last executing test programs: 27.887042786s ago: executing program 4 (id=565): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) syz_init_net_socket$802154_raw(0x24, 0x4, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000a000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r4, 0x27, 0x22, 0x0, &(0x7f0000000440)="f802040b0000001300007f53080002f916d9ec8ce12596d9f8e5d448f6e4b40b990a", 0x0, 0x405, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) 26.95030725s ago: executing program 4 (id=570): r0 = timerfd_create(0x7, 0x800) timerfd_settime(r0, 0x3, &(0x7f00000003c0)={{}, {0x77359400}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x2}]}}}, @IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}]}, 0x50}}, 0x0) 26.023058664s ago: executing program 4 (id=577): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000001140)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1000000004000000080000000500000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000ad7e195a000000000000"], 0x48) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x4000, &(0x7f0000000740)={[{@test_dummy_encryption}, {@i_version}, {@noblock_validity}, {@commit={'commit', 0x3d, 0x5}}, {@inlinecrypt}, {@max_batch_time}, {@abort}, {@auto_da_alloc}, {@lazytime}, {@noauto_da_alloc}, {@block_validity}]}, 0xd, 0x5d8, &(0x7f0000000c00)="$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") prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f00000004c0)=ANY=[@ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x2d) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040), 0x208e24b) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sys_enter\x00', r4}, 0x10) utimensat(0xffffffffffffffff, 0x0, 0x0, 0x100) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) fdatasync(r3) time(0x0) 25.430228853s ago: executing program 4 (id=580): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) bpf$MAP_CREATE(0x1100000000000000, &(0x7f0000000440)=@base={0x1, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0xffffffff, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00 \x00~\x00\x00\x00'], 0x14}}, 0x4000054) 24.428434978s ago: executing program 4 (id=583): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0b00000005000000000400000900000001000000", @ANYRES32, @ANYBLOB="0002f20c3f2bcbf9a700679a88421dcf5659e7d46d147ad10000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0), 0x141e00, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000240), 0x1, 0x50c, &(0x7f0000001080)="$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") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x2029c1b, 0x0, 0x1, 0x0, &(0x7f0000000080)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_open_dev$MSR(&(0x7f0000000340), 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r2}, 0x10) renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000000, @void, @value}, 0x94) inotify_init() bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) mkdir(&(0x7f0000000200)='./bus\x00', 0x0) mount$incfs(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='./bus\x00', &(0x7f00000000c0), 0x0, 0x0) setresgid(0xee00, 0xee01, 0x0) getpid() r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r4) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) shutdown(r4, 0x0) listen(r5, 0x0) connect$unix(r5, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) 23.818414878s ago: executing program 4 (id=590): r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) write$FUSE_INIT(r0, &(0x7f00000000c0)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x4, 0x400004, 0x1f92, 0xd, 0x8000, 0x10000, 0x0, 0x0, 0x4, 0x10001}}, 0x50) r1 = eventfd(0x100000d) fgetxattr(r1, &(0x7f0000000000)=@random={'osx.', 'krusted.overlay.opaque\x00'}, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="0201"], 0x70}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x9d, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001400)={{r2}, &(0x7f0000001380), &(0x7f00000013c0)='%-010d \x00'}, 0x20) socketpair$tipc(0x1e, 0x96db990d343af05b, 0x0, &(0x7f0000000240)) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='contention_end\x00', r3}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000009c0)='m ', 0x2}], 0x1}, 0x8005) recvmsg$unix(r4, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x10002) recvmsg$unix(r4, &(0x7f0000000d00)={0x0, 0x0, 0x0}, 0x2) 9.634586034s ago: executing program 1 (id=649): bind$unix(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000000a40)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") mkdir(&(0x7f0000000080)='./bus\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) kcmp(0x0, 0x0, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) chmod(&(0x7f0000000180)='./bus\x00', 0x190) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x4000000, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 9.603989494s ago: executing program 32 (id=590): r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) write$FUSE_INIT(r0, &(0x7f00000000c0)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x4, 0x400004, 0x1f92, 0xd, 0x8000, 0x10000, 0x0, 0x0, 0x4, 0x10001}}, 0x50) r1 = eventfd(0x100000d) fgetxattr(r1, &(0x7f0000000000)=@random={'osx.', 'krusted.overlay.opaque\x00'}, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="0201"], 0x70}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x9d, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001400)={{r2}, &(0x7f0000001380), &(0x7f00000013c0)='%-010d \x00'}, 0x20) socketpair$tipc(0x1e, 0x96db990d343af05b, 0x0, &(0x7f0000000240)) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='contention_end\x00', r3}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000009c0)='m ', 0x2}], 0x1}, 0x8005) recvmsg$unix(r4, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x10002) recvmsg$unix(r4, &(0x7f0000000d00)={0x0, 0x0, 0x0}, 0x2) 7.427898797s ago: executing program 1 (id=654): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000020000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x18) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f0000001040)={0xa, {"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", 0x1025}}, 0x1006) 6.60751672s ago: executing program 1 (id=659): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) syz_usb_connect(0x0, 0x40, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xbe, 0xa3, 0x76, 0x40, 0x1c9e, 0x9801, 0x25d8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x2, 0xff, 0x0, [@cdc_ecm={{0x5}, {0x5}, {0xd}, [@mdlm_detail={0x5, 0x24, 0x13, 0x0, 'H'}]}]}}]}}]}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8000}, [@printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xa9, 0x11, &(0x7f0000000340)="1597131c097105ced60c579f0c7756773bc2256091e32571c7f05d4fa9b763d8f9db84dedf4a7fdad219acc86bcfeef3db4c820c9f492beea7d5c94c5fd9d4ea87df947047902ab2c0c4a2ea77ea4d132f13c65a3b863c3d8babd9e253f7b5512ecf7675f39d9144c8b61aae581755cfbaff45ab438e662de9f7bcd198fdf918e36ed4138cc215ceecd697c67ebe02f88470b562fc92e0bb082306b30bc0a0bf4bbc3300852ecae8f5", &(0x7f0000000280)=""/17, 0xfc8, 0x0, 0x4b, 0xa6, &(0x7f00000004c0)="df9758855b236d255b8226201ead3f6d33b9847e4c4d7ccb59f5f9a39e9777429cf8a8916747f6f61bb2858462e81a3ad1f4fe11b42e07b9f25ec718b9bb83fed90b7962cb001ce7efa57d", &(0x7f0000000540)="4972d5038e61bae04699a29be9a4265a040221860115390b00ef204c8aad4bee1aea8849063e68b430f4ff8dc01aaf105f3b79f6d7a63a5f5191e55ba8acf9b0f90bda166ccd17e63c49711fe6f244edb49d6fd2f1ef751be6862da6c3b4aea72eb95511947065791bd2e1c6ec460945968b9160dc196f2d0961bd3dff308e4738ada7f15243f982a4d1ee8930ae32c93bb065d5cdc35a890d3f3e332c73186912ca2abeba32", 0x4, 0x0, 0x5}, 0x50) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)={'#! ', './file0'}, 0xb) execve(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) 6.443823992s ago: executing program 3 (id=663): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/net/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd1l,'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000cc0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x4, 0xffff67a9, 0xd4e3, 0x2, 0x7}, 0x8, 0x1, 0x3, 0x6, 0x6, 0x3, 0x11, 0xf, 0x3, 0xd, {0x83, 0x9, 0xfff, 0x232, 0x417, 0x5}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x10, 0x10}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8848}, 0x20004800) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r6, &(0x7f0000000f80)=""/4096, 0x1000) 6.110505178s ago: executing program 3 (id=664): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000001000000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000140)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="000000000000000050021a80100003800c00058008000000000000024c0003803000018005000c000000000014000500714abbd25404007cbbf6efb226f19bf90d0002003a288e5e5b5b5a40000000006000078014000400293a02149f3b75a67093c28fd6f55a2314000400e48f01e49713f0c2d839f940d9f088d80500060000000000130002"], 0x270}}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r1) sendmsg$NL80211_CMD_DEAUTHENTICATE(r4, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='\a\x00\x002', @ANYRES16=r5, @ANYBLOB="000227bd7000fbdbdf25270000000c00990009000000460000000a00060008021100000000000a003400010101010101000004005f00"], 0x3c}, 0x1, 0x0, 0x0, 0x5}, 0x24040080) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) getsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000540), &(0x7f0000000440)=0x8) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r7, r0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="31d7a777b17185d74cbbc9fcaa4a50258ab704e3fd5a80d5990f940f5f8cbc5ac331b7fb58e8f2153d50895e82d5d8027bfb5054d9cd1ff7f2282523dc997d39afa5e150855193abdb2a88650bdaeb585d6839e028b1e3994da199fd58676e736da0f6820edfec15cd61c725aaea51a1776e6f66f6c70a44040152e54902882dca3690f783f9122fae013e"], 0x50) r8 = socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x8, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) uname(&(0x7f00000001c0)=""/62) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924032003030005490c240206", @ANYRES8=r8, @ANYRES16=r6], 0x0) 6.062257658s ago: executing program 2 (id=666): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2800) setfsuid(r1) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r2, 0xae64, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xb5, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x11, &(0x7f0000000100)={[{@noblock_validity}, {@stripe={'stripe', 0x3d, 0x2}}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x71d}}, {@abort}]}, 0x1, 0x610, &(0x7f0000000a40)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x47, 0x10}], {0x95, 0x0, 0x700}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 5.822503782s ago: executing program 2 (id=667): bind$unix(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000000a40)="$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") mkdir(&(0x7f0000000080)='./bus\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) kcmp(0x0, 0x0, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00'}, 0x10) chmod(&(0x7f0000000180)='./bus\x00', 0x190) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x4000000, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 4.990987584s ago: executing program 2 (id=671): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='i2c_slave\x00', r0, 0x0, 0x20002}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) getsockopt$sock_buf(r4, 0x1, 0x1c, &(0x7f0000000640)=""/52, &(0x7f0000000680)=0x34) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) r6 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000380)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) getgroups(0x2, &(0x7f0000001080)=[0xee01, 0xffffffffffffffff]) setgroups(0x40000000000002e6, &(0x7f0000000140)=[0x0]) keyctl$chown(0x4, r6, 0xee01, r7) keyctl$setperm(0x5, r6, 0x0) keyctl$KEYCTL_MOVE(0x3, r6, 0x0, 0x0, 0x0) setsockopt$inet6_opts(r5, 0x29, 0x37, 0x0, 0x0) r8 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4008053, r8, 0x80000000) ioctl$sock_SIOCGSKNS(r8, 0x894c, &(0x7f0000000000)=0x5c) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$inet(r9, &(0x7f0000001580)={&(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10, &(0x7f0000001480)=[{&(0x7f00000015c0)="d1d94b62d0031d554c19e78f332d88cb3754328da0cae565b677b030b2408272b47ef5e6acf1322e399cd774a456fa02438a2598271e6b870cd7c8b33ebdf7fe4c3081f4c4a454edd1d79f5593b88bc99130c48d7bc87f64ec04a4588c2c7829e0a30072c108590b4851f5125013735877a0a83f18aa03135852", 0x7a}, {&(0x7f0000000180)="80c836764ce140", 0x7}, {&(0x7f0000001640)="f12159296aaca5817f47eec02c6f5573fd45eb7401b47e2b7c3b0e8d362b2334afdd9adb2ea66bc50fdd4462f7f924f22ab30585d6ed52a55728189be2494bc081d507c4eb7ed671ecb6794f2ef566049ef1e0e7d5fd81525892b86b26b4b76b68be4b644bd0cd8ca9db259ca7d84fd5376ba3602598adacbb53ec962f5763582616cca9fa02e2ce08c736805a5e54de6dbdf19b2595aa8867f7e82aaaa828db455e65000000", 0xa6}, {&(0x7f00000002c0)="068cfaa1f815767f17cd8f35d2632a0c3c0ef604fa4b8a9fcc06f0d0e542e8e74de6ffea5b4fd9b0a19ffd5c907704a8448d54e8847ca75ee39c3cfe6acb6246f39b64a56b8f5d99e12b41890fe21baffd5294544c7bd9a1320fc12a64d56eb3c9efa43d813ae07ca8d36ab21250d8fe3baa47d4ed23c9fd51ad9aac299b67913f1f3c52589ff0a5b516e4191d9f7d093a4a63a5de6810cae4f050408a8b5e1ed7ce50b78b367861140a73f49d92be5a", 0xb0}, {&(0x7f0000000380)="36b2ceb1ea613db9ebb0675fff0c6966491d02ca4869a415a577287f386d25247f586795b729db717ef04f3dc3aa64393c696499fc0fae411c0995592e90629a7830645d2907f121c6815644ed006d1fe0be5edba4aadf456fed16aec6468e08a4a7a9680c7b7df1a80b462f77ee957abbe4490b884f4e1c861bb02f782d69c3677848aaa9349e63369211250735bffef0e7be80c95ce3408d4c22adb33d8dd7015cef84c28de9534e46880ac36deefb06dbe75b2c4a580394ba654af950c2d2cdc3dffe35a5c4c3022d64", 0xcb}, {&(0x7f0000000480)="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", 0x1000}], 0x6}, 0x40000) socket$nl_route(0x10, 0x3, 0x0) 4.829071077s ago: executing program 0 (id=672): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_open_dev$usbfs(&(0x7f0000000000), 0xfffffffffffffff7, 0x103800) sendto$inet(0xffffffffffffffff, &(0x7f0000000040)="6b318ec782f9b5e7698d7c247e6a918390129d8241", 0x15, 0x4840, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) r2 = getpid() r3 = io_uring_setup(0x7d9a, &(0x7f0000000240)={0x0, 0xdf07, 0x2, 0x3, 0xcd}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0xde02}) close_range(r3, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x18) socketpair(0xa, 0x1, 0x0, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 4.481787872s ago: executing program 5 (id=674): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) timer_create(0x7, &(0x7f0000000180)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) poll(&(0x7f0000b2c000)=[{}], 0x2c, 0xffffffffffbffff8) prlimit64(0x0, 0x7, &(0x7f0000000780)={0x6, 0x248}, 0x0) 4.480951692s ago: executing program 0 (id=675): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000080)={[{@test_dummy_encryption_v1}, {@test_dummy_encryption_v1}]}, 0x1, 0x241, &(0x7f0000000540)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4800, 0x0, 0x0, 0x0, &(0x7f0000000000)) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x20000, &(0x7f00000004c0)={[{@inlinecrypt}, {@quota}, {@inode_readahead_blks}, {@nogrpid}]}, 0x2, 0x44e, &(0x7f0000001040)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x7fffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0xb8}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000"], 0xb8}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x25dfdbfe, {{@in6=@private0={0xfc, 0x0, '\x00', 0x40}, @in6=@ipv4={'\x00', '\xff\xff', @loopback}, 0x0, 0x400, 0x0, 0x0, 0xa, 0x60, 0x80, 0x0, 0x0, 0xee01}, {}, {}, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) 4.077877538s ago: executing program 3 (id=676): r0 = timerfd_create(0x7, 0x800) timerfd_settime(r0, 0x3, &(0x7f00000003c0)={{}, {0x77359400}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc6751dfb265a0e3ccae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fd52347125907000000000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df262ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71d20fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada12f7a1001500a710eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff000000000000000000000000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18a904c0e585a66c3b84b138efc20a546d3d5227e23b03f2a834391ad24fe7d9b20cf92cb151763d41f5c76e2ff3e93ee296c4082ee73e7e197253a2b66c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0842b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f04c7f0be31491eb8c9ff68236c8600000000000000000000000066e034c81c3cab4e33fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f2243471221c15fa12313ffbfa7c2730302b66a99f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca20508011132153c528f7bca92980a3223c5b9cdddedb0a14adddf9a6e70a26b5c0ee0879c349814bee9d96d8bd23db4e801d49201ae84090455682794098afa42b34196b1d849020eeeb1ef48d003d71524683d7cdfa841bca708414fb8ff49742420d1ab7fa678aa4806d5247616e8bc0b02887f8efe9310ccf9bec1c9b7f6671c9d59ac6b09b4436cafdd1887c8e884c930d21ace088ccc99a94d4b33da2fc1b1310bb607a9ad65844655de1ac9fd36d12e07a821fb950368a970c58fb4f3f403fdaf68902874"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x2}]}}}, @IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}]}, 0x50}}, 0x0) 4.077238588s ago: executing program 2 (id=677): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000004c0)={0x24, &(0x7f0000000240)={0x40, 0x8, 0xb1, {0xb1, 0x11, "fd4de85cd16d318e81587b2f53e71a6b0956bcbdb2b38db83594ca90a1cade98b06718df18e133e503136c932438f9fac1b9437ed3616f21a3286fdad6a6099af679752950ab34cfda565328e4db049874bca2b3364618cdd1e9a11beb60d6d940921f06501aa170d6bb3f12881052e63fcdc3c1829d5b701424ae8056a71cec78e1503b634ebf72db43dee5850904efe129aa8379fee45e1496e02eb731ce8337234bf2ad28f1d50cd24979ce4b4f"}}, &(0x7f0000000340)={0x0, 0x3, 0x41, @string={0x41, 0x3, "65a14cfd65251a70be66de64fd90a4dac1169ce18f43c84eca7d1756888221f86ba51ce903485aa7e1819e3f91b19d1f01270405778ba2375e5bc92e1b113d"}}, &(0x7f00000003c0), &(0x7f0000000400)={0x0, 0x21, 0x9, {0x9, 0x21, 0x7, 0x5, 0x1, {0x22, 0x69a}}}}, &(0x7f0000000740)={0x2c, &(0x7f0000000500)={0x0, 0xd, 0xd7, "815ff5f45890a9bb4bb81a832aa0d62ce4bf8a37850a60172a521962fbc82b1d30d0ad9ba96a0e1f78325de3025b1a5339139ea76ded6b5b973568816ff7b7e950d41dc6427e31284e325436e2b9ea94ff30912d62fb1769d7e8b8e22b59ce5b8fdc7a12ef0d7d7ce1821115f5fd18debc311580f10594ff8b17752ba042402580b16b8ab897c755cf05f8ee390e226616cb2f1cdeb8413b17aaf4d6abffcb15d836df1b206fb8271be3f13483aa5b6bfc0e14f18dabd5811d3df460452ef7211900371add1d3eae6c8947cf141f0de0a33b48e8bd7dd1"}, &(0x7f0000000600)={0x0, 0xa, 0x1}, &(0x7f0000000640)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000680)={0x20, 0x1, 0x3f, "f3359fe89b186530e3fe37783b9f6d544fe7b8120ff2739870fe3a958713445d78e0351324d3d421b9707f321a8acc52a7a3e1c9007ba12d2112955514a70b"}, &(0x7f0000000700)={0x20, 0x3, 0x1, 0x2}}) 3.751477633s ago: executing program 1 (id=678): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) io_getevents(0x0, 0x3, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000845, 0x0, 0x0) getpeername$inet6(r1, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f0000070000000000", @ANYBLOB], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001600000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='mm_page_alloc\x00', r7}, 0x18) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'gretap0\x00', 0x0}) sendto$packet(r8, &(0x7f0000000180)="0b0312002e0064000200475400f6a13bb1000000086086dd4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x8100, r9}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r5}, 