0xf3/0x2f10 [ 114.220777][ T1163] ? __stack_depot_save+0x34/0x480 [ 114.225919][ T1163] ? __kasan_slab_alloc+0xcf/0xf0 [ 114.230969][ T1163] ? __kasan_slab_alloc+0xbd/0xf0 [ 114.236009][ T1163] ? slab_post_alloc_hook+0x4f/0x2b0 [ 114.241307][ T1163] ? kmem_cache_alloc+0xf7/0x260 [ 114.246255][ T1163] ? getname_flags+0xb9/0x500 [ 114.250938][ T1163] ? getname+0x19/0x20 [ 114.255016][ T1163] ? do_sys_openat2+0xd9/0x7b0 [ 114.259783][ T1163] ? __x64_sys_openat+0x136/0x160 [ 114.264813][ T1163] ? x64_sys_call+0x219/0x9a0 [ 114.269500][ T1163] ? do_syscall_64+0x4c/0xa0 [ 114.274181][ T1163] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 114.280250][ T1163] ? do_filp_open+0x3e0/0x3e0 [ 114.284924][ T1163] ? expand_files+0xde/0x8e0 [ 114.289509][ T1163] do_filp_open+0x1b3/0x3e0 [ 114.294016][ T1163] ? vfs_tmpfile+0x2d0/0x2d0 [ 114.298611][ T1163] do_sys_openat2+0x14c/0x7b0 [ 114.303292][ T1163] ? __kasan_check_write+0x14/0x20 [ 114.308403][ T1163] ? do_sys_open+0xe0/0xe0 [ 114.312827][ T1163] ? fput+0x1a/0x20 [ 114.316641][ T1163] ? ksys_write+0x1eb/0x240 [ 114.321161][ T1163] ? __ia32_sys_read+0x90/0x90 [ 114.325927][ T1163] __x64_sys_openat+0x136/0x160 [ 114.330783][ T1163] x64_sys_call+0x219/0x9a0 [ 114.335293][ T1163] do_syscall_64+0x4c/0xa0 [ 114.339719][ T1163] ? clear_bhb_loop+0x50/0xa0 [ 114.344397][ T1163] ? clear_bhb_loop+0x50/0xa0 [ 114.349073][ T1163] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 114.354970][ T1163] RIP: 0033:0x7f684853ffc9 [ 114.359389][ T1163] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 114.378999][ T1163] RSP: 002b:00007f6846fa8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 114.387421][ T1163] RAX: ffffffffffffffda RBX: 00007f6848796fa0 RCX: 00007f684853ffc9 [ 114.395396][ T1163] RDX: 0000000000141842 RSI: 0000200000000200 RDI: ffffffffffffff9c [ 114.403373][ T1163] RBP: 00007f6846fa8090 R08: 0000000000000000 R09: 0000000000000000 [ 114.411351][ T1163] R10: 0000000000000009 R11: 0000000000000246 R12: 0000000000000001 [ 114.419328][ T1163] R13: 00007f6848797038 R14: 00007f6848796fa0 R15: 00007ffc8940df08 [ 114.427310][ T1163] [ 114.480300][ T1176] FAT-fs (loop3): Unrecognized mount option "ฎC—‘‘‚9๊:*ตา&Šฐœ" or missing value [ 114.524079][ T1183] loop5: detected capacity change from 0 to 256 [ 114.640558][ T30] kauditd_printk_skb: 99 callbacks suppressed [ 114.640580][ T30] audit: type=1400 audit(1760817276.096:526): avc: denied { lock } for pid=1181 comm="syz.4.235" path="socket:[18402]" dev="sockfs" ino=18402 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 114.682437][ T1184] loop4: detected capacity change from 0 to 512 [ 114.758216][ T1190] loop3: detected capacity change from 0 to 256 [ 114.780846][ T1189] loop2: detected capacity change from 0 to 256 [ 114.853703][ T1183] FAT-fs (loop5): Directory bread(block 64) failed [ 114.875610][ T1183] FAT-fs (loop5): Directory bread(block 65) failed [ 114.961882][ T1190] FAT-fs (loop3): Directory bread(block 64) failed [ 114.968593][ T1190] FAT-fs (loop3): Directory bread(block 65) failed [ 114.975657][ T1190] FAT-fs (loop3): Directory bread(block 66) failed [ 114.982640][ T1190] FAT-fs (loop3): Directory bread(block 67) failed [ 114.989438][ T1190] FAT-fs (loop3): Directory bread(block 68) failed [ 114.996314][ T1190] FAT-fs (loop3): Directory bread(block 69) failed [ 115.003441][ T1190] FAT-fs (loop3): Directory bread(block 70) failed [ 115.010117][ T1190] FAT-fs (loop3): Directory bread(block 71) failed [ 115.016957][ T1190] FAT-fs (loop3): Directory bread(block 72) failed [ 115.023606][ T1190] FAT-fs (loop3): Directory bread(block 73) failed [ 115.212193][ T1189] exfat: Unknown parameter 'FฅลแmA‡eษ?˜ิwH~ํƒk|ˆณีคce‰:†aF]ผ$casข%ฅNอ:…{์„ Sึฏ€bP‘ณwั๙?ถภ๙ฺ๑8ผิ0x000000000000000000000000000000000000003' [ 115.394067][ T1184] 9pnet: p9_errstr2errno: server reported unknown error 01777777777777777777777 e_ro, [ 115.416281][ T1183] FAT-fs (loop5): Directory bread(block 66) failed [ 115.425800][ T1183] FAT-fs (loop5): Directory bread(block 67) failed [ 115.450535][ T1183] FAT-fs (loop5): Directory bread(block 68) failed [ 115.490508][ T1183] FAT-fs (loop5): Directory bread(block 69) failed [ 115.517975][ T1183] FAT-fs (loop5): Directory bread(block 70) failed [ 115.527334][ T1180] loop1: detected capacity change from 0 to 40427 [ 115.533962][ T1183] FAT-fs (loop5): Directory bread(block 71) failed [ 115.677094][ T1180] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 115.690539][ T1183] FAT-fs (loop5): Directory bread(block 72) failed [ 115.716892][ T1180] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 115.726105][ T1183] FAT-fs (loop5): Directory bread(block 73) failed [ 115.801211][ T1180] F2FS-fs (loop1): invalid crc value [ 115.812917][ T1196] loop4: detected capacity change from 0 to 1024 [ 115.815710][ T1183] fuse: Bad value for 'fd' [ 115.821221][ T1180] F2FS-fs (loop1): Found nat_bits in checkpoint [ 115.855532][ T1180] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 115.862684][ T1180] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 115.872004][ T1196] EXT4-fs (loop4): Ignoring removed orlov option [ 115.923892][ T1196] EXT4-fs (loop4): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,noload,orlov,,errors=continue. Quota mode: none. [ 115.974708][ T1196] ext4 filesystem being mounted at /49/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 116.009981][ T1202] loop5: detected capacity change from 0 to 8192 [ 116.034040][ T940] loop5: p1 p2[DM] p4 [ 116.038288][ T940] loop5: p1 size 196608 extends beyond EOD, truncated [ 116.055722][ T940] loop5: p2 start 4292936063 is beyond EOD, truncated [ 116.068255][ T940] loop5: p4 size 50331648 extends beyond EOD, truncated [ 116.075923][ T1208] FAULT_INJECTION: forcing a failure. [ 116.075923][ T1208] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 116.100862][ T1208] CPU: 0 PID: 1208 Comm: syz.2.242 Not tainted syzkaller #0 [ 116.108224][ T1208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 116.118301][ T1208] Call Trace: [ 116.121592][ T1208] [ 116.124537][ T1208] __dump_stack+0x21/0x30 [ 116.128881][ T1208] dump_stack_lvl+0xee/0x150 [ 116.133484][ T1208] ? show_regs_print_info+0x20/0x20 [ 116.138697][ T1208] ? hrtimer_start_range_ns+0xac6/0xc00 [ 116.144261][ T1208] dump_stack+0x15/0x20 [ 116.148436][ T1208] should_fail+0x3c1/0x510 [ 116.152863][ T1208] should_fail_usercopy+0x1a/0x20 [ 116.157898][ T1208] copy_fpstate_to_sigframe+0x6d4/0x9a0 [ 116.163464][ T1208] ? fpregs_set+0x540/0x540 [ 116.167973][ T1208] ? get_signal+0x13da/0x1480 [ 116.172661][ T1208] ? fpu__alloc_mathframe+0x88/0x150 [ 116.177955][ T1208] arch_do_signal_or_restart+0x5e3/0x10f0 [ 116.183683][ T1208] ? __fget_files+0x2c4/0x320 [ 116.188369][ T1208] ? get_sigframe_size+0x10/0x10 [ 116.193313][ T1208] ? fput_many+0x15a/0x1a0 [ 116.197737][ T1208] ? vfs_write+0xf70/0xf70 [ 116.202157][ T1208] exit_to_user_mode_loop+0xa7/0xe0 [ 116.207366][ T1208] exit_to_user_mode_prepare+0x87/0xd0 [ 116.212830][ T1208] syscall_exit_to_user_mode+0x1a/0x30 [ 116.218296][ T1208] do_syscall_64+0x58/0xa0 [ 116.222721][ T1208] ? clear_bhb_loop+0x50/0xa0 [ 116.227407][ T1208] ? clear_bhb_loop+0x50/0xa0 [ 116.232088][ T1208] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 116.238002][ T1208] RIP: 0033:0x7f44daffcfc7 [ 116.242418][ T1208] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 [ 116.262029][ T1208] RSP: 002b:00007f44d9a65038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 116.270449][ T1208] RAX: 0000000000000000 RBX: 00007f44db253fa0 RCX: 00007f44daffcfc9 [ 116.278430][ T1208] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 116.286408][ T1208] RBP: 00007f44d9a65090 R08: 0000000000000000 R09: 0000000000000000 [ 116.294381][ T1208] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 116.302360][ T1208] R13: 00007f44db254038 R14: 00007f44db253fa0 R15: 00007ffec7f4f708 [ 116.310455][ T1208] [ 116.373401][ T30] audit: type=1326 audit(1760817277.836:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1201 