last executing test programs: 15m18.836142913s ago: executing program 4 (id=394): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x8, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x49) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001240)=@base={0xf, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x8000000}, 0x50) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r5, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0x940}], 0x1) ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) setsockopt$SO_BINDTODEVICE_wg(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000003c0)='wg1\x00', 0x4) connect$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @multicast2}, 0x10) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000440)={0x0, 0x7, 0x4, 0xb10, 0x1f, 0x4, &(0x7f0000000400)="66d1cb70a971cf595dd4eeb3794686df0dc670ea72836270e9ab2110b34a2d"}) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000004c0)={r4, &(0x7f0000000480)="66d2a75eacc37074e718c42903519adbb6f2d02121ef1b912ef34f479ae090f2cec7055bf350c578b779b81a9b78", &(0x7f0000002b80)=""/4096}, 0x20) 15m17.941829586s ago: executing program 4 (id=399): syz_open_dev$usbmon(&(0x7f0000000280), 0x80000000000000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x20800, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) r4 = socket(0x1, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r5, &(0x7f0000000600), &(0x7f0000001380)=@udp=r4}, 0x20) bind$unix(r4, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x5452, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001840)=ANY=[], 0x50) bpf$BPF_GET_MAP_INFO(0x4, &(0x7f00000019c0)={r6, 0x58, &(0x7f0000000200)}, 0x10) io_setup(0x8, &(0x7f0000004200)) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) 15m15.971721087s ago: executing program 4 (id=404): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) 15m15.951778238s ago: executing program 4 (id=405): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000140)={[{@nouid32}]}, 0x1, 0x461, &(0x7f0000000540)="$eJzs3U9sFGUfB/DvbrslAd638OZVEf9VUCmi1LYmSIKJRDnJxWDiuaGFEAs1tCZCiNHEgzcvJp49KDePHDwZD3jUBC/e1JMxEkMkntSa2e7Qbdkt3dB2q/v5JLP7zM6wz2/m4ffM7MOTIUDPGipeKsn2JN8mGVxYXbrD0MLbzRuXTv5+49LJSubnT/xaqe/3241LJ8tdyz+3rXipJsPVpPpeJQ+0qHf2wsXXJ6anp8431kfmzr4xMnvh4tNnzk6cnjo9dW700OHnxkcPjY2Pr9mxvnz57RPbXnnh2AeT136ZufzD50W82xvbmo9jrQxlaOm5bPLEWlfWZfc0lSv9XQyEjvQlKZqrVs//wfRlsfEG89X3XQ0OWFfzhS1tN78zD/yLVdLtCIDuKC/0xe/fcll6C3BsXe8/6K7rRxd+ABbtfrOxLGzpT7WxT23Z7/u1NJTkyJVjnxVL1mkcBgAAAKCXfXE0yVOtxv+qubdpv6J8X5JdSe5Psjupz+t5MMlDSR5O8kg5n6gDy/dfPv5TaTeBhjVx/WhypDG3a+n4Xzn6lx19jbX/FCupVU6dmZ56Jsl/kwyntqVYH12hjqtf//VNu23N43/FUtRfjgU24vi5f9m/T09OzE3czTGz6Pq7ye7+Vu1fuTUTqEjBR5Ps6eSLa4vFH/fsP91utzu3P+tp/uNkX8v8b3S81w7X31aYnzlS7w9Gyl7hdu+Pjr3Urv4W7V9UrP03SJH/W1dq/2RHpXm+7mzndVzddeX5dts67/+/+6To/wcqr9YDHGh8+tbE3Nz50WSgcvz2z8c6j/mfrf1NU3k+yvNVtP/w3tbX//81fdveJI8lebwxd3lf/dqf7E/yZJIDK0Tz54uHXkvzHUUT/X93Fe0/2TL/b00NWJb/nReO7PzoeLv6V5f/z9b/Qg83PnH/d2erbaBuxwkAAAAAAADA2qjWn4FXqR68Va5WDx5ceIbf/7O1Oj0zO3fg1Myb5yYXnpW3I7VqOdNrsGk+6Gi9vLg+tmx9PMnOJB/2/dF48sDM9GS3Dx563LY2+V/4qa/b0QHrzvNaoXetIv9rGxEHsPFc/6F3yX/oXfIfepf8h94l/6F3yX/oXavP/4F1jQPYeK7/0JPu5rl+m63Qn00RRstCOX+qS2GU/yX/Jjkbm7Pw6ZfJBtTVl2SzHPIKhW72SgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACbx98BAAD//5IX2eo=") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(r1, 0x0, 0x0, 0x400, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000004ce3d2cd4e3e7608bfb8"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) timer_create(0x5, &(0x7f0000000280)={0x0, 0x3c, 0x2, @tid=r0}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) open(&(0x7f00000002c0)='./file0/file0\x00', 0x141840, 0x100000) mount$incfs(&(0x7f0000000340)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, 0x0) open(&(0x7f0000000200)='./file0/file0\x00', 0x0, 0x2a) r3 = open(0x0, 0x26a400, 0x60) ioctl$FUSE_DEV_IOC_CLONE(0xffffffffffffffff, 0x8004e500, &(0x7f00000000c0)=r3) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, 0x0, 0x0) 15m15.715610371s ago: executing program 4 (id=407): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00a39b10dadf7506f1d617cfb0596a45de000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000080)='task_rename\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000340)='sched_switch\x00', r6, 0x0, 0x2}, 0x18) r7 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x4000000000000, 0x40, &(0x7f0000002700)=@raw={'raw\x00', 0x8, 0x3, 0x230, 0x208, 0x8, 0xfa04, 0x0, 0x6c02, 0x208, 0x194, 0x194, 0x208, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98, 0x0, {0x0, 0x74020000}}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast1, @rand_addr, 0x0, 0x0, 'batadv_slave_0\x00', 'pimreg\x00'}, 0x0, 0xb8, 0x100, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x290) syz_open_dev$usbfs(&(0x7f0000000300), 0x8, 0x492502) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf22}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r9, 0xffffffffffffffff}, &(0x7f00000003c0), &(0x7f0000000400)}, 0x20) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0), &(0x7f00000000c0), 0xffffd6c0, r10}, 0x38) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000080)='task_rename\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@bloom_filter={0x1e, 0x5, 0x3, 0x8000, 0x100, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x1, 0x7}, 0x50) 15m15.399563746s ago: executing program 4 (id=408): bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x20c006, &(0x7f0000000480)={[{@grpjquota}, {@mblk_io_submit}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@discard}, {@grpquota}], [{@seclabel}]}, 0x1, 0x446, &(0x7f0000000d40)="$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") r2 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x210, 0x320, 0xa, 0x148, 0x368, 0x60, 0x400, 0x2a8, 0x2a8, 0x400, 0x2a8, 0x3, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x70, 0xe0, 0x0, {0x200003ae, 0x7f00}}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x1d, 0x0, "f2f7b9f28413d9d8ad470ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc2d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x270) pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x76200}], 0x1, 0x7c00, 0x0, 0x3) ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000000000097000040"]) 15m15.320267517s ago: executing program 32 (id=408): bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x20c006, &(0x7f0000000480)={[{@grpjquota}, {@mblk_io_submit}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@discard}, {@grpquota}], [{@seclabel}]}, 0x1, 0x446, &(0x7f0000000d40)="$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") r2 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x210, 0x320, 0xa, 0x148, 0x368, 0x60, 0x400, 0x2a8, 0x2a8, 0x400, 0x2a8, 0x3, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x70, 0xe0, 0x0, {0x200003ae, 0x7f00}}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x1d, 0x0, "f2f7b9f28413d9d8ad470ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc2d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x270) pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x76200}], 0x1, 0x7c00, 0x0, 0x3) ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000000000097000040"]) 8.387038268s ago: executing program 2 (id=3246): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) syz_open_dev$MSR(0x0, 0x0, 0x0) ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, 0x0) setresuid(0x0, 0x0, 0xffffffffffffffff) syz_mount_image$f2fs(&(0x7f0000000100), &(0x7f0000000040)='./bus\x00', 0x2000410, &(0x7f00000001c0)=ANY=[@ANYBLOB="66617374626f6f742c71756f7461000000000000003b814e50a959736d65720f73ecea54b5e5be45ace9a88f723cb005aeff24212c651baef614d442ae89412ad3dcd0b7586d02002a6d6d65cacd4fc5002207ce994dda65c4b1d23a9bd5ba0f4ce5c2b5a5718c6aa918080002223d2753a5cac974110144cd0a1e368652324a41b31e1eb3b32dccbdf8f68bd96a45a75427a5f789d267fd92f6a5540200b81d5b9fa9b40fe4d7fbd50a6afc3a989c6d60045663c59cbdc4c700000000bc7f6b22df0191acf5912afdcc1c061835177068c40f757dd123d2600b1c544f1525aa8d00000000000000000000002e8b5c733d362417c17f527c0bfebec112d57fc69fabb9b31ef97b2147931ff60cdf666c25244218b1f1a6010000000100000020563b835d0e8e9a09070ef1691fcb2f37bda5d4e3d9d7a2d0ac82b45a53001057f321acc45d5e065a461de90100000077d200000000000040b78f0dd3836f5ab2f6a1a5b798bb7752f192c6b48e568973a59cd9c74bd9a14721856c5499cd8f93f8beaa9cf76718ce7244c84268030000000000000208886b313bd01a22d576e414011a4f0a897515329f86d4585fa0ea17068f8af349696da4a2b3e24310ca52ec51bc23b57897cb55a2d513e6a00765ee3f58b471c54dd57f0af584afe4a21f92b515d7f2fa6fbb273ca0f751e684584320534667aea39ad7222c8ef531f514939177a47395e94c1723abb3fd44fd64fde4b45cc2f55f4ae05ff48648a4c998257856bcdcf2fa02010000001f54fb936570450e91c8d55abad76a7b7a000016f81ec9da9ccc1191c211632266d907e4d9b23496ae19bac24dc23c43f514f1b4af19988bbe61ee29a368a999435d6872d01b79c7821e875859dfbf3c57e4f1fb0be46cb5f7a0fa13516c0926d19dd2d5862085e1e4cb8279be17cba17ee4d06adb7b4ca282e73ea142b01b4a742fa11c0927ba811dd60903d575db449d775021b542db617086b3ed42e6e60fe043cff79b0c067c584bbf82657974c3736912b4b522052b9467d0da116ccc1652d861a420f09aaf67d3e9f6160100000001000000ae6335ad9896abd3cc00413638cb9bc62ab8054325d72e9144cf4f88702f586507e3147198e0bc4060a7c8f4dce73b653177ecf8228e6e6fae02040000000000000000000000000000f43739fdd2d24e50e0233acfe1c8639070fe00f40b0d01f8a0a35fcfe3ea10faf9c24b8488ed4ed83fb06a9a7c57442ede9e1fc2853b8f4d2241cff61d0125b7750e3fdae6a4ab9c776a191ed8098a780ea2bbaa64978cd3a6458fcc6b949bcbca0dceb7361f66e46731eba4f3aed335e7c8c541e82453218a19d39489e1525466ac93759787e767f601931d94c9c426489b741a6bc8abf475e4bf859e1ce7f7227069e9f51e25fa3d1b18dc565180a1af464a1dd697db85e2b27b90f6bd7cf1b6bc0bcd8ba552ced3d3cfbf9c9bc04f6505003cb40173b4bdc393d47e5da95b63a40ac18daf11e8d0706b47795fbe2b56d0ea7ffc5a59ede88621a08b25ca6ebe041317b62373a60951af33eb7954a9731aaa125add0913ed2435a207439e9122512d77096746a4b404459cebc8faff8f7a31758e630c75a1ff90402754d339dc21cf6b8e04e1aedf14df0b4aaf0e03194df3eb41ba066bc343b323a3162d7e7ba687633c2faa8f28b42364b72e3a457476fd6b2a54e670ba798172c44c4390f73fdab743a4cac88b2bd0545b8483f2e2f9846b138a4d8a7332978da70e9050417087c5ae034a735e8b448dd970140495fde085", @ANYRES8=0x0], 0xfe, 0x555e, &(0x7f0000005f80)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x140) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0xd0) write(r1, &(0x7f0000004200)='t', 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc0200000000000000ae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fc40848228567ffb400000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df2624f56da648d28ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71400fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada10eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff00000000000f000000ef0000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18aba6b16455a66c3b84b138efc20a546d3d5227e23b03f2a834391ade2ff3e93ee296c4082ee73e7c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0847a1ff2f7fc3c2b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f05c7f0be31491eb8c9ff68236c8600040000000000000000000066e034c81c3cab64e4fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f224baf1221c15fa12313ffbfa7c2730309f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca205081173bd03c4754fc4674812daab482fd390a1c903b5d28a1eb247b5837d7603b92495d5c569f6433c3fca5206cb0000003fdbbd3892c52c2e7612e05de32322e980a3d69931e2c9312dd517c96f2ee90362476ed853c4c9b7d4ebf13cbaa795860e92a3d7d004f2c491db38eb769f094d5d48b262cc35c40682138cf13a49aa9f27abec00002f01ba1251aaf2385416ca719300"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) sendfile(r1, r0, 0x0, 0x7ffff000) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) mount(0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100), 0xfffffd9d) r4 = socket(0x1e, 0x4, 0x0) connect$tipc(r4, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x1, 0x4}}, 0x10) sendfile(r4, r3, 0x0, 0x8010002b) connect$tipc(r4, &(0x7f0000000800)=@id={0x1e, 0x3, 0x1, {0x4e20}}, 0x10) gettid() timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) userfaultfd(0x80001) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000006c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="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"], &(0x7f0000000580)=""/240, 0xd4, 0xf0, 0x1, 0x800, 0x8fe5495fb2b00d3c}, 0x28) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001d40)={&(0x7f00000009c0)='sched_switch\x00'}, 0x10) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000100000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kmem_cache_free\x00', r5}, 0x10) 7.928275615s ago: executing program 3 (id=3249): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000200)='sys_enter\x00', r0}, 0x10) sysinfo(&(0x7f0000000a00)=""/4096) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x2, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000280)={0x0, 'batadv_slave_0\x00', {0xffffffff}, 0x30a}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000740)='scsi_dispatch_cmd_start\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x50) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000180000000000000000000018110000", @ANYRES32, @ANYRESHEX=r3], 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000300000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r4, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x101400, 0x0) ioctl$TIOCGPGRP(r6, 0x540f, 0x0) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES16], 0x0) syz_usb_control_io(r7, 0x0, 0x0) syz_usb_control_io$hid(r7, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220f0000000bf896e4047965aef792039c"], 0x0}, 0x0) r8 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) ioctl$HIDIOCGUSAGE(r8, 0x501c4814, &(0x7f00000000c0)={0x2, 0xffffffff, 0x0, 0x0, 0x4e496f8}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r5}, 0x10) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r9}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r10, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) 7.524663281s ago: executing program 2 (id=3250): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x7c8}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000200)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) madvise(&(0x7f00003cd000/0x1000)=nil, 0x1000, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000843000/0x1000)=nil, 0x1000, 0x1000007, 0x401d071, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/70, 0x20}], 0x1000000000000078) prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() r2 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000dc0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d34, 0xa, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x3}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, &(0x7f00000000c0)={0x14, &(0x7f0000000180)=ANY=[@ANYBLOB="414e17fde771bc2a1319e4a7581dc035dd6f2625d0830d2dfdef5b9223342e1e7056a59c3d0afd3bfdff830a79061579be70f6b012fc5ab71d5bbd89"], 0x0}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) symlink(0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001780)=[{{&(0x7f00000003c0)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f00000007c0)=[{&(0x7f00000004c0)="0b5f68fe2db5b11edaeadb8ef5b301eab7783926fb4dc8f83bcb2dfbf93a618ef5109782844e55767b12f76f685c8973d3a7293e425280931aac5dc57b4de082e1f40b198d76107c0d71159e14247ac3f3974b59c3e864aa5860213b03673ca01a7e6a9edaf3f55f1c26ddba2c1a2db49d43ade0e5ebc94ccbf54e", 0x7b}, {&(0x7f00000001c0)="b4c1c1aee386a477fb1d9fcb0aeba6b2b30cbb3e7ac7827b8dbecbdf049bc89a8d723255b244be9bc85e0830ee03e12375293ab1b9f6e1ac", 0x38}, {&(0x7f0000000540)="ebc68adc92c1696a660ee2b26ee91a6891ce154e5150b19dfc480a5f07f9cf56dc3ab49791c2e541b52b5015b9489049ce292384b54793eacb8fe5d394f1368dc88dae0fecc769bf21b5a5a95336260c85d6214d20a95e4d1470cf3e24663778ac815c714cb7b95ac8bdf6d561a1cef5575e624a3c309e25bf77d2de03a51c0c23407dcbdf", 0x85}, {&(0x7f0000000600)="5ae9c50089b8c97b662f849846c47374b75c9c0b145538b6b10a7d423e0615c3e243adfe8c5f36047d08f18cd4d238218db657e474a795d5b912e08b507a7c2ba70520e680fb7f65fc4d2164e23d0d4ea05eff2ccf2892031a3e80ff1c56952239f176907e70d2de565afedefcbb00f90cc8203da1cc593d044a930c8f478241ea699cd83d63b2b0f59602a81abdbd1131c749a2fa1e5db6aeb081bd1c62b397ae59fd0c841cc450f1b2bef1cfef626057d81b425309bf348b1d41206b2603befee5748c2bb1b26c6a38b4d4e070d497bc", 0xd1}, {&(0x7f0000000700)="cc8865447cdb7bbe8a2ba6994a13f4d9b72b7bb1371c770d8449127178237b7fc9b30879246f28ae68c1f255a164566588e9454e7f1e3a", 0x37}, {&(0x7f0000000740)="3c95027e23d551892945b9003363abc1cfd2dcb58951bc323023924000304428bd8efd093efac7859b023179022bee62c749b8103aa639ea23a8cd29", 0x3c}], 0x6, &(0x7f0000000980)=[@cred={{0x1c, 0x1, 0x2, {r1}}}, @rights={{0x18, 0x1, 0x1, [r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {r1}}}, @rights={{0x14, 0x1, 0x1, [r0]}}], 0x70, 0x8000}}, {{&(0x7f0000000a00)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000b00)=[{&(0x7f0000000a80)="e648c8869e01e3a05488b4fa22111113a3726c12773eafcb3e0ba7cd21ab0ed1e087cab6b28cc0899dda87ae2bb55a55f026c4e17a4016f44ec3a5708bfd4825c2", 0x41}], 0x1, &(0x7f0000000840)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r0, r0]}}, @rights={{0x10}}, @cred={{0x1c, 0x1, 0x2, {r1}}}], 0x50, 0x880}}, {{0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000bc0)="57c5c3987ed39dea09826ded65eae175a41716673fa151691d8538012b00963bddcd6ddcb4723ee2e6", 0x29}, {&(0x7f00000041c0)="33e8ec1e1fa3ff87c0501075adedf70c6c0c5cd5132c854b85ee8d21a9e097d4a956bcc9e167dacb0ce98d1250a206800fb8c810dd11dd540fafefa8dc11305494e8a4e9bc4746f7f032ebbacf36a6226c723f7f4613606fd58e7bcb856b26ac62056b87759ff11623e41035c8b8ee6875c363bac54b493a7c77ee1852c2ff9b5aade6e628d7bae19a2ca466f18c6085a1756550b7131b2742775fb72787a094ca545de568d1fa934fcd2cd5e160885ab59f447d7e60a975f9f3663e11c7d21576a006bab734287d72fc79b4aea97b5990172574579984faf3f6deebc1e214b3dd1b8933be56d341f90200d3d2af4f9ed2224e8196229d4de43fcc41604a0e32d6b2b35a0fb7add92e580eb026805216d7ac7221fb446d3d151704a2c5f3c04b3a588561432cbb130a237d5e4cd041f7abe19bcdc14b5c4b2941b8fc76e8c16c0b6a3c8488a86d192a6399e7c3e74a8816f2aab6006c8f52fe66679c920c84b85c810f1903ad6d27c13ed6287de7a31954c6c0732b4fa51d919ba4a1e2c4be2dd2996122ca5006ba890d84bbadc325893881485cb0119b55bb16ebb1dc6272503f99919bfabddff3025534bd32e89beb78f6a88bd331ac582f89fd38aefb501ac1170605ca0f46ca8ca4fc018353cc63cf700f4a6a434bf2c333a8b8102f35732cf1ebf759d80fda8141721bbb307ffcb841c516456d8a34fbe7183b282df2e94a9daaf43112cae754f9900b76a0e84431f60f99e9cb16a4a7857d4c6741186e1e349784c54d79fc47a3ed144b4220d0671982dc2706c53ae7a70e87e0babda7e28d5740e5d7b39bec7aaad682afe9ed6ca1a61a52f584228c69457f992dce7d700311ca5afff450a20fdc148a8918f0c4b956234688f8f2164e60800915bc4c701090a1da051ab1071faef444e844cde59ba93e34a7a5156a79b560cdde17b971dd6a04a3f7098b88a6d1bbe78385dec37f19d7af5b2db5817e20ba295895fef1e37e1e2ac548cf3d40bec5f19c64c5dd24d2cc511349c2427abc4ec483ee2710b65738222524e51f689a994470b5d6e89241a20a74ff5152e1f89aa25cc54a5116272de74001da0128bdfa9bb188a8898f1a2854db87c4dbbb38a2d249b55fe538b0c6ce114888a1213a2bf5e39aa88544a9ee1e4a486cf2268faef660f5feebf14c4033fb48be3ce77be0372f588fc9310fed62822597dbb8bc0b2090e2c09f20fcb6d1ffcfb37a9a196c00ec44a52ae3240c0ec73d0a67a7b1a1084bd552494a1b9a50029c031694acad504a0d672e0bde51ed375143f3c01b25dc05545038222031e6a1c1cf790460784817662eac1c946a71334908f2ef4364c76b3be25fd2991c841c83eef458a69ea1cd72e9c5b156a96dd0e2da6ae1e1a089afc9365e3e469c1c57ced3cfc6366911ea0c27a859120749be7be0fc0b1977fcb6c0f570792d3c5fea6801a7879f2a833e473d41f9a1fa5f93993063fe606bf6ebcb49bf8f94e5379aa51369d7bdbbf59fac84d0f4821b0a19040bbb49da4a5b2b56c79a703b02c72d25caad65414adf765cae40b10792adbe2f44a65523a30e2a19a32d732640ff2d6979916cc433ab09d513b6afbae581e8a37739f7e781ad185a62d9c268ea5a87c384ad54bbfce4281b3c6ccb2642a0153c84ab241c8d670ef1eff5854cc329a0d33dbe9e969ed4c6f2c1f1de3c72276bc44e38bf84faa61695d731bde6ee6a6683ec17ce04cdeddf5c009bb6f6dfa57d0f9a3d54d9afb35d1ae2fa555331ae8882eaf919d62589ce7daed2087d7a43c16d394d8527034829a47e04135db5fe534a0487cec601fa819583748951dd988da0ea7fc841c883183c3921bf18ccbfa763d67022c451075ab1a86e925be5f8815de78d2526823ee4c6bd3b272da5402eff237355e21eba10023e59dc134577c67f78aba6ffe3a6a5c0adc467deefd2ae98316c6350be5597d2a233479c7a1b86f24434c90e967c6169ba4b677688f6c97045997323dd6448c1dfa783b18734a2f3b6aa3d03b25cda27072db80b5a3de9d4796c260554bdc09dba210472ae464e38aef67aa9b72eb68692e2ee940e71f61f3ee8512c84e6eabbc0ba56caf5b5a770eb93c8700c18c332a54ab65046e14281262eea0229fac0c548eed8a74068ffcc75aa143eb32bde1eb5d1f23a641c0591e63dadfd6f1aae57509b997ecfe8485b3cf3ca328d6d3664f4560da5d5fa1c7b94432666e395f50102ea7868869ca281cdb852c34d01d09110e7b42e783cc7552dadc38f376c4b0c6f164d2e7763bc0ffc2e8dccdfd57b0572b88719732fdfc726ff4ad18222eee201a765613e836bdffc2fcdce46aa20e19231c72cd315c09a5b1cf285033529e53aafce8280a1fad52b8e73be7f08ba0f5c50e28578b45a6ca11bec87e328b98867b8354bb9186d2d7ace8fca147ed664ca2e474572dcb0c8ca1abaad55c004ca3d419cd416f6156e5836d0d3da9d404d95822340247c792c1e404fc5553534ff9e7070f9f15b1ec62c4a4a776937ebb0bacd3a9cd1e03b3d8a1440b312791e9f10940d6461d0e053c9a5c1a7a485b086880e8187e8356c35730bf898206dca3600ab4ced4b530ab6b8e91cd61940afd8fc573da9170e1e8c7ae78e784c1c7f7f6318642f723aa900a2b2d4c7d76110ca108374022dcaadc096caf58fc7616aff7afb0964b200d0ca47ee4112549b5f2704c0c03221e5e641501ff31fd6a05bc94f248dad255572a827804274c4e8fce72061dc74c3afa11d4981719179900bf969396328fd3e34d217471bcf2e88e9674dcf97251d68b19e99de1e4e1fab51789712cac260f9cff4fd93295129b62abe16a4b724cae0665a07cc5aad37225f20f41833aa75c77030d65b4402222f5d3b2d577cca36da2f973253509e342ad5a6d2bf40e9e32019ea3404bef7e2c900b181ff291bd658ef1f3c1bd2458e8f417040dfd8773d90a657c93c7c05b0e3a07080b6fc93ce8dd430e4a2eb46d0da05f7c6d5ff7e1216da94368f2542a32a3a34515652c84c77cb903d4fb044e186b86165aa0144eb7526eab460fd82fdfdc55f5587a1df5ece7b640d6d5524a84a9d61127c2946cec367b4faa2e24120a7316bb0045305eaedaa9f55eb0f7ae010f46bfe6e9053d87fbe9d4cd74e5066f4967db2f052d658dc065ad162199ef21c6bea0fb331d6a98947adcd66ad64f83f8de4a95f3f9ed721932a11ef192d87539c646de52738c5c5b592e87a8adab6f232bb70d69eab5ecf33114cc2e2272adbb8c5f463a236e3a307aa65c11d641d0a8ea0d51904b3c693e9e304eeb113b8e6933ef21dd33f12ebc747560ceeace2cedcd6f3631ffdf3b7bcc4971802d13be5e33ee1f1b0edeeed54007b2f19557ebc8bc0c40071d15e4e5464a8774337bbc2ca4bc95ebbb4982dcb9536fef754ca920c416fe731ea7a57ab99f6adf91ef0c733c50aa274ed326884344d29436e65572299b950254054ed4fe29b881a2e5d9f2795841434c53f93ed4c522ab2e7dbf1da05ef7271be1e863f5467416715b2d1f31079bc5504d628a64d4913756d3951446fabcfe552bc90cb98cdc18683055408dc09370c65f34ac9bbab5464dd15833abdc64a59eae767e3ff145a0c046ac1eb9bf4d3fe9be993a24b59679211b0144305948c89c09e9442a188840f3d106f8226b29fdc65ac9588e6772e3fdbcae3a4aae2aa429e1f7846ce14b1b926cf41efd1ef260e95c564e7931fdb1a2400992011965dbbe6c71e848653cbcd4e7f53625d8005ea54f178388869666f2501bc734c4af37a910d884c07b0084485e30b034d20485f6f7a20ae74d673b3aa029037b47c0635437a069969d6396f14496b4fe96eb8ce38572f818672c1cabd5998d478ebd7dd803d0b242b9c026e946d945240aff0b75c344470f3b565c46413773049981a9bb4d2528cb4bb9e381eb8d6b257ebd515b4152345c53aaf03a62a37c0b9e15c3cf6529eea1fa7bbce44ed0aef382b579e3169a6042fd662ab73f8013f9e8c47aa5678efee74ae7206852d1bff52b8c6623249e642100835e9087d9d532c85f23eb38640c099d6905bc62f6648128f0ae20863d50b2f499f8b701801fd5fa78dd26c65f976335601034500b95e157439949e8acfc8ea487130eb580ef4377785b8b0e7da5b3d761a7a270b94fa656a1d338c7dd4d0a3149fb52654c0e2f6b14046522637e4458dd844ef8fe5cf18a52cf42431cf071498f08eeed0d52c14eae0892d86ab942afdb5f8868024e39ed6a78b76ad08a05a2a945739277ad5c128e1da31b3dfde67a0af83b42b473d3bec0d08cd1c5786daddfe0d9d76db706ba711166aa16406e14e54de614651cc45ce15217c8a40eb3c495aa2aa35c80fdeab9c15bcb7a9fb6c713d785d44ec12b85ae14b817e1e3d378723e040d6728bab219e181ec2147e0fd18eb9ef5d857a5c63915732fe50fc6bed3a6e704a69240e5ce8f4ca6f46d51f8956a3f531049df233a628bc000744cf9be912b35a43bef3a1fdf93332cc70516f58ae415adb35a6d753ea654570c1d26bb6f6440ab03fdd10acbb5205c3a2e454cec684684391d11dbfd50bb70dcb0321a8fd4588b0f765766013bc42b5555adf663e0d413332ac19d4347ba6be34fd906cdaf942f3702d91513899fffa1051636e1a3b442ac7f609875055516254b5da5459864563fbba42225183d4b6c15d134d135708c5c4de2476496d9a23eb78a2191238f91bc9b81cab955f87ae6c873fb8ef103e8809bfce62f84a01289db1d135a28cd57535aad3f5951ed40bd3f8d6bf42981688c9778037532d4208dab9bed535e4261d3f5bb8a088a9d0e96fa427bc7f5b7a39a24f66fa1a5e707376ab8235c99cf770a32939defda0abee7bf342a26e40cf599677ba0430431975dc798758602bdfae08ba98150771a505099763c67d25ab53c2cee7f2b41f2811f3ec84df3edf8666a3395fef2c3b042d41210524edfdfee7c56c9f0aff9e8b0b9f9ecc1052961c356ba931d1841c5501fbab180b94e68e3d58da4bc4ddb66dcf9d25f018956efb272078364fda768d36a8e18d1f43e86c157ca0e736468252dbca5a4da13be32c34daaebeaea4d0192e4de82d9a9f925cddb9a05fa82243682709961b97f1168a144932a0a994ac29e08f3e6055eaced313b021b8dbc3b2765ae5b0f7e35db87487f4718896a2f49248e9280e9d367b36f3620d70da1d12eabc26b9feca66b5248a184eec7cb7d1086bdfe8e9fb920e880929fd0b855f7cbfe925031723e244b25a04b715d223f3589884ae074048bdb1590b6b4cf04805c1a271f7d2d136c88fcf611fb6dcbc2366fd317c4227d570e42459d6df88ab2c4249fddd0b18d84741bddb6769983d326bfc5d0ff67a51ad7251dc42fd1b37ca8c16d466610e4f9f96cd1a69870617e37910b3f2f3b79dfeb28df93e380b5b91845839c9898b65cb99637bf301faf28938a736a9c18baf7d165fe1f383f3294a8e4d2bde550894e285cd0a4af19841213d79796d0435d23641510a53baf0ffe60e7d956a92b9dc3032cfcdf243095e976837b7f9fe0a3a657d386618e8d2043c187ec18b4120d5309600ac7fb90639a5c156436572eedaa53d2d49e7b1e5c6b8faa51cb11e8c876883bdb3fcf3a0a4338792e1fbc359bcf9cd7cd185ef680065fb325243843c256fdbf0b5c40cd49a19ee314699b3522db101321fc81ad13a2d97dca9b3b10cc4cce0874d92b4dd28571abe3c3f7f7959a7a1d734956c9adc57a74875e46856a6315b7a0c7558", 