0x10) r10 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r10, &(0x7f0000000080)={0xa, 0x4e23, 0x400, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3b}}}, 0x1c) setsockopt$sock_linger(r10, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendmmsg$inet6(r10, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 3.653433415s ago: executing program 5 (id=679): ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/13, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) unshare(0x26020480) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0}, 0x18) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r4, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x5}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0xfffffffc, 0x0, 0x0, 0xffffffff}, 0x20000, 0x0, 0x4000007, 0x8, 0x101, 0x14, 0x0, 0x0, 0x0, 0x2000, {0x1, 0x0, 0x0, 0x0, 0x5}}}}]}, 0x78}}, 0x4080) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000740)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@dax_never}, {@noquota}, {@auto_da_alloc}, {@noload}, {@grpid}]}, 0x64, 0x50c, &(0x7f0000000200)="$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") 3.612434135s ago: executing program 0 (id=680): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001900010000000000000000007f0000010b"], 0xb8}}, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000180)=ANY=[@ANYRESOCT=r0], 0x57) setsockopt$inet_mreqsrc(r0, 0x0, 0x28, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) connect$inet(r1, &(0x7f0000000280)={0x2, 0x4, @multicast1}, 0x10) sendmmsg$inet(r1, &(0x7f0000004540)=[{{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001100)="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", 0x120}, {&(0x7f0000000d80)="7d68e6de85f9b0cbc9d710267f321ec64eab043ecad9af7e01e9463218ec45924a99867163e468d36a682fadd749caa325e685d75559a87139e02fae7271be8f55671cfd32a09896278d1941370174720838039d0989bc3394b8a4c4f4a30f0496be313d6d60fe47966c634a3ee1f659e8ef310647725bda0130d5de5028220a4cf5fc808a75694738ee26cb21302b4bba4265b845a5d5dce706d9820c6936b122f9658446d74a9016b94424971dd443a6907eb5c73b6b200e92b2", 0xbb}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) syz_emit_ethernet(0x116, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f00000010c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5f8, 0x1b8, 0xd0, 0xd0, 0x1b8, 0x2b0, 0x528, 0x528, 0x528, 0x528, 0x528, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@inet=@socket1={{0x28, 'socket\x00', 0x2}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@frag={{0x30}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0x138, 0x178, 0x0, {}, [@common=@dst={{0x48}}, @common=@dst={{0x48}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xb000]}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@multicast2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x658) socket(0x10, 0x3, 0x0) 2.246148326s ago: executing program 1 (id=681): bind$unix(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000000a40)="$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") mkdir(&(0x7f0000000080)='./bus\x00', 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r3}, 0x0, &(0x7f0000000040)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) kcmp(0x0, 0x0, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) chmod(&(0x7f0000000180)='./bus\x00', 0x190) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x4000000, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) unshare(0x64000600) 2.245226396s ago: executing program 3 (id=682): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000080)={[{@test_dummy_encryption_v1}, {@test_dummy_encryption_v1}]}, 0x1, 0x241, &(0x7f0000000540)="$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") r0 = syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4800, 0x0, 0x0, 0x0, &(0x7f0000000000)) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x20000, &(0x7f00000004c0)={[{@inlinecrypt}, {@quota}, {@inode_readahead_blks}, {@nogrpid}]}, 0x2, 0x44e, &(0x7f0000001040)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x7fffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYRES64=r0, @ANYRESOCT=r1, @ANYRESHEX=r2, @ANYRES8=r0, @ANYRESDEC=r3, @ANYRES16], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x19}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r4, &(0x7f0000000000), &(0x7f0000000500)=""/73}, 0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0xb8}}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYRESOCT], 0xb8}}, 0x4c881) socket$nl_xfrm(0x10, 0x3, 0x6) 1.95443267s ago: executing program 0 (id=683): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001900010000000000000000007f0000010b"], 0xb8}}, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000180)=ANY=[@ANYRESOCT=r0], 0x57) setsockopt$inet_mreqsrc(r0, 0x0, 0x28, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) ioctl$VHOST_GET_FEATURES(0xffffffffffffffff, 0x8008af00, &(0x7f00000001c0)) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) connect$inet(r1, &(0x7f0000000280)={0x2, 0x4, @multicast1}, 0x10) sendmmsg$inet(r1, &(0x7f0000004540)=[{{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001100)="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", 0x120}, {&(0x7f0000000d80)="7d68e6de85f9b0cbc9d710267f321ec64eab043ecad9af7e01e9463218ec45924a99867163e468d36a682fadd749caa325e685d75559a87139e02fae7271be8f55671cfd32a09896278d1941370174720838039d0989bc3394b8a4c4f4a30f0496be313d6d60fe47966c634a3ee1f659e8ef310647725bda0130d5de5028220a4cf5fc808a75694738ee26cb21302b4bba4265b845a5d5dce706d9820c6936b122f9658446d74a9016b94424971dd443a6907eb5c73b6b200e92b2", 0xbb}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) syz_emit_ethernet(0x116, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f00000010c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5f8, 0x1b8, 0xd0, 0xd0, 0x1b8, 0x2b0, 0x528, 0x528, 0x528, 0x528, 0x528, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@inet=@socket1={{0x28, 'socket\x00', 0x2}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@frag={{0x30}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0x138, 0x178, 0x0, {}, [@common=@dst={{0x48}}, @common=@dst={{0x48}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xb000]}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@multicast2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x658) socket(0x10, 0x3, 0x0) 1.468353258s ago: executing program 5 (id=684): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000001140)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1000000004000000080000000500000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000ad7e195a000000000000"], 0x48) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x4000, &(0x7f0000000740)={[{@test_dummy_encryption}, {@i_version}, {@noblock_validity}, {@commit={'commit', 0x3d, 0x5}}, {@inlinecrypt}, {@max_batch_time}, {@abort}, {@auto_da_alloc}, {@lazytime}, {@noauto_da_alloc}, {@block_validity}]}, 0xd, 0x5d8, &(0x7f0000000c00)="$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") prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f00000004c0)=ANY=[@ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x2d) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040), 0x208e24b) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sys_enter\x00', r5}, 0x10) utimensat(0xffffffffffffffff, 0x0, 0x0, 0x100) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) fdatasync(r4) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000400)=@dellink={0x34, 0x11, 0x1, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r7, 0x800, 0x10004}, [@IFLA_PHYS_PORT_ID={0x14, 0x22, "cdf074c6973f00ad12e79f607648a411"}]}, 0x34}, 0x1, 0xba01, 0x0, 0x4004}, 0x810) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0001}]}) time(0x0) sendmmsg$inet(r3, &(0x7f0000000a40)=[{{&(0x7f00000000c0)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000340)="c803219bea55b4083513cbded92b01d4036f8f7786c6346c8027a3e339939e451c74794d284789ddd037a638532bf8d3d44db35350898144414ec2a5bf3e47bc2db9e8ef93b64e31", 0x48}, {&(0x7f0000001200)="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", 0x1000}], 0x2, &(0x7f00000003c0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x200}}, @ip_retopts={{0x28, 0x0, 0x7, {[@rr={0x7, 0xb, 0xea, [@broadcast, @private=0xa010100]}, @timestamp={0x44, 0x4, 0xba, 0x0, 0xe}, @ra={0x94, 0x4, 0x1}, @generic={0xc3, 0x5, "4eed3d"}]}}}], 0x40}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000001c0)="db3fbf7e4b61b07b9e4d03acba2f085477a1e6cf6ef3bde389e773058bcb4bf2b9d75f0de190f9eb", 0x28}, {&(0x7f0000000440)}, {&(0x7f0000000800)="b35d7300053e183bc4962e19c939e10c25c7691419ee960f74e7f2203eefbfa041c018766413502e54be056ff99507515659524f4ef23242f0bd8c3132ffeca91b188672cdfa55dc4aa80193721ce152619ac8f7a87dc9e0d41e6e53a1713515c9dd7fee84f7b8695c1b629987b29f8a385bc1481d21c323407bff9c937fe437fff7b579235c13f1989ca96d4001637a715c502e5da28ffeb8f7c2b763290995c66619643182afd100f3b7abb4c513f0b2a04159", 0xb4}, {&(0x7f0000000600)="cfb358f82399da09ddd44366b6ba0798dc8a3ae7f54232f86a4b0c795ed1333215ec3b084fcd2bcc35a52d99553b3748571d749475285d78115373608bea334be6e6b4fba8488e9941bafce177da39424f7c3862af0b9351870f09e42fc0856817a2093729", 0x65}], 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="1400000000000000000000000200000009000000000000001400000000000000000000000700000000000000000000001400000000000000000600000700000000000000000000001100d2294fbd00000000000001000000ed000000000000002c00000000000000000000000700000094040100008317920000000000000000ac1414aaac14142ce0000002000000001c000000000000000000000008000000", @ANYRES32=r7, @ANYBLOB="64010100ac1414aa0000000014000000000000000000000001000000ff03000000000000110000000000000000000000010000008000000000000000"], 0xe0}}], 0x2, 0x20000000) ftruncate(r4, 0x81ff) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x4, 0x8000, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socketpair(0x1d, 0x2, 0x1, 0x0) 1.247063101s ago: executing program 2 (id=685): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x400080, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, 0x0, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0x541b, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x8, 0x8440000000000000}) close_range(r5, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x503, 0x0, 0x4, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x2000}}}}}}]}, 0x48}}, 0x0) 1.125230223s ago: executing program 5 (id=686): bind$unix(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000000a40)="$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") mkdir(&(0x7f0000000080)='./bus\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) kcmp(0x0, 0x0, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) chmod(&(0x7f0000000180)='./bus\x00', 0x190) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x4000000, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 1.120854544s ago: executing program 0 (id=687): getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001a00), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x5e, &(0x7f0000000600)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6c}}, {@lazytime}, {@errors_remount}, {@noload}]}, 0x3, 0x44a, &(0x7f00000006c0)="$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") r3 = open(&(0x7f0000000000)='./bus\x00', 0x14927e, 0x7) fallocate(r3, 0x0, 0x0, 0x1001f0) fallocate(r3, 0x8, 0x0, 0x10000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000020b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{0x1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)='%pK \x00'}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0x1, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000003c0)={'ip_vti0\x00', &(0x7f00000002c0)={'erspan0\x00', 0x0, 0x7800, 0x700, 0xc56a, 0x8, {{0x2a, 0x4, 0x0, 0x1c, 0xa8, 0x68, 0x0, 0x2, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x33}, @multicast1, {[@timestamp_addr={0x44, 0x4c, 0x13, 0x1, 0x6, [{@multicast1, 0x6}, {@dev={0xac, 0x14, 0x14, 0xf}, 0x46}, {@private=0xa010102, 0x5752}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6}, {@private=0xa010100, 0xb}, {@private=0xa010100, 0x81}, {@multicast2}, {@multicast2, 0x115a}, {@broadcast, 0x1}]}, @noop, @cipso={0x86, 0x45, 0x2, [{0x6, 0x4, "2d10"}, {0x2, 0x8, "c2e69dc2be4d"}, {0x5, 0xa, "3b79c5a3dfe0c1c4"}, {0x0, 0x4, "e219"}, {0x7, 0xf, "59a36b6c8634e412b2888ccb7c"}, {0x0, 0x10, "0f7bfbe96cc007307a4dd2d46cf3"}, {0x0, 0x6, "8bac09de"}]}, @end]}}}}}) r7 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000400), 0x10000, 0x0) r8 = syz_btf_id_by_name$bpf_lsm(&(0x7f0000000480)='bpf_lsm_socket_sendmsg\x00') r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r9}, 0x10) r10 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)=@generic={&(0x7f00000004c0)='./file0\x00', 0x0, 0x10}, 0x18) r11 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="180200000080000000000000000000008500000036000000850000002a0000009500000000000000910f001083f7b8033157ad3a9ec3e0a154dde8e516b33d49cd6d8ea1ef44e26a9689047dc810523bb6cb646edac69057131e1be7162eed1f07ba5e28f6fe1cb93967ef2f0ef2d0df01ab65f8f730d2851251b7cda33d6e3116f566927744a6e23559db48c03d567c61c68d4095f639c7ddaa0d10b9b3f0d1f20bd1b72012aaaa70b845455ec52e27fdb0"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x49) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={r13, r12}, 0x40) syz_emit_ethernet(0xfed1, &(0x7f0000000100)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x5, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "82d18160f7d8dda36479a6b179161b4bbff2d0508977b3928ebd2dee05607d17", "0194bd7b1b0303c5ba7f602606a285b3", {"30da2d58da817f8a5f77a23de36a2164", "3b33cfa231a427159c7b9f0eceb155f0"}}}}}}}, 0x0) r14 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xc, 0x1, 0x5, 0x9, 0x40, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r15 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000005c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x1, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000640), &(0x7f0000000680)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0xb, 0x16, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@cb_func={0x18, 0x9, 0x4, 0x0, 0xfffffffffffffffd}, @call={0x85, 0x0, 0x0, 0xbe}, @map_fd={0x18, 0x2, 0x1, 0x0, r4}, @map_val={0x18, 0x4, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000240)='GPL\x00', 0x10001, 0x2c, &(0x7f0000000280)=""/44, 0x41100, 0x40, '\x00', r6, @fallback=0x31, r7, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000440)={0x1, 0x2, 0x3ffc00, 0x100}, 0x10, r8, r9, 0x5, &(0x7f0000000700)=[r10, r14, r15, r16], &(0x7f0000000740)=[{0x0, 0x1, 0xf, 0xb}, {0x2, 0x2, 0x10, 0xc}, {0x2, 0x3, 0x9, 0x6}, {0x4, 0x3, 0x10, 0x4666d1f7dfcfd07a}, {0x1, 0x1, 0xa, 0x2}], 0x10, 0x1000, @void, @value}, 0x94) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000001f80)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="210c27bd7000fedbdf25120000003400018008000100", @ANYRES32=0x0, @ANYBLOB="14000200677265746170300000000000000000001400020064756d6d7930000000000000000000000800070000000000"], 0x50}, 0x1, 0x0, 0x0, 0x840}, 0x20000004) 762.626949ms ago: executing program 3 (id=688): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x8001}, 0x4) syz_emit_ethernet(0x2e, &(0x7f0000000000)=ANY=[], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x1, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 635.650721ms ago: executing program 0 (id=689): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) timer_create(0x7, &(0x7f0000000180)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) poll(&(0x7f0000b2c000)=[{}], 0x2c, 0xffffffffffbffff8) prlimit64(0x0, 0x7, &(0x7f0000000780)={0x6, 0x248}, 0x0) 393.826184ms ago: executing program 2 (id=690): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x400080, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, 0x0, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0x541b, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x8, 0x8440000000000000}) close_range(r5, 0xffffffffffffffff, 0x0) (fail_nth: 1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x503, 0x0, 0x4, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x2000}}}}}}]}, 0x48}}, 0x0) 359.055165ms ago: executing program 1 (id=691): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x18) prlimit64(0x0, 0xe, 0x0, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SET_KEEPCAPS(0x8, 0x4) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) ftruncate(0xffffffffffffffff, 0x80000001) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x18) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20000009, 0x21, &(0x7f0000000240)={0x0, 0x0, 0xfffc, 0x360}, 0x8, 0x7, 0x80, 0x0, 0x1, 0x101, 0x0}) open_tree(0xffffffffffffff9c, 0x0, 0x81000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008005}, 0x40) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffff70) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) setresgid(0xee00, 0xee01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000002040)='./file0\x00', &(0x7f0000002200), 0x1000000, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') lseek(r5, 0x10001, 0x0) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0xc601, &(0x7f0000000180)={[{@disable_roll_forward}, {@compress_chksum}, {@acl}, {@compress_cache}, {@inline_xattr}, {@disable_roll_forward}, {@background_gc_on}, {@nouser_xattr}, {@checkpoint_diasble}, {@user_xattr}, {@fsync_mode_strict}, {@atgc}, {@noacl}, {@nodiscard}, {@resgid}]}, 0xfd, 0x5519, &(0x7f00000079c0)="$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") 338.767945ms ago: executing program 3 (id=692): syz_read_part_table(0x107a, &(0x7f0000000000)="$eJzs0LFNxEAQBdBvzus7CxqgAmqgLmIEJ1EBKQE1UAEpJSEIBu2ehWgASN5LbM3+nS9t+Ffra7tKUnfJmt0YHZI5yT7J44/kLnmv5LNeqqoyZdrCazImSZakWtX1VDf9+u1ztUMujzXXyWj6qDn747Zzue/fi/NR/ZbkaUkekrTT/q35bPz07NyPvrU/eSQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+GVfAQAA//8jACZ5") r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001080)={0x10001, 0x0, 0xeeef0000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000080)='./file1\x00', 0x8, &(0x7f0000000200)=ANY=[], 0xfd, 0x1bf, &(0x7f0000000840)="$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") epoll_create1(0x80000) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@user_xattr}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@grpquota}, {@nomblk_io_submit}]}, 0x1, 0x56a, &(0x7f00000015c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c}) chdir(&(0x7f0000000040)='./file0\x00') rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='./file2\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x101) pipe2$9p(&(0x7f00000000c0), 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 228.511377ms ago: executing program 5 (id=693): r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x400, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3b}}}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 0s ago: executing program 5 (id=694): ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/13, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) unshare(0x26020480) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0}, 0x18) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r4, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x5}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0xfffffffc, 0x0, 0x0, 0xffffffff}, 0x20000, 0x0, 0x4000007, 0x8, 0x101, 0x14, 0x0, 0x0, 0x0, 0x2000, {0x1, 0x0, 0x0, 0x0, 0x5}}}}]}, 0x78}}, 