comm="syz.5.241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10b273afc9 code=0x7ffc0000 [ 116.373919][ T1202] loop5: p1 p2[DM] p4 [ 117.070561][ T30] audit: type=1326 audit(1760817277.836:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1201 comm="syz.5.241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f10b273afc9 code=0x7ffc0000 [ 117.072141][ T1202] loop5: p1 size 196608 extends beyond EOD, truncated [ 117.101282][ T30] audit: type=1326 audit(1760817277.836:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1201 comm="syz.5.241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10b273afc9 code=0x7ffc0000 [ 117.124674][ T30] audit: type=1326 audit(1760817277.836:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1201 comm="syz.5.241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=281 compat=0 ip=0x7f10b273afc9 code=0x7ffc0000 [ 117.125252][ T1202] loop5: p2 start 4292936063 is beyond EOD, [ 117.148371][ T30] audit: type=1326 audit(1760817278.526:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1201 comm="syz.5.241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10b273afc9 code=0x7ffc0000 [ 117.239942][ T1221] loop2: detected capacity change from 0 to 512 [ 117.328944][ T1221] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 117.338824][ T1221] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 117.348831][ T1221] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 117.501460][ T1221] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 117.509577][ T1221] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=e040e01c, mo2=0000] [ 117.517834][ T1221] EXT4-fs (loop2): failed to initialize system zone (-117) [ 117.525306][ T1221] EXT4-fs (loop2): mount failed [ 118.201900][ T1202] truncated [ 118.205078][ T1202] loop5: p4 size 50331648 extends beyond EOD, truncated [ 118.377367][ T30] audit: type=1326 audit(1760817278.526:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1201 comm="syz.5.241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10b273afc9 code=0x7ffc0000 [ 118.509300][ T703] udevd[703]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 118.521528][ T940] udevd[940]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 118.551641][ T1237] loop4: detected capacity change from 0 to 128 [ 118.566251][ T703] udevd[703]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 118.581688][ T940] udevd[940]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 118.604663][ T1237] FAT-fs (loop4): Unrecognized mount option "ฎC—‘‘‚9๊:*ตา&Šฐœ" or missing value [ 118.619876][ T1243] loop2: detected capacity change from 0 to 256 [ 118.665272][ T1241] loop5: detected capacity change from 0 to 512 [ 118.705592][ T1243] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 118.718345][ T1243] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 118.740286][ T1243] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62d793a, utbl_chksum : 0xe619d30d) [ 118.983679][ T1248] tipc: Enabling of bearer rejected, already enabled [ 119.170165][ T1249] loop4: detected capacity change from 0 to 256 [ 119.237410][ T1241] 9pnet: p9_errstr2errno: server reported unknown error 01777777777777777777777 e_ro, [ 119.271850][ T1249] FAT-fs (loop4): Directory bread(block 64) failed [ 119.278568][ T1249] FAT-fs (loop4): Directory bread(block 65) failed [ 119.285513][ T1249] FAT-fs (loop4): Directory bread(block 66) failed [ 119.292219][ T1249] FAT-fs (loop4): Directory bread(block 67) failed [ 119.299043][ T1249] FAT-fs (loop4): Directory bread(block 68) failed [ 119.305704][ T1249] FAT-fs (loop4): Directory bread(block 69) failed [ 119.312550][ T1249] FAT-fs (loop4): Directory bread(block 70) failed [ 119.319274][ T1249] FAT-fs (loop4): Directory bread(block 71) failed [ 119.326169][ T1249] FAT-fs (loop4): Directory bread(block 72) failed [ 119.332853][ T1249] FAT-fs (loop4): Directory bread(block 73) failed [ 119.773000][ T1254] loop1: detected capacity change from 0 to 256 [ 119.868841][ T1255] loop2: detected capacity change from 0 to 256 [ 122.293300][ T1255] exfat: Unknown parameter '' [ 122.349972][ T1253] netlink: 20 bytes leftover after parsing attributes in process `syz.2.253'. [ 122.358985][ T1253] netlink: 20 bytes leftover after parsing attributes in process `syz.2.253'. [ 122.379014][ T1254] FAT-fs (loop1): Directory bread(block 64) failed [ 122.394848][ T30] audit: type=1326 audit(1760817283.856:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1259 comm="syz.5.257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10b273afc9 code=0x7ffc0000 [ 122.414633][ T1254] FAT-fs (loop1): Directory bread(block 65) failed [ 122.425168][ T1254] FAT-fs (loop1): Directory bread(block 66) failed [ 122.432481][ T1254] FAT-fs (loop1): Directory bread(block 67) failed [ 122.448944][ T1254] FAT-fs (loop1): Directory bread(block 68) failed [ 122.456809][ T1254] FAT-fs (loop1): Directory bread(block 69) failed [ 122.464012][ T1254] FAT-fs (loop1): Directory bread(block 70) failed [ 122.466541][ T30] audit: type=1326 audit(1760817283.886:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1259 comm="syz.5.257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10b273afc9 code=0x7ffc0000 [ 122.470904][ T1254] FAT-fs (loop1): Directory bread(block 71) failed [ 122.505345][ T30] audit: type=1326 audit(1760817283.886:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1259 comm="syz.5.257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=132 compat=0 ip=0x7f10b273afc9 code=0x7ffc0000 [ 122.535439][ T30] audit: type=1326 audit(1760817283.886:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1259 comm="syz.5.257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10b273afc9 code=0x7ffc0000 [ 122.563409][ T30] audit: type=1326 audit(1760817283.886:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1259 comm="syz.5.257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10b273afc9 code=0x7ffc0000 [ 122.587231][ T30] audit: type=1326 audit(1760817283.886:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1259 comm="syz.5.257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f10b273afc9 code=0x7ffc0000 [ 122.590708][ T1254] FAT-fs (loop1): Directory bread(block 72) failed [ 122.611278][ T30] audit: type=1326 audit(1760817283.886:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1259 comm="syz.5.257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10b273afc9 code=0x7ffc0000 [ 122.642644][ T1254] FAT-fs (loop1): Directory bread(block 73) failed [ 122.650147][ T30] audit: type=1326 audit(1760817283.886:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1259 comm="syz.5.257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10b273afc9 code=0x7ffc0000 [ 122.674073][ T30] audit: type=1326 audit(1760817283.886:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1259 comm="syz.5.257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f10b273afc9 code=0x7ffc0000 [ 122.698913][ T30] audit: type=1326 audit(1760817283.886:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1259 comm="syz.5.257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10b273afc9 code=0x7ffc0000 [ 122.878324][ T1275] loop3: detected capacity change from 0 to 512 [ 122.904618][ T1273] loop2: detected capacity change from 0 to 512 [ 122.995876][ T1275] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 123.005907][ T1275] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 123.015725][ T1275] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 123.183800][ T1275] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 123.191869][ T1275] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=e040e01c, mo2=0000] [ 123.200133][ T1275] EXT4-fs (loop3): failed to initialize system zone (-117) [ 123.207576][ T1275] EXT4-fs (loop3): mount failed [ 123.331115][ T1274] loop5: detected capacity change from 0 to 512 [ 123.512250][ T1273] 9pnet: p9_errstr2errno: server reported unknown error 01777777777777777777777 e_ro, [ 124.135719][ T1271] 9pnet: p9_errstr2errno: server reported unknown error 01777777777777777777777 e_ro, [ 124.184105][ T1272] loop3: detected capacity change from 0 to 512 [ 124.331790][ T1289] loop4: detected capacity change from 0 to 512 [ 124.736155][ T1297] loop2: detected capacity change from 0 to 512 [ 124.748861][ T1272] EXT4-fs error (device loop3): ext4_do_update_inode:5235: inode #16: comm syz.3.260: corrupted inode contents [ 124.753276][ T1303] loop5: detected capacity change from 0 to 128 [ 124.761441][ T1272] EXT4-fs error (device loop3): ext4_dirty_inode:6071: inode #16: comm syz.3.260: mark_inode_dirty error [ 124.778910][ T1272] EXT4-fs error (device loop3): ext4_do_update_inode:5235: inode #16: comm syz.3.260: corrupted inode contents [ 124.779878][ T1289] EXT4-fs error (device loop4): ext4_ext_check_inode:501: inode #4: comm syz.4.265: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 4095(4095) [ 124.810474][ T1272] EXT4-fs error (device loop3): __ext4_ext_dirty:183: inode #16: comm syz.3.260: mark_inode_dirty error [ 124.810815][ T1289] EXT4-fs error (device loop4): ext4_quota_enable:6411: comm syz.4.265: Bad quota inode: 4, type: 1 [ 124.830939][ T1303] FAT-fs (loop5): Unrecognized mount option "ฎC—‘‘‚9๊:*ตา&Šฐœ" or missing value [ 124.842403][ T1272] EXT4-fs error (device loop3): ext4_do_update_inode:5235: inode #16: comm syz.3.260: corrupted inode contents [ 124.842405][ T1289] EXT4-fs warning (device loop4): ext4_enable_quotas:6452: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 124.843047][ T1289] EXT4-fs (loop4): mount failed [ 124.854773][ T1272] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 124.883047][ T1272] EXT4-fs error (device loop3): ext4_do_update_inode:5235: inode #16: comm syz.3.260: corrupted inode contents [ 124.896084][ T1272] EXT4-fs error (device loop3): ext4_truncate:4304: inode #16: comm syz.3.260: mark_inode_dirty error [ 124.907678][ T1272] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 124.908589][ T1297] EXT4-fs error (device loop2): ext4_ext_check_inode:501: inode #4: comm syz.2.266: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 4095(4095) [ 124.917571][ T1272] EXT4-fs (loop3): 1 truncate cleaned up [ 124.936983][ T1297] EXT4-fs error (device loop2): ext4_quota_enable:6411: comm syz.2.266: Bad quota inode: 4, type: 1 [ 124.940838][ T1272] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 124.952306][ T1297] EXT4-fs warning (device loop2): ext4_enable_quotas:6452: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 124.977707][ T1297] EXT4-fs (loop2): mount failed [ 124.982815][ T1272] ext4 filesystem being mounted at /53/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 125.561409][ T1307] loop5: detected capacity change from 0 to 256 [ 126.272761][ T1307] FAT-fs (loop5): Directory bread(block 64) failed [ 126.279675][ T1307] FAT-fs (loop5): Directory bread(block 65) failed [ 126.286501][ T1307] FAT-fs (loop5): Directory bread(block 66) failed [ 126.293172][ T1307] FAT-fs (loop5): Directory bread(block 67) failed [ 126.299994][ T1307] FAT-fs (loop5): Directory bread(block 68) failed [ 126.306653][ T1307] FAT-fs (loop5): Directory bread(block 69) failed [ 126.313439][ T1307] FAT-fs (loop5): Directory bread(block 70) failed [ 126.320064][ T1307] FAT-fs (loop5): Directory bread(block 71) failed [ 126.326840][ T1307] FAT-fs (loop5): Directory bread(block 72) failed [ 126.333482][ T1307] FAT-fs (loop5): Directory bread(block 73) failed [ 126.688123][ T1318] loop1: detected capacity change from 0 to 512 [ 127.800997][ T1318] EXT4-fs error (device loop1): ext4_orphan_get:1401: inode #15: comm syz.1.268: casefold flag without casefold feature [ 127.894532][ T1318] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.268: couldn't read orphan inode 15 (err -117) [ 128.003274][ T1318] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 128.076069][ T30] kauditd_printk_skb: 37 callbacks suppressed [ 128.076083][ T30] audit: type=1400 audit(1760817289.536:580): avc: denied { mounton } for pid=1314 comm="syz.1.268" path="/57/file0/file0" dev="loop1" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 128.118662][ T1334] loop2: detected capacity change from 0 to 512 [ 128.155565][ T30] audit: type=1400 audit(1760817289.536:581): avc: denied { write } for pid=1314 comm="syz.1.268" name="file0" dev="loop1" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 128.232111][ T30] audit: type=1400 audit(1760817289.536:582): avc: denied { add_name } for pid=1314 comm="syz.1.268" name="work" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 128.264791][ T1334] 9pnet: p9_errstr2errno: server reported unknown error 01777777777777777777777 e_ro, [ 128.282842][ T30] audit: type=1400 audit(1760817289.536:583): avc: denied { setattr } for pid=1314 comm="syz.1.268" name="work" dev="loop1" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 128.352710][ T30] audit: type=1400 audit(1760817289.536:584): avc: denied { remove_name } for pid=1314 comm="syz.1.268" name="#11" dev="loop1" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 128.442856][ T30] audit: type=1400 audit(1760817289.536:585): avc: denied { rename } for pid=1314 comm="syz.1.268" name="#11" dev="loop1" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 128.485072][ T30] audit: type=1400 audit(1760817289.536:586): avc: denied { unlink } for pid=1314 comm="syz.1.268" name="#11" dev="loop1" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 128.538258][ T30] audit: type=1400 audit(1760817289.536:587): avc: denied { unlink } for pid=1314 comm="syz.1.268" name="#12" dev="loop1" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 128.613243][ T30] audit: type=1400 audit(1760817289.776:588): avc: denied { reparent } for pid=1314 comm="syz.1.268" name="#13" dev="loop1" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 129.376026][ T1348] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.385278][ T1348] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.470097][ T1355] loop5: detected capacity change from 0 to 512 [ 129.488192][ T1348] device bridge_slave_0 entered promiscuous mode [ 129.499443][ T1348] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.507256][ T1348] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.515025][ T1348] device bridge_slave_1 entered promiscuous mode [ 129.603763][ T1355] EXT4-fs error (device loop5): ext4_ext_check_inode:501: inode #4: comm syz.5.280: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 4095(4095) [ 129.623474][ T1355] EXT4-fs error (device loop5): ext4_quota_enable:6411: comm syz.5.280: Bad quota inode: 4, type: 1 [ 129.635092][ T1355] EXT4-fs warning (device loop5): ext4_enable_quotas:6452: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 129.650316][ T1355] EXT4-fs (loop5): mount failed [ 129.657079][ T1358] netlink: 4 bytes leftover after parsing attributes in process `syz.2.281'. [ 129.679137][ T1361] netlink: 12 bytes leftover after parsing attributes in process `syz.2.281'. [ 129.742073][ T1358] netlink: 24 bytes leftover after parsing attributes in process `syz.2.281'. [ 129.925138][ T1348] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.932278][ T1348] bridge0: port 2(bridge_slave_1) entered forwarding state [ 129.939589][ T1348] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.946676][ T1348] bridge0: port 1(bridge_slave_0) entered forwarding state [ 130.042559][ T649] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.059941][ T649] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.086259][ T649] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 130.100355][ T649] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 130.116311][ T649] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 130.134262][ T649] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 130.151691][ T649] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.158825][ T649] bridge0: port 1(bridge_slave_0) entered forwarding state [ 130.189818][ T649] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 