0x1000}, {&(0x7f00000051c0)="d096ae382cdf33faf2599b025b3b2640f46cfc38d23196246455c6582d64465fbfc67a3fee778864b35fcf1afd01987d95d84502ba1322ccb3820912c507107f4c89f843e9e9ee2320dea7550fcf4eaff0db9e69869aa4ce5d62ca40a394678c1cb65e238ad5a24845ae6fb4288a8cb0733292059a3aed679a57e724c78ca21e6b6667ef25e1b3320d50a00c28db4aa1cdcaec5ffd640465ba8760e9904592ef9889e37c07085a5b7b33df6bd7b6531a8e6d43d8df20113080c1ed5a1c915d93aee45b60e0bab85b623efe259e2ae784d514eb45631a08523b1a800b44d1a2439876c593af441b4cd60a8459181459e84040c1536262be0c02a58f4a688f8d34f02cf67d25b014588a66e65966a00a4e7f418d810a63a8c2ca547952de185f8c3d25e93f5fa8a17a48be2ba6e0d89189a9bca38557c6bfca218ec639b23b33037af2e73c7d0cc0941e90c4062efcd29d9520f05a52398985f03a472f5c26b3c8bfa4cd91212398565c56a0034cfe26ece55580e8aeefa03babc0a171af1b14c458a9dc53904ab704c67b4b6a18f1d7306c9745bcf7bac439ff179b92a469fd871a4637f195d09b45b7c4da1ada902ba06d2ef47536e3398c2a49262375364ebb52466642e21a868f68e6dad52d20ce76116f6f9d81b6ea4f5b0fbdb72cd8cfa8db197a5e333ec04580850131f10a8a9ce8b528e32036ad9e0a890677f9bc47e17b213c84ad1e5b8b88d42b7eb368f58867426f7bb94a1ff0493f2af32d00baf980c5db41d33715aaf4e91c93231945f669e7d99b4c237582029650e0830930ac48e6fc23feb06e60a2562333d38f93db4befd64f93243d1b0f2a051d0abbd9a23343581c3a85347bde8c3da36a8267a735bcdca0c3b747fdac22afcd67935ee5b25f956e5f3753539b7bda9f724799a99c9eac9666b3166b86cf8e1172287023ba65db2ea6e6dde418a76daa62f218ee63b9afbe8b3a9ff8a782057eae421d4757cc517e4ad92b7e3b9afe4fae01e7c2eee44b017cd08120e64f0ba262cf3f39dc785e957f34e9f89ffc1be692767a9c73c77978c238a37acde06e927783fa2326cb312fec7a9229d2e9f5de2e4cd7d64ebffa1ba5be4edb4d762e471011fca36dc3a2503572a6822f4765c91d15848f0d6b0a3e5cdb8951c475f56165c65cde6d2e7b88e067704b8c86ef69f4dcf270ec09395e85bdbd700631a18cc261c38307426cfcffa87cc782f5836bbe150a58e4c1c56280e248fed057df1bbbca0fa4cd1ffc3c4865328fbbd8c88fa6f91d08a156e5ec351e0275e262b48ddba54b139c83da29a3264834fb4bd5bc0e44c50543aac02d682f6bce1f60d6cad115bbd893314ad1e12491fb4f4885527cd52e039dd7b4ff6eeb14d73fdc0bad6ac2c6406bca37db4b34d5479c32ba24933900abd02135564f436ee80f3a8fbf4f90fe95e2abb90e485d7d5b3fa8fa4922a22368511b4168132507bc72f80d6b147c08291cb401dc362b4db7c2284c5b67de870d12dc60230620c10291edfe92a1ecbd5fa888c93e7d1c210ad6c5a6e66cf063449396119bbf8d067ad493fee9253cbe6d92288ee77de048454531b055f4b7ea2bc676bd26461f98c607ade8b16c780e8a1ebf02989a958c3de7edeb033501c1788ca7ba4960bde834250cb84c99d6a565ee9d7ae49da37fa4cc0695881c6e81970372d36d4ee042575f0169e078e8e6f9499cc7fab39cab4a5a5c04414d38bdf0946fd10d8929213d1dfe16ede6dbbae16232451437c13fb0521a7c7df5036c62de18619e8f629f5c172a442c4c035cbb10ac50db3c2d2887907de5f2b2687e614e92694549e75625dd4426a88b40ea7b34a2998c413ea442567147bb6dfc3ff60e67b67eadb74b3407cecaaf2ba61864867172df58ef1861feacd391091b88312721008c762196efea45581d6967138a10c4c6fd1651b6d964ca712c35fd130c2d8c4434a5ccbc96bc7378c066f05b57ee68c6f399eda1c70d6d7605c6f0081cf629fe5e7424e650b2dc4e51c991df2fa6072f9bb1d10875bb1575ad298b47916f28fcffa15a1485d66d9258eae0f289da6f6fd215cba8c54de36d27f58240cbba0eff47ddfb9b7ca13a78c00c5cdd8b0f91ac1973bbb9dc16e68ebce603e35c38481f7a333937211207a85823411608e6b94204c5d7979ba8ede752701208a065d0d9b90ba8fb48e76648b7086d40119398634b69dae2a66e6297a27eba438752e9a207775615e31f611fb27e333caac1454302b283ffe867c1f25de82b52e886bcc7c223c7d8289c8e6b222107b16adce13049eaf47cd597e48e7ac08dcf65a5522dd9221d0d29d1723686a93e262fc12e697a5ff2847fbe09cfe09feefe6d334e8ccd145bef32b50cff18f28450b0a4c0677c7a962ebc1659c3ba412cd672c5b8a3ef29b74bdd08b9fe9beae7f9d9bafe0f7ae0eaa059b786c2860fd40bb8ff9896b6f2ae91b0723594d9a0030d5f8abda79add6a3982698d3dadc1cdd56a32cada0dd75bf0dfe9cf3228938b69d1fab22cbc1eb2dd0327a78fc5c7a4d8197bb92790e5072ef79c11cd5f3b570c523d2dcb8c55b7f256a5eba896f0c65ed58164a6ec748a1800a584507d7e399ca6ba98fed9c9b70668fe9cde14b5eb961ac322e3d26452df1612abee3f6045e76294d69804ef4c4e68a682801e8ba069fffd4626793040195a1abd8d1abbaa0804083fde6e17c75f649a192ea383e834349777ac1632ab278c4d88b8fb87b75385dea52ee5bd2dbceede889e08337bb578d2a54cdd9d118518016e772c2155b7e7378bb6b940df90b0a87ae63498fdf32665ff32b4479d805dcd2f4729776a2bf921c68c2fa393769f1de83b5bcaa81f0488891c1cbec3bbeb5fb7de063fa1fc7b7262668bdedfd0acf45f7c5cb3da1dd8f9f7b2ce173238b371b9ff79a5b92db389ea8c3d5b8ecd7bda0a39c3e27c22c6603c75a888f03494901dabb4f2cd516e662e7e1aa82d672ee6334036816196d4eed912311301d9186fa6f40256ccf37cd40527a8aafced8703f9fe5e5169e64c336e90a3aceb9436cfee39888bccb1fc9860918f5412e688bdb25f0bd5fe325aeeaa4756c42dab7fc5bacbacd6bf93f57ada795f9931938e4d3fe5a127d9a0d941a66751ac9556597c4aabc010e5e6925903ee36d11ae71cfc90e937baf1ba5c396464d9d64e096222de018f72bf2db555cf7a91a7cb1c3e669d10e71876d85f48ae94a08a92c62bab1c002ddf1b59c4c4ef0596b2ed80d14522721f331613c13415518f422abcd965f2fa6743adb4d7d6087292b8b88cf03a34400f4eb1722d4b20a07eeced3e3fb16ee3d9c6efdbad8408d65212c1739d21cdcb6d82c7388439403b5575990c50fd195cd4c2ea3391871b9630e4f00500c0ff6cbba62fe56e35fc950db0d9f38a99d15939b65ebb237afefbe55b9f4139227784294feaa233613f4d06196d138b0c0d2fde4471a5ecf2ec84110dca95a91ba4ce81976cda56185daddeb17948a5393b7e46e60e3c35b0d9aa579dfbfefcdbfd68366079e4e3d9807d1f77eb7401d98aaaa4e2c2f5c29c17d27ca036b2a47c50818478a7f4c42d01e5ac3dce576ac71e98979e6bfcb705779351ce4780a5b4492534a895932b6a11cca3a837068140bc4f9374eafe4b4deacf926fd3da65544b26936537d31ad709bdb93038155920825eb87a79ab94f4d7504411628c5b28edc9ae81e6f36336a0249515cdadd355ffd40b0e7e43aae79fcb1a35464501af7a750fafdfc22c8839e9ad631ca476babf781175d4e26f59c139f19b7d55cd94d2943bb5d8241c60efa783d68f33d257ce2c77f7a0580861df59f633819bfabf4d43b13fdb4693c5051d9712e6e204500fa6254d8be9ae5c400657da9f004c9f389ad0afcc5b6fa4407d57423231cdeb1586f40312767c446b0fd1325e7332b439957fa3141de36ce36e97a94bb6785e48fd58440c9c6e9fa7617fded05da5a9adbfbf703f453d5e6dc83fe724a0fdef5f0a35198e28ed2e58489ebe8f54031129f409842e4738afb1c3a6e07836fd4356db985292ec28e9519b64854d777bf63069762e53d8f4428878dad6d88e3777291ba9c9daaab8533c37d682959ff2f6c71e0722224078bf392e0e44f220aaf3aae1b9bd63b79935fbcca166ef0cdfabfbcfc6c3e7022e8ffa3f25ded9bd063c78ab5b2a9185a9243641ba454a2d549f233bae3f2f2591499c34cf8f40d199131b21059b726ccdae5b36028817e7a304bccb4d5433fa1eaaf14db731ce299a1df871502e6bf0d56d9f26d9f6846c5445703ed5dfa545d7bc9171293e45e97f3fe317daf1480110d0f1f47b613ff4d11d2dc995c51e62b5cc4c8512f8267697e128f4a6cdac75f51709c4663ae5207cfb58966aaefe72016eac77bf8932912e8dbcced7cc7af0e350822e63dc931db34ec5db543f47571a2acffdd833ddb73f9a8fc708e22a0bde6bd5da4622577d42819d5ec43f5d0614c920e0df0e8817dfaf455b93f2216d8d628fcb9ee21f5774f61a3d47f0907d8ea2f2b4fcda7b482c6109b34a406e7cf605e03e51886a34e6f406262d411ef4bc4949cc5787f21d8254742e4a2d83d90c3115b76916d4418113892bd0e55e9ff40798099a1e2d8ea2627cce402236a353e0e4e3e835869cbd6cb1342729538750c41523fd692a56c32271e7367637aea6b61587a5aada3fa9cc839557b538dcc616ee890762444445e1c4521720aecdbef5d3a460b1f97316cf7bf8a373281c1936946007996cb30c91814d997c257bb66d7d7da91dfd654568233c72ece95e5dc7be19d8af930c7bfb4b1d1f60dcb5f6c18b4edca8918361ec5a4f38472768694b3315c26ac2556da18bd27853674b356d11be9e6f638b2909a34fdfc13a591d3f2635ac16181d9acbd2b390d9ddb967df3d573a4951f73f5dca80e29d1962be7f7dba152916a2ac100fb0f008ecd647f9801f4fed27e51449727c516c6dfb99466024fc5c367f352bf542e8339cf8d4f0d3396f892b0c399e324391282464334e200ac2c2f38cd936180d5fb8aefcac8706cf6847967ff6e65e2027659cc9f843ebe417e57c7353c5ee8931ca22068b224cf0121e4ae74802ac11a74a1bcd78b0428ad52fda93900f41cc260f63fe8ab85c6e578b05c0f87cd0572c3fc2fc3748dea7bcef077da4297ffd2dbbedfa2e4fbc3a7b17a46429a9c5e1e33dc3918143469e46021f286489e0001ce5bd1d80720f9a50a88a3e50c638f68176c569b9e1e5d048d1009119e5d87a1b5ab21ea9a06d8a113f33cb6b5fa626f2d730f7e436dd168a18009192cf24d3620da8f7cd945ac3dd6da75924496ed3ef4e0e019f68d95f2ed705079459a5066e72dafb5d2811fe061bb3ab764f693c3379b12a9bc7a5cf13ebd2586e42517c8400a41a6a138c71922cf7d981df5c454e7dad6b45f5535e565b6519d36a15a94daa3fa8fb0dfa55faeb27fd87dcf0be6e8f6a170d232ce60f40adec4ac5d0ed33deed6fad5c942bbf5ccb9800424369f57a97b4c39fdc59d782e2c8e36a6406cd64ee68b24cd08352972eb04927bed7b36597b4101dd9c39dc05ce946edfbdc02910b818754e8a750407635f7e08184734501d65314d31733bd5b96d0d213d273a6f27bd6375f8fee463646f93c214a6705b810e567ba4539a44bafc7b77dc587cf8d27b86f84b9bf1b9b617eec1e5d1a8a76124201aa1c2ea0c214fbb01ce7265799436eb12678cf91632e1038a984c8a9cbf83a845dbd151e384d764802fa151133190a", 0x1000}, {&(0x7f0000000c00)="1965e312b538c3341a9d626399e8cea29ba9cfa3e9908f4d4d3b54f565c515a34b7e41796346e66715bba5d9ee5b31f6b1316b5c297c1fd9f20a883e07e05c9c703b4ce68b7d096215574320bdcd6656edb3e9a4ce184fa221a476433bc96e45a16e01d9af428b8b6c692ee6ac9e31e769ce0a817638b1efa1d66b23d75c0debe2e7a7a4ebf3fea3261d5e8332c9dfbed62bd4064439ada894d7438c8fb0832ba3387e5413a029401135a229c4b5de1c7ef6c3da70793a4f0654ffe760a1a1355ddd0974588c9860034a610e6aff0ecbbcde4400eb5eed3b43d8a7f684529c", 0xdf}, {&(0x7f0000000d00)="de13da33a69d5eebc1532554826f49d0227c14e9b3c5df7ac77599a80e6ffc49eaa4ad1c6ff5d24608174fe7efa9f819f675e1da0b2642c39430f7f4acab0f4302f3ed58637f9b5b3cf45d3f25447a5185d6d3084c55d9f0b60302005a381264dde1ac93b85352a4352306acaf70884293ba29dcfa8d62b972ad334a3ff983e48c6a842b5d9e20cf10bc398f27c5a10787d543c4ebd835ab1229f4a7f32cd291cc915e66f61f7f0bed794603431c2b8fd4f26abce03281148d", 0xb9}, {&(0x7f0000000e00)="f59f1aa2c3d44988a2a2232b8b062b6b0a5aad850161bf77a6f6a4009e5576943830b3ada60d022f50edb59d08100439653ff5b9c7506254689bf10ecce86352a75e0c32143ce16de3608045aefb0b5869cfb82050afe5ee0519435067978b84e470b57f161cb836341aca978bacdc53ee471448f8b15b2ae2f7c55f6dc187d4a1aec5937b7462ff3826b0b8d5d731a210da4bd257fea30a408ad6359faba584b7f5d5de7f960e7d8d14fea5e9f1875fbd70574bb2532aae8dce6486bd40fd248bc9d66b5449f3", 0xc7}, {&(0x7f0000000f00)="2bc51d0c9502ecdba2528876fa1378aad974c575", 0x14}], 0x7, &(0x7f00000011c0)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {r1}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c, 0x1, 0x2, {r1, 0xee01}}}], 0x88, 0x8000040}}, {{&(0x7f0000001280)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001600)=[{&(0x7f0000001300)="d8c1959f5d8d099467d34f3a7bfe58af5a29ce9dd5932ae5323249a79e769788c5ff27f300c5f85b9480c1426c8fc51a829a96cfbab941f05f709aa45f156d9d0c28edce83e3cce13623ff1254d8c0f5150041adfc1ea54576cf5d931306156922b4a893adc4c9b855f3687f05f1", 0x6e}, {&(0x7f0000001380)="01df5eb00a3b1f9a89c7d1938d602c51a0091327f6eb339f3c690181b0fc7169951940a0c7df6dcabd49384b935656a856f85f51b35184a2758f2338be72fcdbf2e7d44e33cc508d833cd39efeb19a07e3b02e50d6fb8fc96f249378a3465d72c5a7e12a204db482e0173139a2c3cbfca9b5e930930a9834daf506d418ed3bf0c0859a54100d86", 0x87}, {&(0x7f0000001440)="e03bd877da8325b4bd7f06ec6e1fa6a6907cf40d0fd12b68f4ab8fa14575d4b7b0bbc0ad54bab2939d56f6e3d9cb203863ebefde2f134ae398a980dc1414cbb4dc0d041b72f7d588dde402b2f34c89529169bf832e24e0c99b93175f4143365c26c30dad9727b7111cf8ce76a3e8800fe86949a6c10ea76b9d698c4460c7d2807d7dabda3b66e7bf4fb6fcbc8e4949179536194aa029752cd2e9934b34278c4e7e2c46cd08076b81f5e2f24f5567de36f411c059ccd8f8886ca334343c9fcca190b61443748102908c328c21c25e0cc325fda749a5f3aa836486c84c5bff3d8e1a1d3cd89137", 0xe6}, {&(0x7f0000001540)="332d66dfa01c0cdc77d2118a9c965a61b3dff2bb3c7fdd0866a7ff382e973b279a123f2acb10d4d8a45d995748954afbe41c64a0b2809d3549cc860cc2143ce67d8bc9fabb04ea2ee88091ebff4936a1a68c6c4728db4f4fb2d1690a7c7deb46ff22da63aa0751ef4bd88307c1765fd40302bf0331411438d28f2d5bf0ba8027299dacc6159371d7251c", 0x8a}], 0x4, &(0x7f0000001680)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r1}}}, @cred={{0x1c}}, @rights={{0xfffffffffffffc74, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r1}}}], 0xf0, 0x20001880}}], 0x4, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000440)='./file0\x00', 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) 7.281056055s ago: executing program 5 (id=3251): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB], 0x70}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, &(0x7f00000001c0)=0x100) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f0000070000"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r5}, 0x10) pivot_root(0x0, 0x0) 6.838899482s ago: executing program 0 (id=3253): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00'}, 0x80) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000200)={r0, r2, 0x1, 0x0, @void}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r3, 0x3) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000000340)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) syz_emit_ethernet(0xfdef, &(0x7f0000000080)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) 6.838252542s ago: executing program 0 (id=3254): gettid() timer_create(0x8, &(0x7f0000533fa0)={0x0, 0x25, 0x800000000004, @thr={&(0x7f00000010c0)="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", &(0x7f0000002180)="bee376a4b7a524a27be5f7c29431b4845ccfecec6650a9fca19c7dfdf8138020142621b90df15806d6c2d8957ba2bc83e6cd6b4be043d974735634ae6a7c9334ddcc42408ad2ef9ffa3901857978829a1f46152e7eb522bf10337a585b915d0494403869ca49acaab48a0fdfc0d5c457c11fc8cd9779a0daf66956e12b0d40d2ef0aa8b6a660197cd83fddb9d10e47"}}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = userfaultfd(0x80001) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r4) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x2a, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800"/16], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r6, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r7, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r8 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup=r8, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={@cgroup=r9, 0x24, 0x0, 0xffff, &(0x7f0000000000)=[0x0, 0x0, 0x0], 0x3, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x44}) readv(r1, &(0x7f0000002140)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1) r10 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) readv(r10, &(0x7f00000000c0)=[{&(0x7f0000000240)=""/40, 0x54}], 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x50) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r11, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) 6.140563553s ago: executing program 5 (id=3255): bpf$TOKEN_CREATE(0x24, &(0x7f0000000240), 0x8) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1b, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000018010f002020702500000000002020207b2af8ff005e45c6f8cf1d481b00000007010000f8ffffffb702000000610000b7030000000010008500000071002122e0fd0ab930ef00"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xffd, 0x7}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r5}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='mmap_lock_acquire_returned\x00', r6}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) socket$inet6(0xa, 0x80002, 0x0) sched_setaffinity(r1, 0x8, &(0x7f00000003c0)=0x3) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0x801, 0x1, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x0, 0x11291}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @empty}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000080}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) rt_sigaction(0x19, &(0x7f0000000000)={0xfffffffffffffffc, 0x44000006, 0x0}, 0x0, 0x8, &(0x7f0000000440)) r7 = memfd_create(&(0x7f00000006c0)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\xf2\xed\x04\x00\x00\x00\xd4N\x12\x9b\x1f\t\xd1Z+\x86T\x16\xf8\x01\x00\x00\x00\x9f+\x8d!\x0fG\xab\xc2\xdc\xa3\xb3\xae8\x9f9?\xefo\xa4k\x01\xb2>\xa1\x9c\x86xm\xe6\x9bZ4\x91\x1a\xdb\xdd\x89\xb9\xc0LF;\xd6\x84\x195\x06\x00\x00\x00~\xf3S\x12\"p^\xc1jP\x8a\xc6[\xbd\xe7q]\xdd\r\x1aZS\x01*\x1b\xfd\xbcMA\xdcq\xa1\x00\xb3\xf9\x91r\x7f\xdc\xf1\xc3G,\xdb\xccS\x15\x95b\x17\xab\xe4?\x96\x95\xa4kP\x99YO\xb8V\xd5p\x90X\xaaf', 0x0) fallocate(r7, 0x0, 0x400000000000000, 0x2) 6.028073635s ago: executing program 1 (id=3256): gettid() timer_create(0x8, &(0x7f0000533fa0)={0x0, 0x25, 0x800000000004, @thr={&(0x7f00000010c0)="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", &(0x7f0000002180)="bee376a4b7a524a27be5f7c29431b4845ccfecec6650a9fca19c7dfdf8138020142621b90df15806d6c2d8957ba2bc83e6cd6b4be043d974735634ae6a7c9334ddcc42408ad2ef9ffa3901857978829a1f46152e7eb522bf10337a585b915d0494403869ca49acaab48a0fdfc0d5c457c11fc8cd9779a0daf66956e12b0d40d2ef0aa8b6a660197cd83fddb9d10e47"}}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = userfaultfd(0x80001) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r4) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x2a, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800"/15], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r6, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r7 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup=r7, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={@cgroup=r8, 0x24, 0x0, 0xffff, &(0x7f0000000000)=[0x0, 0x0, 0x0], 0x3, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x44}) readv(r1, &(0x7f0000002140)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1) r9 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) readv(r9, &(0x7f00000000c0)=[{&(0x7f0000000240)=""/40, 0x54}], 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x50) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r10, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) 5.991052576s ago: executing program 0 (id=3257): r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x42, 0x1fe) fallocate(r0, 0x10, 0x10c6a, 0x7fff) socket(0x11, 0x800000003, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000340)='svc_xprt_enqueue\x00', r3, 0x0, 0x1000000000000200}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800"/24], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000001c0)='timer_start\x00', r3, 0x0, 0x6}, 0x5f) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000680)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) pidfd_send_signal(0xffffffffffffffff, 0x28, 0x0, 0x0) recvmmsg(r4, &(0x7f0000001f40)=[{{&(0x7f0000000380)=@phonet, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000780)=""/103, 0x67}, {&(0x7f0000000800)=""/84, 0x54}, {&(0x7f0000000640)=""/62, 0x3e}, {&(0x7f0000000940)=""/194, 0xc2}, {&(0x7f0000000880)=""/9, 0x9}, {&(0x7f0000000a40)=""/89, 0x59}, {&(0x7f0000000ac0)=""/102, 0x66}], 0x7, &(0x7f0000000bc0)=""/192, 0xc0}, 0x40}, {{0x0, 0x0, &(0x7f0000001e00)=[{&(0x7f0000000c80)=""/195, 0xc3}, {&(0x7f0000000d80)=""/6, 0x6}, {&(0x7f0000000dc0)=""/53, 0x35}, {&(0x7f0000000e00)=""/4096, 0x1000}], 0x4, &(0x7f0000001e40)=""/206, 0xce}, 0x6}], 0x2, 0x2100, 0x0) r6 = socket$pptp(0x18, 0x1, 0x2) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000400)='./file0\x00', 0x2218448, &(0x7f00000003c0)=ANY=[], 0xfd, 0x1de, &(0x7f0000000440)="$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") r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10012, r7, 0x0) madvise(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3) read$FUSE(r7, &(0x7f0000004100)={0x2020}, 0x2020) bind$pptp(r6, &(0x7f0000000000)={0x18, 0x2, {0x0, @dev={0xac, 0x14, 0x14, 0x37}}}, 0x1e) connect$pptp(r6, &(0x7f0000000080)={0x18, 0x2, {0x4, @rand_addr=0x64010102}}, 0x1e) 5.233099877s ago: executing program 5 (id=3258): creat(&(0x7f0000000140)='./file1\x00', 0x67) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfec8d000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b000085000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4000005) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e000100000000000000000000000000000000000000000a00308000000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000054c60f4055659301b8005e33f900"/87], 0xb8}}, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000600)=@bridge_getneigh={0x20, 0x1e, 0xb7b6511a36acb75d}, 0x20}}, 0x0) 5.136604169s ago: executing program 1 (id=3259): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7fffffff, 0x200000000000008a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x0) recvmmsg(r3, &(0x7f0000007700), 0x318, 0xfc0, 0x0) socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000140)) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYRES32], 0xfc}}, 0x0) r5 = open_tree(0xffffffffffffff9c, 0x0, 0x89101) openat$cgroup_ro(r5, &(0x7f00000002c0)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_udp(0x2, 0x2, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$unix(0x1, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$incfs(r5, &(0x7f0000000000)='.log\x00', 0x400000, 0x2) 4.933045302s ago: executing program 3 (id=3260): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00'}, 0x80) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) getsockopt$inet6_int(r2, 0x29, 0x18, 0x0, &(0x7f0000000180)) r3 = fsmount(r1, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000200)={r0, r3, 0x1, 0x0, @void}, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$tipc(0x1e, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) pivot_root(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0/../file0/file0\x00') listen(r4, 0x3) r5 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x101040) readv(r5, &(0x7f00000009c0)=[{&(0x7f0000000840)=""/91, 0x5b}], 0x1) ioctl$EVIOCGABS20(r5, 0x40044591, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000240)=ANY=[@ANYRESOCT, @ANYRES32=r3, @ANYRESHEX=r5, @ANYBLOB="5c02000090780000"], 0x0) 4.837518244s ago: executing program 5 (id=3261): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) syz_open_dev$MSR(0x0, 0x0, 0x0) ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, 0x0) setresuid(0x0, 0x0, 0xffffffffffffffff) syz_mount_image$f2fs(&(0x7f0000000100), &(0x7f0000000040)='./bus\x00', 0x2000410, &(0x7f00000001c0)=ANY=[@ANYBLOB="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", @ANYRES8=0x0], 0xfe, 0x555e, &(0x7f0000005f80)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x140) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0xd0) write(r1, &(0x7f0000004200)='t', 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) sendfile(r1, r0, 0x0, 0x7ffff000) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) mount(0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100), 0xfffffd9d) r4 = socket(0x1e, 0x4, 0x0) connect$tipc(r4, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x1, 0x4}}, 0x10) sendfile(r4, r3, 0x0, 0x8010002b) connect$tipc(r4, &(0x7f0000000800)=@id={0x1e, 0x3, 0x1, {0x4e20}}, 0x10) gettid() timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) userfaultfd(0x80001) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000006c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="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"], &(0x7f0000000580)=""/240, 0xd4, 0xf0, 0x1, 0x800, 0x8fe5495fb2b00d3c}, 0x28) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001d40)={&(0x7f00000009c0)='sched_switch\x00'}, 0x10) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000100000000000000000850000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kmem_cache_free\x00', r5}, 0x10) 4.837128974s ago: executing program 3 (id=3262): bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x80, 0x0) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x20c006, &(0x7f0000000480)={[{@grpjquota}, {@mblk_io_submit}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@discard}, {@grpquota}], [{@seclabel}]}, 0x1, 