0x4080) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000740)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@dax_never}, {@noquota}, {@auto_da_alloc}, {@noload}, {@grpid}]}, 0x64, 0x50c, &(0x7f0000000200)="$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") kernel console output (not intermixed with test programs): 1729] RBP: 00007fa27127a090 R08: 0000200000000580 R09: 0000000000000000 [ 108.889509][ T1729] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 108.897506][ T1729] R13: 0000000000000000 R14: 00007fa2705b5fa0 R15: 00007ffee60891e8 [ 108.905492][ T1729] [ 108.976196][ T28] audit: type=1400 audit(1750058441.121:252): avc: denied { mount } for pid=1730 comm="syz.4.341" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 109.708237][ T1743] loop1: detected capacity change from 0 to 40427 [ 109.715897][ T1743] F2FS-fs (loop1): Image doesn't support compression [ 109.722646][ T1743] F2FS-fs (loop1): Image doesn't support compression [ 109.730114][ T1743] F2FS-fs (loop1): invalid crc value [ 109.736404][ T1743] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 109.768233][ T1743] F2FS-fs (loop1): checkpoint=disable on readonly fs [ 110.841644][ T60] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 110.895849][ T1765] loop1: detected capacity change from 0 to 1024 [ 110.904137][ T1765] EXT4-fs: Ignoring removed nobh option [ 110.912712][ T1757] Illegal XDP return value 4294967274 on prog (id 319) dev syz_tun, expect packet loss! [ 110.929398][ T1765] EXT4-fs: Ignoring removed bh option [ 110.939388][ T1765] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 111.008119][ T1765] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 111.209329][ T1765] overlayfs: conflicting lowerdir path [ 111.525908][ T1776] loop4: detected capacity change from 0 to 512 [ 111.526245][ T287] EXT4-fs (loop1): unmounting filesystem. [ 111.538666][ T1776] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities [ 111.558988][ T60] usb 3-1: Using ep0 maxpacket: 32 [ 111.568163][ T60] usb 3-1: config 4 has an invalid interface number: 128 but max is 0 [ 111.577699][ T60] usb 3-1: config 4 has no interface number 0 [ 111.584664][ T60] usb 3-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 111.610861][ T60] usb 3-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 111.935875][ T60] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 111.950717][ T60] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.972808][ T60] hub 3-1:4.128: USB hub found [ 112.456861][ T1789] loop4: detected capacity change from 0 to 256 [ 112.467998][ T28] audit: type=1400 audit(1750058444.780:253): avc: denied { create } for pid=1783 comm="syz.4.359" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 112.490893][ T1789] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 112.803983][ T688] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 112.817911][ T60] hub 3-1:4.128: 2 ports detected [ 112.822981][ T60] hub 3-1:4.128: Using single TT (err -22) [ 112.863538][ T28] audit: type=1400 audit(1750058444.909:254): avc: denied { mount } for pid=1783 comm="syz.4.359" name="/" dev="loop4" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 112.965048][ T1778] loop1: detected capacity change from 0 to 40427 [ 112.980632][ T1778] F2FS-fs (loop1): Unrecognized mount option "whint_mode=user-based" or missing value [ 113.022213][ T688] usb 4-1: Using ep0 maxpacket: 32 [ 113.028581][ T688] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 113.059497][ T688] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 113.077948][ T688] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 113.096681][ T688] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.118375][ T688] usb 4-1: config 0 descriptor?? [ 113.135072][ T60] hub 3-1:4.128: hub_hub_status failed (err = -71) [ 113.144010][ T28] audit: type=1400 audit(1750058445.595:255): avc: denied { unmount } for pid=285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 113.217941][ T60] hub 3-1:4.128: config failed, can't get hub status (err -71) [ 113.230920][ T28] audit: type=1400 audit(1750058445.692:256): avc: denied { name_bind } for pid=1777 comm="syz.1.356" src=65533 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 113.235158][ T688] hub 4-1:0.0: USB hub found [ 113.292857][ T60] usb 3-1: USB disconnect, device number 4 [ 113.312728][ T688] hub 4-1:0.0: config failed, can't read hub descriptor (err -90) [ 113.413763][ T342] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 113.500467][ T688] usbhid 4-1:0.0: can't add hid device: -71 [ 113.507453][ T688] usbhid: probe of 4-1:0.0 failed with error -71 [ 113.525324][ T1807] FAULT_INJECTION: forcing a failure. [ 113.525324][ T1807] name failslab, interval 1, probability 0, space 0, times 0 [ 113.538155][ T1807] CPU: 1 PID: 1807 Comm: syz.1.363 Not tainted 6.1.138-syzkaller-00009-g6246d345f550 #0 [ 113.547892][ T1807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 113.557944][ T1807] Call Trace: [ 113.561235][ T1807] [ 113.564166][ T1807] __dump_stack+0x21/0x24 [ 113.568507][ T1807] dump_stack_lvl+0xee/0x150 [ 113.573100][ T1807] ? __cfi_dump_stack_lvl+0x8/0x8 [ 113.578136][ T1807] ? __stack_depot_save+0x36/0x480 [ 113.583261][ T1807] dump_stack+0x15/0x24 [ 113.587416][ T1807] should_fail_ex+0x3d4/0x520 [ 113.592094][ T1807] __should_failslab+0xac/0xf0 [ 113.596897][ T1807] should_failslab+0x9/0x20 [ 113.601401][ T1807] slab_pre_alloc_hook+0x30/0x1e0 [ 113.606427][ T1807] kmem_cache_alloc_lru+0x49/0x280 [ 113.611549][ T1807] ? shmem_alloc_inode+0x28/0x40 [ 113.616487][ T1807] shmem_alloc_inode+0x28/0x40 [ 113.621242][ T1807] ? __cfi_shmem_alloc_inode+0x10/0x10 [ 113.626698][ T1807] new_inode_pseudo+0x70/0x1f0 [ 113.631467][ T1807] new_inode+0x28/0x1e0 [ 113.635657][ T1807] ? _raw_spin_lock+0x8e/0xe0 [ 113.640338][ T1807] shmem_get_inode+0x349/0xc20 [ 113.645098][ T1807] __shmem_file_setup+0x113/0x2b0 [ 113.650111][ T1807] shmem_file_setup+0x2f/0x40 [ 113.654795][ T1807] __se_sys_memfd_create+0x1e6/0x3b0 [ 113.660099][ T1807] __x64_sys_memfd_create+0x5b/0x70 [ 113.665307][ T1807] x64_sys_call+0x235/0x9a0 [ 113.669825][ T1807] do_syscall_64+0x4c/0xa0 [ 113.674247][ T1807] ? clear_bhb_loop+0x15/0x70 [ 113.678934][ T1807] ? clear_bhb_loop+0x15/0x70 [ 113.683637][ T1807] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 113.689559][ T1807] RIP: 0033:0x7fe63658e929 [ 113.693969][ T1807] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 113.713569][ T1807] RSP: 002b:00007fe6373d3e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 113.721977][ T1807] RAX: ffffffffffffffda RBX: 0000000000000547 RCX: 00007fe63658e929 [ 113.729946][ T1807] RDX: 00007fe6373d3ef0 RSI: 0000000000000000 RDI: 00007fe6366114cc [ 113.737999][ T1807] RBP: 0000200000001140 R08: 00007fe6373d3bb7 R09: 00007fe6373d3e40 [ 113.745972][ T1807] R10: 000000000000000a R11: 0000000000000202 R12: 00002000000005c0 [ 113.753934][ T1807] R13: 00007fe6373d3ef0 R14: 00007fe6373d3eb0 R15: 0000200000000200 [ 113.761906][ T1807] [ 113.767495][ T688] usb 4-1: USB disconnect, device number 4 [ 113.787703][ T342] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 113.799710][ T342] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 113.808983][ T342] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.823658][ T342] snd-usb-audio: probe of 1-1:27.0 failed with error -2 [ 113.900202][ T318] udevd[318]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 114.154455][ T1814] loop1: detected capacity change from 0 to 40427 [ 114.164528][ T1814] F2FS-fs (loop1): Image doesn't support compression [ 114.169712][ T1816] loop2: detected capacity change from 0 to 1024 [ 114.171352][ T1814] F2FS-fs (loop1): Image doesn't support compression [ 114.185301][ T1814] F2FS-fs (loop1): invalid crc value [ 114.190889][ T1816] EXT4-fs (loop2): INFO: recovery required on readonly filesystem [ 114.191639][ T1814] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 114.198751][ T1816] EXT4-fs (loop2): write access will be enabled during recovery [ 114.198767][ T1816] EXT4-fs (loop2): barriers disabled [ 114.223326][ T1816] JBD2: no valid journal superblock found [ 114.229170][ T1816] EXT4-fs (loop2): error loading journal [ 114.250711][ T1409] usb 1-1: USB disconnect, device number 5 [ 114.257759][ T1814] F2FS-fs (loop1): checkpoint=disable on readonly fs [ 114.309797][ T1821] loop3: detected capacity change from 0 to 1024 [ 114.327599][ T1821] EXT4-fs: Ignoring removed nobh option [ 114.335305][ T1821] EXT4-fs: Ignoring removed bh option [ 114.353522][ T1821] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 114.417053][ T1821] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 114.513464][ T1821] overlayfs: conflicting lowerdir path [ 114.591574][ T284] EXT4-fs (loop3): unmounting filesystem. [ 114.632553][ T1832] loop3: detected capacity change from 0 to 512 [ 114.650221][ T1832] EXT4-fs: Mount option(s) incompatible with ext2 [ 115.085137][ T1840] loop2: detected capacity change from 0 to 1024 [ 115.092920][ T1840] EXT4-fs: Ignoring removed nobh option [ 115.098560][ T1840] EXT4-fs: Ignoring removed bh option [ 115.107861][ T1840] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 116.115740][ T1840] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 116.636633][ T1853] overlayfs: conflicting lowerdir path [ 116.863279][ T286] EXT4-fs (loop2): unmounting filesystem. [ 116.940663][ T342] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 118.130790][ T1876] overlayfs: failed to resolve './file0': -2 [ 118.769154][ T1882] loop2: detected capacity change from 0 to 1024 [ 118.796103][ T1882] EXT4-fs: Ignoring removed nobh option [ 118.802544][ T1882] EXT4-fs: Ignoring removed bh option [ 118.829475][ T1882] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 118.847849][ T342] usb 4-1: Using ep0 maxpacket: 32 [ 118.855600][ T342] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 118.883076][ T1882] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 118.903593][ T342] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 118.933623][ T342] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 118.971804][ T342] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.982960][ T1882] overlayfs: conflicting lowerdir path [ 119.017102][ T286] EXT4-fs (loop2): unmounting filesystem. [ 119.017480][ T342] usb 4-1: config 0 descriptor?? [ 119.058169][ T342] hub 4-1:0.0: USB hub found [ 119.196069][ T1888] loop4: detected capacity change from 0 to 40427 [ 119.214962][ T1888] F2FS-fs (loop4): Unrecognized mount option "whint_mode=user-based" or missing value [ 119.307345][ T342] hub 4-1:0.0: config failed, can't read hub descriptor (err -90) [ 119.520906][ T342] usbhid 4-1:0.0: can't add hid device: -71 [ 119.531505][ T342] usbhid: probe of 4-1:0.0 failed with error -71 [ 119.660136][ T19] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 119.678231][ T342] usb 4-1: USB disconnect, device number 5 [ 119.835563][ T19] usb 1-1: Using ep0 maxpacket: 32 [ 119.842303][ T19] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 119.882790][ T19] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 119.910728][ T19] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 119.919813][ T19] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.948548][ T19] usb 1-1: config 0 descriptor?? [ 119.957914][ T19] hub 1-1:0.0: USB hub found [ 120.141455][ T19] hub 1-1:0.0: config failed, can't read hub descriptor (err -22) [ 120.163560][ T19] usbhid 1-1:0.0: can't add hid device: -71 [ 120.184903][ T19] usbhid: probe of 1-1:0.0 failed with error -71 [ 120.219024][ T1933] loop2: detected capacity change from 0 to 1024 [ 120.231872][ T1933] EXT4-fs: Ignoring removed nobh option [ 120.236891][ T19] usb 1-1: USB disconnect, device number 6 [ 120.261050][ T1933] EXT4-fs: Ignoring removed bh option [ 120.270211][ T1933] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 120.321384][ T1933] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 120.344381][ T1933] overlayfs: conflicting lowerdir path [ 120.397100][ T286] EXT4-fs (loop2): unmounting filesystem. [ 120.444769][ T28] audit: type=1400 audit(1750058453.433:257): avc: denied { wake_alarm } for pid=1938 comm="syz.2.396" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 120.474303][ T28] audit: type=1400 audit(1750058453.466:258): avc: denied { read } for pid=1938 comm="syz.2.396" name="event0" dev="devtmpfs" ino=260 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 120.498021][ T28] audit: type=1400 audit(1750058453.466:259): avc: denied { open } for pid=1938 comm="syz.2.396" path="/dev/input/event0" dev="devtmpfs" ino=260 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 120.515682][ T1941] loop4: detected capacity change from 0 to 1024 [ 120.546484][ T1941] EXT4-fs: Ignoring removed nobh option [ 120.558745][ T1941] EXT4-fs: Ignoring removed bh option [ 120.564584][ T1941] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 120.612019][ T1941] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 120.659821][ T1944] loop3: detected capacity change from 0 to 8192 [ 121.079163][ T1949] overlayfs: conflicting lowerdir path [ 121.311703][ T285] EXT4-fs (loop4): unmounting filesystem. [ 121.442521][ T1960] loop2: detected capacity change from 0 to 40427 [ 121.458933][ T1960] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 121.466939][ T1960] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 121.514568][ T1960] F2FS-fs (loop2): Found nat_bits in checkpoint [ 121.588746][ T1960] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 121.595992][ T1960] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 121.634519][ T60] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 121.839616][ T60] usb 5-1: Using ep0 maxpacket: 32 [ 121.847612][ T60] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 121.903774][ T60] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 121.924723][ T60] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 121.939035][ T60] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.952009][ T60] usb 5-1: config 0 descriptor?? [ 121.973500][ T60] hub 5-1:0.0: USB hub found [ 122.002037][ T1977] syz.2.402: attempt to access beyond end of device [ 122.002037][ T1977] loop2: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 122.005431][ T1980] loop1: detected capacity change from 0 to 1024 [ 122.016022][ T1977] syz.2.402: attempt to access beyond end of device [ 122.016022][ T1977] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 122.050830][ T286] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 122.050855][ T286] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 122.054315][ T1980] EXT4-fs: Ignoring removed nobh option [ 122.073014][ T286] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 122.073044][ T286] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 122.081329][ T286] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 122.089007][ T1980] EXT4-fs: Ignoring removed bh option [ 122.089260][ T286] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 122.102352][ T286] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 122.110282][ T1980] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 122.160626][ T60] hub 5-1:0.0: config failed, can't read hub descriptor (err -90) [ 122.184746][ T1980] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 122.224858][ T1980] overlayfs: conflicting lowerdir path [ 122.230949][ T342] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 122.268767][ T287] EXT4-fs (loop1): unmounting filesystem. [ 122.337683][ T1989] loop2: detected capacity change from 0 to 1024 [ 122.348635][ T1989] EXT4-fs: Ignoring removed i_version option [ 122.357639][ T60] usbhid 5-1:0.0: can't add hid device: -71 [ 122.365145][ T60] usbhid: probe of 5-1:0.0 failed with error -71 [ 122.372492][ T1989] EXT4-fs (loop2): Test dummy encryption mode enabled [ 122.400704][ T1989] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 122.410017][ T60] usb 5-1: USB disconnect, device number 5 [ 122.467504][ T342] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 122.489344][ T342] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 122.510260][ T1989] fscrypt: AES-256-XTS using blk-crypto-fallback [ 122.527400][ T342] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 122.604426][ T342] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.618559][ T342] usb 4-1: config 0 descriptor?? [ 122.659461][ T2004] device bridge_slave_1 left promiscuous mode [ 122.669544][ T2004] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.684214][ T2004] device bridge_slave_0 left promiscuous mode [ 122.915149][ T2004] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.026957][ T1975] netlink: 8 bytes leftover after parsing attributes in process `syz.3.405'. [ 123.247877][ T342] pyra 0003:1E7D:2CF6.0002: unknown main item tag 0x0 [ 123.257112][ T342] pyra 0003:1E7D:2CF6.0002: unknown main item tag 0x0 [ 123.267590][ T342] pyra 0003:1E7D:2CF6.0002: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.3-1/input0 [ 123.296462][ T286] EXT4-fs (loop2): unmounting filesystem. [ 123.939170][ T2015] fuse: Unknown parameter 'grou00000000000000000000' [ 124.481414][ T2028] loop4: detected capacity change from 0 to 512 [ 124.608818][ T2028] EXT4-fs: dax option not supported [ 125.116746][ T2033] loop2: detected capacity change from 0 to 40427 [ 125.158256][ T2033] F2FS-fs (loop2): Image doesn't support compression [ 125.165006][ T2033] F2FS-fs (loop2): Image doesn't support compression [ 125.172768][ T2033] F2FS-fs (loop2): invalid crc value [ 125.179397][ T2033] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 125.198030][ T2021] loop1: detected capacity change from 0 to 40427 [ 125.205254][ T2021] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 125.213330][ T2021] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 125.238994][ T2033] F2FS-fs (loop2): checkpoint=disable on readonly fs [ 125.283017][ T2021] F2FS-fs (loop1): invalid crc value [ 125.336188][ T2021] F2FS-fs (loop1): Found nat_bits in checkpoint [ 125.462391][ T342] pyra 0003:1E7D:2CF6.0002: couldn't init struct pyra_device [ 125.479161][ T342] pyra 0003:1E7D:2CF6.0002: couldn't install mouse [ 125.511268][ T2021] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 125.536714][ T342] pyra: probe of 0003:1E7D:2CF6.0002 failed with error -71 [ 125.546237][ T2021] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 125.610883][ T342] usb 4-1: USB disconnect, device number 6 [ 125.741564][ T2045] fido_id[2045]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 126.867191][ T2060] loop3: detected capacity change from 0 to 512 [ 127.153033][ T2060] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 127.153116][ T2060] ext4 filesystem being mounted at /83/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 127.221999][ T380] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 127.245663][ T380] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 127.363445][ T284] EXT4-fs (loop3): unmounting filesystem. [ 127.600598][ T28] audit: type=1400 audit(1750058461.103:260): avc: denied { name_bind } for pid=2075 comm="syz.3.430" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 127.951936][ T2085] fuse: Unknown parameter 'grou00000000000000000000' [ 128.036800][ T2087] loop1: detected capacity change from 0 to 1024 [ 128.047533][ T2087] EXT4-fs: Ignoring removed nobh option [ 128.053236][ T2087] EXT4-fs: Ignoring removed bh option [ 128.060683][ T2087] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 128.095504][ T2087] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 