130.210332][ T649] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 130.219208][ T649] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.226301][ T649] bridge0: port 2(bridge_slave_1) entered forwarding state [ 130.257858][ T649] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 130.266454][ T649] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 130.276609][ T649] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 130.285234][ T649] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 130.317673][ T30] audit: type=1400 audit(1760817291.776:589): avc: denied { connect } for pid=1373 comm="syz.5.284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 130.348590][ T649] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 130.359630][ T1380] fuse: blksize only supported for fuseblk [ 130.366355][ T10] Bluetooth: hci0: Frame reassembly failed (-84) [ 130.366620][ T649] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 130.390899][ T1379] netlink: 28 bytes leftover after parsing attributes in process `syz.4.285'. [ 130.404428][ T1348] device veth0_vlan entered promiscuous mode [ 130.413806][ T1379] serio: Serial port ptm1 [ 130.423850][ T649] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 130.432491][ T649] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 130.454270][ T649] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 130.474838][ T649] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 130.485079][ T649] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 130.494158][ T649] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 130.503355][ T1348] device veth1_macvtap entered promiscuous mode [ 130.517617][ T649] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 130.525893][ T649] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 130.534989][ T649] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 130.557000][ T649] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 130.573372][ T649] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 130.628198][ T1385] loop2: detected capacity change from 0 to 7 [ 130.721781][ T45] device bridge_slave_1 left promiscuous mode [ 130.729191][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.741076][ T45] device bridge_slave_0 left promiscuous mode [ 130.750590][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.763468][ T45] device veth1_macvtap left promiscuous mode [ 130.771818][ T45] device veth0_vlan left promiscuous mode [ 130.910433][ T26] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 130.928579][ T1387] netlink: 28 bytes leftover after parsing attributes in process `syz.2.287'. [ 130.939566][ T1387] serio: Serial port ptm2 [ 131.053641][ T1392] netlink: 'syz.3.289': attribute type 4 has an invalid length. [ 131.300479][ T26] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 131.311490][ T26] usb 7-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 131.320650][ T26] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.329591][ T26] usb 7-1: config 0 descriptor?? [ 131.420195][ T1398] fuse: blksize only supported for fuseblk [ 131.439597][ T1385] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 132.001327][ T26] hid-generic 0003:04F3:0755.0001: unknown main item tag 0x0 [ 132.011244][ T26] hid-generic 0003:04F3:0755.0001: unknown main item tag 0x0 [ 132.018922][ T26] hid-generic 0003:04F3:0755.0001: unknown main item tag 0x0 [ 132.028064][ T26] hid-generic 0003:04F3:0755.0001: unknown main item tag 0x0 [ 132.036760][ T26] hid-generic 0003:04F3:0755.0001: unknown main item tag 0x0 [ 132.273574][ T26] hid-generic 0003:04F3:0755.0001: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.6-1/input0 [ 132.957622][ T26] usb 7-1: USB disconnect, device number 2 [ 133.144142][ T336] Bluetooth: hci0: command 0x1003 tx timeout [ 133.152810][ T1376] Bluetooth: hci0: sending frame failed (-49) [ 133.174486][ T1408] fido_id[1408]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 133.230306][ T1412] loop2: detected capacity change from 0 to 512 [ 133.258525][ T1413] loop3: detected capacity change from 0 to 512 [ 133.281637][ T1412] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 133.296623][ T1412] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 133.319893][ T1412] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 133.331375][ T1413] EXT4-fs error (device loop3): ext4_ext_check_inode:501: inode #4: comm syz.3.294: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 4095(4095) [ 133.350186][ T1413] EXT4-fs error (device loop3): ext4_quota_enable:6411: comm syz.3.294: Bad quota inode: 4, type: 1 [ 133.361498][ T1413] EXT4-fs warning (device loop3): ext4_enable_quotas:6452: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 133.376643][ T1413] EXT4-fs (loop3): mount failed [ 133.406011][ T1412] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 133.440158][ T1412] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=e040e01c, mo2=0000] [ 133.468496][ T1412] EXT4-fs (loop2): failed to initialize system zone (-117) [ 133.478566][ T1412] EXT4-fs (loop2): mount failed [ 133.613448][ T1421] netlink: 16 bytes leftover after parsing attributes in process `syz.6.296'. [ 133.856546][ T1423] loop6: detected capacity change from 0 to 40427 [ 133.971670][ T1423] F2FS-fs (loop6): Invalid SB checksum offset: 0 [ 133.978254][ T1423] F2FS-fs (loop6): Can't find valid F2FS filesystem in 2th superblock [ 133.995286][ T1428] loop3: detected capacity change from 0 to 16 [ 134.010754][ T1423] F2FS-fs (loop6): invalid crc value [ 134.150598][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 134.150651][ T30] audit: type=1400 audit(1760817295.546:591): avc: denied { ioctl } for pid=1424 comm="syz.2.298" path="socket:[19449]" dev="sockfs" ino=19449 ioctlcmd=0x745a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 134.185761][ T1428] erofs: (device loop3): mounted with root inode @ nid 36. [ 134.293590][ T1423] F2FS-fs (loop6): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 134.354432][ T1423] F2FS-fs (loop6): Try to recover 2th superblock, ret: 0 [ 134.362726][ T1423] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 134.898310][ T1441] loop2: detected capacity change from 0 to 512 [ 134.952983][ T1441] 9pnet: p9_errstr2errno: server reported unknown error 01777777777777777777777 e_ro, [ 135.003507][ T1447] loop3: detected capacity change from 0 to 128 [ 135.050073][ T1447] FAT-fs (loop3): Unrecognized mount option "ฎC—‘‘‚9๊:*ตา&Šฐœ" or missing value [ 135.157289][ T26] Bluetooth: hci0: command 0x1001 tx timeout [ 135.163775][ T1376] Bluetooth: hci0: sending frame failed (-49) [ 135.275736][ T1463] FAULT_INJECTION: forcing a failure. [ 135.275736][ T1463] name failslab, interval 1, probability 0, space 0, times 0 [ 135.288491][ T1463] CPU: 1 PID: 1463 Comm: syz.2.307 Not tainted syzkaller #0 [ 135.295806][ T1463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 135.305875][ T1463] Call Trace: [ 135.309167][ T1463] [ 135.312109][ T1463] __dump_stack+0x21/0x30 [ 135.316483][ T1463] dump_stack_lvl+0xee/0x150 [ 135.321087][ T1463] ? show_regs_print_info+0x20/0x20 [ 135.326297][ T1463] ? avc_has_perm_noaudit+0x460/0x460 [ 135.331698][ T1463] dump_stack+0x15/0x20 [ 135.335877][ T1463] should_fail+0x3c1/0x510 [ 135.340311][ T1463] __should_failslab+0xa4/0xe0 [ 135.345088][ T1463] should_failslab+0x9/0x20 [ 135.349612][ T1463] slab_pre_alloc_hook+0x3b/0xe0 [ 135.354566][ T1463] kmem_cache_alloc_trace+0x48/0x270 [ 135.359865][ T1463] ? proc_thread_self_get_link+0x100/0x1a0 [ 135.365697][ T1463] proc_thread_self_get_link+0x100/0x1a0 [ 135.371350][ T1463] ? proc_setup_thread_self+0x310/0x310 [ 135.376928][ T1463] pick_link+0x717/0xe00 [ 135.381194][ T1463] step_into+0xaec/0xd10 [ 135.385453][ T1463] ? lookup_fast+0x29a/0x700 [ 135.390057][ T1463] ? asm_sysvec_reschedule_ipi+0x1b/0x20 [ 135.395706][ T1463] ? set_root+0x400/0x400 [ 135.400054][ T1463] ? walk_component+0x58/0x460 [ 135.404832][ T1463] walk_component+0x26a/0x460 [ 135.409610][ T1463] link_path_walk+0x662/0xd40 [ 135.414321][ T1463] ? handle_lookup_down+0x130/0x130 [ 135.419538][ T1463] path_openat+0x283/0x2f10 [ 135.424051][ T1463] ? __kasan_check_write+0x14/0x20 [ 135.429170][ T1463] ? update_rt_migration+0x3a0/0x3a0 [ 135.434459][ T1463] ? update_rt_migration+0x3a0/0x3a0 [ 135.439754][ T1463] ? do_filp_open+0x3e0/0x3e0 [ 135.444438][ T1463] ? release_firmware_map_entry+0x190/0x190 [ 135.450338][ T1463] ? expand_files+0xde/0x8e0 [ 135.454933][ T1463] do_filp_open+0x1b3/0x3e0 [ 135.459441][ T1463] ? vfs_tmpfile+0x2d0/0x2d0 [ 135.464046][ T1463] do_sys_openat2+0x14c/0x7b0 [ 135.468729][ T1463] ? do_sys_open+0xe0/0xe0 [ 135.473148][ T1463] ? release_firmware_map_entry+0x190/0x190 [ 135.479191][ T1463] __x64_sys_openat+0x136/0x160 [ 135.484068][ T1463] x64_sys_call+0x219/0x9a0 [ 135.488593][ T1463] do_syscall_64+0x4c/0xa0 [ 135.493026][ T1463] ? clear_bhb_loop+0x50/0xa0 [ 135.497710][ T1463] ? clear_bhb_loop+0x50/0xa0 [ 135.502389][ T1463] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 135.508308][ T1463] RIP: 0033:0x7f44daffb810 [ 135.512727][ T1463] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 69 95 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 bc 95 02 00 8b 44 [ 135.532354][ T1463] RSP: 002b:00007f44d9a22f10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 135.541686][ T1463] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f44daffb810 [ 135.549673][ T1463] RDX: 0000000000000002 RSI: 00007f44d9a22fa0 RDI: 00000000ffffff9c [ 135.557655][ T1463] RBP: 00007f44d9a22fa0 R08: 0000000000000000 R09: 0000000000000000 [ 135.565633][ T1463] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 135.573631][ T1463] R13: 00007f44db254218 R14: 00007f44db254180 R15: 00007ffec7f4f708 [ 135.581617][ T1463] [ 135.735041][ T1467] loop3: detected capacity change from 0 to 256 [ 135.791042][ T1467] FAT-fs (loop3): Directory bread(block 64) failed [ 135.797765][ T1467] FAT-fs (loop3): Directory bread(block 65) failed [ 135.804665][ T1467] FAT-fs (loop3): Directory bread(block 66) failed [ 135.811329][ T1467] FAT-fs (loop3): Directory bread(block 67) failed [ 135.818076][ T1467] FAT-fs (loop3): Directory bread(block 68) failed [ 135.824726][ T1467] FAT-fs (loop3): Directory bread(block 69) failed [ 135.831404][ T1467] FAT-fs (loop3): Directory bread(block 70) failed [ 135.838095][ T1467] FAT-fs (loop3): Directory bread(block 71) failed [ 135.844875][ T1467] FAT-fs (loop3): Directory bread(block 72) failed [ 135.851563][ T1467] FAT-fs (loop3): Directory bread(block 73) failed [ 136.832240][ T1471] fuse: Bad value for 'fd' [ 136.862979][ T30] audit: type=1400 audit(1760818066.410:592): avc: denied { ioctl } for pid=1470 comm="syz.2.311" path="socket:[20573]" dev="sockfs" ino=20573 ioctlcmd=0xf503 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 136.950312][ T1481] loop3: detected capacity change from 0 to 16 [ 136.964057][ T1481] erofs: (device loop3): mounted with root inode @ nid 36. [ 137.092662][ T1483] FAULT_INJECTION: forcing a failure. [ 137.092662][ T1483] name failslab, interval 1, probability 0, space 0, times 0 [ 137.105375][ T1483] CPU: 0 PID: 1483 Comm: syz.4.312 Not tainted syzkaller #0 [ 137.112686][ T1483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 137.122753][ T1483] Call Trace: [ 137.126053][ T1483] [ 137.129012][ T1483] __dump_stack+0x21/0x30 [ 137.133357][ T1483] dump_stack_lvl+0xee/0x150 [ 137.137967][ T1483] ? show_regs_print_info+0x20/0x20 [ 137.143188][ T1483] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 137.149290][ T1483] dump_stack+0x15/0x20 [ 137.153463][ T1483] should_fail+0x3c1/0x510 [ 137.157896][ T1483] __should_failslab+0xa4/0xe0 [ 137.162675][ T1483] should_failslab+0x9/0x20 [ 137.167198][ T1483] slab_pre_alloc_hook+0x3b/0xe0 [ 137.172154][ T1483] kmem_cache_alloc_trace+0x48/0x270 [ 137.177459][ T1483] ? selinux_sk_alloc_security+0x7e/0x1a0 [ 137.183310][ T1483] selinux_sk_alloc_security+0x7e/0x1a0 [ 137.188874][ T1483] security_sk_alloc+0x72/0xa0 [ 137.193649][ T1483] sk_prot_alloc+0x108/0x320 [ 137.198256][ T1483] sk_alloc+0x38/0x430 [ 137.202345][ T1483] l2cap_sock_alloc+0x39/0x200 [ 137.207120][ T1483] l2cap_sock_create+0x12b/0x590 [ 137.212170][ T1483] bt_sock_create+0x165/0x240 [ 137.216860][ T1483] __sock_create+0x38d/0x7a0 [ 137.221466][ T1483] sock_create_kern+0x3b/0x50 [ 137.222472][ T557] Bluetooth: hci0: command 0x1009 tx timeout [ 137.226146][ T1483] rfcomm_dlc_open+0x31f/0x1520 [ 137.236985][ T1483] ? __kasan_check_write+0x14/0x20 [ 137.242097][ T1483] ? _raw_spin_lock_bh+0x8e/0xe0 [ 137.247059][ T1483] ? rfcomm_dlc_free+0x30/0x30 [ 137.251819][ T1483] ? __local_bh_enable_ip+0x58/0x80 [ 137.257026][ T1483] ? _raw_spin_unlock_bh+0x51/0x60 [ 137.262139][ T1483] ? __kasan_check_write+0x14/0x20 [ 137.267252][ T1483] ? _raw_spin_lock_bh+0x8e/0xe0 [ 137.272184][ T1483] ? _raw_spin_lock_irq+0xe0/0xe0 [ 137.277207][ T1483] ? vfs_write+0xc17/0xf70 [ 137.281616][ T1483] ? __local_bh_enable_ip+0x58/0x80 [ 137.286812][ T1483] ? release_sock+0x15b/0x1b0 [ 137.291486][ T1483] rfcomm_sock_connect+0x2fb/0x5f0 [ 137.296599][ T1483] ? rfcomm_sock_bind+0x510/0x510 [ 137.301624][ T1483] __sys_connect+0x389/0x410 [ 137.306212][ T1483] ? __sys_connect_file+0x170/0x170 [ 137.311410][ T1483] ? debug_smp_processor_id+0x17/0x20 [ 137.316776][ T1483] __x64_sys_connect+0x7a/0x90 [ 137.321540][ T1483] x64_sys_call+0x7c/0x9a0 [ 137.325948][ T1483] do_syscall_64+0x4c/0xa0 [ 137.330380][ T1483] ? clear_bhb_loop+0x50/0xa0 [ 137.335050][ T1483] ? clear_bhb_loop+0x50/0xa0 [ 137.339741][ T1483] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 137.345641][ T1483] RIP: 0033:0x7f684853ffc9 [ 137.350093][ T1483] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 137.369716][ T1483] RSP: 002b:00007f6846f87038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 137.378217][ T1483] RAX: ffffffffffffffda RBX: 00007f6848797090 RCX: 00007f684853ffc9 [ 137.386197][ T1483] RDX: 000000000000000a RSI: 0000200000000080 RDI: 0000000000000004 [ 137.394183][ T1483] RBP: 00007f6846f87090 R08: 0000000000000000 R09: 0000000000000000 [ 137.402176][ T1483] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 137.410162][ T1483] R13: 00007f6848797128 R14: 00007f6848797090 R15: 00007ffc8940df08 [ 137.418138][ T1483] [ 137.766559][ T30] audit: type=1400 audit(1760818067.365:593): avc: denied { read } for pid=1484 comm="syz.4.317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 138.297646][ T1502] loop6: detected capacity change from 0 to 128 [ 138.331534][ T1502] FAT-fs (loop6): Unrecognized mount option "ฎC—‘‘‚9๊:*ตา&Šฐœ" or missing value [ 138.603228][ T1513] loop6: detected capacity change from 0 to 256 [ 139.733235][ T1513] FAT-fs (loop6): Directory bread(block 64) failed [ 139.740059][ T1513] FAT-fs (loop6): Directory bread(block 65) failed [ 139.746966][ T1513] FAT-fs (loop6): Directory bread(block 66) failed [ 139.753620][ T1513] FAT-fs (loop6): Directory bread(block 67) failed [ 139.760447][ T1513] FAT-fs (loop6): Directory bread(block 68) failed [ 139.767110][ T1513] FAT-fs (loop6): Directory bread(block 69) failed [ 139.773982][ T1513] FAT-fs (loop6): Directory bread(block 70) failed [ 139.780604][ T1513] FAT-fs (loop6): Directory bread(block 71) failed [ 139.787348][ T1513] FAT-fs (loop6): Directory bread(block 72) failed [ 139.793988][ T1513] FAT-fs (loop6): Directory bread(block 73) failed [ 140.171740][ T1516] netlink: 'syz.4.324': attribute type 4 has an invalid length. [ 141.066787][ T1525] netlink: 40 bytes leftover after parsing attributes in process `syz.4.327'. [ 141.761625][ T1538] loop5: detected capacity change from 0 to 16 [ 141.805402][ T1538] erofs: (device loop5): mounted with root inode @ nid 36. [ 141.850364][ T1540] loop3: detected capacity change from 0 to 512 [ 141.875865][ T1540] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 141.895962][ T1540] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 141.906403][ T1540] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 141.920480][ T1540] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 141.935649][ T1540] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=e040e01c, mo2=0000] [ 141.950875][ T1540] EXT4-fs (loop3): failed to initialize system zone (-117) [ 141.959048][ T1540] EXT4-fs (loop3): mount failed [ 142.027380][ T1550] netlink: 8 bytes leftover after parsing attributes in process `syz.3.335'. [ 142.040850][ T1550] serio: Serial port ptm0 [ 142.200062][ T1527] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 142.428684][ T1527] usb 5-1: Using ep0 maxpacket: 32 [ 142.552580][ T1527] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 142.563758][ T1527] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 142.574132][ T1527] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 142.583409][ T1527] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.592847][ T1527] usb 5-1: config 0 descriptor?? [ 142.629729][ T1527] hub 5-1:0.0: USB hub found [ 142.776052][ T1559] loop5: detected capacity change from 0 to 512 [ 142.858383][ T1566] loop3: detected capacity change from 0 to 128 [ 142.867209][ T1527] hub 5-1:0.0: 1 port detected [ 142.924839][ T1559] 9pnet: p9_errstr2errno: server reported unknown error 01777777777777777777777 e_ro, [ 142.936300][ T1566] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 142.957113][ T1566] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 143.078384][ T649] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 143.423278][ T1592] kvm [1582]: vcpu0, guest rIP: 0xfff0 unimplemented HWCR wrmsr: 0xfffffeb7 [ 143.428270][ T1590] loop6: detected capacity change from 0 to 512 [ 143.515063][ T1527] hub 5-1:0.0: activate --> -90 [ 143.569963][ T1600] loop2: detected capacity change from 0 to 128 [ 143.658461][ T1600] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 143.689944][ T1600] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 143.867015][ T649] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 144.000374][ T1605] loop2: detected capacity change from 0 to 512 [ 144.024456][ T1605] 9pnet: p9_errstr2errno: server reported unknown error 01777777777777777777777 e_ro, [ 144.187329][ T1613] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1613 comm=syz.3.355 [ 144.202121][ T1613] loop3: detected capacity change from 0 to 16 [ 144.233286][ T30] audit: type=1400 audit(1760818074.148:594): avc: denied { mounton } for pid=1611 comm="syz.3.355" path="/syzcgroup/cpu/syz3/cpuset.cpus" dev="cgroup" ino=113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 144.233320][ T1613] erofs: Unknown parameter 'ฌ ' [ 144.558341][ T30] audit: type=1326 audit(1760818074.494:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1625 comm="syz.3.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9cc7c0fc9 code=0x7ffc0000 [ 144.842423][ T30] audit: type=1326 audit(1760818074.526:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1625 comm="syz.3.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=63 compat=0 ip=0x7fc9cc7c0fc9 code=0x7ffc0000 [ 144.867386][ T1527] usb 5-1-port1: config error [ 144.930089][ T30] audit: type=1326 audit(1760818074.526:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1625 comm="syz.3.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9cc7c0fc9 code=0x7ffc0000 [ 144.995345][ T1629] netlink: 20 bytes leftover after parsing attributes in process `syz.3.360'. [ 145.169835][ T507] usb 5-1: USB disconnect, device number 3 [ 145.178119][ T1527] usb 5-1-port1: attempt power cycle [ 145.188638][ T30] audit: type=1326 audit(1760818074.526:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1625 comm="syz.3.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fc9cc7c0fc9 code=0x7ffc0000 [ 145.217332][ T30] audit: type=1326 audit(1760818074.526:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1625 comm="syz.3.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9cc7c0fc9 code=0x7ffc0000 [ 145.280250][ T1636] netlink: 'syz.4.363': attribute type 4 has an invalid length. [ 145.290115][ T30] audit: type=1326 audit(1760818074.526:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1625 comm="syz.3.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fc9cc7c0fc9 code=0x7ffc0000 [ 145.403489][ T30] audit: type=1326 audit(1760818074.526:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1625 comm="syz.3.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9cc7c0fc9 code=0x7ffc0000 [ 145.442216][ T30] audit: type=1326 audit(1760818074.526:602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1625 comm="syz.3.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9cc7c0fc9 code=0x7ffc0000 [ 145.465873][ T1651] loop5: detected capacity change from 0 to 512 [ 145.482771][ T1650] tipc: Enabling of bearer rejected, failed to enable media [ 145.522208][ T30] audit: type=1326 audit(1760818074.526:603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1625 comm="syz.3.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc9cc7c0fc9 code=0x7ffc0000 [ 145.605646][ T1642] 9pnet: p9_errstr2errno: server reported unknown error 01777777777777777777777 e_ro, [ 145.617456][ T1644] loop2: detected capacity change from 0 to 4096 [ 145.703776][ T1656] loop6: detected capacity change from 0 to 512 [ 145.739979][ T1644] EXT4-fs (loop2): Test dummy encryption mode enabled [ 145.756805][ T1656] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 145.766711][ T1656] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 145.776514][ T1656] EXT4-fs (loop6): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 145.928766][ T1656] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 145.936941][ T1656] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=e040e01c, mo2=0000] [ 145.945276][ T1656] EXT4-fs (loop6): failed to initialize system zone (-117) [ 145.952695][ T1656] EXT4-fs (loop6): mount failed [ 145.958107][ T507] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 146.008877][ T1644] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 146.140871][ T1644] System zones: 0-5 [ 146.217746][ T1644] EXT4-fs (loop2): mounted filesystem without journal. Opts: debug,delalloc,journal_ioprio=0x0000000000000000,test_dummy_encryption,nodiscard,min_batch_time=0x0000000000000004,acl,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 146.276775][ T507] usb 5-1: Using ep0 maxpacket: 16 [ 146.420048][ T507] usb 5-1: config 223 has too many interfaces: 142, using maximum allowed: 32 [ 146.486458][ T507] usb 5-1: config 223 has an invalid descriptor of length 0, skipping remainder of the config [ 146.604857][ T507] usb 5-1: config 223 has 1 interface, different from the descriptor's value: 142 [ 146.640016][ T1644] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 146.783237][ T1647] loop3: detected capacity change from 0 to 40427 [ 146.819977][ T507] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 146.831072][ T1647] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 146.844990][ T1647] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 146.866378][ T507] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.899532][ T1670] loop5: detected capacity change from 0 to 128 [ 146.914871][ T507] usb 5-1: Product: syz [ 146.920327][ T1647] F2FS-fs (loop3): Found nat_bits in checkpoint [ 146.924535][ T507] usb 5-1: Manufacturer: syz [ 146.941290][ T507] usb 5-1: SerialNumber: syz [ 146.966268][ T1647] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 146.973861][ T1647] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 146.985309][ T1670] FAT-fs (loop5): Unrecognized mount option "ฎC—‘‘‚9๊:*ตา&Šฐœ" or missing value [ 147.019443][ T1647] bridge0: port 3(syz_tun) entered blocking state [ 147.036253][ T1647] bridge0: port 3(syz_tun) entered disabled state [ 147.067625][ T1647] device syz_tun entered promiscuous mode [ 147.077233][ T1647] bridge0: port 3(syz_tun) entered blocking state [ 147.083741][ T1647] bridge0: port 3(syz_tun) entered forwarding state [ 147.228854][ T286] usb 5-1: USB disconnect, device number 8 [ 147.335112][ T1681] loop5: detected capacity change from 0 to 256 [ 147.401870][ T1681] FAT-fs (loop5): Directory bread(block 64) failed [ 147.408587][ T1681] FAT-fs (loop5): Directory bread(block 65) failed [ 147.415511][ T1681] FAT-fs (loop5): Directory bread(block 66) failed [ 147.422157][ T1681] FAT-fs (loop5): Directory bread(block 67) failed [ 147.428986][ T1681] FAT-fs (loop5): Directory bread(block 68) failed [ 147.435636][ T1681] FAT-fs (loop5): Directory bread(block 69) failed [ 147.442483][ T1681] FAT-fs (loop5): Directory bread(block 70) failed [ 147.449104][ T1681] FAT-fs (loop5): Directory bread(block 71) failed [ 147.455963][ T1681] FAT-fs (loop5): Directory bread(block 72) failed [ 147.462593][ T1681] FAT-fs (loop5): Directory bread(block 73) failed [ 148.459718][ T1686] FAULT_INJECTION: forcing a failure. [ 148.459718][ T1686] name failslab, interval 1, probability 0, space 0, times 0 [ 148.473302][ T1686] CPU: 0 PID: 1686 Comm: syz.6.376 Not tainted syzkaller #0 [ 148.480630][ T1686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 148.490712][ T1686] Call Trace: [ 148.494016][ T1686] [ 148.496971][ T1686] __dump_stack+0x21/0x30 [ 148.501335][ T1686] dump_stack_lvl+0xee/0x150 [ 148.505990][ T1686] ? show_regs_print_info+0x20/0x20 [ 148.511213][ T1686] ? dev_hard_start_xmit+0x5fe/0x670 [ 148.516524][ T1686] dump_stack+0x15/0x20 [ 148.520704][ T1686] should_fail+0x3c1/0x510 [ 148.525137][ T1686] ? skb_shift+0x6d6/0x1930 [ 148.529662][ T1686] __should_failslab+0xa4/0xe0 [ 148.534448][ T1686] should_failslab+0x9/0x20 [ 148.538974][ T1686] slab_pre_alloc_hook+0x3b/0xe0 [ 148.543941][ T1686] ? skb_shift+0x6d6/0x1930 [ 148.548477][ T1686] ? skb_shift+0x6d6/0x1930 [ 148.553019][ T1686] __kmalloc_track_caller+0x6c/0x2c0 [ 148.558354][ T1686] ? skb_shift+0x6d6/0x1930 [ 148.562876][ T1686] ? skb_shift+0x6d6/0x1930 [ 148.567404][ T1686] pskb_expand_head+0x11b/0x11d0 [ 148.572366][ T1686] ? dev_queue_xmit+0x20/0x20 [ 148.577069][ T1686] skb_shift+0x6d6/0x1930 [ 148.581418][ T1686] ? ip_finish_output2+0xbc2/0xe60 [ 148.586542][ T1686] tcp_sacktag_walk+0x1066/0x1bc0 [ 148.591575][ T1686] tcp_sacktag_write_queue+0x1ee8/0x3bb0 [ 148.597214][ T1686] ? tcp_try_coalesce+0x6c0/0x6c0 [ 148.602256][ T1686] ? tcp_options_write+0x20c/0xb80 [ 148.607376][ T1686] tcp_ack+0x1566/0x6000 [ 148.611642][ T1686] ? tcp_validate_incoming+0xa8f/0x2750 [ 148.617216][ T1686] ? tcp_rcv_established+0x19b0/0x19b0 [ 148.622687][ T1686] ? __tcp_ack_snd_check+0x910/0x910 [ 148.627973][ T1686] ? ktime_get+0x12f/0x160 [ 148.632388][ T1686] ? inet_sk_rx_dst_set+0x13c/0x1b0 [ 148.637589][ T1686] tcp_rcv_established+0x6bc/0x19b0 [ 148.642794][ T1686] ? tcp_check_space+0x9a0/0x9a0 [ 148.647825][ T1686] ? __kasan_check_write+0x14/0x20 [ 148.652938][ T1686] ? _raw_spin_lock_bh+0x8e/0xe0 [ 148.657881][ T1686] tcp_v4_do_rcv+0x597/0x9f0 [ 148.662487][ T1686] __release_sock+0x143/0x350 [ 148.667174][ T1686] release_sock+0x60/0x1b0 [ 148.671591][ T1686] tcp_sendmsg+0x39/0x50 [ 148.675841][ T1686] inet_sendmsg+0xa5/0xc0 [ 148.680178][ T1686] __sys_sendto+0x423/0x580 [ 148.684743][ T1686] ? __ia32_sys_getpeername+0x90/0x90 [ 148.690123][ T1686] ? __ia32_sys_read+0x90/0x90 [ 148.695332][ T1686] __x64_sys_sendto+0xe5/0x100 [ 148.700101][ T1686] x64_sys_call+0x178/0x9a0 [ 148.704601][ T1686] do_syscall_64+0x4c/0xa0 [ 148.709033][ T1686] ? clear_bhb_loop+0x50/0xa0 [ 148.713710][ T1686] ? clear_bhb_loop+0x50/0xa0 [ 148.718387][ T1686] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 148.724387][ T1686] RIP: 0033:0x7f6939cb9fc9 [ 148.728845][ T1686] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 148.748473][ T1686] RSP: 002b:00007f6938722038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 148.756921][ T1686] RAX: ffffffffffffffda RBX: 00007f6939f10fa0 RCX: 00007f6939cb9fc9 [ 148.764920][ T1686] RDX: fffffffffffffe88 RSI: 00002000000002c0 RDI: 0000000000000005 [ 148.772896][ T1686] RBP: 00007f6938722090 R08: 0000000000000000 R09: 0000000000000000 [ 148.780866][ T1686] R10: 0000000000000052 R11: 0000000000000246 R12: 0000000000000002 [ 148.788939][ T1686] R13: 00007f6939f11038 R14: 00007f6939f10fa0 R15: 00007ffec8143e18 [ 148.796931][ T1686] [ 149.059477][ T1690] netlink: 8 bytes leftover after parsing attributes in process `syz.3.374'. [ 149.328550][ T1708] netlink: 24 bytes leftover after parsing attributes in process `syz.2.381'. [ 149.493497][ T1718] netlink: 24 bytes leftover after parsing attributes in process `syz.6.382'. [ 149.628426][ T30] kauditd_printk_skb: 72 callbacks suppressed [ 149.628452][ T30] audit: type=1400 audit(1760818079.817:676): avc: denied { write } for pid=1712 comm="syz.3.384" name="snmp6" dev="proc" ino=4026532453 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 150.364034][ T1722] loop2: detected capacity change from 0 to 512 [ 150.686860][ T339] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 150.688054][ T1716] 9pnet: p9_errstr2errno: server reported unknown error 01777777777777777777777 e_ro, [ 150.934367][ T339] usb 6-1: Using ep0 maxpacket: 16 [ 151.007702][ T30] audit: type=1326 audit(1760818081.266:677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1735 comm="syz.6.390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6939cb9fc9 code=0x7ffc0000 [ 151.226588][ T30] audit: type=1326 audit(1760818081.266:678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1735 comm="syz.6.390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6939cb9fc9 code=0x7ffc0000 [ 151.247403][ T1742] loop3: detected capacity change from 0 to 512 [ 151.285802][ T1740] 9pnet: p9_errstr2errno: server reported unknown error 01777777777777777777777 e_ro, [ 151.305799][ T339] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 151.322421][ T339] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 151.343378][ T339] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 151.381952][ T339] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 151.398915][ T339] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.752899][ T339] usb 6-1: config 0 descriptor?? [ 151.896194][ T30] audit: type=1326 audit(1760818082.201:679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1758 comm="syz.6.397" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6939cb9fc9 code=0x0 [ 151.919262][ T1763] netlink: 28 bytes leftover after parsing attributes in process `syz.4.398'. [ 151.932788][ T1763] serio: Serial port ptm0 [ 151.988249][ T1715] loop5: detected capacity change from 0 to 512 [ 152.143035][ T1773] netlink: 28 bytes leftover after parsing attributes in process `syz.2.400'. [ 152.154039][ T1715] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 152.453555][ T1773] serio: Serial port ptm1 [ 152.986566][ T1782] loop4: detected capacity change from 0 to 128 [ 153.054880][ T30] audit: type=1400 audit(1760818083.408:680): avc: denied { mounton } for pid=1786 comm="syz.2.405" path="/proc/289/net/netfilter" dev="proc" ino=4026532415 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=dir permissive=1 [ 153.087469][ T1782] FAT-fs (loop4): Unrecognized mount option "ฎC—‘‘‚9๊:*ตา&Šฐœ" or missing value [ 153.092248][ T1790] netlink: 8 bytes leftover after parsing attributes in process `syz.6.406'. [ 153.114479][ T30] audit: type=1400 audit(1760818083.471:681): avc: denied { unmount } for pid=1786 comm="syz.2.405" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 153.118674][ T1790] serio: Serial port ptm0 [ 153.385831][ T1796] loop4: detected capacity change from 0 to 256 [ 153.516029][ T1796] FAT-fs (loop4): Directory bread(block 64) failed [ 153.522789][ T1796] FAT-fs (loop4): Directory bread(block 65) failed [ 153.529831][ T1796] FAT-fs (loop4): Directory bread(block 66) failed [ 153.536575][ T1796] FAT-fs (loop4): Directory bread(block 67) failed [ 153.543341][ T1796] FAT-fs (loop4): Directory bread(block 68) failed [ 153.550074][ T1796] FAT-fs (loop4): Directory bread(block 69) failed [ 153.556796][ T1796] FAT-fs (loop4): Directory