0x446, &(0x7f0000000d40)="$eJzs28tvG8UfAPDv2kn6/P1qqvLoAwgURMQjadJSeuACAokDSEhwKMeQpFWo26AmSLSKICBUjqgSd8QRib+AE1wQcELiCndUqUK5tMDFaOPdxHbttA5ONtSfj7TJzO44M1/vjj07kw2gbw2nP5KIvRHxa0Tsq2ebCwzXf91cXpz6c3lxKola7Y0/kpVyN5YXp/Ki+ev25JmBiNInSRxuU+/8pcvnJqvVmYtZfmzh/Ltj85cuPzN7fvLszNmZCxOnTp04Pv7cyYlnexJnGteNQx/MHTn4yltXX5s6ffXtH79O8vhb4uiR4fUOPl6r9bi6Yv2vIZ0MFNgQulKud9MYXOn/+6IcaydvX7z8caGNAzZVrVar3df58FINuIslUXQLgGLkX/Tp/W++bdHQY1u4/kL9BiiN+2a21Y8MRCkrM9hyf9tLwxFxeumvL9ItNmceAgCgybfp+OfpbPzXtPBTisZ5of9nayiViLgnIvZHxMmIOBAR90aslL0/Ih7osv7WRZJbxz+la13+ya6k47/ns7Wt5vFfPvqLSjni73y4XInB5MxsdeZY9p6MxOCOND++Th3fvfTLZ52ONY7/0i2tPx8LZu24NrCj+TXTkwuT/ybmRtc/ijg00C7+ZHUlIL0sDkbEoQ3WMfvkV0c6Hbt9/M2GGjM9WGeqfRnxRP38L0VL/Llk/fXJsZ1RnTk2ll8Vt/rp5yuvd6q/2/h7LT3/u9te/6vxV5LG9dr57uu48tunHe9pNnr9DyVvNu17f3Jh4eJ4xFDyar3RjfsnWspNrJVP4x852r7/74+1d+JwRKQX8YMR8VBEPJy1/ZGIeDQijq4T/w8vPvZO856ki/g3Vxr/dFfnfy0xFK172ifK577/pqnSSnQRf3r+T6ykRrI9d/L5dyft2tjVDAAAAP89pYjYG0lpdDVdKo2O1v+H/0DsLlXn5heeOjP33oXp+jMClRgs5TNd9fng+nzoeHZbn+cnWvLHs3njz8u7VvKjU3PV6aKDhz63p0P/T/1eLrp1wKbzvBb0L/0f+pf+D/1L/4f+1ab/7yqiHcDWa/f9/2EB7QC2Xkv/t+wHfcT9P/Qv/R/6l/4PfWl+V9z+Ifntmti5PZrRn4koFVd7PkNV+JtwFycK/mACAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADokX8CAAD//2Ts5lU=") r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x10}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) pwritev2(r0, &(0x7f0000000240), 0x0, 0x7c00, 0x0, 0x3) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000000000097000040"]) 4.742527085s ago: executing program 0 (id=3263): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='br_fdb_add\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000005c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000001c0001000000", @ANYRES32=r4, @ANYBLOB="4000aa000a0002"], 0x28}}, 0x0) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) r6 = socket$netlink(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x14, 0x2, 0x1, 0x201, 0x0, 0x0, {0x5, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040) r7 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZEX(r7, 0x560a, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x2, 0x3, 0x3}) syz_usb_control_io$hid(r5, 0x0, 0x0) r8 = syz_open_dev$evdev(&(0x7f00000000c0), 0x3f, 0xa0000) ioctl$EVIOCGKEYCODE_V2(r8, 0x80284504, &(0x7f0000000100)=""/101) 4.741375465s ago: executing program 1 (id=3264): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000180), 0x3ef, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCDELDLCI(r2, 0x8981, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f0000070000"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r4}, &(0x7f0000000040), &(0x7f0000000080)=r5}, 0x20) r6 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r6, 0x0, 0x23, &(0x7f0000000100)={@multicast2, @loopback}, 0xc) r7 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000005c0)="390000001300030500000007fd17e5ffff08000400000000000000000000200000000000000000ed5d6015cb555d9b27f33c36f517f28066e37fc7eb4c961558d643cf047ffb33efbe04d4591450dc77a6419e13bae0ba0c56d9236dc118bdf292935bd5b9246e6ee838cb2071e064c4fffd63efe265f0a81e305155fd9b78ec0b15d33c7088b9fba3a76a761451533bf02162ff92d67d299b323f94f22ba4c318ad5bb963a6b26202499d050ab416ec380c3edef83decb14d66fd9b1daacb8257d8c16f76d482863976a366186c03ec680c1be212569f3c07949063c3727b4fef167bc20e6452ac91", 0xe9}], 0x1) writev(r7, 0x0, 0x0) setsockopt$inet_mreqsrc(r6, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) 3.330542587s ago: executing program 1 (id=3265): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB], 0x70}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, &(0x7f00000001c0)=0x100) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f0000070000"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r5}, 0x10) pivot_root(0x0, 0x0) 3.330178417s ago: executing program 3 (id=3266): creat(&(0x7f0000000140)='./file1\x00', 0x67) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfec8d000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b000085000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4000005) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e000100000000000000000000000000000000000000000a00308000000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000054c60f4055659301b8005e33f9000000000000000000000000000000000000000000000000000000000000008000"/115], 0xb8}}, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e000100000000000000000000000000000000000000000a0040000000"], 0xb8}}, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000600)=@bridge_getneigh={0x20, 0x1e, 0xb7b6511a36acb75d}, 0x20}}, 0x0) 3.204542069s ago: executing program 2 (id=3267): gettid() timer_create(0x8, &(0x7f0000533fa0)={0x0, 0x25, 0x800000000004, @thr={&(0x7f00000010c0)="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", &(0x7f0000002180)="bee376a4b7a524a27be5f7c29431b4845ccfecec6650a9fca19c7dfdf8138020142621b90df15806d6c2d8957ba2bc83e6cd6b4be043d974735634ae6a7c9334ddcc42408ad2ef9ffa3901857978829a1f46152e7eb522bf10337a585b915d0494403869ca49acaab48a0fdfc0d5c457c11fc8cd9779a0daf66956e12b0d40d2ef0aa8b6a660197cd83fddb9d10e47"}}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = userfaultfd(0x80001) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r4) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x2a, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800"/16], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r6, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r7, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r8 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup=r8, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={@cgroup=r9, 0x24, 0x0, 0xffff, &(0x7f0000000000)=[0x0, 0x0, 0x0], 0x3, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x44}) readv(r1, &(0x7f0000002140)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1) r10 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) readv(r10, &(0x7f00000000c0)=[{&(0x7f0000000240)=""/40, 0x54}], 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x50) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r11, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) 2.376002163s ago: executing program 3 (id=3268): bpf$TOKEN_CREATE(0x24, &(0x7f0000000240), 0x8) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1b, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000018010f002020702500000000002020207b2af8ff005e45c6f8cf1d481b00000007010000f8ffffffb702000000610000b7030000000010008500000071002122e0fd0ab930ef00"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xffd, 0x7}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r5}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='mmap_lock_acquire_returned\x00', r6}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) socket$inet6(0xa, 0x80002, 0x0) sched_setaffinity(r1, 0x8, &(0x7f00000003c0)=0x3) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0x801, 0x1, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x0, 0x11291}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @empty}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000080}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) rt_sigaction(0x19, &(0x7f0000000000)={0xfffffffffffffffc, 0x44000006, 0x0}, 0x0, 0x8, &(0x7f0000000440)) r7 = memfd_create(&(0x7f00000006c0)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\xf2\xed\x04\x00\x00\x00\xd4N\x12\x9b\x1f\t\xd1Z+\x86T\x16\xf8\x01\x00\x00\x00\x9f+\x8d!\x0fG\xab\xc2\xdc\xa3\xb3\xae8\x9f9?\xefo\xa4k\x01\xb2>\xa1\x9c\x86xm\xe6\x9bZ4\x91\x1a\xdb\xdd\x89\xb9\xc0LF;\xd6\x84\x195\x06\x00\x00\x00~\xf3S\x12\"p^\xc1jP\x8a\xc6[\xbd\xe7q]\xdd\r\x1aZS\x01*\x1b\xfd\xbcMA\xdcq\xa1\x00\xb3\xf9\x91r\x7f\xdc\xf1\xc3G,\xdb\xccS\x15\x95b\x17\xab\xe4?\x96\x95\xa4kP\x99YO\xb8V\xd5p\x90X\xaaf', 0x0) fallocate(r7, 0x0, 0x400000000000000, 0x2) 2.369362382s ago: executing program 1 (id=3278): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000180), 0x3ef, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCDELDLCI(r2, 0x8981, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f0000070000"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r4}, &(0x7f0000000040), &(0x7f0000000080)=r5}, 0x20) r6 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r6, 0x0, 0x23, &(0x7f0000000100)={@multicast2, @loopback}, 0xc) r7 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000005c0)="390000001300030500000007fd17e5ffff08000400000000000000000000200000000000000000ed5d6015cb555d9b27f33c36f517f28066e37fc7eb4c961558d643cf047ffb33efbe04d4591450dc77a6419e13bae0ba0c56d9236dc118bdf292935bd5b9246e6ee838cb2071e064c4fffd63efe265f0a81e305155fd9b78ec0b15d33c7088b9fba3a76a761451533bf02162ff92d67d299b323f94f22ba4c318ad5bb963a6b26202499d050ab416ec380c3edef83decb14d66fd9b1daacb8257d8c16f76d482863976a366186c03ec680c1be212569f3c07949063c3727b4fef167bc20e6452ac91", 0xe9}], 0x1) writev(r7, 0x0, 0x0) setsockopt$inet_mreqsrc(r6, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) 2.368266372s ago: executing program 2 (id=3269): gettid() timer_create(0x8, &(0x7f0000533fa0)={0x0, 0x25, 0x800000000004, @thr={&(0x7f00000010c0)="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", &(0x7f0000002180)="bee376a4b7a524a27be5f7c29431b4845ccfecec6650a9fca19c7dfdf8138020142621b90df15806d6c2d8957ba2bc83e6cd6b4be043d974735634ae6a7c9334ddcc42408ad2ef9ffa3901857978829a1f46152e7eb522bf10337a585b915d0494403869ca49acaab48a0fdfc0d5c457c11fc8cd9779a0daf66956e12b0d40d2ef0aa8b6a660197cd83fddb9d10e47"}}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = userfaultfd(0x80001) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r4) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x2a, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800"/15], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r6, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r7 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup=r7, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={@cgroup=r8, 0x24, 0x0, 0xffff, &(0x7f0000000000)=[0x0, 0x0, 0x0], 0x3, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x44}) readv(r1, &(0x7f0000002140)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1) r9 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) readv(r9, &(0x7f00000000c0)=[{&(0x7f0000000240)=""/40, 0x54}], 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x50) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r10, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) 1.836462791s ago: executing program 5 (id=3270): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000180), 0x3ef, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCDELDLCI(r2, 0x8981, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f0000070000"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r4}, &(0x7f0000000040), &(0x7f0000000080)=r5}, 0x20) r6 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r6, 0x0, 0x23, &(0x7f0000000100)={@multicast2, @loopback}, 0xc) socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000005c0)="390000001300030500000007fd17e5ffff08000400000000000000000000200000000000000000ed5d6015cb555d9b27f33c36f517f28066e37fc7eb4c961558d643cf047ffb33efbe04d4591450dc77a6419e13bae0ba0c56d9236dc118bdf292935bd5b9246e6ee838cb2071e064c4fffd63efe265f0a81e305155fd9b78ec0b15d33c7088b9fba3a76a761451533bf02162ff92d67d299b323f94f22ba4c318ad5bb963a6b26202499d050ab416ec380c3edef83decb14d66fd9b1daacb8257d8c16f76d482863976a366186c03ec680c1be212569f3c07949063c3727b4fef167bc20e6452ac91", 0xe9}], 0x1) setsockopt$inet_mreqsrc(r6, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 1.463962537s ago: executing program 1 (id=3271): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000200)='sys_enter\x00', r0}, 0x10) sysinfo(&(0x7f0000000a00)=""/4096) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x2, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000280)={0x0, 'batadv_slave_0\x00', {0xffffffff}, 0x30a}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000740)='scsi_dispatch_cmd_start\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x50) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000180000000000000000000018110000", @ANYRES32, @ANYRESHEX=r3], 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000300000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r4, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x101400, 0x0) ioctl$TIOCGPGRP(r6, 0x540f, 0x0) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES16], 0x0) syz_usb_control_io(r7, 0x0, 0x0) syz_usb_control_io$hid(r7, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220f0000000bf896e4047965aef792039c"], 0x0}, 0x0) r8 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) ioctl$HIDIOCGUSAGE(r8, 0x501c4814, &(0x7f00000000c0)={0x2, 0xffffffff, 0x0, 0x0, 0x4e496f8}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r5}, 0x10) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r9}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r10, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) 1.373922988s ago: executing program 2 (id=3272): creat(&(0x7f0000000140)='./file1\x00', 0x67) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfec8d000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b000085000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4000005) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e000100000000000000000000000000000000000000000a00308000000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000054c60f4055659301b8005e33f900"/87], 0xb8}}, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000600)=@bridge_getneigh={0x20, 0x1e, 0xb7b6511a36acb75d}, 0x20}}, 0x0) 1.340779469s ago: executing program 3 (id=3273): r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x42, 0x1fe) fallocate(r0, 0x10, 0x10c6a, 0x7fff) socket(0x11, 0x800000003, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeef, 0x8031, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000340)='svc_xprt_enqueue\x00', r3, 0x0, 0x1000000000000200}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800"/24], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000001c0)='timer_start\x00', r3, 0x0, 0x6}, 0x5f) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000680)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) pidfd_send_signal(0xffffffffffffffff, 0x28, 0x0, 0x0) recvmmsg(r4, &(0x7f0000001f40)=[{{&(0x7f0000000380)=@phonet, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000780)=""/103, 0x67}, {&(0x7f0000000800)=""/84, 0x54}, {&(0x7f0000000640)=""/62, 0x3e}, {&(0x7f0000000940)=""/194, 0xc2}, {&(0x7f0000000880)=""/9, 0x9}, {&(0x7f0000000a40)=""/89, 0x59}, {&(0x7f0000000ac0)=""/102, 0x66}], 0x7, &(0x7f0000000bc0)=""/192, 0xc0}, 0x40}, {{0x0, 0x0, &(0x7f0000001e00)=[{&(0x7f0000000c80)=""/195, 0xc3}, {&(0x7f0000000d80)=""/6, 0x6}, {&(0x7f0000000dc0)=""/53, 0x35}, {&(0x7f0000000e00)=""/4096, 0x1000}], 0x4, &(0x7f0000001e40)=""/206, 0xce}, 0x6}], 0x2, 0x2100, 0x0) r6 = socket$pptp(0x18, 0x1, 0x2) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000400)='./file0\x00', 0x2218448, &(0x7f00000003c0)=ANY=[], 0xfd, 0x1de, &(0x7f0000000440)="$eJzsljurE0EUx/8zk7vJFUWwtLHwggq6d3ejIsgF01hZCD6ChWAwa4iuBpIUJiAxn8DezsKPIWjrh5Boo02stF6Zx2YnIZt3iHDPrzj578zZ2fNYzgYEQRxbfnz/O4j/HP0sADiJA+TN+i+R+nDL/1vh95svd26X3z3++DU/cPennRnHiz8/B+BzSaA9unf87gPzex98pB+A45LRZTC4Rj8Bx0OjQzA8Mvq5pRvS33Wf1aPQfdqIqlJ40vjSBNIUJ+Mb9hmqVnzM2m91ui8qURQ2tyjm1W9Y4jhK4hPj+y50tJ5VPx8cvtFFMNwz+gbySW10Saz8z+bS/MXM/B0sleTNy8CSFZGhLPGIM6cyW+UAWK0xe5vrPd6aV3ab71CGEFAi6eiGThYZWwKbzUIOpjk+yO2gqmu9UdN7IWZ259MtfU+yEvf0tfI5ndHcuLdghA5WySudT/EHhgvW/NSj5L361MgWHrY63Sv1l5VaWAtfBUHxunfV864Fh2oQaTtj/u2r+XQiPX/qN0niMAevK+1209d2dB1oOzlxmYlv2Oe4eD5dcybOLSRiL13jypeNbRMEQfxPnANTM1nN5USYrwms/7p3dxgjQRAEQRAEQRAEQRDr8S8AAP//p+Y+dA==") r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10012, r7, 0x0) madvise(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3) read$FUSE(r7, &(0x7f0000004100)={0x2020}, 0x2020) bind$pptp(r6, &(0x7f0000000000)={0x18, 0x2, {0x0, @dev={0xac, 0x14, 0x14, 0x37}}}, 0x1e) connect$pptp(r6, &(0x7f0000000080)={0x18, 0x2, {0x4, @rand_addr=0x64010102}}, 0x1e) 108.471218ms ago: executing program 0 (id=3274): bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001c40)=@newtaction={0x84, 0x30, 0x1, 0xe4ff, 0x0, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x81000000, 0x800, 0x0, 0x0, {0x0, 0x1}, {}, 0xffffffff}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x84}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$incfs(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x1, 0x0) mount$incfs(&(0x7f0000000700)='.\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x40c, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f00000007c0)=""/4096, 0x1000) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x18) getresuid(&(0x7f00000003c0)=0x0, &(0x7f0000000400), &(0x7f0000000440)) newfstatat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) stat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_tcp(&(0x7f0000000300), &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x30400, &(0x7f0000000600)={'trans=tcp,', {'port', 0x3d, 0x4e22}, 0x2c, {[{@nodevmap}, {@privport}, {@access_any}, {@dfltuid={'dfltuid', 0x3d, r3}}, {@dfltuid={'dfltuid', 0x3d, r4}}], [{@fowner_gt={'fowner>', r5}}]}}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x8, &(0x7f0000000500)=@framed={{}, [@jmp={0x5, 0x0, 0xa, 0x0, 0x0, 0x1}, @exit, @call={0x85, 0x0, 0x0, 0x5a}, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}]}, &(0x7f00000000c0)='GPL\x00'}, 0x90) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1b, 0x4, 0x4, 0x2, 0xa10, 0x1, 0x10001}, 0x50) sendto$inet(r1, &(0x7f0000000200)="68fee5df61938f77b3e79a21e536ec12c1fff8a3c4b682e9550fecad2b80ce90b66a9da6d41c692ed4f4b9dc6f51473a4b2595c20afe", 0x36, 0x8010, &(0x7f0000000280)={0x2, 0x4e24, @loopback}, 0x10) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r6, 0x0, 0x0, 0x14}, 0x20) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x4f2a80) 108.015188ms ago: executing program 2 (id=3275): r0 = socket(0x10, 0x803, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$TIPC_NL_LINK_SET(r0, 0x0, 0x830) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp6\x00') pread64(r6, &(0x7f0000000800)=""/254, 0xfe, 0xffffffff) 107.496548ms ago: executing program 5 (id=3276): bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x80, 0x0) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x20c006, &(0x7f0000000480)={[{@grpjquota}, {@mblk_io_submit}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@discard}, {@grpquota}], [{@seclabel}]}, 0x1, 0x446, &(0x7f0000000d40)="$eJzs28tvG8UfAPDv2kn6/P1qqvLoAwgURMQjadJSeuACAokDSEhwKMeQpFWo26AmSLSKICBUjqgSd8QRib+AE1wQcELiCndUqUK5tMDFaOPdxHbttA5ONtSfj7TJzO44M1/vjj07kw2gbw2nP5KIvRHxa0Tsq2ebCwzXf91cXpz6c3lxKola7Y0/kpVyN5YXp/Ki+ev25JmBiNInSRxuU+/8pcvnJqvVmYtZfmzh/Ltj85cuPzN7fvLszNmZCxOnTp04Pv7cyYlnexJnGteNQx/MHTn4yltXX5s6ffXtH79O8vhb4uiR4fUOPl6r9bi6Yv2vIZ0MFNgQulKud9MYXOn/+6IcaydvX7z8caGNAzZVrVar3df58FINuIslUXQLgGLkX/Tp/W++bdHQY1u4/kL9BiiN+2a21Y8MRCkrM9hyf9tLwxFxeumvL9ItNmceAgCgybfp+OfpbPzXtPBTisZ5of9nayiViLgnIvZHxMmIOBAR90aslL0/Ih7osv7WRZJbxz+la13+ya6k47/ns7Wt5vFfPvqLSjni73y4XInB5MxsdeZY9p6MxOCOND++Th3fvfTLZ52ONY7/0i2tPx8LZu24NrCj+TXTkwuT/ybmRtc/ijg00C7+ZHUlIL0sDkbEoQ3WMfvkV0c6Hbt9/M2GGjM9WGeqfRnxRP38L0VL/Llk/fXJsZ1RnTk2ll8Vt/rp5yuvd6q/2/h7LT3/u9te/6vxV5LG9dr57uu48tunHe9pNnr9DyVvNu17f3Jh4eJ4xFDyar3RjfsnWspNrJVP4x852r7/74+1d+JwRKQX8YMR8VBEPJy1/ZGIeDQijq4T/w8vPvZO856ki/g3Vxr/dFfnfy0xFK172ifK577/pqnSSnQRf3r+T6ykRrI9d/L5dyft2tjVDAAAAP89pYjYG0lpdDVdKo2O1v+H/0DsLlXn5heeOjP33oXp+jMClRgs5TNd9fng+nzoeHZbn+cnWvLHs3njz8u7VvKjU3PV6aKDhz63p0P/T/1eLrp1wKbzvBb0L/0f+pf+D/1L/4f+1ab/7yqiHcDWa/f9/2EB7QC2Xkv/t+wHfcT9P/Qv/R/6l/4PfWl+V9z+Ifntmti5PZrRn4koFVd7PkNV+JtwFycK/mACAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADokX8CAAD//2Ts5lU=") r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x10}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) pwritev2(r0, &(0x7f0000000240), 0x0, 0x7c00, 0x0, 0x3) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000000000097000040"]) 0s ago: executing program 0 (id=3277): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x94) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) gettid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000380)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) unshare(0x20000600) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x10, 0x3, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x2000081, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="8e29b5c6d59d9a8fa9f1222c", @ANYRESOCT, @ANYBLOB="d90f55b2fe87bccaae179697e871353358a10c2f9b664f24e6a9112c9e2e2e3003fa09469b1b", @ANYBLOB], 0x8, 0x23e, &(0x7f0000000bc0)="$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") kernel console output (not intermixed with test programs): e_slave_1 left promiscuous mode [ 984.872365][ T314] microsoft 0003:045E:07DA.004B: no inputs found [ 984.884843][ T314] microsoft 0003:045E:07DA.004B: could not initialize ff, continuing anyway [ 984.904586][ T314] usb 4-1: USB disconnect, device number 34 [ 984.910849][ T7688] bridge0: port 2(bridge_slave_1) entered disabled state [ 984.927915][ T7688] device bridge_slave_0 left promiscuous mode [ 984.934106][ T7688] bridge0: port 1(bridge_slave_0) entered disabled state [ 984.949496][ T7688] device veth1_macvtap left promiscuous mode [ 984.958797][ T7688] device veth0_vlan left promiscuous mode [ 985.451554][T15394] FAULT_INJECTION: forcing a failure. [ 985.451554][T15394] name failslab, interval 1, probability 0, space 0, times 0 [ 985.464303][T15394] CPU: 0 PID: 15394 Comm: syz.5.3031 Not tainted 6.1.141-syzkaller-00036-g7011769d221c #0 [ 985.474331][T15394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 985.484426][T15394] Call Trace: [ 985.487739][T15394] [ 985.490683][T15394] __dump_stack+0x21/0x24 [ 985.495030][T15394] dump_stack_lvl+0xee/0x150 [ 985.499633][T15394] ? __cfi_dump_stack_lvl+0x8/0x8 [ 985.504669][T15394] dump_stack+0x15/0x24 [ 985.508849][T15394] should_fail_ex+0x3d4/0x520 [ 985.513734][T15394] ? security_file_alloc+0x33/0x130 [ 985.519051][T15394] __should_failslab+0xac/0xf0 [ 985.523941][T15394] should_failslab+0x9/0x20 [ 985.528462][T15394] kmem_cache_alloc+0x3b/0x330 [ 985.533239][T15394] ? __alloc_file+0x28/0x2a0 [ 985.537920][T15394] security_file_alloc+0x33/0x130 [ 985.542953][T15394] __alloc_file+0xb5/0x2a0 [ 985.547377][T15394] alloc_empty_file+0x97/0x180 [ 985.552171][T15394] path_openat+0xf4/0x2f50 [ 985.556605][T15394] ? kasan_set_track+0x4b/0x70 [ 985.561369][T15394] ? kasan_save_alloc_info+0x25/0x30 [ 985.566683][T15394] ? __kasan_slab_alloc+0x72/0x80 [ 985.571725][T15394] ? kmem_cache_alloc+0x16e/0x330 [ 985.576772][T15394] ? getname_flags+0xb9/0x500 [ 985.581471][T15394] ? getname+0x19/0x20 [ 985.585567][T15394] ? do_sys_openat2+0xcb/0x7e0 [ 985.590354][T15394] ? __x64_sys_openat+0x136/0x160 [ 985.595387][T15394] ? x64_sys_call+0x783/0x9a0 [ 985.600066][T15394] ? do_syscall_64+0x4c/0xa0 [ 985.604665][T15394] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 985.610743][T15394] ? do_filp_open+0x3c0/0x3c0 [ 985.615600][T15394] do_filp_open+0x1c1/0x3c0 [ 985.620113][T15394] ? __cfi_do_filp_open+0x10/0x10 [ 985.625147][T15394] ? alloc_fd+0x4e6/0x590 [ 985.629495][T15394] do_sys_openat2+0x185/0x7e0 [ 985.634178][T15394] ? bpf_trace_run2+0x104/0x250 [ 985.639037][T15394] ? do_sys_open+0xe0/0xe0 [ 985.643459][T15394] ? __cfi_bpf_trace_run2+0x10/0x10 [ 985.648664][T15394] ? ksys_write+0x1eb/0x240 [ 985.653178][T15394] ? __cfi_ksys_write+0x10/0x10 [ 985.658039][T15394] __x64_sys_openat+0x136/0x160 [ 985.662914][T15394] x64_sys_call+0x783/0x9a0 [ 985.667443][T15394] do_syscall_64+0x4c/0xa0 [ 985.671869][T15394] ? clear_bhb_loop+0x30/0x80 [ 985.676555][T15394] ? clear_bhb_loop+0x30/0x80 [ 985.681238][T15394] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 985.687155][T15394] RIP: 0033:0x7f2f8838e929 [ 985.691577][T15394] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 985.711186][T15394] RSP: 002b:00007f2f891dd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 985.719606][T15394] RAX: ffffffffffffffda RBX: 00007f2f885b6160 RCX: 00007f2f8838e929 [ 985.727587][T15394] RDX: 0000000000200002 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 985.735663][T15394] RBP: 00007f2f891dd090 R08: 0000000000000000 R09: 0000000000000000 [ 985.743642][T15394] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 985.751614][T15394] R13: 0000000000000000 R14: 00007f2f885b6160 R15: 00007ffea91e2118 [ 985.759596][T15394] [ 985.961705][T15384] loop0: detected capacity change from 0 to 40427 [ 