128.191333][ T2094] loop4: detected capacity change from 0 to 1024 [ 128.230349][ T2094] EXT4-fs: Ignoring removed nobh option [ 128.243929][ T2094] EXT4-fs: Ignoring removed bh option [ 128.292372][ T2094] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 128.561383][ T2095] overlayfs: conflicting lowerdir path [ 128.586736][ T2094] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 128.598304][ T2098] loop3: detected capacity change from 0 to 8192 [ 128.726144][ T2108] FAULT_INJECTION: forcing a failure. [ 128.726144][ T2108] name failslab, interval 1, probability 0, space 0, times 0 [ 128.739215][ T2108] CPU: 1 PID: 2108 Comm: syz.0.437 Not tainted 6.1.138-syzkaller-00009-g6246d345f550 #0 [ 128.748955][ T2108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 128.759004][ T2108] Call Trace: [ 128.762280][ T2108] [ 128.765214][ T2108] __dump_stack+0x21/0x24 [ 128.769547][ T2108] dump_stack_lvl+0xee/0x150 [ 128.774169][ T2108] ? __cfi_dump_stack_lvl+0x8/0x8 [ 128.779208][ T2108] dump_stack+0x15/0x24 [ 128.783362][ T2108] should_fail_ex+0x3d4/0x520 [ 128.788054][ T2108] __should_failslab+0xac/0xf0 [ 128.792815][ T2108] ? __se_sys_mount+0x153/0x380 [ 128.797673][ T2108] should_failslab+0x9/0x20 [ 128.802174][ T2108] __kmem_cache_alloc_node+0x3d/0x2c0 [ 128.807547][ T2108] ? __se_sys_mount+0x153/0x380 [ 128.812419][ T2108] kmalloc_trace+0x29/0xb0 [ 128.816872][ T2108] __se_sys_mount+0x153/0x380 [ 128.821563][ T2108] ? fput+0x154/0x1a0 [ 128.825547][ T2108] ? __x64_sys_mount+0xd0/0xd0 [ 128.830314][ T2108] ? __cfi_ksys_write+0x10/0x10 [ 128.835169][ T2108] __x64_sys_mount+0xbf/0xd0 [ 128.839765][ T2108] x64_sys_call+0x65d/0x9a0 [ 128.844272][ T2108] do_syscall_64+0x4c/0xa0 [ 128.848693][ T2108] ? clear_bhb_loop+0x15/0x70 [ 128.853458][ T2108] ? clear_bhb_loop+0x15/0x70 [ 128.858133][ T2108] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 128.864042][ T2108] RIP: 0033:0x7fa27038e929 [ 128.868452][ T2108] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 128.888051][ T2108] RSP: 002b:00007fa27127a038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 128.896461][ T2108] RAX: ffffffffffffffda RBX: 00007fa2705b5fa0 RCX: 00007fa27038e929 [ 128.904425][ T2108] RDX: 0000200000000b80 RSI: 0000200000000040 RDI: 0000000000000000 [ 128.912396][ T2108] RBP: 00007fa27127a090 R08: 0000200000000580 R09: 0000000000000000 [ 128.920361][ T2108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 128.928324][ T2108] R13: 0000000000000000 R14: 00007fa2705b5fa0 R15: 00007ffee60891e8 [ 128.936301][ T2108] [ 128.943324][ T2106] overlayfs: conflicting lowerdir path [ 128.977367][ T287] EXT4-fs (loop1): unmounting filesystem. [ 129.151794][ T285] EXT4-fs (loop4): unmounting filesystem. [ 129.177816][ T2105] loop3: detected capacity change from 0 to 1024 [ 129.264111][ T2105] EXT4-fs: Ignoring removed orlov option [ 129.921043][ T2118] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 130.079705][ T2105] EXT4-fs: Ignoring removed nomblk_io_submit option [ 130.210357][ T2122] fuse: Unknown parameter 'grou00000000000000000000' [ 130.223940][ T28] audit: type=1400 audit(1750058463.925:261): avc: denied { remount } for pid=2119 comm="syz.4.441" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 130.247810][ T2105] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 130.468559][ T2132] loop1: detected capacity change from 0 to 512 [ 130.475285][ T2132] EXT4-fs: dax option not supported [ 130.518395][ T318] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 130.544623][ T2135] loop2: detected capacity change from 0 to 1024 [ 130.866929][ T2135] EXT4-fs: Ignoring removed nobh option [ 130.872799][ T2135] EXT4-fs: Ignoring removed bh option [ 130.899205][ T2135] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 130.917840][ T342] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 130.932431][ T2135] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 130.946027][ T284] EXT4-fs (loop3): unmounting filesystem. [ 131.264800][ T2144] overlayfs: conflicting lowerdir path [ 131.886553][ T286] EXT4-fs (loop2): unmounting filesystem. [ 131.894758][ T342] usb 1-1: Using ep0 maxpacket: 32 [ 131.901778][ T342] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 131.926583][ T342] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 131.936586][ T342] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 131.948264][ T342] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.084089][ T342] usb 1-1: config 0 descriptor?? [ 132.100474][ T342] hub 1-1:0.0: USB hub found [ 132.972722][ T342] hub 1-1:0.0: config failed, can't read hub descriptor (err -22) [ 132.999912][ T342] usbhid 1-1:0.0: can't add hid device: -71 [ 133.022354][ T342] usbhid: probe of 1-1:0.0 failed with error -71 [ 133.090433][ T342] usb 1-1: USB disconnect, device number 7 [ 133.331529][ T2162] loop4: detected capacity change from 0 to 40427 [ 133.341303][ T2162] F2FS-fs (loop4): Image doesn't support compression [ 133.348039][ T2162] F2FS-fs (loop4): Image doesn't support compression [ 133.353555][ T28] audit: type=1400 audit(1750058467.272:262): avc: denied { unlink } for pid=2149 comm="syz.2.448" name="#45" dev="tmpfs" ino=482 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 133.372435][ T2162] F2FS-fs (loop4): invalid crc value [ 133.384138][ T2164] loop3: detected capacity change from 0 to 40427 [ 133.384915][ T2162] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 133.408851][ T2164] F2FS-fs (loop3): Image doesn't support compression [ 133.415556][ T2164] F2FS-fs (loop3): Image doesn't support compression [ 133.430984][ T2162] F2FS-fs (loop4): checkpoint=disable on readonly fs [ 133.469527][ T2164] F2FS-fs (loop3): invalid crc value [ 133.475713][ T2164] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 133.518876][ T2164] F2FS-fs (loop3): checkpoint=disable on readonly fs [ 133.563873][ T28] audit: type=1400 audit(1750058467.508:263): avc: denied { append } for pid=2169 comm="syz.0.454" name="vsock" dev="devtmpfs" ino=276 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 133.596088][ T940] I/O error, dev loop4, sector 40192 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 134.012584][ T2172] fuse: Unknown parameter 'group_i00000000000000000000' [ 134.043690][ T2174] FAULT_INJECTION: forcing a failure. [ 134.043690][ T2174] name failslab, interval 1, probability 0, space 0, times 0 [ 134.077954][ T2174] CPU: 1 PID: 2174 Comm: syz.4.456 Not tainted 6.1.138-syzkaller-00009-g6246d345f550 #0 [ 134.087723][ T2174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 134.097805][ T2174] Call Trace: [ 134.101090][ T2174] [ 134.104021][ T2174] __dump_stack+0x21/0x24 [ 134.108377][ T2174] dump_stack_lvl+0xee/0x150 [ 134.113025][ T2174] ? __cfi_dump_stack_lvl+0x8/0x8 [ 134.118089][ T2174] dump_stack+0x15/0x24 [ 134.122269][ T2174] should_fail_ex+0x3d4/0x520 [ 134.126975][ T2174] __should_failslab+0xac/0xf0 [ 134.131753][ T2174] ? __se_sys_mount+0x153/0x380 [ 134.136638][ T2174] should_failslab+0x9/0x20 [ 134.141194][ T2174] __kmem_cache_alloc_node+0x3d/0x2c0 [ 134.146589][ T2174] ? __se_sys_mount+0x153/0x380 [ 134.151444][ T2174] kmalloc_trace+0x29/0xb0 [ 134.155863][ T2174] __se_sys_mount+0x153/0x380 [ 134.160536][ T2174] ? fput+0x154/0x1a0 [ 134.164512][ T2174] ? __x64_sys_mount+0xd0/0xd0 [ 134.169271][ T2174] ? __cfi_ksys_write+0x10/0x10 [ 134.174137][ T2174] __x64_sys_mount+0xbf/0xd0 [ 134.178746][ T2174] x64_sys_call+0x65d/0x9a0 [ 134.183279][ T2174] do_syscall_64+0x4c/0xa0 [ 134.187724][ T2174] ? clear_bhb_loop+0x15/0x70 [ 134.192435][ T2174] ? clear_bhb_loop+0x15/0x70 [ 134.197158][ T2174] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 134.203101][ T2174] RIP: 0033:0x7f7567f8e929 [ 134.207531][ T2174] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 134.227156][ T2174] RSP: 002b:00007f7568e1b038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 134.235598][ T2174] RAX: ffffffffffffffda RBX: 00007f75681b5fa0 RCX: 00007f7567f8e929 [ 134.243588][ T2174] RDX: 0000200000000000 RSI: 0000200000000040 RDI: 0000000000000000 [ 134.251575][ T2174] RBP: 00007f7568e1b090 R08: 0000200000000100 R09: 0000000000000000 [ 134.259545][ T2174] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 134.267515][ T2174] R13: 0000000000000000 R14: 00007f75681b5fa0 R15: 00007ffebceab308 [ 134.275484][ T2174] [ 134.380314][ T2177] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 134.398683][ T2183] loop4: detected capacity change from 0 to 1024 [ 134.415820][ T2183] EXT4-fs: Ignoring removed nobh option [ 134.435054][ T2183] EXT4-fs: Ignoring removed bh option [ 134.449629][ T2186] loop3: detected capacity change from 0 to 1024 [ 134.460238][ T2186] EXT4-fs: Ignoring removed nobh option [ 134.465840][ T2186] EXT4-fs: Ignoring removed bh option [ 134.472596][ T2183] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 134.657776][ T2186] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 134.728612][ T2183] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 134.747402][ T2186] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 134.961252][ T2194] overlayfs: conflicting lowerdir path [ 135.067801][ T2198] overlayfs: conflicting lowerdir path [ 135.394783][ T285] EXT4-fs (loop4): unmounting filesystem. [ 135.421559][ T284] EXT4-fs (loop3): unmounting filesystem. [ 135.505071][ T2204] loop3: detected capacity change from 0 to 512 [ 135.541774][ T2204] EXT4-fs: Mount option(s) incompatible with ext2 [ 135.640331][ T2208] loop1: detected capacity change from 0 to 512 [ 135.650621][ T2208] EXT4-fs: dax option not supported [ 138.626487][ T318] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 138.983485][ T2220] fuse: Unknown parameter 'group_i00000000000000000000' [ 138.995852][ T2215] loop2: detected capacity change from 0 to 1024 [ 139.033976][ T2215] EXT4-fs: Ignoring removed nobh option [ 139.045234][ T2215] EXT4-fs: Ignoring removed bh option [ 139.050987][ T2215] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 139.135472][ T2215] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 139.705679][ T2241] overlayfs: conflicting lowerdir path [ 139.758292][ T2219] loop1: detected capacity change from 0 to 40427 [ 139.770020][ T2219] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 139.778076][ T2219] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 139.793175][ T2219] F2FS-fs (loop1): invalid crc value [ 139.901065][ T286] EXT4-fs (loop2): unmounting filesystem. [ 139.933275][ T2219] F2FS-fs (loop1): Found nat_bits in checkpoint [ 139.937298][ T2248] loop2: detected capacity change from 0 to 1024 [ 139.954373][ T2248] EXT4-fs: Ignoring removed nobh option [ 139.978324][ T2248] EXT4-fs: Ignoring removed bh option [ 139.994036][ T2248] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 140.051492][ T2250] loop4: detected capacity change from 0 to 1024 [ 140.057734][ T2219] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 140.065199][ T2219] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 140.073546][ T2248] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 140.136450][ T2250] EXT4-fs: Ignoring removed nobh option [ 140.136470][ T2250] EXT4-fs: Ignoring removed bh option [ 140.136748][ T2250] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 140.223273][ T2250] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 140.708015][ T2257] overlayfs: conflicting lowerdir path [ 140.746476][ T28] audit: type=1400 audit(1750058475.217:264): avc: denied { read } for pid=2263 comm="syz.0.478" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 140.746552][ T28] audit: type=1400 audit(1750058475.217:265): avc: denied { open } for pid=2263 comm="syz.0.478" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 140.747205][ T28] audit: type=1400 audit(1750058475.217:266): avc: denied { ioctl } for pid=2263 comm="syz.0.478" path="/dev/binderfs/binder0" dev="binder" ino=16 ioctlcmd=0x6211 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 140.828623][ T2266] overlayfs: conflicting lowerdir path [ 140.917124][ T2264] binder: 2263:2264 ioctl c00c6211 0 returned -14 [ 140.933535][ T286] EXT4-fs (loop2): unmounting filesystem. [ 141.192499][ T442] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 141.210597][ T285] EXT4-fs (loop4): unmounting filesystem. [ 141.216762][ T442] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 143.101854][ T2280] fuse: Unknown parameter 'group_i00000000000000000000' [ 143.204512][ T2282] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 143.599423][ T2292] netlink: 16 bytes leftover after parsing attributes in process `syz.0.487'. [ 143.608499][ T28] audit: type=1400 audit(1750058478.272:267): avc: denied { validate_trans } for pid=2291 comm="syz.0.487" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 143.698485][ T2295] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 144.106266][ T688] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 144.552736][ T688] usb 2-1: Using ep0 maxpacket: 32 [ 144.560137][ T688] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 144.577782][ T688] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 144.588978][ T2303] loop3: detected capacity change from 0 to 1024 [ 144.595912][ T688] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 144.606623][ T688] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.626620][ T2303] EXT4-fs: Ignoring removed i_version option [ 144.637606][ T60] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 145.170345][ T2303] EXT4-fs (loop3): Test dummy encryption mode enabled [ 145.202039][ T2303] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 145.207606][ T688] usb 2-1: config 0 descriptor?? [ 145.230317][ T688] hub 2-1:0.0: USB hub found [ 145.309897][ T60] usb 1-1: Using ep0 maxpacket: 8 [ 145.328293][ T60] usb 1-1: unable to get BOS descriptor or descriptor too short [ 145.365145][ T2312] device bridge_slave_1 left promiscuous mode [ 145.371400][ T2312] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.388434][ T2312] device bridge_slave_0 left promiscuous mode [ 145.392459][ T60] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 145.404871][ T2312] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.406334][ T688] hub 2-1:0.0: config failed, can't read hub descriptor (err -90) [ 145.420431][ T2314] mmap: syz.2.492 (2314) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 145.437579][ T60] usb 1-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 145.457730][ T60] usb 1-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 145.465840][ T60] usb 1-1: Product: syz [ 145.476281][ T60] usb 1-1: Manufacturer: syz [ 145.480947][ T60] usb 1-1: SerialNumber: syz [ 145.503092][ T60] usb 1-1: config 0 descriptor?? [ 145.535421][ T284] EXT4-fs (loop3): unmounting filesystem. [ 145.592297][ T2319] FAULT_INJECTION: forcing a failure. [ 145.592297][ T2319] name failslab, interval 1, probability 0, space 0, times 0 [ 145.597298][ T688] usbhid 2-1:0.0: can't add hid device: -71 [ 145.604997][ T2319] CPU: 0 PID: 2319 Comm: syz.4.491 Not tainted 6.1.138-syzkaller-00009-g6246d345f550 #0 [ 145.611206][ T688] usbhid: probe of 2-1:0.0 failed with error -71 [ 145.620600][ T2319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 145.620616][ T2319] Call Trace: [ 145.620621][ T2319] [ 145.620635][ T2319] __dump_stack+0x21/0x24 [ 145.620670][ T2319] dump_stack_lvl+0xee/0x150 [ 145.652199][ T2319] ? __cfi_dump_stack_lvl+0x8/0x8 [ 145.654656][ T688] usb 2-1: USB disconnect, device number 10 [ 145.657258][ T2319] dump_stack+0x15/0x24 [ 145.657291][ T2319] should_fail_ex+0x3d4/0x520 [ 145.672022][ T2319] ? prepare_creds+0x2f/0x640 [ 145.676730][ T2319] __should_failslab+0xac/0xf0 [ 145.681523][ T2319] should_failslab+0x9/0x20 [ 145.686053][ T2319] kmem_cache_alloc+0x3b/0x330 [ 145.690841][ T2319] prepare_creds+0x2f/0x640 [ 145.695364][ T2319] ? memcpy+0x56/0x70 [ 145.699381][ T2319] copy_creds+0xe4/0x640 [ 145.703646][ T2319] copy_process+0x81c/0x3470 [ 145.708271][ T2319] ? __cfi_kstrtouint_from_user+0x10/0x10 [ 145.714021][ T2319] ? __kasan_check_write+0x14/0x20 [ 145.719157][ T2319] ? proc_fail_nth_write+0x17a/0x1f0 [ 145.724478][ T2319] ? idle_dummy+0x10/0x10 [ 145.728858][ T2319] kernel_clone+0x23a/0x810 [ 145.733399][ T2319] ? __cfi_kernel_clone+0x10/0x10 [ 145.738467][ T2319] ? __kasan_check_write+0x14/0x20 [ 145.743612][ T2319] ? mutex_unlock+0x89/0x220 [ 145.746854][ T2324] fuse: Unknown parameter 'group_id00000000000000000000' [ 145.748223][ T2319] __x64_sys_clone+0x168/0x1b0 [ 145.760035][ T2319] ? __cfi___x64_sys_clone+0x10/0x10 [ 145.765339][ T2319] ? __bpf_trace_sys_enter+0x62/0x70 [ 145.770636][ T2319] ? trace_sys_enter+0x3d/0x50 [ 145.775425][ T2319] x64_sys_call+0x990/0x9a0 [ 145.779939][ T2319] do_syscall_64+0x4c/0xa0 [ 145.784369][ T2319] ? clear_bhb_loop+0x15/0x70 [ 145.789059][ T2319] ? clear_bhb_loop+0x15/0x70 [ 145.793746][ T2319] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 145.799654][ T2319] RIP: 0033:0x7f7567f8e929 [ 145.804082][ T2319] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 145.823700][ T2319] RSP: 002b:00007f7568df9fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 145.832124][ T2319] RAX: ffffffffffffffda RBX: 00007f75681b6080 RCX: 00007f7567f8e929 [ 145.840105][ T2319] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 145.848079][ T2319] RBP: 00007f7568dfa090 R08: 0000000000000000 R09: 0000000000000000 [ 145.856065][ T2319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 145.864051][ T2319] R13: 0000000000000000 R14: 00007f75681b6080 R15: 00007ffebceab308 [ 145.872039][ T2319] [ 145.891314][ T60] usb 1-1: USB disconnect, device number 8 [ 146.158729][ T2328] loop3: detected capacity change from 0 to 40427 [ 146.185480][ T2328] F2FS-fs (loop3): Image doesn't support compression [ 146.192237][ T2328] F2FS-fs (loop3): Image doesn't support compression [ 146.200124][ T2328] F2FS-fs (loop3): invalid crc value [ 146.213699][ T2328] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 146.245969][ T2328] F2FS-fs (loop3): checkpoint=disable on readonly fs [ 146.538821][ T2337] loop1: detected capacity change from 0 to 512 [ 146.545784][ T2337] EXT4-fs: dax option not supported [ 147.970912][ T940] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 148.582034][ T2344] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 148.899344][ T2358] loop4: detected capacity change from 0 to 1024 [ 148.943046][ T2364] fuse: Unknown parameter 'group_id00000000000000000000' [ 148.956384][ T2358] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 149.065021][ T293] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 149.158445][ T2369] overlayfs: './file1' not a directory [ 149.173753][ T28] audit: type=1400 audit(1750058484.234:268): avc: denied { mount } for pid=2357 comm="syz.4.505" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 149.428905][ T1409] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 149.456246][ T293] usb 4-1: Using ep0 maxpacket: 8 [ 149.465514][ T293] usb 4-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice=d0.ab [ 149.475140][ T293] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 149.484178][ T293] usb 4-1: Product: syz [ 149.489522][ T293] usb 4-1: Manufacturer: syz [ 149.496428][ T293] usb 4-1: SerialNumber: syz [ 149.507785][ T293] usb 4-1: config 0 descriptor?? [ 149.606771][ T1409] usb 1-1: too many endpoints for config 0 interface 0 altsetting 9: 199, using maximum allowed: 30 [ 149.620017][ T1409] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 149.629998][ T1409] usb 1-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 