bread(block 70) failed [ 153.563568][ T1796] FAT-fs (loop4): Directory bread(block 71) failed [ 153.570571][ T1796] FAT-fs (loop4): Directory bread(block 72) failed [ 153.577326][ T1796] FAT-fs (loop4): Directory bread(block 73) failed [ 154.342331][ T1805] loop6: detected capacity change from 0 to 512 [ 154.375760][ T1805] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 154.385625][ T1805] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 154.395435][ T1805] EXT4-fs (loop6): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 154.554908][ T1805] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 154.562941][ T1805] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=e040e01c, mo2=0000] [ 154.571402][ T1805] EXT4-fs (loop6): failed to initialize system zone (-117) [ 154.578875][ T1805] EXT4-fs (loop6): mount failed [ 155.104005][ T339] usbhid 6-1:0.0: can't add hid device: -71 [ 155.104690][ T30] audit: type=1400 audit(1760818085.560:682): avc: denied { checkpoint_restore } for pid=1809 comm="syz.5.407" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 155.181400][ T339] usbhid: probe of 6-1:0.0 failed with error -71 [ 155.517589][ T1816] xt_hashlimit: max too large, truncated to 1048576 [ 155.579268][ T30] audit: type=1400 audit(1760818085.970:683): avc: denied { map } for pid=1814 comm="syz.4.412" path="/dev/ashmem" dev="devtmpfs" ino=265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 155.637232][ T339] usb 6-1: USB disconnect, device number 2 [ 155.680218][ T1819] serio: Serial port ptm0 [ 155.698456][ T1821] loop4: detected capacity change from 0 to 256 [ 155.733339][ T1821] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 155.758534][ T1821] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 155.768897][ T1821] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 155.802336][ T30] audit: type=1400 audit(1760818086.306:684): avc: denied { write } for pid=1820 comm="syz.4.414" name="file0" dev="loop4" ino=1048635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 155.890997][ T30] audit: type=1400 audit(1760818086.327:685): avc: denied { add_name } for pid=1820 comm="syz.4.414" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 155.912039][ T30] audit: type=1400 audit(1760818086.327:686): avc: denied { associate } for pid=1820 comm="syz.4.414" name="bus" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 155.935593][ T30] audit: type=1400 audit(1760818086.327:687): avc: denied { read write open } for pid=1820 comm="syz.4.414" path="/78/file0/file0/bus" dev="loop4" ino=1048636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 156.118818][ T1832] netlink: 24 bytes leftover after parsing attributes in process `syz.6.415'. [ 157.249164][ T1843] netlink: 24 bytes leftover after parsing attributes in process `syz.6.418'. [ 157.382257][ T30] audit: type=1326 audit(1760818087.912:688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1842 comm="syz.6.418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6939cb9fc9 code=0x7ffc0000 [ 158.213127][ T30] audit: type=1400 audit(1760818088.836:689): avc: denied { remove_name } for pid=285 comm="syz-executor" name=".index" dev="loop4" ino=1048638 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 158.358741][ T285] ------------[ cut here ]------------ [ 158.371175][ T30] audit: type=1400 audit(1760818088.857:690): avc: denied { rmdir } for pid=285 comm="syz-executor" name=".index" dev="loop4" ino=1048638 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 158.410904][ T285] kernel BUG at fs/namei.c:2933! [ 158.436665][ T285] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 158.442795][ T285] CPU: 1 PID: 285 Comm: syz-executor Not tainted syzkaller #0 [ 158.450272][ T285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 158.460344][ T285] RIP: 0010:may_delete+0x701/0x710 [ 158.465478][ T285] Code: ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 84 fe ff ff 48 89 df e8 d0 4e f5 ff e9 77 fe ff ff e8 16 d0 b6 ff 0f 0b e8 0f d0 b6 ff <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 55 48 89 e5 41 56 53 [ 158.485105][ T285] RSP: 0018:ffffc90000a57b10 EFLAGS: 00010293 [ 158.491212][ T285] RAX: ffffffff81b1ef01 RBX: ffff88810cddbdd0 RCX: ffff88811ef38000 [ 158.499217][ T285] RDX: 0000000000000000 RSI: 0000000000200000 RDI: 0000000000000000 [ 158.507204][ T285] RBP: ffffc90000a57b78 R08: 0000000000000004 R09: 0000000000000003 [ 158.515199][ T285] R10: fffff5200014af44 R11: 1ffff9200014af44 R12: dffffc0000000000 [ 158.523193][ T285] R13: 0000000000000001 R14: ffff888109bd3ad0 R15: 1ffff110219bb7ba [ 158.531183][ T285] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 158.540129][ T285] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 158.546728][ T285] CR2: 0000200000f8f030 CR3: 000000011cd72000 CR4: 00000000003506a0 [ 158.554718][ T285] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 158.562708][ T285] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 158.570699][ T285] Call Trace: [ 158.573988][ T285] [ 158.576933][ T285] vfs_rmdir+0x32/0x460 [ 158.581104][ T285] incfs_kill_sb+0x105/0x220 [ 158.585713][ T285] deactivate_locked_super+0xa0/0x100 [ 158.591106][ T285] deactivate_super+0xaf/0xe0 [ 158.595796][ T285] cleanup_mnt+0x446/0x500 [ 158.600229][ T285] __cleanup_mnt+0x19/0x20 [ 158.604664][ T285] task_work_run+0x127/0x190 [ 158.609272][ T285] do_exit+0xa7e/0x27a0 [ 158.613444][ T285] ? put_task_struct+0x90/0x90 [ 158.618220][ T285] ? release_firmware_map_entry+0x190/0x190 [ 158.624129][ T285] ? ksys_write+0x1da/0x240 [ 158.628652][ T285] do_group_exit+0x141/0x310 [ 158.633259][ T285] __x64_sys_exit_group+0x3f/0x40 [ 158.638296][ T285] x64_sys_call+0x832/0x9a0 [ 158.642807][ T285] do_syscall_64+0x4c/0xa0 [ 158.647236][ T285] ? clear_bhb_loop+0x50/0xa0 [ 158.651922][ T285] ? clear_bhb_loop+0x50/0xa0 [ 158.656616][ T285] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 158.662522][ T285] RIP: 0033:0x7f684853ffc9 [ 158.666955][ T285] Code: Unable to access opcode bytes at RIP 0x7f684853ff9f. [ 158.674327][ T285] RSP: 002b:00007ffc8940bf98 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 158.682758][ T285] RAX: ffffffffffffffda RBX: 00007f68485c2def RCX: 00007f684853ffc9 [ 158.690748][ T285] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 158.698736][ T285] RBP: 0000000000000010 R08: 00007ffc89409d36 R09: 00007ffc8940d250 [ 158.706742][ T285] R10: 000000000000000a R11: 0000000000000246 R12: 00007ffc8940d250 [ 158.714722][ T285] R13: 00007f68485c2d7d R14: 0000555592cbb4a8 R15: 00007ffc8940e320 [ 158.722711][ T285] [ 158.725757][ T285] Modules linked in: [ 158.866856][ T285] ---[ end trace a2c885720df82941 ]--- [ 158.872437][ T285] RIP: 0010:may_delete+0x701/0x710 [ 158.877592][ T285] Code: ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 84 fe ff ff 48 89 df e8 d0 4e f5 ff e9 77 fe ff ff e8 16 d0 b6 ff 0f 0b e8 0f d0 b6 ff <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 55 48 89 e5 41 56 53 [ 158.897330][ T285] RSP: 0018:ffffc90000a57b10 EFLAGS: 00010293 [ 158.903418][ T285] RAX: ffffffff81b1ef01 RBX: ffff88810cddbdd0 RCX: ffff88811ef38000 [ 158.911501][ T285] RDX: 0000000000000000 RSI: 0000000000200000 RDI: 0000000000000000 [ 158.919974][ T285] RBP: ffffc90000a57b78 R08: 0000000000000004 R09: 0000000000000003 [ 158.928615][ T285] R10: fffff5200014af44 R11: 1ffff9200014af44 R12: dffffc0000000000 [ 158.936996][ T285] R13: 0000000000000001 R14: ffff888109bd3ad0 R15: 1ffff110219bb7ba [ 158.945053][ T285] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 158.954003][ T285] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 158.960673][ T285] CR2: 0000200001000000 CR3: 000000000660f000 CR4: 00000000003506b0 [ 158.968687][ T285] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 158.976690][ T285] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 158.984702][ T285] Kernel panic - not syncing: Fatal exception [ 158.991055][ T285] Kernel Offset: disabled [ 158.995381][ T285] Rebooting in 86400 seconds..