985.968805][T15384] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 985.976770][T15384] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 985.985050][ T4964] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 985.993657][T15384] F2FS-fs (loop0): invalid crc value [ 986.000545][T15384] F2FS-fs (loop0): Found nat_bits in checkpoint [ 986.048356][T15209] EXT4-fs (loop3): unmounting filesystem. [ 986.054591][T15384] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 986.061981][T15384] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 986.176072][ T4964] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 986.194948][ T4964] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 986.220780][ T4964] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 986.239766][ T4964] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 986.255853][ T4964] usb 3-1: config 0 descriptor?? [ 986.375665][T15384] bio_check_eod: 8 callbacks suppressed [ 986.375688][T15384] syz.0.3022: attempt to access beyond end of device [ 986.375688][T15384] loop0: rw=2049, sector=77824, nr_sectors = 2128 limit=40427 [ 986.442477][T15384] syz.0.3022: attempt to access beyond end of device [ 986.442477][T15384] loop0: rw=2049, sector=79952, nr_sectors = 1968 limit=40427 [ 986.490055][T15384] syz.0.3022: attempt to access beyond end of device [ 986.490055][T15384] loop0: rw=2049, sector=49152, nr_sectors = 4096 limit=40427 [ 986.521946][T15402] loop5: detected capacity change from 0 to 512 [ 986.532416][T15402] EXT4-fs: Ignoring removed mblk_io_submit option [ 986.541917][T15404] loop3: detected capacity change from 0 to 512 [ 986.555438][T15402] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 986.568333][T15384] syz.0.3022: attempt to access beyond end of device [ 986.568333][T15384] loop0: rw=2049, sector=57344, nr_sectors = 17368 limit=40427 [ 986.576078][T15404] EXT4-fs: Ignoring removed mblk_io_submit option [ 986.618859][T15384] syz.0.3022: attempt to access beyond end of device [ 986.618859][T15384] loop0: rw=2049, sector=74712, nr_sectors = 3112 limit=40427 [ 986.635892][T15404] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 986.652026][T15402] EXT4-fs (loop5): 1 truncate cleaned up [ 986.655735][T15384] syz.0.3022: attempt to access beyond end of device [ 986.655735][T15384] loop0: rw=2049, sector=81920, nr_sectors = 3952 limit=40427 [ 986.661175][T15404] EXT4-fs (loop3): 1 truncate cleaned up [ 986.678306][T15402] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 986.687582][T15404] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 986.720396][T15353] syz-executor: attempt to access beyond end of device [ 986.720396][T15353] loop0: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 986.809668][ T4964] plantronics 0003:047F:FFFF.004C: unknown main item tag 0x0 [ 986.817399][ T4964] plantronics 0003:047F:FFFF.004C: No inputs registered, leaving [ 986.826765][ T4964] plantronics 0003:047F:FFFF.004C: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 987.238298][T15415] loop1: detected capacity change from 0 to 256 [ 987.248089][T15415] FAT-fs (loop1): bogus number of FAT sectors [ 987.254639][T15415] FAT-fs (loop1): Can't find a valid FAT filesystem [ 988.217616][T15209] EXT4-fs (loop3): unmounting filesystem. [ 988.366275][ T2250] EXT4-fs (loop5): unmounting filesystem. [ 988.403999][T15421] loop3: detected capacity change from 0 to 16 [ 988.411169][T15421] erofs: (device loop3): mounted with root inode @ nid 36. [ 988.419876][T15421] erofs: (device loop3): z_erofs_readahead: readahead error at page 2 @ nid 89 [ 988.429215][T15421] erofs: (device loop3): z_erofs_readahead: readahead error at page 1 @ nid 89 [ 988.438315][T15421] erofs: (device loop3): z_erofs_readahead: readahead error at page 0 @ nid 89 [ 988.447304][T15421] erofs: (device loop3): z_erofs_pcluster_readmore: readmore error at page 0 @ nid 89 [ 988.456915][T15421] erofs: (device loop3): z_erofs_pcluster_readmore: readmore error at page 0 @ nid 89 [ 988.466506][T15421] erofs: (device loop3): z_erofs_read_folio: failed to read, err [-117] [ 988.538558][T15427] loop5: detected capacity change from 0 to 512 [ 988.545357][T15427] EXT4-fs: Ignoring removed mblk_io_submit option [ 988.564356][T15427] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 988.578601][T15427] EXT4-fs (loop5): 1 truncate cleaned up [ 988.584868][T15427] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 989.004835][T15432] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3038'. [ 989.014819][T15432] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3038'. [ 989.023878][T15432] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3038'. [ 989.675324][ T314] usb 3-1: USB disconnect, device number 34 [ 989.851837][T15443] loop3: detected capacity change from 0 to 16 [ 989.853155][ T2250] EXT4-fs (loop5): unmounting filesystem. [ 989.864265][T15443] erofs: (device loop3): mounted with root inode @ nid 36. [ 989.873262][T15443] erofs: (device loop3): z_erofs_readahead: readahead error at page 2 @ nid 89 [ 989.882903][T15443] erofs: (device loop3): z_erofs_readahead: readahead error at page 1 @ nid 89 [ 989.892008][T15443] erofs: (device loop3): z_erofs_readahead: readahead error at page 0 @ nid 89 [ 989.901034][T15443] erofs: (device loop3): z_erofs_pcluster_readmore: readmore error at page 0 @ nid 89 [ 989.910952][T15443] erofs: (device loop3): z_erofs_pcluster_readmore: readmore error at page 0 @ nid 89 [ 989.920551][T15443] erofs: (device loop3): z_erofs_read_folio: failed to read, err [-117] [ 989.981673][T15451] loop3: detected capacity change from 0 to 512 [ 990.015366][T15451] EXT4-fs: Ignoring removed mblk_io_submit option [ 990.032808][T15451] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 990.064882][T15451] EXT4-fs (loop3): 1 truncate cleaned up [ 990.070623][T15451] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 990.099876][T15441] loop2: detected capacity change from 0 to 40427 [ 990.107207][T15441] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 990.125038][T15441] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 990.152073][T15441] F2FS-fs (loop2): invalid crc value [ 990.182310][T15441] F2FS-fs (loop2): Found nat_bits in checkpoint [ 990.250409][T15441] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 990.262044][T15441] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 990.269937][ T314] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 990.454963][ T314] usb 6-1: Using ep0 maxpacket: 16 [ 990.461277][ T314] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 990.480097][ T314] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 990.498725][ T314] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 990.521928][ T314] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 990.538055][ T314] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 990.555392][ T314] usb 6-1: config 0 descriptor?? [ 990.815198][T15461] syz.2.3040: attempt to access beyond end of device [ 990.815198][T15461] loop2: rw=2049, sector=77824, nr_sectors = 2528 limit=40427 [ 990.835117][T15461] syz.2.3040: attempt to access beyond end of device [ 990.835117][T15461] loop2: rw=2049, sector=80352, nr_sectors = 1568 limit=40427 [ 990.851105][T15461] syz.2.3040: attempt to access beyond end of device [ 990.851105][T15461] loop2: rw=2049, sector=49152, nr_sectors = 392 limit=40427 [ 991.239865][ T314] usbhid 6-1:0.0: can't add hid device: -71 [ 991.254996][ T314] usbhid: probe of 6-1:0.0 failed with error -71 [ 991.262239][ T314] usb 6-1: USB disconnect, device number 34 [ 991.374132][T15468] loop0: detected capacity change from 0 to 1024 [ 991.381087][T15468] EXT4-fs: Ignoring removed mblk_io_submit option [ 991.387992][T15468] EXT4-fs: Ignoring removed bh option [ 991.395450][T15468] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 991.407984][T15209] EXT4-fs (loop3): unmounting filesystem. [ 991.425270][T15468] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 991.437512][T15474] loop3: detected capacity change from 0 to 512 [ 991.444508][T15474] EXT4-fs: Ignoring removed mblk_io_submit option [ 991.455022][ T28] audit: type=1400 audit(1751569567.120:1639): avc: denied { remount } for pid=15467 comm="syz.0.3056" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 991.476155][T15468] EXT4-fs (loop0): re-mounted. Quota mode: writeback. [ 991.485190][T15474] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 991.502288][T15353] EXT4-fs (loop0): unmounting filesystem. [ 991.516595][T15474] EXT4-fs (loop3): 1 truncate cleaned up [ 991.523609][ T28] audit: type=1400 audit(1751569567.180:1640): avc: denied { validate_trans } for pid=15476 comm="syz.0.3048" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 991.555092][T15474] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 991.660395][T15470] loop2: detected capacity change from 0 to 40427 [ 991.679833][T15470] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 991.694963][T15470] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 991.715739][T15470] F2FS-fs (loop2): invalid crc value [ 992.027729][T15470] F2FS-fs (loop2): Found nat_bits in checkpoint [ 992.084631][T15470] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 992.091906][T15470] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 992.136711][T15477] loop0: detected capacity change from 0 to 40427 [ 992.151476][T15477] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 992.166439][T15479] loop5: detected capacity change from 0 to 40427 [ 992.173031][T15477] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 992.181885][T15479] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 992.189872][T15479] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 992.200319][T15479] F2FS-fs (loop5): invalid crc value [ 992.207214][T15477] F2FS-fs (loop0): Found nat_bits in checkpoint [ 992.214204][T15479] F2FS-fs (loop5): Found nat_bits in checkpoint [ 992.267694][T15477] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 992.315469][T15479] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 992.324667][T15209] EXT4-fs (loop3): unmounting filesystem. [ 992.330578][T15479] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 992.344970][T15477] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 992.352405][T15477] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 992.470701][T15470] syz.2.3046: attempt to access beyond end of device [ 992.470701][T15470] loop2: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 992.485652][ T28] audit: type=1400 audit(1751569568.150:1641): avc: denied { setattr } for pid=15476 comm="syz.0.3048" name="/" dev="loop0" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 992.645102][ T28] audit: type=1400 audit(1751569568.220:1642): avc: denied { setattr } for pid=15476 comm="syz.0.3048" name=".pending_reads" dev="loop0" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 993.236446][T15512] loop2: detected capacity change from 0 to 16 [ 993.294042][T15512] erofs: (device loop2): mounted with root inode @ nid 36. [ 993.302716][T15512] erofs: (device loop2): z_erofs_readahead: readahead error at page 2 @ nid 89 [ 993.311920][T15512] erofs: (device loop2): z_erofs_readahead: readahead error at page 1 @ nid 89 [ 993.320915][T15512] erofs: (device loop2): z_erofs_readahead: readahead error at page 0 @ nid 89 [ 993.329890][T15512] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 0 @ nid 89 [ 993.339492][T15512] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 0 @ nid 89 [ 993.349140][T15512] erofs: (device loop2): z_erofs_read_folio: failed to read, err [-117] [ 993.392570][T15515] FAULT_INJECTION: forcing a failure. [ 993.392570][T15515] name failslab, interval 1, probability 0, space 0, times 0 [ 993.427167][T15516] loop5: detected capacity change from 0 to 16 [ 993.435341][T15516] erofs: Unknown parameter 'ÿÿÿÿ' [ 993.441980][T15515] CPU: 1 PID: 15515 Comm: syz.3.3054 Not tainted 6.1.141-syzkaller-00036-g7011769d221c #0 [ 993.451906][T15515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 993.461983][T15515] Call Trace: [ 993.465283][T15515] [ 993.468238][T15515] __dump_stack+0x21/0x24 [ 993.472614][T15515] dump_stack_lvl+0xee/0x150 [ 993.477246][T15515] ? __cfi_dump_stack_lvl+0x8/0x8 [ 993.482313][T15515] dump_stack+0x15/0x24 [ 993.486509][T15515] should_fail_ex+0x3d4/0x520 [ 993.491220][T15515] ? security_inode_alloc+0x33/0x120 [ 993.496543][T15515] __should_failslab+0xac/0xf0 [ 993.501334][T15515] should_failslab+0x9/0x20 [ 993.505864][T15515] kmem_cache_alloc+0x3b/0x330 [ 993.510650][T15515] security_inode_alloc+0x33/0x120 [ 993.515787][T15515] inode_init_always+0x6fc/0x960 [ 993.520750][T15515] new_inode_pseudo+0xa2/0x1f0 [ 993.525544][T15515] new_inode+0x28/0x1e0 [ 993.529734][T15515] shmem_get_inode+0x349/0xc20 [ 993.534553][T15515] __shmem_file_setup+0x113/0x2b0 [ 993.539702][T15515] shmem_file_setup+0x2f/0x40 [ 993.544400][T15515] __se_sys_memfd_create+0x1e6/0x3b0 [ 993.549723][T15515] __x64_sys_memfd_create+0x5b/0x70 [ 993.554929][T15515] x64_sys_call+0x235/0x9a0 [ 993.559435][T15515] do_syscall_64+0x4c/0xa0 [ 993.563843][T15515] ? clear_bhb_loop+0x30/0x80 [ 993.568536][T15515] ? clear_bhb_loop+0x30/0x80 [ 993.573210][T15515] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 993.579099][T15515] RIP: 0033:0x7f4c1478e929 [ 993.583513][T15515] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 993.603123][T15515] RSP: 002b:00007f4c15676e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 993.611546][T15515] RAX: ffffffffffffffda RBX: 00000000000001e3 RCX: 00007f4c1478e929 [ 993.619514][T15515] RDX: 00007f4c15676ef0 RSI: 0000000000000000 RDI: 00007f4c148114cc [ 993.627494][T15515] RBP: 0000200000000b40 R08: 00007f4c15676bb7 R09: 00007f4c15676e40 [ 993.635477][T15515] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000140 [ 993.643438][T15515] R13: 00007f4c15676ef0 R14: 00007f4c15676eb0 R15: 00002000000005c0 [ 993.651439][T15515] [ 993.757860][T15520] FAULT_INJECTION: forcing a failure. [ 993.757860][T15520] name failslab, interval 1, probability 0, space 0, times 0 [ 993.770690][T15520] CPU: 1 PID: 15520 Comm: syz.1.3057 Not tainted 6.1.141-syzkaller-00036-g7011769d221c #0 [ 993.780616][T15520] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 993.790697][T15520] Call Trace: [ 993.794001][T15520] [ 993.796947][T15520] __dump_stack+0x21/0x24 [ 993.801312][T15520] dump_stack_lvl+0xee/0x150 [ 993.805932][T15520] ? __cfi_dump_stack_lvl+0x8/0x8 [ 993.811071][T15520] ? __cfi_vfs_write+0x10/0x10 [ 993.815860][T15520] dump_stack+0x15/0x24 [ 993.820048][T15520] should_fail_ex+0x3d4/0x520 [ 993.824769][T15520] __should_failslab+0xac/0xf0 [ 993.829556][T15520] ? __se_sys_memfd_create+0xf2/0x3b0 [ 993.834981][T15520] should_failslab+0x9/0x20 [ 993.839497][T15520] __kmem_cache_alloc_node+0x3d/0x2c0 [ 993.845073][T15520] ? ksys_write+0x1eb/0x240 [ 993.849590][T15520] ? __se_sys_memfd_create+0xf2/0x3b0 [ 993.855005][T15520] __kmalloc+0xa1/0x1e0 [ 993.859173][T15520] ? strnlen_user+0x10d/0x190 [ 993.863865][T15520] __se_sys_memfd_create+0xf2/0x3b0 [ 993.869075][T15520] __x64_sys_memfd_create+0x5b/0x70 [ 993.874288][T15520] x64_sys_call+0x235/0x9a0 [ 993.878802][T15520] do_syscall_64+0x4c/0xa0 [ 993.883225][T15520] ? clear_bhb_loop+0x30/0x80 [ 993.887910][T15520] ? clear_bhb_loop+0x30/0x80 [ 993.892595][T15520] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 993.898494][T15520] RIP: 0033:0x7f078498e929 [ 993.902917][T15520] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 993.922703][T15520] RSP: 002b:00007f0785882e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 993.931124][T15520] RAX: ffffffffffffffda RBX: 000000000000553b RCX: 00007f078498e929 [ 993.939102][T15520] RDX: 00007f0785882ef0 RSI: 0000000000000000 RDI: 00007f0784a114cc [ 993.947075][T15520] RBP: 0000200000005f40 R08: 00007f0785882bb7 R09: 00007f0785882e40 [ 993.955311][T15520] R10: 000000000000000a R11: 0000000000000202 R12: 00002000000000c0 [ 993.963393][T15520] R13: 00007f0785882ef0 R14: 00007f0785882eb0 R15: 00002000000004c0 [ 993.971374][T15520] [ 994.030867][T15525] loop2: detected capacity change from 0 to 512 [ 994.033008][T15527] loop1: detected capacity change from 0 to 512 [ 994.038011][T15525] EXT4-fs: Ignoring removed mblk_io_submit option [ 994.057623][T15527] EXT4-fs: Ignoring removed mblk_io_submit option [ 994.092172][T15525] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 994.102901][T15527] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 994.116006][T15525] EXT4-fs (loop2): 1 truncate cleaned up [ 994.133421][T15529] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3060'. [ 994.143101][T15527] EXT4-fs (loop1): 1 truncate cleaned up [ 994.148953][T15525] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 994.157937][T15527] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 994.719599][T15533] loop5: detected capacity change from 0 to 40427 [ 994.728990][T15533] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 994.737155][T15533] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 994.744975][ T314] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 994.746395][T15533] F2FS-fs (loop5): invalid crc value [ 994.773027][T15533] F2FS-fs (loop5): Found nat_bits in checkpoint [ 994.853342][T15533] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 994.866722][T15533] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 994.903207][T15127] EXT4-fs (loop2): unmounting filesystem. [ 994.924983][ T314] usb 1-1: Using ep0 maxpacket: 16 [ 994.931931][ T314] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 994.950880][ T314] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 994.961891][ T314] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 994.981003][ T314] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 994.993476][ T314] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 995.061754][ T314] usb 1-1: config 0 descriptor?? [ 995.146442][T15552] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3063'. [ 995.162931][T15552] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3063'. [ 995.172665][T15552] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3063'. [ 995.577395][T15287] EXT4-fs (loop1): unmounting filesystem. [ 995.648161][ T314] usbhid 1-1:0.0: can't add hid device: -71 [ 995.654283][ T314] usbhid: probe of 1-1:0.0 failed with error -71 [ 995.697037][ T314] usb 1-1: USB disconnect, device number 40 [ 995.717915][T15533] syz.5.3061: attempt to access beyond end of device [ 995.717915][T15533] loop5: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 995.734487][T15560] FAULT_INJECTION: forcing a failure. [ 995.734487][T15560] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 995.747715][T15560] CPU: 0 PID: 15560 Comm: syz.3.3065 Not tainted 6.1.141-syzkaller-00036-g7011769d221c #0 [ 995.757658][T15560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 995.767739][T15560] Call Trace: [ 995.771048][T15560] [ 995.774000][T15560] __dump_stack+0x21/0x24 [ 995.778369][T15560] dump_stack_lvl+0xee/0x150 [ 995.783001][T15560] ? __cfi_dump_stack_lvl+0x8/0x8 [ 995.788072][T15560] dump_stack+0x15/0x24 [ 995.792265][T15560] should_fail_ex+0x3d4/0x520 [ 995.796955][T15560] should_fail+0xb/0x10 [ 995.801116][T15560] should_fail_usercopy+0x1a/0x20 [ 995.806144][T15560] _copy_to_user+0x1e/0x90 [ 995.810570][T15560] simple_read_from_buffer+0xe9/0x160 [ 995.815971][T15560] proc_fail_nth_read+0x19a/0x210 [ 995.821027][T15560] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 995.826598][T15560] ? security_file_permission+0x94/0xb0 [ 995.832174][T15560] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 995.837748][T15560] vfs_read+0x26e/0x8c0 [ 995.842010][T15560] ? __cfi_vfs_read+0x10/0x10 [ 995.846794][T15560] ? __kasan_check_write+0x14/0x20 [ 995.852098][T15560] ? mutex_lock+0x8d/0x1a0 [ 995.856525][T15560] ? __cfi_mutex_lock+0x10/0x10 [ 995.861385][T15560] ? __fdget_pos+0x2cd/0x380 [ 995.865989][T15560] ? ksys_read+0x71/0x240 [ 995.870335][T15560] ksys_read+0x140/0x240 [ 995.874587][T15560] ? __cfi_ksys_read+0x10/0x10 [ 995.879370][T15560] ? fput+0x154/0x1a0 [ 995.883406][T15560] ? debug_smp_processor_id+0x17/0x20 [ 995.888798][T15560] __x64_sys_read+0x7b/0x90 [ 995.893322][T15560] x64_sys_call+0x2f/0x9a0 [ 995.897749][T15560] do_syscall_64+0x4c/0xa0 [ 995.902175][T15560] ? clear_bhb_loop+0x30/0x80 [ 995.906860][T15560] ? clear_bhb_loop+0x30/0x80 [ 995.911567][T15560] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 995.917514][T15560] RIP: 0033:0x7f4c1478d33c [ 995.921979][T15560] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 995.941586][T15560] RSP: 002b:00007f4c15677030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 995.950012][T15560] RAX: ffffffffffffffda RBX: 00007f4c149b5fa0 RCX: 00007f4c1478d33c [ 995.957996][T15560] RDX: 000000000000000f RSI: 00007f4c156770a0 RDI: 0000000000000006 [ 995.965995][T15560] RBP: 00007f4c15677090 R08: 0000000000000000 R09: 0000000000000000 [ 995.973974][T15560] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 995.981974][T15560] R13: 0000000000000000 R14: 00007f4c149b5fa0 R15: 00007ffeba5d29e8 [ 995.989971][T15560] [ 996.608988][T15568] loop1: detected capacity change from 0 to 128 [ 996.618087][T15568] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 996.627144][T15568] ext4 filesystem being mounted at /11/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 996.638720][T15571] loop2: detected capacity change from 0 to 16 [ 996.645755][T15571] erofs: (device loop2): mounted with root inode @ nid 36. [ 996.654017][T15571] erofs: (device loop2): z_erofs_readahead: readahead error at page 2 @ nid 89 [ 996.663331][T15571] erofs: (device loop2): z_erofs_readahead: readahead error at page 1 @ nid 89 [ 996.663600][T15573] loop5: detected capacity change from 0 to 256 [ 996.672369][T15571] erofs: (device loop2): z_erofs_readahead: readahead error at page 0 @ nid 89 [ 996.672403][T15571] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 0 @ nid 89 [ 996.672435][T15571] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 0 @ nid 89 [ 996.672454][T15571] erofs: (device loop2): z_erofs_read_folio: failed to read, err [-117] [ 996.730623][T15573] FAULT_INJECTION: forcing a failure. [ 996.730623][T15573] name failslab, interval 1, probability 0, space 0, times 0 [ 996.743588][T15573] CPU: 0 PID: 15573 Comm: syz.5.3067 Not tainted 6.1.141-syzkaller-00036-g7011769d221c #0 [ 996.753524][T15573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 996.763612][T15573] Call Trace: [ 996.766919][T15573] [ 996.767085][T15575] loop0: detected capacity change from 0 to 128 [ 996.769879][T15573] __dump_stack+0x21/0x24 [ 996.778933][T15575] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 996.781128][T15573] dump_stack_lvl+0xee/0x150 [ 996.789932][T15575] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 996.794156][T15573] ? __cfi_dump_stack_lvl+0x8/0x8 [ 996.809434][T15573] dump_stack+0x15/0x24 [ 996.813633][T15573] should_fail_ex+0x3d4/0x520 [ 996.818339][T15573] ? security_file_alloc+0x33/0x130 [ 996.823643][T15573] __should_failslab+0xac/0xf0 [ 996.828434][T15573] should_failslab+0x9/0x20 [ 996.832973][T15573] kmem_cache_alloc+0x3b/0x330 [ 996.837763][T15573] ? __alloc_file+0x28/0x2a0 [ 996.842387][T15573] security_file_alloc+0x33/0x130 [ 996.847437][T15573] __alloc_file+0xb5/0x2a0 [ 996.851871][T15573] alloc_empty_file+0x97/0x180 [ 996.856660][T15573] path_openat+0xf4/0x2f50 [ 996.861095][T15573] ? kasan_set_track+0x4b/0x70 [ 996.865875][T15573] ? kasan_save_alloc_info+0x25/0x30 [ 996.871204][T15573] ? __kasan_slab_alloc+0x72/0x80 [ 996.876484][T15573] ? kmem_cache_alloc+0x16e/0x330 [ 996.881636][T15573] ? getname_flags+0xb9/0x500 [ 996.886356][T15573] ? getname+0x19/0x20 [ 996.890463][T15573] ? do_sys_openat2+0xcb/0x7e0 [ 996.895270][T15573] ? __x64_sys_openat+0x136/0x160 [ 996.900419][T15573] ? x64_sys_call+0x783/0x9a0 [ 996.905140][T15573] ? do_syscall_64+0x4c/0xa0 [ 996.909764][T15573] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 996.915889][T15573] ? do_filp_open+0x3c0/0x3c0 [ 996.920609][T15573] do_filp_open+0x1c1/0x3c0 [ 996.925213][T15573] ? __cfi_do_filp_open+0x10/0x10 [ 996.930252][T15573] ? alloc_fd+0x4e6/0x590 [ 996.934593][T15573] do_sys_openat2+0x185/0x7e0 [ 996.939278][T15573] ? __kasan_check_write+0x14/0x20 [ 996.944405][T15573] ? do_sys_open+0xe0/0xe0 [ 996.948830][T15573] ? ksys_write+0x1eb/0x240 [ 996.953381][T15573] ? __cfi_ksys_write+0x10/0x10 [ 996.958252][T15573] __x64_sys_openat+0x136/0x160 [ 996.963127][T15573] x64_sys_call+0x783/0x9a0 [ 996.967636][T15573] do_syscall_64+0x4c/0xa0 [ 996.972143][T15573] ? clear_bhb_loop+0x30/0x80 [ 996.976824][T15573] ? clear_bhb_loop+0x30/0x80 [ 996.981507][T15573] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 996.987406][T15573] RIP: 0033:0x7f2f8838e929 [ 996.991827][T15573] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 997.011434][T15573] RSP: 002b:00007f2f8921f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 997.019849][T15573] RAX: ffffffffffffffda RBX: 00007f2f885b5fa0 RCX: 00007f2f8838e929 [ 997.027820][T15573] RDX: 0000000000020040 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 997.035811][T15573] RBP: 00007f2f8921f090 R08: 0000000000000000 R09: 0000000000000000 [ 997.043783][T15573] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 997.051756][T15573] R13: 0000000000000000 R14: 00007f2f885b5fa0 R15: 00007ffea91e2118 [ 997.059820][T15573] [ 997.128653][T15580] FAULT_INJECTION: forcing a failure. [ 997.128653][T15580] name failslab, interval 1, probability 0, space 0, times 0 [ 997.171801][T15580] CPU: 0 PID: 15580 Comm: syz.0.3070 Not tainted 6.1.141-syzkaller-00036-g7011769d221c #0 [ 997.181769][T15580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 997.191876][T15580] Call Trace: [ 997.195188][T15580] [ 997.198510][T15580] __dump_stack+0x21/0x24 [ 997.203148][T15580] dump_stack_lvl+0xee/0x150 [ 997.208065][T15580] ? __cfi_dump_stack_lvl+0x8/0x8 [ 997.213232][T15580] dump_stack+0x15/0x24 [ 997.217426][T15580] should_fail_ex+0x3d4/0x520 [ 997.222129][T15580] __should_failslab+0xac/0xf0 [ 997.226932][T15580] ? bpf_prog_array_alloc+0x41/0x60 [ 997.232366][T15580] should_failslab+0x9/0x20 [ 997.236903][T15580] __kmem_cache_alloc_node+0x3d/0x2c0 [ 997.242294][T15580] ? __kasan_check_write+0x14/0x20 [ 997.247620][T15580] ? mutex_lock+0x8d/0x1a0 [ 997.252067][T15580] ? bpf_prog_array_alloc+0x41/0x60 [ 997.257391][T15580] __kmalloc+0xa1/0x1e0 [ 997.261570][T15580] bpf_prog_array_alloc+0x41/0x60 [ 997.266625][T15580] netns_bpf_prog_attach+0x2c2/0x3d0 [ 997.272283][T15580] bpf_prog_attach+0x7a4/0x9c0 [ 997.277057][T15580] ? bpf_obj_get+0x120/0x120 [ 997.281662][T15580] ? selinux_bpf+0xce/0xf0 [ 997.286284][T15580] ? security_bpf+0x93/0xb0 [ 997.290915][T15580] __sys_bpf+0x57f/0x780 [ 997.295212][T15580] ? bpf_link_show_fdinfo+0x320/0x320 [ 997.301022][T15580] ? __cfi_ksys_write+0x10/0x10 [ 997.305918][T15580] ? debug_smp_processor_id+0x17/0x20 [ 997.312483][T15580] __x64_sys_bpf+0x7c/0x90 [ 997.317030][T15580] x64_sys_call+0x488/0x9a0 [ 997.321819][T15580] do_syscall_64+0x4c/0xa0 [ 997.326434][T15580] ? clear_bhb_loop+0x30/0x80 [ 997.331114][T15580] ? clear_bhb_loop+0x30/0x80 [ 997.335796][T15580] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 997.341738][T15580] RIP: 0033:0x7fe821d8e929 [ 997.346153][T15580] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 997.365940][T15580] RSP: 002b:00007fe822b50038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 997.374377][T15580] RAX: ffffffffffffffda RBX: 00007fe821fb6160 RCX: 00007fe821d8e929 [ 997.382350][T15580] RDX: 0000000000000014 RSI: 0000200000000580 RDI: 0000000000000008 [ 997.390324][T15580] RBP: 00007fe822b50090 R08: 0000000000000000 R09: 0000000000000000 [ 997.398301][T15580] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 997.406538][T15580] R13: 0000000000000000 R14: 00007fe821fb6160 R15: 00007ffdb646ac18 [ 997.414620][T15580] [ 997.556160][T15582] loop3: detected capacity change from 0 to 40427 [ 997.563261][T15582] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 997.574986][T15582] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 997.591327][T15582] F2FS-fs (loop3): invalid crc value [ 997.635873][T15582] F2FS-fs (loop3): Found nat_bits in checkpoint [ 997.725953][T15582] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 997.733042][T15582] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 997.822552][T15287] EXT4-fs (loop1): unmounting filesystem. [ 998.088901][T15598] loop1: detected capacity change from 0 to 512 [ 998.164075][T15598] EXT4-fs: Ignoring removed mblk_io_submit option [ 998.171111][T15598] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 998.189010][T15598] EXT4-fs (loop1): 1 truncate cleaned up [ 998.196931][T15598] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 998.206585][T15353] EXT4-fs (loop0): unmounting filesystem. [ 998.734620][T15610] loop2: detected capacity change from 0 to 256 [ 998.754554][T15610] FAT-fs (loop2): bogus number of FAT sectors [ 998.760931][T15610] FAT-fs (loop2): Can't find a valid FAT filesystem [ 998.980307][T15613] loop5: detected capacity change from 0 to 256 [ 999.055311][T15613] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 999.756069][T15617] binder: 15616:15617 ioctl c0306201 200000000240 returned -14 [ 999.774304][T15613] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3077'. [ 999.785512][ T28] audit: type=1400 audit(1751569575.410:1643): avc: denied { mounton } for pid=15614 comm="syz.0.3078" path="/9/file0" dev="tmpfs" ino=69 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 999.846008][T15287] EXT4-fs (loop1): unmounting filesystem. [ 999.868033][ T28] audit: type=1400 audit(1751569575.500:1644): avc: denied { write } for pid=15612 comm="syz.5.3077" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 999.889580][T15622] binder: 15621:15622 ioctl c0306201 200000000240 returned -11 [ 999.995706][ T28] audit: type=1400 audit(1751569575.660:1645): avc: denied { ioctl } for pid=15628 comm="syz.5.3083" path="socket:[70127]" dev="sockfs" ino=70127 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1000.325226][T15627] loop1: detected capacity change from 0 to 16 [ 1000.331806][T15627] erofs: Unknown parameter 'ÿÿÿÿ' [ 1000.382093][T15615] loop0: detected capacity change from 0 to 40427 [ 1000.389395][T15615] F2FS-fs (loop0): Insane cp_payload (553648128 >= 504) [ 1000.396807][T15615] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 1000.405315][T15615] F2FS-fs (loop0): Unrecognized mount option "ÿÿ" or missing value [ 1000.731368][T15642] loop0: detected capacity change from 0 to 40427 [ 1000.738545][T15642] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 1000.786250][T15642] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 1000.815666][T15642] F2FS-fs (loop0): invalid crc value [ 1000.858866][T15648] loop3: detected capacity change from 0 to 256 [ 1000.866147][T15648] exfat: Deprecated parameter 'utf8' [ 1000.872101][T15642] F2FS-fs (loop0): Found nat_bits in checkpoint [ 1000.892545][T15648] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x0b800a9a, utbl_chksum : 0xe619d30d) [ 1000.912148][ T28] audit: type=1400 audit(1751569576.570:1646): avc: denied { write } for pid=15646 comm="syz.3.3089" name="/" dev="loop3" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1000.922119][T15642] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 1000.961551][T15642] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 1001.118411][T15659] loop3: detected capacity change from 0 to 512 [ 1001.155052][T15659] EXT4-fs: Ignoring removed mblk_io_submit option [ 1001.191385][T15659] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1001.229730][T15659] EXT4-fs (loop3): 1 truncate cleaned up [ 1001.237594][T15659] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1001.280633][T15663] loop5: detected capacity change from 0 to 512 [ 1001.287416][T15663] EXT4-fs: Ignoring removed mblk_io_submit option [ 1001.302440][T15663] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1001.324372][T15663] EXT4-fs (loop5): 1 truncate cleaned up [ 1001.331142][T15663] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1001.819071][T15672] loop1: detected capacity change from 0 to 8192 [ 1001.998589][T15680] loop0: detected capacity change from 0 to 512 [ 1002.013752][T15680] EXT4-fs: Ignoring removed mblk_io_submit option [ 1002.033016][T15680] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1002.050104][T15676] loop2: detected capacity change from 0 to 40427 [ 1002.057173][T15676] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 1002.065068][T15676] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 1002.077978][T15680] EXT4-fs (loop0): 1 truncate cleaned up [ 1002.088829][T15676] F2FS-fs (loop2): invalid crc value [ 1002.101661][T15680] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1002.144528][T15676] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1002.175500][ T2250] EXT4-fs (loop5): unmounting filesystem. [ 1002.234506][T15209] EXT4-fs (loop3): unmounting filesystem. [ 1002.265154][T15676] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 1002.272246][T15676] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 1003.469830][T15353] EXT4-fs (loop0): unmounting filesystem. [ 1003.876693][T15701] loop5: detected capacity change from 0 to 16 [ 1003.883655][T15701] erofs: Unknown parameter 'ÿÿÿÿ' [ 1003.889823][ T28] audit: type=1326 audit(1751569579.390:1647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15690 comm="syz.3.3098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c1478e929 code=0x7ffc0000 [ 1004.124233][ T28] audit: type=1326 audit(1751569579.400:1648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15690 comm="syz.3.3098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c1478e929 code=0x7ffc0000 [ 1004.155472][ T28] audit: type=1326 audit(1751569579.400:1649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15690 comm="syz.3.3098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f4c1478e929 code=0x7ffc0000 [ 1004.179139][ T28] audit: type=1326 audit(1751569579.400:1650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15690 comm="syz.3.3098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c1478e929 code=0x7ffc0000 [ 1004.204228][ T28] audit: type=1326 audit(1751569579.400:1651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15690 comm="syz.3.3098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c1478e929 code=0x7ffc0000 [ 1004.257164][T15708] loop1: detected capacity change from 0 to 256 [ 1004.263907][T15708] exfat: Deprecated parameter 'utf8' [ 1004.273385][T15708] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x0b800a9a, utbl_chksum : 0xe619d30d) [ 1004.286750][ T28] audit: type=1326 audit(1751569579.400:1652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15690 comm="syz.3.3098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f4c1478e929 code=0x7ffc0000 [ 1004.288058][T15710] syz.3.3102[15710] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1004.310507][T15710] syz.3.3102[15710] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1004.525260][T15676] syz.2.3096: attempt to access beyond end of device [ 1004.525260][T15676] loop2: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 1004.584285][T15719] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3104'. [ 1004.597238][T15719] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3104'. [ 1004.607073][T15719] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3104'. [ 1004.625691][T15719] netlink: 68 bytes leftover after parsing attributes in process `syz.5.3104'. [ 1004.924981][ T798] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 1005.106055][ T798] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1005.117108][ T798] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1005.130092][ T798] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1005.139211][ T798] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1005.148030][ T798] usb 4-1: config 0 descriptor?? [ 1005.221406][T15732] loop1: detected capacity change from 0 to 512 [ 1005.228602][T15732] EXT4-fs: Ignoring removed mblk_io_submit option [ 1005.235686][T15732] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1005.248448][T15732] EXT4-fs (loop1): 1 truncate cleaned up [ 1005.254390][T15732] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1005.323447][T15736] loop5: detected capacity change from 0 to 512 [ 1005.330604][T15736] EXT4-fs: Ignoring removed mblk_io_submit option [ 1005.337658][T15736] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1005.350324][T15736] EXT4-fs (loop5): 1 truncate cleaned up [ 1005.356638][T15736] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1005.609649][ T798] plantronics 0003:047F:FFFF.004D: unknown main item tag 0x0 [ 1005.625675][ T798] plantronics 0003:047F:FFFF.004D: No inputs registered, leaving [ 1005.692952][ T798] plantronics 0003:047F:FFFF.004D: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 1006.260773][T15287] EXT4-fs (loop1): unmounting filesystem. [ 1006.518734][T15755] loop1: detected capacity change from 0 to 512 [ 1006.525587][T15755] EXT4-fs: Ignoring removed mblk_io_submit option [ 1006.615399][T15755] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1006.646209][T15755] EXT4-fs (loop1): 1 truncate cleaned up [ 1006.657747][T15755] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1006.716499][ T2250] EXT4-fs (loop5): unmounting filesystem. [ 1006.748567][T15764] loop5: detected capacity change from 0 to 256 [ 1006.755360][T15764] exfat: Deprecated parameter 'utf8' [ 1006.767524][T15764] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x0b800a9a, utbl_chksum : 0xe619d30d) [ 1007.188036][T15769] loop5: detected capacity change from 0 to 16 [ 1007.195338][T15769] erofs: Unknown parameter 'ÿÿÿÿ' [ 1007.581263][T15771] loop0: detected capacity change from 0 to 512 [ 1007.595328][T15771] EXT4-fs: Ignoring removed mblk_io_submit option [ 1007.602492][ T426] usb 4-1: USB disconnect, device number 35 [ 1007.604381][T15287] EXT4-fs (loop1): unmounting filesystem. [ 1007.613296][T15771] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1007.678217][T15771] EXT4-fs (loop0): 1 truncate cleaned up [ 1007.683917][T15771] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1008.428412][T15781] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3118'. [ 1008.438461][T15781] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3118'. [ 1008.447818][T15781] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3118'. [ 1008.459041][T15781] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3118'. [ 1009.194308][T15353] EXT4-fs (loop0): unmounting filesystem. [ 1009.261988][T15794] loop2: detected capacity change from 0 to 512 [ 1009.315823][T15778] loop5: detected capacity change from 0 to 40427 [ 1009.322973][T15778] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 1009.330847][T15778] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 1009.373827][T15794] EXT4-fs: Ignoring removed mblk_io_submit option [ 1009.381776][T15794] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1009.393439][T15778] F2FS-fs (loop5): invalid crc value [ 1009.401342][T15794] EXT4-fs (loop2): 1 truncate cleaned up [ 1009.407188][T15794] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1009.417974][T15778] F2FS-fs (loop5): Found nat_bits in checkpoint [ 1009.506347][T15801] loop0: detected capacity change from 0 to 16 [ 1009.514702][T15801] erofs: Unknown parameter 'ÿÿÿÿ' [ 1009.768035][T15778] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 1009.775535][T15778] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 1009.781017][T15789] loop1: detected capacity change from 0 to 40427 [ 1009.794394][T15789] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 1009.802392][T15789] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1009.816097][T15789] F2FS-fs (loop1): invalid crc value [ 1009.828979][T15789] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1009.953624][T15789] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 1010.047740][T15789] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 1010.263766][T15127] EXT4-fs (loop2): unmounting filesystem. [ 1010.278134][T15813] loop3: detected capacity change from 0 to 512 [ 1010.284763][T15813] EXT4-fs: Ignoring removed mblk_io_submit option [ 1010.301980][T15813] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1010.307476][T15815] FAULT_INJECTION: forcing a failure. [ 1010.307476][T15815] name failslab, interval 1, probability 0, space 0, times 0 [ 1010.374652][T15813] EXT4-fs (loop3): 1 truncate cleaned up [ 1011.251979][T15818] loop0: detected capacity change from 0 to 40427 [ 1011.266625][T15818] F2FS-fs (loop0): fault_injection options not supported [ 1011.274377][T15818] F2FS-fs (loop0): Image doesn't support compression [ 1011.281434][T15818] F2FS-fs (loop0): Image doesn't support compression [ 1011.288259][T15818] F2FS-fs (loop0): fault_type options not supported [ 1011.298864][T15818] F2FS-fs (loop0): invalid crc value [ 1011.321724][T15813] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1011.341430][T15818] F2FS-fs (loop0): Found nat_bits in checkpoint [ 1011.428154][T15818] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 1011.678113][T15815] CPU: 1 PID: 15815 Comm: syz.2.3126 Not tainted 6.1.141-syzkaller-00036-g7011769d221c #0 [ 1011.688588][T15815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1011.698674][T15815] Call Trace: [ 1011.701985][T15815] [ 1011.705009][T15815] __dump_stack+0x21/0x24 [ 1011.709468][T15815] dump_stack_lvl+0xee/0x150 [ 1011.714102][T15815] ? __cfi_dump_stack_lvl+0x8/0x8 [ 1011.719165][T15815] ? selinux_socket_bind+0x35e/0xb20 [ 1011.724488][T15815] dump_stack+0x15/0x24 [ 1011.728688][T15815] should_fail_ex+0x3d4/0x520 [ 1011.733400][T15815] ? can_rx_register+0x166/0x780 [ 1011.738378][T15815] __should_failslab+0xac/0xf0 [ 1011.743175][T15815] should_failslab+0x9/0x20 [ 1011.747721][T15815] kmem_cache_alloc+0x3b/0x330 [ 1011.752524][T15815] can_rx_register+0x166/0x780 [ 1011.757323][T15815] ? __cfi_raw_rcv+0x10/0x10 [ 1011.761951][T15815] ? __cfi_lock_sock_nested+0x10/0x10 [ 1011.767361][T15815] raw_enable_allfilters+0xed/0x430 [ 1011.772601][T15815] raw_bind+0x29d/0x750 [ 1011.776807][T15815] ? security_socket_bind+0x93/0xb0 [ 1011.782044][T15815] __sys_bind+0x311/0x420 [ 1011.786409][T15815] ? __cfi___sys_bind+0x10/0x10 [ 1011.791300][T15815] ? __kasan_check_write+0x14/0x20 [ 1011.796431][T15815] ? debug_smp_processor_id+0x17/0x20 [ 1011.801812][T15815] __x64_sys_bind+0x7a/0x90 [ 1011.806324][T15815] x64_sys_call+0x70c/0x9a0 [ 1011.810830][T15815] do_syscall_64+0x4c/0xa0 [ 1011.815246][T15815] ? clear_bhb_loop+0x30/0x80 [ 1011.819930][T15815] ? clear_bhb_loop+0x30/0x80 [ 1011.824609][T15815] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1011.830522][T15815] RIP: 0033:0x7f378cd8e929 [ 1011.834940][T15815] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1011.854549][T15815] RSP: 002b:00007f378dca2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 1011.862969][T15815] RAX: ffffffffffffffda RBX: 00007f378cfb5fa0 RCX: 00007f378cd8e929 [ 1011.870945][T15815] RDX: 0000000000000010 RSI: 0000200000000280 RDI: 0000000000000003 [ 1011.879001][T15815] RBP: 00007f378dca2090 R08: 0000000000000000 R09: 0000000000000000 [ 1011.886987][T15815] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1011.894958][T15815] R13: 0000000000000000 R14: 00007f378cfb5fa0 R15: 00007fff6e923718 [ 1011.902938][T15815] [ 1011.941263][T15353] syz-executor: attempt to access beyond end of device [ 1011.941263][T15353] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1012.187550][T15834] syz.0.3128[15834] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1012.187629][T15834] syz.0.3128[15834] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1012.287382][T15825] loop5: detected capacity change from 0 to 40427 [ 1012.306622][T15825] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 1012.323403][T15825] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 1012.345479][T15825] F2FS-fs (loop5): invalid crc value [ 1012.348043][T15820] syz.1.3116: attempt to access beyond end of device [ 1012.348043][T15820] loop1: rw=2049, sector=77824, nr_sectors = 4096 limit=40427 [ 1012.377881][T15825] F2FS-fs (loop5): Found nat_bits in checkpoint [ 1012.401024][T15820] syz.1.3116: attempt to access beyond end of device [ 1012.401024][T15820] loop1: rw=2049, sector=49152, nr_sectors = 4096 limit=40427 [ 1012.448020][T15825] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 1012.456621][T15825] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 1012.469376][T15820] syz.1.3116: attempt to access beyond end of device [ 1012.469376][T15820] loop1: rw=2049, sector=57344, nr_sectors = 7584 limit=40427 [ 1012.564985][ T8245] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 1012.653442][T15209] EXT4-fs (loop3): unmounting filesystem. [ 1012.678703][T15825] syz.5.3123: attempt to access beyond end of device [ 1012.678703][T15825] loop5: rw=2049, sector=77824, nr_sectors = 4096 limit=40427 [ 1012.719645][T15825] syz.5.3123: attempt to access beyond end of device [ 1012.719645][T15825] loop5: rw=2049, sector=49152, nr_sectors = 4096 limit=40427 [ 1012.768981][T15825] syz.5.3123: attempt to access beyond end of device [ 1012.768981][T15825] loop5: rw=2049, sector=57344, nr_sectors = 9040 limit=40427 [ 1012.793641][ T8245] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1012.814832][ T8245] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1012.973646][T15852] loop1: detected capacity change from 0 to 16 [ 1012.980603][T15852] erofs: Unknown parameter 'ÿÿÿÿ' [ 1013.280343][ T8245] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1013.289718][ T8245] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1013.298210][T15825] syz.5.3123: attempt to access beyond end of device [ 1013.298210][T15825] loop5: rw=2049, sector=66384, nr_sectors = 6168 limit=40427 [ 1013.313554][ T8245] usb 1-1: config 0 descriptor?? [ 1013.323400][ T2250] syz-executor: attempt to access beyond end of device [ 1013.323400][ T2250] loop5: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 1013.722287][ T8245] plantronics 0003:047F:FFFF.004E: unknown main item tag 0x0 [ 1013.730115][ T8245] plantronics 0003:047F:FFFF.004E: No inputs registered, leaving [ 1013.739147][ T8245] plantronics 0003:047F:FFFF.004E: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 1013.897925][T15863] loop1: detected capacity change from 0 to 128 [ 1014.005762][T15863] EXT4-fs (loop1): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 1014.550008][T15869] loop2: detected capacity change from 0 to 16 [ 1014.564714][T15869] erofs: Unknown parameter 'ÿÿÿÿ' [ 1015.199324][T15873] loop3: detected capacity change from 0 to 40427 [ 1015.206568][T15873] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 1015.214429][T15873] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 1015.223844][T15873] F2FS-fs (loop3): invalid crc value [ 1015.280369][T15880] loop1: detected capacity change from 0 to 2048 [ 1015.296545][T15873] F2FS-fs (loop3): Found nat_bits in checkpoint [ 1015.304377][ T798] usb 1-1: USB disconnect, device number 41 [ 1015.348986][T15873] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 1015.352981][T15880] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1015.356359][T15873] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 1015.671966][T15891] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3137'. [ 1015.875752][T15891] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3137'. [ 1015.887160][T15891] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3137'. [ 1017.259891][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 1017.259909][ T28] audit: type=1326 audit(1751569592.920:1659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15887 comm="syz.0.3139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe821d8e929 code=0x7ffc0000 [ 1017.289902][T15894] EXT4-fs error (device loop1): __ext4_iget:5078: inode #12: block 2: comm syz.1.3138: invalid block [ 1017.301842][ T28] audit: type=1326 audit(1751569592.920:1660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15887 comm="syz.0.3139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe821d8e929 code=0x7ffc0000 [ 1017.339132][ T28] audit: type=1326 audit(1751569592.920:1661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15887 comm="syz.0.3139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fe821d8e929 code=0x7ffc0000 [ 1017.413993][ T28] audit: type=1326 audit(1751569592.920:1662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15887 