199 [ 149.643444][ T1409] usb 1-1: config 0 interface 0 has no altsetting 0 [ 149.650192][ T1409] usb 1-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 149.659986][ T1409] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.717416][ T28] audit: type=1400 audit(1750058484.835:269): avc: denied { unmount } for pid=285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 149.743195][ T285] EXT4-fs (loop4): unmounting filesystem. [ 150.118415][ T1409] usb 1-1: config 0 descriptor?? [ 150.384544][ T2388] loop2: detected capacity change from 0 to 512 [ 150.391437][ T2388] EXT4-fs: dax option not supported [ 151.738397][ T2352] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.753153][ T28] audit: type=1400 audit(1750058487.024:270): avc: denied { read write } for pid=2366 comm="syz.0.507" name="uhid" dev="devtmpfs" ino=267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 151.795193][ T2352] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.848336][ T28] audit: type=1400 audit(1750058487.024:271): avc: denied { open } for pid=2366 comm="syz.0.507" path="/dev/uhid" dev="devtmpfs" ino=267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 151.898105][ T351] usb 4-1: USB disconnect, device number 7 [ 151.913229][ T2397] FAULT_INJECTION: forcing a failure. [ 151.913229][ T2397] name failslab, interval 1, probability 0, space 0, times 0 [ 151.953755][ T2397] CPU: 0 PID: 2397 Comm: syz.1.516 Not tainted 6.1.138-syzkaller-00009-g6246d345f550 #0 [ 151.963537][ T2397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 151.973606][ T2397] Call Trace: [ 151.976895][ T2397] [ 151.979838][ T2397] __dump_stack+0x21/0x24 [ 151.984213][ T2397] dump_stack_lvl+0xee/0x150 [ 151.988824][ T2397] ? __cfi_dump_stack_lvl+0x8/0x8 [ 151.993902][ T2397] dump_stack+0x15/0x24 [ 151.998082][ T2397] should_fail_ex+0x3d4/0x520 [ 152.002775][ T2397] ? getname_flags+0xb9/0x500 [ 152.007476][ T2397] __should_failslab+0xac/0xf0 [ 152.012258][ T2397] should_failslab+0x9/0x20 [ 152.016786][ T2397] kmem_cache_alloc+0x3b/0x330 [ 152.021571][ T2397] getname_flags+0xb9/0x500 [ 152.026100][ T2397] user_path_at_empty+0x30/0x1c0 [ 152.031088][ T2397] do_utimes+0x138/0x2a0 [ 152.035372][ T2397] ? __cfi_do_utimes+0x10/0x10 [ 152.040172][ T2397] __x64_sys_utime+0x12a/0x1d0 [ 152.044962][ T2397] ? __cfi___x64_sys_utime+0x10/0x10 [ 152.050293][ T2397] ? __bpf_trace_sys_enter+0x62/0x70 [ 152.055600][ T2397] ? trace_sys_enter+0x3d/0x50 [ 152.060381][ T2397] x64_sys_call+0x14e/0x9a0 [ 152.064900][ T2397] do_syscall_64+0x4c/0xa0 [ 152.069343][ T2397] ? clear_bhb_loop+0x15/0x70 [ 152.074041][ T2397] ? clear_bhb_loop+0x15/0x70 [ 152.078733][ T2397] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 152.084650][ T2397] RIP: 0033:0x7fe63658e929 [ 152.089077][ T2397] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 152.107434][ T2389] loop4: detected capacity change from 0 to 40427 [ 152.108695][ T2397] RSP: 002b:00007fe6373d4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000084 [ 152.123558][ T2397] RAX: ffffffffffffffda RBX: 00007fe6367b5fa0 RCX: 00007fe63658e929 [ 152.131548][ T2397] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000200 [ 152.139542][ T2397] RBP: 00007fe6373d4090 R08: 0000000000000000 R09: 0000000000000000 [ 152.147528][ T2397] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 152.155521][ T2397] R13: 0000000000000000 R14: 00007fe6367b5fa0 R15: 00007fff758d13e8 [ 152.163514][ T2397] [ 152.166914][ T2389] F2FS-fs (loop4): Image doesn't support compression [ 152.173779][ T2389] F2FS-fs (loop4): Image doesn't support compression [ 152.182970][ T2389] F2FS-fs (loop4): invalid crc value [ 152.189877][ T1409] kye 0003:0458:5010.0003: item fetching failed at offset 0/7 [ 152.195734][ T2400] fuse: Unknown parameter 'group_id00000000000000000000' [ 152.205628][ T2389] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 152.244352][ T2389] F2FS-fs (loop4): checkpoint=disable on readonly fs [ 152.274066][ T1409] kye 0003:0458:5010.0003: parse failed [ 152.279127][ T2402] loop1: detected capacity change from 0 to 512 [ 152.281000][ T1409] kye: probe of 0003:0458:5010.0003 failed with error -22 [ 152.288239][ T318] udevd[318]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 152.316633][ T2402] EXT4-fs: Mount option(s) incompatible with ext2 [ 152.416857][ T351] usb 1-1: USB disconnect, device number 9 [ 152.462000][ T2408] incfs: Can't find or create .index dir in ./file0 [ 152.469210][ T2408] incfs: mount failed -5 [ 153.485592][ T28] audit: type=1400 audit(1750058488.880:272): avc: denied { ioctl } for pid=2410 comm="syz.2.521" path="/dev/binderfs/binder0" dev="binder" ino=10 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 153.605390][ T2411] binder: BINDER_SET_CONTEXT_MGR already set [ 153.611417][ T2411] binder: 2410:2411 ioctl 4018620d 200000000040 returned -16 [ 153.624444][ T2411] FAULT_INJECTION: forcing a failure. [ 153.624444][ T2411] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 153.637605][ T28] audit: type=1400 audit(1750058489.008:273): avc: denied { set_context_mgr } for pid=2410 comm="syz.2.521" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 153.657561][ T2411] CPU: 0 PID: 2411 Comm: syz.2.521 Not tainted 6.1.138-syzkaller-00009-g6246d345f550 #0 [ 153.667311][ T2411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 153.677379][ T2411] Call Trace: [ 153.680680][ T2411] [ 153.683617][ T2411] __dump_stack+0x21/0x24 [ 153.687959][ T2411] dump_stack_lvl+0xee/0x150 [ 153.692562][ T2411] ? __cfi_dump_stack_lvl+0x8/0x8 [ 153.697600][ T2411] dump_stack+0x15/0x24 [ 153.701770][ T2411] should_fail_ex+0x3d4/0x520 [ 153.706451][ T2411] should_fail+0xb/0x10 [ 153.710612][ T2411] should_fail_usercopy+0x1a/0x20 [ 153.715643][ T2411] _copy_to_user+0x1e/0x90 [ 153.720071][ T2411] binder_ioctl_write_read+0x9e25/0xaeb0 [ 153.725710][ T2411] ? finish_task_switch+0x173/0x7b0 [ 153.730947][ T2411] ? __schedule+0xb8f/0x14e0 [ 153.735550][ T2411] ? release_firmware_map_entry+0x194/0x194 [ 153.741453][ T2411] ? binder_has_work_ilocked+0x3c0/0x3c0 [ 153.747091][ T2411] ? __kasan_check_read+0x11/0x20 [ 153.752123][ T2411] ? preempt_schedule_irq+0xbb/0x110 [ 153.757416][ T2411] ? __cfi_preempt_schedule_irq+0x10/0x10 [ 153.763142][ T2411] ? rcu_read_unlock_special+0xab/0x480 [ 153.768697][ T2411] ? avc_has_extended_perms+0x801/0xdc0 [ 153.774267][ T2411] ? raw_irqentry_exit_cond_resched+0x29/0x30 [ 153.780342][ T2411] ? irqentry_exit+0x37/0x40 [ 153.784940][ T2411] ? sysvec_reschedule_ipi+0x78/0x80 [ 153.790225][ T2411] ? asm_sysvec_reschedule_ipi+0x1b/0x20 [ 153.795874][ T2411] ? _binder_inner_proc_unlock+0x40/0x40 [ 153.801527][ T2411] ? __kasan_check_write+0x14/0x20 [ 153.806665][ T2411] ? _raw_spin_lock+0x8e/0xe0 [ 153.811360][ T2411] ? __cfi__raw_spin_lock+0x10/0x10 [ 153.816568][ T2411] ? __ia32_compat_sys_ioctl+0x790/0x790 [ 153.822227][ T2411] ? _raw_spin_unlock+0x4c/0x70 [ 153.827098][ T2411] binder_ioctl+0x355/0x19a0 [ 153.831701][ T2411] ? __kasan_check_read+0x11/0x20 [ 153.836741][ T2411] ? preempt_schedule_irq+0xbb/0x110 [ 153.842041][ T2411] ? __cfi_binder_ioctl+0x10/0x10 [ 153.847072][ T2411] ? has_cap_mac_admin+0x330/0x330 [ 153.852193][ T2411] ? asm_sysvec_reschedule_ipi+0x1b/0x20 [ 153.857833][ T2411] ? selinux_file_ioctl+0x368/0x480 [ 153.863036][ T2411] ? selinux_file_ioctl+0x377/0x480 [ 153.868232][ T2411] ? __switch_to_asm+0x3a/0x60 [ 153.873012][ T2411] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 153.878555][ T2411] ? __kasan_check_read+0x11/0x20 [ 153.883594][ T2411] ? preempt_schedule_irq+0xbb/0x110 [ 153.888884][ T2411] ? __fget_files+0x2d5/0x330 [ 153.893573][ T2411] ? security_file_ioctl+0x95/0xc0 [ 153.898686][ T2411] ? __cfi_binder_ioctl+0x10/0x10 [ 153.903707][ T2411] __se_sys_ioctl+0x12f/0x1b0 [ 153.908385][ T2411] __x64_sys_ioctl+0x7b/0x90 [ 153.912986][ T2411] x64_sys_call+0x58b/0x9a0 [ 153.917487][ T2411] do_syscall_64+0x4c/0xa0 [ 153.921909][ T2411] ? clear_bhb_loop+0x15/0x70 [ 153.926584][ T2411] ? clear_bhb_loop+0x15/0x70 [ 153.931259][ T2411] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 153.937164][ T2411] RIP: 0033:0x7f67f618e929 [ 153.941582][ T2411] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 153.963073][ T2411] RSP: 002b:00007f67f70e6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 153.971503][ T2411] RAX: ffffffffffffffda RBX: 00007f67f63b5fa0 RCX: 00007f67f618e929 [ 153.979482][ T2411] RDX: 00002000000003c0 RSI: 00000000c0306201 RDI: 0000000000000006 [ 153.987462][ T2411] RBP: 00007f67f70e6090 R08: 0000000000000000 R09: 0000000000000000 [ 153.995435][ T2411] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 154.003415][ T2411] R13: 0000000000000000 R14: 00007f67f63b5fa0 R15: 00007ffc51a96078 [ 154.011396][ T2411] [ 154.072397][ T2411] binder: 2410:2411 ioctl c0306201 2000000003c0 returned -14 [ 154.079968][ T28] audit: type=1400 audit(1750058489.008:274): avc: denied { write } for pid=2410 comm="syz.2.521" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 154.102651][ T28] audit: type=1400 audit(1750058489.008:275): avc: denied { map } for pid=2410 comm="syz.2.521" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 154.259022][ T2427] loop2: detected capacity change from 0 to 1024 [ 154.270815][ T2427] EXT4-fs: Ignoring removed nobh option [ 154.278766][ T2427] EXT4-fs: Ignoring removed bh option [ 154.365853][ T2430] loop4: detected capacity change from 0 to 512 [ 154.376879][ T2430] EXT4-fs: dax option not supported [ 154.394127][ T2427] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 154.694429][ T2427] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 155.095621][ T2436] overlayfs: conflicting lowerdir path [ 155.600250][ T286] EXT4-fs (loop2): unmounting filesystem. [ 155.662231][ T2439] fuse: Bad value for 'user_id' [ 155.928462][ T2441] incfs: Can't find or create .index dir in ./file0 [ 155.942322][ T2441] incfs: mount failed -5 [ 156.536940][ T2460] loop2: detected capacity change from 0 to 40427 [ 156.568389][ T2460] F2FS-fs (loop2): Image doesn't support compression [ 156.575228][ T2460] F2FS-fs (loop2): Image doesn't support compression [ 156.583271][ T2460] F2FS-fs (loop2): invalid crc value [ 156.591844][ T2460] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 156.617728][ T2462] loop1: detected capacity change from 0 to 40427 [ 156.625307][ T2462] F2FS-fs (loop1): Image doesn't support compression [ 156.632104][ T2462] F2FS-fs (loop1): Image doesn't support compression [ 156.632250][ T2460] F2FS-fs (loop2): checkpoint=disable on readonly fs [ 156.646327][ T2462] F2FS-fs (loop1): invalid crc value [ 156.652566][ T2462] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 156.728545][ T2462] F2FS-fs (loop1): checkpoint=disable on readonly fs [ 156.792589][ T28] audit: type=1400 audit(1750058492.432:276): avc: denied { write } for pid=2469 comm="syz.0.539" name="uinput" dev="devtmpfs" ino=262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 156.839185][ T28] audit: type=1400 audit(1750058492.465:277): avc: denied { ioctl } for pid=2469 comm="syz.0.539" path="/dev/uinput" dev="devtmpfs" ino=262 ioctlcmd=0x556d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 156.876634][ T2474] loop4: detected capacity change from 0 to 1024 [ 156.883497][ T2474] EXT4-fs: Ignoring removed nobh option [ 156.941669][ T2474] EXT4-fs: Ignoring removed bh option [ 156.977060][ T2474] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 157.077357][ T2474] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 157.477714][ T2483] overlayfs: conflicting lowerdir path [ 158.132005][ T285] EXT4-fs (loop4): unmounting filesystem. [ 158.859895][ T2492] fuse: Bad value for 'user_id' [ 158.966045][ T2497] loop2: detected capacity change from 0 to 1024 [ 158.985489][ T2497] EXT4-fs: Ignoring removed i_version option [ 159.018732][ T2502] loop1: detected capacity change from 0 to 1024 [ 159.029307][ T2497] EXT4-fs (loop2): Test dummy encryption mode enabled [ 159.038406][ T2502] EXT4-fs: Ignoring removed nobh option [ 159.044001][ T2502] EXT4-fs: Ignoring removed bh option [ 159.066820][ T2497] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 159.075833][ T2502] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 159.128100][ T2502] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 159.313395][ T286] EXT4-fs (loop2): unmounting filesystem. [ 159.399611][ T2518] overlayfs: conflicting lowerdir path [ 159.574863][ T2519] overlayfs: failed to resolve './file0': -2 [ 159.697372][ T2524] loop2: detected capacity change from 0 to 1024 [ 159.724441][ T2524] EXT4-fs: Ignoring removed i_version option [ 159.736872][ T2524] EXT4-fs (loop2): Test dummy encryption mode enabled [ 159.766037][ T2526] loop3: detected capacity change from 0 to 1024 [ 159.776430][ T2526] EXT4-fs: Ignoring removed i_version option [ 159.783299][ T2526] EXT4-fs (loop3): Test dummy encryption mode enabled [ 159.845368][ T2524] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 159.856237][ T287] EXT4-fs (loop1): unmounting filesystem. [ 159.857263][ T2530] loop4: detected capacity change from 0 to 1024 [ 159.878849][ T2526] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 159.931326][ T2530] EXT4-fs: Ignoring removed nobh option [ 159.951789][ T2530] EXT4-fs: Ignoring removed bh option [ 159.979214][ T2530] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 159.994853][ T284] EXT4-fs (loop3): unmounting filesystem. [ 160.053330][ T2530] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 160.077911][ T286] EXT4-fs (loop2): unmounting filesystem. [ 160.173593][ T2540] loop3: detected capacity change from 0 to 512 [ 160.184441][ T2540] EXT4-fs: dax option not supported [ 160.394185][ T2542] overlayfs: conflicting lowerdir path [ 160.754070][ T2544] fuse: Bad value for 'user_id' [ 160.993846][ T2550] FAULT_INJECTION: forcing a failure. [ 160.993846][ T2550] name failslab, interval 1, probability 0, space 0, times 0 [ 161.035356][ T2550] CPU: 0 PID: 2550 Comm: syz.2.559 Not tainted 6.1.138-syzkaller-00009-g6246d345f550 #0 [ 161.045137][ T2550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 161.055299][ T2550] Call Trace: [ 161.058594][ T2550] [ 161.061534][ T2550] __dump_stack+0x21/0x24 [ 161.065894][ T2550] dump_stack_lvl+0xee/0x150 [ 161.070504][ T2550] ? __cfi_dump_stack_lvl+0x8/0x8 [ 161.075559][ T2550] ? avc_has_perm+0x158/0x240 [ 161.080253][ T2550] dump_stack+0x15/0x24 [ 161.084431][ T2550] should_fail_ex+0x3d4/0x520 [ 161.089119][ T2550] __should_failslab+0xac/0xf0 [ 161.093900][ T2550] ? __get_vm_area_node+0x12c/0x360 [ 161.099120][ T2550] should_failslab+0x9/0x20 [ 161.103649][ T2550] __kmem_cache_alloc_node+0x3d/0x2c0 [ 161.109043][ T2550] ? __get_vm_area_node+0x12c/0x360 [ 161.114265][ T2550] kmalloc_node_trace+0x26/0xb0 [ 161.119142][ T2550] __get_vm_area_node+0x12c/0x360 [ 161.124191][ T2550] __vmalloc_node_range+0x326/0x13d0 [ 161.129517][ T2550] ? bpf_prog_alloc_no_stats+0x3e/0x3f0 [ 161.135079][ T2550] ? arch_stack_walk+0xfc/0x150 [ 161.140045][ T2550] ? __cfi_avc_has_perm_noaudit+0x10/0x10 [ 161.145784][ T2550] ? stack_trace_save+0x98/0xe0 [ 161.150671][ T2550] ? __cfi___vmalloc_node_range+0x10/0x10 [ 161.156431][ T2550] ? __cfi_selinux_capable+0x10/0x10 [ 161.161766][ T2550] ? bpf_prog_alloc_no_stats+0x3e/0x3f0 [ 161.167338][ T2550] __vmalloc+0x79/0x90 [ 161.171459][ T2550] ? bpf_prog_alloc_no_stats+0x3e/0x3f0 [ 161.177052][ T2550] bpf_prog_alloc_no_stats+0x3e/0x3f0 [ 161.182460][ T2550] bpf_prog_alloc+0x22/0x1c0 [ 161.187096][ T2550] bpf_prog_load+0x7c6/0x15a0 [ 161.191794][ T2550] ? map_freeze+0x390/0x390 [ 161.196331][ T2550] ? selinux_bpf+0xc7/0xf0 [ 161.200784][ T2550] ? security_bpf+0x93/0xb0 [ 161.205336][ T2550] __sys_bpf+0x504/0x780 [ 161.209610][ T2550] ? bpf_link_show_fdinfo+0x320/0x320 [ 161.215013][ T2550] ? __cfi_ksys_write+0x10/0x10 [ 161.219889][ T2550] ? debug_smp_processor_id+0x17/0x20 [ 161.225285][ T2550] __x64_sys_bpf+0x7c/0x90 [ 161.229732][ T2550] x64_sys_call+0x488/0x9a0 [ 161.234261][ T2550] do_syscall_64+0x4c/0xa0 [ 161.238729][ T2550] ? clear_bhb_loop+0x15/0x70 [ 161.243445][ T2550] ? clear_bhb_loop+0x15/0x70 [ 161.248144][ T2550] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 161.254069][ T2550] RIP: 0033:0x7f67f618e929 [ 161.258505][ T2550] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 161.278129][ T2550] RSP: 002b:00007f67f70e6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 161.286556][ T2550] RAX: ffffffffffffffda RBX: 00007f67f63b5fa0 RCX: 00007f67f618e929 [ 161.294531][ T2550] RDX: 0000000000000094 RSI: 0000200000000300 RDI: 0000000000000005 [ 161.302524][ T2550] RBP: 00007f67f70e6090 R08: 0000000000000000 R09: 0000000000000000 [ 161.310492][ T2550] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 161.318465][ T2550] R13: 0000000000000000 R14: 00007f67f63b5fa0 R15: 00007ffc51a96078 [ 161.326441][ T2550] [ 161.349813][ T2550] syz.2.559: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz2,mems_allowed=0 [ 161.384156][ T2550] CPU: 0 PID: 2550 Comm: syz.2.559 Not tainted 6.1.138-syzkaller-00009-g6246d345f550 #0 [ 161.393930][ T2550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 161.404019][ T2550] Call Trace: [ 161.407333][ T2550] [ 161.410372][ T2550] __dump_stack+0x21/0x24 [ 161.414733][ T2550] dump_stack_lvl+0xee/0x150 [ 161.419355][ T2550] ? __cfi_dump_stack_lvl+0x8/0x8 [ 161.424413][ T2550] ? pr_cont_kernfs_name+0x133/0x160 [ 161.429745][ T2550] dump_stack+0x15/0x24 [ 161.433932][ T2550] warn_alloc+0x1b0/0x1d0 [ 161.438386][ T2550] ? should_failslab+0x9/0x20 [ 161.443102][ T2550] ? __cfi_warn_alloc+0x10/0x10 [ 161.447976][ T2550] ? kmalloc_node_trace+0x3d/0xb0 [ 161.453071][ T2550] ? __get_vm_area_node+0x353/0x360 [ 161.458308][ T2550] __vmalloc_node_range+0x34b/0x13d0 [ 161.463620][ T2550] ? arch_stack_walk+0xfc/0x150 [ 161.468507][ T2550] ? __cfi_avc_has_perm_noaudit+0x10/0x10 [ 161.474251][ T2550] ? stack_trace_save+0x98/0xe0 [ 161.479121][ T2550] ? __cfi___vmalloc_node_range+0x10/0x10 [ 161.484867][ T2550] ? __cfi_selinux_capable+0x10/0x10 [ 161.490178][ T2550] ? bpf_prog_alloc_no_stats+0x3e/0x3f0 [ 161.495742][ T2550] __vmalloc+0x79/0x90 [ 161.499835][ T2550] ? bpf_prog_alloc_no_stats+0x3e/0x3f0 [ 161.505402][ T2550] bpf_prog_alloc_no_stats+0x3e/0x3f0 [ 161.510792][ T2550] bpf_prog_alloc+0x22/0x1c0 [ 161.515439][ T2550] bpf_prog_load+0x7c6/0x15a0 [ 161.520130][ T2550] ? map_freeze+0x390/0x390 [ 161.524665][ T2550] ? selinux_bpf+0xc7/0xf0 [ 161.529103][ T2550] ? security_bpf+0x93/0xb0 [ 161.533621][ T2550] __sys_bpf+0x504/0x780 [ 161.537883][ T2550] ? bpf_link_show_fdinfo+0x320/0x320 [ 161.543281][ T2550] ? __cfi_ksys_write+0x10/0x10 [ 161.548154][ T2550] ? debug_smp_processor_id+0x17/0x20 [ 161.553547][ T2550] __x64_sys_bpf+0x7c/0x90 [ 161.557981][ T2550] x64_sys_call+0x488/0x9a0 [ 161.562504][ T2550] do_syscall_64+0x4c/0xa0 [ 161.566948][ T2550] ? clear_bhb_loop+0x15/0x70 [ 161.571640][ T2550] ? clear_bhb_loop+0x15/0x70 [ 161.576335][ T2550] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 161.582252][ T2550] RIP: 0033:0x7f67f618e929 [ 161.586679][ T2550] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 161.606300][ T2550] RSP: 002b:00007f67f70e6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 161.614736][ T2550] RAX: ffffffffffffffda RBX: 00007f67f63b5fa0 RCX: 00007f67f618e929 [ 161.622726][ T2550] RDX: 0000000000000094 RSI: 0000200000000300 RDI: 0000000000000005 [ 161.630712][ T2550] RBP: 00007f67f70e6090 R08: 0000000000000000 R09: 0000000000000000 [ 161.638696][ T2550] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 161.646678][ T2550] R13: 0000000000000000 R14: 00007f67f63b5fa0 R15: 00007ffc51a96078 [ 161.654675][ T2550] [ 161.664459][ T2559] loop3: detected capacity change from 0 to 1024 [ 162.358908][ T2560] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 162.514060][ T2550] Mem-Info: [ 162.620934][ T2559] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 162.753193][ T2559] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 162.762354][ T2559] overlayfs: missing 'lowerdir' [ 163.110037][ T284] EXT4-fs (loop3): unmounting filesystem. [ 163.144724][ T2550] active_anon:10850 inactive_anon:3 isolated_anon:0 [ 163.144724][ T2550] active_file:7559 inactive_file:2542 isolated_file:0 [ 163.144724][ T2550] unevictable:0 dirty:287 writeback:0 [ 163.144724][ T2550] slab_reclaimable:8748 slab_unreclaimable:75443 [ 163.144724][ T2550] mapped:33755 shmem:3309 pagetables:682 [ 163.144724][ T2550] sec_pagetables:0 bounce:0 [ 163.144724][ T2550] kernel_misc_reclaimable:0 [ 163.144724][ T2550] free:1518672 free_pcp:10696 free_cma:0 [ 163.191957][ T2550] Node 0 active_anon:43400kB inactive_anon:12kB active_file:30236kB inactive_file:10168kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:135020kB dirty:1148kB writeback:0kB shmem:13236kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:4836kB pagetables:2728kB sec_pagetables:0kB all_unreclaimable? no [ 163.234865][ T2550] DMA32 free:2968532kB boost:0kB min:31288kB low:39108kB high:46928kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2974272kB mlocked:0kB bounce:0kB free_pcp:5740kB local_pcp:5740kB free_cma:0kB [ 163.307723][ T2550] lowmem_reserve[]: 0 3932 3932 3932 [ 163.322167][ T2550] Normal free:3100864kB boost:0kB min:42436kB low:53044kB high:63652kB reserved_highatomic:0KB active_anon:60300kB inactive_anon:12kB active_file:30236kB inactive_file:10168kB unevictable:0kB writepending:1148kB present:5242880kB managed:4026656kB mlocked:0kB bounce:0kB free_pcp:25208kB local_pcp:21384kB free_cma:0kB [ 163.382920][ T2550] lowmem_reserve[]: 0 0 0 0 [ 163.387503][ T2550] DMA32: 3*4kB (M) 1*8kB (M) 2*16kB (M) 3*32kB (M) 3*64kB (M) 3*128kB (M) 3*256kB (M) 3*512kB (M) 4*1024kB (UM) 2*2048kB (M) 722*4096kB (M) = 2968532kB [ 163.403535][ T2550] Normal: 1067*4kB (U) 253*8kB (UE) 126*16kB (UM) 6*32kB (UME) 7*64kB (UME) 36*128kB (UME) 35*256kB (UME) 26*512kB (UME) 20*1024kB (UME) 5*2048kB (UME) 740*4096kB (UM) = 3097588kB [ 163.422475][ T2550] 13042 total pagecache pages [ 163.427224][ T2550] 3 pages in swap cache [ 163.431468][ T2550] Free swap = 124364kB [ 163.435686][ T2550] Total swap = 124996kB [ 163.439919][ T2550] 2097051 pages RAM [ 163.443910][ T2550] 0 pages HighMem/MovableOnly [ 163.448687][ T2550] 346819 pages reserved [ 163.453025][ T2550] 0 pages cma reserved [ 163.465702][ T285] EXT4-fs (loop4): unmounting filesystem. [ 163.504232][ T2572] loop2: detected capacity change from 0 to 1024 [ 163.511439][ T2572] EXT4-fs: Ignoring removed i_version option [ 163.537502][ T2572] EXT4-fs (loop2): Test dummy encryption mode enabled [ 163.557848][ T2572] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 163.646605][ T286] EXT4-fs (loop2): unmounting filesystem. [ 163.670336][ T305] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 164.126723][ T305] usb 4-1: Using ep0 maxpacket: 32 [ 164.133287][ T305] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 164.144636][ T305] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 164.154940][ T305] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 164.164462][ T305] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.184255][ T305] usb 4-1: config 0 descriptor?? [ 164.201633][ T305] hub 4-1:0.0: USB hub found [ 164.377944][ T305] hub 4-1:0.0: config failed, can't read hub descriptor (err -90) [ 164.453594][ T2594] overlayfs: failed to resolve './file0': -2 [ 164.517494][ T2599] FAULT_INJECTION: forcing a failure. [ 164.517494][ T2599] name failslab, interval 1, probability 0, space 0, times 0 [ 164.546108][ T2599] CPU: 0 PID: 2599 Comm: syz.2.571 Not tainted 6.1.138-syzkaller-00009-g6246d345f550 #0 [ 164.555892][ T2599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 164.565983][ T2599] Call Trace: [ 164.569280][ T2599] [ 164.572237][ T2599] __dump_stack+0x21/0x24 [ 164.576602][ T2599] dump_stack_lvl+0xee/0x150 [ 164.581229][ T2599] ? __cfi_dump_stack_lvl+0x8/0x8 [ 164.586279][ T2599] ? __kasan_check_read+0x11/0x20 [ 164.591327][ T2599] dump_stack+0x15/0x24 [ 164.595505][ T2599] should_fail_ex+0x3d4/0x520 [ 164.600204][ T2599] ? getname_flags+0xb9/0x500 [ 164.604908][ T2599] __should_failslab+0xac/0xf0 [ 164.609694][ T2599] should_failslab+0x9/0x20 [ 164.614223][ T2599] kmem_cache_alloc+0x3b/0x330 [ 164.619022][ T2599] ? asm_exc_page_fault+0x27/0x30 [ 164.624068][ T2599] getname_flags+0xb9/0x500 [ 164.628597][ T2599] ? refcount_dec_and_lock_irqsave+0x81/0x100 [ 164.634686][ T2599] user_path_at_empty+0x30/0x1c0 [ 164.639646][ T2599] __se_sys_mount+0x2e3/0x380 [ 164.644352][ T2599] ? __x64_sys_mount+0xd0/0xd0 [ 164.649137][ T2599] ? __kasan_check_write+0x14/0x20 [ 164.654270][ T2599] ? fpregs_restore_userregs+0x128/0x260 [ 164.659925][ T2599] __x64_sys_mount+0xbf/0xd0 [ 164.664542][ T2599] x64_sys_call+0x65d/0x9a0 [ 164.669066][ T2599] do_syscall_64+0x4c/0xa0 [ 164.673589][ T2599] ? clear_bhb_loop+0x15/0x70 [ 164.678282][ T2599] ? clear_bhb_loop+0x15/0x70 [ 164.682978][ T2599] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 164.688898][ T2599] RIP: 0033:0x7f67f618e929 [ 164.693330][ T2599] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 164.712950][ T2599] RSP: 002b:00007f67f70e6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 164.721384][ T2599] RAX: ffffffffffffffda RBX: 00007f67f63b5fa0 RCX: 00007f67f618e929 [ 164.729382][ T2599] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000000 [ 164.737376][ T2599] RBP: 00007f67f70e6090 R08: 0000200000000140 R09: 0000000000000000 [ 164.745369][ T2599] R10: 0000000003ae4c21 R11: 0000000000000246 R12: 0000000000000001 [ 164.753358][ T2599] R13: 0000000000000000 R14: 00007f67f63b5fa0 R15: 00007ffc51a96078 [ 164.761350][ T2599] [ 164.778627][ T305] usbhid 4-1:0.0: can't add hid device: -71 [ 164.785127][ T305] usbhid: probe of 4-1:0.0 failed with error -71 [ 164.826081][ T305] usb 4-1: USB disconnect, device number 8 [ 165.358266][ T2615] loop4: detected capacity change from 0 to 1024 [ 165.368353][ T2615] EXT4-fs: Ignoring removed i_version option [ 165.385075][ T2615] EXT4-fs (loop4): Test dummy encryption mode enabled [ 165.450603][ T2615] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 165.545457][ T2619] overlayfs: failed to resolve './file0': -2 [ 165.850541][ T285] EXT4-fs (loop4): unmounting filesystem. [ 166.938813][ T28] audit: type=1400 audit(1750058503.317:278): avc: denied { ioctl } for pid=2634 comm="syz.0.582" path="socket:[23677]" dev="sockfs" ino=23677 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 166.973129][ T2640] FAULT_INJECTION: forcing a failure. [ 166.973129][ T2640] name failslab, interval 1, probability 0, space 0, times 0 [ 166.973894][ T2637] loop4: detected capacity change from 0 to 512 [ 166.985916][ T2640] CPU: 0 PID: 2640 Comm: syz.1.584 Not tainted 6.1.138-syzkaller-00009-g6246d345f550 #0 [ 167.001853][ T2640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 167.011942][ T2640] Call Trace: [ 167.015247][ T2640] [ 167.018199][ T2640] __dump_stack+0x21/0x24 [ 167.022591][ T2640] dump_stack_lvl+0xee/0x150 [ 167.027219][ T2640] ? __cfi_dump_stack_lvl+0x8/0x8 [ 167.032319][ T2640] ? __kasan_check_read+0x11/0x20 [ 167.037375][ T2640] ? __rb_reserve_next+0x7b6/0xd80 [ 167.042493][ T2640] dump_stack+0x15/0x24 [ 167.046659][ T2640] should_fail_ex+0x3d4/0x520 [ 167.051346][ T2640] __should_failslab+0xac/0xf0 [ 167.056135][ T2640] ? __get_vm_area_node+0x12c/0x360 [ 167.061346][ T2640] should_failslab+0x9/0x20 [ 167.065860][ T2640] __kmem_cache_alloc_node+0x3d/0x2c0 [ 167.071240][ T2640] ? __get_vm_area_node+0x12c/0x360 [ 167.076477][ T2640] kmalloc_node_trace+0x26/0xb0 [ 167.081344][ T2640] __get_vm_area_node+0x12c/0x360 [ 167.086385][ T2640] __vmalloc_node_range+0x326/0x13d0 [ 167.091684][ T2640] ? bpf_prog_alloc_no_stats+0x3e/0x3f0 [ 167.097233][ T2640] ? arch_stack_walk+0xfc/0x150 [ 167.102097][ T2640] ? __cfi_avc_has_perm_noaudit+0x10/0x10 [ 167.107827][ T2640] ? stack_trace_save+0x98/0xe0 [ 167.112689][ T2640] ? __cfi___vmalloc_node_range+0x10/0x10 [ 167.118421][ T2640] ? __cfi_selinux_capable+0x10/0x10 [ 167.123737][ T2640] ? bpf_prog_alloc_no_stats+0x3e/0x3f0 [ 167.129287][ T2640] __vmalloc+0x79/0x90 [ 167.133370][ T2640] ? bpf_prog_alloc_no_stats+0x3e/0x3f0 [ 167.138923][ T2640] bpf_prog_alloc_no_stats+0x3e/0x3f0 [ 167.144296][ T2640] bpf_prog_alloc+0x22/0x1c0 [ 167.148908][ T2640] bpf_prog_load+0x7c6/0x15a0 [ 167.153669][ T2640] ? map_freeze+0x390/0x390 [ 167.158198][ T2640] ? selinux_bpf+0xc7/0xf0 [ 167.162639][ T2640] ? security_bpf+0x93/0xb0 [ 167.167159][ T2640] __sys_bpf+0x504/0x780 [ 167.171419][ T2640] ? bpf_link_show_fdinfo+0x320/0x320 [ 167.176807][ T2640] ? __cfi_ksys_write+0x10/0x10 [ 167.181752][ T2640] ? debug_smp_processor_id+0x17/0x20 [ 167.187129][ T2640] __x64_sys_bpf+0x7c/0x90 [ 167.191558][ T2640] x64_sys_call+0x488/0x9a0 [ 167.196063][ T2640] do_syscall_64+0x4c/0xa0 [ 167.200486][ T2640] ? clear_bhb_loop+0x15/0x70 [ 167.205175][ T2640] ? clear_bhb_loop+0x15/0x70 [ 167.209854][ T2640] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 167.215760][ T2640] RIP: 0033:0x7fe63658e929 [ 167.220181][ T2640] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 167.239788][ T2640] RSP: 002b:00007fe6373d4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 167.248207][ T2640] RAX: ffffffffffffffda RBX: 00007fe6367b5fa0 RCX: 00007fe63658e929 [ 167.256179][ T2640] RDX: 0000000000000094 RSI: 0000200000000300 RDI: 0000000000000005 [ 167.264153][ T2640] RBP: 00007fe6373d4090 R08: 0000000000000000 R09: 0000000000000000 [ 167.272125][ T2640] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 167.280094][ T2640] R13: 0000000000000000 R14: 00007fe6367b5fa0 R15: 00007fff758d13e8 [ 167.288069][ T2640] [ 167.302966][ T28] audit: type=1400 audit(1750058503.414:279): avc: denied { setattr } for pid=2634 comm="syz.0.582" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 167.353659][ T2637] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 167.369877][ T2637] ext4 filesystem being mounted at /119/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 167.404141][ T28] audit: type=1400 audit(1750058503.810:280): avc: denied { rename } for pid=2636 comm="syz.4.583" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 167.426525][ T2637] EXT4-fs error (device loop4): ext4_get_first_dir_block:3591: inode #12: block 32: comm syz.4.583: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 167.446842][ T2637] EXT4-fs error (device loop4): ext4_get_first_dir_block:3594: inode #12: comm syz.4.583: directory missing '.' [ 167.465065][ T28] audit: type=1400 audit(1750058503.843:281): avc: denied { rename } for pid=2636 comm="syz.4.583" name="bus" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 167.533562][ T285] EXT4-fs error (device loop4): ext4_readdir:263: inode #12: block 32: comm syz-executor: path /119/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 167.536076][ T28] audit: type=1400 audit(1750058503.918:282): avc: denied { create } for pid=2636 comm="syz.4.583" name=E91F7189591E9233614B scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=sock_file permissive=1 [ 167.576936][ T28] audit: type=1400 audit(1750058503.929:283): avc: denied { write } for pid=2636 comm="syz.4.583" name=E91F7189591E9233614B dev="loop4" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=sock_file permissive=1 [ 167.643762][ T831] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 167.645712][ T285] EXT4-fs error (device loop4): ext4_empty_dir:3145: inode #12: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 167.688097][ T285] EXT4-fs warning (device loop4): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 167.701270][ T285] EXT4-fs error (device loop4): ext4_readdir:263: inode #12: block 32: comm syz-executor: path /119/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 167.747965][ T2660] loop2: detected capacity change from 0 to 1024 [ 167.777683][ T2660] EXT4-fs: Ignoring removed i_version option [ 167.783703][ T285] EXT4-fs error (device loop4): ext4_empty_dir:3145: inode #12: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 167.803821][ T2660] EXT4-fs (loop2): Test dummy encryption mode enabled [ 167.815089][ T285] EXT4-fs warning (device loop4): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 167.829664][ T285] EXT4-fs error (device loop4): ext4_readdir:263: inode #12: block 32: comm syz-executor: path /119/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 167.854023][ T2660] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 167.855090][ T831] usb 4-1: Using ep0 maxpacket: 32 [ 167.875318][ T831] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 167.886556][ T831] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 167.896917][ T831] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 167.907748][ T831] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.931863][ T831] usb 4-1: config 0 descriptor?? [ 167.952161][ T285] EXT4-fs error (device loop4): ext4_empty_dir:3145: inode #12: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 167.952806][ T831] hub 4-1:0.0: USB hub found [ 168.016776][ T285] EXT4-fs warning (device loop4): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 168.042449][ T285] EXT4-fs error (device loop4): ext4_readdir:263: inode #12: block 32: comm syz-executor: path /119/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 168.047783][ T286] EXT4-fs (loop2): unmounting filesystem. [ 168.112727][ T285] EXT4-fs error (device loop4): ext4_empty_dir:3145: inode #12: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 168.131035][ T2664] loop2: detected capacity change from 0 to 1024 [ 168.142220][ T2664] EXT4-fs: Ignoring removed nobh option [ 168.143763][ T831] hub 4-1:0.0: config failed, can't read hub descriptor (err -90) [ 168.155984][ T285] EXT4-fs warning (device loop4): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 168.173583][ T2664] EXT4-fs: Ignoring removed bh option [ 168.199268][ T2664] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 168.217643][ T285] EXT4-fs warning (device loop4): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 168.276302][ T2664] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 168.302840][ T285] EXT4-fs warning (device loop4): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 168.358712][ T831] usbhid 4-1:0.0: can't add hid device: -71 [ 168.368202][ T831] usbhid: probe of 4-1:0.0 failed with error -71 [ 168.407093][ T285] EXT4-fs warning (device loop4): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 169.037244][ T2669] overlayfs: conflicting lowerdir path [ 169.064093][ T28] audit: type=1400 audit(1750058505.591:284): avc: denied { call } for pid=2673 comm="syz.0.595" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 169.073283][ T831] usb 4-1: USB disconnect, device number 9 [ 169.091083][ T28] audit: type=1400 audit(1750058505.624:285): avc: denied { transfer } for pid=2673 comm="syz.0.595" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 169.127233][ T285] EXT4-fs warning (device loop4): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 169.136763][ T2677] incfs: Can't find or create .index dir in ./file0 [ 169.201523][ T286] EXT4-fs (loop2): unmounting filesystem. [ 169.225116][ T2677] incfs: mount failed -5 [ 169.242365][ T285] EXT4-fs warning (device loop4): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 169.280402][ T285] EXT4-fs warning (device loop4): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 169.589442][ T2690] FAULT_INJECTION: forcing a failure. [ 169.589442][ T2690] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 169.602570][ T2690] CPU: 1 PID: 2690 Comm: syz.0.599 Not tainted 6.1.138-syzkaller-00009-g6246d345f550 #0 [ 169.612309][ T2690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 169.622410][ T2690] Call Trace: [ 169.625701][ T2690] [ 169.628641][ T2690] __dump_stack+0x21/0x24 [ 169.633000][ T2690] dump_stack_lvl+0xee/0x150 [ 169.637614][ T2690] ? __cfi_dump_stack_lvl+0x8/0x8 [ 169.642668][ T2690] ? getname_flags+0xb9/0x500 [ 169.647372][ T2690] dump_stack+0x15/0x24 [ 169.651551][ T2690] should_fail_ex+0x3d4/0x520 [ 169.656265][ T2690] should_fail+0xb/0x10 [ 169.660445][ T2690] should_fail_usercopy+0x1a/0x20 [ 169.665486][ T2690] strncpy_from_user+0x24/0x2d0 [ 169.670365][ T2690] ? getname_flags+0xb9/0x500 [ 169.675064][ T2690] getname_flags+0xf4/0x500 [ 169.679596][ T2690] getname+0x19/0x20 [ 169.683517][ T2690] do_sys_openat2+0xcb/0x7e0 [ 169.688120][ T2690] ? __kasan_check_read+0x11/0x20 [ 169.693170][ T2690] ? preempt_schedule_notrace+0xed/0x110 [ 169.698828][ T2690] ? do_sys_open+0xe0/0xe0 [ 169.703269][ T2690] ? __cfi_bpf_trace_run2+0x10/0x10 [ 169.708500][ T2690] ? ksys_write+0x1eb/0x240 [ 169.713038][ T2690] ? preempt_schedule_notrace_thunk+0x16/0x18 [ 169.719131][ T2690] __x64_sys_openat+0x136/0x160 [ 169.724005][ T2690] x64_sys_call+0x783/0x9a0 [ 169.728528][ T2690] do_syscall_64+0x4c/0xa0 [ 169.732971][ T2690] ? clear_bhb_loop+0x15/0x70 [ 169.737666][ T2690] ? clear_bhb_loop+0x15/0x70 [ 169.742377][ T2690] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 169.748315][ T2690] RIP: 0033:0x7fa27038e929 [ 169.752759][ T2690] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 169.772386][ T2690] RSP: 002b:00007fa271238038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 169.780827][ T2690] RAX: ffffffffffffffda RBX: 00007fa2705b6160 RCX: 00007fa27038e929 [ 169.788805][ T2690] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 169.796784][ T2690] RBP: 00007fa271238090 R08: 0000000000000000 R09: 0000000000000000 [ 169.804764][ T2690] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 169.812755][ T2690] R13: 0000000000000000 R14: 00007fa2705b6160 R15: 00007ffee60891e8 [ 169.820734][ T2690] [ 169.851880][ T28] audit: type=1400 audit(1750058506.439:286): avc: denied { sqpoll } for pid=2693 comm="syz.3.601" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 170.103369][ T2696] tipc: Started in network mode [ 170.161011][ T2696] tipc: Node identity , cluster identity 4711 [ 170.173377][ T2696] tipc: Failed to obtain node identity [ 170.184160][ T2696] tipc: Enabling of bearer rejected, failed to enable media [ 170.385221][ T2703] loop1: detected capacity change from 0 to 2048 [ 170.645394][ T2703] loop1: p1 < > p3 [ 170.734891][ T2703] loop1: p3 size 134217728 extends beyond EOD, truncated [ 171.326703][ T2719] loop3: detected capacity change from 0 to 8192 [ 171.559153][ T2726] FAULT_INJECTION: forcing a failure. [ 171.559153][ T2726] name failslab, interval 1, probability 0, space 0, times 0 [ 171.571981][ T2726] CPU: 1 PID: 2726 Comm: syz.1.608 Not tainted 6.1.138-syzkaller-00009-g6246d345f550 #0 [ 171.581718][ T2726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 171.591785][ T2726] Call Trace: [ 171.595072][ T2726] [ 171.598016][ T2726] __dump_stack+0x21/0x24 [ 171.602365][ T2726] dump_stack_lvl+0xee/0x150 [ 171.606982][ T2726] ? __cfi_dump_stack_lvl+0x8/0x8 [ 171.612030][ T2726] dump_stack+0x15/0x24 [ 171.616318][ T2726] should_fail_ex+0x3d4/0x520 [ 171.621011][ T2726] __should_failslab+0xac/0xf0 [ 171.625794][ T2726] should_failslab+0x9/0x20 [ 