comm="syz.0.3139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe821d8e929 code=0x7ffc0000 [ 1017.565369][T15287] EXT4-fs (loop1): unmounting filesystem. [ 1017.579547][ T28] audit: type=1326 audit(1751569592.920:1663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15887 comm="syz.0.3139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe821d8e929 code=0x7ffc0000 [ 1017.676150][ T28] audit: type=1326 audit(1751569592.920:1664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15887 comm="syz.0.3139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fe821d8e929 code=0x7ffc0000 [ 1017.713338][ T28] audit: type=1326 audit(1751569592.920:1665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15887 comm="syz.0.3139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe821d8e929 code=0x7ffc0000 [ 1017.754991][ T28] audit: type=1326 audit(1751569592.920:1666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15887 comm="syz.0.3139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe821d8e929 code=0x7ffc0000 [ 1017.824820][T15910] loop1: detected capacity change from 0 to 16 [ 1017.833030][T15910] erofs: Unknown parameter 'ÿÿÿÿ' [ 1017.938646][ T28] audit: type=1326 audit(1751569592.920:1667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15887 comm="syz.0.3139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7fe821d8e929 code=0x7ffc0000 [ 1018.070624][ T28] audit: type=1326 audit(1751569592.920:1668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15887 comm="syz.0.3139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=96 compat=0 ip=0xffffffffff600000 code=0x7ffc0000 [ 1018.072290][T15900] loop5: detected capacity change from 0 to 40427 [ 1018.124532][T15900] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 1018.139618][T15900] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 1018.148788][T15900] F2FS-fs (loop5): invalid crc value [ 1018.159865][T15900] F2FS-fs (loop5): Found nat_bits in checkpoint [ 1018.174137][T15906] loop2: detected capacity change from 0 to 40427 [ 1018.183572][T15906] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 1018.198934][T15906] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 1018.245525][T15906] F2FS-fs (loop2): invalid crc value [ 1018.276491][T15900] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 1018.283825][T15900] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 1018.284941][T15906] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1018.358608][T15906] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 1018.374143][T15906] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 1018.673847][T15935] loop1: detected capacity change from 0 to 128 [ 1018.688966][T15935] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1018.705413][T15935] ext4 filesystem being mounted at /26/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1018.829629][T15287] EXT4-fs (loop1): unmounting filesystem. [ 1018.873988][T15906] syz.2.3142: attempt to access beyond end of device [ 1018.873988][T15906] loop2: rw=2049, sector=77824, nr_sectors = 4096 limit=40427 [ 1018.898908][T15906] syz.2.3142: attempt to access beyond end of device [ 1018.898908][T15906] loop2: rw=2049, sector=49152, nr_sectors = 4096 limit=40427 [ 1018.956752][T15906] syz.2.3142: attempt to access beyond end of device [ 1018.956752][T15906] loop2: rw=2049, sector=57344, nr_sectors = 14880 limit=40427 [ 1018.989417][T15906] syz.2.3142: attempt to access beyond end of device [ 1018.989417][T15906] loop2: rw=2049, sector=72224, nr_sectors = 5600 limit=40427 [ 1019.014690][T15906] syz.2.3142: attempt to access beyond end of device [ 1019.014690][T15906] loop2: rw=2049, sector=81920, nr_sectors = 3880 limit=40427 [ 1019.031467][T15945] loop5: detected capacity change from 0 to 512 [ 1019.050016][T15127] syz-executor: attempt to access beyond end of device [ 1019.050016][T15127] loop2: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 1019.063024][T15945] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1019.189084][T15945] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1019.199200][T15945] ext4 filesystem being mounted at /539/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1019.638001][T15957] loop0: detected capacity change from 0 to 128 [ 1019.650322][T15957] EXT4-fs (loop0): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 1019.730036][T15960] loop2: detected capacity change from 0 to 512 [ 1019.736762][T15960] EXT4-fs: Ignoring removed mblk_io_submit option [ 1019.751154][T15960] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1019.763118][T15957] FAULT_INJECTION: forcing a failure. [ 1019.763118][T15957] name failslab, interval 1, probability 0, space 0, times 0 [ 1019.775912][T15957] CPU: 0 PID: 15957 Comm: syz.0.3153 Not tainted 6.1.141-syzkaller-00036-g7011769d221c #0 [ 1019.785831][T15957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1019.795910][T15957] Call Trace: [ 1019.799297][T15957] [ 1019.799341][ T2250] EXT4-fs (loop5): unmounting filesystem. [ 1019.802242][T15957] __dump_stack+0x21/0x24 [ 1019.810535][T15960] EXT4-fs (loop2): 1 truncate cleaned up [ 1019.812285][T15957] dump_stack_lvl+0xee/0x150 [ 1019.818023][T15960] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1019.822515][T15957] ? __cfi_dump_stack_lvl+0x8/0x8 [ 1019.822554][T15957] dump_stack+0x15/0x24 [ 1019.841216][T15957] should_fail_ex+0x3d4/0x520 [ 1019.845935][T15957] ? security_file_alloc+0x33/0x130 [ 1019.851347][T15957] __should_failslab+0xac/0xf0 [ 1019.856326][T15957] should_failslab+0x9/0x20 [ 1019.860908][T15957] kmem_cache_alloc+0x3b/0x330 [ 1019.865712][T15957] ? __alloc_file+0x28/0x2a0 [ 1019.870363][T15957] security_file_alloc+0x33/0x130 [ 1019.875430][T15957] __alloc_file+0xb5/0x2a0 [ 1019.879877][T15957] alloc_empty_file+0x97/0x180 [ 1019.884758][T15957] path_openat+0xf4/0x2f50 [ 1019.889201][T15957] ? kasan_set_track+0x4b/0x70 [ 1019.893993][T15957] ? kasan_save_alloc_info+0x25/0x30 [ 1019.899311][T15957] ? __kasan_slab_alloc+0x72/0x80 [ 1019.904404][T15957] ? kmem_cache_alloc+0x16e/0x330 [ 1019.909459][T15957] ? getname_flags+0xb9/0x500 [ 1019.914178][T15957] ? getname+0x19/0x20 [ 1019.918311][T15957] ? do_sys_openat2+0xcb/0x7e0 [ 1019.923174][T15957] ? __x64_sys_openat+0x136/0x160 [ 1019.928204][T15957] ? x64_sys_call+0x783/0x9a0 [ 1019.932885][T15957] ? do_syscall_64+0x4c/0xa0 [ 1019.937469][T15957] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1019.943558][T15957] ? do_filp_open+0x3c0/0x3c0 [ 1019.948239][T15957] do_filp_open+0x1c1/0x3c0 [ 1019.952753][T15957] ? __cfi_do_filp_open+0x10/0x10 [ 1019.957804][T15957] ? alloc_fd+0x4e6/0x590 [ 1019.962147][T15957] do_sys_openat2+0x185/0x7e0 [ 1019.966833][T15957] ? __kasan_check_write+0x14/0x20 [ 1019.971977][T15957] ? do_sys_open+0xe0/0xe0 [ 1019.976421][T15957] ? ksys_write+0x1eb/0x240 [ 1019.980955][T15957] ? __cfi_ksys_write+0x10/0x10 [ 1019.985843][T15957] __x64_sys_openat+0x136/0x160 [ 1019.990720][T15957] x64_sys_call+0x783/0x9a0 [ 1019.995251][T15957] do_syscall_64+0x4c/0xa0 [ 1019.999687][T15957] ? clear_bhb_loop+0x30/0x80 [ 1020.004392][T15957] ? clear_bhb_loop+0x30/0x80 [ 1020.009092][T15957] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1020.015009][T15957] RIP: 0033:0x7fe821d8e929 [ 1020.019448][T15957] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1020.039171][T15957] RSP: 002b:00007fe822b71038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1020.047635][T15957] RAX: ffffffffffffffda RBX: 00007fe821fb6080 RCX: 00007fe821d8e929 [ 1020.055643][T15957] RDX: 0000000000000000 RSI: 0000200000000200 RDI: ffffffffffffff9c [ 1020.063734][T15957] RBP: 00007fe822b71090 R08: 0000000000000000 R09: 0000000000000000 [ 1020.071814][T15957] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1020.079807][T15957] R13: 0000000000000000 R14: 00007fe821fb6080 R15: 00007ffdb646ac18 [ 1020.087815][T15957] [ 1021.154991][ T2385] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 1021.273752][T15972] loop0: detected capacity change from 0 to 40427 [ 1021.281310][T15972] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 1021.289913][T15972] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 1021.357043][T15982] loop3: detected capacity change from 0 to 16 [ 1021.365347][T15982] erofs: Unknown parameter 'ÿÿÿÿ' [ 1021.429886][ T2385] usb 6-1: Using ep0 maxpacket: 32 [ 1021.437666][ T2385] usb 6-1: config 0 has an invalid interface number: 74 but max is 1 [ 1021.460202][T15972] F2FS-fs (loop0): invalid crc value [ 1021.520683][T15972] F2FS-fs (loop0): Found nat_bits in checkpoint [ 1021.528922][ T2385] usb 6-1: config 0 has no interface number 1 [ 1021.586084][ T2385] usb 6-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=8e.fa [ 1021.607966][ T2385] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1021.628873][T15127] EXT4-fs (loop2): unmounting filesystem. [ 1021.636342][ T2385] usb 6-1: Product: syz [ 1021.640735][ T2385] usb 6-1: Manufacturer: syz [ 1021.648974][ T2385] usb 6-1: SerialNumber: syz [ 1021.659514][T15972] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 1021.660028][ T2385] usb 6-1: config 0 descriptor?? [ 1021.671994][T15972] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 1021.687764][ T2385] snd-usb-audio: probe of 6-1:0.74 failed with error -22 [ 1021.706827][ T2385] usb 6-1: Waiting for MOTU Microbook II to boot up... [ 1021.724235][ T2385] usb 6-1: failed setting the sample rate for Motu MicroBook II: -22 [ 1021.738661][ T2385] snd-usb-audio: probe of 6-1:0.0 failed with error -22 [ 1021.889790][T15990] loop2: detected capacity change from 0 to 40427 [ 1021.898407][T15990] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 1021.906507][T15990] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 1021.916272][T15988] loop1: detected capacity change from 0 to 40427 [ 1021.953820][T15990] F2FS-fs (loop2): invalid crc value [ 1021.965814][T15988] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 1021.973711][T15988] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1021.986387][T15990] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1022.003746][T15988] F2FS-fs (loop1): invalid crc value [ 1022.046448][T15996] loop3: detected capacity change from 0 to 16 [ 1022.053392][T15996] erofs: (device loop3): mounted with root inode @ nid 36. [ 1022.062463][T15996] erofs: (device loop3): z_erofs_readahead: readahead error at page 2 @ nid 89 [ 1022.071808][T15996] erofs: (device loop3): z_erofs_readahead: readahead error at page 1 @ nid 89 [ 1022.081008][T15996] erofs: (device loop3): z_erofs_readahead: readahead error at page 0 @ nid 89 [ 1022.090017][T15996] erofs: (device loop3): z_erofs_pcluster_readmore: readmore error at page 0 @ nid 89 [ 1022.099668][T15996] erofs: (device loop3): z_erofs_pcluster_readmore: readmore error at page 0 @ nid 89 [ 1022.101195][T15988] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1022.109353][T15996] erofs: (device loop3): z_erofs_read_folio: failed to read, err [-117] [ 1022.127562][T15990] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 1022.144952][T15990] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 1022.218396][T15988] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 1022.228610][T15988] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 1022.363701][T15992] syz.0.3157: attempt to access beyond end of device [ 1022.363701][T15992] loop0: rw=2049, sector=77824, nr_sectors = 2504 limit=40427 [ 1022.395060][T15992] syz.0.3157: attempt to access beyond end of device [ 1022.395060][T15992] loop0: rw=2049, sector=80328, nr_sectors = 1592 limit=40427 [ 1022.435424][T15992] syz.0.3157: attempt to access beyond end of device [ 1022.435424][T15992] loop0: rw=2049, sector=49152, nr_sectors = 4096 limit=40427 [ 1022.462343][T15990] syz.2.3161: attempt to access beyond end of device [ 1022.462343][T15990] loop2: rw=2049, sector=77824, nr_sectors = 4096 limit=40427 [ 1023.382086][T16018] loop2: detected capacity change from 0 to 16 [ 1023.393258][T16018] erofs: (device loop2): mounted with root inode @ nid 36. [ 1023.408394][T16018] erofs: (device loop2): z_erofs_readahead: readahead error at page 2 @ nid 89 [ 1023.419276][T16018] erofs: (device loop2): z_erofs_readahead: readahead error at page 1 @ nid 89 [ 1023.428421][T16018] erofs: (device loop2): z_erofs_readahead: readahead error at page 0 @ nid 89 [ 1023.437535][T16018] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 0 @ nid 89 [ 1023.447361][T16018] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 0 @ nid 89 [ 1023.457059][T16018] erofs: (device loop2): z_erofs_read_folio: failed to read, err [-117] [ 1023.630691][T16026] FAULT_INJECTION: forcing a failure. [ 1023.630691][T16026] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1023.644056][T16026] CPU: 1 PID: 16026 Comm: syz.0.3168 Not tainted 6.1.141-syzkaller-00036-g7011769d221c #0 [ 1023.654168][T16026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1023.664236][T16026] Call Trace: [ 1023.667527][T16026] [ 1023.670460][T16026] __dump_stack+0x21/0x24 [ 1023.674815][T16026] dump_stack_lvl+0xee/0x150 [ 1023.679432][T16026] ? __cfi_dump_stack_lvl+0x8/0x8 [ 1023.684474][T16026] dump_stack+0x15/0x24 [ 1023.688653][T16026] should_fail_ex+0x3d4/0x520 [ 1023.693345][T16026] should_fail+0xb/0x10 [ 1023.697598][T16026] should_fail_usercopy+0x1a/0x20 [ 1023.702631][T16026] _copy_from_user+0x1e/0xc0 [ 1023.707349][T16026] __se_sys_mount+0x176/0x380 [ 1023.712227][T16026] ? __x64_sys_mount+0xd0/0xd0 [ 1023.717126][T16026] ? __cfi_ksys_write+0x10/0x10 [ 1023.722008][T16026] __x64_sys_mount+0xbf/0xd0 [ 1023.726651][T16026] x64_sys_call+0x65d/0x9a0 [ 1023.731165][T16026] do_syscall_64+0x4c/0xa0 [ 1023.735591][T16026] ? clear_bhb_loop+0x30/0x80 [ 1023.740296][T16026] ? clear_bhb_loop+0x30/0x80 [ 1023.745087][T16026] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1023.751108][T16026] RIP: 0033:0x7fe821d8e929 [ 1023.755533][T16026] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1023.775245][T16026] RSP: 002b:00007fe822b92038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1023.783772][T16026] RAX: ffffffffffffffda RBX: 00007fe821fb5fa0 RCX: 00007fe821d8e929 [ 1023.791761][T16026] RDX: 0000200000000b80 RSI: 0000200000000040 RDI: 0000000000000000 [ 1023.799759][T16026] RBP: 00007fe822b92090 R08: 0000200000002280 R09: 0000000000000000 [ 1023.807733][T16026] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1023.815710][T16026] R13: 0000000000000000 R14: 00007fe821fb5fa0 R15: 00007ffdb646ac18 [ 1023.823778][T16026] [ 1024.719939][T15743] usb 6-1: USB disconnect, device number 35 [ 1024.751254][T16033] loop5: detected capacity change from 0 to 512 [ 1024.762072][T16034] loop2: detected capacity change from 0 to 512 [ 1024.770401][T16036] syz.1.3171[16036] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1024.770475][T16036] syz.1.3171[16036] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1024.770485][T16034] EXT4-fs: Ignoring removed mblk_io_submit option [ 1024.770836][T16034] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1024.798552][T16033] EXT4-fs: Ignoring removed mblk_io_submit option [ 1024.827621][T16039] loop0: detected capacity change from 0 to 512 [ 1024.829965][T16033] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1024.834601][T16039] EXT4-fs: Ignoring removed mblk_io_submit option [ 1024.848848][T16034] EXT4-fs (loop2): 1 truncate cleaned up [ 1024.852475][T16033] EXT4-fs (loop5): 1 truncate cleaned up [ 1024.861972][T16039] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1024.874612][T16033] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1024.885009][T16034] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1024.895655][T16039] EXT4-fs (loop0): 1 truncate cleaned up [ 1024.904411][T16039] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1025.062471][T16042] loop3: detected capacity change from 0 to 16 [ 1025.070017][T16042] erofs: (device loop3): mounted with root inode @ nid 36. [ 1025.078321][T16042] erofs: (device loop3): z_erofs_readahead: readahead error at page 2 @ nid 89 [ 1025.087613][T16042] erofs: (device loop3): z_erofs_readahead: readahead error at page 1 @ nid 89 [ 1025.096617][T16042] erofs: (device loop3): z_erofs_readahead: readahead error at page 0 @ nid 89 [ 1025.106213][T16042] erofs: (device loop3): z_erofs_pcluster_readmore: readmore error at page 0 @ nid 89 [ 1025.115971][T16042] erofs: (device loop3): z_erofs_pcluster_readmore: readmore error at page 0 @ nid 89 [ 1025.125828][T16042] erofs: (device loop3): z_erofs_read_folio: failed to read, err [-117] [ 1025.739582][T15353] EXT4-fs (loop0): unmounting filesystem. [ 1025.752833][T16054] loop3: detected capacity change from 0 to 512 [ 1025.764826][ T2250] EXT4-fs (loop5): unmounting filesystem. [ 1025.765262][T16054] EXT4-fs: Ignoring removed mblk_io_submit option [ 1025.793032][T16054] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1025.815658][T16059] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3176'. [ 1025.842434][T16054] EXT4-fs (loop3): 1 truncate cleaned up [ 1025.858686][T16054] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1026.042818][T16057] loop0: detected capacity change from 0 to 40427 [ 1026.182021][T16057] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 1026.213311][T16057] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 1026.291483][T16057] F2FS-fs (loop0): invalid crc value [ 1026.385827][T16057] F2FS-fs (loop0): Found nat_bits in checkpoint [ 1026.429366][T16057] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 1026.436584][T16057] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 1026.448930][T15127] EXT4-fs (loop2): unmounting filesystem. [ 1027.263939][T16081] loop5: detected capacity change from 0 to 512 [ 1027.272438][T15209] EXT4-fs (loop3): unmounting filesystem. [ 1027.285291][T16081] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 1027.297325][T16081] EXT4-fs (loop5): invalid journal inode [ 1027.308923][T16081] EXT4-fs (loop5): can't get journal size [ 1027.316579][T16081] EXT4-fs (loop5): 1 truncate cleaned up [ 1027.322361][T16081] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1027.344007][T16081] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=16081 comm=syz.5.3179 [ 1027.433490][ T2250] EXT4-fs (loop5): unmounting filesystem. [ 1027.913911][T16091] loop2: detected capacity change from 0 to 16 [ 1027.923941][T16091] erofs: (device loop2): mounted with root inode @ nid 36. [ 1027.940562][T16091] erofs: (device loop2): z_erofs_readahead: readahead error at page 2 @ nid 89 [ 1027.952090][T16091] erofs: (device loop2): z_erofs_readahead: readahead error at page 1 @ nid 89 [ 1027.961302][T16091] erofs: (device loop2): z_erofs_readahead: readahead error at page 0 @ nid 89 [ 1027.970437][T16091] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 0 @ nid 89 [ 1027.980356][T16091] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 0 @ nid 89 [ 1027.990148][T16091] erofs: (device loop2): z_erofs_read_folio: failed to read, err [-117] [ 1028.525547][T16057] bio_check_eod: 9 callbacks suppressed [ 1028.525568][T16057] syz.0.3174: attempt to access beyond end of device [ 1028.525568][T16057] loop0: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 1028.546893][T16100] loop2: detected capacity change from 0 to 512 [ 1028.553629][T16100] EXT4-fs: Ignoring removed mblk_io_submit option [ 1028.563437][T16100] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1028.674837][T16100] EXT4-fs (loop2): 1 truncate cleaned up [ 1028.690829][T16100] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1029.015010][T16104] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3185'. [ 1029.114985][T16104] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3185'. [ 1029.124078][T16104] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3185'. [ 1029.364217][T16102] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3185'. [ 1029.723173][T16095] loop1: detected capacity change from 0 to 40427 [ 1029.731515][T16095] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 1029.739386][T16095] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1029.740588][T15127] EXT4-fs (loop2): unmounting filesystem. [ 1029.749011][T16095] F2FS-fs (loop1): invalid crc value [ 1029.770332][T16114] loop2: detected capacity change from 0 to 512 [ 1029.777084][T16114] EXT4-fs: Ignoring removed mblk_io_submit option [ 1029.791007][T16114] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1029.791837][T16095] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1029.810950][T16117] loop5: detected capacity change from 0 to 16 [ 1029.817844][T16117] erofs: (device loop5): mounted with root inode @ nid 36. [ 1029.826126][T16117] erofs: (device loop5): z_erofs_readahead: readahead error at page 2 @ nid 89 [ 1029.835372][T16117] erofs: (device loop5): z_erofs_readahead: readahead error at page 1 @ nid 89 [ 1029.844346][T16117] erofs: (device loop5): z_erofs_readahead: readahead error at page 0 @ nid 89 [ 1029.853302][T16114] EXT4-fs (loop2): 1 truncate cleaned up [ 1029.853335][T16114] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1029.859120][T16117] erofs: (device loop5): z_erofs_pcluster_readmore: readmore error at page 0 @ nid 89 [ 1029.877575][T16117] erofs: (device loop5): z_erofs_pcluster_readmore: readmore error at page 0 @ nid 89 [ 1029.887209][T16117] erofs: (device loop5): z_erofs_read_folio: failed to read, err [-117] [ 1029.942470][T16095] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 1029.951124][T16095] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 1030.409018][T16129] loop0: detected capacity change from 0 to 512 [ 1030.415742][T16129] EXT4-fs: Ignoring removed mblk_io_submit option [ 1030.436328][T16129] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1030.449054][T16129] EXT4-fs (loop0): 1 truncate cleaned up [ 1030.455064][T16129] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1031.895053][T16136] loop5: detected capacity change from 0 to 16 [ 1031.905352][T16136] erofs: Unknown parameter 'ÿÿÿÿ' [ 1031.914456][T15127] EXT4-fs (loop2): unmounting filesystem. [ 1031.946432][T16122] syz.1.3183: attempt to access beyond end of device [ 1031.946432][T16122] loop1: rw=2049, sector=77824, nr_sectors = 2080 limit=40427 [ 1031.961743][T15353] EXT4-fs (loop0): unmounting filesystem. [ 1031.980379][T16122] syz.1.3183: attempt to access beyond end of device [ 1031.980379][T16122] loop1: rw=2049, sector=79904, nr_sectors = 2016 limit=40427 [ 1031.999842][T16141] syz.3.3192 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 1032.017172][T16122] syz.1.3183: attempt to access beyond end of device [ 1032.017172][T16122] loop1: rw=2049, sector=49152, nr_sectors = 2048 limit=40427 [ 1032.041470][T16141] loop3: detected capacity change from 0 to 16 [ 1032.049108][T16141] erofs: (device loop3): erofs_read_superblock: blkszbits 3 isn't supported [ 1032.055502][T16122] syz.1.3183: attempt to access beyond end of device [ 1032.055502][T16122] loop1: rw=2049, sector=51200, nr_sectors = 2048 limit=40427 [ 1033.450470][T16151] loop0: detected capacity change from 0 to 256 [ 1033.530704][T16151] FAT-fs (loop0): bogus number of FAT sectors [ 1033.536986][T16151] FAT-fs (loop0): Can't find a valid FAT filesystem [ 1033.585316][T16152] loop5: detected capacity change from 0 to 16 [ 1033.594673][T16152] erofs: (device loop5): mounted with root inode @ nid 36. [ 1033.609460][T16152] erofs: (device loop5): z_erofs_readahead: readahead error at page 2 @ nid 89 [ 1033.620214][T16152] erofs: (device loop5): z_erofs_readahead: readahead error at page 1 @ nid 89 [ 1033.629255][T16152] erofs: (device loop5): z_erofs_readahead: readahead error at page 0 @ nid 89 [ 1033.638368][T16152] erofs: (device loop5): z_erofs_pcluster_readmore: readmore error at page 0 @ nid 89 [ 1033.648102][T16152] erofs: (device loop5): z_erofs_pcluster_readmore: readmore error at page 0 @ nid 89 [ 1033.657749][T16152] erofs: (device loop5): z_erofs_read_folio: failed to read, err [-117] [ 1034.323965][T16122] syz.1.3183: attempt to access beyond end of device [ 1034.323965][T16122] loop1: rw=2049, sector=57344, nr_sectors = 4920 limit=40427 [ 1034.549573][T16122] syz.1.3183: attempt to access beyond end of device [ 1034.549573][T16122] loop1: rw=2049, sector=62264, nr_sectors = 2448 limit=40427 [ 1035.455037][T16171] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3200'. [ 