171.630326][ T2726] kmem_cache_alloc_node+0x42/0x340 [ 171.635542][ T2726] ? __alloc_skb+0xdf/0x7e0 [ 171.640065][ T2726] __alloc_skb+0xdf/0x7e0 [ 171.644421][ T2726] ? netlink_autobind+0x168/0x1a0 [ 171.649472][ T2726] netlink_sendmsg+0x626/0xbc0 [ 171.654314][ T2726] ? __kasan_check_read+0x11/0x20 [ 171.659372][ T2726] ? __cfi_netlink_sendmsg+0x10/0x10 [ 171.664687][ T2726] ? raw_irqentry_exit_cond_resched+0x29/0x30 [ 171.670768][ T2726] ? security_socket_sendmsg+0x93/0xb0 [ 171.676253][ T2726] ? __cfi_netlink_sendmsg+0x10/0x10 [ 171.681559][ T2726] ____sys_sendmsg+0x5a9/0x990 [ 171.686343][ T2726] ? __sys_sendmsg_sock+0x40/0x40 [ 171.691395][ T2726] ? import_iovec+0x7c/0xb0 [ 171.695927][ T2726] ___sys_sendmsg+0x21c/0x290 [ 171.700641][ T2726] ? __sys_sendmsg+0x270/0x270 [ 171.705435][ T2726] ? _raw_spin_unlock+0x4c/0x70 [ 171.710336][ T2726] ? finish_task_switch+0x16b/0x7b0 [ 171.715591][ T2726] ? __fdget+0x19c/0x220 [ 171.719869][ T2726] __x64_sys_sendmsg+0x1f0/0x2c0 [ 171.724818][ T2726] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 171.730295][ T2726] x64_sys_call+0x171/0x9a0 [ 171.734810][ T2726] do_syscall_64+0x4c/0xa0 [ 171.739235][ T2726] ? clear_bhb_loop+0x15/0x70 [ 171.743922][ T2726] ? clear_bhb_loop+0x15/0x70 [ 171.748614][ T2726] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 171.754529][ T2726] RIP: 0033:0x7fe63658e929 [ 171.758979][ T2726] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 171.778606][ T2726] RSP: 002b:00007fe637392038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 171.787038][ T2726] RAX: ffffffffffffffda RBX: 00007fe6367b6160 RCX: 00007fe63658e929 [ 171.795060][ T2726] RDX: 0000000004000054 RSI: 0000200000000480 RDI: 0000000000000005 [ 171.803051][ T2726] RBP: 00007fe637392090 R08: 0000000000000000 R09: 0000000000000000 [ 171.811041][ T2726] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 171.819110][ T2726] R13: 0000000000000000 R14: 00007fe6367b6160 R15: 00007fff758d13e8 [ 171.827113][ T2726] [ 171.939912][ T2729] loop3: detected capacity change from 0 to 1024 [ 171.946828][ T2729] EXT4-fs: Ignoring removed orlov option [ 171.952557][ T2729] EXT4-fs: Ignoring removed nomblk_io_submit option [ 171.992443][ T2729] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 172.540986][ T285] EXT4-fs error: 67 callbacks suppressed [ 172.541007][ T285] EXT4-fs error (device loop4): ext4_empty_dir:3145: inode #12: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 172.697280][ T2737] incfs: Can't find or create .index dir in ./file0 [ 172.703901][ T285] EXT4-fs warning: 27 callbacks suppressed [ 172.703919][ T285] EXT4-fs warning (device loop4): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 172.710709][ T2737] incfs: mount failed -5 [ 172.722259][ T285] EXT4-fs error (device loop4): ext4_readdir:263: inode #12: block 32: comm syz-executor: path /119/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 172.753079][ T284] EXT4-fs (loop3): unmounting filesystem. [ 172.785342][ T2739] loop2: detected capacity change from 0 to 1024 [ 172.810117][ T2739] EXT4-fs: Ignoring removed i_version option [ 172.843099][ T2739] EXT4-fs (loop2): Test dummy encryption mode enabled [ 172.872567][ T285] EXT4-fs error (device loop4): ext4_empty_dir:3145: inode #12: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 172.896741][ T2747] loop3: detected capacity change from 0 to 1024 [ 172.903834][ T2739] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 172.907398][ T2747] EXT4-fs: Ignoring removed nobh option [ 172.919305][ T2747] EXT4-fs: Ignoring removed bh option [ 172.925408][ T285] EXT4-fs warning (device loop4): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 172.938159][ T285] EXT4-fs error (device loop4): ext4_readdir:263: inode #12: block 32: comm syz-executor: path /119/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 172.960189][ T2747] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 172.999181][ T285] EXT4-fs error (device loop4): ext4_empty_dir:3145: inode #12: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 173.029290][ T285] EXT4-fs warning (device loop4): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 173.043473][ T2747] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 173.068530][ T285] EXT4-fs error (device loop4): ext4_readdir:263: inode #12: block 32: comm syz-executor: path /119/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 173.123094][ T285] EXT4-fs error (device loop4): ext4_empty_dir:3145: inode #12: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 173.175727][ T285] EXT4-fs warning (device loop4): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 173.188015][ T286] EXT4-fs (loop2): unmounting filesystem. [ 173.204684][ T285] EXT4-fs error (device loop4): ext4_readdir:263: inode #12: block 32: comm syz-executor: path /119/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 173.298461][ T40] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 174.003681][ T2754] overlayfs: conflicting lowerdir path [ 174.049939][ T2759] FAULT_INJECTION: forcing a failure. [ 174.049939][ T2759] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 174.063409][ T2759] CPU: 0 PID: 2759 Comm: syz.2.615 Not tainted 6.1.138-syzkaller-00009-g6246d345f550 #0 [ 174.073167][ T2759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 174.083248][ T2759] Call Trace: [ 174.086537][ T2759] [ 174.089484][ T2759] __dump_stack+0x21/0x24 [ 174.093840][ T2759] dump_stack_lvl+0xee/0x150 [ 174.098455][ T2759] ? __cfi_dump_stack_lvl+0x8/0x8 [ 174.103507][ T2759] ? avc_has_perm+0x158/0x240 [ 174.108207][ T2759] dump_stack+0x15/0x24 [ 174.112391][ T2759] should_fail_ex+0x3d4/0x520 [ 174.117088][ T2759] should_fail+0xb/0x10 [ 174.121257][ T2759] should_fail_usercopy+0x1a/0x20 [ 174.126298][ T2759] _copy_from_user+0x1e/0xc0 [ 174.130899][ T2759] do_fcntl+0x513/0x1040 [ 174.135176][ T2759] ? match_file+0x130/0x130 [ 174.139689][ T2759] ? kill_fasync+0x210/0x210 [ 174.144302][ T2759] ? __fget_files+0x2d5/0x330 [ 174.149002][ T2759] ? security_file_fcntl+0x95/0xc0 [ 174.154126][ T2759] __se_sys_fcntl+0xdf/0x1b0 [ 174.158741][ T2759] __x64_sys_fcntl+0x7b/0x90 [ 174.163355][ T2759] x64_sys_call+0x1a9/0x9a0 [ 174.167874][ T2759] do_syscall_64+0x4c/0xa0 [ 174.172315][ T2759] ? clear_bhb_loop+0x15/0x70 [ 174.177004][ T2759] ? clear_bhb_loop+0x15/0x70 [ 174.181694][ T2759] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 174.187612][ T2759] RIP: 0033:0x7f67f618e929 [ 174.192066][ T2759] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 174.211698][ T2759] RSP: 002b:00007f67f70a4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 174.220143][ T2759] RAX: ffffffffffffffda RBX: 00007f67f63b6160 RCX: 00007f67f618e929 [ 174.228137][ T2759] RDX: 0000200000000580 RSI: 0000000000000007 RDI: 000000000000000a [ 174.236138][ T2759] RBP: 00007f67f70a4090 R08: 0000000000000000 R09: 0000000000000000 [ 174.244133][ T2759] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 174.252125][ T2759] R13: 0000000000000000 R14: 00007f67f63b6160 R15: 00007ffc51a96078 [ 174.260130][ T2759] [ 174.528946][ T284] EXT4-fs (loop3): unmounting filesystem. [ 174.547752][ T285] EXT4-fs error (device loop4): ext4_empty_dir:3145: inode #12: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 174.567274][ T40] usb 2-1: Using ep0 maxpacket: 32 [ 174.588824][ T285] EXT4-fs warning (device loop4): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 174.600822][ T40] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 174.623485][ T40] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 174.626013][ T285] EXT4-fs error (device loop4): ext4_readdir:263: inode #12: block 32: comm syz-executor: path /119/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 174.633448][ T40] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 174.684875][ T40] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.729687][ T40] usb 2-1: config 0 descriptor?? [ 174.756414][ T40] hub 2-1:0.0: USB hub found [ 174.761192][ T285] EXT4-fs warning (device loop4): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 174.859464][ T285] EXT4-fs warning (device loop4): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 174.938697][ T40] hub 2-1:0.0: config failed, can't read hub descriptor (err -90) [ 174.969380][ T285] EXT4-fs warning (device loop4): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 175.024738][ T285] EXT4-fs warning (device loop4): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 175.098761][ T285] EXT4-fs warning (device loop4): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 175.134913][ T40] usbhid 2-1:0.0: can't add hid device: -71 [ 175.142625][ T40] usbhid: probe of 2-1:0.0 failed with error -71 [ 175.181977][ T40] usb 2-1: USB disconnect, device number 11 [ 175.331958][ T2770] loop3: detected capacity change from 0 to 40427 [ 175.364615][ T2770] F2FS-fs (loop3): Image doesn't support compression [ 175.394383][ T2770] F2FS-fs (loop3): Image doesn't support compression [ 175.444460][ T2770] F2FS-fs (loop3): invalid crc value [ 175.473925][ T2770] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 175.673618][ T2770] F2FS-fs (loop3): checkpoint=disable on readonly fs [ 175.812503][ T2792] loop1: detected capacity change from 0 to 1024 [ 175.857175][ T2792] EXT4-fs: Ignoring removed i_version option [ 175.882897][ T2792] EXT4-fs (loop1): Test dummy encryption mode enabled [ 175.902970][ T2792] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 175.907451][ T2796] incfs: Can't find or create .index dir in ./file0 [ 175.941040][ T2796] incfs: mount failed -5 [ 175.975953][ T2799] loop3: detected capacity change from 0 to 1024 [ 175.993070][ T2799] EXT4-fs: Ignoring removed i_version option [ 176.016744][ T2792] device bridge_slave_1 left promiscuous mode [ 176.039170][ T2799] EXT4-fs (loop3): Test dummy encryption mode enabled [ 176.070745][ T2792] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.087887][ T2792] device bridge_slave_0 left promiscuous mode [ 176.097985][ T2799] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 176.114544][ T2792] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.288520][ T2820] loop2: detected capacity change from 0 to 512 [ 176.296777][ T2820] EXT4-fs: dax option not supported [ 177.212815][ T285] EXT4-fs error: 60 callbacks suppressed [ 177.212853][ T285] EXT4-fs error (device loop4): ext4_empty_dir:3145: inode #12: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 177.240994][ T285] EXT4-fs error (device loop4): ext4_readdir:263: inode #12: block 32: comm syz-executor: path /119/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 177.362785][ T285] EXT4-fs error (device loop4): ext4_empty_dir:3145: inode #12: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 177.383222][ T285] EXT4-fs warning: 26 callbacks suppressed [ 177.383249][ T285] EXT4-fs warning (device loop4): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 177.403702][ T285] EXT4-fs error (device loop4): ext4_readdir:263: inode #12: block 32: comm syz-executor: path /119/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 177.520877][ T285] EXT4-fs error (device loop4): ext4_empty_dir:3145: inode #12: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 177.565790][ T318] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 177.577390][ T285] EXT4-fs warning (device loop4): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 177.589269][ T285] EXT4-fs error (device loop4): ext4_readdir:263: inode #12: block 32: comm syz-executor: path /119/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 177.597792][ T284] EXT4-fs (loop3): unmounting filesystem. [ 177.650055][ T285] EXT4-fs error (device loop4): ext4_empty_dir:3145: inode #12: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 177.760587][ T285] EXT4-fs warning (device loop4): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 177.774681][ T287] EXT4-fs (loop1): unmounting filesystem. [ 177.783933][ T285] EXT4-fs error (device loop4): ext4_readdir:263: inode #12: block 32: comm syz-executor: path /119/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 177.834277][ T285] EXT4-fs error (device loop4): ext4_empty_dir:3145: inode #12: block 32: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 177.864490][ T285] EXT4-fs warning (device loop4): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 177.876564][ T2838] FAULT_INJECTION: forcing a failure. [ 177.876564][ T2838] name failslab, interval 1, probability 0, space 0, times 0 [ 177.877127][ T285] EXT4-fs error (device loop4): ext4_readdir:263: inode #12: block 32: comm syz-executor: path /119/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 177.910234][ T2838] CPU: 0 PID: 2838 Comm: syz.0.643 Not tainted 6.1.138-syzkaller-00009-g6246d345f550 #0 [ 177.919991][ T2838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 177.930061][ T2838] Call Trace: [ 177.933349][ T2838] [ 177.936287][ T2838] __dump_stack+0x21/0x24 [ 177.940637][ T2838] dump_stack_lvl+0xee/0x150 [ 177.945234][ T2838] ? __cfi_dump_stack_lvl+0x8/0x8 [ 177.950271][ T2838] ? __local_bh_enable_ip+0x58/0x80 [ 177.955470][ T2838] ? release_sock+0x169/0x1c0 [ 177.960150][ T2838] dump_stack+0x15/0x24 [ 177.964318][ T2838] should_fail_ex+0x3d4/0x520 [ 177.969000][ T2838] __should_failslab+0xac/0xf0 [ 177.973853][ T2838] should_failslab+0x9/0x20 [ 177.978376][ T2838] kmem_cache_alloc_node+0x42/0x340 [ 177.983578][ T2838] ? __alloc_skb+0xdf/0x7e0 [ 177.988088][ T2838] __alloc_skb+0xdf/0x7e0 [ 177.992421][ T2838] ? netlink_autobind+0x168/0x1a0 [ 177.997456][ T2838] netlink_sendmsg+0x626/0xbc0 [ 178.002253][ T2838] ? __cfi_netlink_sendmsg+0x10/0x10 [ 178.007571][ T2838] ? security_socket_sendmsg+0x93/0xb0 [ 178.013056][ T2838] ? __cfi_netlink_sendmsg+0x10/0x10 [ 178.018347][ T2838] ____sys_sendmsg+0x5a9/0x990 [ 178.023114][ T2838] ? __sys_sendmsg_sock+0x40/0x40 [ 178.028145][ T2838] ? import_iovec+0x7c/0xb0 [ 178.032657][ T2838] ___sys_sendmsg+0x21c/0x290 [ 178.037333][ T2838] ? __sys_sendmsg+0x270/0x270 [ 178.042121][ T2838] ? __kasan_check_write+0x14/0x20 [ 178.047241][ T2838] ? proc_fail_nth_write+0x17a/0x1f0 [ 178.052888][ T2838] ? vfs_write+0x9d6/0xca0 [ 178.057317][ T2838] ? __fdget+0x19c/0x220 [ 178.061567][ T2838] __x64_sys_sendmsg+0x1f0/0x2c0 [ 178.066504][ T2838] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 178.071982][ T2838] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 178.078054][ T2838] x64_sys_call+0x171/0x9a0 [ 178.082559][ T2838] do_syscall_64+0x4c/0xa0 [ 178.086985][ T2838] ? clear_bhb_loop+0x15/0x70 [ 178.091665][ T2838] ? clear_bhb_loop+0x15/0x70 [ 178.096349][ T2838] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 178.102255][ T2838] RIP: 0033:0x7fa27038e929 [ 178.106670][ T2838] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 178.126276][ T2838] RSP: 002b:00007fa27127a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 178.134691][ T2838] RAX: ffffffffffffffda RBX: 00007fa2705b5fa0 RCX: 00007fa27038e929 [ 178.142664][ T2838] RDX: 0000000000000000 RSI: 00002000000012c0 RDI: 0000000000000003 [ 178.150635][ T2838] RBP: 00007fa27127a090 R08: 0000000000000000 R09: 0000000000000000 [ 178.158606][ T2838] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 178.166585][ T2838] R13: 0000000000000000 R14: 00007fa2705b5fa0 R15: 00007ffee60891e8 [ 178.174583][ T2838] [ 178.614564][ T2844] incfs: Can't find or create .index dir in ./file0 [ 178.630099][ T2844] incfs: mount failed -5 [ 178.667194][ T285] EXT4-fs warning (device loop4): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 179.030698][ T285] EXT4-fs warning (device loop4): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 179.109646][ T285] EXT4-fs warning (device loop4): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 179.208236][ T285] EXT4-fs warning (device loop4): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 179.245635][ T2842] loop1: detected capacity change from 0 to 128 [ 179.305110][ T285] EXT4-fs warning (device loop4): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 179.357031][ T285] EXT4-fs warning (device loop4): ext4_empty_dir:3147: inode #12: comm syz-executor: directory missing '.' [ 179.793191][ T2872] loop2: detected capacity change from 0 to 512 [ 179.807212][ T2872] EXT4-fs: dax option not supported [ 180.807120][ T2874] FAULT_INJECTION: forcing a failure. [ 180.807120][ T2874] name failslab, interval 1, probability 0, space 0, times 0 [ 180.874674][ T2874] CPU: 0 PID: 2874 Comm: syz.2.642 Not tainted 6.1.138-syzkaller-00009-g6246d345f550 #0 [ 180.884457][ T2874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 180.894537][ T2874] Call Trace: [ 180.897861][ T2874] [ 180.900815][ T2874] __dump_stack+0x21/0x24 [ 180.905180][ T2874] dump_stack_lvl+0xee/0x150 [ 180.909803][ T2874] ? __cfi_dump_stack_lvl+0x8/0x8 [ 180.914857][ T2874] ? __cfi_avc_has_perm_noaudit+0x10/0x10 [ 180.920606][ T2874] dump_stack+0x15/0x24 [ 180.924783][ T2874] should_fail_ex+0x3d4/0x520 [ 180.929484][ T2874] __should_failslab+0xac/0xf0 [ 180.934271][ T2874] ? alloc_fs_context+0x64/0x7b0 [ 180.939235][ T2874] should_failslab+0x9/0x20 [ 180.943771][ T2874] __kmem_cache_alloc_node+0x3d/0x2c0 [ 180.949165][ T2874] ? alloc_fs_context+0x64/0x7b0 [ 180.954126][ T2874] kmalloc_trace+0x29/0xb0 [ 180.958578][ T2874] alloc_fs_context+0x64/0x7b0 [ 180.963371][ T2874] ? security_capable+0x99/0xc0 [ 180.968256][ T2874] fs_context_for_reconfigure+0x73/0x80 [ 180.973843][ T2874] path_mount+0xc9c/0x1010 [ 180.978310][ T2874] ? user_path_at_empty+0x161/0x1c0 [ 180.983608][ T2874] __se_sys_mount+0x318/0x380 [ 180.988335][ T2874] ? __x64_sys_mount+0xd0/0xd0 [ 180.993148][ T2874] ? __cfi_ksys_write+0x10/0x10 [ 180.998047][ T2874] ? __bpf_trace_sys_enter+0x62/0x70 [ 181.003371][ T2874] __x64_sys_mount+0xbf/0xd0 [ 181.008099][ T2874] x64_sys_call+0x65d/0x9a0 [ 181.012633][ T2874] do_syscall_64+0x4c/0xa0 [ 181.017086][ T2874] ? clear_bhb_loop+0x15/0x70 [ 181.021802][ T2874] ? clear_bhb_loop+0x15/0x70 [ 181.026530][ T2874] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 181.032484][ T2874] RIP: 0033:0x7f67f618e929 [ 181.036933][ T2874] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 181.056650][ T2874] RSP: 002b:00007f67f70e6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 181.065097][ T2874] RAX: ffffffffffffffda RBX: 00007f67f63b5fa0 RCX: 00007f67f618e929 [ 181.073101][ T2874] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000000 [ 181.081106][ T2874] RBP: 00007f67f70e6090 R08: 0000000000000000 R09: 0000000000000000 [ 181.089097][ T2874] R10: 0000000003ae4c21 R11: 0000000000000246 R12: 0000000000000001 [ 181.097094][ T2874] R13: 0000000000000000 R14: 00007f67f63b5fa0 R15: 00007ffc51a96078 [ 181.105087][ T2874] [ 181.174584][ T2876] loop1: detected capacity change from 0 to 1024 [ 181.192027][ T2876] EXT4-fs: Ignoring removed i_version option [ 181.230703][ T2876] EXT4-fs (loop1): Test dummy encryption mode enabled [ 181.243106][ T2876] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 181.444396][ T2891] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 181.721202][ T2885] loop2: detected capacity change from 0 to 256 [ 181.743525][ T28] audit: type=1400 audit(1750058519.204:287): avc: denied { accept } for pid=2884 comm="syz.2.646" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 181.765888][ T287] EXT4-fs (loop1): unmounting filesystem. [ 181.814383][ T2894] loop1: detected capacity change from 0 to 1024 [ 181.834875][ T2894] EXT4-fs: Ignoring removed nobh option [ 181.848168][ T2894] EXT4-fs: Ignoring removed bh option [ 181.853971][ T2894] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 181.885615][ T2894] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 181.897122][ T28] audit: type=1400 audit(1750058519.365:288): avc: denied { mounton } for pid=2897 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 181.915858][ T285] EXT4-fs (loop4): unmounting filesystem. [ 182.042919][ T2897] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.050923][ T2897] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.064206][ T2897] device bridge_slave_0 entered promiscuous mode [ 182.074736][ T2897] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.082188][ T2897] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.092489][ T2897] device bridge_slave_1 entered promiscuous mode [ 182.136439][ T2907] overlayfs: conflicting lowerdir path [ 182.687945][ T287] EXT4-fs (loop1): unmounting filesystem. [ 183.376773][ T304] device bridge_slave_1 left promiscuous mode [ 183.384352][ T304] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.404550][ T304] device bridge_slave_0 left promiscuous mode [ 183.412040][ T304] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.433180][ T304] device veth1_macvtap left promiscuous mode [ 183.439349][ T304] device veth0_vlan left promiscuous mode [ 183.888802][ T2897] device veth0_vlan entered promiscuous mode [ 183.903016][ T2897] device veth1_macvtap entered promiscuous mode [ 183.911745][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 183.921597][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 183.949373][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 183.957254][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 183.965058][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 183.973589][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 183.981394][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 183.989637][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 184.000575][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 184.009244][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.016308][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 184.026438][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 184.035170][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 184.043705][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.050975][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 184.053648][ T2922] FAULT_INJECTION: forcing a failure. [ 184.053648][ T2922] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 184.058787][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 184.072021][ T2922] CPU: 0 PID: 2922 Comm: syz.0.657 Not tainted 6.1.138-syzkaller-00009-g6246d345f550 #0 [ 184.079829][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 184.089056][ T2922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 184.089071][ T2922] Call Trace: [ 184.089077][ T2922] [ 184.089086][ T2922] __dump_stack+0x21/0x24 [ 184.089118][ T2922] dump_stack_lvl+0xee/0x150 [ 184.089143][ T2922] ? __cfi_dump_stack_lvl+0x8/0x8 [ 184.089170][ T2922] ? _parse_integer+0x2a/0x40 [ 184.089197][ T2922] dump_stack+0x15/0x24 [ 184.089221][ T2922] should_fail_ex+0x3d4/0x520 [ 184.089245][ T2922] should_fail+0xb/0x10 [ 184.089265][ T2922] should_fail_usercopy+0x1a/0x20 [ 184.097816][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 184.107130][ T2922] _copy_from_user+0x1e/0xc0 [ 184.107160][ T2922] ___sys_sendmsg+0x155/0x290 [ 184.107180][ T2922] ? __sys_sendmsg+0x270/0x270 [ 184.110900][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 184.113402][ T2922] ? __kasan_check_write+0x14/0x20 [ 184.184620][ T2922] ? proc_fail_nth_write+0x17a/0x1f0 [ 184.184662][ T2922] ? vfs_write+0x9d6/0xca0 [ 184.194409][ T2922] ? __fdget+0x19c/0x220 [ 184.198694][ T2922] __x64_sys_sendmsg+0x1f0/0x2c0 [ 184.198721][ T2922] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 184.198745][ T2922] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 184.215182][ T2922] x64_sys_call+0x171/0x9a0 [ 184.219717][ T2922] do_syscall_64+0x4c/0xa0 [ 184.219751][ T2922] ? clear_bhb_loop+0x15/0x70 [ 184.228856][ T2922] ? clear_bhb_loop+0x15/0x70 [ 184.228885][ T2922] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 184.239478][ T2922] RIP: 0033:0x7fa27038e929 [ 184.239502][ T2922] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 184.263547][ T2922] RSP: 002b:00007fa27127a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 184.272001][ T2922] RAX: ffffffffffffffda RBX: 00007fa2705b5fa0 RCX: 00007fa27038e929 [ 184.272023][ T2922] RDX: 0000000020000004 RSI: 0000200000002040 RDI: 0000000000000003 [ 184.272037][ T2922] RBP: 00007fa27127a090 R08: 0000000000000000 R09: 0000000000000000 [ 184.295984][ T2922] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 184.296006][ T2922] R13: 0000000000000000 R14: 00007fa2705b5fa0 R15: 00007ffee60891e8 [ 184.296025][ T2922] [ 184.547914][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 184.555912][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 184.564445][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 184.573154][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 184.581739][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 184.692658][ T28] audit: type=1400 audit(1750058522.358:289): avc: denied { mounton } for pid=2897 comm="syz-executor" path="/root/syzkaller.71Z415/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 184.749868][ T2929] loop5: detected capacity change from 0 to 128 [ 184.757004][ T2929] EXT4-fs: Ignoring removed nobh option [ 184.779020][ T2929] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 184.790196][ T2929] ext4 filesystem being mounted at /0/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 184.845220][ T2937] netlink: 'syz.3.661': attribute type 3 has an invalid length. [ 184.853266][ T2937] netlink: 8 bytes leftover after parsing attributes in process `syz.3.661'. [ 185.103262][ T351] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 185.204554][ T28] audit: type=1400 audit(1750058522.916:290): avc: denied { getopt } for pid=2946 comm="syz.3.664" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 185.306338][ T351] usb 2-1: New USB device found, idVendor=1c9e, idProduct=9801, bcdDevice=25.d8 [ 185.321854][ T351] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.333024][ T351] usb 2-1: Product: syz [ 185.337257][ T351] usb 2-1: Manufacturer: syz [ 185.342009][ T351] usb 2-1: SerialNumber: syz [ 185.350185][ T351] usb 2-1: config 0 descriptor?? [ 185.357853][ T2952] loop2: detected capacity change from 0 to 1024 [ 185.375488][ T351] rndis_host: probe of 2-1:0.0 failed with error -22 [ 185.375712][ T2952] EXT4-fs (loop2): unsupported inode size: 4096 [ 185.392766][ T2952] EXT4-fs (loop2): blocksize: 1024 [ 185.503721][ T2957] loop2: detected capacity change from 0 to 1024 [ 185.510928][ T2957] EXT4-fs: Ignoring removed nobh option [ 185.516850][ T2957] EXT4-fs: Ignoring removed bh option [ 185.522920][ T2957] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 185.586605][ T2897] EXT4-fs (loop5): unmounting filesystem. [ 185.593622][ T2957] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 185.602038][ T2445] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 186.125043][ T2961] overlayfs: conflicting lowerdir path [ 186.180608][ T28] audit: type=1400 audit(1750058523.888:291): avc: denied { write } for pid=2930 comm="syz.1.659" name="001" dev="devtmpfs" ino=179 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 186.225807][ T2445] usb 4-1: Using ep0 maxpacket: 16 [ 186.233988][ T2445] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 186.244938][ T2445] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 186.264556][ T2979] netlink: 36 bytes leftover after parsing attributes in process `syz.0.670'. [ 186.265690][ T2445] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 186.347442][ T2445] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.349239][ T286] EXT4-fs (loop2): unmounting filesystem. [ 186.358686][ T2445] usb 4-1: Product: syz [ 186.365659][ T2445] usb 4-1: Manufacturer: syz [ 186.371498][ T28] audit: type=1400 audit(1750058524.167:292): avc: denied { read } for pid=2978 comm="syz.0.670" name="ppp" dev="devtmpfs" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 186.375113][ T2445] usb 4-1: SerialNumber: syz [ 187.272548][ T2445] usb 4-1: 0:2 : does not exist [ 187.330106][ T2445] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 187.344624][ T2445] usb 4-1: USB disconnect, device number 10 [ 187.530620][ T293] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 187.596127][ T2563] usb 2-1: USB disconnect, device number 12 [ 187.699937][ T293] usb 3-1: device descriptor read/64, error -71 [ 188.865079][ T3014] loop5: detected capacity change from 0 to 512 [ 188.876766][ T3014] EXT4-fs: dax option not supported [ 189.170319][ T3019] loop3: detected capacity change from 0 to 128 [ 189.178396][ T318] udevd[318]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 189.232393][ T3013] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 189.244264][ T293] usb 3-1: device descriptor read/64, error -71 [ 189.282299][ T3021] loop1: detected capacity change from 0 to 1024 [ 189.290662][ T3021] EXT4-fs: Ignoring removed nobh option [ 189.296661][ T3019] EXT4-fs (loop3): Test dummy encryption mode enabled [ 189.311810][ T3021] EXT4-fs: Ignoring removed bh option [ 189.345817][ T3021] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 189.369500][ T3019] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 189.378339][ T3019] ext4 filesystem being mounted at /128/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 189.415986][ T3021] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 189.495875][ T3019] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 189.602619][ T3031] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 189.894576][ T3033] loop5: detected capacity change from 0 to 1024 [ 189.901728][ T3033] EXT4-fs: Ignoring removed i_version option [ 189.908698][ T3033] EXT4-fs (loop5): Test dummy encryption mode enabled [ 189.918167][ T3033] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 189.973661][ T293] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 189.995519][ T3033] device bridge_slave_1 left promiscuous mode [ 190.015688][ T3033] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.030310][ T3033] device bridge_slave_0 left promiscuous mode [ 190.036536][ T3033] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.121849][ T293] usb 3-1: device descriptor read/64, error -71 [ 190.230138][ T3020] overlayfs: conflicting lowerdir path [ 190.235517][ T2897] EXT4-fs (loop5): unmounting filesystem. [ 190.282441][ T3045] loop5: detected capacity change from 0 to 1024 [ 190.304330][ T3045] EXT4-fs: Ignoring removed nobh option [ 190.327699][ T3045] EXT4-fs: Ignoring removed bh option [ 190.343468][ T3045] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 190.406112][ T3045] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 190.547563][ T284] EXT4-fs (loop3): unmounting filesystem. [ 190.660429][ T3051] overlayfs: conflicting lowerdir path [ 190.990737][ T287] EXT4-fs (loop1): unmounting filesystem. [ 191.101119][ T3061] loop3: detected capacity change from 0 to 8192 [ 191.120798][ T2897] EXT4-fs (loop5): unmounting filesystem. [ 191.224970][ T3066] FAULT_INJECTION: forcing a failure. [ 191.224970][ T3066] name failslab, interval 1, probability 0, space 0, times 0 [ 191.241822][ T3066] CPU: 0 PID: 3066 Comm: syz.2.690 Not tainted 6.1.138-syzkaller-00009-g6246d345f550 #0 [ 191.251598][ T3066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 191.261687][ T3066] Call Trace: [ 191.264993][ T3066] [ 191.267950][ T3066] __dump_stack+0x21/0x24 [ 191.272318][ T3066] dump_stack_lvl+0xee/0x150 [ 191.276943][ T3066] ? __cfi_dump_stack_lvl+0x8/0x8 [ 191.282001][ T3066] ? ____fput+0x15/0x20 [ 191.286198][ T3066] ? exit_to_user_mode_loop+0x9b/0xb0 [ 191.291608][ T3066] ? exit_to_user_mode_prepare+0x5a/0xa0 [ 191.297287][ T3066] ? syscall_exit_to_user_mode+0x1a/0x30 [ 191.302954][ T3066] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 191.309074][ T3066] dump_stack+0x15/0x24 [ 191.313277][ T3066] should_fail_ex+0x3d4/0x520 [ 191.317992][ T3066] __should_failslab+0xac/0xf0 [ 191.322785][ T3066] ? tracepoint_probe_unregister+0x1e6/0x8b0 [ 191.328834][ T3066] should_failslab+0x9/0x20 [ 191.329997][ T3067] loop1: detected capacity change from 0 to 40427 [ 191.333377][ T3066] __kmem_cache_alloc_node+0x3d/0x2c0 [ 191.345181][ T3066] ? __cfi_mutex_lock+0x10/0x10 [ 191.350077][ T3066] ? delete_node+0x2f4/0xa60 [ 191.354702][ T3066] ? tracepoint_probe_unregister+0x1e6/0x8b0 [ 191.360895][ T3066] __kmalloc+0xa1/0x1e0 [ 191.365090][ T3066] ? __cfi___bpf_trace_sched_switch+0x10/0x10 [ 191.371199][ T3066] tracepoint_probe_unregister+0x1e6/0x8b0 [ 191.377045][ T3066] bpf_probe_unregister+0x61/0x70 [ 191.382119][ T3066] bpf_raw_tp_link_release+0x63/0x90 [ 191.387436][ T3066] bpf_link_free+0x13a/0x390 [ 191.392070][ T3066] ? bpf_link_put_deferred+0x20/0x20 [ 191.397403][ T3066] ? security_file_free+0xd8/0xf0 [ 191.402470][ T3066] bpf_link_release+0x15f/0x170 [ 191.407363][ T3066] ? __cfi_bpf_link_release+0x10/0x10 [ 191.412760][ T3066] __fput+0x1fc/0x8f0 [ 191.416753][ T3066] ? _raw_spin_unlock+0x4c/0x70 [ 191.421614][ T3066] ____fput+0x15/0x20 [ 191.425598][ T3066] task_work_run+0x1db/0x240 [ 191.430194][ T3066] ? __cfi_task_work_run+0x10/0x10 [ 191.435313][ T3066] ? __cfi___close_range+0x10/0x10 [ 191.440441][ T3066] exit_to_user_mode_loop+0x9b/0xb0 [ 191.445649][ T3066] exit_to_user_mode_prepare+0x5a/0xa0 [ 191.451111][ T3066] syscall_exit_to_user_mode+0x1a/0x30 [ 191.456584][ T3066] do_syscall_64+0x58/0xa0 [ 191.461015][ T3066] ? clear_bhb_loop+0x15/0x70 [ 191.465696][ T3066] ? clear_bhb_loop+0x15/0x70 [ 191.470395][ T3066] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 191.476302][ T3066] RIP: 0033:0x7f67f618e929 [ 191.480722][ T3066] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 191.500419][ T3066] RSP: 002b:00007f67f70c5038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 191.508849][ T3066] RAX: 0000000000000000 RBX: 00007f67f63b6080 RCX: 00007f67f618e929 [ 191.516822][ T3066] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000000 [ 191.524796][ T3066] RBP: 00007f67f70c5090 R08: 0000000000000000 R09: 0000000000000000 [ 191.532771][ T3066] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 191.540748][ T3066] R13: 0000000000000000 R14: 00007f67f63b6080 R15: 00007ffc51a96078 [ 191.548737][ T3066] [ 191.552164][ T3067] F2FS-fs (loop1): Image doesn't support compression [ 191.559127][ T3067] F2FS-fs (loop1): Image doesn't support compression [ 191.567176][ T3067] F2FS-fs (loop1): invalid crc value [ 191.573600][ T3067] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 191.589825][ T3066] CFI failure at __traceiter_sched_switch+0x9b/0xd0 (target: tp_stub_func+0x0/0x10; expected type: 0xee1f7a69) [ 191.601733][ T3066] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 191.607833][ T3066] CPU: 0 PID: 3066 Comm: syz.2.690 Not tainted 6.1.138-syzkaller-00009-g6246d345f550 #0 [ 191.617571][ T3066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 191.627627][ T3066] RIP: 0010:__traceiter_sched_switch+0x9b/0xd0 [ 191.633793][ T3066] Code: 80 3c 30 00 74 05 e8 24 55 69 00 49 8b 7d 08 44 89 e6 48 8b 55 c8 48 8b 4d c0 44 8b 45 d4 41 ba 97 85 e0 11 45 03 57 fc 74 02 <0f> 0b 41 ff d7 48 83 c3 18 48 89 d8 48 c1 e8 03 42 80 3c 30 00 74 [ 191.653552][ T3066] RSP: 0018:ffffc900011afc10 EFLAGS: 00010096 [ 191.659645][ T3066] RAX: 1ffff110228e0e49 RBX: ffff888114707240 RCX: ffff8881136e1440 [ 191.667647][ T3066] RDX: ffff888118c70000 RSI: 0000000000000001 RDI: ffffc900011b7000 [ 191.675618][ T3066] RBP: ffffc900011afc50 R08: 0000000000000000 R09: fffff52000235f2d [ 191.683676][ T3066] R10: 00000000b720eca3 R11: ffffffff813418f0 R12: 0000000000000001 [ 191.691645][ T3066] R13: ffff888114707240 R14: dffffc0000000000 R15: ffffffff81710d60 [ 191.699614][ T3066] FS: 00007f67f70c56c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 191.708718][ T3066] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 191.715299][ T3066] CR2: 00007f67f61edbf8 CR3: 000000013807b000 CR4: 00000000003526b0 [ 191.723268][ T3066] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 191.731234][ T3066] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 191.739216][ T3066] Call Trace: [ 191.742661][ T3066] [ 191.745592][ T3066] __schedule+0x1263/0x14e0 [ 191.750103][ T3066] ? release_firmware_map_entry+0x194/0x194 [ 191.756004][ T3066] ? probe_sched_wakeup+0x71/0x90 [ 191.761055][ T3066] ? preempt_schedule+0xa7/0xb0 [ 191.765911][ T3066] preempt_schedule_common+0x9b/0xf0 [ 191.771195][ T3066] preempt_schedule+0xa7/0xb0 [ 191.775871][ T3066] ? __cfi_preempt_schedule+0x10/0x10 [ 191.781244][ T3066] ? try_to_wake_up+0x613/0x1220 [ 191.786183][ T3066] preempt_schedule_thunk+0x16/0x18 [ 191.791382][ T3066] _raw_spin_unlock_irq+0x60/0x70 [ 191.796413][ T3066] do_group_exit+0x200/0x2d0 [ 191.801003][ T3066] __x64_sys_exit_group+0x3f/0x40 [ 191.806029][ T3066] x64_sys_call+0x7b4/0x9a0 [ 191.810528][ T3066] do_syscall_64+0x4c/0xa0 [ 191.814941][ T3066] ? clear_bhb_loop+0x15/0x70 [ 191.819640][ T3066] ? clear_bhb_loop+0x15/0x70 [ 191.824331][ T3066] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 191.830226][ T3066] RIP: 0033:0x7f67f618e929 [ 191.834641][ T3066] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 191.854241][ T3066] RSP: 002b:00007f67f70c4f48 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 191.862656][ T3066] RAX: ffffffffffffffda RBX: 00007f67f61edbf8 RCX: 00007f67f618e929 [ 191.870625][ T3066] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 191.878586][ T3066] RBP: 0000000000000009 R08: 00007f67f70c2ce7 R09: 0000000000000001 [ 191.886554][ T3066] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 191.894519][ T3066] R13: 0000000000000000 R14: 00007f67f63b6080 R15: 00007ffc51a96078 [ 191.902498][ T3066] [ 191.905529][ T3066] Modules linked in: [ 191.909481][ T3066] ---[ end trace 0000000000000000 ]--- [ 191.914932][ T3066] RIP: 0010:__traceiter_sched_switch+0x9b/0xd0 [ 191.921083][ T3066] Code: 80 3c 30 00 74 05 e8 24 55 69 00 49 8b 7d 08 44 89 e6 48 8b 55 c8 48 8b 4d c0 44 8b 45 d4 41 ba 97 85 e0 11 45 03 57 fc 74 02 <0f> 0b 41 ff d7 48 83 c3 18 48 89 d8 48 c1 e8 03 42 80 3c 30 00 74 [ 191.940682][ T3066] RSP: 0018:ffffc900011afc10 EFLAGS: 00010096 [ 191.946749][ T3066] RAX: 1ffff110228e0e49 RBX: ffff888114707240 RCX: ffff8881136e1440 [ 191.954716][ T3066] RDX: ffff888118c70000 RSI: 0000000000000001 RDI: ffffc900011b7000 [ 191.962680][ T3066] RBP: ffffc900011afc50 R08: 0000000000000000 R09: fffff52000235f2d [ 191.970644][ T3066] R10: 00000000b720eca3 R11: ffffffff813418f0 R12: 0000000000000001 [ 191.978612][ T3066] R13: ffff888114707240 R14: dffffc0000000000 R15: ffffffff81710d60 [ 191.986577][ T3066] FS: 00007f67f70c56c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 191.995504][ T3066] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 192.002102][ T3066] CR2: 00007f67f61edbf8 CR3: 000000013807b000 CR4: 00000000003526b0 [ 192.010069][ T3066] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 192.018033][ T3066] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 192.025995][ T3066] Kernel panic - not syncing: Fatal exception [ 193.179877][ T3066] Shutting down cpus with NMI [ 193.184868][ T3066] Kernel Offset: disabled [ 193.189197][ T3066] Rebooting in 86400 seconds..