1035.554997][T16171] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3200'. [ 1035.564057][T16171] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3200'. [ 1035.865007][T16171] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3200'. [ 1036.259576][T16175] loop3: detected capacity change from 0 to 512 [ 1036.281110][T16175] EXT4-fs: Ignoring removed mblk_io_submit option [ 1036.296489][T16175] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1036.699671][T16181] loop1: detected capacity change from 0 to 512 [ 1036.715791][T16181] EXT4-fs: Ignoring removed mblk_io_submit option [ 1036.747567][T16181] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1036.758163][T16175] EXT4-fs (loop3): 1 truncate cleaned up [ 1036.773427][T16175] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1036.786023][T16186] loop0: detected capacity change from 0 to 512 [ 1036.793446][T16186] EXT4-fs: Ignoring removed mblk_io_submit option [ 1036.801104][T16186] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1036.851223][T16181] EXT4-fs (loop1): 1 truncate cleaned up [ 1036.857211][T16181] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1036.874677][T16186] EXT4-fs (loop0): 1 truncate cleaned up [ 1036.881119][T16186] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1037.028356][T15287] EXT4-fs (loop1): unmounting filesystem. [ 1037.101895][T16197] loop2: detected capacity change from 0 to 16 [ 1037.110161][T16197] erofs: Unknown parameter 'ÿÿÿÿ' [ 1038.253232][T15209] EXT4-fs (loop3): unmounting filesystem. [ 1038.260679][T15353] EXT4-fs (loop0): unmounting filesystem. [ 1038.435650][T16217] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3208'. [ 1038.474402][T16217] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3208'. [ 1038.484990][T16217] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3208'. [ 1038.927982][T16220] loop0: detected capacity change from 0 to 16 [ 1038.934918][T16220] erofs: (device loop0): mounted with root inode @ nid 36. [ 1038.943293][T16220] erofs: (device loop0): z_erofs_readahead: readahead error at page 2 @ nid 89 [ 1038.952542][T16220] erofs: (device loop0): z_erofs_readahead: readahead error at page 1 @ nid 89 [ 1038.961574][T16220] erofs: (device loop0): z_erofs_readahead: readahead error at page 0 @ nid 89 [ 1038.970645][T16220] erofs: (device loop0): z_erofs_pcluster_readmore: readmore error at page 0 @ nid 89 [ 1038.977949][T16207] loop2: detected capacity change from 0 to 40427 [ 1038.980287][T16220] erofs: (device loop0): z_erofs_pcluster_readmore: readmore error at page 0 @ nid 89 [ 1038.996383][T16220] erofs: (device loop0): z_erofs_read_folio: failed to read, err [-117] [ 1039.038850][T16207] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 1039.046776][T16207] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 1039.055949][T16207] F2FS-fs (loop2): invalid crc value [ 1039.062761][T16207] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1039.066459][T16211] loop1: detected capacity change from 0 to 40427 [ 1039.076487][T16211] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 1039.084297][T16211] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1039.095353][T16211] F2FS-fs (loop1): invalid crc value [ 1039.113015][T16207] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 1039.120237][T16207] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 1039.136219][T16211] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1039.160274][T16230] loop5: detected capacity change from 0 to 512 [ 1039.193446][T16230] EXT4-fs: Ignoring removed mblk_io_submit option [ 1039.214004][T16230] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1039.235861][T16234] loop3: detected capacity change from 0 to 512 [ 1039.242502][T16234] EXT4-fs: Ignoring removed nobh option [ 1039.250199][T16230] EXT4-fs (loop5): 1 truncate cleaned up [ 1039.256083][T16234] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1039.256892][T16230] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1039.275193][T16211] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 1039.282264][T16211] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 1039.287069][T16234] EXT4-fs (loop3): 1 truncate cleaned up [ 1039.318446][T16234] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1039.388177][T16234] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3214'. [ 1039.413228][ T2250] EXT4-fs (loop5): unmounting filesystem. [ 1039.439900][ T28] kauditd_printk_skb: 14 callbacks suppressed [ 1039.439917][ T28] audit: type=1400 audit(1751569615.100:1683): avc: denied { rename } for pid=16233 comm="syz.3.3214" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1039.706912][T16246] loop5: detected capacity change from 0 to 40427 [ 1039.714366][T16246] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 1039.722394][T16246] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 1039.736163][T16246] F2FS-fs (loop5): invalid crc value [ 1039.744978][ T426] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 1039.765536][T16246] F2FS-fs (loop5): Found nat_bits in checkpoint [ 1039.833098][T16246] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 1039.841270][T16207] syz.2.3207: attempt to access beyond end of device [ 1039.841270][T16207] loop2: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 1039.844954][T16246] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 1039.855689][T16211] syz.1.3210: attempt to access beyond end of device [ 1039.855689][T16211] loop1: rw=2049, sector=40424, nr_sectors = 24 limit=40427 [ 1039.924946][ T426] usb 4-1: Using ep0 maxpacket: 32 [ 1039.931456][ T426] usb 4-1: invalid descriptor for config index 0: type = 0x2, length = 73 [ 1039.940679][ T426] usb 4-1: can't read configurations, error -22 [ 1040.094926][ T426] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 1040.284966][ T426] usb 4-1: Using ep0 maxpacket: 32 [ 1040.291026][T16246] syz.5.3215: attempt to access beyond end of device [ 1040.291026][T16246] loop5: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 1040.291735][ T426] usb 4-1: invalid descriptor for config index 0: type = 0x2, length = 73 [ 1040.319417][T16256] loop0: detected capacity change from 0 to 40427 [ 1040.341067][ T426] usb 4-1: can't read configurations, error -22 [ 1040.342822][T16256] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 1040.359791][T16256] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 1040.361526][ T426] usb usb4-port1: attempt power cycle [ 1040.369589][T16256] F2FS-fs (loop0): invalid crc value [ 1040.395983][T16256] F2FS-fs (loop0): Found nat_bits in checkpoint [ 1040.495490][T16256] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 1040.502742][T16256] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 1040.566691][T16264] loop2: detected capacity change from 0 to 512 [ 1040.583527][T16264] EXT4-fs: Ignoring removed mblk_io_submit option [ 1040.603705][T16264] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1040.635557][T16264] EXT4-fs (loop2): 1 truncate cleaned up [ 1040.641264][T16264] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1040.688729][T16258] loop1: detected capacity change from 0 to 40427 [ 1040.705624][T16258] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 1040.715638][T16258] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1040.735026][T16258] F2FS-fs (loop1): invalid crc value [ 1040.785912][T16258] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1040.804943][ T426] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 1040.845296][ T426] usb 4-1: Using ep0 maxpacket: 32 [ 1040.851834][ T426] usb 4-1: invalid descriptor for config index 0: type = 0x2, length = 73 [ 1040.860466][ T426] usb 4-1: can't read configurations, error -22 [ 1040.862794][T16258] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 1040.890613][T16258] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 1040.959367][T16256] syz.0.3216: attempt to access beyond end of device [ 1040.959367][T16256] loop0: rw=2049, sector=77824, nr_sectors = 4096 limit=40427 [ 1041.016328][T16256] syz.0.3216: attempt to access beyond end of device [ 1041.016328][T16256] loop0: rw=2049, sector=49152, nr_sectors = 3912 limit=40427 [ 1041.030683][ T426] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 1041.041546][T16256] syz.0.3216: attempt to access beyond end of device [ 1041.041546][T16256] loop0: rw=2049, sector=53064, nr_sectors = 184 limit=40427 [ 1041.065897][ T426] usb 4-1: Using ep0 maxpacket: 32 [ 1041.073943][T16256] syz.0.3216: attempt to access beyond end of device [ 1041.073943][T16256] loop0: rw=2049, sector=57344, nr_sectors = 2048 limit=40427 [ 1041.078173][ T426] usb 4-1: invalid descriptor for config index 0: type = 0x2, length = 73 [ 1041.142038][T16256] syz.0.3216: attempt to access beyond end of device [ 1041.142038][T16256] loop0: rw=2049, sector=59392, nr_sectors = 2072 limit=40427 [ 1041.167128][ T426] usb 4-1: can't read configurations, error -22 [ 1041.174007][T16256] syz.0.3216: attempt to access beyond end of device [ 1041.174007][T16256] loop0: rw=2049, sector=61464, nr_sectors = 2072 limit=40427 [ 1041.177465][ T426] usb usb4-port1: unable to enumerate USB device [ 1041.236419][T16256] syz.0.3216: attempt to access beyond end of device [ 1041.236419][T16256] loop0: rw=2049, sector=63536, nr_sectors = 3816 limit=40427 [ 1042.216313][T16288] loop0: detected capacity change from 0 to 16 [ 1042.224357][T16288] erofs: Unknown parameter 'ÿÿÿÿ' [ 1042.329804][T15127] EXT4-fs (loop2): unmounting filesystem. [ 1042.437539][T15209] EXT4-fs (loop3): unmounting filesystem. [ 1042.609376][T16297] binder: 16296:16297 ioctl c0306201 0 returned -14 [ 1042.634624][T16295] loop2: detected capacity change from 0 to 16 [ 1042.721553][T16295] erofs: (device loop2): mounted with root inode @ nid 36. [ 1042.739607][T16295] erofs: (device loop2): z_erofs_readahead: readahead error at page 2 @ nid 89 [ 1042.750714][T16295] erofs: (device loop2): z_erofs_readahead: readahead error at page 1 @ nid 89 [ 1042.759961][T16295] erofs: (device loop2): z_erofs_readahead: readahead error at page 0 @ nid 89 [ 1042.769158][T16295] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 0 @ nid 89 [ 1042.779065][T16295] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 0 @ nid 89 [ 1042.788825][T16295] erofs: (device loop2): z_erofs_read_folio: failed to read, err [-117] [ 1042.982021][T16301] loop1: detected capacity change from 0 to 40427 [ 1042.989199][T16301] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 1042.997082][T16301] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1043.006313][T16301] F2FS-fs (loop1): invalid crc value [ 1043.013135][T16301] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1043.043920][T16301] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 1043.051111][T16301] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 1043.104974][ T8245] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 1043.305264][ T8245] usb 4-1: Using ep0 maxpacket: 16 [ 1043.350905][ T8245] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1043.392115][ T8245] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1043.408533][ T8245] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1043.431265][ T8245] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1043.448799][ T8245] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1043.499347][ T8245] usb 4-1: config 0 descriptor?? [ 1043.598222][T16318] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3228'. [ 1043.614754][T16318] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3228'. [ 1043.624451][T16318] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3228'. [ 1043.648315][T16318] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3228'. [ 1044.060320][T16316] loop5: detected capacity change from 0 to 40427 [ 1044.067491][T16316] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 1044.075331][T16316] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 1044.084391][T16316] F2FS-fs (loop5): invalid crc value [ 1044.093898][ T8245] usbhid 4-1:0.0: can't add hid device: -71 [ 1044.100072][ T8245] usbhid: probe of 4-1:0.0 failed with error -71 [ 1044.107459][ T8245] usb 4-1: USB disconnect, device number 40 [ 1044.108179][T16316] F2FS-fs (loop5): Found nat_bits in checkpoint [ 1044.149709][T16322] loop0: detected capacity change from 0 to 40427 [ 1044.157805][T16322] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 1044.165691][T16322] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 1044.183642][T16322] F2FS-fs (loop0): invalid crc value [ 1044.190328][T16316] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 1044.229454][T16316] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 1044.237932][T16331] FAULT_INJECTION: forcing a failure. [ 1044.237932][T16331] name failslab, interval 1, probability 0, space 0, times 0 [ 1044.250634][T16331] CPU: 0 PID: 16331 Comm: syz.1.3231 Not tainted 6.1.141-syzkaller-00036-g7011769d221c #0 [ 1044.251605][T16322] F2FS-fs (loop0): Found nat_bits in checkpoint [ 1044.260547][T16331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1044.260565][T16331] Call Trace: [ 1044.260572][T16331] [ 1044.260581][T16331] __dump_stack+0x21/0x24 [ 1044.287465][T16331] dump_stack_lvl+0xee/0x150 [ 1044.292101][T16331] ? __cfi_dump_stack_lvl+0x8/0x8 [ 1044.297157][T16331] ? kasan_set_track+0x60/0x70 [ 1044.301935][T16331] ? kasan_save_alloc_info+0x25/0x30 [ 1044.307269][T16331] ? __kasan_slab_alloc+0x72/0x80 [ 1044.312330][T16331] ? slab_post_alloc_hook+0x4f/0x2d0 [ 1044.317642][T16331] ? kmem_cache_alloc+0x16e/0x330 [ 1044.322683][T16331] dump_stack+0x15/0x24 [ 1044.326865][T16331] should_fail_ex+0x3d4/0x520 [ 1044.331562][T16331] __should_failslab+0xac/0xf0 [ 1044.336335][T16331] ? ref_tracker_alloc+0x139/0x430 [ 1044.341483][T16331] should_failslab+0x9/0x20 [ 1044.346005][T16331] __kmem_cache_alloc_node+0x3d/0x2c0 [ 1044.351390][T16331] ? ref_tracker_alloc+0x139/0x430 [ 1044.356609][T16331] kmalloc_trace+0x29/0xb0 [ 1044.361478][T16331] ref_tracker_alloc+0x139/0x430 [ 1044.366527][T16331] ? __cfi_ref_tracker_alloc+0x10/0x10 [ 1044.372027][T16331] ? slab_post_alloc_hook+0x6d/0x2d0 [ 1044.377319][T16331] dst_init+0xc4/0x3d0 [ 1044.381392][T16331] dst_alloc+0x191/0x1e0 [ 1044.385634][T16331] ip_route_output_key_hash_rcu+0x1516/0x2060 [ 1044.391711][T16331] ip_route_output_flow+0x12e/0x2e0 [ 1044.396911][T16331] ? __cfi_xfrm_pol_bin_cmp+0x10/0x10 [ 1044.402292][T16331] ? __cfi_ip_route_output_flow+0x10/0x10 [ 1044.408017][T16331] ? __xfrm_policy_inexact_prune_bin+0x940/0x940 [ 1044.414350][T16331] ? kasan_save_free_info+0x31/0x50 [ 1044.419561][T16331] ? __cfi_xfrm_pol_bin_key+0x10/0x10 [ 1044.425025][T16331] ? __cfi_xfrm_pol_bin_obj+0x10/0x10 [ 1044.430405][T16331] ? selinux_req_classify_flow+0x1e/0x90 [ 1044.436047][T16331] inet_csk_route_req+0x4ca/0xb60 [ 1044.441085][T16331] tcp_v4_send_synack+0xc2/0x9d0 [ 1044.446030][T16331] ? debug_smp_processor_id+0x17/0x20 [ 1044.451411][T16331] ? __cfi_tcp_v4_send_synack+0x10/0x10 [ 1044.456959][T16331] ? __cfi_get_random_u32+0x10/0x10 [ 1044.462169][T16331] ? __xfrm_policy_check+0x28d0/0x28d0 [ 1044.467631][T16331] ? __xfrm_decode_session+0xdcd/0x1e40 [ 1044.473181][T16331] ? __kasan_check_read+0x11/0x20 [ 1044.478218][T16331] tcp_rtx_synack+0x16b/0x490 [ 1044.482902][T16331] ? __cfi_tcp_rtx_synack+0x10/0x10 [ 1044.488123][T16331] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 1044.494371][T16331] ? __cfi___xfrm_policy_check+0x10/0x10 [ 1044.500007][T16331] inet_rtx_syn_ack+0x74/0xd0 [ 1044.504700][T16331] tcp_check_req+0x48b/0x1470 [ 1044.509384][T16331] ? security_sock_rcv_skb+0x8c/0xb0 [ 1044.514687][T16331] ? __cfi_tcp_check_req+0x10/0x10 [ 1044.519808][T16331] ? memcpy+0x56/0x70 [ 1044.523843][T16331] ? tcp_v4_fill_cb+0x284/0x4f0 [ 1044.528703][T16331] tcp_v4_rcv+0x1adf/0x2a80 [ 1044.533218][T16331] ? __local_bh_enable_ip+0x58/0x80 [ 1044.538423][T16331] ? __cfi_tcp_v4_rcv+0x10/0x10 [ 1044.543284][T16331] ? ipt_do_table+0x2ae/0x15d0 [ 1044.548064][T16331] ip_protocol_deliver_rcu+0x325/0x6e0 [ 1044.553554][T16331] ip_local_deliver_finish+0x24e/0x410 [ 1044.559021][T16331] ip_local_deliver+0x1d8/0x320 [ 1044.563881][T16331] ? __cfi_ip_local_deliver+0x10/0x10 [ 1044.569267][T16331] ? __cfi_ip_local_deliver_finish+0x10/0x10 [ 1044.575271][T16331] ? ip_rcv_finish_core+0xb0b/0x1490 [ 1044.580580][T16331] ip_rcv+0x163/0x270 [ 1044.584575][T16331] ? do_syscall_64+0x4c/0xa0 [ 1044.589168][T16331] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1044.595246][T16331] ? __cfi_ip_rcv+0x10/0x10 [ 1044.599758][T16331] ? __cfi_ip_rcv_finish+0x10/0x10 [ 1044.604919][T16331] ? __cfi_ip_rcv+0x10/0x10 [ 1044.609427][T16331] __netif_receive_skb+0xd7/0x2a0 [ 1044.614543][T16331] ? tun_rx_batched+0x158/0x770 [ 1044.619401][T16331] netif_receive_skb+0x98/0x3d0 [ 1044.624258][T16331] ? __cfi_netif_receive_skb+0x10/0x10 [ 1044.629725][T16331] ? kasan_save_alloc_info+0x25/0x30 [ 1044.635017][T16331] ? tun_rx_batched+0x158/0x770 [ 1044.639874][T16331] tun_rx_batched+0x1b6/0x770 [ 1044.644570][T16331] ? pskb_may_pull+0x100/0x100 [ 1044.649350][T16331] ? tun_get_user+0x1f21/0x3320 [ 1044.654224][T16331] tun_get_user+0x2494/0x3320 [ 1044.658937][T16331] ? tun_do_read+0x1c20/0x1c20 [ 1044.663719][T16331] ? __kasan_check_write+0x14/0x20 [ 1044.668865][T16331] ? ref_tracker_alloc+0x30f/0x430 [ 1044.674000][T16331] ? __cfi_ref_tracker_alloc+0x10/0x10 [ 1044.679476][T16331] ? avc_policy_seqno+0x1b/0x70 [ 1044.684421][T16331] ? selinux_file_permission+0x2a5/0x510 [ 1044.690065][T16331] tun_chr_write_iter+0x1fb/0x300 [ 1044.695099][T16331] vfs_write+0x5db/0xca0 [ 1044.699348][T16331] ? slab_free_freelist_hook+0xc2/0x190 [ 1044.704907][T16331] ? __cfi_vfs_write+0x10/0x10 [ 1044.709707][T16331] ? __fget_files+0x2d5/0x330 [ 1044.714402][T16331] ? __fdget_pos+0x1f2/0x380 [ 1044.719003][T16331] ? ksys_write+0x71/0x240 [ 1044.723438][T16331] ksys_write+0x140/0x240 [ 1044.727777][T16331] ? __cfi_ksys_write+0x10/0x10 [ 1044.732638][T16331] ? debug_smp_processor_id+0x17/0x20 [ 1044.738016][T16331] __x64_sys_write+0x7b/0x90 [ 1044.742611][T16331] x64_sys_call+0x27b/0x9a0 [ 1044.747116][T16331] do_syscall_64+0x4c/0xa0 [ 1044.751533][T16331] ? clear_bhb_loop+0x30/0x80 [ 1044.756212][T16331] ? clear_bhb_loop+0x30/0x80 [ 1044.760889][T16331] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1044.766786][T16331] RIP: 0033:0x7f078498d3df [ 1044.771212][T16331] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 1044.790816][T16331] RSP: 002b:00007f0785883000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1044.799233][T16331] RAX: ffffffffffffffda RBX: 00007f0784bb5fa0 RCX: 00007f078498d3df [ 1044.807220][T16331] RDX: 0000000000000036 RSI: 0000200000000080 RDI: 00000000000000c8 [ 1044.815207][T16331] RBP: 00007f0785883090 R08: 0000000000000000 R09: 0000000000000000 [ 1044.823178][T16331] R10: 0000000000000036 R11: 0000000000000293 R12: 0000000000000001 [ 1044.831154][T16331] R13: 0000000000000000 R14: 00007f0784bb5fa0 R15: 00007ffd5a6e4c68 [ 1044.839129][T16331] [ 1044.842208][T16331] memory allocation failure, unreliable refcount tracker. [ 1044.852236][T16322] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 1044.860030][T16322] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 1045.137099][ T28] audit: type=1326 audit(1751569620.770:1684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16333 comm="syz.1.3232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f078498e929 code=0x7ffc0000 [ 1045.317272][ T28] audit: type=1326 audit(1751569620.770:1685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16333 comm="syz.1.3232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f078498e929 code=0x7ffc0000 [ 1045.340877][ T28] audit: type=1326 audit(1751569620.780:1686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16333 comm="syz.1.3232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f078498e929 code=0x7ffc0000 [ 1045.384950][ T28] audit: type=1326 audit(1751569620.780:1687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16333 comm="syz.1.3232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f078498e929 code=0x7ffc0000 [ 1045.398718][T16346] loop3: detected capacity change from 0 to 512 [ 1045.415501][ T28] audit: type=1326 audit(1751569620.780:1688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16333 comm="syz.1.3232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f078498e929 code=0x7ffc0000 [ 1045.445136][ T28] audit: type=1326 audit(1751569620.780:1689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16333 comm="syz.1.3232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f078498e929 code=0x7ffc0000 [ 1045.446461][T16335] bio_check_eod: 7 callbacks suppressed [ 1045.446482][T16335] syz.5.3229: attempt to access beyond end of device [ 1045.446482][T16335] loop5: rw=2049, sector=77824, nr_sectors = 472 limit=40427 [ 1045.488265][ T28] audit: type=1326 audit(1751569620.780:1690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16333 comm="syz.1.3232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f078498e929 code=0x7ffc0000 [ 1045.488304][ T28] audit: type=1326 audit(1751569620.780:1691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16333 comm="syz.1.3232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f078498e929 code=0x7ffc0000 [ 1045.488331][ T28] audit: type=1326 audit(1751569620.790:1692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16333 comm="syz.1.3232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7f078498e929 code=0x7ffc0000 [ 1045.550677][T16337] loop2: detected capacity change from 0 to 40427 [ 1045.566203][T16346] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=e000c018, mo2=0002] [ 1045.574548][T16346] System zones: 0-2, 18-18, 34-35 [ 1045.579791][T16337] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 1045.588858][ T28] audit: type=1326 audit(1751569620.790:1693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16333 comm="syz.1.3232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=96 compat=0 ip=0xffffffffff600000 code=0x7ffc0000 [ 1045.592858][T16337] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 1045.613782][T16346] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1045.640044][T16346] ext4 filesystem being mounted at /48/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1045.667142][T16337] F2FS-fs (loop2): invalid crc value [ 1045.711000][T16337] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1045.722240][T16322] syz.0.3230: attempt to access beyond end of device [ 1045.722240][T16322] loop0: rw=2049, sector=77824, nr_sectors = 2480 limit=40427 [ 1045.754224][T16322] syz.0.3230: attempt to access beyond end of device [ 1045.754224][T16322] loop0: rw=2049, sector=80304, nr_sectors = 1616 limit=40427 [ 1045.778169][T16322] syz.0.3230: attempt to access beyond end of device [ 1045.778169][T16322] loop0: rw=2049, sector=49152, nr_sectors = 2848 limit=40427 [ 1045.809417][T16354] loop1: detected capacity change from 0 to 1024 [ 1045.816829][T16322] syz.0.3230: attempt to access beyond end of device [ 1045.816829][T16322] loop0: rw=2049, sector=52000, nr_sectors = 1248 limit=40427 [ 1045.827053][T16354] EXT4-fs: Ignoring removed mblk_io_submit option [ 1045.842677][T16322] syz.0.3230: attempt to access beyond end of device [ 1045.842677][T16322] loop0: rw=2049, sector=57344, nr_sectors = 3912 limit=40427 [ 1045.858154][T16354] EXT4-fs: Ignoring removed bh option [ 1045.864097][T16337] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 1045.870239][T16322] syz.0.3230: attempt to access beyond end of device [ 1045.870239][T16322] loop0: rw=2049, sector=61256, nr_sectors = 3792 limit=40427 [ 1045.884929][T16337] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 1045.885485][T16354] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1045.926062][T16354] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1045.945053][ T798] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 1045.971254][T16322] syz.0.3230: attempt to access beyond end of device [ 1045.971254][T16322] loop0: rw=2049, sector=65048, nr_sectors = 12776 limit=40427 [ 1046.010401][T16322] syz.0.3230: attempt to access beyond end of device [ 1046.010401][T16322] loop0: rw=2049, sector=81920, nr_sectors = 3944 limit=40427 [ 1046.024729][T16354] EXT4-fs (loop1): re-mounted. Quota mode: writeback. [ 1046.042506][T15353] syz-executor: attempt to access beyond end of device [ 1046.042506][T15353] loop0: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 1046.057049][T15287] EXT4-fs (loop1): unmounting filesystem. [ 1046.551219][ T798] usb 4-1: device descriptor read/64, error -71 [ 1046.733236][T16369] loop1: detected capacity change from 0 to 16 [ 1046.740335][T16369] erofs: (device loop1): mounted with root inode @ nid 36. [ 1046.748893][T16369] erofs: (device loop1): z_erofs_readahead: readahead error at page 2 @ nid 89 [ 1046.758217][T16369] erofs: (device loop1): z_erofs_readahead: readahead error at page 1 @ nid 89 [ 1046.767333][T16369] erofs: (device loop1): z_erofs_readahead: readahead error at page 0 @ nid 89 [ 1046.776707][T16369] erofs: (device loop1): z_erofs_pcluster_readmore: readmore error at page 0 @ nid 89 [ 1046.786336][T16369] erofs: (device loop1): z_erofs_pcluster_readmore: readmore error at page 0 @ nid 89 [ 1046.795925][T16369] erofs: (device loop1): z_erofs_read_folio: failed to read, err [-117] [ 1046.870883][T16374] loop0: detected capacity change from 0 to 16 [ 1046.879076][T16374] erofs: Unknown parameter 'ÿÿÿÿ' [ 1047.115183][ T798] usb 4-1: device descriptor read/64, error -71 [ 1047.185888][T16381] loop2: detected capacity change from 0 to 16 [ 1047.192642][T16381] erofs: (device loop2): mounted with root inode @ nid 36. [ 1047.200684][T16381] erofs: (device loop2): z_erofs_readahead: readahead error at page 2 @ nid 89 [ 1047.209922][T16381] erofs: (device loop2): z_erofs_readahead: readahead error at page 1 @ nid 89 [ 1047.218963][T16381] erofs: (device loop2): z_erofs_readahead: readahead error at page 0 @ nid 89 [ 1047.227950][T16381] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 0 @ nid 89 [ 1047.237538][T16381] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 0 @ nid 89 [ 1047.247216][T16381] erofs: (device loop2): z_erofs_read_folio: failed to read, err [-117] [ 1047.384979][ T798] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 1047.941360][ T798] usb 4-1: device descriptor read/64, error -71 [ 1047.952316][T16389] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3244'. [ 1047.956051][T16391] binder: 16390:16391 ioctl c0306201 0 returned -14 [ 1048.129819][T16395] loop2: detected capacity change from 0 to 40427 [ 1048.136838][T16394] loop5: detected capacity change from 0 to 40427 [ 1048.137024][T16395] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 1048.144025][T16394] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 1048.151230][T16395] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 1048.159431][T16394] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 1048.168219][T16395] F2FS-fs (loop2): invalid crc value [ 1048.176386][T16394] F2FS-fs (loop5): invalid crc value [ 1048.182301][T16395] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1048.187564][T16394] F2FS-fs (loop5): Found nat_bits in checkpoint [ 1048.224966][ T2385] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 1048.233207][T16395] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 1048.236171][T16394] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 1048.240448][T16395] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 1048.247779][ T798] usb 4-1: device descriptor read/64, error -71 [ 1048.255737][T16394] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 1048.324121][T16405] loop1: detected capacity change from 0 to 512 [ 1048.331786][T16405] EXT4-fs: Ignoring removed mblk_io_submit option [ 1048.338973][T16405] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1048.362872][T16405] EXT4-fs (loop1): 1 truncate cleaned up [ 1048.368778][T16405] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1048.382468][ T798] usb usb4-port1: attempt power cycle [ 1048.390856][T15209] EXT4-fs (loop3): unmounting filesystem. [ 1048.414941][ T2385] usb 1-1: Using ep0 maxpacket: 16 [ 1048.416478][T16412] syz.3.3249[16412] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1048.420165][T16412] syz.3.3249[16412] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1048.421511][ T2385] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1048.524653][ T2385] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1048.534555][ T2385] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1048.547731][ T2385] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1048.557014][ T2385] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1048.586259][ T2385] usb 1-1: config 0 descriptor?? [ 1048.884952][ T798] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 1048.926353][ T798] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1048.944934][ T798] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1048.968078][ T798] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1048.984939][ T798] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1048.994495][ T2385] usbhid 1-1:0.0: can't add hid device: -71 [ 1049.008762][ T2385] usbhid: probe of 1-1:0.0 failed with error -71 [ 1049.014144][ T798] usb 4-1: config 0 descriptor?? [ 1049.026163][ T2385] usb 1-1: USB disconnect, device number 42 [ 1049.371085][T15287] EXT4-fs (loop1): unmounting filesystem. [ 1049.425573][ T798] plantronics 0003:047F:FFFF.004F: unknown main item tag 0x0 [ 1049.434363][ T798] plantronics 0003:047F:FFFF.004F: No inputs registered, leaving [ 1049.443637][ T798] plantronics 0003:047F:FFFF.004F: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 1049.965107][ T798] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 1050.146110][ T798] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1050.157372][ T798] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1050.167240][ T798] usb 3-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 1050.176364][ T798] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1050.185057][ T798] usb 3-1: config 0 descriptor?? [ 1050.526011][T16444] loop0: detected capacity change from 0 to 16 [ 1050.536438][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 1050.536621][ T28] audit: type=1326 audit(1751569626.140:1698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16435 comm="syz.5.3255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f8838e929 code=0x7ffc0000 [ 1050.576121][ T28] audit: type=1326 audit(1751569626.150:1699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16435 comm="syz.5.3255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f8838e929 code=0x7ffc0000 [ 1050.600479][ T28] audit: type=1326 audit(1751569626.150:1700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16435 comm="syz.5.3255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f2f8838e929 code=0x7ffc0000 [ 1050.600608][T16444] erofs: (device loop0): mounted with root inode @ nid 36. [ 1050.636765][T16444] erofs: (device loop0): z_erofs_readahead: readahead error at page 2 @ nid 89 [ 1050.646099][T16444] erofs: (device loop0): z_erofs_readahead: readahead error at page 1 @ nid 89 [ 1050.655204][T16444] erofs: (device loop0): z_erofs_readahead: readahead error at page 0 @ nid 89 [ 1050.664234][T16444] erofs: (device loop0): z_erofs_pcluster_readmore: readmore error at page 0 @ nid 89 [ 1050.664536][ T28] audit: type=1326 audit(1751569626.150:1701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16435 comm="syz.5.3255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f8838e929 code=0x7ffc0000 [ 1050.673882][T16444] erofs: (device loop0): z_erofs_pcluster_readmore: readmore error at page 0 @ nid 89 [ 1050.697428][ T28] audit: type=1326 audit(1751569626.150:1702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16435 comm="syz.5.3255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f8838e929 code=0x7ffc0000 [ 1050.707018][T16444] erofs: (device loop0): z_erofs_read_folio: failed to read, err [-117] [ 1050.739121][ T28] audit: type=1326 audit(1751569626.160:1703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16435 comm="syz.5.3255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f2f8838e929 code=0x7ffc0000 [ 1050.762783][ T28] audit: type=1326 audit(1751569626.160:1704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16435 comm="syz.5.3255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f8838e929 code=0x7ffc0000 [ 1050.786356][ T28] audit: type=1326 audit(1751569626.160:1705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16435 comm="syz.5.3255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f8838e929 code=0x7ffc0000 [ 1050.810108][ T28] audit: type=1326 audit(1751569626.170:1706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16435 comm="syz.5.3255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7f2f8838e929 code=0x7ffc0000 [ 1050.833660][ T28] audit: type=1326 audit(1751569626.170:1707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16435 comm="syz.5.3255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=96 compat=0 ip=0xffffffffff600000 code=0x7ffc0000 [ 1051.414114][ T8514] usb 4-1: USB disconnect, device number 43 [ 1051.452263][T16451] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3259'. [ 1051.462737][T16451] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3259'. [ 1051.471795][T16451] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3259'. [ 1051.546391][T16460] loop3: detected capacity change from 0 to 512 [ 1051.560371][T16460] EXT4-fs: Ignoring removed mblk_io_submit option [ 1051.618863][T16460] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1051.643345][T16464] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3263'. [ 1051.656204][T16460] EXT4-fs (loop3): 1 truncate cleaned up [ 1051.671118][T16460] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1052.751154][T16456] loop5: detected capacity change from 0 to 40427 [ 1052.760559][T16456] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 1052.789435][T16456] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 1053.023705][ T798] usbhid 3-1:0.0: can't add hid device: -71 [ 1053.033865][T15209] EXT4-fs (loop3): unmounting filesystem. [ 1053.040141][ T798] usbhid: probe of 3-1:0.0 failed with error -71 [ 1053.047395][ T798] usb 3-1: USB disconnect, device number 35 [ 1053.057892][T16456] F2FS-fs (loop5): invalid crc value [ 1053.078897][T16456] F2FS-fs (loop5): Found nat_bits in checkpoint [ 1053.085367][ T314] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 1053.149512][T16456] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 1053.157220][T16456] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 1053.944967][ T314] usb 1-1: Using ep0 maxpacket: 16 [ 1053.951299][ T314] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1053.974362][ T314] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1054.014644][ T314] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1054.034065][T16487] bio_check_eod: 17 callbacks suppressed [ 1054.034085][T16487] syz.5.3261: attempt to access beyond end of device [ 1054.034085][T16487] loop5: rw=2049, sector=77824, nr_sectors = 2048 limit=40427 [ 1054.054133][ T314] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1054.064680][ T314] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1054.107360][ T314] usb 1-1: config 0 descriptor?? [ 1054.119379][T16487] syz.5.3261: attempt to access beyond end of device [ 1054.119379][T16487] loop5: rw=2049, sector=79872, nr_sectors = 2048 limit=40427 [ 1054.142158][T16487] syz.5.3261: attempt to access beyond end of device [ 1054.142158][T16487] loop5: rw=2049, sector=49152, nr_sectors = 3128 limit=40427 [ 1054.159939][T16487] syz.5.3261: attempt to access beyond end of device [ 1054.159939][T16487] loop5: rw=2049, sector=52280, nr_sectors = 968 limit=40427 [ 1054.181657][T16487] syz.5.3261: attempt to access beyond end of device [ 1054.181657][T16487] loop5: rw=2049, sector=57344, nr_sectors = 2832 limit=40427 [ 1054.328689][T16487] syz.5.3261: attempt to access beyond end of device [ 1054.328689][T16487] loop5: rw=2049, sector=60176, nr_sectors = 2208 limit=40427 [ 1054.616368][ T314] usbhid 1-1:0.0: can't add hid device: -71 [ 1054.622427][ T314] usbhid: probe of 1-1:0.0 failed with error -71 [ 1054.636839][ T314] usb 1-1: USB disconnect, device number 43 [ 1054.913258][T16502] syz.1.3271[16502] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1054.913345][T16502] syz.1.3271[16502] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1055.991085][T16514] loop3: detected capacity change from 0 to 16 [ 1056.012577][T16514] erofs: (device loop3): mounted with root inode @ nid 36. [ 1056.028377][T16514] erofs: (device loop3): z_erofs_readahead: readahead error at page 2 @ nid 89 [ 1056.067191][T16514] erofs: (device loop3): z_erofs_readahead: readahead error at page 1 @ nid 89 [ 1056.255692][T16514] erofs: (device loop3): z_erofs_readahead: readahead error at page 0 @ nid 89 [ 1056.265213][T16514] erofs: (device loop3): z_erofs_pcluster_readmore: readmore error at page 0 @ nid 89 [ 1056.266630][T16518] loop5: detected capacity change from 0 to 512 [ 1056.274968][T16514] erofs: (device loop3): z_erofs_pcluster_readmore: readmore error at page 0 @ nid 89 [ 1056.297162][T16518] EXT4-fs: Ignoring removed mblk_io_submit option [ 1056.304600][T16514] erofs: (device loop3): z_erofs_read_folio: failed to read, err [-117] [ 1056.304756][T15353] ------------[ cut here ]------------ [ 1056.318550][T15353] WARNING: CPU: 0 PID: 15353 at fs/inode.c:332 drop_nlink+0xc5/0x110 [ 1056.326706][T15353] Modules linked in: [ 1056.330631][T15353] CPU: 0 PID: 15353 Comm: syz-executor Not tainted 6.1.141-syzkaller-00036-g7011769d221c #0 [ 1056.340758][T15353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1056.345445][T16518] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1056.350905][T15353] RIP: 0010:drop_nlink+0xc5/0x110 [ 1056.366656][T15353] Code: 1b 48 8d bb b8 04 00 00 be 08 00 00 00 e8 d3 eb f0 ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 4b 8f ac ff <0f> 0b eb 86 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 5e ff ff ff 4c [ 1056.386384][T15353] RSP: 0018:ffffc90003057c38 EFLAGS: 00010293 [ 1056.392481][T15353] RAX: ffffffff81c36825 RBX: ffff88811f308080 RCX: ffff888113add100 [ 1056.400539][T15353] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1056.408579][T15353] RBP: ffffc90003057c60 R08: 0000000000000004 R09: 0000000000000003 [ 1056.416609][T15353] R10: fffff5200060af78 R11: 1ffff9200060af78 R12: dffffc0000000000 [ 1056.424613][T15353] R13: 1ffff11023e61019 R14: ffff88811f3080c8 R15: 0000000000000000 [ 1056.432654][T15353] FS: 000055557f79e500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 1056.434346][T16518] EXT4-fs (loop5): 1 truncate cleaned up [ 1056.441639][T15353] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1056.441661][T15353] CR2: 000055557f7c14e8 CR3: 000000012f056000 CR4: 00000000003506b0 [ 1056.441681][T15353] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1056.447473][T16518] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1056.453921][T15353] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1056.487011][T15353] Call Trace: [ 1056.490311][T15353] [ 1056.493257][T15353] shmem_rmdir+0x5b/0x90 [ 1056.497562][T15353] vfs_rmdir+0x393/0x500 [ 1056.501842][T15353] incfs_kill_sb+0x105/0x220 [ 1056.506499][T15353] deactivate_locked_super+0xb5/0x120 [ 1056.511915][T15353] deactivate_super+0xaf/0xe0 [ 1056.516663][T15353] cleanup_mnt+0x45f/0x4e0 [ 1056.521116][T15353] __cleanup_mnt+0x19/0x20 [ 1056.525586][T15353] task_work_run+0x1db/0x240 [ 1056.530212][T15353] ? __cfi_task_work_run+0x10/0x10 [ 1056.535373][T15353] ? __x64_sys_umount+0x125/0x160 [ 1056.540458][T15353] ? __cfi___x64_sys_umount+0x10/0x10 [ 1056.545993][T15353] exit_to_user_mode_loop+0x9b/0xb0 [ 1056.551215][T15353] exit_to_user_mode_prepare+0x5a/0xa0 [ 1056.556719][T15353] syscall_exit_to_user_mode+0x1a/0x30 [ 1056.562293][T15353] do_syscall_64+0x58/0xa0 [ 1056.566759][T15353] ? clear_bhb_loop+0x30/0x80 [ 1056.571462][T15353] ? clear_bhb_loop+0x30/0x80 [ 1056.576310][T15353] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1056.582420][T15353] RIP: 0033:0x7fe821d8fc57 [ 1056.587251][T15353] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 1056.606924][T15353] RSP: 002b:00007ffdb6469ea8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1056.615492][T15353] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fe821d8fc57 [ 1056.623494][T15353] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdb6469f60 [ 1056.631582][T15353] RBP: 00007ffdb6469f60 R08: 0000000000000000 R09: 0000000000000000 [ 1056.639796][T15353] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffdb646aff0 [ 1056.647838][T15353] R13: 00007fe821e10925 R14: 0000000000101e0c R15: 00007ffdb646b030 [ 1056.656013][T15353] [ 1056.659073][T15353] ---[ end trace 0000000000000000 ]--- [ 1056.664700][T15353] ================================================================== [ 1056.672798][T15353] BUG: KASAN: null-ptr-deref in ihold+0x20/0x60 [ 1056.679067][T15353] Write of size 4 at addr 0000000000000170 by task syz-executor/15353 [ 1056.687344][T15353] [ 1056.689686][T15353] CPU: 0 PID: 15353 Comm: syz-executor Tainted: G W 6.1.141-syzkaller-00036-g7011769d221c #0 [ 1056.701247][T15353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1056.711326][T15353] Call Trace: [ 1056.714623][T15353] [ 1056.717565][T15353] __dump_stack+0x21/0x24 [ 1056.721935][T15353] dump_stack_lvl+0xee/0x150 [ 1056.726550][T15353] ? __cfi_dump_stack_lvl+0x8/0x8 [ 1056.731601][T15353] ? ihold+0x20/0x60 [ 1056.735517][T15353] ? ihold+0x20/0x60 [ 1056.739426][T15353] print_report+0x3d/0x60 [ 1056.743783][T15353] kasan_report+0x122/0x150 [ 1056.748308][T15353] ? ihold+0x20/0x60 [ 1056.752220][T15353] kasan_check_range+0x280/0x290 [ 1056.757191][T15353] __kasan_check_write+0x14/0x20 [ 1056.762156][T15353] ihold+0x20/0x60 [ 1056.765892][T15353] vfs_rmdir+0x25f/0x500 [ 1056.770161][T15353] incfs_kill_sb+0x105/0x220 [ 1056.774766][T15353] deactivate_locked_super+0xb5/0x120 [ 1056.780155][T15353] deactivate_super+0xaf/0xe0 [ 1056.784848][T15353] cleanup_mnt+0x45f/0x4e0 [ 1056.789292][T15353] __cleanup_mnt+0x19/0x20 [ 1056.793728][T15353] task_work_run+0x1db/0x240 [ 1056.798340][T15353] ? __cfi_task_work_run+0x10/0x10 [ 1056.803472][T15353] ? __x64_sys_umount+0x125/0x160 [ 1056.808612][T15353] ? __cfi___x64_sys_umount+0x10/0x10 [ 1056.814003][T15353] exit_to_user_mode_loop+0x9b/0xb0 [ 1056.819217][T15353] exit_to_user_mode_prepare+0x5a/0xa0 [ 1056.824694][T15353] syscall_exit_to_user_mode+0x1a/0x30 [ 1056.830176][T15353] do_syscall_64+0x58/0xa0 [ 1056.834606][T15353] ? clear_bhb_loop+0x30/0x80 [ 1056.839316][T15353] ? clear_bhb_loop+0x30/0x80 [ 1056.844017][T15353] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1056.849932][T15353] RIP: 0033:0x7fe821d8fc57 [ 1056.854363][T15353] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 1056.874076][T15353] RSP: 002b:00007ffdb6469ea8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1056.882509][T15353] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fe821d8fc57 [ 1056.890507][T15353] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdb6469f60 [ 1056.898690][T15353] RBP: 00007ffdb6469f60 R08: 0000000000000000 R09: 0000000000000000 [ 1056.906680][T15353] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffdb646aff0 [ 1056.914665][T15353] R13: 00007fe821e10925 R14: 0000000000101e0c R15: 00007ffdb646b030 [ 1056.922663][T15353] [ 1056.925701][T15353] ================================================================== [ 1056.941175][T15353] Disabling lock debugging due to kernel taint [ 1056.947549][T15353] BUG: kernel NULL pointer dereference, address: 0000000000000170 [ 1056.955373][T15353] #PF: supervisor write access in kernel mode [ 1056.961484][T15353] #PF: error_code(0x0002) - not-present page [ 1056.967498][T15353] PGD 11ee64067 P4D 11ee64067 PUD 0 [ 1056.972820][T15353] Oops: 0002 [#1] PREEMPT SMP KASAN [ 1056.978040][T15353] CPU: 0 PID: 15353 Comm: syz-executor Tainted: G B W 6.1.141-syzkaller-00036-g7011769d221c #0 [ 1056.989597][T15353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1056.999671][T15353] RIP: 0010:ihold+0x26/0x60 [ 1057.004201][T15353] Code: 33 36 7c df 55 48 89 e5 41 56 53 48 89 fb e8 b1 86 ac ff 48 8d bb 70 01 00 00 be 04 00 00 00 e8 10 e3 f0 ff 41 be 01 00 00 00 44 0f c1 b3 70 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 a1 [ 1057.023835][T15353] RSP: 0018:ffffc90003057c78 EFLAGS: 00010246 [ 1057.029941][T15353] RAX: ffff888113add100 RBX: 0000000000000000 RCX: ffff888113add100 [ 1057.037944][T15353] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1057.046027][T15353] RBP: ffffc90003057c88 R08: dffffc0000000000 R09: fffffbfff0f2ccfd [ 1057.054148][T15353] R10: fffffbfff0f2ccfd R11: 1ffffffff0f2ccfc R12: ffff88811f30808c [ 1057.062159][T15353] R13: dffffc0000000000 R14: 0000000000000001 R15: 0000000000000000 [ 1057.070149][T15353] FS: 000055557f79e500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 1057.079090][T15353] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1057.085678][T15353] CR2: 0000000000000170 CR3: 000000012f056000 CR4: 00000000003506b0 [ 1057.093656][T15353] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1057.101629][T15353] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1057.109604][T15353] Call Trace: [ 1057.112895][T15353] [ 1057.115833][T15353] vfs_rmdir+0x25f/0x500 [ 1057.120083][T15353] incfs_kill_sb+0x105/0x220 [ 1057.124703][T15353] deactivate_locked_super+0xb5/0x120 [ 1057.130081][T15353] deactivate_super+0xaf/0xe0 [ 1057.134778][T15353] cleanup_mnt+0x45f/0x4e0 [ 1057.139215][T15353] __cleanup_mnt+0x19/0x20 [ 1057.143662][T15353] task_work_run+0x1db/0x240 [ 1057.148288][T15353] ? __cfi_task_work_run+0x10/0x10 [ 1057.153412][T15353] ? __x64_sys_umount+0x125/0x160 [ 1057.158444][T15353] ? __cfi___x64_sys_umount+0x10/0x10 [ 1057.163833][T15353] exit_to_user_mode_loop+0x9b/0xb0 [ 1057.169055][T15353] exit_to_user_mode_prepare+0x5a/0xa0 [ 1057.174538][T15353] syscall_exit_to_user_mode+0x1a/0x30 [ 1057.180009][T15353] do_syscall_64+0x58/0xa0 [ 1057.184450][T15353] ? clear_bhb_loop+0x30/0x80 [ 1057.189138][T15353] ? clear_bhb_loop+0x30/0x80 [ 1057.193821][T15353] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1057.199720][T15353] RIP: 0033:0x7fe821d8fc57 [ 1057.204155][T15353] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 1057.223852][T15353] RSP: 002b:00007ffdb6469ea8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1057.232312][T15353] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fe821d8fc57 [ 1057.240288][T15353] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdb6469f60 [ 1057.248260][T15353] RBP: 00007ffdb6469f60 R08: 0000000000000000 R09: 0000000000000000 [ 1057.257017][T15353] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffdb646aff0 [ 1057.265081][T15353] R13: 00007fe821e10925 R14: 0000000000101e0c R15: 00007ffdb646b030 [ 1057.273066][T15353] [ 1057.276088][T15353] Modules linked in: [ 1057.279998][T15353] CR2: 0000000000000170 [ 1057.284150][T15353] ---[ end trace 0000000000000000 ]--- [ 1057.289599][T15353] RIP: 0010:ihold+0x26/0x60 [ 1057.294113][T15353] Code: 33 36 7c df 55 48 89 e5 41 56 53 48 89 fb e8 b1 86 ac ff 48 8d bb 70 01 00 00 be 04 00 00 00 e8 10 e3 f0 ff 41 be 01 00 00 00 44 0f c1 b3 70 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 a1 [ 1057.313715][T15353] RSP: 0018:ffffc90003057c78 EFLAGS: 00010246 [ 1057.319794][T15353] RAX: ffff888113add100 RBX: 0000000000000000 RCX: ffff888113add100 [ 1057.327767][T15353] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1057.335735][T15353] RBP: ffffc90003057c88 R08: dffffc0000000000 R09: fffffbfff0f2ccfd [ 1057.343711][T15353] R10: fffffbfff0f2ccfd R11: 1ffffffff0f2ccfc R12: ffff88811f30808c [ 1057.351686][T15353] R13: dffffc0000000000 R14: 0000000000000001 R15: 0000000000000000 [ 1057.359668][T15353] FS: 000055557f79e500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 1057.368600][T15353] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1057.375219][T15353] CR2: 0000000000000170 CR3: 000000012f056000 CR4: 00000000003506b0 [ 1057.383209][T15353] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1057.391183][T15353] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1057.399156][T15353] Kernel panic - not syncing: Fatal exception [ 1057.405518][T15353] Kernel Offset: disabled [ 1057.409856][T15353] Rebooting in 86400 seconds..